News

IT security

• April 08, 2025 08 Apr'25

  NCSC issues warning over Chinese Moonshine and BadBazaar spyware

  Two spyware variants are being used to target the mobile devices of persons of interest to Chinese intelligence, including individuals in the Taiwanese, Tibetan and Uyghur communities

• April 08, 2025 08 Apr'25

  Labour MPs launch digital ID campaign

  A large group of Labour MPs have called for the introduction of a digital ID system to crack down on illegal migration and benefits fraud

• April 08, 2025 08 Apr'25

  Spoofing vuln threatens security of WhatsApp Windows users

  Meta has disclosed and patched a potentially dangerous spoofing flaw in WhatsApp for Windows that could have caused big problems for unwitting users

• April 08, 2025 08 Apr'25

  IBM boosts AI mainframe capabilities with Z17

  IBM continues to try to break out of the mindset that mainframes are just for transaction processing. The latest server offers greater AI capabilities

• April 08, 2025 08 Apr'25

  Government punts cyber governance code of practice for UK businesses

  The Department for Science, Innovation and Technology’s cyber security minister Feryal Clark announces a cyber security code of governance for UK businesses to follow

• April 08, 2025 08 Apr'25

  Over £18m stolen from Santander UK customers in first three months of year

  Bank’s latest quarterly report on scams said over £18m was stolen from its UK customers by scammers

• April 08, 2025 08 Apr'25

  UK authority’s search for answers over deleted Julian Assange emails comes too late to retrieve data

  The Crown Prosecution Service has finally searched for information about the destruction of emails from the WikiLeaks founder’s lawyer – but too late to retrieve data about the deleted documents

• April 07, 2025 07 Apr'25

  UK SMEs losing over £3bn a year to cyber incidents

  A lack of access to technology, little to no staff training, and competing priorities are losing UK SMEs up to £3.4bn to cyber incidents every year

• April 07, 2025 07 Apr'25

  NIST calls time on older vulnerabilities amid surging disclosures

  The National Institute of Standards and Technology is deferring future updates to thousands of cyber vulnerabilities discovered prior to 2018 amid surging volumes of new submissions

• April 07, 2025 07 Apr'25

  Court rejects Home Office bid for blanket secrecy in hearings over Apple encryption case

  Investigatory Powers Tribunal rejects Home Office arguments that identifying the ‘bare details’ of legal action by Apple would damage national security, leaving open possibility of future open court hearings

• April 07, 2025 07 Apr'25

  Fintech body calls on government for national anti-fraud centre

  Industry body says a national anti-fraud centre could be the vehicle required to effectively fight fraud through data sharing

• April 04, 2025 04 Apr'25

  Norway and Nordic financial sector ramps up cyber security

  Finans Norge sets up cyber security unit CTSU to support the finance sector in Norway amid increasing threats

• April 04, 2025 04 Apr'25

  Banks to share fraud data with tech firms in cross-sector collaboration

  UK banks join tech firms in fraud data-sharing initiative to enable collaboration on action to stop online scams

• April 03, 2025 03 Apr'25

  Are LLM firewalls the future of AI security?

  As large language models permeate industries, experts at Black Hat Asia 2025 debate the need for LLM firewalls and explore their role in fending off emerging AI threats

• April 02, 2025 02 Apr'25

  UKtech50 2025 – help us find the most influential people in UK IT

  Computer Weekly’s annual search for the 50 most influential people in UK IT is on – let us know who you would like to nominate for this year's list

• April 01, 2025 01 Apr'25

  Southern Linc enhances management, security of its private cellular network

  Wireless subsidiary of Southern Company selects private LTE/5G OT management and zero-trust security provider’s Bridge platform to enhance management and security of its LTE network

• April 01, 2025 01 Apr'25

  Gmail ‘bubble’ encryption may be an S/MIME killer, says Google

  Marking the 21st anniversary of Gmail, Google is preparing to roll out an end-to-end encryption standard for its email service in hopes of democratising encryption and leaving old standards in the dust

