News

IT security

• March 19, 2018 19 Mar'18

  C-suite a cyber attack risk, say security chiefs

  Those tasked with running organisations are the most likely group to expose them to a major cyber attack, a poll of UK information security executives shows

• March 19, 2018 19 Mar'18

  Wigan data breaches underline need to share threat intelligence

  Ongoing data breaches experienced by local authorities underline the need for greater sharing of threat intelligence, say security experts

• March 19, 2018 19 Mar'18

  Heartbleed and Shellshock thriving in Docker community

  DevOps has revolutionised IT, but security best practices are being skimmed over, which means old vulnerabilities are finding a new lease of life in Docker

• March 19, 2018 19 Mar'18

  Russia compromised core router in US energy attacks

  Russian cyber attackers used a compromised core router in a series of attacks on the US energy sector, security researchers have revealed as the UK energy sector is placed on alert

• March 16, 2018 16 Mar'18

  IT contractors not a risk despite Snowden leaks, GCHQ tells court

  The government argues in the Investigatory Powers Tribunal that contractors with systems administration rights to computers holding GCHQ’s most sensitive intelligence pose no more of a security risk than the agency’s employees

• March 16, 2018 16 Mar'18

  Cyber criminals using complex financial system, study shows

  Cyber criminals are using a combination of new cryptocurrencies, gaming currencies and micro-payments to launder up to $200bn in ill-gotten gains, research has revealed

• March 16, 2018 16 Mar'18

  Defence industry urges government to relax controls on crypto exports

  Trade body representing defence, aerospace and security companies calls on government to make it easier to export “non-contentious” cryptography to secure organisations against cyber crime

• March 16, 2018 16 Mar'18

  US blames Russia for cyber attacks on energy firms

  The US has blamed Russia for a series of attacks on energy sector firms, underlining the need to ensure critical infrastructure IT systems are up to date and secure

• March 15, 2018 15 Mar'18

  DocuTrac medical software is a breach risk, warns Rapid7

  Security researchers have issued a security warning about medical billing and documentation software they say puts patients at risk of data breach

• March 14, 2018 14 Mar'18

  WhatsApp to suspend data sharing with Facebook

  WhatsApp has agreed to stop sharing personal data with Facebook until data protection concerns are addressed

• March 14, 2018 14 Mar'18

  Researchers accused of irresponsible disclosure of AMD chip flaws

  Israel-based researchers have been accused of irresponsible disclosure for going public with more than a dozen security flaws discovered in AMD processors

• March 14, 2018 14 Mar'18

  Most people think cryptocurrency will be accepted on buses by 2025

  Cryptocurrency is a mystery to many people, yet 55% of respondents to a survey expect shops and buses to accept digital money in seven years’ time

• March 14, 2018 14 Mar'18

  APAC security chiefs expect imminent attack on critical systems

  Nearly 70% of cyber security leaders in the APAC region believe a major attack affecting critical infrastructure across multiple countries will happen in the next two years, a survey reveals

• March 13, 2018 13 Mar'18

  Government ‘unlawfully delegated’ bulk data powers to GCHQ, court hears

  Privacy International urges Britain’s most secret court, the Investigatory Powers Tribunal, to rule that the government illegally collected surveillance data from internet and phone companies until at least September 2017

• March 13, 2018 13 Mar'18

  Public sector organisations ill-prepared for GDPR

  Public sector organisations in the UK need to do much more to comply with the General Data Protection Regulation rule on providing information to citizens about details held about them

• March 13, 2018 13 Mar'18

  Slingshot router malware: a warning for businesses

  A stealthy malware that has been used to carry out cyber espionage undetected for six years should raise a red flag to businesses, say security commentators

• March 12, 2018 12 Mar'18

  Eight new cyber threats a second in Q4 2017, McAfee report reveals

  There was an increase in cyber attacks on healthcare organisations, the use of fileless malware and cryptocurrency mining in the last three months of 2017, with eight new threats a second

• March 12, 2018 12 Mar'18

  Fileless attacks surge as hackers exploit PowerShell scripts

  Malicious scripting through Microsoft’s PowerShell IT admin tool is being used to take control of Windows machines and Apple Macs

• March 12, 2018 12 Mar'18

  Regulator takes tougher line than expected on surveillance warrants

  The Investigatory Powers Commissioner’s Office has signalled to government that it will take a tough line when scrutinising surveillance warrants under the controversial Investigatory Powers Act

• March 12, 2018 12 Mar'18

  UK leads global upward trend in SOC maturity

  The UK is leading the way towards more efficient security operations centres, but many still continue to operate with serious gaps in security, a report reveals

• March 09, 2018 09 Mar'18

  UK government criticised over lack of GDPR explanation

  Most IT decision makers in the UK are critical of the government for failing to educate organisations about the GDPR and its implications, and few have a clear understanding of it, a survey shows

• March 09, 2018 09 Mar'18

  Universal Credit project warned over Gov.uk Verify performance in 2015

  Government project management experts warned as long ago as 2015 that a problem with GDS's Verify online identity system could undermine the Universal Credit business plan

• March 09, 2018 09 Mar'18

  Cooperation and exercises key to cyber defence, says Nato centre

  International cooperation and regular tabletop exercises are essential to ensure effective cyber defence, according to the Nato cyber defence centre

• March 09, 2018 09 Mar'18

  Security researchers demonstrate ransomware attack on robots

  Researchers have carried out a ransomware attack on robots to show that such attacks are possible and should be guarded against

