News

IT security

• July 08, 2025 08 Jul'25

  M&S calls for mandatory ransomware reporting

  The government should extend ransomware reporting mandates to businesses to help gather more intelligence and better support victims, says M&S chairman Archie Norman.

• July 08, 2025 08 Jul'25

  AI for Good: Signal president warns of agentic AI security flaw

  Secure by design is a mantra of the tech sector, but not if it’s agentic AI, which wants ‘root’ access to everything

• July 08, 2025 08 Jul'25

  SEC and SolarWinds to settle lawsuit over 2020 breach

  The US SEC and SolarWinds have reached a settlement in principle to resolve litigation over alleged security failings that led to the 2020 compromise of the supplier’s Orion platform by Russian cyber spies

• July 08, 2025 08 Jul'25

  NHS trust accused of ‘at best cavalier, at worst deceitful’ behaviour after deleting emails

  A London hospital trust faces allegations it withheld key evidence from a tribunal hearing after one of its directors attempted to destroy more than 90,000 emails

• July 08, 2025 08 Jul'25

  Proofpoint bets on APAC growth amid spike in AI-driven threats

  With cyber attacks spiking in non-English-speaking markets such as Japan, the security firm is boosting its regional presence to combat a wave of AI-generated threats

• July 07, 2025 07 Jul'25

  Tech firms complicit in ‘economy of genocide’, says UN rapporteur

  A UN special rapporteur has called for technology firms operating in Israel and the Occupied Palestinian Territories to immediately halt their activities, in wider report about the role corporate entities have played in the Israeli state’s ongoing ‘...

• July 07, 2025 07 Jul'25

  Digital warfare is blurring civilian front lines

  Singapore’s defence cyber chief warns that the traditional lines between military conflict and civilian life are blurring, with adversaries now targeting civilian systems and using AI to put the threat landscape on steroids

• July 04, 2025 04 Jul'25

  Medow Health AI debuts AI scribe tool in Singapore

  The Australian health technology company has launched its AI-powered scribe platform in Singapore to help healthcare professionals automatically capture and structure clinical notes, reports and referral letters

• July 03, 2025 03 Jul'25

  Fine-tuning to deliver business AI value

  Foundation AI models offer knowledge that spans the internet, but they generally lack an understanding of proprietary business data and processes

• July 02, 2025 02 Jul'25

  US CISA agency extends Iran cyber alert, warns of CNI threat

  The US Cybersecurity and Infrastructure Security Agency reiterates guidance for operators of critical national infrastructure as it eyes the possibility of cyber attacks from Iran

• July 02, 2025 02 Jul'25

  Google fixes type confusion flaw in Chrome browser

  An actively exploited type confusion vulnerability in the Google Chrome web browser needs immediate attention from users

• July 02, 2025 02 Jul'25

  Scattered Spider link to Qantas hack is likely, say experts

  A developing cyber attack at Australian airline Qantas that started at a third-party call centre is already being tentatively attributed to Scattered Spider. Find out more and learn about the next steps for those affected

• July 02, 2025 02 Jul'25

  Dutch study uncovers cognitive biases undermining cyber security board decisions

  Dutch research reveals how cognitive biases can lead to catastrophic security decisions

• July 02, 2025 02 Jul'25

  Qantas customer data exposed in contact centre breach

  Australian flag carrier is investigating significant data theft of personal information for up to six million customers after a third-party platform used by its call centre was compromised

• July 01, 2025 01 Jul'25

  Cloudflare to let customers block AI web crawlers

  Publishers and other providers of creative content now have the option to block AI crawlers from accessing and scraping their intellectual property with new tools from Cloudflare.

