News

IT management

• September 26, 2023 26 Sep'23

  Cover-ups still the norm in the wake of a cyber incident

  Almost half of organisations that have experienced a cyber incident did not report it to the appropriate authorities, according to a report

• September 26, 2023 26 Sep'23

  HMRC names and shames non-compliant umbrella firms for running tax avoidance schemes

  The government tax collection agency is stepping up its efforts to prevent contractors falling victim to non-compliant umbrella firms with three new names added to its list of known tax avoidance schemes

• September 26, 2023 26 Sep'23

  Crest and IASME to deliver upcoming NCSC Cyber Exercise programme

  Crest and IASME have been tasked with assuring that security services providers signing up to a soon-to-launch NCSC Cyber Incident Exercising scheme are up to the job

• September 25, 2023 25 Sep'23

  Apple fixes three vulnerabilities found by spyware researchers

  Apple has patched three more vulnerabilities uncovered by spyware and surveillance researchers at The Citizen Lab

• September 22, 2023 22 Sep'23

  How ready does the world need to be for the quantum era?

  Great use cases may exist for quantum computing, but no one knows for sure how long they will need to wait for a production-ready machine

• September 22, 2023 22 Sep'23

  Annual Security Serious Awards nominations announced

  Annual Security Serious Awards will recognise the professionals and organisations doing the most to safeguard and advance cyber security, as well as those committed to diversity and mental health in the industry

• September 22, 2023 22 Sep'23

  CMA unblocks Microsoft/Activision deal without cloud gaming

  Microsoft’s Activision buy looks set to get the thumbs-up after a deal that stops the two companies from distributing cloud gaming to UK consumers

• September 22, 2023 22 Sep'23

  UK-US data bridge to open to traffic on 12 October

  Government forges ahead with the implementation of the UK-US data bridge, which will come into effect for real just under three weeks from now

• September 22, 2023 22 Sep'23

  Cyber experts set out plan to secure future US elections

  A group of experts are setting out to enhance election cyber security in the United States, and restore public faith in a process tainted by interference and misinformation in the past

• September 22, 2023 22 Sep'23

  Lords begin inquiry into large language models

  Lords will examine the risks and opportunities of large language models and look at how government can effectively manage them in the coming years

• September 21, 2023 21 Sep'23

  Cisco snaps up Splunk in $28bn application observability deal

  The acquisition builds out Cisco’s observability portfolio, with AI-based full-stack observability for hybrid cloud environments

• September 21, 2023 21 Sep'23

  ‘Top’ ransomware gangs favour smaller businesses

  Despite high-profile attacks on prominent organisations, the world’s most prolific ransomware operations tend to target smaller businesses

• September 21, 2023 21 Sep'23

  Poor digital experience a blocker for cyber resilience

  Organisations that neglect the digital employee experience are not only vulnerable to employee attrition, but putting themselves at increased cyber risk, an Ivanti report finds

• September 20, 2023 20 Sep'23

  Rishi Sunak under fire from UK tech stakeholders over revision of net-zero policies

  The prime minister has seen his decision to tweak and revise several policies that underpin the UK's net-zero goals criticised for potentially stunting the growth of the clean tech sector

• September 20, 2023 20 Sep'23

  Organisations failing to proactively address insider cyber risk

  Organisations are spending less than 10% of their annual security budgets on trying to solve one of the costliest problems in cyber: insider risk

• September 20, 2023 20 Sep'23

  Multi-agency pilot aims to help innovators navigate regulatory landscape

  Regulators join forces in pilot scheme to help businesses deploy new technologies in a way that complies with cross-industry regulations

• September 19, 2023 19 Sep'23

  Braverman puts pressure on Meta to pause end-to-end encryption plans

  The home secretary is calling on Meta to halt its plans to introduce encrypted messaging services on Facebook and Instagram until the company puts measures in place to detect abuse

• September 19, 2023 19 Sep'23

  New revelations from the Snowden archive surface

  A decade after Snowden exposed NSA’s mass surveillance in cooperation with the British GCHQ, only about 1% of the documents have been published – but three major facts can finally be revealed thanks to a doctoral thesis in applied cryptography by ...

