News

IT risk management

• March 07, 2024 07 Mar'24

  Government insists it is acting ‘responsibly’ on military AI

  The government has responded to calls from a Lords committee that it must “proceed with caution” when it comes to autonomous weapons and military artificial intelligence, arguing that caution is already embedded throughout its approach

• March 06, 2024 06 Mar'24

  Nation states buying hacking tools from underground Russian cyber forums

  State-sponsored hacking groups, posing as hacktivists, are using Russian cyber crime forums to stock up on cyber weapons, says Check Point Software’s threat analyst, Sergey Shykevich

• March 05, 2024 05 Mar'24

  Rapid7 hits out over botched vulnerability disclosure

  Software development firm JetBrains and security specialist Rapid7 fall out over the handling of a critical vulnerability disclosure, while customers are left rushing to patch

• March 05, 2024 05 Mar'24

  Banning ransomware payments back on the agenda

  The idea of banning ransomware payments to cyber criminals is back on the agenda, with former NCSC chief Ciaran Martin arguing that tougher measures need to be taken

• March 04, 2024 04 Mar'24

  The Security Interviews: Cyber security is about managing risk effectively

  Effective cyber security must lead to cyber resilience – that is, the ability to anticipate, protect against, withstand and recover from any adverse condition, disruption or compromise, as Kyndryl’s security practice leader explains

• March 01, 2024 01 Mar'24

  APAC firms bullish on IT spending

  More than half of organisations plan to spend more on key areas such as cyber security, generative AI and cloud in a sign of growing optimism across the region

• February 28, 2024 28 Feb'24

  75% of third-party breaches target software, IT supply chains

  Data drawn from SecurityScorecard’s telemetry reveals how supply chain breaches are becoming a weapon of choice for threat actors

• February 28, 2024 28 Feb'24

  Users love their cyber teams, but find them frustrating

  Despite strong support for security teams, a good number of ordinary workers see them as obstructive to business goals, and would like to see them operate more transparently

• February 27, 2024 27 Feb'24

  Majority of UK employees ‘willingly gamble’ with security

  Human-centric threats originating from employees continue to damage organisations both financially and reputationally, according to a report

• February 27, 2024 27 Feb'24

  Executive interview: David Wong, Thomson Reuters

  We speak to the chief product officer of Thomson Reuters about working with artificial intelligence and embedding Microsoft Copilot for Word

• February 27, 2024 27 Feb'24

  Hycu uses AI to develop APIs for SaaS application backup

  SaaS applications don’t usually come with built-in data protection, but Hycu plans to tackle that gap in the market with AI to generate the connectors needed to backup user data

• February 27, 2024 27 Feb'24

  Cozy Bear and other APTs changing tack as cloud adoption increases

  A change in APT tactics has been observed resulting from greater adoption of cloud-based services, according to the NCSC

• February 26, 2024 26 Feb'24

  LockBit bids to save face after NCA takedown

  The LockBit gang’s ringleader resurfaces with new infrastructure and new victims, claiming to have shrugged off a multinational police sting

• February 26, 2024 26 Feb'24

  Storage and backup spend in 2024 targets risk and resilience

  The TechTarget and ESG spending intentions survey finds big bias towards averting risk and building organisational resilience, but on-premise storage a significant planned outlay

• February 23, 2024 23 Feb'24

  ConnectWise users see cyber attacks surge, including ransomware

  ConnectWise ScreenConnect users who have yet to patch against a critical vulnerability are now being targeted by a barrage of cyber attacks, including ransomware

• February 21, 2024 21 Feb'24

  Australian data breach report highlights supply chain risks

  The OAIC has called for organisations to proactively address privacy risks from outsourcing personal information handling to third parties

• February 21, 2024 21 Feb'24

  CVE volumes set to increase 25% this year

  The number of reported Common Vulnerabilities and Exposures is likely to grow significantly in 2024, hitting a new high of almost 35,000, according to Coalition, a cyber insurance specialist

• February 21, 2024 21 Feb'24

  How Indian fintechs can address compliance issues

  Fintechs will need to bolster their know-your-customer practices and establish self-regulatory mechanisms, among other measures, to address compliance issues that have come under the spotlight

• February 14, 2024 14 Feb'24

  Microsoft: Nation-state hackers are exploiting ChatGPT

  Threat actors from China, Iran, North Korea and Russia have all been probing use cases for generative AI service ChatGPT, but have yet to use such tools in a full-blown cyber attack

• February 14, 2024 14 Feb'24

  Dutch Supreme Court approves use of EncroChat evidence

  Defence lawyers plan appeal to European Court of Human Rights after Supreme Court upholds a conviction based on intercepted messages from the EncroChat encrypted phone network

• February 14, 2024 14 Feb'24

  Met Police to scrap and replace ‘racist’ Gangs Violence Matrix

  A database used by the Metropolitan Police to identify and track people linked with gang violence is being decommissioned and replaced. The decision follows a long-running controversy over its discriminatory impacts on young black people, but ...

• February 14, 2024 14 Feb'24

  Microsoft patches two zero-days for Valentine’s Day

  Two security feature bypasses impacting Microsoft SmartScreen are on the February Patch Tuesday docket, among more than 70 issues

• February 13, 2024 13 Feb'24

  Hunter-killer malware volumes seen surging

  Latest Picus Security report on malware tactics, techniques and procedures reveals an increasing focus on disabling security defences

• February 13, 2024 13 Feb'24

  What will result from Cohesity’s Veritas acquisition?

