News

IT risk management

• April 16, 2025 16 Apr'25

  CISA extends Mitre CVE contract at last moment

  The US Cybersecurity and Infrastructure Security Agency has ridden to the rescue of the under-threat Mitre CVE Programme, approving a last-minute, 11-month contract extension to preserve the project’s vital security vulnerability work

• April 16, 2025 16 Apr'25

  Security leaders grapple with AI-driven threats

  Experts warn of AI’s dual role in both empowering and challenging cyber defences, and called for intelligence sharing and the need to strike a balance between AI-driven innovation and existing security practices

• April 15, 2025 15 Apr'25

  Mitre warns over lapse in CVE coverage

  Mitre, the operator of the world-renowned CVE repository, has warned of significant impacts to global cyber security standards, and increased risk from threat actors, as it emerges its US government contract will lapse imminently

• April 14, 2025 14 Apr'25

  Meta settles lawsuit over surveillance business model

  Meta settles lawsuit over use of personal data in targeted advertising, opening up the possibility of other UK users raising legal objections to its processing

• April 14, 2025 14 Apr'25

  Government faces claims of serious security and data protection problems in One Login digital ID

  The Government Digital Service was warned about serious cyber security and data protection problems in its flagship digital identity system, with insider claims that the data of three million users may still be at risk

• April 11, 2025 11 Apr'25

  AI surveillance towers place migrants in ‘even greater jeopardy’

  The use of autonomous surveillance towers throughout the English coast forces migrants into increasingly dangerous routes and contributes to their criminalisation

• April 11, 2025 11 Apr'25

  Met Police to deploy permanent facial recognition tech in Croydon

  The Met Police is set deploy permanent live facial recognition cameras on street furniture in Croydon from summer 2025, but local councillors say the decision – which has taken place with no community input – will further contribute the ...

• April 11, 2025 11 Apr'25

  Warranty fraud fuels hidden army of hardware hackers

  Widespread warranty fraud is not only costing companies billions but also creating a breeding ground for advanced hardware exploits, warns hardware hacker and researcher Bunnie Huang at Black Hat Asia 2025

• April 10, 2025 10 Apr'25

  Spirit of openness helps banks get serious about stopping scams

  Recent announcements show that banks, financial services firms and IT companies are increasing efforts to curb online scams

• April 08, 2025 08 Apr'25

  IBM boosts AI mainframe capabilities with Z17

  IBM continues to try to break out of the mindset that mainframes are just for transaction processing. The latest server offers greater AI capabilities

• April 08, 2025 08 Apr'25

  Government punts cyber governance code of practice for UK businesses

  The Department for Science, Innovation and Technology’s cyber security minister Feryal Clark announces a cyber security code of governance for UK businesses to follow

• April 08, 2025 08 Apr'25

  Over £18m stolen from Santander UK customers in first three months of year

  Bank’s latest quarterly report on scams said over £18m was stolen from its UK customers by scammers

• April 07, 2025 07 Apr'25

  UK SMEs losing over £3bn a year to cyber incidents

  A lack of access to technology, little to no staff training, and competing priorities are losing UK SMEs up to £3.4bn to cyber incidents every year

• April 07, 2025 07 Apr'25

  Court rejects Home Office bid for blanket secrecy in hearings over Apple encryption case

  Investigatory Powers Tribunal rejects Home Office arguments that identifying the ‘bare details’ of legal action by Apple would damage national security, leaving open possibility of future open court hearings

• April 07, 2025 07 Apr'25

  Fintech body calls on government for national anti-fraud centre

  Industry body says a national anti-fraud centre could be the vehicle required to effectively fight fraud through data sharing

• April 04, 2025 04 Apr'25

  Norway and Nordic financial sector ramps up cyber security

  Finans Norge sets up cyber security unit CTSU to support the finance sector in Norway amid increasing threats

• April 04, 2025 04 Apr'25

  Banks to share fraud data with tech firms in cross-sector collaboration

  UK banks join tech firms in fraud data-sharing initiative to enable collaboration on action to stop online scams

• April 03, 2025 03 Apr'25

  Are LLM firewalls the future of AI security?