• June 27, 2025 27 Jun'25

  Citrix Bleed 2 under active attack, reports suggest

  Days after news emerged of a Citrix NetScaler flaw comparable in its scope and severity to 2023’s infamous Citrix Bleed, there are already clear indicators that threat actors are taking advantage of the critical vulnerability

• June 27, 2025 27 Jun'25

  Scattered Spider cyber gang turns fire on aviation sector

  Multiple reports are emerging of cyber attacks on airlines – Google Cloud’s Mandiant believes them to be linked

• June 27, 2025 27 Jun'25

  Over 2 million affected by US supermarket breach

  Belgian-Dutch supermarket operator Ahold Delhaize reveals that more than two million people, including employees, had their data compromised following a November 2024 ransomware attack

• June 27, 2025 27 Jun'25

  Ciaran Martin: AI might disturb attacker-defender security balance

  The founder of the National Cyber Security Centre spoke with Computer Weekly at Infosecurity Europe 2025 about how artificial intelligence might disturb the attacker-defender security equilibrium

• June 27, 2025 27 Jun'25

  MPs propose ban on predictive policing

  MPs are attempting to amend the UK government’s forthcoming Crime and Policing Bill so that it prohibits the use of controversial predictive policing systems

• June 26, 2025 26 Jun'25

  Sky ECC distributor released from French custody pending trial

  Canadian businessman accused of distributing Sky ECC encrypted phones has been released on bail after over four years in custody without a trial

• June 26, 2025 26 Jun'25

  British hacker IntelBroker faces years in a US prison cell

  US authorities have unsealed charges against 25-year-old hacker Kai West, aka IntelBroker, accusing him of being behind multiple cyber attacks

• June 26, 2025 26 Jun'25

  Glasgow Council services remain offline a week after cyber attack

  Disruption continues a week after core services at Glasgow City Council were forced offline following a cyber attack on a third-party IT services provider

• June 25, 2025 25 Jun'25

  Swisscom claims world first with sovereign SASE connectivity service

  SASE applied at heart of leading Swiss telco’s converged networking and cyber security offering to deliver customised, advanced networking and security services directly from its own infrastructure

• June 25, 2025 25 Jun'25

  Latest Citrix vulnerability could be every bit as bad as Citrix Bleed

  A Citrix NetScaler flaw that was quietly patched earlier in June is gathering widespread attention after experts noted strong similarities to the Citrix Bleed vulnerability that caused chaos in late 2023

• June 24, 2025 24 Jun'25

  UK ransomware costs significantly outpace other countries

  UK organisations hit by ransomware attacks paid much higher ransoms than in other countries over the past 12 months, according to study

• June 24, 2025 24 Jun'25

  One year since being freed, Julian Assange still a victim of state secrecy

  If the State Department’s arguments prevail in FOIA litigation, the truth about US action against Julian Assange and WikiLeaks journalists will never be known

• June 23, 2025 23 Jun'25

  Widening Middle Eastern war increases cyber risk

  With the entry of the US into the widening Middle Eastern conflict, cyber risk is likely to increase across the board

• June 23, 2025 23 Jun'25

  Police to gain powers to grab online data when they seize phones and laptops

  Academics and civil liberties experts say that proposed ‘authoritarian’ powers to allow police to trawl online and cloud services used by owners of seized devices should require approval from a judge

• June 20, 2025 20 Jun'25

  Cyber Essentials certifications rising slowly but steadily

  The number of businesses attaining the NCSC Cyber Essentials certification continues to increase, but much more can be done to raise awareness of the scheme

• June 20, 2025 20 Jun'25

  M&S, Co-op attacks a ‘Category 2 cyber hurricane’, say UK experts

  The UK’s Cyber Monitoring Centre has published its first in-depth assessment of a major incident, reflecting on the impact of and lessons learned from Scattered Spider attacks on M&S and Co-op

• June 20, 2025 20 Jun'25

  Election workers’ data stolen in cyber breach of Oxford City Council

  Oxford City Council election workers had personal information stolen by cyber attackers in an attack over the weekend of 7-8 June. The council has stated that most disrupted systems are back online

• June 20, 2025 20 Jun'25

  UK data reforms become law

  UK passes wide-ranging data protection reforms to ‘simplify’ organisations’ sharing and processing of data, but questions remain whether changes will be accepted by European Commission when renewing UK data adequacy

• June 19, 2025 19 Jun'25

  UBS employee data leaked after cyber attack on supplier

  UBS and fellow Swiss bank Pictet have been affected by a cyber attack on a procurement service provider

• June 18, 2025 18 Jun'25

  Traditional fake news detection fails against AI-generated content

  As generative AI produces increasingly convincing text, Dutch researchers are exploring how linguistic cues, model bias, and transparency tools can help detect fake news.