• April 01, 2025 01 Apr'25

  Apple devices are at ‘most risk’ in UK following government ‘backdoor’ order

  Home Office refuses to answer questions from Lords over technical capability notice issued against Apple’s iCloud Advanced Data Protection encryption services

• March 31, 2025 31 Mar'25

  Top 1,000 IT service providers in scope of UK cyber bill

  The government’s proposed Cyber Security and Resilience Bill is set to include regulatory provisions covering both datacentre operators and larger IT service providers

• March 31, 2025 31 Mar'25

  Reassessing UK law enforcement data adequacy

  Computer Weekly takes stock of proposed changes to the UK’s law enforcement data protection rules and how it could affect data adequacy with the European Union

• March 31, 2025 31 Mar'25

  UK law enforcement data adequacy at risk

  The UK government says reforms to police data protection rules will help to simplify law enforcement data processing, but critics argue the changes will lower protection to the point where the UK risks losing its European data adequacy

• March 27, 2025 27 Mar'25

  Surging cyber threats drive IT directors to decentralised networks

  As directors increasingly recognise the threats posed by increasingly sophisticated, AI-driven cyber attacks, risks are being mitigated by changes in physical infrastructure networks, research finds

• March 27, 2025 27 Mar'25

  Research team demonstrates certified quantum randomness

  A 56-qubit trapped ion quantum computer from Quantinuum has demonstrated quantum supremacy as a random number generator

• March 26, 2025 26 Mar'25

  Advanced Software fined £3m over LockBit attack

  The ICO has issued a £3m fine to software provider Advanced in the wake of security failings that led to significant disruption to NHS customers in a ransomware attack

• March 26, 2025 26 Mar'25

  Military AI caught in tension between speed and control

  The use of artificial intelligence in military contexts can unlock a range of benefits for defence organisations, but also highlights a clear tension between speed and control baked into the technology

• March 25, 2025 25 Mar'25

  Public Accounts Committee calls out legacy IT

  Unsupported and out-of-date software and hardware are hindering the government’s artificial intelligence plans for the public sector

• March 25, 2025 25 Mar'25

  Nokia, Numana, Honeywell Aerospace team to advance quantum-safe networks

  Collaboration designed to drive innovation and enable a global post-quantum security economy for enterprises using quantum key distribution and advanced cryptographic network technologies to safeguard digital infrastructure

• March 25, 2025 25 Mar'25

  ETSI launches first post-quantum encryption standard

  European telco standards body launches its first post-quantum cryptography cyber standard, covering the security of critical data and communications

• March 25, 2025 25 Mar'25

  Scottish police hold almost no data on facial recognition use

  It is currently impossible to assess Police Scotland’s use of retrospective facial recognition for efficacy and fairness because the force does not collect meaningful information that would enable a proper evaluation

• March 25, 2025 25 Mar'25

  Tech specialist files legal claim after being refused security clearance for MI6 role

  An IT specialist has asked the Investigatory Powers Tribunal to investigate a series of hacking incidents after disclosing their social media accounts to MI6 vetting staff

• March 21, 2025 21 Mar'25

  NCSC, DSIT enlist IBM to spearhead cyber diversity agenda

  IBM signs on to a partnership deal in support of the popular NCSC CyberFirst Girls scheme designed to foster gender diversity in the cyber security profession

• March 20, 2025 20 Mar'25

  NCSC proposes three-step plan to move to quantum-safe encryption

  The NCSC urges service providers, large organisations and critical sectors to start thinking today about how they will migrate to post-quantum cryptography over the next decade

• March 19, 2025 19 Mar'25

  Clop resurgence drives ransomware attacks in February

  The exploitation of two new vulnerabilities in a popular file transfer service saw the Clop ransomware gang soar in February, according to NCC

