News

IT security

• April 27, 2016 27 Apr'16

  IPv6 alone will not secure IoT, warns GE CISO

  It is important for all users of the internet of things to understand what they are getting into with IPv6, and to be aware of the risks and myths, says GE CISO Hanns Proenen

• April 26, 2016 26 Apr'16

  Business failing to learn lessons of past cyber attacks, report shows

  Organisations are still failing to address basic security issues and well-known attack methods, Verizon’s latest Data Breach Investigations Report reveals

• April 21, 2016 21 Apr'16

  GCHQ told analysts to assume surveillance 'bulk data' is legal

  Documents obtained by charity Privacy International reveal insights into GCHQ’s collection of sensitive bulk data, as lawyers question the impact of surveillance on legal privilege, fair trials and protection of whistleblowers

• April 19, 2016 19 Apr'16

  Employees’ use of personal devices puts firms at risk of malware infection, says report

  Downloaders care about their own security while grabbing pirated content, not that of their employers

• April 15, 2016 15 Apr'16

  Israeli volunteers ready their cyber defences as Anonymous affiliates attack

  Every April, Israel braces itself for an onslaught from pro-Palestinian hackers, but the occupants of a small conference room in Tel Aviv stand in their way

• April 15, 2016 15 Apr'16

  BBC turns micro:bit computers into IoT devices

  The BBC and Nominet demonstrate a new use case for the micro:bit computer and hope to turn Britain’s schoolchildren into internet of things pioneers

• April 13, 2016 13 Apr'16

  NCA attempts 'back door' access to obtain activist Lauri Love’s passwords

  Court told that use of civil proceedings to force disclosure of alleged hacker Lauri Love's passwords is disproportionate and would breach human rights law

• April 11, 2016 11 Apr'16

  QA launches cyber attack defence training facility in London

  Training firm QA launches a cyber attack simulation facility in London to enable organisations to test and learn cyber defence skills

• April 11, 2016 11 Apr'16

  Activist Lauri Love faces order to disclose encryption keys

  The UK’s National Crime Agency takes an unusual legal step to force a former university student accused of hacking to disclose encryption keys

• April 11, 2016 11 Apr'16

  IT specialist sentenced for stealing NHS computer equipment

  A former NHS IT worker is convicted of stealing hospital computer equipment from Doncaster and Bassetlaw Hospitals NHS Foundation trust and selling them on eBay

• April 06, 2016 06 Apr'16

  Panama Papers revealed by graph database visualisation software

  The 11.5 million files leaked from Panama-based law firm Mossack Fonseca are being interrogated by journalists using a combination of Neo4j’s graph database and data visualisation software Linkurious

• April 05, 2016 05 Apr'16

  'Citizens will be stripped naked' by Turkey’s data law

  Turkey's data protection law, introduced in March 2016, will make Turkey a near total surveillance state, yet the EU, apparently more concerned about securing Turkey's help in controlling immigration, is turning a blind eye

• April 04, 2016 04 Apr'16

  UK campaign launched against location data security risks

  UK consumers are unwittingly signing up to be location tracked and this data is being used and sold on for commercial benefit, warns privacy campaign

• March 31, 2016 31 Mar'16

  DDoS attacks on universities normally performed by “disgruntled” students or employees

  The majority of distributed denial of service attacks on universities are made by students or employees, says the head of infrastructure services at the University of London

• March 31, 2016 31 Mar'16

  Adwind at centre of cyber attack on Singapore bank

  Kaspersky Lab has revealed that the Adwind malware-as-a-service platform was at the centre of an attack on a Singapore bank

• March 30, 2016 30 Mar'16

  Security should be driven by business, says Corvid’s Andrew Nanson

  Information security should be business-driven and investments assessed for their effectiveness and business value, according to Corvid CTO

• March 29, 2016 29 Mar'16

  Cyber criminals use Microsoft PowerShell in ransomware attacks

  A newly discovered family of ransomware, dubbed PowerWare, uses Microsoft PowerShell to target organisations through macro-enabled documents

• March 29, 2016 29 Mar'16

  Apple vows to raise security as FBI breaks into iPhone

  Apple says it will help law enforcement with investigations, but will increase the security of its products after the FBI broke into an iPhone

• March 24, 2016 24 Mar'16

  Government warned of smart meter security threat back in 2012

  The government was warned four years ago that its plans for a nationwide smart meter roll-out represented a “potentially significant” security and privacy threat, Computer Weekly has learned

• March 24, 2016 24 Mar'16

  Businesses urged to update Apple software to dodge zero-day attacks

  Security experts are urging Apple Mac, iPhone and iPad users to update their operating systems to avoid data-stealing attacks that exploit a new zero-day vulnerability

• March 23, 2016 23 Mar'16

  Canadian Elizabeth Denham set for the UK's next information commissioner

  Canadian privacy commissioner Elizabeth Denham is to become the UK's next information commissioner as government pushes ahead with the snoopers' charter

• March 23, 2016 23 Mar'16

  US hospital claims to have fought off a ransomware attack

  A hospital in Kentucky claims to have regained control of its IT systems five days after cyber criminals hit it with a ransomware attack

• March 23, 2016 23 Mar'16

  Gov.uk Verify not secure enough for NHS, says HSCIC

  The government’s Verify identity verification platform isn’t secure enough for the NHS, so Liverpool Clinical Commissioning Group and HSCIC are working to add extra levels of security

• March 21, 2016 21 Mar'16

  Britain to pay billions for monster internet surveillance network

  New questions raised about Britain’s snoopers’ charter after Denmark abandons its own UK-style surveillance programme for a second time

