News

IT risk management

May 24, 2019 24 May'19
Just over half of UK firms don’t have a cyber resilience plan

Many UK firms still lack cyber resilience and data protection capabilities covering email a year after the implementation of the GDPR aimed at improving personal data protection
May 23, 2019 23 May'19
Arm China seeks solutions to US export controls with Huawei

Chip design firm in communication with Huawei-owned semiconductor firm HiSilicon following US move to halt exports of US technology to Chinese tech giant
May 23, 2019 23 May'19
Lapse in LinkedIn security certificate update

A lapse in the update of LinkedIn’s security certificate has once again underlined the importance of keeping track to avoid disruptions and phishing attacks, and how even big players are failing to get it right
May 22, 2019 22 May'19
TalkTalk admits new failings in 2015 data breach notification

TalkTalk’s failure to notify all those affected by its 2015 data breach highlights the importance of data visibility so that breach notifications are fast and accurate – a key requirement of the GDPR

May 21, 2019 21 May'19
Dutch lecturer researches the person behind the cyber criminal

Dutch academic is trying to get inside the mind of cyber criminals by understanding what makes them tick
May 20, 2019 20 May'19
Danske Bank launches initiative to help SME customers with cyber security

Danske Bank launches initiative to support the cyber security efforts of its SME customers
May 17, 2019 17 May'19
GozNym bust underlines cyber crime threat

A criminal network using GozNym malware has been shut down in an international law enforcement operation, but others are still operating, underlining the need for vigilance, warns a security expert
May 16, 2019 16 May'19
Norwegian industry and state must combine to counter cyber threats

Norway has been targeted by two large ransomware attacks in recent months – and public and private organisations must react in a coordinated way
May 16, 2019 16 May'19
Fujitsu sets out to restore trust in technology

Trust in technology, how to recapture it, and how to ensure AI doesn’t overstep its bounds were the big messages on the opening day of Fujitsu Forum in Tokyo
May 15, 2019 15 May'19
Microsoft working to support decentralised identity

Microsoft is among the big tech players aiming to help enable personalisation of products and services without putting privacy at risk

May 15, 2019 15 May'19
Implement multifactor authentication, urges expert panel

Multifactor authentication should be a top priority for organisations to defend users from cyber attacks, coupled with zero-trust architecture and artificial intelligence-based technologies, says expert panel
May 14, 2019 14 May'19
APAC firms on the back foot in cyber security

Most Asia-Pacific organisations did not consider cyber security until after their digital transformation projects had begun, new survey finds
May 13, 2019 13 May'19
National Crime Agency calls for additional funding to tackle 21st century crime

Organised criminal gangs represent the biggest cyber threat to the UK, and law enforcement has identified rogue servers hosted in the UK
May 10, 2019 10 May'19
Key lessons from an ethical hacker

Understanding hacker techniques and processes is the best way to defend against cyber attacks, and focusing on business risks is the best way to get security budget, according to an ethical hacker
May 10, 2019 10 May'19
Dutch businesses not yet implementing NIS Directive

Little urgency to comply with the Network and Information Systems Security Act, which seeks to protect the Netherlands’ vital infrastructure and digital services from cyber attack
May 09, 2019 09 May'19
Northern Ireland generating cyber security knowledge and jobs

Northern Ireland is establishing itself as an international hub of cyber security research and innovation, providing growing employment opportunities
May 08, 2019 08 May'19
Time to start thinking about AI regulation, says KuppingerCole

Organisations and individuals should think about regulating artificial intelligence to avoid sleepwalking into a future regulated by these technologies, says analyst
May 08, 2019 08 May'19
Cyber criminals targeting C-suite, DBIR shows

Executives and cloud-based services are gaining popularity as targets for cyber criminals, according to the latest data breach investigations report
May 07, 2019 07 May'19
Privileged access management moving to cloud

Survey shows nearly half of information security professionals are either planning to move privileged access management to the cloud or are exploring the possibility
May 06, 2019 06 May'19
AWS to power Australia’s 2021 online census

PwC Australia, one of two firms appointed by the government to run the next Census, will build and operate an online form and a website on Amazon Web Services
May 03, 2019 03 May'19
Zero trust: A 21st century security model

Traditional corporate security models date back to a time when there were fewer, lower-level threats, but a zero trust model is better suited to the 21st century, according to the originator of the idea
May 03, 2019 03 May'19
Norsk Hydro urges caution as it counts cost of cyber attack

Norwegian aluminium giant Norsk Hydro is urging partners to be cautious in the wake of a damaging ransomware attack in March as financial impact estimates come in above initial estimates
May 02, 2019 02 May'19
Firms urged to embrace positive security trends to win cyber war

Modern cyber security challenges overshadow the information security successes of the past, but several positive trends are emerging as defenders come to grips with new threats, says Deloitte
May 02, 2019 02 May'19
Microservices introduce hidden security complexity, analyst warns

Microservice architecture – an approach to application development in which applications are built as a suite of modular services – simplifies development but complicates security, says KuppingerCole
May 02, 2019 02 May'19
Businesses unprepared for cyber breaches

Study shows many organisations lack IT security and operations basics, including visibility across their IT operations
May 01, 2019 01 May'19
BSA releases framework for secure software

