News

IT risk management

• May 03, 2024 03 May'24

  Why IAM is central to cyber security

  BeyondTrust’s chief security strategist talks up the importance of identity and access management, and the role of cyber insurance in driving security improvements

• May 02, 2024 02 May'24

  NCSC updates warning over hacktivist threat to CNI

  The NCSC and CISA have warned about the evolving threat from Russia-backed hacktivist threat actors targeting critical national infrastructure, after a number of American utilities were attacked

• May 02, 2024 02 May'24

  BBC instructs lawyers over allegations of police surveillance of journalist

  Lawyers for the BBC have written to the Investigatory Powers Tribunal over allegations that the Police Service of Northern Ireland spied on investigative journalist Vincent Kearney

• May 02, 2024 02 May'24

  How Okta is fending off identity-based attacks

  Okta has been bolstering the security of its own infrastructure and building new tools to scan customer environments for vulnerable identities, among other efforts to fend off identity-based attacks

• May 01, 2024 01 May'24

  EMEA CISOs must address human factors behind cyber incidents

  The 17th annual Verizon report on data breaches makes for sobering reading for security pros, urging them to do more to address the human factors involved in cyber incidents, and highlighting ongoing issues with zero-day patching

• May 01, 2024 01 May'24

  Autonomous weapons reduce moral agency and devalue human life

  Military technology experts gathered in Vienna have warned about the detrimental psychological effects of AI-powered weapons, arguing that implementing systems of algorithmic-enabled killing dehumanises both the user and the target

• April 30, 2024 30 Apr'24

  Global majority united on multilateral regulation of AI weapons

  Foreign ministers and civil society representatives say that multilateralism is key to controlling the proliferation and use of AI-powered autonomous weapons, but that a small number of powerful countries are holding back progress

• April 30, 2024 30 Apr'24

  Bad bot traffic in Australia grew 23% in 2023

  Traffic from bad bots that perform malicious tasks accounted for 30.2% of Australia’s internet traffic in 2023

• April 29, 2024 29 Apr'24

  UK’s long-awaited device security law kicks in

  The Product Security and Telecommunications Infrastructure Act has become law across the UK, enforcing basic cyber security standards across connected products sold to the public

• April 25, 2024 25 Apr'24

  Zero trust is a strategy, not a technology

  Zero-trust security should be seen as a strategy to protect high-value assets and is not tied to a specific technology or product, says the model’s creator John Kindervag

• April 24, 2024 24 Apr'24

  Cyber training leader KnowBe4 to buy email security firm Egress

  Security awareness training and phishing simulation specialist KnowBe4 is to buy email security expert Egress

• April 24, 2024 24 Apr'24

  Education will be key to good AI regulation: A view from the USA

  Computer Weekly sat down with Salesforce’s vice-president of federal government affairs, Hugh Gamble, to find out how the US is forging a path towards AI regulation, and how things look from Capitol Hill

• April 23, 2024 23 Apr'24

  GooseEgg proves golden for Fancy Bear, says Microsoft

  Microsoft’s threat researchers have uncovered GooseEgg, a never-before-seen tool being used by Forest Blizzard, or Fancy Bear, in conjunction with vulnerabilities in Windows Print Spooler

• April 23, 2024 23 Apr'24

  Lords split over UK government approach to autonomous weapons

  During a debate on autonomous weapons systems, Lords expressed mixed opinions towards the UK government’s current position, including its reluctance to adopt a working definition and commit to international legal instruments controlling their use

• April 22, 2024 22 Apr'24

  Former Sellafield consultant claims the nuclear complex tampered with evidence

  Whistleblower Alison McDermott claims former employer Sellafield tampered with metadata in letters used in evidence during an employment tribunal

• April 22, 2024 22 Apr'24

  Fujifilm plans to ‘make tape easy’ with Kangaroo SME appliance

  Fujifilm to add 100TB SME-focused Kangaroo tape infrastructure in a box to existing 1PB offer, as energy efficiency and security of tape make it alluring to customers

