News

IT risk management

• March 04, 2026 04 Mar'26

  Landmark legal challenge against Home Office eVisa system heard

  The UK High Court will examine whether the Home Office policy of refusing to issue alternative proof of immigration status outside of its electronic visa system is lawful

• March 03, 2026 03 Mar'26

  NCSC: No increase in cyber threat from Iran, but be prepared

  While cyber threat levels remain stable following the outbreak of war in the Middle East at the weekend, at-risk organisations in the UK should take steps to ward off potential reprisals from Iran-linked threat actors

• February 26, 2026 26 Feb'26

  US artificial intelligence developers accuse Chinese firms of stealing their data

  Artificial intelligence developers are accusing Chinese firms of stealing their intellectual property following a spate of ‘distillation attacks’, despite their own alleged theft of training data

• February 26, 2026 26 Feb'26

  CrowdStrike touts agentic SOC to tackle security woes

  By embedding AI agents across its platform, CrowdStrike is looking to help security teams automate repetitive security tasks, enabling them to focus on complex and stealthier threats that could slip under the radar

• February 25, 2026 25 Feb'26

  The UK’s proposed social media ban explained

  The UK government will use new legal powers to lay the groundwork for an under-16 social media ban after its consultation on children’s digital well-being, but opponents warn the measures being considered will only treat the symptoms of the problem ...

• February 25, 2026 25 Feb'26

  Application exploitation back in vogue, says IBM cyber unit

  IBM’s X-Force unit observes an uptick in the exploitation of vulnerable public-facing software applications

• February 25, 2026 25 Feb'26

  How AI code generation is pushing DevSecOps to machine speed

  Organisations should adopt shared platforms and automated governance to keep pace with the growing use of generative AI tools that are helping developers produce code at unprecedented volumes

• February 24, 2026 24 Feb'26

  Cyber association launches code of conduct for security pros

  ISC2’s Code of Professional Conduct will supposedly establish a worldwide framework dedicated to principled and ethical practices in the security trade

• February 23, 2026 23 Feb'26

  Why crypto agility is key to quantum readiness

  With quantum computing threatening current encryption standards, experts call for organisations to achieve crypto agility by managing the lifecycle of certificates and cryptographic keys through automation

• February 20, 2026 20 Feb'26

  What it takes to secure agentic commerce

  With AI agents increasingly acting as digital concierges for shoppers, verifying bot identities, securing the APIs they rely on and detecting anomalous behaviour will be key to safeguarding automated transactions, according to Akamai

• February 19, 2026 19 Feb'26

  Bank of Ireland UK fined for late security system implementation

  The payments regulator has fined the bank nearly £4m after it missed a deadline to implement a system to check payees

• February 18, 2026 18 Feb'26

  Flaws in Google and Microsoft products added to Cisa catalogue

  Cisa has added six CVEs to its Kev catalogue this week, including newly disclosed issues in Google Chromium and Dell RecoverPoint for Virtual Machines, and some older flaws as well

• February 18, 2026 18 Feb'26

  0APT ransomware crew makes embarrassing splash

  A ransomware gang called 0APT has attracted attention, but many of its victims may not even be real, and its operators are being accused of over-egging their criminal pudding

• February 17, 2026 17 Feb'26

  Western cyber alliances risk fragmenting in new world order

  The conduct of powerful nations is causing knock-on effects in the cyber world as long-standing security frameworks appear increasingly precarious

• February 17, 2026 17 Feb'26

  Businesses may be caught by government proposals to restrict VPN use

  Labour proposals to restrict social media use to people aged 16 and under could have unintended consequences for businesses using virtual private networks

• February 17, 2026 17 Feb'26

  Government wages cyber campaign as half the UK’s SMEs are breached

  UK government says half of all small businesses have been cyber breached in the recent past as it urges them to ‘lock the door’

• February 12, 2026 12 Feb'26

  European Commission: TikTok’s addictive design breaches EU law

  In a preliminary ruling, European Commission says TikTok’s additive design features are in breach of laws designed to create safer digital spaces