  As large language models permeate industries, experts at Black Hat Asia 2025 debate the need for LLM firewalls and explore their role in fending off emerging AI threats

• April 01, 2025 01 Apr'25

  Apple devices are at ‘most risk’ in UK following government ‘backdoor’ order

  Home Office refuses to answer questions from Lords over technical capability notice issued against Apple’s iCloud Advanced Data Protection encryption services

• March 31, 2025 31 Mar'25

  Top 1,000 IT service providers in scope of UK cyber bill

  The government’s proposed Cyber Security and Resilience Bill is set to include regulatory provisions covering both datacentre operators and larger IT service providers

• March 31, 2025 31 Mar'25

  Reassessing UK law enforcement data adequacy

  Computer Weekly takes stock of proposed changes to the UK’s law enforcement data protection rules and how it could affect data adequacy with the European Union

• March 31, 2025 31 Mar'25

  UK law enforcement data adequacy at risk

  The UK government says reforms to police data protection rules will help to simplify law enforcement data processing, but critics argue the changes will lower protection to the point where the UK risks losing its European data adequacy

• March 26, 2025 26 Mar'25

  Military AI caught in tension between speed and control

  The use of artificial intelligence in military contexts can unlock a range of benefits for defence organisations, but also highlights a clear tension between speed and control baked into the technology

• March 25, 2025 25 Mar'25

  Public Accounts Committee calls out legacy IT

  Unsupported and out-of-date software and hardware are hindering the government’s artificial intelligence plans for the public sector

• March 20, 2025 20 Mar'25

  NCSC proposes three-step plan to move to quantum-safe encryption

  The NCSC urges service providers, large organisations and critical sectors to start thinking today about how they will migrate to post-quantum cryptography over the next decade

• March 19, 2025 19 Mar'25

  DeepMind founder warns of compounding AI agent errors

  Artificial general intelligence may be years away, but in the meantime, organisations are being urged to adopt agent technology

• March 19, 2025 19 Mar'25

  How Telefónica avoided VMware price hike

  While some some organisations look for alternatives to VMware, Telefónica Germany has taken a different approach based on third-party support

• March 18, 2025 18 Mar'25

  Seaco charts course for unified security strategy

  Shipping container leasing giant consolidates security tools onto a single platform, leveraging AI and extended detection and response to improve security operations

• March 17, 2025 17 Mar'25

  PSNI’s ‘ridiculous’ withholding of evidence in spying operation delayed court hearings 

  Landmark ruling by the Investigatory Powers Tribunal will decide whether the surveillance court can award costs against government bodies accused of unreasonable behaviour 

• March 17, 2025 17 Mar'25

  Online Safety Act measures come into effect

  Regulator Ofcom is now able to take enforcement action against platforms under the Online Safety Act if they fail to proactively safeguard against content such as terrorist or child sexual abuse material

• March 17, 2025 17 Mar'25

  How Oracle is using AI to combat financial crime

  The tech giant is leveraging artificial intelligence to surface fraudulent financial transactions and improve the efficiency of financial crime investigations, offering relief to banks battling high costs and alert fatigue

• March 14, 2025 14 Mar'25

  Apple encryption legal challenge heard behind closed doors despite calls for public hearing

  Investigatory Powers Tribunal hearing held behind closed doors as press and civil society groups argue for open hearings

• March 14, 2025 14 Mar'25

  AI Action Summit review: Differing views cast doubt on AI’s ability to benefit whole of society

  Governments, companies and civil society groups gathered at the third global AI summit to discuss how the technology can work for the benefit of everyone in society, but experts say competing imperatives mean there is no guarantee these visions will...

