News

IT risk management

• July 25, 2018 25 Jul'18

  Apache OpenWhisk users urged to patch

  IBM has patched vulnerabilities in its Cloud Functions service that is based on Apache OpenWhisk in response to vulnerability disclosures, and all other users are urged to do the same

• July 25, 2018 25 Jul'18

  Application attacks demand new security approach

  Applying security software updates is an ineffective way to deal with application layer cyber attacks and businesses should change their approach, security experts advise

• July 25, 2018 25 Jul'18

  Ransomware concern drops despite being top cost

  Fewer organisations are worried about ransomware even though it remains one of the most costly cyber attacks

• July 25, 2018 25 Jul'18

  Australian energy sector caught in security catch-22

  With regulators unwilling to accept security investments that would lead to higher tariffs, there is a chance that Australia’s National Energy Market could face increased cyber risks

• July 24, 2018 24 Jul'18

  Ramp up security to mitigate Office 365 attacks

  Public clouds tend to be more secure, but Office 365 has become a major target for attacks, which means internal IT security needs tightening

• July 24, 2018 24 Jul'18

  Top execs cyber security hypocrites, report shows

  There is a critical disconnect between the cyber security behaviour that top executives recommend and the way they behave themselves, while many firms do not know where their data lives and moves, a report reveals

• July 24, 2018 24 Jul'18

  Singapore public healthcare sector limits internet use

  Healthcare workers who require internet access will have to use separate internet workstations following an unprecedented attack on Singapore’s public healthcare system

• July 23, 2018 23 Jul'18

  Zero trust security model boosts business confidence

  Organisations that combine the zero trust security model with next-gen access are more confident about meeting access control challenges, a study shows

• July 20, 2018 20 Jul'18

  NCSC report underlines cyber threat for legal firms

  Legal firms are a top target for cyber attackers, the latest report from the National Cyber Security Centre shows, emphasising the need for comprehensive cyber defence capabilities

• July 20, 2018 20 Jul'18

  UK alerted to potential cyber risks of Huawei equipment

  A report has raised concerns about the shortcomings of Huawei engineering processes, which it says could put UK telecommunications networks at risk

• July 19, 2018 19 Jul'18

  Cyber criminals use fake domains to scam businesses

  UK police are warning businesses that cyber criminals are using fake domains to scam businesses out of hundreds of thousands of pounds

• July 19, 2018 19 Jul'18

  CNI sector lacks cyber security skills, government warned

  The UK’s critical national infrastructure sector is being negatively impacted by the lack of cyber security skills, a report warns

• July 19, 2018 19 Jul'18

  How Splunk is ‘splunking’ data for APAC enterprises

  Splunk’s regional vice-president talks up the company’s business strategy and how its customers are using big data analytics in security and IT operations

• July 18, 2018 18 Jul'18

  Retail cyber security spending ineffective as breaches rise

  Cyber attacks on the retail sector are increasing, and although most retailers plan to increase cyber security spending, planned investments are unlikely to be effective, a report reveals

• July 18, 2018 18 Jul'18

  Cyber security top priority for aircraft makers, says Airbus

  There is a high level of collaboration in the aircraft industry on cyber security, but not all other industries are at the same level, according to an industry veteran at multinational aerospace and defence firm Airbus

• July 18, 2018 18 Jul'18

  Singapore to bolster threat intelligence sharing in financial sector

  Singapore’s Cyber Security Agency has partnered the Financial Services Information Sharing and Analysis Centre to glean cyber threat intelligence for the country’s financial industry

• July 17, 2018 17 Jul'18

  Cryptominers plateau while backdoors shoot up

  Illicit cryptocurrency mining appears to be slowing down, but backdoors increased rapidly in the second quarter of the year, a report warns

• July 17, 2018 17 Jul'18

  A third of organisations do not have a security expert, survey shows

  Around a third of organisations are vulnerable to cyber attacks due to a lack of dedicated in-house cyber security experts, finds Gartner survey

• July 16, 2018 16 Jul'18

  Mobile devices lost in London underline security risk

  The security risk of lost mobile devices is underlined by the fact that almost 26,000 mobile phones and computing devices were lost in London in the past year alone

• July 16, 2018 16 Jul'18

  ITPS expands datacentre to support Azure Stack and HPC

  Datacentre company ITPS expands its County Durham facility to meet client needs for high performance computing and security

• July 16, 2018 16 Jul'18

  Russian cyber attacks show need for international rules

  Russian cyber attacks aimed at influencing foreign elections highlight the need for the international community to agree on rules of conduct and punitive consequences

• July 13, 2018 13 Jul'18

  Hackers increasingly targeting cloud infrastructure

  Cloud infrastructure is a growing target for cyber attackers because of available computing resources, as well as the repositories of valuable data, a report reveals

• July 12, 2018 12 Jul'18

  Cyber attackers cashing in on ‘hidden’ attack surface

  Cyber attackers are cashing in on organisations’ lack of visibility into all online interactions that can involve multiple third parties, a report reveals

• July 11, 2018 11 Jul'18

  White-hat hackers find record number of vulnerabilities

  White-hat hackers are finding more vulnerabilities than ever before, with crowdsourced security testing continuing to gain popularity, a report reveals

• July 11, 2018 11 Jul'18

  UK firms too confident about cyber security

  Three-quarters of UK companies say their cyber protection is above average, and nearly half think they are a “top performer” despite the growth in data breaches

• July 10, 2018 10 Jul'18

  Hidden costs of data breaches difficult to manage, study finds

  The full cost of “mega breaches” can be up to £264m, with the average UK data breach costing £2.69m, a study has revealed

