News

IT security

• March 22, 2018 22 Mar'18

  Application layer DDoS attacks increasing, Imperva data shows

  Distributed denial of service attacks targeting applications almost doubled in the last three months of 2017, according to Imperva Incapsula data

• March 22, 2018 22 Mar'18

  Legacy IT hampers digital strategy at banks and insurers

  A highly regulated environment, a risk-averse culture and a reliance on core legacy technology are holding back banks and insurance companies from modernisation

• March 22, 2018 22 Mar'18

  Businesses lack cyber security confidence after majority were breached in past year

  Most businesses were hit by a data breach in the past year, yet less than half are confident they would detect a breach, a survey shows

• March 21, 2018 21 Mar'18

  MoD to focus on SMEs to raise supply chain cyber security

  The Ministry of Defence continues to develop a joint initiative with industry aimed at raising the security posture throughout the UK’s defence supply chain, with increasing focus on SMEs

• March 21, 2018 21 Mar'18

  SD-WAN still too complex, survey shows

  Despite SD-WAN adoption, WAN complexity remains a major challenge, a survey has revealed, driving firms to managed services, mainly because of security concerns

• March 21, 2018 21 Mar'18

  Popular culture key to giving cyber security much-needed boost

  The cyber security industry should turn to popular culture to raise awareness of the cyber threat to businesses and consumers and attract new blood to the field, says McMafia author

• March 21, 2018 21 Mar'18

  WhatsApp co-founder calls time on Facebook

  Brian Acton has called time on Facebook following reports of the firm’s dealings with data mining firm Cambridge Analytica linked to the EU referendum and Donald Trump’s US election campaign

• March 21, 2018 21 Mar'18

  Singapore government outlines its approach to IoT

  Avoiding supplier lock-in, driving open standards and tapping modular platforms are part of the approach that the Singapore government has taken in implementing the internet of things in the city-state

• March 20, 2018 20 Mar'18

  Think tank reports lifts lid on police cyber crime training

  UK think tank Parliament Street has lifted the lid on spending by police forces on training staff to deal with cyber crime and recommended greater collaboration in this regard

• March 20, 2018 20 Mar'18

  Firms need to move from DevOps to DevSecOps, says expert

  In the face of competition, organisations are turning to DevOps to improve efficiency and accelerate innovation, but this is creating new security risks, an industry expert warns

• March 19, 2018 19 Mar'18

  C-suite a cyber attack risk, say security chiefs

  Those tasked with running organisations are the most likely group to expose them to a major cyber attack, a poll of UK information security executives shows

• March 19, 2018 19 Mar'18

  Wigan data breaches underline need to share threat intelligence

  Ongoing data breaches experienced by local authorities underline the need for greater sharing of threat intelligence, say security experts

• March 19, 2018 19 Mar'18

  Heartbleed and Shellshock thriving in Docker community

  DevOps has revolutionised IT, but security best practices are being skimmed over, which means old vulnerabilities are finding a new lease of life in Docker

• March 19, 2018 19 Mar'18

  Russia compromised core router in US energy attacks

  Russian cyber attackers used a compromised core router in a series of attacks on the US energy sector, security researchers have revealed as the UK energy sector is placed on alert

• March 16, 2018 16 Mar'18

  IT contractors not a risk despite Snowden leaks, GCHQ tells court

  The government argues in the Investigatory Powers Tribunal that contractors with systems administration rights to computers holding GCHQ’s most sensitive intelligence pose no more of a security risk than the agency’s employees

• March 16, 2018 16 Mar'18

  Cyber criminals using complex financial system, study shows

  Cyber criminals are using a combination of new cryptocurrencies, gaming currencies and micro-payments to launder up to $200bn in ill-gotten gains, research has revealed

• March 16, 2018 16 Mar'18

  Defence industry urges government to relax controls on crypto exports

  Trade body representing defence, aerospace and security companies calls on government to make it easier to export “non-contentious” cryptography to secure organisations against cyber crime

• March 16, 2018 16 Mar'18

  US blames Russia for cyber attacks on energy firms

  The US has blamed Russia for a series of attacks on energy sector firms, underlining the need to ensure critical infrastructure IT systems are up to date and secure

• March 15, 2018 15 Mar'18

  DocuTrac medical software is a breach risk, warns Rapid7

  Security researchers have issued a security warning about medical billing and documentation software they say puts patients at risk of data breach

• March 14, 2018 14 Mar'18

  WhatsApp to suspend data sharing with Facebook

  WhatsApp has agreed to stop sharing personal data with Facebook until data protection concerns are addressed

• March 14, 2018 14 Mar'18

  Researchers accused of irresponsible disclosure of AMD chip flaws

  Israel-based researchers have been accused of irresponsible disclosure for going public with more than a dozen security flaws discovered in AMD processors

• March 14, 2018 14 Mar'18

  Most people think cryptocurrency will be accepted on buses by 2025

  Cryptocurrency is a mystery to many people, yet 55% of respondents to a survey expect shops and buses to accept digital money in seven years’ time

• March 14, 2018 14 Mar'18

  APAC security chiefs expect imminent attack on critical systems

  Nearly 70% of cyber security leaders in the APAC region believe a major attack affecting critical infrastructure across multiple countries will happen in the next two years, a survey reveals

• March 13, 2018 13 Mar'18

  Government ‘unlawfully delegated’ bulk data powers to GCHQ, court hears

  Privacy International urges Britain’s most secret court, the Investigatory Powers Tribunal, to rule that the government illegally collected surveillance data from internet and phone companies until at least September 2017