• June 17, 2025 17 Jun'25

  Cyber action plan kicks off to ‘supercharge’ UK security sector

  UK government says its cyber growth action plan will provide a large boost to Britain’s security industry as it sets out to create a roadmap for future growth

• June 17, 2025 17 Jun'25

  Scattered Spider widens web to target insurance sector

  Following a series of high-profile attacks on prominent retailers and consumer brands, the Scattered Spider cyber crime collective appears to be expanding its targeting to the insurance sector

• June 17, 2025 17 Jun'25

  UKtech50: Vote for the most influential person in UK technology

  Our judges have selected the top 50 leaders from a shortlist of nearly 500 people – now it’s your chance to tell us who you think is the most influential person in UK technology

• June 16, 2025 16 Jun'25

  Intelligence sharing key to cyber security in Europe, says EU Commission cyber expert

  Cyber criminals choose not to attack Europe due to its resilience and preparedness, says the EU Commission’s principal advisor for cyber security coordination, Despina Spanou

• June 12, 2025 12 Jun'25

  UKtech50 2025: the longlist of the UK’s influential tech leaders

  Each year, Computer Weekly launches a search for the most influential people in UK IT, asking the tech community who it thinks should be in the top 50 – here is the longlist of everyone nominated for 2025

• June 12, 2025 12 Jun'25

  Apple encryption row: Does law enforcement need to use Technical Capability Notices?

  History shows that law enforcement can bring successful prosecutions without the need for the Home Office to introduce ‘backdoors’ into end-to-end encryption

• June 12, 2025 12 Jun'25

  MPs to investigate potential for government digital identity scheme

  Amid growing calls for a national digital ID scheme, Home Affairs Committee launches inquiry into likely benefits and risks

• June 11, 2025 11 Jun'25

  NHS IT the big winner in Reeves’ Spending Review

  The chancellor of the exchequer has significantly upped spending on digital and technology initiatives in the current Spending Review period, with the NHS receiving a 50% tech funding increase

• June 11, 2025 11 Jun'25

  WhatsApp seeks to join Apple in legal challenge against Home Office encryption orders

  WhatsApp today applied to intervene in an Investigatory Powers Tribunal case that is considering the UK’s ability to issue a technical capability notice on Apple to ‘weaken encryption’

• June 11, 2025 11 Jun'25

  Government using national security as ‘smokescreen’ in Apple encryption row

  Senior conservative MP David Davis says the Home Office should disclose how many secret orders it has issued against telecoms and internet companies to Parliament

• June 11, 2025 11 Jun'25

  How breaking things builds resilient systems

  To prevent and recover from outages in today’s complex, cloud-native world, enterprises must proactively and deliberately inject failure into their systems through chaos engineering practices

• June 11, 2025 11 Jun'25

  June Patch Tuesday brings a lighter load for defenders

  Barely 70 vulnerabilities make the cut for Microsoft’s monthly security update, but an RCE flaw in WEBDAV and an EoP issue in Windows SMB Client still warrant close attention

• June 11, 2025 11 Jun'25

  Cyber Bill at risk of becoming a missed opportunity, say MPs

  An APPG report warns that the government’s flagship cyber security legislation is too narrow in its scope and risks missing opportunities to embed resilience at the heart of the British economy

• June 10, 2025 10 Jun'25

  UK defence scheme invests in future cyber tech Cheri

  Cambridge-based SCI Semiconductors is awarded DTEP funding to work on the application of defensive Cheri technology

• June 10, 2025 10 Jun'25

  Third-party security weaknesses threaten Europe’s big banks

  Security breaches via third parties increased by 25% at Europe’s largest finance firms