News

IT security

June 02, 2025 02 Jun'25
Infosecurity 2025: NCA cyber intelligence head spells out trends

Will Lyne, head of cyber intelligence at the National Crime Agency, sketches out cyber criminal trends as ransomware and other attack varieties become democratised beyond Russophone, skilled software developers
May 30, 2025 30 May'25
Dutch businesses lag behind in cyber resilience as threats escalate

While non-IT business professionals in the middle of their careers face the most disruption from AI, professionals in the IT services sector and their employers must prepare for change
May 30, 2025 30 May'25
Noisy quantum hardware could crack RSA-2048 in seven days

Research highlights the need for quantum safe cryptography given the speed with which quantum computing is evolving
May 30, 2025 30 May'25
Cloud migration demands contractual safeguards and clear strategy

Cyber security experts urge organisations to define clear objectives, understand shared security models and implement strong data governance when migrating workloads to the cloud

May 29, 2025 29 May'25
Gov.uk Wallet open to public sector bodies

Government departments can soon begin to add documents to Gov.uk Wallet, as the Government Digital Service publishes guidance for public sector bodies on how to use the smartphone app
May 28, 2025 28 May'25
UK biometric surveillance exists in ‘legal grey area’

The rapid proliferation of ‘biometric mass surveillance technologies’ throughout the UK’s public and private sectors is taking place without legal certainty or adequate safeguards for the public
May 28, 2025 28 May'25
Adidas confirms customer data was accessed during cyber attack

Sportswear manufacturer Adidas has confirmed its systems were infiltrated by an unauthorised third party
May 28, 2025 28 May'25
Remote purchase fraud surges 14%, says banking industry

Brits lost over £1bn to payment fraud in its many forms last year, according to the latest banking industry numbers
May 27, 2025 27 May'25
Maturing UK fintechs increase tech and cyber security hiring

Increased hiring reflects that fintechs are maturing and now require more cyber security and compliance experts
May 27, 2025 27 May'25
US makes fresh indictments over DanaBot, Qakbot malwares

US charges the operators of two malwares, DanaBot and Qakbot, whose actions led to millions of dollars worth of cyber theft and fraud

May 27, 2025 27 May'25
Armed forces charity steps in to address cyber mental health crisis

CIISec and military charity PTSD Resolution hope to address a gathering mental health crisis among frontline cyber professionals
May 23, 2025 23 May'25
Essex Police discloses ‘incoherent’ facial recognition assessment

An equality impact assessment of Essex Police live facial recognition deployments is plagued by inconsistencies and poor methodology, undermining the force’s claim that its use of the technology will not be discriminatory
May 22, 2025 22 May'25
Microsoft raises posse to target dangerous Lumma malware

Microsoft, along with a consortium of partners, has seized and disrupted a significant part of the Lumma malware-as-a-service network used to steal data and funds
May 22, 2025 22 May'25
How to tackle your infrastructure technical debt

Gartner analysts explain how infrastructure and operations teams can address the accumulation of outdated systems and make a compelling business case for upgrades
May 21, 2025 21 May'25
M&S cyber attack disruption likely to last until July

M&S says it has moved into recovery mode after a ransomware attack, but expects some disruption to persist throughout the coming weeks
May 21, 2025 21 May'25
NCSC: Russia’s Fancy Bear targeting logistics, tech organisations

The NCSC and its partner agencies have blown the whistle on an extensive campaign of malicious cyber attacks orchestrated by the Russian state Fancy Bear operation
May 21, 2025 21 May'25
Capital One pushes out data tokenisation

Organisations using the Databricks and Snowflake platforms will be able to use Capital One’s Databolt tool to secure their data
May 21, 2025 21 May'25
Ransomware attacks dropped by a third last month

Reported ransomware attacks eased off during April following a dramatic spike in the first quarter of 2025
May 21, 2025 21 May'25
Strong fintech security posture at risk via third-party weak links

Despite having a strong security posture, the financial technology sector could be open to attack via third parties
May 20, 2025 20 May'25
Dell unveils disaggregated infrastructure strategy

Dell makes push for disaggregated infrastructure, aiming to offer enterprises the independent scaling of three-tier architectures with the operational benefits of hyperconverged systems
May 20, 2025 20 May'25
Hacking contest exposes VMware security

In what has been described as a historical first, hackers in Berlin have been able to demo successful attacks on the ESXi hypervisor
May 20, 2025 20 May'25
Retail cyber attacks hit food distributor Peter Green Chilled

Cold chain services provider Peter Green Chilled, which supplies the likes of Aldi, Sainsbury’s and Tesco, has been forced to halt operations after succumbing to a ransomware attack
May 19, 2025 19 May'25
Chinese cyber spooks lure laid-off US government workers

A Washington DC-based think tank has published evidence that Chinese intelligence services have been running a network of digital ‘front’ companies targeting laid-off government workers as recruits
May 19, 2025 19 May'25
Legal Aid Agency breach may encompass millions of people

Legal Aid Agency says the data of anybody who applied for legal aid over the past 15 years has been compromised in a cyber attack
May 19, 2025 19 May'25
Gartner: Most firms not tapping cloud’s full potential

Organisations have not fully leveraged the full potential of cloud and must navigate emerging trends such as artificial intelligence, multicloud complexity and security perceptions to stay competitive
May 16, 2025 16 May'25
No workaround leads to more pain for VMware users

