News

IT security

• March 05, 2024 05 Mar'24

  Banning ransomware payments back on the agenda

  The idea of banning ransomware payments to cyber criminals is back on the agenda, with former NCSC chief Ciaran Martin arguing that tougher measures need to be taken

• March 04, 2024 04 Mar'24

  The Security Interviews: Cyber security is about managing risk effectively

  Effective cyber security must lead to cyber resilience – that is, the ability to anticipate, protect against, withstand and recover from any adverse condition, disruption or compromise, as Kyndryl’s security practice leader explains

• March 01, 2024 01 Mar'24

  Fancy Bear sniffs out Ubiquiti router users

  The authorities have warned users of Ubiquiti EdgeRouter products to take remedial action after a number of devices were hijacked into a malicious botnet by a Russian cyber espionage unit

• March 01, 2024 01 Mar'24

  APAC firms bullish on IT spending

  More than half of organisations plan to spend more on key areas such as cyber security, generative AI and cloud in a sign of growing optimism across the region

• February 29, 2024 29 Feb'24

  Home Office GPS tagging of asylum seekers breaches data protection law

  The Information Commissioner’s Office has issued an enforcement notice against the Home Office after finding its programme to tag asylum seekers with GPS monitors breaches data protection law

• February 29, 2024 29 Feb'24

  Okta doubles down on cyber in wake of high-profile breaches

  Okta launches Secure Identity Commitment to shore up its technology in the wake of a damaging breach and elevate best practice around identity

• February 29, 2024 29 Feb'24

  DSIT publishes results of public digital identity trust consultation

  Report from Department for Science, Innovation and Technology shows UK public wants government to be accountable and transparent, and views trust and inclusivity as key

• February 29, 2024 29 Feb'24

  Police arrested journalists as part of surveillance operation to identify confidential sources

  Three police forces took part in surveillance operations between 2011 and 2018 to identify sources that leaked information to journalists Trevor Birney and Barry McCaffrey, the Investigatory Powers Tribunal hears

• February 28, 2024 28 Feb'24

  New version of ALPHV/BlackCat ransomware hits victims

  An updated version of the ALPHV/BlackCat ransomware has been spotted in the wild amid a series of attacks on American healthcare providers, prompting a new alert from the authorities

• February 28, 2024 28 Feb'24

  75% of third-party breaches target software, IT supply chains

  Data drawn from SecurityScorecard’s telemetry reveals how supply chain breaches are becoming a weapon of choice for threat actors

• February 28, 2024 28 Feb'24

  Users love their cyber teams, but find them frustrating

  Despite strong support for security teams, a good number of ordinary workers see them as obstructive to business goals, and would like to see them operate more transparently

• February 27, 2024 27 Feb'24

  Black Basta and Bl00dy ransomware gangs exploiting ConnectWise vulns

  More ransomware gangs have been observed exploiting two dangerous vulnerabilities in ConnectWise ScreenConnect software, prompting new warnings for users to get patching

• February 27, 2024 27 Feb'24

  VulnCheck bug listing to help track new threats quicker

  Exploit intelligence firm VulnCheck launches a proprietary Known Exploited Vulnerabilities catalogue in hopes of improving end-user access to intel on emerging threats and reaching those that the likes of CISA do not

• February 27, 2024 27 Feb'24

  Majority of UK employees ‘willingly gamble’ with security

  Human-centric threats originating from employees continue to damage organisations both financially and reputationally, according to a report

• February 27, 2024 27 Feb'24

  Executive interview: David Wong, Thomson Reuters

  We speak to the chief product officer of Thomson Reuters about working with artificial intelligence and embedding Microsoft Copilot for Word

• February 27, 2024 27 Feb'24

  Hycu uses AI to develop APIs for SaaS application backup

  SaaS applications don’t usually come with built-in data protection, but Hycu plans to tackle that gap in the market with AI to generate the connectors needed to backup user data