• July 10, 2018 10 Jul'18

  Corporate networks vulnerable to insider attacks, report finds

  Researchers found that 100% of corporate networks tested in 2017 were vulnerable to insider attacks, with Wi-Fi networks and employees among the top areas of weakness

• July 09, 2018 09 Jul'18

  Collaborative taskforce launches security intelligence network

  BAE Systems, Vodafone, cyber security incubator CyLon and other partners have joined forces in unveiling a manifesto for safeguarding society in the digital age

• July 09, 2018 09 Jul'18

  Inside one of the world’s largest bug bounty programmes

  Trend Micro’s Zero Day Initiative may be the top external supplier of software bug reporting for Microsoft and Adobe, but that does not mean it purchases every type of bug

• July 06, 2018 06 Jul'18

  Infosec community welcomes bank sector focus on cyber resilience

  The information security community has welcomed regulators’ call on the banking industry to demonstrate their capability to respond to cyber attacks because it highlights the importance of cyber resilience for all businesses

• July 05, 2018 05 Jul'18

  Beware blockchain security blindspots, warns RSA

  Companies need to ensure that rushed blockchain and other new technology projects are not introducing security vulnerabilities by gaining granular visibility of network activity, according to RSA Security

• July 04, 2018 04 Jul'18

  Israel accuses Hamas of using spy apps to target soldiers

  Israel has accused Hamas of using apps to hijack soldiers’ phones to spy on them, and UK defence secretary demonstrates how effective that could be

• July 02, 2018 02 Jul'18

  Linux targeted by illicit cryptocurrency miners

  Cryptojacking is increasingly being used by cyber criminals to raise funds, Watchguard report reveals

• July 02, 2018 02 Jul'18

  HMRC deactivates record number of fake websites

  HM Revenue & Customs has removed more than 20,000 malicious websites in the past year, but warns people to stay alert to the threat from online fraudsters

• July 01, 2018 01 Jul'18

  Australian government grappling with digital transformation woes

  Digital transformation in Australia’s public sector has been beset by soaring rhetoric and vague aspirations by government, a new report reveals

• June 29, 2018 29 Jun'18

  UK government cyber security standard welcomed

  The information security community has welcomed the publication of the government’s minimum cyber security standard, which could be used by any organisation to improve its cyber defences

• June 29, 2018 29 Jun'18

  GDPR exposes breach reporting flaws

  In the month since the GDPR compliance deadline, it has become clear that many organisations are not well prepared for personal data breach notifications, says PwC’s data protection lead

• June 29, 2018 29 Jun'18

  NHS Digital signs three-year cyber security partnership with IBM

  Partnership with IBM aims to bolster cyber security responses and defences, including expanding NHS Digital’s Cyber Security and Operations Centre

• June 28, 2018 28 Jun'18

  Ticketmaster warns of third-party data breach

  Ticketmaster has warned of a potential data breach through malware found in a third-party customer support service, underlining the importance of supply chain security

• June 27, 2018 27 Jun'18

  Cyber criminals 'infect and collect' in cryptojacking surge

  Illicit cryptocurrency mining offers cyber criminals lower risk, higher efficacy and greater ease of making money, adding passive exploitation to ransomware extortion, data breach theft and fraud, a report reveals

• June 26, 2018 26 Jun'18

  British Muslim challenges use of intelligence databases for repeated police stops

  Muzaffar Abdullah is challenging police use of intelligence databases to repeatedly stop and question Muslims, after being arrested for refusing to answer questions under Schedule 7 of the Terrorism Act 2000. His lawyers say he had been stopped at ...

• June 26, 2018 26 Jun'18

  High-Tech Bridge bets on machine learning capabilities

  Machine learning has a great potential to drive the automation of some security tasks to free up information security professionals to do more strategic work, says High-Tech Bridge founder

• June 26, 2018 26 Jun'18

  Hospitality industry under siege from botnets

  The hospitality industry, including hotels, airlines and cruise lines, is the biggest target for cyber criminal botnet attacks that abuse credentials and overwhelm online systems, a report reveals

• June 26, 2018 26 Jun'18

  Norway’s National Security Agency warns IT industry about security obligations

  IT service providers serving organisations in Norway have received a timely reminder about their security obligations.

• June 25, 2018 25 Jun'18

  Most infosec pros would trust hacker-tested products

  Information security professionals are more likely to trust a product or company tested by hackers and most would respond to security reports from this community, a survey has revealed

• June 25, 2018 25 Jun'18

  Apple rejects claim of iPhone brute force hack

  Apple has rejected claims by a security researcher that he was able to bypass the iPhone defences against brute force passcode hacks

• June 22, 2018 22 Jun'18

  UK cyber skills in demand, says Dorset firm C3IA Solutions

  UK cyber security skills are in demand and there is a bright future in exporting them, according to Dorset-based firm C3IA Solutions

• June 22, 2018 22 Jun'18

  Firms look to automation for cloud security

  In the face of increasingly sophisticated and nation-state-sponsored cyber attacks, organisations are looking to managed security services and automation for security in the cloud and on-premise

• June 22, 2018 22 Jun'18

  IBM early findings on disastrous TSB core banking system migration released

  Report released by Treasury Committee criticises lack of rigour in preparation for core banking system migration, but TSB says report’s content is out of date

• June 21, 2018 21 Jun'18

  Infosec pros expect increase in nation state cyber attacks

  Most information security professionals expect a rise in nation state cyber attacks, with more than two-thirds preparing to defend against them