News

IT security

• May 03, 2023 03 May'23

  Government anti-fraud strategy targets the tech behind the scams

  The UK government’s anti-fraud strategy proposes to make it much harder for criminals to target their victims by cracking down on the exploitation of technology

• May 03, 2023 03 May'23

  US competition watchdog issues generative AI warning

  Generative AI can be used to manipulate people into making harmful decisions, says US Federal Trade Commission in warning to firms building and using AI-powered tools

• May 03, 2023 03 May'23

  Mystery Apple security update sparks speculation

  Apple releases its first Rapid Security Response update for iPhone, iPad and Mac devices, but users are in the dark about what security problems they have fixed

• May 02, 2023 02 May'23

  UK Cyber Security Council launches certification mapping tool

  Cyber careers body aims to offer clarity for professionals seeking to advance through security certification

• May 02, 2023 02 May'23

  Researchers see surge in scam websites linked to coronation

  Scammers and fraudsters continue to take advantage of large public events, with the coronation of King Charles III no exception

• April 28, 2023 28 Apr'23

  Government is playing ‘psychic war’ in battle over end-to-end encryption

  Peers hear that the UK government is being deliberately ambiguous about its plans to require technology companies to scan the content of encrypted messages

• April 27, 2023 27 Apr'23

  Tenable opens playground for generative AI cyber tools

  A set of generative AI cyber tools designed to help security researchers in reverse engineering, debugging and other areas of work have been made available for the community to experiment with

• April 27, 2023 27 Apr'23

  Google Cloud seals bug that could have led to data breaches

  The Asset Key Thief vulnerability gave rise to multiple potential attack scenarios that could have impacted thousands of Google Cloud users, but has now been safely fixed

• April 26, 2023 26 Apr'23

  Police Scotland receive formal notice about cloud system

  Scotland’s biometrics watchdog has issued Police Scotland with an information notice over its deployment of a cloud-based digital evidence system, following disclosure of major data protection concerns by Computer Weekly

• April 26, 2023 26 Apr'23

  Researchers deal blow to Gootloader gang that supported REvil

  Thousands of compromised WordPress blogs have been spreading the Gootloader malware for years, but eSentire’s security research team are turning the tables on the gang that played a key role in REvil ransomware attacks

• April 26, 2023 26 Apr'23

  Ransomware gang exploiting unpatched Veeam backup products

  Cyber criminals with links to multiple virulent ransomware strains are exploiting a recently disclosed vulnerability in Veeam’s Backup & Replication product, threat analysts have warned

• April 26, 2023 26 Apr'23

  Google researchers identify hole in Intel TDX

  Intel has worked with Google to figure out how to harden the TDX module in Xeon chips to boost the security of virtual machines

• April 26, 2023 26 Apr'23

  Cyber security and analytics propel jobs boost in Scotland’s tech sector

  A tech industry survey from ScotlandIS indicates the country’s tech sector is set to grow, with cyber security as the hottest domain

• April 25, 2023 25 Apr'23

  CISOs under-supported, under pressure, Trellix finds

  The vast majority of CISOs say they are finding it difficult to get sign-off on the resources they need to do their job

• April 25, 2023 25 Apr'23

  Almost three-quarters of cyber attacks involve ransomware

  Data from Sophos’s annual Active Adversary Report reveals that almost three-quarters of the cyber security incidents it responded to in 2022 involved ransomware

• April 25, 2023 25 Apr'23

  How non-fungible tokens can be used to manage health data

  Non-fungible tokens will give patients more ownership and control over their health data and improve its transparency in healthcare research, according to SingHealth clinicians

• April 24, 2023 24 Apr'23

  Most IT staff uncomfortable deploying surveillance tech at work

  The IT teams responsible for deploying and running digital surveillance in workplaces say they are uncomfortable with “extremely common” practice of spying on colleagues, research finds

• April 21, 2023 21 Apr'23

  UK biometrics watchdog questions police cloud deployments

  The UK biometrics commissioner has warned that policing and justice bodies must be able to demonstrate ‘immediately and unequivocally’ that their cloud deployments are lawful

• April 21, 2023 21 Apr'23

  CyberUK 23: New advice on smart city security issued

  The NCSC and key allies have drawn up new guidance to help communities balance the cyber security risks involved with creating smart cities

• April 21, 2023 21 Apr'23

  Prototype cyber tech has revolutionary potential

  The so-called CHERI protection model developed at the University of Cambridge is showing great promise for future cyber security technologies

• April 20, 2023 20 Apr'23

  Online Safety Bill could pose risk to encryption technology used by Ukraine

  CEO of encrypted messaging service Element says Online Safety Bill could pose a risk to the encrypted comms systems used by Ukraine

• April 20, 2023 20 Apr'23

  Bumblebee malware flies on the wings of Zoom and ChatGPT

  Bumblebee malware, often used as a stepping stone to ransomware, is now spreading via trojanised installers for popular software applications

• April 20, 2023 20 Apr'23

  UK Emergency Alert Test sparks cyber fraud warning

  Fraudsters and scammers are likely to use the upcoming test of the UK's new mobile Emergency Alert system as bait in their attacks, while misinformation and conspiracy theories spread

• April 20, 2023 20 Apr'23

  3CX incident may be world’s first double supply chain attack

  It’s supply chain attacks all the way down as Mandiant publishes information suggesting that the 3CX software supply chain compromise was initiated via a prior software supply chain compromise

• April 20, 2023 20 Apr'23

  Good Friday Agreement key to growth of Northern Ireland cyber hub

  Now 25 years since the historic Good Friday Agreement ended the Troubles, Northern Ireland has become a flourishing centre of cyber security excellence and has ambitions to grow further

