News

IT risk management

• July 02, 2025 02 Jul'25

  US CISA agency extends Iran cyber alert, warns of CNI threat

  The US Cybersecurity and Infrastructure Security Agency reiterates guidance for operators of critical national infrastructure as it eyes the possibility of cyber attacks from Iran

• July 02, 2025 02 Jul'25

  Dutch study uncovers cognitive biases undermining cyber security board decisions

  Dutch research reveals how cognitive biases can lead to catastrophic security decisions

• July 02, 2025 02 Jul'25

  Qantas customer data exposed in contact centre breach

  Australian flag carrier is investigating significant data theft of personal information for up to six million customers after a third-party platform used by its call centre was compromised

• June 27, 2025 27 Jun'25

  Citrix Bleed 2 under active attack, reports suggest

  Days after news emerged of a Citrix NetScaler flaw comparable in its scope and severity to 2023’s infamous Citrix Bleed, there are already clear indicators that threat actors are taking advantage of the critical vulnerability

• June 27, 2025 27 Jun'25

  Ciaran Martin: AI might disturb attacker-defender security balance

  The founder of the National Cyber Security Centre spoke with Computer Weekly at Infosecurity Europe 2025 about how artificial intelligence might disturb the attacker-defender security equilibrium

• June 27, 2025 27 Jun'25

  MPs propose ban on predictive policing

  MPs are attempting to amend the UK government’s forthcoming Crime and Policing Bill so that it prohibits the use of controversial predictive policing systems

• June 26, 2025 26 Jun'25

  Sky ECC distributor released from French custody pending trial

  Canadian businessman accused of distributing Sky ECC encrypted phones has been released on bail after over four years in custody without a trial

• June 25, 2025 25 Jun'25

  Latest Citrix vulnerability could be every bit as bad as Citrix Bleed

  A Citrix NetScaler flaw that was quietly patched earlier in June is gathering widespread attention after experts noted strong similarities to the Citrix Bleed vulnerability that caused chaos in late 2023

• June 24, 2025 24 Jun'25

  One year since being freed, Julian Assange still a victim of state secrecy

  If the State Department’s arguments prevail in FOIA litigation, the truth about US action against Julian Assange and WikiLeaks journalists will never be known

• June 23, 2025 23 Jun'25

  Widening Middle Eastern war increases cyber risk

  With the entry of the US into the widening Middle Eastern conflict, cyber risk is likely to increase across the board

• June 20, 2025 20 Jun'25

  Cyber Essentials certifications rising slowly but steadily

  The number of businesses attaining the NCSC Cyber Essentials certification continues to increase, but much more can be done to raise awareness of the scheme

• June 20, 2025 20 Jun'25

  M&S, Co-op attacks a ‘Category 2 cyber hurricane’, say UK experts

  The UK’s Cyber Monitoring Centre has published its first in-depth assessment of a major incident, reflecting on the impact of and lessons learned from Scattered Spider attacks on M&S and Co-op

• June 20, 2025 20 Jun'25

  UK data reforms become law

  UK passes wide-ranging data protection reforms to ‘simplify’ organisations’ sharing and processing of data, but questions remain whether changes will be accepted by European Commission when renewing UK data adequacy

• June 19, 2025 19 Jun'25

  UBS employee data leaked after cyber attack on supplier

  UBS and fellow Swiss bank Pictet have been affected by a cyber attack on a procurement service provider

• June 18, 2025 18 Jun'25

  Traditional fake news detection fails against AI-generated content

  As generative AI produces increasingly convincing text, Dutch researchers are exploring how linguistic cues, model bias, and transparency tools can help detect fake news.

