News

IT governance

June 10, 2025 10 Jun'25
Third-party security weaknesses threaten Europe’s big banks

Security breaches via third parties increased by 25% at Europe’s largest finance firms
June 06, 2025 06 Jun'25
UK ICO publishes AI and biometrics strategy

The UK data regulator has outlined how it will approach the regulation of artificial intelligence and biometric technologies, which will focus in particular on automated decision-making systems and police facial recognition
June 05, 2025 05 Jun'25
HMRC phishing breach wholly avoidable, but hard to stop

A breach at HMRC saw innocent taxpayers tricked into letting scammers impersonate them through simple phishing attacks leading to account takeover. Such attacks are avoidable, but hard to stop
June 05, 2025 05 Jun'25
UK’s error-prone eVisa system is ‘anxiety-inducing’

People experiencing technical errors with the Home Office’s electronic visa system explain the psychological toll of not being able to reliably prove their immigration status in the face of a hostile and unresponsive bureaucracy

June 04, 2025 04 Jun'25
Put ROCs before SOCs, Qualys tells public sector

Putting risk operations before security operations may help government agencies and other public sector bodies better manage the myriad threats they face, and make better decisions for the security of all
June 04, 2025 04 Jun'25
NCSC sets out how to build cyber safe cultures

The UK’s National Cyber Security Centre has published guidance for security teams and leaders on how to foster accessible and appropriate cyber security cultures in their organisations
June 04, 2025 04 Jun'25
SXSW London: Risk of AI removing choice

The modern era, where AI speeds up day-to-day chores, is undermining creativity and the ability to make choices
June 04, 2025 04 Jun'25
Microsoft outlines three-pronged European cyber strategy

Microsoft chair Brad Smith outlines an expansive cyber programme targeting governments across Europe with enhanced threat intelligence and support
June 04, 2025 04 Jun'25
European Commission should rescind UK data adequacy

Civil society organisations have urged the European Commissioner to not renew the UK’s data adequacy, given the country’s growing divergence from European data protection standards
June 04, 2025 04 Jun'25
Open source adoption faces reality checks

Industry leaders lauded the power of open source to drive innovation but warned that its adoption requires significant effort, due diligence and a clear understanding of inherent complexities and licensing challenges

June 03, 2025 03 Jun'25
SailPoint charts course for AI-driven identity security

SailPoint is driving the use of agentic AI in identity security with its Harbor Pilot offering while preparing to help enterprises govern and secure AI agents
June 02, 2025 02 Jun'25
US cyber agency CISA faces stiff budget cuts

CISA is one of several US agencies facing drastic budget cuts under the Trump administration
June 02, 2025 02 Jun'25
Cyber and digital get over £1bn to enhance UK’s national security

The government has set out plans to spend over a billion pounds on digital and cyber warfare capabilities to enhance the UK’s ability to defend itself and fight offensive wars
June 02, 2025 02 Jun'25
AI should be used to improve boardroom efficiency

Artificial intelligence is not just for business efficiency. Company boards should deploy the technology to support their own processes
May 28, 2025 28 May'25
UK biometric surveillance exists in ‘legal grey area’

The rapid proliferation of ‘biometric mass surveillance technologies’ throughout the UK’s public and private sectors is taking place without legal certainty or adequate safeguards for the public
May 28, 2025 28 May'25
ANZ firms spending more on data management

Nearly nine in 10 organisations in Australia and New Zealand increased their overall spend on data management last year to cope with higher data volumes and growing use of artificial intelligence, study finds
May 27, 2025 27 May'25
US makes fresh indictments over DanaBot, Qakbot malwares

US charges the operators of two malwares, DanaBot and Qakbot, whose actions led to millions of dollars worth of cyber theft and fraud
May 27, 2025 27 May'25
Armed forces charity steps in to address cyber mental health crisis

CIISec and military charity PTSD Resolution hope to address a gathering mental health crisis among frontline cyber professionals
May 23, 2025 23 May'25
Essex Police discloses ‘incoherent’ facial recognition assessment

An equality impact assessment of Essex Police live facial recognition deployments is plagued by inconsistencies and poor methodology, undermining the force’s claim that its use of the technology will not be discriminatory
May 22, 2025 22 May'25
DSIT makes £5.5m of funding available to new projects

The government is focusing on easing the regulatory burden that can often hamper the introduction of innovative technologies in the public sector
May 22, 2025 22 May'25
How to tackle your infrastructure technical debt

Gartner analysts explain how infrastructure and operations teams can address the accumulation of outdated systems and make a compelling business case for upgrades
May 21, 2025 21 May'25
M&S cyber attack disruption likely to last until July

M&S says it has moved into recovery mode after a ransomware attack, but expects some disruption to persist throughout the coming weeks
May 21, 2025 21 May'25
NCSC: Russia’s Fancy Bear targeting logistics, tech organisations

The NCSC and its partner agencies have blown the whistle on an extensive campaign of malicious cyber attacks orchestrated by the Russian state Fancy Bear operation
May 21, 2025 21 May'25
Interview: Rom Kosla, CIO, Hewlett Packard Enterprise

The IT chief of one of the world’s biggest tech companies still has to get the technology right – and he’s building on cloud, application consolidation and data to bring new capabilities in AI to his users
May 21, 2025 21 May'25
Capital One pushes out data tokenisation

Organisations using the Databricks and Snowflake platforms will be able to use Capital One’s Databolt tool to secure their data
May 21, 2025 21 May'25
Strong fintech security posture at risk via third-party weak links