• April 20, 2023 20 Apr'23

  New GovAssure cyber regime launches across UK government

  An enhanced cyber security regime is being put in place to better protect UK government IT systems from growing threats

• April 20, 2023 20 Apr'23

  Capita customer data was stolen in March ransomware attack

  Capita says it has uncovered evidence of data exfiltration from a small proportion of its server estate following a cyber attack at the end of March

• April 19, 2023 19 Apr'23

  CyberUK 23: Ukraine offers masterclass in withstanding cyber war

  Russian cyber activity has seen an unprecedented evolution in scale and pace over the past year, but Ukraine’s resilience has enabled it to mount a masterful response, says the NCSC

• April 19, 2023 19 Apr'23

  CyberUK 23: Irresponsible use of commercial hacking tools a rising threat

  Commercial cyber tools and hackers-for-hire pose a growing threat to organisations and individuals worldwide, according to an NCSC report

• April 19, 2023 19 Apr'23

  Orange joins forces with industry, academia to build French quantum comms

  Leading telco joins industry leaders, start-ups and academic players announce the official launch of a programme in charge of deploying Quantum secure communications networks in France.

• April 19, 2023 19 Apr'23

  UK plc sees fewer cyber breaches and attacks, but lacks resilience

  Latest government figures reveal UK businesses and charities reported lower volumes of cyber breaches and attacks over the past 12 months, but the statistics mask widespread underreporting and the true state of cyber readiness and resilience appears...

• April 19, 2023 19 Apr'23

  Surrey and Sussex police spared fines after recording 200,000 phone calls without people’s knowledge

  Police forces escape potential £1m fines following change of policy by ICO to protect the finances of public sector bodies

• April 19, 2023 19 Apr'23

  CyberUK 23: NCSC launches Cyber Advisor service for SMEs

  The UK’s NCSC has launched an industry assurance scheme designed to address the needs of SMEs, and is calling for potential advisors to step up and help out

• April 19, 2023 19 Apr'23

  CyberUK 23: NCSC CEO calls for collaboration and warns against complacency

  NCSC boss Lindy Cameron kicked off the annual CyberUK conference in Belfast with a plea for collaboration and a warning against complacency

• April 19, 2023 19 Apr'23

  Global finance firms take part in NATO cyber attack simulation

  Global financial services organisations take part in NATO annual event which simulates cyber attacks on critical infrastructure

• April 19, 2023 19 Apr'23

  Cisco urges users to keep its network hardware up-to-date

  In the wake of a campaign of threat activity targeting a six-year-old Cisco router vulnerability, the networking giant has warned users to be on high alert and update their hardware

• April 19, 2023 19 Apr'23

  CyberUK 23: Alert over mercenary Russian threat to CNI

  Russian hacktivists supportive of their government’s war on Ukraine are turning their attention to disruptive or destructive attacks on critical infrastructure in the UK, the NCSC has warned

• April 19, 2023 19 Apr'23

  How organisations can succeed with zero trust

  By starting small, taking a long-term view and prioritising the most critical assets in their zero-trust implementations, organisations will be able to reap returns from their investments in the security paradigm

• April 18, 2023 18 Apr'23

  Enterprise networking sees age of SASE and network as a service

  Report reveals complexity of third workspace has transformed how modern IT organisations view network and security, with 98% of IT executives planning to increase investment in cloud services

• April 18, 2023 18 Apr'23

  IT Priorities 2023: Cloud and disaster recovery top storage and backup plans

  Cloud storage still the biggest project planned in data storage in 2023, with disaster recovery the most important area in data protection cited by TechTarget/Computer Weekly survey respondents

• April 18, 2023 18 Apr'23

  CyberUK 23: NCSC conference centres cyber collaboration

  The NCSC’s annual CyberUK conference gets underway in Belfast this week, with collaboration and cooperation high on the agenda

• April 18, 2023 18 Apr'23

  Tech companies and NGOs urge rewrite of Online Safety Bill to protect encrypted comms

  The Online Safety Bill faces amendments in the House of Lords amid concerns that it could weaken the security of end-to-end encrypted communications for UK citizens

• April 18, 2023 18 Apr'23

  Focus on these three risky behaviours to boost cloud security

  Some 80% of cloud security alerts are triggered by just 5% of security rules. Security teams can substantially improve their resilience by zeroing in on a small set of risky behaviours, according to a report

• April 18, 2023 18 Apr'23

  UK presses on with post-Brexit data protection reform

  The revised version of the Data Protection and Digital Information Bill has had its second reading in Parliament as the government presses on with post-Brexit changes, but critics remain sceptical that the EU will be convinced to maintain the UK's ...

• April 17, 2023 17 Apr'23

  Restaurants hit by IT problems after BlackCat attack on supplier NCR

  Ransomware attack on systems of payments giant causing service outages for restaurants around the world

• April 17, 2023 17 Apr'23

  Charity data stolen in ransomware attack on supplier

  A number of charities in Ireland and the UK have had their data compromised following a ransomware attack on an IT supplier

• April 17, 2023 17 Apr'23

  Public cloud adoption set to surge in Australia

  New and existing workloads are increasingly being migrated to public cloud, with two-thirds of Australian organisations already running cloud workloads in production in 2022

• April 13, 2023 13 Apr'23

  Thousands at risk from critical RCE bug in legacy MS service

  Thousands of organisations worldwide are at risk from three vulnerabilities – one critical – in a legacy Microsoft service that they may not be aware they are running

• April 13, 2023 13 Apr'23

  UK joins key allies to launch secure-by-design guidelines

  The UK has joined international partners in sharing new advice to help technology companies embed security into the product design and development process

• April 13, 2023 13 Apr'23

  Three charged over banking fraud for hire website

  UK authorities have charged three men in connection with the operation of a website that sold social engineering tools to cyber fraudsters