News

IT security

• May 13, 2025 13 May'25

  May Patch Tuesday brings five exploited zero-days to fix

  Microsoft fixes five exploited, and two publicly disclosed, zero-days in the fifth Patch Tuesday update of 2025

• May 13, 2025 13 May'25

  M&S forces customer password resets after data breach

  M&S is instructing all of its customers to change their account passwords after a significant amount of data was stolen in a DragonForce ransomware attack

• May 13, 2025 13 May'25

  Gov.uk One Login loses certification for digital identity trust framework

  The government’s flagship digital identity system has lost its certification against the government’s own digital identity system trust framework

• May 13, 2025 13 May'25

  Australian data breaches hit record high in 2024

  More than 1,100 data breaches were reported in Australia last year, a 25% jump from 2023, prompting calls for stronger security measures across businesses and government agencies

• May 09, 2025 09 May'25

  Ransomware: What the LockBit 3.0 data leak reveals

  An administration interface instance for the ransomware franchise's affiliates was attacked on 29 April. Data from its SQL database has been extracted and disclosed

• May 08, 2025 08 May'25

  Government will miss cyber resiliency targets, MPs warn

  A Public Accounts Committee report on government cyber resilience finds that the Cabinet Office has been working hard to improve, but is likely to miss targets and needs a fundamentally different approach

• May 08, 2025 08 May'25

  Preparing for post-quantum computing will be more difficult than the millennium bug

  The job of getting the UK ready for post-quantum computing will be at least as difficult as the Y2K problem, says National Cyber Security Centre CTO Ollie Whitehouse

• May 08, 2025 08 May'25

  US tells CNI orgs to stop connecting OT kit to the web

  US authorities have released guidance for owners of critical national infrastructure in the face of an undisclosed number of cyber incidents

• May 08, 2025 08 May'25

  UK government websites to replace passwords with secure passkeys

  Government websites are to replace difficult-to-remember passwords with highly secure passkeys that will protect against phishing and cyber attackers

• May 07, 2025 07 May'25

  Meta awarded $167m in court battle with spyware mercenaries

  WhatsApp owner Meta is awarded millions of dollars in damages and compensation after its service was exploited by users of mercenary spyware developer NSO’s infamous Pegasus mobile malware

• May 07, 2025 07 May'25

  Europe leads shift from cyber security ‘headcount gap’ to skills-based hiring

  Research from Sans Institute reveals European organisations are leading a global shift in hiring priorities, driven by regional regulatory frameworks

• May 07, 2025 07 May'25

  Chaos spreads at Co-op and M&S following DragonForce attacks

  No end is yet in sight for UK retailers subjected to apparent ransomware attacks

• May 07, 2025 07 May'25

  Oxford Uni adds cyber resilience module to MBA programme

  Oxford University’s Saïd Business School is working with cyber response specialist Sygnia to help future business leaders get on top of security

• May 07, 2025 07 May'25

  UK at risk of Russian cyber and physical attacks as Ukraine seeks peace deal

  UK cyber security chief warns of ‘direct connection’ between Russian cyber attacks and physical threats to the UK

• May 07, 2025 07 May'25

  DSIT aims to bolster expertise with year-long secondments

  To drive forward its Plan for Change, the Labour government is looking to hire 25 experts for the Department for Science, Innovation and Technology Fellowship programme

• May 07, 2025 07 May'25

  UK critical systems at risk from ‘digital divide’ created by AI threats

  GCHQ’s National Cyber Security Centre warns that a growing ‘digital divide’ between organisations that can keep pace with AI-enabled threats and those that cannot is set to heighten the UK's overall cyber risk

• May 06, 2025 06 May'25

  Government industrial strategy will back cyber tech in drive for economic growth

  With over 2,000 cyber security businesses across the UK, the government plans to target cyber as a priority to grow the economy 