• September 19, 2023 19 Sep'23

  Post Office employee changed story for witness statement used to destroy subpostmaster

  Post Office inquiry hears how an auditor changed her story about a subpostmaster to help win court battle

• September 19, 2023 19 Sep'23

  Okta confirms link to cyber attacks on Las Vegas casinos

  Okta CISO David Bradbury confirms widespread speculation about the high-profile cyber attacks on two Las Vegas casino operators, revealing that the threat actors responsible had indeed abused its services as they earlier claimed

• September 19, 2023 19 Sep'23

  38TB Microsoft data leak highlights risks of oversharing

  An accidentally disclosed SAS token with excessive privileges enabled researchers to access nearly 40TB of Microsoft’s data, highlighting the risks of privilege mismanagement and oversharing

• September 19, 2023 19 Sep'23

  UK wants international collaboration on AI for development

  Foreign secretary James Cleverly uses speech at United Nations General Assembly to set out vision for potential of AI technology to speed up development in the world’s poorest nations

• September 19, 2023 19 Sep'23

  Nominet and European counterparts link up on intelligence sharing

  The new European TLD ISAC, a collaborative project between top-level domain providers across Europe, aims to enhance their collective security posture to better protect internet users

• September 18, 2023 18 Sep'23

  Government offers £600,000 to subpostmasters with overturned convictions

  Subpostmasters wrongfully convicted of financial crimes based on evidence from faulty Horizon software will be offered £600,000 compensation by government

• September 18, 2023 18 Sep'23

  Unregulated DeFi services abused in latest pig butchering twist

  Pig butchering scammers are taking advantage of the unregulated nature of DeFi crypto trading apps to siphon off even more money from their victims, according to the latest findings of an ongoing investigation

• September 18, 2023 18 Sep'23

  CMA focuses on data for AI foundation model

  Foundational AI models require vast amounts of data. Without access to diverse datasets, the market for foundational models risks being stifled

• September 18, 2023 18 Sep'23

  Government seeks industry views on cyber threat to UK CNI

  The Science, Innovation and Technology Select Committee is seeking evidence from the cyber sector as it launches an inquiry into the resilience of the UK's critical national infrastructure

• September 15, 2023 15 Sep'23

  Few organisations have a clear strategy for AI

  Few organisations are confident with the main concepts involved in developing AI-enabled business models

• September 15, 2023 15 Sep'23

  TikTok fined €345m under GDPR for failing to protect children’s privacy

  Data protection regulators warn social media companies to take all necessary measures to protect children’s privacy

• September 15, 2023 15 Sep'23

  How India is driving tech developments at G20

  India’s G20 presidency marks an important stride towards establishing a global regulatory framework for the crypto industry, among other tech developments discussed at the global forum in New Delhi this year

• September 15, 2023 15 Sep'23

  Dunelm's journey to micro front ends

  We find out how Dunelm has modernised its platform and web development with in-house ecommerce and serverless systems

• September 15, 2023 15 Sep'23

  Las Vegas mainstay Caesars Palace likely paid off ransomware crew

  Caesars Entertainment, owner of the lavish Roman Empire-themed Caesars Palace casino in Las Vegas, has revealed it also suffered a ransomware attack, and appears to have paid off its hackers

• September 15, 2023 15 Sep'23

  UK space sector needs more people with AI skills, according to survey

  Space sector survey shows machine learning and artificial intelligence skills are highly sought after, as the industry struggles to recruit and retain people with the necessary talent

• September 15, 2023 15 Sep'23

  Manchester police data breach a classic supply chain incident

  The developing data breach at Greater Manchester Police follows a cyber attack on the systems of a key supplier of ID services to the force