• March 19, 2025 19 Mar'25

  DeepMind founder warns of compounding AI agent errors

  Artificial general intelligence may be years away, but in the meantime, organisations are being urged to adopt agent technology

• March 19, 2025 19 Mar'25

  How Telefónica avoided VMware price hike

  While some some organisations look for alternatives to VMware, Telefónica Germany has taken a different approach based on third-party support

• March 18, 2025 18 Mar'25

  Largest ever cyber deal reflects Google’s CNAPP ambitions

  In a signal of its future ambitions, Google lays down $32bn to acquire cloud-native application protection platform Wiz, reflecting the increasing need to secure multicloud environments

• March 18, 2025 18 Mar'25

  Novel encryption technology tests add value to Finland’s quantum computer project

  Tests carried out at Telia will support the building of a secure quantum network

• March 18, 2025 18 Mar'25

  Seaco charts course for unified security strategy

  Shipping container leasing giant consolidates security tools onto a single platform, leveraging AI and extended detection and response to improve security operations

• March 17, 2025 17 Mar'25

  PSNI’s ‘ridiculous’ withholding of evidence in spying operation delayed court hearings 

  Landmark ruling by the Investigatory Powers Tribunal will decide whether the surveillance court can award costs against government bodies accused of unreasonable behaviour 

• March 17, 2025 17 Mar'25

  Online Safety Act measures come into effect

  Regulator Ofcom is now able to take enforcement action against platforms under the Online Safety Act if they fail to proactively safeguard against content such as terrorist or child sexual abuse material

• March 17, 2025 17 Mar'25

  How Oracle is using AI to combat financial crime

  The tech giant is leveraging artificial intelligence to surface fraudulent financial transactions and improve the efficiency of financial crime investigations, offering relief to banks battling high costs and alert fatigue

• March 14, 2025 14 Mar'25

  Apple encryption legal challenge heard behind closed doors despite calls for public hearing

  Investigatory Powers Tribunal hearing held behind closed doors as press and civil society groups argue for open hearings

• March 14, 2025 14 Mar'25

  AI Action Summit review: Differing views cast doubt on AI’s ability to benefit whole of society

  Governments, companies and civil society groups gathered at the third global AI summit to discuss how the technology can work for the benefit of everyone in society, but experts say competing imperatives mean there is no guarantee these visions will...

• March 13, 2025 13 Mar'25

  Chinese espionage group UNC3886 targets Juniper routers

  Advanced persistent threat group UNC3886 deployed custom backdoors on end-of-life Juniper Networks routers, underscoring the need for timely patching and advanced security monitoring

• March 13, 2025 13 Mar'25

  US Congress demands UK lifts gag on Apple encryption order

  Apple and Google have told US lawmakers that they cannot tell Congress whether they have received technical capability notices from the UK

• March 13, 2025 13 Mar'25

  SuperBlack ransomware may have ties to LockBit

  Forescout researchers report on a new ransomware gang that appears to be keeping the legacy of the notorious LockBit crew alive

• March 13, 2025 13 Mar'25

  HMRC looks to upgrade SOC with advanced SIEM tech

  HMRC issues a request for information notice ahead of opening up bids for a new security information and event management project that aims to reinforce its ability to respond to cyber threats

• March 13, 2025 13 Mar'25

  Driving licence data could be used for police facial recognition

  The government’s Crime and Policing Bill could allow police to access the UK driving licence database for use in facial recognition watchlists, but the Home Office denies biometric data would be repurposed in this way

• March 13, 2025 13 Mar'25

  Cato claims end to network patching with SASE-native LAN NGFW

  Leading SASE provider unveils ‘the world’s first’ SASE-native local area network next-generation firewall to address longstanding IT pain point for firewall appliances

• March 12, 2025 12 Mar'25

  iPhone, iPad update fixes critical WebKit flaw

  iPhone and iPad users are advised to update their devices as Apple addresses an out-of-bounds write issue in the WebKit browser engine that appears to have been exploited in targeted cyber attacks