• March 13, 2018 13 Mar'18

  Public sector organisations ill-prepared for GDPR

  Public sector organisations in the UK need to do much more to comply with the General Data Protection Regulation rule on providing information to citizens about details held about them

• March 13, 2018 13 Mar'18

  Slingshot router malware: a warning for businesses

  A stealthy malware that has been used to carry out cyber espionage undetected for six years should raise a red flag to businesses, say security commentators

• March 12, 2018 12 Mar'18

  Eight new cyber threats a second in Q4 2017, McAfee report reveals

  There was an increase in cyber attacks on healthcare organisations, the use of fileless malware and cryptocurrency mining in the last three months of 2017, with eight new threats a second

• March 12, 2018 12 Mar'18

  Fileless attacks surge as hackers exploit PowerShell scripts

  Malicious scripting through Microsoft’s PowerShell IT admin tool is being used to take control of Windows machines and Apple Macs

• March 12, 2018 12 Mar'18

  Regulator takes tougher line than expected on surveillance warrants

  The Investigatory Powers Commissioner’s Office has signalled to government that it will take a tough line when scrutinising surveillance warrants under the controversial Investigatory Powers Act

• March 12, 2018 12 Mar'18

  UK leads global upward trend in SOC maturity

  The UK is leading the way towards more efficient security operations centres, but many still continue to operate with serious gaps in security, a report reveals

• March 09, 2018 09 Mar'18

  UK government criticised over lack of GDPR explanation

  Most IT decision makers in the UK are critical of the government for failing to educate organisations about the GDPR and its implications, and few have a clear understanding of it, a survey shows

• March 09, 2018 09 Mar'18

  Universal Credit project warned over Gov.uk Verify performance in 2015

  Government project management experts warned as long ago as 2015 that a problem with GDS's Verify online identity system could undermine the Universal Credit business plan

• March 09, 2018 09 Mar'18

  Cooperation and exercises key to cyber defence, says Nato centre

  International cooperation and regular tabletop exercises are essential to ensure effective cyber defence, according to the Nato cyber defence centre

• March 09, 2018 09 Mar'18

  Security researchers demonstrate ransomware attack on robots

  Researchers have carried out a ransomware attack on robots to show that such attacks are possible and should be guarded against

• March 09, 2018 09 Mar'18

  Cryptojacking cyber criminals up their game

  Cyber criminals hijacking computing resources to mine for cryptocurrencies are raising their efforts to bypass enterprise security controls, researchers have found

• March 08, 2018 08 Mar'18

  Mac malware more than doubled in 2017

  Malware targeting Apple Mac computers more than doubled from 2016 to 2017, according to security firm Malwarebytes

• March 08, 2018 08 Mar'18

  UK cyber security certification pilot launched

  UK businesses now have the opportunity to improve their cyber security and prove they have taken steps to protect data they hold, thanks to a police-backed certification scheme

• March 08, 2018 08 Mar'18

  Businesses warned not to ignore cryptojacking threat

  Businesses should not ignore the threat of malware designed to carry out illicit cryptocurrency mining, warns NTT Security

• March 07, 2018 07 Mar'18

  Only half of ransomware payments honoured

  Only half of ransomware victims who pay ransoms to cyber criminals recover their data, a report reveals, pointing to a need for more effective strategies to deal with these attacks

• March 07, 2018 07 Mar'18

  Businesses under pressure to allow easier access to cloud

  Businesses are under pressure from employees to use consumer-focused authentication methods for cloud applications, but that could have both positive and negative security implications, warns Gemalto

• March 07, 2018 07 Mar'18

  Cyber attacks up nearly 20% in 2017

  Research by SonicWall shows there were 9.32 billion malware attacks globally last year, but ransomware attacks fell by 71%

• March 07, 2018 07 Mar'18

  Cyber security is a team sport, says NCSC

  The UK’s national cyber security agency aims to help organisations understand the need to act collaboratively and collectively against the cyber threat, urging them to raise the bar

• March 07, 2018 07 Mar'18

  World Economic Forum creates fintech focus group for cyber security

  WEF consortium of companies will focus on protecting financial technology firms from cyber threats

• March 07, 2018 07 Mar'18

  Developed APAC countries well-poised for the cloud

  With strong policies in data protection and cyber security, Japan, Australia and Singapore are among countries that are most prepared to reap the benefits of the cloud

• March 06, 2018 06 Mar'18

  Government sets out tighter security measures for IoT devices

  The government has announced plans to develop a new code of practice to improve the security of connected internet of things devices

• March 06, 2018 06 Mar'18

  Local councils call for government funding for GDPR compliance

  National Association of Local Councils is concerned complying with GDPR puts financial strain on local authorities and calls on government to help with funding

• March 06, 2018 06 Mar'18

  EC to boost cyber security support and collaboration

  The European Commission is focused on boosting cyber security support and collaboration throughout the European Union

• March 06, 2018 06 Mar'18

  Most Britons concerned about personal data sharing

  Most UK consumers are concerned about personal data they have shared online, but few know the extent of that data or their rights, a survey shows, indicating a need for education and transparency

• March 06, 2018 06 Mar'18

  Security remains an afterthought in DevOps

  Enterprises in Asia are lapping up DevOps but less than one-third have baked security processes into their developments

• March 05, 2018 05 Mar'18

  CIO interview: Helena Theakstone, head of digital, Oasis Fashion

  Oasis Fashion’s head of digital talks about GDPR preparation, collaboration between digital and IT, and the importance of listening to customers