News

IT risk management

• February 08, 2018 08 Feb'18

  More POS malware detected in the wild

  The first new point of sale malware in many months is stealing data from the magnetic strips on payment cards, security researchers warn

• February 08, 2018 08 Feb'18

  Swisscom downplays data breach

  Telecommunication provider Swisscom has downplayed a data breach affecting around 800,000 customers, but security experts warn of potential long-term risks

• February 08, 2018 08 Feb'18

  Teenager suspected of crippling Dutch banks with DDoS attacks

  A large distributed denial of service attack on banks and other organisations in the Netherlands, first thought to emanate from Russia, is now thought to have been launched by a local teenager

• February 07, 2018 07 Feb'18

  Third party cyber breach risk set to rise

  Third party cyber security risk should always have been a priority, but this has never been more important than it is now in light of new technology risks and data protection regulations

• February 06, 2018 06 Feb'18

  Many UK firms ill-equipped to deal the cloud security risks

  Many UK firms do not have the security tools, processes and skills required to ensure their cloud implementations are secure, a security researcher and advocate warns

• February 05, 2018 05 Feb'18

  Lauri Love plans to use ‘internet as a force for good’

  Engineering student Lauri Love says he plans to help businesses fight cyber crime, after the court of appeal ruled that he can be tried in the UK for allegedly hacking US computer systems, rather than face extradition to the US

• February 05, 2018 05 Feb'18

  NCSC shows how first year affected cyber attacks on the UK

  Initiatives by the UK’s National Cyber Security Centre (NCSC) have detected and prevented millions of online commodity attacks, the agency’s first annual report shows

• February 05, 2018 05 Feb'18

  Appeals court rules Lauri Love will not be extradited over US hacking charges

  The lord chief justice, Lord Burnett, says 33-year-old engineering student Lauri Love will not be extradited to the US to face hacking charges, in a landmark legal decision, and the Crown Prosecution Service should bring proceedings against Love in ...

• February 05, 2018 05 Feb'18

  Researchers discover malicious Chrome extensions

  Security researchers have discovered a new botnet delivered via malicious Chrome extensions designed to hijack computers to mine cryptocurrency and record victims’ every move

• February 02, 2018 02 Feb'18

  GDPR: Don’t panic, but seize the chance to build trust, says ICO

  With the compliance deadline for the EU’s GDPR just 112 days away, the UK’s information commissioner has urged organisations not to panic, but to seize the chance to build trust with customers

• February 02, 2018 02 Feb'18

  Appeal Court to give landmark verdict on Lauri Love extradition

  The Appeal Court will decide whether Lauri Love, who has serious health issues, should be extradited to the US to face hacking charges, or face trial in the UK. The landmark case is the first test of legal protections introduced by Theresa May to ...

• February 02, 2018 02 Feb'18

  CIO interview: Aaron Powell, CDO, NHS Blood and Transplant

  NHS Blood and Transplant chief digital officer Aaron Powell explains why pushing a digital transformation agenda has a real impact on people’s lives

• February 02, 2018 02 Feb'18

  Faster data is a safer bet for risk exposure

  Betting platform service supplier FSB Technology (UK) has used GridGain’s in-memory database to support its existing PostgreSQL transactional system

• February 01, 2018 01 Feb'18

  Industrial cyber security continues to be poor, warns report

  The number of internet-accessible industrial control systems is increasing every year, researchers warn

• February 01, 2018 01 Feb'18

  Businesses urged to patch against cryptocurrency-mining botnet

  Researchers have uncovered further evidence that cyber criminals are cashing in on the popularity of cryptocurrencies, with the discovery of a global cryptocurrency-mining botnet

• February 01, 2018 01 Feb'18

  Dutch companies not ready for GDPR despite approaching deadline

  Organisations in the Netherlands are racing towards General Data Protection Regulation compliance, but there is still much to be done

• January 31, 2018 31 Jan'18

  Many businesses still using outdated security, says Troy Hunt

  Too many businesses are using out-of-date approaches to security, a world-renowned cyber security author and trainer warns

• January 31, 2018 31 Jan'18

  UK finance sector cyber security pros admit shocking practices

  UK financial sector IT security teams face immense challenges that are undermining business opportunities and continuity in financial services, a survey reveals

• January 30, 2018 30 Jan'18

  Cyber security salaries will rise 7% in 2018, says research

  Salaries for increasingly popular technology roles such as cyber security are set to rise over the next year

• January 30, 2018 30 Jan'18

  Government surveillance regime unlawful, court rules in Tom Watson case

  Appeal court ruled in favour of Labour MP Tom Watson in a legal battle with the government over the UK’s surveillance laws, leading to calls to rethink controversial Investigatory Powers Act

• January 30, 2018 30 Jan'18

  Most online retail sites put customers at risk of phishing

  Most top online retail sites fail to protect consumers from phishing attacks, a study has revealed

• January 29, 2018 29 Jan'18

  Millennials set to disrupt authentication, shows IBM study

  Young adults are lax on passwords, but are more comfortable than older generations with biometric and multifactor authentication, an IBM study shows

• January 29, 2018 29 Jan'18

  Hefty fines confirmed for CNI providers with poor cyber security

  The government has confirmed that critical infrastructure providers with poor cyber security face fines of millions of pounds as the National Cyber Security Centre publishes new guidance for the industry

• January 29, 2018 29 Jan'18

  Business cyber crime up 63%, UK stats show  

  Despite an overall decrease in fraud and computer misuse in 2017, the latest Office for National Statistics (ONS) reports show that incidents involving computer misuse and malware against business are way up

• January 26, 2018 26 Jan'18

  ICO launches data protection excellence award

  UK’s privacy watchdog launches data protection excellence award to mark international Data Protection Day, as security suppliers issue data protection tips and guidelines