Software industry advocacy group releases framework to facilitate flexible and comprehensive software security assessments
May 01, 2019 01 May'19
Get more proactive on cyber security, says ex Europol chief

Business needs to get more proactive, collaborative, resilient and analytical to manage cyber risks posed by cyber criminals down to acceptable levels, says former Europol chief
April 30, 2019 30 Apr'19
UK gears up for new laws on IoT security

The UK plans to introduce measures to require that basic cyber security features are built into internet-connected devices
April 30, 2019 30 Apr'19
Cyber criminals increase use of fileless attacks

Fileless attacks are increasingly popular with cyber criminals, while Russia and China top the league of nation state data exfiltrators, threat data shows
April 30, 2019 30 Apr'19
Most businesses vulnerable to supply chain cyber attacks

UK firms trail the leaders US and Germany in knowing the most about their partners’ cyber security practices, but most companies globally are in the dark about this growing source of vulnerabilities
April 30, 2019 30 Apr'19
Nearly half of UK IT pros report serious data breaches

Integration of security systems and employee training recognised as key ways to reduce the growing severity of data breaches
April 29, 2019 29 Apr'19
Fix the basics first, then worry about AI, advise experts

The freedom of the internet is at risk, with the cyber arms race and the industrialisation of hacking are set to continue as attackers move up the value chain to target trust mechanisms, threat experts predict
April 29, 2019 29 Apr'19
Australians lost half a billion dollars to scams in 2018

Most of the losses went to investment scams as tricksters found innovative ways to dupe victims into parting with their money
April 26, 2019 26 Apr'19
Facebook faces fresh privacy actions from regulators

Facebook faces legal action from Canada after it dismissed regulators’ findings that it failed to protect customer privacy. The firm has set aside $5bn to settle a privacy action in the US and faces a new investigation in Ireland
April 26, 2019 26 Apr'19
Top lessons from cyber attacks

Cyber security experts weigh in on lessons learned from cyber attack experiences, underlining that recovery capability is as important as defence
April 26, 2019 26 Apr'19
GDPR cases drive bigger budgets for Nordic regulators

High-profile General Data Protection Regulation cases in Finland and Sweden have increased the workload for regulators, which are to receive an increase in funding
April 25, 2019 25 Apr'19
UK up for cyber challenge but work to be done, says minister

Lidington says National Cyber Security Strategy has “revolutionised the UK’s fight against cyber threats”
April 25, 2019 25 Apr'19
Cabinet Office addresses 5G security issue

Cabinet Office uses NCSC conference to lay out government’s approach to the security of 5G networks, as controversy grows around using equipment from Chinese supplier Huawei
April 25, 2019 25 Apr'19
NCSC looks to industry to scale Active Cyber Defence

The national cyber security agency is calling on wider government organisations as well as industry to help scale automated cyber attack blocking systems country-wide
April 24, 2019 24 Apr'19
NCSC to scale up intelligence sharing, says GCHQ director

The GCHQ director has outlined the agency’s cyber security mission in the third decade of the internet age at CyberUK, promising to scale up the sharing of declassified cyber intelligence with industry
April 24, 2019 24 Apr'19
PM May approves Huawei for use in 5G networks despite opposition

The UK’s National Security Council has approved the use of Huawei’s networking equipment in parts of the country’s 5G mobile networks in spite of widespread opposition
April 23, 2019 23 Apr'19
Casual collaboration comms pose security risk, survey shows

UK employees have a worryingly casual attitude to workplace communications, underling the need for employers to take steps to counter related cyber attack vulnerabilities
April 23, 2019 23 Apr'19
APAC set for blockchain boom

Led by China, spending on blockchain technology in Asia-Pacific excluding Japan will surpass $2bn by 2022
April 18, 2019 18 Apr'19
State-sponsored hackers are hijacking DNS, researchers warn

A DNS-hijacking campaign targeting the Middle East and Africa may lead to actors more broadly attacking the global DNS system
April 17, 2019 17 Apr'19
Nearly a quarter of tech firms do not security check products

Nearly a quarter of organisations polled do not run security checks on products, and nearly a third admitted to shipping products with known security vulnerabilities, a survey shows
April 17, 2019 17 Apr'19
Wipro admits to potential breach to employee accounts by phishing attack

Indian IT services company Wipro is investigating a phishing attack, which hit some staff email accounts and launched attacks on customer environments
April 16, 2019 16 Apr'19
Singtel and NUS claim quantum breakthrough

Researchers from Singtel and the National University of Singapore have succeeded in coordinating the paths of photons across a fibre network to drive wider adoption of quantum key distribution
April 16, 2019 16 Apr'19
Huawei cyber security chief John Suffolk: It’s not our culture to be aggressive

John Suffolk, global cyber security and privacy officer at China-based telecoms equipment supplier Huawei, tells Huawei Analyst Summit growth is the best answer to US criticism
April 16, 2019 16 Apr'19
Energy industry needs to up cyber defences, warns report

Cyber threat actors are advanced and persistent, but firms in the energy industry are using outdated systems and technology to save money, putting them at risk of cyber attacks, warns F-Secure report
April 15, 2019 15 Apr'19
How Palo Alto Networks fends off its cyber adversaries

Palo Alto Networks CIO Naveen Zutshi talks up the company’s approach in keeping threat actors at bay