• February 27, 2024 27 Feb'24

  Microsoft president commits to Azure open platform for AI

  Brad Smith sets out Microsoft’s ambitions to make Azure the best platform to host foundational AI models, and train and run AI applications

• February 27, 2024 27 Feb'24

  Cozy Bear and other APTs changing tack as cloud adoption increases

  A change in APT tactics has been observed resulting from greater adoption of cloud-based services, according to the NCSC

• February 26, 2024 26 Feb'24

  LockBit bids to save face after NCA takedown

  The LockBit gang’s ringleader resurfaces with new infrastructure and new victims, claiming to have shrugged off a multinational police sting

• February 26, 2024 26 Feb'24

  Storage and backup spend in 2024 targets risk and resilience

  The TechTarget and ESG spending intentions survey finds big bias towards averting risk and building organisational resilience, but on-premise storage a significant planned outlay

• February 23, 2024 23 Feb'24

  ConnectWise users see cyber attacks surge, including ransomware

  ConnectWise ScreenConnect users who have yet to patch against a critical vulnerability are now being targeted by a barrage of cyber attacks, including ransomware

• February 23, 2024 23 Feb'24

  NCA trolls under fire LockBit gang leaders

  The NCA has teased details of the identity of LockBit's main admin via the gang’s compromised dark web site, and hinted that he has been engaging with law enforcement

• February 22, 2024 22 Feb'24

  Cyber experts alarmed by ‘trivial’ ConnectWise vulns

  The disclosure of two dangerous vulnerabilities in the popular ConnectWise ScreenConnect product is drawing comparisons with major cyber incidents, including the 2021 Kaseya attack

• February 22, 2024 22 Feb'24

  Toshiba and Orange test quantum encryption on traditional network

  Researchers used QKD on a fibre-optic network spanning 184km to show how the technology could be used to secure networks cost-effectively

• February 22, 2024 22 Feb'24

  Inside LockBit: A ransomware gang in decline?

  The LockBit ransomware gang was already on the ropes prior to the NCA-led takedown, according to security researchers

• February 21, 2024 21 Feb'24

  Australian data breach report highlights supply chain risks

  The OAIC has called for organisations to proactively address privacy risks from outsourcing personal information handling to third parties

• February 21, 2024 21 Feb'24

  CVE volumes set to increase 25% this year

  The number of reported Common Vulnerabilities and Exposures is likely to grow significantly in 2024, hitting a new high of almost 35,000, according to Coalition, a cyber insurance specialist

• February 21, 2024 21 Feb'24

  SITA enhances aviation SASE with automated multi-cloud networking service

  Leading IT provider in the air transport industry announces strategic collaboration with multi-cloud networking firm to gain enhanced access to secure cloud-based offerings

• February 21, 2024 21 Feb'24

  Assange created a ‘grave and immediate risk’, says US government, as it seeks extradition

  Lawyers for the US government hit back at claims that extraditing WikiLeaks founder Julian Assange is politically motivated

• February 21, 2024 21 Feb'24

  How Indian fintechs can address compliance issues

  Fintechs will need to bolster their know-your-customer practices and establish self-regulatory mechanisms, among other measures, to address compliance issues that have come under the spotlight

• February 20, 2024 20 Feb'24

  LockBit locked out: Cyber community reacts

  Reaction to the takedown of the LockBit ransomware gang is enthusiastic, but tempered with the knowledge that cyber criminals are often remarkably resilient

• February 20, 2024 20 Feb'24

  US extradition of Julian Assange is ‘state retaliation’ for exposing war crimes, court hears

  Lawyers argue that the US extradition case against WikiLeaks founder Julian Assange is politically motivated and in is breach of the UK-US extradition treaty

• February 20, 2024 20 Feb'24

  LockBit gang members arrested in Poland and Ukraine

  The UK’s National Crime Agency and its global partners have shared more details on their audacious takedown of the LockBit ransomware operation, including news of two arrests

• February 20, 2024 20 Feb'24

  Government agrees law to protect confidential journalistic material from state hacking

  The government will update Investigatory Powers Act to require secret intelligence agencies to seek independent approval before accessing confidential journalistic material obtained by bulk hacking, but journalists remain vulnerable to other bulk ...

