News

IT security

• January 24, 2024 24 Jan'24

  Critical vulnerability exposes Fortra GoAnywhere users

  Fortra GoAnywhere MFT users must take steps to address a newly disclosed zero-day vulnerability without delay

• January 24, 2024 24 Jan'24

  AI will heighten global ransomware threat, says NCSC

  The benefits of artificial intelligence to cyber criminals being well-known, the NCSC now assesses it’s likely AI will soon be widely used to enhance ransomware attacks

• January 24, 2024 24 Jan'24

  Salesforce’s bug bounty programme paid out $3m in 2023

  Ethical hackers disclosed more than 4,000 vulnerabilities to Salesforce last year through its bug bounty programme, and received over $3m in rewards

• January 24, 2024 24 Jan'24

  Cato claims world’s first SASE-based XDR

  Generative AI, detection and response, endpoint protection and new incident response tools headline expansion of core secure access service edge platform beyond networking, threat prevention and data protection

• January 23, 2024 23 Jan'24

  Treat cyber risk like financial or legal issue, says UK government

  UK government and NCSC launch proposed code of practice on cyber security governance to help directors and business leaders toughen their defences

• January 23, 2024 23 Jan'24

  Leak of 26 billion records may prove to be ‘mother of all breaches’

  The discovery of a dataset comprising 26 billion stolen records may prove to be record-breaking in both its size and the danger it poses to ordinary people

• January 23, 2024 23 Jan'24

  SEC bitcoin hack was result of SIM-swapping

  A cyber attack on the US financial regulator earlier in January 2024 occurred after hackers took over one of its mobile phone accounts in a so-called SIM-swapping attack

• January 22, 2024 22 Jan'24

  SolarWinds hackers attack Microsoft in apparent recon mission

  Russian-backed threat actor behind infamous 2020 SolarWinds Sunburst intrusion hacked into Microsoft’s systems, apparently in an attempt to get hold of intel on themselves

• January 22, 2024 22 Jan'24

  PAC calls on MoD to fix inventory management IT

  The Public Accounts Committee is concerned that the ageing and fragmented IT systems used in the MoD’s inventory management puts front-line forces at significant risk

• January 22, 2024 22 Jan'24

  Chat control: Tech companies warn ministers over EU encryption plans

  Tech companies have written to EU ministers to urge them to back the European Parliament, rather than the European Commission, over proposed regulations to police child abuse

• January 19, 2024 19 Jan'24

  ICO prompts confusion over police cloud legality

  The UK data regulator has suggested that, despite major data protection concerns, it is likely to greenlight police cloud deployments because of an information-sharing agreement with the US government

• January 19, 2024 19 Jan'24

  Neighbouring Kent councils hit by simultaneous cyber attacks

  Canterbury, Dover and Thanet Councils in Kent have all been struck by simultaneous cyber attacks knocking systems offline, with indications of a link between all three

• January 18, 2024 18 Jan'24

  Cyber non-profit enlists ex-NCSC head as technical chair

  Founding NCSC chief exec Ciaran Martin is to join the newly launched Cyber Monitoring Centre non-profit as chair of its technical committee

• January 17, 2024 17 Jan'24

  NCSC invites security pros to join the big leagues

  The NCSC is inviting security pros from across the UK to sign up to work with its experts on an intelligence-sharing initiative

• January 17, 2024 17 Jan'24

  The Security Interviews: Rebecca Taylor, SecureWorks Counter Threat Unit

  In October 2023, Rebecca Taylor of the SecureWorks Counter Threat Unit was recognised at the annual Security Serious Unsung Heroes Awards for her work. Computer Weekly caught up with her to talk mentoring, cyber career development and diversity

• January 17, 2024 17 Jan'24

  Victims of 2023 Capita data breaches head to High Court

  More than 5,000 people impacted by data breaches arising from two cyber incidents affecting outsourcer Capita have joined a group action lawsuit

