News

IT security

• May 14, 2018 14 May'18

  IoT and personal devices pose huge security risk to enterprises

  After years of speculation about the risk IoT and personal devices pose to enterprise security, research has revealed the threat is “immense” and probably greater than most firms realise

• May 11, 2018 11 May'18

  Police Scotland did not inform public of mobile phone searches

  Members of the Scottish Parliament heard that Police Scotland did not conduct impact assessments or give explanations to the public when they were accessing private data on their mobile phones

• May 11, 2018 11 May'18

  WannaCry’s EternalBlue exploit still a threat

  A year after the global WannaCry attacks, the EternalBlue exploit that was a key enabler for the malware is still a threat to many organisations, and many UK firms have not taken action, security researchers warn

• May 11, 2018 11 May'18

  EFF welcomes backdoor-blocking US bill

  International digital rights organisation welcomes proposed US legislation that will prevent the government from forcing a company to build backdoors into encrypted products and services

• May 10, 2018 10 May'18

  Citrix touts digital workspace app in services play

  Software supplier Citrix’s cloud-based workspace app is part of its efforts to deliver integrated services that support the modern workplace

• May 10, 2018 10 May'18

  Embrace GDPR to remain competitive, says OWI

  The EU’s General Data Protection Regulation is set to raise the bar internationally for data protection and should be embraced to remain competitive, says report

• May 09, 2018 09 May'18

  CNI providers face hefty fines for cyber security failings

  UK providers of critical national infrastructure face hefty fines for cyber security failings from 10 May 2018

• May 09, 2018 09 May'18

  Equifax breach lessons not learned

  Businesses are still downloading vulnerable versions of the software that was at the heart of the Equifax data breach and failing to update to safe versions, a security firm has revealed

• May 09, 2018 09 May'18

  Nutanix builds hooks to SDN and cloud with Flow, Era and Beam

  Hyper-converged pioneer builds in functionality from acquisitions with Flow software-defined networking, Beam cloud monitoring and Era database provisioning and data protection

• May 09, 2018 09 May'18

  Dutch Tax Authority not fully GDPR-compliant as deadline approaches

  The Netherlands’ Department of Finance warns that not all aspects of the EU privacy law will be implemented by the 25 May deadline

• May 09, 2018 09 May'18

  Breach disclosure time still high, report shows

  Companies are getting faster at disclosing breaches, but the average is still too high in the light of the GDPR and other breach disclosure regulations, a report shows

• May 08, 2018 08 May'18

  Nigerian cyber attackers up their game

  Nigerian cyber attackers have modernised their approach to cyber crime, security researchers warn

• May 08, 2018 08 May'18

  Financial sector cyber-related laws are a bellwether, says Deloitte

  As the regulatory landscape becomes more complex, organisations should look to the financial sector to see what else is coming, as well as focus on three key areas of GDPR compliance, according to Deloitte

• May 08, 2018 08 May'18

  Virtual tripwire to keep elephant poachers out of Zambian national park

  Cisco and Dimension Data are working to protect Zambia’s at-risk elephant population after a successful pilot project in South Africa

• May 08, 2018 08 May'18

  Majority of security professionals favour shorter disclosure deadline

  Google’s Project Zero unit’s 90-day deadline for software suppliers to disclose vulnerabilities has always been controversial, but a survey reveals that most security professionals feel even that is too long

• May 04, 2018 04 May'18

  Security pros must avoid hype, demonstrate value, says RBS CISO

  Security professionals must avoid over-hyping cyber threats, and penetration testers need to reinvent themselves to demonstrate value to businesses to remain relevant, says RBS CISO

• May 04, 2018 04 May'18

  Twitter password security bug underlines need for industry change

  Twitter has revealed that a bug in its systems resulted in some passwords being stored in a log in clear text, underlining the need for alternative authentication methods, say industry commentators

• May 03, 2018 03 May'18

  Fibre network breakthrough has implications for data security

  Researchers have devised a new protocol that they claim vastly extends the range of quantum key distribution over fibre networks

• May 03, 2018 03 May'18

  City Police use Lego simulation to teach businesses cyber security

  City of London Police are offering to train business leaders and IT security in cyber security using a Lego simulation that is surprisingly close to real life

• May 03, 2018 03 May'18

  Redscan warns of GDPR phishing scams

  Cyber criminals are using fake GDPR-related privacy notices to trick recipients into disclosing personal data and spread malware, a security firm warns

• May 03, 2018 03 May'18

  Cambridge Analytica closure will not halt probe, says ICO

  The London-based data mining firm at the heart of the Facebook data exploitation scandal has announced it is closing, but the ICO says the probe into its actions will still go ahead

• May 02, 2018 02 May'18

  Fresh blow for Facebook as court refuses stay in Max Schrems legal action

  Facebook has lost a legal attempt to delay the Irish High Court from seeking answers from the European Court of Justice over the legality of EU-US data transfers

• May 02, 2018 02 May'18

  ARM aims to boost physical security of IoT

  Chipmaker ARM announces microprocessor aimed at improving the physical security capabilities of devices making up the internet of things

• May 02, 2018 02 May'18

  Critical infrastructure firms urged to patch Schneider Electric flaws

  Critical infrastructure suppliers and manufacturing firms are being urged to ensure that their systems are patched up to date, after researchers discover Schneider Electric remote code execution vulnerability

• May 02, 2018 02 May'18

  Ransomware still a threat to business, F-Secure warns

  Ransomware attacks tapered off towards the end of 2017 after an explosion in such attacks earlier in the year, but ransomware remains a threat to big business, a report reveals