• April 22, 2024 22 Apr'24

  NCSC announces PwC’s Richard Horne as CEO

  Former PwC and Barclays cyber chief Richard Horne set to join UK’s National Cyber Security Centre as CEO

• April 22, 2024 22 Apr'24

  IT leaders hiring CISOs aplenty, but don’t fully understand the role

  Most businesses now have a CISO, but perceptions of what CISOs are supposed to do, and confusion over the value they offer, may be holding back harmonious relations, according to a report

• April 19, 2024 19 Apr'24

  Tech companies operating with opacity in Israel-Palestine

  Tech firms operating in Occupied Palestinian Territories and Israel are falling “woefully short” of their human rights responsibilities amid escalating devastation in Gaza, says Business & Human Rights Resource Centre

• April 18, 2024 18 Apr'24

  CSA warns of emerging security risks with cloud and AI

  Few users appreciate the security risks of cloud and have the expertise to implement the complex security controls, says CSA chief executive David Koh

• April 18, 2024 18 Apr'24

  TUC publishes legislative proposal to protect workers from AI

  Proposed bill for regulating artificial intelligence in the UK seeks to translate well-meaning principles and values into concrete rights and obligations that protect workers from systems that make ‘high-risk’ decisions about them

• April 17, 2024 17 Apr'24

  Mandiant formally pins Sandworm cyber attacks on APT44 group

  Mandiant has formally attributed a long-running campaign of cyber attacks by a Russian state actor known as Sandworm to a newly designated advanced persistent threat group to be called APT44

• April 16, 2024 16 Apr'24

  US provides assurances over extradition of WikiLeaks founder Julian Assange

  Extradition of the WikiLeaks founder moves a step closer after the US government gives diplomatic assurances over his treatment in the US. Assange supporters accuse the US of ‘weasel words’

• April 16, 2024 16 Apr'24

  CISOs not yet convinced to invest in AI

  CISOs say their eyes are fixed firmly on threats like ransomware and supply chain attacks, and while AI is becoming a threat that needs to be dealt with, it’s not yet an immediate spending priority

• April 16, 2024 16 Apr'24

  CW Innovation Awards: Balancing security and user experience

  The National University of Singapore’s Safe initiative has strengthened the security of IT systems and end-user devices while prioritising user experience through passwordless access

• April 15, 2024 15 Apr'24

  More social engineering attacks on open source projects observed

  In the wake of the recent XZ Utils scare, maintainers of another open source project have come forward to say they may have experienced similar social engineering attacks

• April 15, 2024 15 Apr'24

  EU’s AI Act fails to protect the rule of law and civic space

  Analysis reveals that the AI Act is ‘riddled with far-reaching exceptions’ and its measures to protect fundamental rights are insufficient

• April 12, 2024 12 Apr'24

  Apple iPhone security alert renews spyware concerns

  An Apple security alert received by users in 92 countries raises fresh fears over ongoing campaigns by users of mercenary spyware products

• April 12, 2024 12 Apr'24

  UK in critical need of regulation to fight misinformation online

  Misinformation, where it is generated by AI, poses a serious threat due to the ease with which plausible false content can be created and spread

• April 11, 2024 11 Apr'24

  Government dismisses Lords’ concerns over facial recognition

  UK government is claiming police forces’ use of live facial recognition is comprehensively covered by existing laws, in response to a Lords investigation that found police lacked a clear legal basis to deploy it

• April 10, 2024 10 Apr'24

  Salesforce helps customers establish bug bounty programmes

  Salesforce has added new learning content to its Trailhead platform designed to help customers develop their own bug bounty programmes

• April 10, 2024 10 Apr'24

  Patch Tuesday: Windows Server 2008 receives emergency security patch

  Support for the OS ended in 2020, but four years on and there's a live exploit of a security flaw that impacts all Windows users

• April 09, 2024 09 Apr'24

  UK plc failing on multiple cyber measures

  Government report shows 50% of businesses and 32% of charities reported a cyber attack or breach in the past 12 months and organisations across the UK are failing on multiple cyber measures

• April 09, 2024 09 Apr'24

  Public worried by police and companies sharing biometric data

  More than half of the British public do not feel comfortable with police forces sharing biometric data with the private sector, including facial recognition images, to tackle crimes such as shoplifting

• April 09, 2024 09 Apr'24

  Is a cyber arms control treaty out of reach?