• January 17, 2024 17 Jan'24

  Singapore proposes governance framework for generative AI

  AI Verify Foundation and Infocomm Media Development Authority have proposed a governance framework for generative AI to address the risks and concerns about the emerging technology

• January 16, 2024 16 Jan'24

  Kaspersky shares Pegasus spyware-hunting tool

  Kaspersky has developed a way of easily exposing the presence of Pegasus spyware on iOS devices and believes its methodology may also help users identify other such surveillance malware

• January 16, 2024 16 Jan'24

  Republic of Ireland publishes progress update on digital strategy

  Update reveals 2.3 million people in Ireland now have MyGovID accounts, and the Irish government plans to launch a new digital portal for businesses, as well as establishing an AI advisory council imminently

• January 15, 2024 15 Jan'24

  British Library catalogues back online after ransomware attack

  The British Library has restored online access to its main catalogue of nearly 40 million items on a limited basis as it continues the long and arduous process of recovering from a ransomware attack

• January 15, 2024 15 Jan'24

  Cosmetics retailer Lush dealing with mystery cyber incident

  Cosmetics retailer Lush confirms it’s investigating a cyber attack of an undisclosed nature, but key public-facing systems appear to be unaffected

• January 15, 2024 15 Jan'24

  Russia hacked ex-MI6 chief’s emails – what they reveal is more Dad’s Army than deep state

  A Russian hacking group that published emails of ex-MI6 chief Richard Dearlove claimed to have uncovered a conspiracy, but it was more Dad’s Army than the ‘deep state’, Computer Weekly and Byline Times reveal

• January 15, 2024 15 Jan'24

  How legal disclosure failures disrupted the Post Office Horizon inquiry

  From overly narrow search terms, overzealous deduplication of documents and failed email migrations, poor management of legal discovery has delayed justice for postmasters in the Horizon inquiry  

• January 15, 2024 15 Jan'24

  EU amendment changes open source definition

  The EU Cyber Resilience Act has the potential to cause confusion among open source developers, with questions remaining over open development

• January 15, 2024 15 Jan'24

  IT failure caused weekend chaos at Sussex hospitals

  The critical incident at University Hospitals Sussex NHS Foundation Trust, caused by IT issues on Sunday night, has now been resolved

• January 15, 2024 15 Jan'24

  NCA director sacked after WhatsApp and email security breaches

  Nikki Holland, former director of investigations at the NCA, was sacked for “misconduct” after sending sensitive NCA information over personal email and WhatsApp

• January 12, 2024 12 Jan'24

  UK government seeks public views on impacts of AI-generated porn

  The government’s Pornography Review will look in part at the use of AI throughout the industry to generate sexually explicit content without people’s consent

• January 11, 2024 11 Jan'24

  Cisco fixes high-impact flaw in unified comms platform

  Cisco unified comms customers are urged to patch a critical vulnerability in Unity Connection, a messaging and voicemail product

• January 10, 2024 10 Jan'24

  Davos 2024: AI-generated disinformation poses threat to elections, says World Economic Forum

  Disinformation and misinformation are the top risks facing businesses, governments and the public over the next two years

• January 10, 2024 10 Jan'24

  Windows Kerberos, Hyper-V vulns among January Patch Tuesday bugs

  Microsoft starts 2024 right with another slimline Patch Tuesday drop, but there are some critical vulns to be alert to, including a number of man-in-the-middle attack vectors

• January 10, 2024 10 Jan'24

  SEC social media hack highlights value of MFA

  The US SEC briefly appeared to approve new bitcoin trading rules after a social media account was targeted by troublemakers, proving the value of MFA once again

• January 10, 2024 10 Jan'24

  Scotland ‘sleepwalking’ to mass surveillance with DPDI Bill

  The independent checks and balances over biometrics and biometric-enabled surveillance must be strengthened to prevent Scotland from sliding into a surveillance state along with the rest of the UK

• January 09, 2024 09 Jan'24

  Babuk Tortilla ransomware decryptor made available

  A joint effort between Cisco Talos, Avast and the Dutch police will bring relief to many victims of a variant of the Babuk ransomware known as Tortilla

