News

IT security

• November 04, 2016 04 Nov'16

  IoT security window closing

  The window of opportunity for addressing security risks in internet of things devices is closing rapidly, according to Intel's IoT security manager

• November 04, 2016 04 Nov'16

  Failure to prepare for cyber attack could be catastrophic, warns Ted Koppel

  Veteran investigative reporter Ted Koppel says a cyber attack on the US power grid is likely, but preparations for such an event are not up to scratch

• November 03, 2016 03 Nov'16

  Check Point, Huawei join Intel Security Innovation Alliance

  Intel Security Innovation Alliance continues to grow as security firm opens up McAfee data exchange layer

• November 03, 2016 03 Nov'16

  Intel Security to become McAfee in April 2017

  Intel Security has detailed a wave of product innovations at Focus 2016, but promises more to come when it is spun out as an independent company under the McAfee banner

• November 03, 2016 03 Nov'16

  NHS trust recovers after cyber attack

  IT systems are back up and running at Northern Lincolnshire and Goole Hospitals NHS Foundation Trust four days after its systems were shut down when a virus was discovered

• November 03, 2016 03 Nov'16

  Cyber security image putting women and girls off, says panel

  There is still a lot of work to be done to change the perception of cyber security and corporate culture to attract more women to the profession, according to a panel of security professionals

• November 02, 2016 02 Nov'16

  Pure-play cyber security has real value, says incoming McAfee head

  Intel Security has outlined its strategy to protect the new digital economy as it gears up for innovation as a new independent pure-play security firm under the McAfee banner

• November 02, 2016 02 Nov'16

  Intel Security shifts channel strategy

  Intel Security adjusts its channel strategy in response to a market shift towards services-based security

• November 01, 2016 01 Nov'16

  Philip Hammond goes on the attack to target cyber threat to UK economy

  Speaking at the Microsoft Future Decoded event in London, the Chancellor revealed how Britain would take an offensive stance to protect infrastructure

• November 01, 2016 01 Nov'16

  Path to telco revenues lies through improved user trust, says KPMG

  Report suggests that half of UK adults would switch telecoms and broadband provider in the event of a security breach, and identifies revenue opportunities in building trust among consumers

• November 01, 2016 01 Nov'16

  UK government re-announces £1.9bn cyber security spend

  Five-year spending increase - announced by Chancellor Philip Hammond 12 months after George Osborne did so - will support new UK cyber security strategy

• October 31, 2016 31 Oct'16

  ICO prepares for post-Brexit GDPR

  The Information Commissioner’s Office is to publish a revised timeline for the UK implementing the EU’s General Data Protection Regulation after Brexit

• October 31, 2016 31 Oct'16

  How software-defined networking can secure critical systems

  SDN promises to bring the efficiency gains achieved in server virtualisation to networking, while also boosting security

• October 28, 2016 28 Oct'16

  United Utilities protects field engineering deployment with AirWatch

  United Utilities deploys mobile device management software AirWatch to secure Samsung devices running a SAP workforce management app

• October 28, 2016 28 Oct'16

  Red Cross data breach shows security is still not a priority

  The Australian Red Cross Blood Service has responded quickly to a breach of 550,000 donor details, but security commentators say the incident shows security is still not a priority for many organisations

• October 28, 2016 28 Oct'16

  Apple iCloud and Gmail hacker gets 18 months in jail

  A US man is given a sentence of 18 months in jail for hacking into celebrity iCloud and Gmail accounts after investigators failed to find a link with the leak of celebrity nude photos online in 2014

• October 27, 2016 27 Oct'16

  Dyn reveals details of complex and sophisticated IoT botnet attack

  DNS services provider Dyn, which was the victim of a large-scale DDoS attack perpetrated by an IoT botnet earlier in October, discusses details of its experience

• October 27, 2016 27 Oct'16

  Information security set for steep trajectory, says (ISC)2

  By helping to create a thriving, diverse and open information security community, (ISC)2 hopes to ensure a steep rise for the profession

• October 27, 2016 27 Oct'16

  Schneider Electric praised for positive response to ICS security flaw

  Schneider Electric has patched a security flaw that highlights the vulnerability of industrial control systems to cyber attack

• October 26, 2016 26 Oct'16

  US Treasury tells banks to provide more cyber attack information

  The US government is calling on financial institutions to share more cyber attack information as concerns grow about the sector's vulnerability