There are patches for the latest batch of security alerts from Broadcom, but VMware users on perpetual licences may not have access
May 16, 2025 16 May'25
Security tests reveal serious vulnerability in government’s One Login digital ID system

A ‘red teaming’ exercise to simulate cyber attacks on the government’s flagship digital identity system has found that One Login can be compromised without detection
May 16, 2025 16 May'25
The Security Interviews: David Faugno, 1Password

David Faugno, co-CEO of 1Password, discusses how his background led to him joining the company and why maintaining profitability is a key factor in overcoming the challenges of switching markets.
May 15, 2025 15 May'25
NHS asks suppliers to sign up to cyber covenant

NHS digital and security leaders call on their suppliers to commit to a cyber security charter as the health service works to improve its resilience in the face of growing threat levels
May 15, 2025 15 May'25
How close is quantum computing to commercial reality?

At a recent event, experts explored the progress towards logical qubits and how these will be applied to empower business IT
May 15, 2025 15 May'25
Government starts private sector engagement on digital ID and Gov.uk Wallet

Following concerns from the digital identity industry that Gov.uk Wallet would dominate the market, the government has offered private sector providers a ‘critical role’ in its future, as it revealed further details on the wallet
May 14, 2025 14 May'25
Scattered Spider retail attacks spreading to US, says Google

Google’s threat intel analysts are aware of a number of in-progress cyber attacks against US retailers linked to the same Scattered Spider gang that supposedly attacked M&S and Co-op in the UK
May 14, 2025 14 May'25
Enisa launches European vulnerability database

The EU’s new vulnerability database is designed to offer a broader, more transparent source of information on new cyber vulnerabilities
May 14, 2025 14 May'25
Why we must reform the Computer Misuse Act: A cyber pro speaks out

Britain’s outdated hacking laws are leaving the UK’s cyber practitioners hamstrung and afraid. Security professional Simon Whittaker reveals how he nearly ran afoul of the Computer Misuse Act, and why he’s speaking out for reform
May 14, 2025 14 May'25
New security paradigm needed for IT/OT convergence

Industry leaders and policymakers highlight growing cyber threats from the integration of IT and operational technology systems, calling for collaboration and regulatory frameworks to protect critical systems, among other measures
May 13, 2025 13 May'25
May Patch Tuesday brings five exploited zero-days to fix

Microsoft fixes five exploited, and two publicly disclosed, zero-days in the fifth Patch Tuesday update of 2025
May 13, 2025 13 May'25
M&S forces customer password resets after data breach

M&S is instructing all of its customers to change their account passwords after a significant amount of data was stolen in a DragonForce ransomware attack
May 13, 2025 13 May'25
Gov.uk One Login loses certification for digital identity trust framework

The government’s flagship digital identity system has lost its certification against the government’s own digital identity system trust framework
May 13, 2025 13 May'25
Australian data breaches hit record high in 2024

More than 1,100 data breaches were reported in Australia last year, a 25% jump from 2023, prompting calls for stronger security measures across businesses and government agencies
May 09, 2025 09 May'25
Ransomware: What the LockBit 3.0 data leak reveals

An administration interface instance for the ransomware franchise's affiliates was attacked on 29 April. Data from its SQL database has been extracted and disclosed
May 08, 2025 08 May'25
Government will miss cyber resiliency targets, MPs warn

A Public Accounts Committee report on government cyber resilience finds that the Cabinet Office has been working hard to improve, but is likely to miss targets and needs a fundamentally different approach
May 08, 2025 08 May'25
Preparing for post-quantum computing will be more difficult than the millennium bug

The job of getting the UK ready for post-quantum computing will be at least as difficult as the Y2K problem, says National Cyber Security Centre CTO Ollie Whitehouse
May 08, 2025 08 May'25
US tells CNI orgs to stop connecting OT kit to the web

US authorities have released guidance for owners of critical national infrastructure in the face of an undisclosed number of cyber incidents
May 08, 2025 08 May'25
UK government websites to replace passwords with secure passkeys

Government websites are to replace difficult-to-remember passwords with highly secure passkeys that will protect against phishing and cyber attackers
May 07, 2025 07 May'25
Meta awarded $167m in court battle with spyware mercenaries

WhatsApp owner Meta is awarded millions of dollars in damages and compensation after its service was exploited by users of mercenary spyware developer NSO’s infamous Pegasus mobile malware
May 07, 2025 07 May'25
Chaos spreads at Co-op and M&S following DragonForce attacks

No end is yet in sight for UK retailers subjected to apparent ransomware attacks
May 07, 2025 07 May'25
Europe leads shift from cyber security ‘headcount gap’ to skills-based hiring

Research from Sans Institute reveals European organisations are leading a global shift in hiring priorities, driven by regional regulatory frameworks
May 07, 2025 07 May'25
Oxford Uni adds cyber resilience module to MBA programme

Oxford University’s Saïd Business School is working with cyber response specialist Sygnia to help future business leaders get on top of security
May 07, 2025 07 May'25
UK at risk of Russian cyber and physical attacks as Ukraine seeks peace deal

UK cyber security chief warns of ‘direct connection’ between Russian cyber attacks and physical threats to the UK
May 07, 2025 07 May'25
DSIT aims to bolster expertise with year-long secondments

To drive forward its Plan for Change, the Labour government is looking to hire 25 experts for the Department for Science, Innovation and Technology Fellowship programme