News

IT risk management

• November 20, 2015 20 Nov'15

  Coalition of top tech firms opposes weakened encryption

  Weakening security with the aim of advancing security simply does not make sense, a coalition of top tech firms tells US president Barack Obama

• November 18, 2015 18 Nov'15

  Cyber security mindset needs to change, says report

  Government organisations are prime targets for cyber attacks, leading to increased importance on robust information security, according to a report by Intel Security and the Digital Government Security Forum

• November 17, 2015 17 Nov'15

  Irish hospital to offer patient access to records by November 2016

  Galway Clinic plans a big-bang launch of its Meditech electronic medical record system, which includes a patient portal and mobile app

• November 11, 2015 11 Nov'15

  Snoopers’ charter will force ISPs to raise broadband prices

  The Science and Technology Select Committee hears that ISPs may be forced to put up their service charges to cover the cost of retaining communications data, should the Investigatory Powers Bill become law

• October 29, 2015 29 Oct'15

  M&S data breach forces retailer to temporarily suspend service

  A glitch that allowed online customers to see each others' details forced retailer Mark & Spencer to take its website offline while it resolved the issue

• October 28, 2015 28 Oct'15

  Lack of data classification very costly to firms, says survey

  Most data retained by organisations is not identified or classified and gobbles budget spent on storage, as well as being potentially non-compliant, reveals Veritas-sponsored survey

• October 21, 2015 21 Oct'15

  Infosec pros should start preparing for the future, say experts

  Information security professionals need to grow their skills, engage with the business, increase security awareness, set business goals and tailor their messages, says a panel of experts

• October 12, 2015 12 Oct'15

  Encryption is a double-edged sword, says Blue Coat

  Seven more security suppliers join Blue Coat encrypted traffic management programme amid fresh warnings of attackers using encryption to hide malicious activity

• September 29, 2015 29 Sep'15

  120-day patching gap puts many firms at risk of cyber attack, study shows

  The probability of a vulnerability being exploited hits 90% between 40-60 days after discovery, but many firms are taking up to 60 days beyond that to patch, while others are failing to patch at all, a study shows

• September 21, 2015 21 Sep'15

  Department for Culture, Media and Sport takes over responsibility for data protection policy

  Government transfers responsibility for data protection policy and ICO oversight from Ministry of Justice (MOJ) to Department for Culture, Media and Sport (DCMS)

• September 21, 2015 21 Sep'15

  Health chief 'should be held to account' for whistleblow errors

  Former nurse and clincial commissioner Bernie Rochford claims unfair dismissal after blowing the whistle on IT problems which put patient care at risk

• September 18, 2015 18 Sep'15

  Public-private co-operation in the Nordics tackles growing cyber crime threat

  Nordic governments and businesses are putting cyber security at the centre of their planning as threats increase

• September 16, 2015 16 Sep'15

  BT launches ethical hacking service for bankers

  BT introduces a certified Crest Star ethical hacking test service for financial services customers

• September 15, 2015 15 Sep'15

  Most DDoS attacks hiding something more sinister, Neustar warns

  Smaller DDoS attacks can be more dangerous than a powerful attack that knocks a company offline but does not install malware or steal data, warns Neustar

• September 15, 2015 15 Sep'15

  NHS trust denies bullying and intimidation of IT whistleblower

  Managers were already aware of whistleblower's concerns about the accuracy of NHS Southwark's data, tribunal hears

• September 11, 2015 11 Sep'15

  Security industry welcomes GCHQ password guidelines

  GCHQ's guidance on password policy covers some of the most pressing issues facing UK businesses and employees today, according to Skyhigh Networks

• September 11, 2015 11 Sep'15

  DD4BC cyber extortion gang adds social media to arsenal

  Cyber extortion gang DD4BC is using social media campaigns to garner more attention for its ability to create service disruptions by publicly embarrassing large organisations

• September 10, 2015 10 Sep'15

  Researchers discover Android PIN locker ransomware

  Researchers say LockerPIN is a self-defending, aggressive piece of ransomware currently targeting Android devices, mainly in the US

• September 09, 2015 09 Sep'15

  Security pros failing to address digital certificate risks, survey shows

  Even though 90% of security professionals believe a leading CA will be compromised in next two years, only 13% have existing automation to deal with that happening

• September 09, 2015 09 Sep'15

  Conventional security measures hit productivity, study shows

  Most IT professionals say context-aware security would improve productivity without compromising security, a survey from Dell reveals

• September 09, 2015 09 Sep'15

  Security vulnerability management more than patching, warns Secunia

  Keeping track of what makes an IT environment vulnerable is an ongoing and complex task, according to Secunia

• September 04, 2015 04 Sep'15

  US State Department plans cyber security playbook

  The US State Department issues a request for information to determine the capabilities of commercial industry to provide and maintain a cyber security playbook

• September 01, 2015 01 Sep'15

  DDoS attack on NCA highlights need to be prepared, says Barracuda Networks

  A Lizard Squad DDoS attack the NCA says is a fact of life highlights the need for organisations to be prepared, according to Barracuda Networks

• August 27, 2015 27 Aug'15

  Rapid7 calls on router makers to eliminate backdoors

  Until manufacturers stop using default passwords, we will continue to see opportunistic attacks on home and small business routers, says Rapid7's Tod Beardsley