• March 13, 2025 13 Mar'25

  Chinese espionage group UNC3886 targets Juniper routers

  Advanced persistent threat group UNC3886 deployed custom backdoors on end-of-life Juniper Networks routers, underscoring the need for timely patching and advanced security monitoring

• March 13, 2025 13 Mar'25

  SuperBlack ransomware may have ties to LockBit

  Forescout researchers report on a new ransomware gang that appears to be keeping the legacy of the notorious LockBit crew alive

• March 13, 2025 13 Mar'25

  HMRC looks to upgrade SOC with advanced SIEM tech

  HMRC issues a request for information notice ahead of opening up bids for a new security information and event management project that aims to reinforce its ability to respond to cyber threats

• March 13, 2025 13 Mar'25

  Driving licence data could be used for police facial recognition

  The government’s Crime and Policing Bill could allow police to access the UK driving licence database for use in facial recognition watchlists, but the Home Office denies biometric data would be repurposed in this way

• March 11, 2025 11 Mar'25

  March Patch Tuesday brings 57 fixes, multiple zero-days

  The third Patch Tuesday of 2025 brings fixes for 57 flaws and a hefty number of zero-days

• March 11, 2025 11 Mar'25

  Perimeter security appliances source of most ransomware hits

  Perimeter security appliances and devices, particularly VPNs, prove to be the most popular entry points into victim networks for financially motivated ransomware gangs, according to reports

• March 11, 2025 11 Mar'25

  Dutch police disrupt half of ransomware operations, finds embedded PHD student

  Dutch PhD study reveals the impact of centralised intelligence and strategic interventions in the fight against ransomware

• March 11, 2025 11 Mar'25

  UK government under-prepared for catastrophic cyber attack, hears PAC

  The Commons Public Accounts Committee heard government IT leaders respond to recent National Audit Office findings that the government’s cyber resilience is under par

• March 11, 2025 11 Mar'25

  Singapore IT leaders boost AI security defences

  Study reveals a surge in perceived importance of artificial intelligence for cyber security in Singapore, but declining investment in traditional measures raises concerns as sophisticated cyber attacks intensify

• March 10, 2025 10 Mar'25

  How CISOs are tackling cyber security challenges

  Security chiefs at the recent Gartner Security and Risk Management Summit in Sydney share insights on navigating board communication, organisational resilience and the importance of understanding business needs

• March 07, 2025 07 Mar'25

  Managing security in the AI age

  Gartner experts offer guidance on harnessing AI’s power while mitigating its risks, from managing shadow AI to implementing security controls and policies

• March 06, 2025 06 Mar'25

  UK cyber security damaged by ‘clumsy Home Office political censorship’

  Britain’s National Cyber Security Centre secretly censors computer security guidance and drops references to encryption

• March 06, 2025 06 Mar'25

  Going beyond search: Elastic’s observability and security play

  Elastic’s chief product officer Ken Exner talks up the company’s expansion into observability and security and how it balances innovation with community contributions and monetisation

• March 05, 2025 05 Mar'25

  Apple IPT appeal against backdoor encryption order is test case for bigger targets

  The Home Office decision to target Apple with an order requiring access to users’ encrypted data is widely seen as a ‘stalking horse’ for attacks against encrypted messaging services WhatsApp, Telegram and Signal

• March 05, 2025 05 Mar'25

  NHS investigating how API flaw exposed patient data

  NHS patient data was left vulnerable by a flaw in an application programming interface used at online healthcare provider Medefer

• March 04, 2025 04 Mar'25

  Aussie businesses ramp up security spending

  Australian organisations are set to spend A$6.2bn on security and risk management in 2025, a 14.4% jump from the previous year, driven by the rise of AI and a growing threat landscape

• March 03, 2025 03 Mar'25

  Singapore’s HomeTeamNS hit by ransomware attack

  The non-profit organisation suffered a ransomware attack that affected some servers containing employee and member data, prompting an investigation and enhanced security measures