• October 26, 2016 26 Oct'16

  SAP steps up data privacy in Europe

  SAP guarantees technicians outside of Europe will not be able to access companies’ sensitive personnel and other records

• October 25, 2016 25 Oct'16

  Malaysian insurer partners IT supplier to tailor cyber security policies

  Partnership is in response to requests from AIG customers for a more comprehensive risk management approach to cyber insurance

• October 25, 2016 25 Oct'16

  DevOps largely failing to improve security, study shows

  Despite the promise of improved application security, DevOps is failing to deliver due to some key barriers, an HPE study shows

• October 24, 2016 24 Oct'16

  Dyn DDoS attack highlights vulnerability of global internet infrastructure

  Last week’s DDoS attack on DNS firm Dyn has highlighted both the vulnerability of the world’s internet infrastructure, and the dangers of leaving internet of things devices unsecured

• October 24, 2016 24 Oct'16

  In the digital era, customer identity is key

  Identity is vital for presenting a consistent customer relationship across digital channels, but not everyone in all organisations understands this shift, according to identity veteran Ian Glazer

• October 24, 2016 24 Oct'16

  UK National Cyber Security Centre a positive development, says CNI expert

  There needs to be greater understanding of cyber threats facing business, and the UK's new National Cyber Security Centre is a step in the right direction, says CNI expert Barrie Millett

• October 24, 2016 24 Oct'16

  More than 100 MPs ask Obama to halt extradition bid against Lauri Love

  UK MPs across all parties call for US president to save activist from extradition to the US on hacking charges on humanitarian grounds

• October 21, 2016 21 Oct'16

  No endgame for cyber security, says Mikko Hypponen

  Two of the most valuable lessons in cyber security are to know your enemy and not to rely on users to be secure, according to industry veteran Mikko Hypponen

• October 21, 2016 21 Oct'16

  Major DDoS attack on Dyn causes internet disruption

  DNS provider Dyn experiences a large DDoS attack, causing disruption to online services

• October 21, 2016 21 Oct'16

  Many firms failing on crucial customer experience in digital era

  Only through collaboration between all customer-facing parts of a business can it deliver the customer experience that is crucial to survival in the digital era, according to CXP Group consultant Nicole Dufft

• October 21, 2016 21 Oct'16

  Defence secretary announces £265m funding to boost UK cyber defences

  Defence secretary Michael Fallon has promised funding to get rid of “cyber vulnerabilities” in the UK, as he also revealed the government is using “offensive cyber” against Daesh

• October 21, 2016 21 Oct'16

  UK first to bring surveillance under rule of law, says former GCHQ director

  Former GCHQ head David Omand says the UK will be the first country in Europe to legislate to regulate digital intelligence and put it under judicial supervision with judicial review

• October 20, 2016 20 Oct'16

  Lessons to be learned from attempted $1bn bank heist

  Analysis of an attack aimed at stealing $1bn reveals important lessons for cyber defenders, says BAE Systems head of threat intelligence Adrian Nish

• October 20, 2016 20 Oct'16

  Armed forces minister wants military recruiters to "think different" to attract cyber security pros

  Armed Forces minister Mike Penning says military must rethink how it recruits trainees to attract people with the cyber security skills the country needs to protect itself

• October 19, 2016 19 Oct'16

  Asean countries deepen joint efforts against global cyber threats

  Asean Cyber Capacity Programme (ACCP) launched in Singapore to fund cyber security efforts across the region.

• October 19, 2016 19 Oct'16

  Ireland to follow UK in setting up national cyber security centre

  The Republic of Ireland plans to set up a national cyber security centre and education programme to improve the security of critical infrastructure, businesses and citizens

• October 19, 2016 19 Oct'16

  Snowden: the IT analyst turned whistleblower who exposed mass surveillance

  Oliver Stone's biopic on Edward Snowden reaches the heart of the ethical crisis posed by mass surveillance for the state and ordinary citizens

• October 19, 2016 19 Oct'16

  Knowing the business is key to security, says consultant

  Security must be based on real-world business needs and practices as traditional perimeter-based security is no longer working, says independent security consultant Brian Honan

• October 19, 2016 19 Oct'16

  Information security needs to cast recruitment net wider, says panel

  Companies struggling to fill info sec roles should focus on finding people who can do what they need, not on qualifications, according to a security industry panel

• October 18, 2016 18 Oct'16

  Saving Lauri Love: activists plan their next move

  An eclectic bunch of activists, charity workers and reformed hackers spent a rainy Sunday afternoon plotting their next move in a campaign to save Lauri Love from extradition to the US on hacking charges

