News

IT security

• September 12, 2018 12 Sep'18

  FCA warns it cannot manage financial crime risks without sharing data with EU

  FCA admits it will be unable to manage financial crime effectively if it cannot share data with EU authorities.

• September 12, 2018 12 Sep'18

  Two-thirds of emails not clean, says research

  Two-thirds of emails don't make it to the inbox because security systems consider them unsafe, according to research

• September 11, 2018 11 Sep'18

  Higher education sector's poor response to cyber threats laid bare in EfficientIP report

  The 2018 EfficientIP Global DNS Report shines a light on how ill-prepared the higher education sector is for handling cyber threats

• September 11, 2018 11 Sep'18

  British Airways data breach: Security researchers name suspects and query attack timeline

  Security researchers claim to have pinpointed the cause and perpetrators of the British Airways data breach, and also claim the attackers may have had access to its customer data for far longer than previously thought

• September 11, 2018 11 Sep'18

  UK security vetting IT system failing, says NAO

  The National Audit Office is critical of the government’s project to centralise its security vetting process, as the IT system has been plagued by failures from the start and has led to serious delays

• September 11, 2018 11 Sep'18

  Public cloud use surges among DDoS attackers, research shows

  According to data accrued by DDoS mitigation firm, Link11, the number of attackers that rely on public cloud services soared during the 12 months to June 2018

• September 10, 2018 10 Sep'18

  Cyber criminals outspend businesses in cyber security battle

  Cybercriminals are flexing their financial might and UK organisations are facing more attacks as a result

• September 07, 2018 07 Sep'18

  North Korean programmer charged for WannaCry attacks

  The US has charged a member of a group of North Korean hackers linked to the WannaCry, Sony Pictures and other cyber attacks around the world

• September 07, 2018 07 Sep'18

  Ransomware down, but not out, report reveals

  Cryptojacking has taken over from ransomware as the top money spinner for cyber criminals, but the threat is not over and spam is also seeing a resurgence as an attack method, a report reveals

• September 07, 2018 07 Sep'18

  BA praised for swift GDPR-aligned action on data breach

  British Airways has been praised for its swift response to a customer data breach, which could be the first test case under the EU’s GDPR and new UK GDPR-aligned data protection laws

• September 06, 2018 06 Sep'18

  Chrome 69 security improvements welcomed

  The cyber security community has welcomed the improvements in the latest version of the Chrome browser, especially when it comes to generating strong, unique passwords

• September 05, 2018 05 Sep'18

  Government projects watchdog recommends terminating Gov.uk Verify identity project

  Infrastructure & Projects Authority says Whitehall departments are unwilling to fund flagship GDS identity programme – cancellation would mean writing off at least £130m spent so far

• September 05, 2018 05 Sep'18

  Half a million UK firms hit by CEO fraud, Lloyds Bank estimates

  Nearly 500,000 UK businesses are being hit by impersonation fraud, according to estimations by Lloyds Bank, with the legal sector most at risk

• September 05, 2018 05 Sep'18

  People top target for cyber attackers, report confirms

  As security controls have improved, cyber attackers are increasingly focusing their efforts on people within organisations as a way into corporate IT systems, a report confirms

• September 04, 2018 04 Sep'18

  Three forthcoming government services to use Gov.uk Verify

  Government Digital Service is in the process of private beta testing its identity assurance platform with three new central government services

• September 04, 2018 04 Sep'18

  UK and allies call for backdoors in encryption products

  The Five Eyes intelligence alliance is calling on tech firms to include backdoors in their encrypted products to give access to law enforcement authorities or face various measures

• September 03, 2018 03 Sep'18

  Majority of UK firms not insured for data breaches

  Many UK firms are not insured against information security breaches and data loss, and would have to spend £1m on average to recover from a breach, a report reveals

• August 31, 2018 31 Aug'18

  Security Serious Week to feature flash mob event

  “Flash mob” event will create a human collage, highlighting cyber security advice

• August 31, 2018 31 Aug'18

  Fraudulent money transfers are top aim of business email compromise

  Business email compromise is increasingly popular with cyber criminals to steal money and information as well as spread malware, security researchers find

• August 30, 2018 30 Aug'18

  Blockchain gains foothold in Australia

  A number of blockchain projects are under way in Australia, but questions remain about whether the technology is wanted

• August 30, 2018 30 Aug'18

  Cobalt cyber heist group mounts new campaign

  Security researchers discover new campaign using two malicious links to double the chances of infection, which is believed to be linked to a notorious cyber crime group

• August 30, 2018 30 Aug'18

  Machine identity management crisis looming

  Managing machine identities is looming as the next big security challenge, a study reveals, with few organisations capable of protecting them as they increasingly form the basis of online communications

• August 30, 2018 30 Aug'18

  Fourth man jailed for iCloud celebrity hacking

  The final hacker charged with leaking nude images of female celebrities in 2014 has been jailed

• August 30, 2018 30 Aug'18

  US and UK days away from European Parliament ultimatum to suspend data transfers to the US

  Threat to Privacy Shield as the European Union and US approach a critical European Parliament deadline to suspend data transfers from the EU to the US

• August 29, 2018 29 Aug'18

  Improving security is top driver for ISO 27001

  Organisations are implementing the ISO 27001 standard in recognition of the fact that cyber attacks are increasingly inevitable and that it is best to be well-prepared to fend off attacks and mitigate their effect