• June 17, 2025 17 Jun'25

  Scattered Spider widens web to target insurance sector

  Following a series of high-profile attacks on prominent retailers and consumer brands, the Scattered Spider cyber crime collective appears to be expanding its targeting to the insurance sector

• June 16, 2025 16 Jun'25

  Intelligence sharing key to cyber security in Europe, says EU Commission cyber expert

  Cyber criminals choose not to attack Europe due to its resilience and preparedness, says the EU Commission’s principal advisor for cyber security coordination, Despina Spanou

• June 11, 2025 11 Jun'25

  NHS IT the big winner in Reeves’ Spending Review

  The chancellor of the exchequer has significantly upped spending on digital and technology initiatives in the current Spending Review period, with the NHS receiving a 50% tech funding increase

• June 11, 2025 11 Jun'25

  How breaking things builds resilient systems

  To prevent and recover from outages in today’s complex, cloud-native world, enterprises must proactively and deliberately inject failure into their systems though chaos engineering practices

• June 11, 2025 11 Jun'25

  June Patch Tuesday brings a lighter load for defenders

  Barely 70 vulnerabilities make the cut for Microsoft’s monthly security update, but an RCE flaw in WEBDAV and an EoP issue in Windows SMB Client still warrant close attention

• June 11, 2025 11 Jun'25

  Cyber Bill at risk of becoming a missed opportunity, say MPs

  An APPG report warns that the government’s flagship cyber security legislation is too narrow in its scope and risks missing opportunities to embed resilience at the heart of the British economy

• June 10, 2025 10 Jun'25

  Third-party security weaknesses threaten Europe’s big banks

  Security breaches via third parties increased by 25% at Europe’s largest finance firms

• June 06, 2025 06 Jun'25

  UK ICO publishes AI and biometrics strategy

  The UK data regulator has outlined how it will approach the regulation of artificial intelligence and biometric technologies, which will focus in particular on automated decision-making systems and police facial recognition

• June 06, 2025 06 Jun'25

  CISOs must translate cyber threats into business risk

  To manage risk effectively and secure board-level buy-in, CISOs must stop talking about technology and start speaking the language of business, according to a senior Check Point executive

• June 05, 2025 05 Jun'25

  UK’s error-prone eVisa system is ‘anxiety-inducing’

  People experiencing technical errors with the Home Office’s electronic visa system explain the psychological toll of not being able to reliably prove their immigration status in the face of a hostile and unresponsive bureaucracy

• June 05, 2025 05 Jun'25

  How GitLab is tapping AI in DevSecOps

  GitLab CISO Josh Lemos explains how the company is weaving AI, through its Duo tool, into the entire software development lifecycle to enhance efficiency and automate incident response

• June 04, 2025 04 Jun'25

  Put ROCs before SOCs, Qualys tells public sector

  Putting risk operations before security operations may help government agencies and other public sector bodies better manage the myriad threats they face, and make better decisions for the security of all

• June 04, 2025 04 Jun'25

  NCSC sets out how to build cyber safe cultures

  The UK’s National Cyber Security Centre has published guidance for security teams and leaders on how to foster accessible and appropriate cyber security cultures in their organisations

• June 04, 2025 04 Jun'25

  Investigatory powers: Guidelines for police and spies could also help businesses with AI

  Computer Weekly talks to Muffy Calder, technology advisor to the UK’s investigatory powers commissioner, about privacy, intrusion and artificial intelligence

• June 04, 2025 04 Jun'25

  Microsoft outlines three-pronged European cyber strategy

  Microsoft chair Brad Smith outlines an expansive cyber programme targeting governments across Europe with enhanced threat intelligence and support

• June 04, 2025 04 Jun'25

  European Commission should rescind UK data adequacy

  Civil society organisations have urged the European Commissioner to not renew the UK’s data adequacy, given the country’s growing divergence from European data protection standards

• June 03, 2025 03 Jun'25

  SailPoint charts course for AI-driven identity security

  SailPoint is driving the use of agentic AI in identity security with its Harbor Pilot offering while preparing to help enterprises govern and secure AI agents

• May 30, 2025 30 May'25

  Dutch businesses lag behind in cyber resilience as threats escalate

  While non-IT business professionals in the middle of their careers face the most disruption from AI, professionals in the IT services sector and their employers must prepare for change

