News

IT security

• July 20, 2023 20 Jul'23

  How the DSMA balances security and privacy with press freedom

  In a world of information sharing and 24-hour news cycles, the Defence and Security Media Advisory committee have to balance national security and data privacy with freedom of the press

• July 20, 2023 20 Jul'23

  Attention-seeking KillNet hacktivists becoming more dangerous

  The KillNet DDoS gang seems to be becoming more dangerous, but its primary goal remains to create a lot of noise and draw media attention, according to latest analysis

• July 19, 2023 19 Jul'23

  BlackCat and Clop gangs both claim cyber attack on Estée Lauder

  Cosmetics conglomerate Estée Lauder is experiencing operational disruption in the wake of a cyber attack that seems to involve two different cyber crime gangs

• July 19, 2023 19 Jul'23

  Half of cyber pros engage in risky behaviour at work, report claims

  Approximately 55% of security professionals say they have engaged in behaviours they would more usually advise against in the workplace, according to a report

• July 19, 2023 19 Jul'23

  Cyber criminal AI tool WormGPT produces ‘unsettling’ results

  A newly discovered generative AI tool dubbed WormGPT is being sold to the cyber criminal underground via the dark web, and poses a significant danger, researchers warn

• July 18, 2023 18 Jul'23

  NATO membership to drive Nordic cyber security sector growth

  The Nordic cyber security sector will see increasing demand as Finland and Sweden joint NATO

• July 18, 2023 18 Jul'23

  Critical Adobe ColdFusion flaws chained in ongoing cyber attacks

  Two vulnerabilities in Adobe ColdFusion have been chained by threat actors to target victim systems, apparently after one of them was accidentally disclosed

• July 17, 2023 17 Jul'23

  Police Scotland use cloud for biometric data despite clear risks

  Police Scotland confirms it has stored significant volumes of biometric data on a cloud-based digital evidence sharing system despite major ongoing data protection concerns, bringing into question the effectiveness of the current regulatory approach...

• July 17, 2023 17 Jul'23

  Shift towards ‘smarter’ digital life as broadband security, sustainability become key needs

  Cisco survey finds consumer expectations will reshape the needs and economics of the internet

• July 13, 2023 13 Jul'23

  Civil society groups call on EU to put human rights at centre of AI Act

  Dozens of civil society groups are calling on EU institutions to prioritise people and human rights in AI legislation as secretive negotiations begin

• July 13, 2023 13 Jul'23

  Microsoft issues new warning over Chinese cyber espionage

  A newly uncovered Chinese espionage campaign exploited forged authentication tokens to access its victims’ email accounts, says Microsoft

• July 13, 2023 13 Jul'23

  One month after MOVEit: New vulnerabilities found as more victims are named

  Five weeks after the mass MOVEit breach, new vulnerabilities in the file transfer tool are coming to light as the Clop cyber crime group continues to terrorise victims. But has the gang bitten off more than it can chew?

• July 13, 2023 13 Jul'23

  MPs launch inquiry into government use of data

  The Public Administration and Constitutional Affairs Committee is to investigate the possibility of reforming the way government collects and analyses data, and whether the UK census could be scrapped

• July 12, 2023 12 Jul'23

  Forensic Institute provides Hansken viewing method for Dutch lawyers

  Dutch lawyers can now view crypto communication in criminal cases from their own workplace via digital search engine Hansken. Previously, this had to be done at an external location

• July 12, 2023 12 Jul'23

  Ofcom’s online safety preparedness efforts hobbled by government

  Despite Ofcom’s progress so far, UK government changes to the scope and timetable of the Online Safety Bill are hobbling the ability of the regulator to successfully prepare for the new regime

• July 12, 2023 12 Jul'23

  Cozy Bear lures victims with used BMW 5 Series

  A recent Cozy Bear campaign saw the Russian APT group pivot to exploiting an advert for a used car as it targeted diplomatic missions in Kyiv