• October 18, 2016 18 Oct'16

  DCMS appoints director general for digital and media

  Matthew Gould is taking on the role as director general for digital and media to help build “digital ecosystems” and promote innovation

• October 18, 2016 18 Oct'16

  Cyber security is about big team efforts, says CNI expert

  Cyber security requires a team approach, based on a good understanding of the threat, to achieve effective resilience, according to Barrie Millett of the Cyber Rescue Alliance

• October 18, 2016 18 Oct'16

  Most businesses vulnerable to cyber attacks through firmware, study shows

  Company culture and overall attitude to security is a major contribution to vulnerability to cyber attack through firmware, a study by Isaca has revealed

• October 18, 2016 18 Oct'16

  Businesses underprepared for GDPR, study shows

  Lack of consumer and regulatory understanding, combined with low technical and cultural preparedness, represents a major threat to revenue and brand value, according to a Symantec state of privacy report

• October 17, 2016 17 Oct'16

  Intelligence agencies collected personal data unlawfully for a decade, says IPT

  UK intelligence agencies have been collecting communications data on the population without adequate oversight for over a decade, according to the Investigatory Powers Tribunal

• October 17, 2016 17 Oct'16

  Business and GDPR to drive consumer identity projects

  Business demand for consumer identity management capability is growing to enable new business models, improve customer engagement and ensure General Data Protection Regulation compliance, says KuppingerCole

• October 17, 2016 17 Oct'16

  UK firms could face £122bn in data breach fines in 2018

  The PCI Security Standards Council is urging firms to act now to avoid exponentially increased penalties under new EU data protection regulations

• October 14, 2016 14 Oct'16

  Digital Economy Bill lacks clarity on data sharing, experts say

  The Digital Economy Bill needs to firm up its definitions on data sharing and improve transparency to avoid losing public trust, according to experts

• October 14, 2016 14 Oct'16

  Firms urged to automate security certificate backup after Globalsign blackout

  Online firms are being urged to reduce their dependency on single certificate authorities by automating backup processes

• October 14, 2016 14 Oct'16

  Retail websites riddled with security holes, researchers warn

  Retailers urged to improve the security of their online stores amid a series of discoveries of cyber criminal campaigns to exploit vulnerabilities in retail websites

• October 13, 2016 13 Oct'16

  Lloyds Bank launches technologies to improve and secure customer services

  Lloyds Bank is investing in the latest technologies to provide customers with convenient and secure banking services

• October 13, 2016 13 Oct'16

  Almost two-thirds of US office workers unaware of ransomware threat

  Nearly half of ransomware attacks are aimed at office workers, but almost two-thirds of those polled in the US are unaware of the threat

• October 12, 2016 12 Oct'16

  Thousands of significant cyber incidents hit Australian organisations

  Australian Cyber Security Centre report reveals growing threat, with energy, banking and finance, and communications sectors targeted most often

• October 12, 2016 12 Oct'16

  Government to name and shame departments failing to secure email

  The NCSC is piloting various cyber security intiatives with government departments such as Dmarc and other email security measures, and plans to name and shame those which fail to comply

• October 12, 2016 12 Oct'16

  MPs campaign for Lauri Love to be tried in UK

  Backbench MPs are campaigning against Lauri Love’s extradition to the US so he can face trial in the UK

• October 12, 2016 12 Oct'16

  Government failing to prepare UK for robotics and AI

  A report produced by the Science and Technology Committee has warned that the UK is fundamentally unprepared for the changes that will come from robotics and artificial intelligence

• October 12, 2016 12 Oct'16

  G7 sets financial sector cyber defence guidelines as attacks grow

  G7 countries have agreed cyber security guidelines in response to concerns about the safety of interconnected global financial systems that are increasingly coming under attack, according to Symantec

• October 11, 2016 11 Oct'16

  Three-quarters of UK policing websites lack secure encryption

  A quarter of UK policing websites have secure foundations, but half have room for improvement, and the remaining quarter are in need of serious and urgent improvement, according to the Centre for Public Safety

• October 11, 2016 11 Oct'16

  Middle East CISO Council CEO warns of global cyber security storm

  Cyber security issues will be a major theme at this month’s GITEX Technology Week 2016 conference in Dubai