• August 29, 2018 29 Aug'18

  Security teams and C-suite exec views not aligned

  There are key differences and potential challenges when it comes to security teams and C-suite executives communicating and aligning about cyber threats, a study shows

• August 29, 2018 29 Aug'18

  IT leaders at a crossroads as they grapple with digital technology

  CIOs have the opportunity to influence their company strategy as digital technology reshapes business. A survey of CIOs across 70 countries charts a path for IT leaders through emerging technologies

• August 28, 2018 28 Aug'18

  Cyber attackers switching to covert tactics

  Cyber criminals are moving away from mass, high-profile attacks to ones that are stealthy and more subtle – as well as attacks targeting systems typically used in critical infrastructure, researchers say

• August 28, 2018 28 Aug'18

  Challenge to anti-GDPR immigration exemption in DPA to go ahead

  Two human rights groups are challenging a controversial clause in new UK data protection legislation that they say is in conflict with the EU’s Charter of Fundamental Rights and undermines the General Data Protection Regulation

• August 28, 2018 28 Aug'18

  Sharp rise in business email compromise

  Cyber attackers are expanding their attack methods to steal money and to gain access to corporate and employee data, a report reveals

• August 24, 2018 24 Aug'18

  UK universities targeted by Iranian hackers

  UK universities are among those targeted by a cyber threat group associated with the Iranian government

• August 24, 2018 24 Aug'18

  Gov.uk Verify chief to leave Government Digital Service

  Nic Harrison is returning to the Department for Work and Pensions, with no replacement as leader of the identity assurance programme yet in place

• August 24, 2018 24 Aug'18

  North Koreans add Mac OS to cryptocurrency-stealing malware attacks

  A North Korean hacking group is targeting cryptocurrency exchanges using Trojanised cryptocurrency trading software designed for both Microsoft’s Windows and Apple’s Mac OS, say researchers

• August 23, 2018 23 Aug'18

  Australian government agency trials secure cloud service

  The Digital Transformation Agency has become the first government agency in Australia to test the use of Microsoft Office 365 in a secure cloud environment

• August 23, 2018 23 Aug'18

  Cryptographic agility is key to post-quantum security

  Although post-quantum security is not an issue for all organisations today, an expert believes that those needing to ensure data is secure for decades to come should aim to achieve cryptographic agility above all else

• August 23, 2018 23 Aug'18

  No Deal Brexit papers warn of stark future for UK tech

  The government has published the first of its No Deal Brexit contingency planning notices, containing sobering messages for the UK technology industry

• August 23, 2018 23 Aug'18

  Apache Struts users urged to update due to new security flaw

  Another security flaw has been discovered in the Apache Struts, which was at the heart of the massive Equifax data breach in 2017

• August 23, 2018 23 Aug'18

  Councils at risk from unsupported Windows Server and SQL Server

  Some local authorities are using unsupported server software, while others are not paying for extended support

• August 22, 2018 22 Aug'18

  European cloud adopters still lack basic security

  Despite outpacing the rest of the world, the majority of organisations adopting cloud in Europe, the Middle East and Africa lack basic security, a report reveals

• August 22, 2018 22 Aug'18

  Nearly a third of organisations still not GDPR ready

  As the UK and other states implement the EU’s GDPR, many organisations admit they are still not fully compliant, but most claim to be able to respond to data subject access requests

• August 22, 2018 22 Aug'18

  Superdrug denies data breach

  Superdrug has warned online customers it believes may have had personal details exposed, but claims its systems were not compromised, in what could be the first GDPR-related extortion attempt

• August 21, 2018 21 Aug'18

  New Zealand to run national cyber security exercise

  The island-nation will test the resilience of its critical infrastructure in November 2018, bringing together multiple agencies to protect assets of national significance

• August 21, 2018 21 Aug'18

  Online crime costs more than $1m a minute

  More than $1m is lost to cyber crime every minute, a report reveals, underlining the increasing and significant threats businesses face online

• August 21, 2018 21 Aug'18

  Veritas aims to boost NetBackup with simplified UI and setup

  Two decades-old enterprise product upgraded with backups that can be set in three clicks, down from 30, plus instant VM workload recovery and capacity monitoring and planning

• August 21, 2018 21 Aug'18

  Retail and finance top cyber targets

  Retail and finance remain the top cyber attack targets, but the second quarter also saw a spike in attacks against the manufacturing industry and an increase in remote desktop attacks, a report reveals

• August 21, 2018 21 Aug'18

  Microsoft announces free election cyber defence tools

  Microsoft has revealed it recently disrupted domains associated with a Russian cyber attack group believed to be targeting US political groups ahead of the midterm elections

• August 21, 2018 21 Aug'18

  Malaysia’s financial sector warms up to cloud, but lacks security leadership

  Almost two-thirds of Malaysia’s financial services firms are developing a cloud strategy, but not all have a security plan in place

• August 20, 2018 20 Aug'18

  NHS trusts lose nearly 10,000 patient records a year

  Report calls for NHS trusts to work to abolish handwritten notes in hospitals to prevent loss of personal documents and to introduce a patient identity protocol

• August 20, 2018 20 Aug'18

  Planned Australian law raises tech firms’ security concerns

  A digital industry group representing some of the world’s largest tech firms is opposed to proposed Australian laws aimed at compelling them to help security agencies and police

• August 17, 2018 17 Aug'18

  Cyber Security Challenge UK to scale up

  Cybersecurity Challenge UK plans to scale up its events and its role in coordinating UK industry efforts to attract talented people to the cyber security profession