News

IT risk management

June 06, 2017 06 Jun'17
Mainframe blindspots expose companies to insider threats

More than three-quarters of CIOs say their mainframe is more secure than other systems, but most admit they are still exposed to insider threats
June 06, 2017 06 Jun'17
UK firms stockpiling bitcoins for ransomware attacks

Large UK firms are prepared to pay out more than £136,000 on average to cyber criminals who launch ransomware attacks, a survey has revealed
June 01, 2017 01 Jun'17
Enterprises struggle with emergency patching

Companies are struggling to maintain emergency patch cycles, despite the fact that enterprise reliance on legacy systems often means emergency patches are an everyday fact of life, a survey shows
May 31, 2017 31 May'17
WannaCry shows validity of risk-based security, says RSA head

WannaCry and other recent cyber attacks underline the importance of adopting a risk-based approach to security, says RSA president

May 31, 2017 31 May'17
Shadow Brokers prepares zero-day subscription service

Businesses may face an onslaught of zero-day attacks soon as the group that leaked the NSA exploits used in the WannaCry ransomware attacks prepares to release more stolen code
May 26, 2017 26 May'17
People can be strongest link in cyber security, says NCSC

People are often seen as the weakest link when it comes to cyber security, but that must change, says the National Cyber Security Centre
May 26, 2017 26 May'17
EternalRocks author throws in the towel after media attention

Security researcher who discovered worm that could have bigger impact than WannaCry says the author seems to have given up
May 24, 2017 24 May'17
Singapore government to spend S$2.4bn on technology initiatives

Funding will go towards building a national sensor platform, boosting the government’s cyber security capabilities and driving the use of robots
May 24, 2017 24 May'17
Interview: Nick Bleech, head of information security, Travis Perkins

Last year, Travis Perkins implemented Splunk to help it to respond more quickly to security threats. Now, the business is looking into machine learning and a single customer view
May 23, 2017 23 May'17
Economic and political uncertainty drives organisations to rethink IT strategies

CIO job satisfaction reaches a three-year high as organisations hire more IT staff and invest in innovative digital technology

May 23, 2017 23 May'17
EternalRocks worm combines seven leaked NSA attack tools

Hard on the heels of the WannaCry ransomware attacks, a researcher has found a worm that combines four NSA exploits and associated attack tools, including EternalBlue used by WannaCry
May 22, 2017 22 May'17
Windows 7 accounts for most WannaCry infections

Statistics show that computers running Windows 7 accounted for the biggest proportion of machines infected with the WannaCry ransomware, while NHS suppliers are blamed for hampering patching by NHS trusts
May 19, 2017 19 May'17
Command and control communications key to detecting threats

Malware command and control (C&C) communications are key to detecting advanced threats, according to a security researcher
May 18, 2017 18 May'17
Strong cyber security posture reduces impact of breaches

There is a direct correlation between data breaches and falls in stock prices, but the impact is lighter on companies with good cyber security, a study has revealed
May 12, 2017 12 May'17
Five cyber security imperatives for all companies

There are five things all companies should ensure they are doing in terms of cyber security
May 09, 2017 09 May'17
Cognitive security is the future, says Martin Kuppinger

Modern computing capabilities combined with cognitive technology has huge potential for tackling unknown attack patterns and addressing the security skills shortage, says Martin Kuppinger
May 04, 2017 04 May'17
Testing is key to IoT security, says researcher

Building an effective testing process across all elements associated with a product is key to securing the internet of things, according to a researcher in the field
May 02, 2017 02 May'17
UBS applies data protection for compliance and competitive advantage

Swiss bank UBS aims to get greater value out of investments in sensitive data protection systems by using its security capabilities as a differentiator
May 02, 2017 02 May'17
Intel urges business to patch critical remote-execution flaw

Intel advises business customers to apply a security update for some versions of its administration firmware for vPro processors to fix a remote execution flaw
April 20, 2017 20 Apr'17
Mastercard integrates biometric technology into cards

MasterCard tests out biometric technology embedded into payment cards, with further trials in Europe planned
April 20, 2017 20 Apr'17
Banks suffer average of 85 attempted serious cyber attacks a year, and one-third are successful

Banks face daily cyber attacks, many of which succeed in stealing data, research finds
April 20, 2017 20 Apr'17
Human interaction still key to cyber attacks, study reveals

An analysis of threats faced by organisations in the first quarter of 2017 reveals that cyber attackers still rely heavily on user interaction
April 19, 2017 19 Apr'17
Skype most popular communication channel for cyber criminals

The cyber criminal network is truly global and collaborative, making use of popular messaging services, a study has revealed
April 13, 2017 13 Apr'17
Enterprise adoption of encryption accelerating, study shows

Cloud adoption and escalating threats are accelerating adoption of encryption, a study has revealed
April 13, 2017 13 Apr'17
Six key security weaknesses in industrial systems

Organisations should mitigate six key vulnerabilities in industrial control systems to reduce the risk of cyber attack, warns security firm FireEye
April 11, 2017 11 Apr'17
Security as a service on the rise in the UAE

Organisations in the United Arab Emirates are increasingly turning to security services
April 10, 2017 10 Apr'17
IAM a core building block for GDPR compliance