• October 10, 2016 10 Oct'16

  Singapore: a nation united on its digital future

  Singapore is setting itself to be a leader in the digital age, with a reorganised government department the protagonist

• October 10, 2016 10 Oct'16

  Smartwatches banned from UK Cabinet as EC plans IoT security standards

  The EC is planning a security certification scheme for internet of things devices as the UK Cabinet bans smartwatches amid heightened fears of cyber espionage

• October 07, 2016 07 Oct'16

  Security industry failing users, says behaviour expert

  The information security community is failing to educate users in a way that helps then understand cyber threats and change their behaviour, according to consultant Jessica Barker

• October 07, 2016 07 Oct'16

  London police charge third member of ATM hacking gang

  London police arrest and charge a third man suspected of being involved in a series of ATM thefts across the UK in 2014 using malware to bypass security controls

• October 06, 2016 06 Oct'16

  Poor IoT security could take down power grid, warns researcher

  A security researcher who has exposed a series of vulnerabilities in IoT devices says he is concerned about systemic attacks that could take down parts of the internet or national power grids

• October 06, 2016 06 Oct'16

  NSA contractor arrest for spying underlines insider threat

  Malicious insiders are still one of the biggest threats and a popular means of data theft, according to famous spy catcher Eric O'Neill and other security industry experts

• October 06, 2016 06 Oct'16

  Terror groups likely to be first to unleash cyber weapons, says Eugene Kaspersky

  Terror groups are more likely than nation states to unleash cyber weapons and critical infrastructure is the most likely target, warns Kaspersky Lab chief

• October 05, 2016 05 Oct'16

  TalkTalk hit by record £400,000 fine over data breach

  The Information Commissioner’s Office issues its largest ever data protection fine after more than 150,000 customers had their data exposed by TalkTalk breach

• October 05, 2016 05 Oct'16

  IoT security threat is real, says researcher

  The security threat posed by IoT devices is not hype, says security researcher James Lyne

• October 05, 2016 05 Oct'16

  Birmingham Uni beefs up network automation, virtualisation to support research

  The University of Birmingham has deployed a Brocade switching infrastructure and network virtualisation to support the needs of its research teams

• October 05, 2016 05 Oct'16

  SMEs are the Achilles heel for Asean security

  Small to medium-sized enterprises in the Asean region will be gateways to large enterprises for cyber criminals unless they improve their security

• October 04, 2016 04 Oct'16

  Home IoT technology irrelevant to most home owners

  Smart home technology, such as security systems and IoT-enabled thermostats, is overpriced and uninteresting to most home owners, says Beecham Research report

• October 04, 2016 04 Oct'16

  Look to over-the-top services to secure mobile, says specialist

  Mobile network operators should look to 3G and 4G while enterprises should consider OTT services to provide the best security, says telecommunications industry veteran and pioneer Charles Brookson

• October 04, 2016 04 Oct'16

  Bulk surveillance review is ‘fiction’, claims former NSA technical director

  Former NSA technical director Bill Binney talks about the Investigatory Powers Bill and the UK government's independent review of bulk surveillance powers

• October 04, 2016 04 Oct'16

  Mastercard rolls out selfie payments in UK

  Financial services provider Mastercard announces its cardholders in the UK will be able to use a selfie as authentication to pay for goods

• October 04, 2016 04 Oct'16

  DDoS attacks consistent, relentless and costly, report shows

  The latest global DDoS report from Neustar underlines the importance of investing in appropriate defences as the high volume of attacks looks set to increase

• October 04, 2016 04 Oct'16

  Mirai IoT botnet code release raises fears of surge in DDoS attacks

  Organisations with an online presence should prepare for terabit-class IoT botnet-based DDoS attacks that could knock almost any business offline or disable chunks of the internet, warn security experts

• October 03, 2016 03 Oct'16

  Time to move on with social engineering training, says Jenny Radcliffe

  Organisations need to move from awareness of the risk of social engineering to empowering employees to understand and recognise the threat to protect themselves and the company, says Jenny Radcliffe

• October 03, 2016 03 Oct'16

  19 local councils sign up for Gov.uk Verify trials

  GDS will lead pilots of using identity assurance system for local authority digital services

• October 03, 2016 03 Oct'16

  Digital apprentice turns social media into power security tool

  Social security is not only a source of info for attackers, but a powerful way to raise awareness of security, as a young cyber security worker is demonstrating

• September 30, 2016 30 Sep'16

  CISOs need to be more business-focused, says Publicis CISO

  Information security leadership is about politics, getting a place at the top table and showing what security can do for the business, according to Publicis CISO Thom Langford