• February 19, 2024 19 Feb'24

  Cops take down LockBit ransomware gang

  The notorious LockBit ransomware crew has been disrupted in an international law enforcement sting led by the UK's National Crime Agency

• February 16, 2024 16 Feb'24

  Poor data and IT hamper cross-government working, PAC report finds

  Report cites inadequate data, poor IT systems and departmental silos as major barriers to cross-government working, and calls on government to do better

• February 15, 2024 15 Feb'24

  WikiLeaks founder Julian Assange faces last appeal against ‘political’ extradition

  WikiLeaks founder Julian Assange is seeking leave to appeal against extradition to the US in a case that could have chilling implications for journalists reporting on national security

• February 15, 2024 15 Feb'24

  Security-by-design push prompts new ISC2 accreditations

  Security-by-design has become a hot-button regulatory issue. ISC2 has decided now is the time to upskill cyber pros around these vital software and hardware development principles

• February 14, 2024 14 Feb'24

  Microsoft: Nation-state hackers are exploiting ChatGPT

  Threat actors from China, Iran, North Korea and Russia have all been probing use cases for generative AI service ChatGPT, but have yet to use such tools in a full-blown cyber attack

• February 14, 2024 14 Feb'24

  Dutch Supreme Court approves use of EncroChat evidence

  Defence lawyers plan appeal to European Court of Human Rights after Supreme Court upholds a conviction based on intercepted messages from the EncroChat encrypted phone network

• February 14, 2024 14 Feb'24

  Southern Water customer data was taken in ransomware attack

  Southern Water has started to contact customers whose data was stolen in a January 2024 ransomware attack on its systems

• February 14, 2024 14 Feb'24

  Met Police to scrap and replace ‘racist’ Gangs Violence Matrix

  A database used by the Metropolitan Police to identify and track people linked with gang violence is being decommissioned and replaced. The decision follows a long-running controversy over its discriminatory impacts on young black people, but ...

• February 14, 2024 14 Feb'24

  Microsoft patches two zero-days for Valentine’s Day

  Two security feature bypasses impacting Microsoft SmartScreen are on the February Patch Tuesday docket, among more than 70 issues

• February 14, 2024 14 Feb'24

  Security experts: Investigatory powers plans will delay security updates

  Cyber security experts warn that government proposals to amend the Investigatory Powers Act will limit tech companies’ ability to respond to security threats and could hamper the use of end-to-end encryption

• February 13, 2024 13 Feb'24

  New variants of Qakbot malware under development

  Despite its infrastructure having been taken down by the FBI last year, someone appears to be actively working on a new and improved version of the infamous Qakbot malware

• February 13, 2024 13 Feb'24

  Hunter-killer malware volumes seen surging

  Latest Picus Security report on malware tactics, techniques and procedures reveals an increasing focus on disabling security defences

• February 13, 2024 13 Feb'24

  What will result from Cohesity’s Veritas acquisition?

  The $7bn backup giant will leverage huge assets in enterprise customer base, compliance and governance intelligence, AI, R&D, and Kubernetes backup and storage

• February 09, 2024 09 Feb'24

  Amazon defends facial-recognition tech sale to FBI despite moratorium

  The FBI has confirmed it is using Amazon’s Rekognition image and video analysis software, but Amazon says it is ‘false’ to suggest this violates the company’s self-imposed moratorium on selling facial-recognition technology to US police

• February 09, 2024 09 Feb'24

  MoD ethical hacking programme expands after initial success

  The Ministry of Defence has expanded the scope of its defensive security partnership with HackerOne

• February 08, 2024 08 Feb'24

  Why open data is needed in the battle to address homelessness

  Centrepoint needed to send FOIs to more than 300 local authorities in England to access required information