• January 09, 2024 09 Jan'24

  Study reveals cyber risks to US elections

  With the 2024 US presidential election cycle beginning, a study produced by Arctic Wolf has highlighted big gaps in preparedness and resourcing at government bodies across the US

• January 08, 2024 08 Jan'24

  British Library ransomware attack could cost up to £7m

  The cost of recovering the British Library’s ransomware-stricken IT systems could be up to £7m, it has emerged

• January 08, 2024 08 Jan'24

  Inside the Met Police’s investigation into EncroChat crime gangs

  The Met’s senior investigating officer responsible for investigating criminals using the EncroChat encrypted phone network tells the inside story of the UK’s biggest organised crime bust in a BBC podcast series released this week

• January 04, 2024 04 Jan'24

  Celona and Palo Alto partner to enhance private 5G network security

  Wireless services specialist Celona and security firm Palo Alto Networks are coming together to enhance device protection for organisations operating private mobile networks

• January 03, 2024 03 Jan'24

  Dutch working to promote cooperation in Europe to keep internet safe

  A Dutch cooperative approach offers national and international cooperation opportunities for ISPs to guard against DDoS attacks, lawful interception and detect abuse in networks

• January 03, 2024 03 Jan'24

  Fighting money laundering with AI

  Mike Foster, CEO of SymphonyAI Sensa-NetReveal, talks up how AI can be used to fight financial crime and how the company’s technology can augment existing AML investments

• January 02, 2024 02 Jan'24

  China’s UNC4841 pivots to new Barracuda ESG zero-day

  The Chinese state threat actor behind a series of cyber attacks on Barracuda Networks customers embarked on a campaign targeting the supplier’s email security products in the run-up to Christmas

• January 02, 2024 02 Jan'24

  Cloudflare eyes GenAI workloads with Workers AI

  Cloudflare’s Workers developer platform is touted to make it easier for organisations to deploy GenAI capabilities at the edge to speed up inferencing

• December 29, 2023 29 Dec'23

  Top 10 India IT stories of 2023

  We recap the year’s top 10 stories in India, including the country’s datacentre boom and innovations in space and agriculture technologies

• December 29, 2023 29 Dec'23

  Top 10 AI regulation stories of 2023

  From the UK government’s publication of its long-awaited AI whitepaper to its convening of the world’s first AI Safety Summit, here are Computer Weekly’s top 10 AI regulation stories of 2023

• December 28, 2023 28 Dec'23

  Top 10 technology and ethics stories of 2023

  Here are Computer Weekly’s top 10 technology and ethics stories of 2023

• December 27, 2023 27 Dec'23

  Top 10 police technology stories of 2023

  Here are Computer Weekly’s top 10 police technology stories of 2023

• December 27, 2023 27 Dec'23

  Top 10 ASEAN IT stories of 2023

  Organisations across the region have continued to shore up their cyber security posture while investing in infrastructure to pave the way for emerging technologies like GenAI

• December 22, 2023 22 Dec'23

  Top 10 government IT stories of 2023

  In the year that gave life to four new government departments, Whitehall bosses have continued to fly the flag for technology, with mixed results and success. Here are the stories that made waves in 2023

• December 21, 2023 21 Dec'23

  Top 10 cyber crime stories of 2023

  Ransomware gangs dominated the cyber criminal underworld in 2023, a year that will prove notable for significant evolutionary trends in their tactics

• December 21, 2023 21 Dec'23

  Top 10 storage supplier strategy stories of 2023

  In 2023, we looked at the top storage suppliers, their market share and how they set themselves for a future of hybrid cloud, containerisation and consumption models of purchasing

• December 20, 2023 20 Dec'23

  ALPHV/BlackCat operation down, but maybe not out

  Multinational law enforcement has targeted the operations of the notorious ALPHV/BlackCat cyber extortion gang, but the group’s members appear to remain defiant