• September 30, 2016 30 Sep'16

  Brexit has thrown ICO plans into flux, admits information commissioner

  The ICO is working to ensure that the UK's post-Brexit data protection law is progressive, stands up to scrutiny and provides stability, says information commissioner Elizabeth Denham

• September 29, 2016 29 Sep'16

  NGOs challenge UK and US mass surveillance in human rights court

  Privacy International, Liberty and the American Civil Liberties Union are among 10 human rights groups backing a landmark challenge to mass surveillance in the European Court of Human Rights

• September 29, 2016 29 Sep'16

  Breaches should be on the decline by now, says infosec veteran John Walker

  A focus on the board, governance and compliance is distracting many infosec leaders from the real objective of securing data, says John Walker

• September 29, 2016 29 Sep'16

  Trust issues stifling digital economy growth, study shows

  Businesses that have products and services based on trust have a significant opportunity to future-proof their business, but those who do not risk being side-lined, a study shows

• September 28, 2016 28 Sep'16

  NHS Digital aims to put healthcare on firm cyber security footing

  NHS Digital set to work closely with National Cyber Security Centre (NCSC) to boost healthcare sector cyber security capabilities

• September 28, 2016 28 Sep'16

  Clinicians key to building public trust around sharing patient data

  Government needs to build public trust around sharing of anonymised patient data and nothing will change until public conversation takes place, healthcare event told

• September 28, 2016 28 Sep'16

  UK National Cyber Security Centre set to launch

  NCSC is due to launch officially on 1 October 2016 and will help the healthcare sector deliver consistent quality of data security

• September 27, 2016 27 Sep'16

  Lax perimeter security exposes bank to hacker extortion attempt

  Failure to follow standard network security best practice has exposed a Californian investment bank to cyber criminals’ demands

• September 27, 2016 27 Sep'16

  Yahoo breach underlines need for Security Serious Week

  The recently disclosed Yahoo data breach shows that no business is immune, underlining the need to raise awareness and improve practices, say the organisers of Security Serious Week

• September 26, 2016 26 Sep'16

  Yahoo sued over data breach

  Yahoo is facing a class action lawsuit that alleges that the internet firm showed a reckless disregard for the security of its users that resulted in a breach affecting half a billion accounts

• September 26, 2016 26 Sep'16

  Yahoo security still poor despite massive breach, claims Venafi

  Yahoo is likely to have been a victim of its own encryption and security is still poor despite the huge breach that hit the company in 2014, according to security firm Venafi

• September 26, 2016 26 Sep'16

  Growth in UK smartphone market levels off

  Deloitte’s annual study of UK consumer mobile habits reveals that more than 80% of Brits own or have access to a smartphone, and growth is levelling off

• September 26, 2016 26 Sep'16

  Apple to fix backup security vulnerability in iOS 10

  Apple is to issue a security update for a security vulnerability in iOS 10 that could give hackers access to passwords and other security data

• September 25, 2016 25 Sep'16

  Australia must take cyber security opportunity

  Australia may never be able to create an IT industry like that in the US, but it can lead in cyber security

• September 23, 2016 23 Sep'16

  Government mishandling smart meter roll-out, says committee

  The Science and Technology Committee accuses the government of being unclear on the benefits of gas and electricity smart meters, and mishandling aspects of the national roll-out

• September 23, 2016 23 Sep'16

  UK government partners with tech startups on cyber security

  Applications are open to cyber security startups for the first of two cyber innovation centres to receive £50m over five years, as part of the government’s £1.9bn National Cyber Security Programme

• September 23, 2016 23 Sep'16

  Yahoo under fire over data breach affecting 500 million users

  Yahoo comes under fire for not detecting and notifying users sooner of the biggest breach of personal details to date

• September 22, 2016 22 Sep'16

  Cyber attack aimed at destruction, says TV5Monde

  TV5Monde counting the cost of not being adequately prepared for a cyber attacked that downed the network in 2015

• September 21, 2016 21 Sep'16

  Many don’t test disaster recovery plans properly, survey finds

  Nearly 40% of UK organisations do not test disaster recovery plans properly, mainly because of concerns about disruption to production operations

• September 21, 2016 21 Sep'16

  London Capital Group improves service deployment with SDN

  Online trading firm has revitalised its service delivery after switching a legacy physical network for VMware NSX SDN