• August 26, 2015 26 Aug'15

  Many firms not getting to grips with third-party data security risk

  Supply chain data security risk is pervasive, but being unable to deal with it is down to basic failings, says a cyber risk expert

• August 20, 2015 20 Aug'15

  Premiership Rugby scores security and efficiency with Intralinks

  By setting access controls, Premiership Rugby can ensure that its partners get quick access only to role-appropriate content

• August 16, 2015 16 Aug'15

  Mobile phone users at risk as hackers bug and track victims

  An investigation by Australian TV show 60 Minutes demonstrates how hackers based thousands of miles away in Germany were able to record the calls of an Australian senator and track his movements

• August 10, 2015 10 Aug'15

  BlackHat 2015: Industrial hacking - the untold story

  Hackers have been penetrating industrial control systems for at least a decade for extortion, yet little is known about how they gain access

• August 03, 2015 03 Aug'15

  Why the time is ripe for security behaviour analytics

  Recent months have seen an uptick in announcements by security suppliers around behavioural analytics, but what is driving this trend?

• July 29, 2015 29 Jul'15

  A third of employees will sell company data if the price is right, study reveals

  For £5,000, a quarter of employees polled said they would sell confidential company data, and risk both their job and criminal convictions

• July 22, 2015 22 Jul'15

  Jeep hack raises questions about responsibility for security

  The hack of a Jeep raises the question whether users or car manufacturers should be responsible for protecting against cyber attackers

• July 21, 2015 21 Jul'15

  Information security governance maturing, says Gartner

  Increasing awareness of the impact of digital business risks, coupled with high levels of publicity regarding cyber security incidents, is making IT risk a board-level issue, says Gartner

• July 17, 2015 17 Jul'15

  United Airlines begins bug bounty payouts

  United Airlines has paid out the maximum award to two hackers, which means the flaws are likely to be remote code execution vulnerabilities

• July 14, 2015 14 Jul'15

  Symantec bets on simplicity, cloud and mobile

  Symantec is not trying to be all things to all people, but is instead focusing on threats and protecting information in the mobile and cloud environments

• July 03, 2015 03 Jul'15

  Wi-Fi enhances guest experience and profitability for Belgian theme park

  Bobbejaanland, one of the largest theme parks in Belgium, is using a Fortinet Wi-Fi network to offer visitors access on the go, and improve its management capabilities

• July 02, 2015 02 Jul'15

  How Deutsche Telekom plans to challenge AWS and Google in the cloud

  German telco Deutsche Telekom wants to evolve into the public cloud and plans to beat sector giants such as Amazon and Google at their own game

• June 17, 2015 17 Jun'15

  DD4B cyber extortion gang ramps up operations

  Cyber criminals using DDoS attacks to extort funds from victims are carrying out more attacks despite a $26,000 bounty

• May 20, 2015 20 May'15

  BT Openreach turns to Crimestoppers to catch cable thieves

  Openreach extends its partnership with crime-fighting charity Crimestoppers to tackle cable theft

• May 11, 2015 11 May'15

  PSNGB rebrands to drive information sharing across PSN

  PSNGB, the trade association set up to promote the Public Services Network, rebrands itself as Innopsis and says its work is far from over

• May 07, 2015 07 May'15

  Businesses should prepare for black swans, says resiliency consultant

  While black swan events are random and unexpected, businesses can still prepare for them, according to a resiliency consultant

• May 07, 2015 07 May'15

  Future IAM will need to be broader, says Martin Kuppinger

  Identity and access management systems need to look at all forms of identity, not just employees or users, says KuppingerCole analyst

• April 29, 2015 29 Apr'15

  Vodafone sends network in a backpack to Nepal earthquake zone

  Vodafone’s charitable arm, the Vodafone Foundation, deploys instant mini networks to help restore communications in quake-hit Nepal

• April 23, 2015 23 Apr'15

  Mobile malware overhyped, says security company Damballa

  Mobile internet users are 1.3 times more likely to get struck by lightning than infected by mobile malware, research by security firm Damballa finds

• April 22, 2015 22 Apr'15

  Destructive cyber attacks making security a business concern, says Microsoft

  Destructive cyber attacks are driving a fundamental shift in the information security market, according to Microsoft

• April 14, 2015 14 Apr'15

  Security risk potential linked to young, mobile users

  A study conducted by wireless supplier Aruba Networks has identified a distinct cohort of high-risk, security-agnostic workers

• April 08, 2015 08 Apr'15

  Alleged White House hack highlights typical security failings, say experts

  The alleged penetration of sensitive White House computer networks highlights typical security failings, say information security experts

• March 31, 2015 31 Mar'15

  DDoS losses potentially £100k an hour, survey shows

  DDoS attacks could expose 40% of businesses to losses of £100,000 or more an hour at peak times, a survey shows

• March 26, 2015 26 Mar'15

  Samsung targets business with Microsoft tools integration

  Samsung has pre-installed Microsoft OneNote, OneDrive, and Skype on the new Galaxy S6 and Galaxy S6 edge, as it expands into business

• March 26, 2015 26 Mar'15

  UK attacks on crypto keys and digital certificates endemic

  All UK security professionals polled in a global survey have responded to attacks on keys and certificates in past two years

• March 20, 2015 20 Mar'15

  Home devices threaten enterprise data security, warn researchers

  Poor or lacking security on ADSL routers and other devices used by teleworkers a threat to global enterprise information security