• March 21, 2016 21 Mar'16

  National Cyber Security Centre to be UK authority on information security

  The UK’s National Cyber Security Centre (NCSC) is to be the UK's one-stop authority on infosec, based in London and led by GCHQ's Ciaran Martin

• March 18, 2016 18 Mar'16

  Australian girls believe online harassment is endemic

  There are clear signals that online threats against women and attempts to invade their privacy are becoming societal norms in Australia

• March 18, 2016 18 Mar'16

  Most students say cyber security is a growing threat

  Some 70% of higher education students say they are aware that cyber crime and attacks are a threat, but less than half think security is their responsibility

• March 11, 2016 11 Mar'16

  Royal Mail becomes eighth accredited Gov.uk Verify provider

  The Royal Mail is the latest provider to be accredited to support the government’s Gov.uk Verify identity assurance service

• March 11, 2016 11 Mar'16

  $1bn cyber bank heist thwarted by spelling error

  Cyber thieves made 30 requests for the New York Federal Reserve to transfer nearly $1bn from the Bangladesh central bank’s account, but a typo and the volume of requests alerted banking officials

• March 09, 2016 09 Mar'16

  Lack of security knowledge limiting business initiatives, survey shows

  Security concerns are limiting the adoption of cloud and mobility throughout organisations, according to the first Dell Data Security Survey

• March 04, 2016 04 Mar'16

  RSAC16: Cyber criminals are hiding in plain sight, says RSA report

  Cyber criminals are using social media as a communication and sales channel, not just for reconnaissance and phishing, an RSA study has revealed

• March 02, 2016 02 Mar'16

  CSA outlines CIOs’ top 12 cloud security concerns

  Cloud Security Alliance’s research team uncovers the “dirty dozen” off-premise threats

• March 02, 2016 02 Mar'16

  RSAC16: RSA’s Amit Yoran comes out in support of strong encryption

  A policy of weakened encryption would harm US economic interests and undermine those trying to defend digital environments, according to RSA president Amit Yoran

• March 01, 2016 01 Mar'16

  RSAC16: US works on data access agreement with UK

  The US is negotiating with the UK to establish a new framework that will permit UK authorities to access electronic communications directly from US companies

• February 26, 2016 26 Feb'16

  Majority of Britons support government surveillance for national security

  A survey reveals that a majority of UK citizens support government surveillance for national security as Apple attempts to rally public support in its row with the FBI over encryption

• February 26, 2016 26 Feb'16

  Nissan acts on Leaf car app security flaw after researcher goes public

  Nissan suspends its electric car app after a researcher went public about a security flaw that could enable attackers to take control of heating systems

• February 25, 2016 25 Feb'16

  Cyber crime is fastest growing economic crime, says PwC report

  More than half of UK organisations say they expect to be the victim of cyber crime in the next two years, suggesting it will become the UK’s largest economic crime, says a PwC report

• February 23, 2016 23 Feb'16

  Social engineering confirmed as top information security threat

  Cyber attackers shifted away from automated exploits in 2015 and instead tricked people into doing the dirty work, Proofpoint researchers found

• February 19, 2016 19 Feb'16

  HSBC launches biometric security for mobile banking in the UK

  Bank claims UK’s largest planned roll-out of voice biometric security technology, with more than 15 million customers in line for voice and fingerprint authentication services

• February 18, 2016 18 Feb'16

  Mobile innovation shifts to smartphone services

  As smartphone sales continue to stagnate, suppliers are looking to innovate in more novel ways

• February 17, 2016 17 Feb'16

  Judge orders Apple to unlock San Bernardino gunman’s iPhone

  A US judge has ordered Apple to help the FBI bypass the auto-erase function on the San Bernardino gunman's iPhone to find the passcode and access data, but the company says it will contest the order

• February 16, 2016 16 Feb'16

  EU managers need to up cyber security collaboration, study finds

  There is still much work to be done in the area of collaboration and sharing responsibility when it comes to preventing data breaches, a study has found

• February 12, 2016 12 Feb'16

  Interview: Cabinet Office minister Matt Hancock on digital government

  The government’s minister for digital reform talks about creating a Digital Leadership Academy, learning valuable lessons, and his love for open data

• February 12, 2016 12 Feb'16

  US IT professionals overconfident in cyber attack detection, study finds

  Most US IT professionals are confident in key security controls to detect cyber attacks – but unsure how long it would take automated tools to discover a breach

• February 11, 2016 11 Feb'16

  Social engineering is top hacking method, survey shows

  Social engineering tops the list of popular hacking methods, underlining the need for continuous monitoring, according to security firm Balabit

• February 11, 2016 11 Feb'16

  TechUK calls on government to take reports on spy laws seriously

  Government must address the fundamental concerns raised by expert witnesses, MPs and Lords about the draft Investigatory Powers Bill, says TechUK

• February 10, 2016 10 Feb'16

  Gov.uk Verify identity system targets 50 government services for April go-live

  Government identity assurance system is set to move from beta to live in April, three years after its original target date

• February 08, 2016 08 Feb'16

  Bulk data collection unnecessary for surveillance, says cyber expert

  Opting for bulk data collection and other intrusive surveillance overlooks other means available that do not involve collateral damage to businesses and innocent people, says cyber expert

• February 04, 2016 04 Feb'16

  Google’s Chrome to flag deceptive embedded content

  Browser will warn of any embedded content such as ads that pretend to act like, and look and feel like, a trusted entity

• February 01, 2016 01 Feb'16

  DDoS is most common cyber attack on financial institutions

  January’s attack on HSBC is typical for the financial sector, but no business should consider itself unlikely to be targeted in this way, say security experts