• May 06, 2025 06 May'25

  Data issues cost Australian businesses nearly A$500k annually

  Research reveals Australian organisations are losing an average of nearly half a million dollars annually due to poor data integrity, hindering their ability to leverage AI and eroding their competitive edge

• May 02, 2025 02 May'25

  Retail cyber crime spree a ‘wake-up call’, says NCSC CEO

  The National Cyber Security Centre confirms it is providing assistance to M&S, Co-op and Harrods as concerns grow among UK retailers

• May 02, 2025 02 May'25

  Government and Ofcom disagree about scope of Online Safety Act

  MPs heard different views from the online harms regulator and the UK government about whether and how the Online Safety Act obliges platforms to deal with disinformation

• May 01, 2025 01 May'25

  Harrods becomes latest UK retailer to fall victim to cyber attack

  Harrods confirms it is the latest UK retailer to experience a cyber attack, shutting off a number of systems in an attempt to lessen the impact

• May 01, 2025 01 May'25

  Co-op instructs staff to be wary of lurking hackers

  Co-op tells staff to stop using their VPNs and be wary that their communications channels may be being monitored, as a cyber attack on the organisation continues to develop

• May 01, 2025 01 May'25

  Thomas Herdman’s legal battle over Sky ECC encrypted phone distribution set to enter fifth year

  Computer Weekly speaks to Julie Kawai Herdman, daughter of Thomas Herdman, the only person in custody for distributing Sky ECC encrypted phones

• April 30, 2025 30 Apr'25

  Current SaaS delivery model a risk management nightmare, says CISO

  JPMorgan Chase security chief Patrick Opet laments the state of SaaS security in an open letter to the industry and calls on software providers to do more to enhance resilience

• April 30, 2025 30 Apr'25

  Co-op shuts off IT systems to contain cyber attack

  A developing cyber incident at Co-op has forced the retailer to pull the plug on some of its IT systems as it works to contain the attack

• April 30, 2025 30 Apr'25

  How AI can attack corporate decision-making

  As AI gets embedded in corporate systems, experts warn of emerging security risks caused by influencing retrieval augmentation systems

• April 30, 2025 30 Apr'25

  AI in national security raises proportionality and privacy concerns

  AI could enable investigations to cover far more individuals than was ever previously possible, which is why oversight is needed

• April 29, 2025 29 Apr'25

  Scattered Spider on the hook for M&S cyber attack

  The infamous Scattered Spider hacking collective may have been behind the ongoing cyber attack on Marks and Spencer that has crippled systems at the retailer and left its ecommerce operation in disarray.

• April 29, 2025 29 Apr'25

  Gov.uk One Login yet to meet government cyber security standards for critical public services

  The government’s flagship digital identity system still does not fully conform to key national security standards three years after launch, while questions remain over whether historic security problems have been resolved

• April 29, 2025 29 Apr'25

  Kaspersky calls for cyber immunity amid growing cyber threats

  The rise of professional cyber crime groups and state-sponsored actors targeting critical infrastructure requires a move towards inherently secure ‘cyber immune’ systems, says Kaspersky CEO Eugene Kaspersky

• April 25, 2025 25 Apr'25

  UK MoJ crime prediction algorithms raise serious concerns

  The Ministry of Justice is using one algorithm to predict people’s risk of reoffending and another to predict who will commit murder, but critics say the profiling in these systems raises ‘serious concerns’ over racism, classism and data inaccuracies

• April 25, 2025 25 Apr'25

  M&S suspends all online sales as cyber attack worsens

  M&S shuts down online sales as it works to contain and mitigate a severe cyber attack on its systems

• April 24, 2025 24 Apr'25

  M&S systems remain offline days after cyber incident

  M&S is still unable to provide contactless payment or click-and-collect services amid a cyber attack that it says has forced it to move a number of processes offline to safeguard its customers, staff and business

• April 24, 2025 24 Apr'25

  Data breach class action costs mount up

  Organisations exposed to the US market paid out over $150m in class action settlements in just six months. Security leaders must do more to address cyber gaps, respond better to incidents and demonstrate compliance