  The world needs cyber arms control more than ever, but the challenges facing a multilateral agreement will be hard to surmount, according to researchers at Germany’s Digital Society Institute

• April 08, 2024 08 Apr'24

  What Cisco’s Splunk acquisition means for APAC customers

  APAC organisations can expect better visibility and insights into their networks and applications along with automation and response capabilities to improve their digital resilience

• April 05, 2024 05 Apr'24

  China ramps up use of AI misinformation

  Microsoft researchers have identified a growing pattern of AI-laced misinformation and political interference coming from Chinese threat actors

• April 05, 2024 05 Apr'24

  How Oracle Red Bull Racing guards against cyber threats

  The F1 team is tapping managed security services, conducting penetration tests and improving security awareness among employees to fend off cyber threats such as phishing and ransomware

• April 04, 2024 04 Apr'24

  Changes needed for SOCs and CSIRTs, claims Dutch research institute

  Cyber security specialists need a game-changer to keep up with their adversaries, who increasingly use automation and AI for their attacks

• April 04, 2024 04 Apr'24

  Obituary: Professor Ross Anderson, pioneer in security engineering and campaigner

  Ross Anderson, a titan in the field of security engineering and campaigner for privacy and security, has passed away

• April 03, 2024 03 Apr'24

  RDP abused in over 90% of cyber attacks, Sophos finds

  Threat actors continue to see great success using simple, tried and tested methods, and many defenders are failing to do the basics

• March 29, 2024 29 Mar'24

  Organisations getting better at spotting identity fraud

  As the barriers to committing identity fraud continue to drop, organisations should consider more sophisticated technical measures to successfully up their game, according to a report

• March 28, 2024 28 Mar'24

  UK plc going backwards on cyber maturity, Cisco report claims

  Fewer UK organisations believe their cyber security postures have reached a mature level than did so 12 months ago, as they struggle to keep up with new challenges and a fast-evolving threat landscape

• March 28, 2024 28 Mar'24

  Sellafield to be prosecuted over alleged cyber compliance failure

  Sellafield Ltd, the organisation responsible for cleaning up and decommissioning the UK's largest nuclear waste site, is to be prosecuted over alleged cyber security failings dating back to 2019

• March 26, 2024 26 Mar'24

  Shareholders win when businesses do better at cyber

  The more advanced a company’s cyber security performance, and the more engaged its board is with security issues, the greater the return for shareholders, a report has found

• March 26, 2024 26 Mar'24

  NCSC reaffirms guidance for those at risk of Chinese state hacking

  As the UK and US governments announce sanctions and indictments of a Chinese state threat actor, the NCSC has reiterated its security advice for individuals at risk of being targeted for espionage purposes

• March 25, 2024 25 Mar'24

  Chinese hackers responsible for two ‘malicious’ cyber campaigns against UK

  Government sanctions two Chinese nationals and a Chinese company identified as responsible for cyber campaigns against government officials and members of parliament

• March 25, 2024 25 Mar'24

  Britain’s democracy under threat from Chinese cyber attackers, government warns

  The deputy prime minister, Oliver Dowden, is due to tell Parliament that Beijing is behind a hacking attack that obtained details of 40 million UK voters and has targeted parliamentarians who have criticised the regime

• March 22, 2024 22 Mar'24

  Court finds EncroChat hacked messages admissible as former footballer is jailed

  A judge in ‘lead’ EncroChat case found that messages obtained by police from the encrypted phone network can be lawfully used in evidence

• March 21, 2024 21 Mar'24

  NCSC guidance to help CEOs work through cyber incidents

  The NCSC has published in-depth guidance on how business leaders should respond to a cyber attack or data breach. Learn about some of the key steps you will need to follow