• February 11, 2026 11 Feb'26

  CVE volumes may plausibly reach 100,000 this year

  The number of vulnerabilities to be disclosed in 2026 is almost certain to exceed last year's total, and may be heading towards 100,000, according to analysis

• February 11, 2026 11 Feb'26

  London Assembly member: Police should halt facial-recognition technology use

  In lieu of a full-blown ban on the technology, Green London Assembly member Zoë Garbett has called for a number of new safeguards to be implemented that she feels would protect Londoners from ‘escalating’ biometric surveillance

• February 11, 2026 11 Feb'26

  The Security Interviews: Mick Baccio, Splunk

  Mick Baccio, global security advisor at Splunk SURGe and Cisco Foundation AI, reveals how the experience of running cyber on a dime for a US presidential campaign has informed how he does security, and why the basics still matter

• February 10, 2026 10 Feb'26

  Arctic Wolf targets mid-market security gap in APAC

  Following the launch of its full portfolio in Malaysia, the SOC provider discusses the security challenges facing lean IT teams, the value of supplier neutrality, and its roadmap for AI and ransomware protection

• February 10, 2026 10 Feb'26

  February Patch Tuesday: Microsoft drops six zero-days

  Microsoft releases patches for six zero-day flaws in its latest monthly update, many of them related to security feature bypass issues

• February 10, 2026 10 Feb'26

  Second ever international AI safety report published

  More than 100 artificial intelligence experts have produced the second international AI safety report ahead of a summit in India, outlining a high degree of uncertainty about the development and risks of AI

• February 10, 2026 10 Feb'26

  Artificial intelligence now finance sector’s ‘connective tissue’

  Major study finds debate over AI adoption is over as almost every finance firm in the world is already using the technology

• February 10, 2026 10 Feb'26

  Singapore mounts largest ever cyber operation to oust APT actor

  Operation Cyber Guardian mobilised over 100 defenders to neutralise UNC3886, which infiltrated Singtel, StarHub, M1 and Simba networks, operators issue joint pledge on defence-in-depth

• February 09, 2026 09 Feb'26

  UAE’s TII challenges big tech dominance with open source Falcon AI models

  Through its Falcon models and an open, efficiency-driven research strategy, the Technology Innovation Institute is positioning the UAE as a producer of foundational AI, not merely a consumer of global platforms

• February 09, 2026 09 Feb'26

  As space gets crowded, cyber threats from jamming to stalker satellites loom large

  Experts at the inaugural CYSAT Asia in Singapore warn of the urgency of securing space assets amid growing geopolitical tensions and supply chain vulnerabilities

• February 04, 2026 04 Feb'26

  SolarWinds RCE bug makes Cisa list as exploitation spreads

  Exploitation of CVE-2025-40551, an RCE flaw affecting SolarWinds Web Help Desk, appears to be spreading, with defenders on high alert

• February 04, 2026 04 Feb'26

  UK government must get its hands dirty on security, report says

  As the UK government develops its National Cyber Action Plan, a report from the Rusi think tank urges Westminster to take a more interventionist approach

• February 03, 2026 03 Feb'26

  Ransomware gangs focus on winning hearts and minds

  Ransomware-as-a-service operations are increasingly seeking to forge connections with employees, contractors and trusted partners of their target organisations as an alternative to straight-up hacking, says NCC

• February 03, 2026 03 Feb'26

  Infosecurity Europe launches cyber security startups stream

  Infosecurity Europe 2026 will feature a cyber security startup exhibition zone and a competition for business support, in conjunction with the UK Cyber Flywheel organisation

• February 02, 2026 02 Feb'26

  Interview: Why identity is the nucleus for cyber security

  Amid a wave of market consolidation, Computer Weekly speaks to Keeper Security’s leadership on how identity and access management systems are becoming unified identity platforms capable of securing both human and machine identities

• January 30, 2026 30 Jan'26

  Home Office announces sweeping police technology plans

  The Home Office plans to ramp up its deployment of artificial intelligence and facial-recognition technologies under wide-ranging reforms to UK policing

• January 29, 2026 29 Jan'26

  Metropolitan Police needs effective constraints on live facial recognition use, court hears