• July 12, 2023 12 Jul'23

  Whistleblower contacts NatWest customers affected by a decade-old data breach

  Former worker says contacting the people affected by the data breach is her last resort after the bank and regulators appear satisfied that the sensitive data file is safe stored under her bed

• July 12, 2023 12 Jul'23

  Hackers: We won’t let artificial intelligence get the better of us

  AI is changing how ethical hackers go about their work, and will continue to do so, but the community is convinced the technology will never be able to replicate the creativity of a flesh-and-blood hacker

• July 12, 2023 12 Jul'23

  Microsoft users on high alert over dangerous RCE zero-day

  A serious RCE vulnerability in Microsoft Office and Windows is among several zero-days disclosed in Redmond’s July Patch Tuesday update, but this one does not have a patch yet

• July 11, 2023 11 Jul'23

  EU formally grants data adequacy to US

  The European Commission has formally granted the US data adequacy, allowing companies and organisations to freely transfer personal data across the Atlantic via the EU-US Data Privacy Framework. But privacy activist Max Schrems has already committed...

• July 11, 2023 11 Jul'23

  Malicious URL volumes soar as cyber criminals pull on Threads

  Malicious actors have been quick to exploit the buzz around Meta’s newly launched Threads platform, with thousands of new suspicious domains registered exploiting its branding

• July 11, 2023 11 Jul'23

  Apple pushes Rapid Response patch to fix WebKit zero-day

  Apple deployed an emergency patch under its Rapid Security Response update programme, but had to temporarily suspend delivery after it caused problems for users of the Safari browser

• July 07, 2023 07 Jul'23

  Suspicious email reported every five seconds in UK

  National Cyber Security Centre report reveals a suspicious email was reported by UK citizens and organisations every five seconds last year

• July 07, 2023 07 Jul'23

  JumpCloud issues notice to customers to refresh API keys

  JumpCloud has asked its customers to update their API cryptographic keys following a security incident

• July 06, 2023 06 Jul'23

  VMware ramps up on sovereign cloud in APAC

  VMware is working with local partners to deliver sovereign cloud services in the region, amid growing sovereignty interests among governments and the need maintain business continuity

• July 06, 2023 06 Jul'23

  Vodafone tests quantum-safe business network solutions

  Telco announces initiative looking at transition to a quantum safe world, exploring and trialling new algorithms with upgraded smartphones to provide protection against possible quantum-empowered attackers in the future

• July 06, 2023 06 Jul'23

  Biometrics watchdog calls for public space surveillance review

  The biometrics and surveillance camera commissioner is calling for a review of public space surveillance to gain a clearer picture about the proliferation of Chinese surveillance technology across the public sector, but warns against applying double...

• July 06, 2023 06 Jul'23

  Meta’s Threads hits app stores, but no EU launch in sight

  Meta’s Twitter competitor makes its debut and signs up millions of users in just 12 hours, but concerns over compliance with the EU’s Digital Markets Act have sunk a pan-European launch for now

• July 05, 2023 05 Jul'23

  Germany: European Court of Justice hears arguments on lawfulness of EncroChat cryptophone evidence

  The European Court of Justice will decide whether the collection and sharing of data intercepted by law enforcement from EncroChat crypto phone network is compatible with European law

• July 05, 2023 05 Jul'23

  HSBC explores quantum-safe comms to AWS edge

  Banking group HSBC is looking at how to secure transactions and the benefits of quantum computing in finance

• July 05, 2023 05 Jul'23

  UK public increasingly concerned over NHS data sovereignty

  Amid security concerns and AI advances, a majority of the British public still trusts the NHS to store and analyse their health data, but would prefer it remains domiciled in the UK

• July 04, 2023 04 Jul'23

  EU judgment sinks Meta’s argument for targeted ads

  The EU Court of Justice has issued a significant judgment against Meta, ruling that national anti-trust bodies can investigate GDPR breaches, disrupting the platform’s entire basis for carrying out targeted advertising

• July 04, 2023 04 Jul'23

  How Maxeon is forging the path to SASE

  Maxeon Solar Technologies is building out its security service edge capabilities with an eye on a SASE implementation that combines best of breed offerings from different suppliers