• September 14, 2023 14 Sep'23

  Data on over 3,000 Airbus suppliers leaked after breach

  An emergent threat actor has leaked details of multiple sensitive Airbus suppliers after claiming to have accessed the firm’s systems having hacked customer Turkish Airlines

• September 14, 2023 14 Sep'23

  BlackCat on the hook for cyber attack that crippled Vegas casinos

  The ALPHV/BlackCat ransomware operation claimed responsibility for an attack that forced MGM Resorts to shut down systems at some of Las Vegas’ most popular gambling venues

• September 14, 2023 14 Sep'23

  Google, Microsoft and Mozilla push browser updates to foil zero-day

  A zero-day in Google’s Chrome browser was first reported by surveillance researchers at The Citizen Lab and Apple, but also affects other browsers

• September 14, 2023 14 Sep'23

  Singapore firefighters don smartglasses for equipment inspections

  Firefighters from the Singapore Civil Defence Force will employ smartglasses equipped with computer vision and 5G capabilities to perform visual inspections of their equipment

• September 14, 2023 14 Sep'23

  Bristol Uni to host one of Europe’s most power supercomputer clusters

  A high-performance computer system being built at the University of Bristol will run thousands of GPUs to support research in artificial intelligence and scientific discovery

• September 14, 2023 14 Sep'23

  Government appoints Dave Smith as UK national tech adviser

  The former Rolls-Royce technology director will take over the role of UK national technology adviser, following government recruitment campaign for the role in the wake of former tech adviser Patrick Vallance’s departure

• September 14, 2023 14 Sep'23

  As vehicle safety regulations loom, carmakers fret over cyber risks

  Global, UN-backed car safety and security regulations come into force next year, and automotive bosses say they are not only unprepared, but “swamped” by a tide of compliance and security risks

• September 13, 2023 13 Sep'23

  GCHQ breached privacy rights of IT professional and security researcher, human rights court rules

  The European Court of Human Rights in Strasbourg finds UK intelligence services breached the privacy rights of two overseas nationals – an IT professional and a security researcher

• September 13, 2023 13 Sep'23

  GitHub fixes race condition that could have led to ‘repojacking’

  A subtle flaw in how GitHub handled repository creation and user renaming could have had serious consequences for the open source community, but has now been fixed. Learn more about how it worked

• September 13, 2023 13 Sep'23

  Altnet trade body slams regulator for spiking UK broadband prices

  Association of UK independent broadband providers criticises national comms regulator’s “failure” to recognise cost to consumers of lack of market competition and contribution of altnets in market

• September 13, 2023 13 Sep'23

  BianLian ransomware gang holds Save the Children hostage

  The dangerous and prolific BianLian ransomware gang claims to have stolen almost 7TB of data from NGO Save the Children, but thankfully the charity’s vital work on the ground appears to be unaffected

• September 13, 2023 13 Sep'23

  Storm-0324 gathers over Microsoft Teams

  An initial access broker associated with several different ransomware operations is now conducting Microsoft Teams phishing attacks

• September 13, 2023 13 Sep'23

  NCSC and ICO sign MoU to forge deeper collaborative links

  The scope of the MoU signed by the NCSC and the ICO includes collaboration on new cyber regulations and guidance, and how to support cyber attack victims appropriately and minimise regulatory penalties

• September 13, 2023 13 Sep'23

  Patch Tuesday: Microsoft fixes zero-days in Word and Streaming Service

  September 2023 brings a light Patch Tuesday, with two zero-days and five critical vulnerabilities listed in the latest release

• September 13, 2023 13 Sep'23

  Cisco tightens link between observability and security

  The company's observability platform now offers a way for IT decision-makers to understand the impact of security issues

• September 13, 2023 13 Sep'23

  ExtraHop open sources 16 million rows of threat domain data

  NDR specialist ExtraHop says making its entire machine learning dataset available for anybody to view will help organisations better defend against cyber attacks originating from malicious domains generated by algorithms