• January 25, 2018 25 Jan'18

  IoT security risks need immediate action, says report

  The security failings in today’s internet-connected devices will only become more pervasive unless action is taken immediately, according to industry experts

• January 25, 2018 25 Jan'18

  Ransomware was most popular cyber crime tool in 2017

  Detections of ransomware increased by more than 90% last year compared with 2016

• January 25, 2018 25 Jan'18

  Security spending not on most-effective controls, report reveals

  While planned spending on IT security is up globally, so too are data breaches, with evidence mounting that hackers are hitting the bottom line, a global security survey reveals

• January 24, 2018 24 Jan'18

  Most UK organisations unaware of new data protection laws

  The UK’s digital and culture secretary is urging businesses and charities to prepare for stronger data protection laws in the light of new information

• January 24, 2018 24 Jan'18

  Sweden puts government IT outsourcing under increased scrutiny

  Government introduces rules to tighten security in IT outsourcing deals following a very public data leak last year

• January 24, 2018 24 Jan'18

  Dark web Dream Market drives cyber fraud industry

  An international operation shut down the AlphaBay and Hansa marketplaces in July 2017, but new ones have sprung up on the dark web, with one in particular helping to drive cyber fraud

• January 23, 2018 23 Jan'18

  Intel recalls botched Spectre fix

  The inventor of Linux, Linus Torvalds, vents his frustration and suggests Intel has no plans to fix Spectre flaw

• January 23, 2018 23 Jan'18

  Thousands of critical systems affected by serious security flaws

  Multiple and serious vulnerabilities have been found in a software management system widely used in corporate and industrial control environments, researchers warn

• January 23, 2018 23 Jan'18

  New controversies as Trump passes US Foreign Intelligence Surveillance Act

  The amended Foreign Intelligence Surveillance Act, which seeks to legitimise US surveillance on foreigners, has been signed off by president Trump

• January 22, 2018 22 Jan'18

  Taking complexity out of cyber security

  The key to improving the cyber security posture of organisations is to keep complexity at bay, according to a senior Microsoft executive

• January 22, 2018 22 Jan'18

  Judge will take time to seek answers from EU court over Max Schrems Facebook privacy fight

  The Irish High Court will take time to decide what questions to put before the European Court of Justice in a case with significant implications for EU and US trade and the privacy of EU citizens

• January 22, 2018 22 Jan'18

  European Parliament votes to restrict exports of surveillance equipment

  European Parliament votes to tighten export controls to restrict supply of surveillance and encryption technology to states with poor human rights records amid fears British companies may not have to comply after Brexit

• January 22, 2018 22 Jan'18

  Cyber attackers exploiting trust in FTP servers

  Some cyber attackers are exploiting trust in FTP servers to distribute malware, security researchers warn

• January 22, 2018 22 Jan'18

  Powerful Zyklon malware exploiting MS Office flaws

  Cyber attackers are exploiting three recently discovered vulnerabilities in Microsoft Office to spread multifunction Zyklon malware, security researchers warn

• January 18, 2018 18 Jan'18

  Create security culture to boost cyber defences, says Troy Hunt

  Security suffers when there is tension between software developers and security professionals, but it is common in many organisations, says world-renowned security blogger and trainer

• January 18, 2018 18 Jan'18

  Cyber attackers upped their game in 2017, warns report

  Cyber attackers ranging from criminals to nation states have upped their game in the past year, “moving the needle” in terms of tactics, techniques and procedures, a report by a cyber security firm warns

• January 17, 2018 17 Jan'18

  North Korean hackers tied to cryptocurrency attacks in South Korea

  North Korea's Lazarus Group targeted South Korean cryptocurrency exchanges and users in late 2017, but may soon go after exchanges and users in other countries, warns report

• January 17, 2018 17 Jan'18

  Davos: Disintegration of the internet could create economic turmoil

  Politicians and business leaders will discuss the risks posed by fake news, cyber attacks, and artificial intelligence to jobs, political stability and global security, at the World Economic Forum in Davos

• January 16, 2018 16 Jan'18

  Vulnerability exploit report shows importance of patching

  Latest vulnerability exploit report by security firm AlienVault shows the most popular vulnerabilities remain exploited for several years

• January 16, 2018 16 Jan'18

  Skygofree Android spyware active since 2014, say researchers

  Powerful, highly advanced spyware has been targeting Android mobiles for the past four years, security researchers have discovered

• January 16, 2018 16 Jan'18

  Beware fake Meltdown and Spectre patches

  Security experts have warned that cyber attackers will be quick to use the Meltdown and Spectre exploits, but the first attempt to capitalise on them has come in the form of fake updates

• January 16, 2018 16 Jan'18

  Most UK enterprise mobiles not patched for Meltdown and Spectre

  Very few UK enterprise mobile devices have been patched against the recently discovered Meltdown and Spectre exploits and almost a quarter cannot be patched, a study shows

• January 12, 2018 12 Jan'18

  Call for statutory regulation of police number plate cameras amid concerns over accuracy

  The UK’s automatic number plate recognition database – one the largest non-military data-gathering systems – records up to 1.2 million false readings of number plates every day. It should be subject to statutory regulation, says an independent ...

• January 12, 2018 12 Jan'18

  Intel makes security-first pledge

  As it scrambles to deal with the Meltdown and Spectre processor exploits, Intel has made a series of security commitments

• January 12, 2018 12 Jan'18

  F-Secure highlights another critical Intel security issue

  As Intel scrambles to issue security updates to address the Meltdown and Spectre exploits, researchers have highlighted another, unrelated, critical security issue that could affect millions of corporate laptops