Despite having a strong security posture, the financial technology sector could be open to attack via third parties
May 21, 2025 21 May'25
Ransomware attacks dropped by a third last month

Reported ransomware attacks eased off during April following a dramatic spike in the first quarter of 2025
May 20, 2025 20 May'25
Retail cyber attacks hit food distributor Peter Green Chilled

Cold chain services provider Peter Green Chilled, which supplies the likes of Aldi, Sainsbury’s and Tesco, has been forced to halt operations after succumbing to a ransomware attack
May 20, 2025 20 May'25
Rio Tinto overhauls IT operations with platform model

Rio Tinto’s head of technology platforms outlines the mining giant’s move to an IT platform model designed to escape a reactive cycle of critical incidents and improve service quality for internal and external customers
May 19, 2025 19 May'25
Chinese cyber spooks lure laid-off US government workers

A Washington DC-based think tank has published evidence that Chinese intelligence services have been running a network of digital ‘front’ companies targeting laid-off government workers as recruits
May 19, 2025 19 May'25
Legal Aid Agency breach may encompass millions of people

Legal Aid Agency says the data of anybody who applied for legal aid over the past 15 years has been compromised in a cyber attack
May 16, 2025 16 May'25
The Security Interviews: David Faugno, 1Password

David Faugno, co-CEO of 1Password, discusses how his background led to him joining the company and why maintaining profitability is a key factor in overcoming the challenges of switching markets.
May 15, 2025 15 May'25
NHS asks suppliers to sign up to cyber covenant

NHS digital and security leaders call on their suppliers to commit to a cyber security charter as the health service works to improve its resilience in the face of growing threat levels
May 14, 2025 14 May'25
Scattered Spider retail attacks spreading to US, says Google

Google’s threat intel analysts are aware of a number of in-progress cyber attacks against US retailers linked to the same Scattered Spider gang that supposedly attacked M&S and Co-op in the UK
May 14, 2025 14 May'25
Enisa launches European vulnerability database

The EU’s new vulnerability database is designed to offer a broader, more transparent source of information on new cyber vulnerabilities
May 14, 2025 14 May'25
Why we must reform the Computer Misuse Act: A cyber pro speaks out

Britain’s outdated hacking laws are leaving the UK’s cyber practitioners hamstrung and afraid. Security professional Simon Whittaker reveals how he nearly ran afoul of the Computer Misuse Act, and why he’s speaking out for reform
May 14, 2025 14 May'25
UK government outlines plan to surveil migrants with eVisa data

Electronic visa data and biometric technologies will be used by the UK’s immigration enforcement authorities to surveil migrants living in the country and to ‘tighten control of the border’, attracting strong criticism from migrant support groups
May 14, 2025 14 May'25
BBVA creates ChatGPT Store and expands use of the GenAI tool

Data reveals that bank employees are saving an average of almost three hours every week by using ChatGPT
May 13, 2025 13 May'25
May Patch Tuesday brings five exploited zero-days to fix

Microsoft fixes five exploited, and two publicly disclosed, zero-days in the fifth Patch Tuesday update of 2025
May 13, 2025 13 May'25
M&S forces customer password resets after data breach

M&S is instructing all of its customers to change their account passwords after a significant amount of data was stolen in a DragonForce ransomware attack
May 13, 2025 13 May'25
NHS trust cloud plans hampered by Trump tariff uncertainty

Essex NHS wants to move some capacity to the Nutanix cloud, but can’t be certain prices will hold between product selection and when procurement plans gain approval
May 08, 2025 08 May'25
Government will miss cyber resiliency targets, MPs warn

A Public Accounts Committee report on government cyber resilience finds that the Cabinet Office has been working hard to improve, but is likely to miss targets and needs a fundamentally different approach
May 08, 2025 08 May'25
Preparing for post-quantum computing will be more difficult than the millennium bug

The job of getting the UK ready for post-quantum computing will be at least as difficult as the Y2K problem, says National Cyber Security Centre CTO Ollie Whitehouse
May 08, 2025 08 May'25
US tells CNI orgs to stop connecting OT kit to the web

US authorities have released guidance for owners of critical national infrastructure in the face of an undisclosed number of cyber incidents
May 08, 2025 08 May'25
UK Digital Services Tax survives US trade negotiations

The UK will retain its Digital Services Tax on tech giants in a landmark US trade agreement that paves the way for a future digital tech deal
May 07, 2025 07 May'25
Meta awarded $167m in court battle with spyware mercenaries

WhatsApp owner Meta is awarded millions of dollars in damages and compensation after its service was exploited by users of mercenary spyware developer NSO’s infamous Pegasus mobile malware
May 07, 2025 07 May'25
Chaos spreads at Co-op and M&S following DragonForce attacks

No end is yet in sight for UK retailers subjected to apparent ransomware attacks
May 07, 2025 07 May'25
Oxford Uni adds cyber resilience module to MBA programme

Oxford University’s Saïd Business School is working with cyber response specialist Sygnia to help future business leaders get on top of security
May 06, 2025 06 May'25
Data issues cost Australian businesses nearly A$500k annually

Research reveals Australian organisations are losing an average of nearly half a million dollars annually due to poor data integrity, hindering their ability to leverage AI and eroding their competitive edge
May 02, 2025 02 May'25
Retail cyber crime spree a ‘wake-up call’, says NCSC CEO

The National Cyber Security Centre confirms it is providing assistance to M&S, Co-op and Harrods as concerns grow among UK retailers