• March 09, 2018 09 Mar'18

  Cryptojacking cyber criminals up their game

  Cyber criminals hijacking computing resources to mine for cryptocurrencies are raising their efforts to bypass enterprise security controls, researchers have found

• March 08, 2018 08 Mar'18

  Mac malware more than doubled in 2017

  Malware targeting Apple Mac computers more than doubled from 2016 to 2017, according to security firm Malwarebytes

• March 08, 2018 08 Mar'18

  UK cyber security certification pilot launched

  UK businesses now have the opportunity to improve their cyber security and prove they have taken steps to protect data they hold, thanks to a police-backed certification scheme

• March 08, 2018 08 Mar'18

  Businesses warned not to ignore cryptojacking threat

  Businesses should not ignore the threat of malware designed to carry out illicit cryptocurrency mining, warns NTT Security

• March 07, 2018 07 Mar'18

  Only half of ransomware payments honoured

  Only half of ransomware victims who pay ransoms to cyber criminals recover their data, a report reveals, pointing to a need for more effective strategies to deal with these attacks

• March 07, 2018 07 Mar'18

  Businesses under pressure to allow easier access to cloud

  Businesses are under pressure from employees to use consumer-focused authentication methods for cloud applications, but that could have both positive and negative security implications, warns Gemalto

• March 07, 2018 07 Mar'18

  Cyber attacks up nearly 20% in 2017

  Research by SonicWall shows there were 9.32 billion malware attacks globally last year, but ransomware attacks fell by 71%

• March 07, 2018 07 Mar'18

  Cyber security is a team sport, says NCSC

  The UK’s national cyber security agency aims to help organisations understand the need to act collaboratively and collectively against the cyber threat, urging them to raise the bar

• March 07, 2018 07 Mar'18

  World Economic Forum creates fintech focus group for cyber security

  WEF consortium of companies will focus on protecting financial technology firms from cyber threats

• March 07, 2018 07 Mar'18

  Developed APAC countries well-poised for the cloud

  With strong policies in data protection and cyber security, Japan, Australia and Singapore are among countries that are most prepared to reap the benefits of the cloud

• March 06, 2018 06 Mar'18

  Government sets out tighter security measures for IoT devices

  The government has announced plans to develop a new code of practice to improve the security of connected internet of things devices

• March 06, 2018 06 Mar'18

  Local councils call for government funding for GDPR compliance

  National Association of Local Councils is concerned complying with GDPR puts financial strain on local authorities and calls on government to help with funding

• March 06, 2018 06 Mar'18

  EC to boost cyber security support and collaboration

  The European Commission is focused on boosting cyber security support and collaboration throughout the European Union

• March 06, 2018 06 Mar'18

  Most Britons concerned about personal data sharing

  Most UK consumers are concerned about personal data they have shared online, but few know the extent of that data or their rights, a survey shows, indicating a need for education and transparency

• March 06, 2018 06 Mar'18

  Security remains an afterthought in DevOps

  Enterprises in Asia are lapping up DevOps but less than one-third have baked security processes into their developments

• March 05, 2018 05 Mar'18

  CIO interview: Helena Theakstone, head of digital, Oasis Fashion

  Oasis Fashion’s head of digital talks about GDPR preparation, collaboration between digital and IT, and the importance of listening to customers

• March 05, 2018 05 Mar'18

  Most healthcare organisations have been breached, report shows

   Less than a third of global healthcare organisations remain untouched, as data breaches rise across the industry, a report reveals

• March 05, 2018 05 Mar'18

  Spring Break flaw shows cross-industry collaboration

  A flaw that was discovered in Pivotal’s Spring Framework in September 2017 has only come to light now that users have had a chance to update

• March 02, 2018 02 Mar'18

  UK will need data protection agreement with EU as part of Brexit deal, says PM

  Prime minister Theresa May's Brexit speech highlights need for data protection deal with EU, “advanced” border IT systems, and re-confirms UK won’t be part of the EU digital single market

• March 02, 2018 02 Mar'18

  Cyber crime is a top threat to UK charities, says NCSC

  Cyber crime poses the most serious threats to UK charities, the National Cyber Security Centre has warned

• March 02, 2018 02 Mar'18

  Cyber threat to industrial control systems highest yet

  The cyber threat to industrial control systems has never been greater, according to a report analysing malicious activity aimed at such systems

• March 02, 2018 02 Mar'18

  Equifax ups breach figure by a further 2.5 million

  Credit rating agency Equifax has increased the number of US records believed to have been compromised in 2017

• March 02, 2018 02 Mar'18

  Memcached servers irresistible to DDoS attackers, expert warns

  In the light of the biggest distributed denial of service attack to date against GitHub, organisations should ditch memcached servers or risk a blizzard of blistering attacks, says security researcher

• March 02, 2018 02 Mar'18

  New privacy fears as IT challenges delay surveillance oversight body by a year

  IT challenges have delayed government plans for an independent body to authorise requests to access the public’s internet and phone records by nearly a year, raising new legal and privacy concerns

• March 01, 2018 01 Mar'18

  Imaging systems biggest security risk in healthcare

  Imaging systems have been identified as the biggest cyber security risk in the healthcare sector, a report on internet of things security has revealed

• March 01, 2018 01 Mar'18

  Trust underpins innovation, says UK information commissioner

  Underlining the relevance of data protection legislation to business, the UK information commissioner says consumer trust is key to innovation