  The $7bn backup giant will leverage huge assets in enterprise customer base, compliance and governance intelligence, AI, R&D, and Kubernetes backup and storage

• February 09, 2024 09 Feb'24

  MoD ethical hacking programme expands after initial success

  The Ministry of Defence has expanded the scope of its defensive security partnership with HackerOne

• February 08, 2024 08 Feb'24

  CIO interview: Sandy Venugopal, SentinelOne

  We speak to the former CIO of Uber and LinkedIn, current CIO of SentinelOne, about how artificial intelligence should be deployed in business

• February 07, 2024 07 Feb'24

  Dozens of surveillance companies are supplying spyware to governments, says Google

  Google’s Threat Analysis Group has identified 40 companies involved in selling and supplying security exploits and spyware services to governments

• February 06, 2024 06 Feb'24

  Inquiry to explore cyber risk to Sunak-Starmer showdown

  The UK’s Joint Committee on National Security Strategy is opening an inquiry into securing the democratic process ahead of the next general election

• February 06, 2024 06 Feb'24

  UK and France push for international agreement on spyware

  The UK and France are hosting diplomats, big tech companies and civil society groups, in a two-day conference in London targeting the proliferation of spyware tools and ‘hackers for hire’

• February 01, 2024 01 Feb'24

  AI: House of Lords focuses on copyright and transparency

  Large language models promise to boost UK productivity, but the tech needs greater scrutiny and questions remain over intellectual property

• February 01, 2024 01 Feb'24

  US government disrupts Chinese botnet containing hundreds of end-of-life Cisco and Netgear routers

  The US government has succeeded in halting a botnet comprised of hundreds of end-of-life routers that posed a threat to critical national infrastructure (CNI) organisations in multiple countries

• January 30, 2024 30 Jan'24

  We need backup! Pennsylvania police data loss shows why

  Police evidence systems data was lost during ‘routine maintenance’, with human error blamed – the case clearly illustrates why data protection can’t be left to chance

• January 29, 2024 29 Jan'24

  Lords question legality of police facial recognition

  Lords committee ‘deeply concerned’ about the rapid expansion of live facial recognition by UK police, which it says is progressing without any real oversight or accountability

• January 26, 2024 26 Jan'24

  UK government consults on age verification tech in alcohol sales

  The government has said it wants to allow the use of digital identities and various age-verification technologies in alcohol sales

• January 24, 2024 24 Jan'24

  WebKit vulnerability sparks Apple’s first major security update of 2024

  A zero-day in the open source WebKit browser engine that powers Safari has sparked Apple’s first major patch roll-out of the new year

• January 24, 2024 24 Jan'24

  Inside Cisco’s security platform strategy

  Raj Chopra, senior vice-president of Cisco’s security business, outlines the company’s security platform strategy and how it brought different products together into a single platform

• January 24, 2024 24 Jan'24

  AI will heighten global ransomware threat, says NCSC

  The benefits of artificial intelligence to cyber criminals being well-known, the NCSC now assesses it’s likely AI will soon be widely used to enhance ransomware attacks

• January 23, 2024 23 Jan'24

  Treat cyber risk like financial or legal issue, says UK government

  UK government and NCSC launch proposed code of practice on cyber security governance to help directors and business leaders toughen their defences

• January 23, 2024 23 Jan'24

  Leak of 26 billion records may prove to be ‘mother of all breaches’

  The discovery of a dataset comprising 26 billion stolen records may prove to be record-breaking in both its size and the danger it poses to ordinary people

• January 23, 2024 23 Jan'24

  SEC bitcoin hack was result of SIM-swapping

  A cyber attack on the US financial regulator earlier in January 2024 occurred after hackers took over one of its mobile phone accounts in a so-called SIM-swapping attack

• January 22, 2024 22 Jan'24

  PAC calls on MoD to fix inventory management IT

  The Public Accounts Committee is concerned that the ageing and fragmented IT systems used in the MoD’s inventory management puts front-line forces at significant risk

• January 19, 2024 19 Jan'24

  ICO prompts confusion over police cloud legality

  The UK data regulator has suggested that, despite major data protection concerns, it is likely to greenlight police cloud deployments because of an information-sharing agreement with the US government

• January 18, 2024 18 Jan'24

  Cyber non-profit enlists ex-NCSC head as technical chair

  Founding NCSC chief exec Ciaran Martin is to join the newly launched Cyber Monitoring Centre non-profit as chair of its technical committee

• January 17, 2024 17 Jan'24

  NCSC invites security pros to join the big leagues

  The NCSC is inviting security pros from across the UK to sign up to work with its experts on an intelligence-sharing initiative

• January 17, 2024 17 Jan'24

  Singapore proposes governance framework for generative AI

  AI Verify Foundation and Infocomm Media Development Authority have proposed a governance framework for generative AI to address the risks and concerns about the emerging technology

• January 15, 2024 15 Jan'24

  How legal disclosure failures disrupted the Post Office Horizon inquiry

  From overly narrow search terms, overzealous deduplication of documents and failed email migrations, poor management of legal discovery has delayed justice for postmasters in the Horizon inquiry  

• January 15, 2024 15 Jan'24

  IT failure caused weekend chaos at Sussex hospitals

  The critical incident at University Hospitals Sussex NHS Foundation Trust, caused by IT issues on Sunday night, has now been resolved

• January 15, 2024 15 Jan'24

  NCA director sacked after WhatsApp and email security breaches

  Nikki Holland, former director of investigations at the NCA, was sacked for “misconduct” after sending sensitive NCA information over personal email and WhatsApp

• January 10, 2024 10 Jan'24

  Davos 2024: AI-generated disinformation poses threat to elections, says World Economic Forum

  Disinformation and misinformation are the top risks facing businesses, governments and the public over the next two years

• January 10, 2024 10 Jan'24

  Windows Kerberos, Hyper-V vulns among January Patch Tuesday bugs

  Microsoft starts 2024 right with another slimline Patch Tuesday drop, but there are some critical vulns to be alert to, including a number of man-in-the-middle attack vectors