• May 02, 2018 02 May'18

  Workday to continue investing heavily in APAC

  Cloud applications supplier has increased its investments in the region by more than 50% in the past year, and is looking to maintain its double-digit growth in international markets

• May 02, 2018 02 May'18

  Security industry welcomes City of London Police cyber initiative

  The security industry has welcomed plans to fight cyber crime in the heart of London using a community-based approach, but says more investment in cyber security skills is required

• May 01, 2018 01 May'18

  Google Chrome helps clean up certificate authority industry

  The security industry has welcomed the introduction of measures by the Google Chrome browser aimed at achieving certificate transparency

• May 01, 2018 01 May'18

  Password practices still poor despite increased threats

  Despite growing cyber threats and heightened global awareness of hacking and data breaches, password behaviours remain poor and UK users are in denial, a study has revealed

• May 01, 2018 01 May'18

  Microsoft’s latest Windows 10 focuses on IT admins

  While it will stop those annoying taskbar InBox and social media messages, at the heart of the April 2018 Windows 10 update is an effort to simplify management

• May 01, 2018 01 May'18

  UK critical services need to up cyber defences to avoid fines

  UK critical infrastructure providers could be liable for fines of millions of pounds if they do not improve their cyber defences and resilience of their IT infrastructure, a study reveals

• April 30, 2018 30 Apr'18

  Getting cyber security innovation to market is key, says NCSC

  Getting cyber security innovation to market is an important area of focus, according to the National Cyber Security Centre, which runs a cyber accelerator programme and recently stated a Dragons Den style security innovation pitch at the 2018 ...

• April 30, 2018 30 Apr'18

  Security industry welcomes NHS move to Windows 10

  Representatives of the security industry have welcomed the announcement that the NHS will be migrating to Windows 10 as part of a multi-million pound deal with Microsoft, but warn that the move will not be without its challenges

• April 27, 2018 27 Apr'18

  Only 5% of charities are ready for GDPR, survey shows

  A survey shows relatively few charities are prepared for new data protection regulations, highlighting several areas for improvement

• April 27, 2018 27 Apr'18

  Microsoft releases Windows 10 security pack

  Microsoft has released a download pack that incorporates NCSC guidance to save UK companies weeks of work to secure Windows 10 and comply with government guidelines

• April 27, 2018 27 Apr'18

  Most organisations unprepared for GDPR, survey finds

  Despite the vast majority of businesses agreeing that GDPR affects them, only 5% say they are fully prepared for it, according to a BSI survey

• April 27, 2018 27 Apr'18

  DWP to spend nearly £15m on GDPR

  A single government department plans to spend nearly £15m on preparing for new European data protection legislation, a report reveals

• April 27, 2018 27 Apr'18

  Government given six months to rewrite snoopers’ charter

  The government has until 1 November 2018 to rewrite a key section of the Investigatory Powers Act 2016, after the high court declared them unlawful in a judicial review brought by human rights group Liberty

• April 27, 2018 27 Apr'18

  GDPR: Put your data in Azure cloud, says Microsoft chief

  Tech giant reports strong growth in its cloud business in third-quarter 2018 fiscal results

• April 26, 2018 26 Apr'18

  British banks target Israeli security technology

  British banks are turning to Israel’s high-tech sector to protect against cyber attacks

• April 26, 2018 26 Apr'18

  Facebook posts strong first quarter despite privacy scandal

  The data exploitation scandal that hit Facebook has not yet had an adverse impact on advertising revenues or user activity, according to first quarter financial results

• April 26, 2018 26 Apr'18

  EC calls on online platforms to develop common code of practice to tackle ‘disinformation’

  The European Commission says online platforms such as social media and video sites, have not done enough to tackle unethical use, and calls on them “to decisively step up their efforts to tackle online disinformation”

• April 26, 2018 26 Apr'18

  Finnish R&D and utilities in line of cyber espionage fire, say security police

  Finnish research and development, as well as critical infrastructure, are being targeted by state-backed cyber espionage attacks, says report

• April 26, 2018 26 Apr'18

  NCSC shows support for common standards for secure communication

  The UK cyber security authority is supporting an industry drive towards common standards for secure communication by joining an industry organisation that aims to achieve this goal

• April 26, 2018 26 Apr'18

  Digital economy research projects to get funding

  Research projects aimed at building trust, privacy and security in the use of personal data and digital technologies are to receive funding

• April 25, 2018 25 Apr'18

  EC sets out plans for sharing health data across borders

  The European Commission wants to introduce EU-wide standards for health records, and allow EU citizens to access and share their patient information securely across member states

• April 25, 2018 25 Apr'18

  Google claims it is GDPR ready

  Alphabet, the parent company of Google, says that since its advertising business relies on keyword searches, the impact of GDPR is limited

• April 25, 2018 25 Apr'18

  Government urges UK businesses to beef up cyber crime defences

  Government is urging UK organisations to defend against cyber crime, as newly released figures show that large numbers of businesses and charities suffered at least one cyber attack in the past year

• April 25, 2018 25 Apr'18

  Major DDoS cyber crime website shut down

  International law enforcement has shut down the Webstresser cyber crime website, which was the world’s biggest marketplace for selling distributed denial of service attack services that were used against seven UK banks

• April 25, 2018 25 Apr'18

  Most firms will not be GDPR-ready by compliance deadline

  Survey of IT decision-makers shows one-fifth of companies lack continuous encryption capabilities and only half have the systems required for the right to erasure and the right to rectification