  The Metropolitan Police has defended its use of live facial recognition against a legal challenge that claims there are no effective constraints on where it can deploy the technology

• January 27, 2026 27 Jan'26

  Transfer learning and governance help bridge healthcare AI divide

  Singapore researchers show how adapting pre-trained AI models can solve data scarcity issues in countries with limited resources. Separately, they have proposed forming an international consortium to build consensus on AI governance in medicine

• January 27, 2026 27 Jan'26

  Landmark legal challenge against police facial recognition begins

  The High Court will examine whether the Metropolitan Police is acting lawfully with its deployments of live facial recognition, in the UK’s first judicial review of how the technology is being used

• January 23, 2026 23 Jan'26

  US punts renewal of threat data sharing law to September

  US lawmakers have extended the Cybersecurity Information Sharing Act of 2015 for another nine months, buying time to enact a replacement for the legislation.

• January 23, 2026 23 Jan'26

  Ransomware, reputation, risk: Black Hat Europe in review, 2026 in view

  Black Hat Europe made clear that cyber security can no longer be separated from politics, economics and behaviour, as ransomware, AI and long-standing security failures combine

• January 23, 2026 23 Jan'26

  Singapore debuts world’s first governance framework for agentic AI

  The Infocomm Media Development Authority has released a guide to help enterprises deploy artificial intelligence agents safely and address specific risks such as unauthorised actions and automation bias

• January 22, 2026 22 Jan'26

  JPMorgan CEO urges slowdown of AI roll-out to ‘save society’

  The rapid proliferation of artificial intelligence will prompt ‘civil unrest’ if governments and companies fail to protect workers from its displacing effects, says JPMorgan boss

• January 21, 2026 21 Jan'26

  UK and China reach out across cyber no-man's land

  London and Beijing have supposedly conducted high-level talks seeking to establish a joint security forum to help de-escalate potential cyber flashpoints, according to reports

• January 21, 2026 21 Jan'26

  AI slop pushes data governance towards zero-trust models

  Organisations are implementing zero-trust models for data governance thanks to the proliferation of poor quality AI-generated data, often known as AI slop

• January 20, 2026 20 Jan'26

  UK public sector, CNI in Russian hacktivist crosshairs

  Hacktivists aligned to the Russian state are ramping up their targeting of UK organisations with denial of service attacks

• January 20, 2026 20 Jan'26

  Met claims success for permanent facial recognition in Croydon

  Met Police boasts that its permanent deployment of live facial recognition cameras in Croydon has led to more than 100 arrests and prompted a double-digit reduction in local crime, ahead of an upcoming judicial review assessing the technology’s ...

• January 19, 2026 19 Jan'26

  UK copyright law unfit for protecting creative workers from AI

  As the UK government considers its approach to artificial intelligence and copyright, Computer Weekly explores the dynamics at play in copyright markets, and what measures can be taken to ensure that creatives are protected

• January 16, 2026 16 Jan'26

  NSA urges continuous checks to achieve zero trust

  The agency leading the US government’s cryptology and cyber security strategies has published its latest zero-trust guidance

• January 15, 2026 15 Jan'26

  Cyber body ISC2 signs on as UK software security ambassador

  Professional cyber association ISC2 pledges support to UK government’s Software Security Ambassador scheme, part of the recently unveiled Cyber Action Plan

• January 14, 2026 14 Jan'26

  Texas judge throws out second lawsuit over CrowdStrike outage

  A US judge has dismissed a lawsuit filed by CrowdStrike shareholders over the July 2024 outage that caused widespread disruption around the world

• January 14, 2026 14 Jan'26

  Nozomi Networks opens APAC headquarters in Singapore

  Industrial cyber security firm Nozomi Networks has opened its Singapore headquarters, doubling its regional headcount, and pledging to remain vendor agnostic while targeting the manufacturing and utility sectors

• January 13, 2026 13 Jan'26

  ‘Dual-channel’ attacks are the new face of BEC in 2026

  Business email compromise remains a significant threat as cyber fraudsters deploy a more diverse range of tactics against their potential victims, according to a report