• July 03, 2023 03 Jul'23

  Over half of ANZ organisations hit by ransomware

  Amid the rising ransomware threat, almost four in five organisations in ANZ expect to pay a ransom if they could recover data and business processes

• July 03, 2023 03 Jul'23

  BlackCat gang claims cyber attack on Barts NHS Trust

  Investigations continue into a claim by the ALPHV/BlackCat ransomware gang that it has stolen 7TB of data from Barts NHS Trust in London

• June 30, 2023 30 Jun'23

  AI can never be given control over combat decisions, Lords told

  Artificial intelligence is technically incapable of distinguishing between the complex contextual factors of combat situations, and will likely never be able to, according to legal and software experts

• June 30, 2023 30 Jun'23

  NHS data stolen in Manchester Uni ransomware attack

  The ransomware gang behind the cyber attack on the University of Manchester appears to have got its hands on an NHS dataset being used by the university for research purposes

• June 29, 2023 29 Jun'23

  ‘Shadow’ AI use becoming a driver of insider cyber risk

  Off-the-books use of generative AI tools will inevitably lead to a costly, high-profile data breach for someone, but a little attention paid to appropriate data management policy can help mitigate the risk

• June 28, 2023 28 Jun'23

  Charity demands transparency in digital universal credit system

  The digital universal credit system needs overhauling to ensure greater transparency over benefit claims and more effective means of redress when things go wrong, says child poverty charity

• June 28, 2023 28 Jun'23

  GDPR tax reclaim scheme preys on fears of SMEs

  IT suppliers are a target of companies offering a tax reclaim scheme that preys on small businesses’ fears around General Data Protection Regulation compliance

• June 28, 2023 28 Jun'23

  Stolt-Nielsen SASE looks to optimise global connectivity, security for hybrid workers

  Bulk liquid logistics and sustainable land-based aquaculture expert advances secure digital transformation plans and operational efficiency

• June 27, 2023 27 Jun'23

  Three years on, EncroChat cryptophone hack nets 6,500 arrests and seizures of €900m

  French and Dutch prosecutors say three years after they infiltrated the EncroChat cryptophone network in a novel hacking operation, Europe’s courts are opening the way for more collaboration and data sharing between law enforcement agencies

• June 27, 2023 27 Jun'23

  One Login’s Gov.uk ID check apps downloaded over two million times

  The One Login digital identity system is being used by eight government services, and GDS has issued more than 1.5 million verified identities since summer 2022, while its ID check apps are proving popular

• June 27, 2023 27 Jun'23

  WithSecure forges ahead with green coding initiative

  WithSecure’s W/Sustainability programme kickstarts a number of initiatives, including a commitment to green coding the security supplier hopes will set an example for others to follow

• June 27, 2023 27 Jun'23

  3,600 potential cyber security experts apply to government scheme

  The UK government’s Upskill in Cyber programme is reporting great success just a month after launch, with almost half of applicants women

• June 27, 2023 27 Jun'23

  A tenth of kids claim they could hack you

  More and more young people are at risk of being drawn into cyber criminality, and parents must shoulder some of the blame, according to a report

• June 23, 2023 23 Jun'23

  ICO under fire for taking limited action over serious data breaches

  The ICO has come under fire from lawyers and data protection specialists for just issuing written warnings to two public bodies over serious data breaches that placed people’s lives at risk

• June 23, 2023 23 Jun'23

  Phishing and ransomware dominate Singapore’s cyber threat landscape

  Phishing and ransomware attacks continued apace in Singapore last year amid signs of improving cyber hygiene

• June 22, 2023 22 Jun'23

  Lancaster University launches trailblazing cyber MBA

  MBA programme at Lancaster University designed to deliver security leadership education to business leaders has received NCSC backing

• June 22, 2023 22 Jun'23

  Manchester University students threatened by ransomware gang

  Students and staff members at the University of Manchester are being pressurised by an unnamed ransomware gang