• April 24, 2025 24 Apr'25

  Ericsson boosts NetCloud SASE with integrated clientless ZTNA for wireless WAN

  Leading comms tech provider claims industry’s first fully integrated clientless zero-trust network access, designed for wireless wide area network with update to core secure access service edge platform

• April 24, 2025 24 Apr'25

  March ransomware slowdown probably a red herring

  An apparent slowdown in ransomware attack volumes is raising eyebrows, but the statistics never tell the full story

• April 23, 2025 23 Apr'25

  Financially motivated cyber crime remains biggest threat source

  Mandiant’s latest annual threat report reveals data on how financially motivated cyber criminals, such as ransomware gangs, dominate the cyber security landscape

• April 23, 2025 23 Apr'25

  Amid uncertainty, Armis becomes newest CVE numbering authority

  Amid an uncertain future for vulnerability research, exposure management company Armis has been given the authority to assign CVE IDs to newly discovered vulnerabilities

• April 23, 2025 23 Apr'25

  Qualys goes to bat for US cricket side San Francisco Unicorns

  Cloud security specialist Qualys partners with US T20 cricket squad San Francisco Unicorns and its Sparkle Army fanclub as the team prepares for its summer 2025 campaign

• April 23, 2025 23 Apr'25

  Digital ID sector calls for changes to government data legislation

  Suppliers urge technology secretary to work more collaboratively with private sector over concerns government’s digital wallet will gain a monopoly in the market

• April 22, 2025 22 Apr'25

  Cyber attack downs systems at Marks & Spencer

  A cyber attack at Marks & Spencer has caused significant disruption to customers, leaving them unable to make contactless payments or use click-and-collect services

• April 22, 2025 22 Apr'25

  Cyber ‘agony aunts’ launch guidebook for women in security

  Cyber ‘agony aunts’ Amelia Hewitt and Rebecca Taylor are launching a book aimed at empowering women in their cyber security careers

• April 22, 2025 22 Apr'25

  Secure Future Initiative reveals Microsoft staff focus

  IT security is now a metric in the Microsoft employee appraisal process

• April 22, 2025 22 Apr'25

  Ofcom bans leasing of Global Titles to crackdown on spoofing

  Telco regulator Ofcom is cracking down on a loophole being exploited by cyber criminals to access sensitive mobile data

• April 22, 2025 22 Apr'25

  AI-powered APIs proving highly vulnerable to attack

  The growth of AI is proving a double-edged sword for API security, presenting opportunities for defenders to enhance their resilience, but also more risks from AI-powered attacks, according to report

• April 22, 2025 22 Apr'25

  Investigatory Powers Tribunal has no power to award costs against PSNI over evidence failures

  Investigatory Powers Tribunal judges have called for the Home Secretary to step in after finding they have no powers to award costs against government bodies that fail to disclose evidence

• April 21, 2025 21 Apr'25

  Top APAC firms recognised at innovation awards

  Citic Telecom, CapitaLand Investment and DBS Bank were among the region’s top industry innovators recognised for their digital transformation efforts at the Computer Weekly Innovation Awards APAC 2025

• April 21, 2025 21 Apr'25

  CW Innovation Awards: Transforming cyber security with AI

  Facing rising cyber threats and a shortage of experts, Citic Telecom International CPC developed an AI-powered penetration testing tool to automate security audits and reduce costs

• April 17, 2025 17 Apr'25

  Tariff turmoil is making supply chain security riskier

  Many businesses around the world are taking the decision to alter their supplier mix in the face of tariff uncertainty, but in doing so are creating more cyber risks for themselves, according to a report

• April 17, 2025 17 Apr'25

  Standard Chartered grounds AI ambitions in data governance

  The bank’s group chief data officer, Mohammed Rahim, outlines how the bank is modernising its data infrastructure and governance practices to support its AI initiatives