• May 30, 2025 30 May'25

  Cloud migration demands contractual safeguards and clear strategy

  Cyber security experts urge organisations to define clear objectives, understand shared security models and implement strong data governance when migrating workloads to the cloud

• May 28, 2025 28 May'25

  UK biometric surveillance exists in ‘legal grey area’

  The rapid proliferation of ‘biometric mass surveillance technologies’ throughout the UK’s public and private sectors is taking place without legal certainty or adequate safeguards for the public

• May 28, 2025 28 May'25

  Remote purchase fraud surges 14%, says banking industry

  Brits lost over £1bn to payment fraud in its many forms last year, according to the latest banking industry numbers

• May 27, 2025 27 May'25

  Maturing UK fintechs increase tech and cyber security hiring

  Increased hiring reflects that fintechs are maturing and now require more cyber security and compliance experts

• May 23, 2025 23 May'25

  Essex Police discloses ‘incoherent’ facial recognition assessment

  An equality impact assessment of Essex Police live facial recognition deployments is plagued by inconsistencies and poor methodology, undermining the force’s claim that its use of the technology will not be discriminatory

• May 21, 2025 21 May'25

  NCSC: Russia’s Fancy Bear targeting logistics, tech organisations

  The NCSC and its partner agencies have blown the whistle on an extensive campaign of malicious cyber attacks orchestrated by the Russian state Fancy Bear operation

• May 21, 2025 21 May'25

  Ransomware attacks dropped by a third last month

  Reported ransomware attacks eased off during April following a dramatic spike in the first quarter of 2025

• May 21, 2025 21 May'25

  Strong fintech security posture at risk via third-party weak links

  Despite having a strong security posture, the financial technology sector could be open to attack via third parties

• May 20, 2025 20 May'25

  Dell unveils disaggregated infrastructure strategy

  Dell makes push for disaggregated infrastructure, aiming to offer enterprises the independent scaling of three-tier architectures with the operational benefits of hyperconverged systems

• May 20, 2025 20 May'25

  Hacking contest exposes VMware security

  In what has been described as a historical first, hackers in Berlin have been able to demo successful attacks on the ESXi hypervisor

• May 19, 2025 19 May'25

  Gartner: Most firms not tapping cloud’s full potential

  Organisations have not fully leveraged the full potential of cloud and must navigate emerging trends such as artificial intelligence, multicloud complexity and security perceptions to stay competitive

• May 16, 2025 16 May'25

  No workaround leads to more pain for VMware users

  There are patches for the latest batch of security alerts from Broadcom, but VMware users on perpetual licences may not have access

• May 16, 2025 16 May'25

  Security tests reveal serious vulnerability in government’s One Login digital ID system

  A ‘red teaming’ exercise to simulate cyber attacks on the government’s flagship digital identity system has found that One Login can be compromised without detection

• May 14, 2025 14 May'25

  Why we must reform the Computer Misuse Act: A cyber pro speaks out

  Britain’s outdated hacking laws are leaving the UK’s cyber practitioners hamstrung and afraid. Security professional Simon Whittaker reveals how he nearly ran afoul of the Computer Misuse Act, and why he’s speaking out for reform

• May 14, 2025 14 May'25

  New security paradigm needed for IT/OT convergence

  Industry leaders and policymakers highlight growing cyber threats from the integration of IT and operational technology systems, calling for collaboration and regulatory frameworks to protect critical systems, among other measures

• May 13, 2025 13 May'25

  May Patch Tuesday brings five exploited zero-days to fix

  Microsoft fixes five exploited, and two publicly disclosed, zero-days in the fifth Patch Tuesday update of 2025

• May 13, 2025 13 May'25

  M&S forces customer password resets after data breach

  M&S is instructing all of its customers to change their account passwords after a significant amount of data was stolen in a DragonForce ransomware attack