Identity and access management is key to enabling organisations to become compliant with the GDPR, increase security and improve customer relationships, according to a senior analyst at KuppingerCole
April 10, 2017 10 Apr'17
Outsourcing service left Scottrade Bank customer data exposed

Mistake by outsourcing service provider left the details of 20,000 Scottrade Bank customers vulnerable to theft
April 06, 2017 06 Apr'17
Interview: F-Secure’s Mikko Hyppönen on the Nordics, Russia and the internet of insecure things

Computer Weekly sat down with Finnish cyber security expert Mikko Hyppönen to talk about security in the Nordics, Russia and the trouble with connected devices
April 04, 2017 04 Apr'17
Chinese hacking group targeted firms through IT MSPs

Security researchers have uncovered a China-based cyber espionage campaign that targeted IT services firms and their customers, underlining the need for supply chain security
March 31, 2017 31 Mar'17
How IT can be more defensible

A renowned Google engineer calls for the IT industry to build devices capable of being defended and for enterprises to take a balance sheet approach in managing risks
March 29, 2017 29 Mar'17
Non-malware attacks pose bigger threat than malicious software

Malware-free cyber attacks are on the rise and artificial intelligence in cyber security is still far from replacing humans, according to most cyber security researchers
March 28, 2017 28 Mar'17
Threats grow in Saudi Arabia’s cyber sector

Saudi Arabia's wealth makes it an attractive target for cyber criminals, but what have been the recent trends in cyber crime?
March 20, 2017 20 Mar'17
IBM cognitive assistant to help manage and secure devices

IBM has announced a cognitive assistant powered by IBM Watson to help businesses manage and secure endpoints, including devices making up the internet of things
March 15, 2017 15 Mar'17
APAC topped the world in number of cyber attacks in 2016

The prevalent use of pirated software is one of the possible reasons for the APAC region’s poor showing in Trend Micro’s annual study on the state of cyber security
March 14, 2017 14 Mar'17
CIO interview: Simon McCalla, Nominet

Nominet, the registry for more than 10 million of the UK’s internet domains, is expanding into the internet of things and internet security services
March 10, 2017 10 Mar'17
Paying ransomware attackers perpetuates attacks, says researcher

Continually evolving ransomware is among the threats organisations need to factor into their cyber defences in 2017, but only once they have taken care of the basics, says Kaspersky Lab researcher
March 08, 2017 08 Mar'17
WhatsApp, Signal, ProtonMail safe from CIA hacking tools

Top secure messaging and email apps are said to be safe from CIA hacking tools, but organisations are urged to assess their own vulnerability if the tools were to fall into the hands of cyber criminals
March 07, 2017 07 Mar'17
Retail industry steps up the fight against rising cyber threats

UK retail body BRC publishes the first of its kind step-by-step guide on how to manage cyber security threats
March 06, 2017 06 Mar'17
More than a million Gmail and Yahoo account credentials on sale

Usernames, email addresses and plaintext passwords of more than a million Yahoo and Gmail accounts are reportedly on sale on the dark web, posing a threat to corporate security
February 27, 2017 27 Feb'17
Citizen Love: the story of an ordinary family's fight with the US government

Finnish documentary makers Raimo Uunila and Lauri Danska tell the behind-the-scenes story of activist Lauri Love’s battle with the US government – and the impact of the case on his family
February 24, 2017 24 Feb'17
Banking malware, DDoS, ransomware and CEO fraud top UK cyber threats

Businesses need to be aware of the value of their data, how that data is likely to be attacked, and how to defend against particular attacks, says leading UK cyber cop
February 17, 2017 17 Feb'17
RSAC17: Geopolitical changes driving encryption usage, survey shows

More organisations are planning to deploy encryption in response to geopolitical changes, but confidence in organisations’ ability to secure and protect encryption is low, a survey shows
February 15, 2017 15 Feb'17
RSAC17: Infosec pros must help create business-driven security, says RSA CTO

The inability to draw connections between security details and business metrics is one of the biggest challenges facing most companies, according to RSA CTO Zulfikar Ramzan
February 13, 2017 13 Feb'17
MobileIron: Corporate IT policy and mobile device security are mismatched

MobileIron report identifies a gap between security policy and the actual deployment of that policy on mobile devices
February 08, 2017 08 Feb'17
How a Dublin court case could derail EU-US data privacy agreements

The Irish Commercial Court will consider whether privacy protection offered by standard contractual clauses for data transfers to the US from Europe is legally valid
January 31, 2017 31 Jan'17
Data breach costs exceed 20% of revenue

The cost of data breaches topped 20% of revenue in the past year as cyber attacks became more sophisticated and defenders struggled to keep pace, the latest Cisco security report shows
January 23, 2017 23 Jan'17
Lloyds Bank hit by massive DDoS attack

It has emerged that UK banks have been targeted by a DDoS campaign that affected services intermittently only at the Lloyds Banking Group
January 13, 2017 13 Jan'17
Davos: Technology poses new risks to jobs, economies and society

Politicians and business leaders will discuss the risks posed by technology to jobs, political stability and cyber security at the World Economic Forum in Davos
January 12, 2017 12 Jan'17
Flawed GoDaddy security certificates show need for control

Vulnerabilities in digital security certificates highlight the need for organisations to be able to exercise more control over those certificates