News

IT security

• August 03, 2021 03 Aug'21

  UK MoD turns to hackers to help secure digital assets

  Hackers given direct access to internal Ministry of Defence systems to identify and report security vulnerabilities

• August 03, 2021 03 Aug'21

  New ransomware gang spins out of DarkSide

  The emergence of a ransomware gang known as BlackMatter raises questions that it could be a re-brand of REvil or DarkSide

• August 03, 2021 03 Aug'21

  Destruction and integrity cyber attacks on the rise

  Cyber security professionals have reported a sharp rise in debilitating attacks aimed at destroying or manipulating data

• August 03, 2021 03 Aug'21

  Ransomware attacks increase dramatically during 2021

  Dramatic increase in ransomware attacks globally during first half of 2021 driven by triple extortion technique, and is only set to expand further

• August 02, 2021 02 Aug'21

  Government publishes second version of digital identity trust framework

  The second iteration of the framework, still in alpha version, sets out how organisations can become certified digital identity service providers

• July 30, 2021 30 Jul'21

  Hospitality firms must accelerate digital transformation to secure long-term recovery

  Key retail sector must respond quickly to new post-pandemic digital-first demands and consumer behaviours to regain competitive edge, says study

• July 29, 2021 29 Jul'21

  Technical hiccups force Babuk ransomware gang to change tactics

  The Babuk ransomware operation backed away from encrypting its victims’ files, and technical difficulties may be to blame, reports McAfee

• July 29, 2021 29 Jul'21

  Investigatory Powers Tribunal finds UK spy agencies unlawfully collected personal data

  Campaign groups Privacy International and Liberty are gearing up to bring further legal action after a court found that UK spy agencies unlawfully collected phone and internet records

• July 28, 2021 28 Jul'21

  Almost half unaware of GP data-sharing plans

  Around half of adults in England – approximately 20 million people – remain unaware of the scope of the NHS GPDPR programme, prompting calls for a public education campaign

• July 28, 2021 28 Jul'21

  Top vulnerabilities target perimeter devices

  The most frequently exploited CVEs of the year so far are to be found in perimeter and network access devices, according to a joint advisory from the NCSC and partners

• July 28, 2021 28 Jul'21

  COP26 cyber resource hub launched for Glasgow businesses

  New digital information hub for Glasgow business to help organisations keep secure both physically and online ahead of major climate change summit

• July 27, 2021 27 Jul'21

  ICO ends its involvement in dispute between NatWest Bank and data breach whistleblower

  The Information Commissioner’s Office has ended its involvement in a dispute between a data breach whistleblower and NatWest bank

• July 27, 2021 27 Jul'21

  US lawmakers call for probe into ‘arrogant’ spyware firm

  US members of Congress have called for an investigation into NSO Group, the spyware supplier at the centre of a massive surveillance scandal

• July 27, 2021 27 Jul'21

  TikTok sets up cyber security hub in Dublin

  Dublin-based cyber centre will oversee the security of TikTok’s users across Europe

• July 27, 2021 27 Jul'21

  How IBM is solving the data privacy problem

  IBM’s fully homomorphic encryption technology lets enterprises apply analytics and machine learning to encrypted data without compromising data privacy

• July 26, 2021 26 Jul'21

  Malicious actors turn to obscure programming languages

  Using new, lesser-known or otherwise uncommon programming languages to code new malwares can help skirt cyber defences

• July 26, 2021 26 Jul'21

  No More Ransom initiative saves £850m over five years

  Initiative’s free ransomware decryption tools have been used by more than six million people since 2016

• July 25, 2021 25 Jul'21

  Tokyo 2020 hit by data breach

  The user names and passwords of Tokyo 2020 ticket holders and event volunteers were reportedly compromised, but government official claims the data leak was not large

• July 25, 2021 25 Jul'21

  OAIC: Uber failed to protect personal data of Australians

  Uber did not take reasonable steps to protect Australians’ personal information from unauthorised access, says Australia’s national privacy watchdog

• July 23, 2021 23 Jul'21

  Kaseya obtains universal ransomware decryptor

  Kaseya says it obtained a ransomware decryptor key from a trusted third party, but there is no word on whether a ransom was paid

• July 22, 2021 22 Jul'21

  Respect in Security challenges abuse and harassment in cyber

  With around a third of cyber pros saying they have personally experienced harassment at work or online, a new initiative is urging organisations to pledge their support to help free the community from the scourge of abuse. We met its founders

• July 22, 2021 22 Jul'21

  Beeinfotech PH opens telco-neutral datacentre in the Philippines

  Datacentre startup is touting carrier neutrality, bespoke services and cyber security capabilities to meet the growing demand for co-location services in the Philippines

• July 21, 2021 21 Jul'21

  France’s Macron among alleged Pegasus targets

  Data relating to devices used by French president Emmanuel Macron and the head of the World Health Organization, among others, has been uncovered in a dataset linked to government use of spyware

• July 20, 2021 20 Jul'21

  NCSC’s Cameron urges deeper cyber alliance-building

  Speaking to an event in Israel, NCSC CEO Lindy Cameron has praised joint UK-Israeli efforts on security collaboration

• July 20, 2021 20 Jul'21

  NHS Digital tightens rules for GPDPR data scrape

  The proposed collection of patient data held by GPs will now only commence when three key criteria have been fulfilled, says NHS Digital

• July 19, 2021 19 Jul'21

  Government launches consultation on plans for UK digital identity market

  DCMS wants stakeholders to offer their views on proposals for a new governance regime and expanding access to government-held datasets for identity verification

• July 19, 2021 19 Jul'21

  UK, US confirm Chinese state backed MS Exchange Server attacks

  UK and US governments, alongside the EU and Nato, have formally attributed the March 2021 Microsoft Exchange Server attacks to Chinese state-backed actors

• July 19, 2021 19 Jul'21

  Pegasus mobile RAT abused to monitor journalists and activists

  Israel-based surveillance specialist NSO Group is facing renewed pressure after it emerged its Pegasus mobile surveillance tool may be being widely abused by repressive regimes

• July 19, 2021 19 Jul'21

  Privacy Shield: One year on and companies are still grappling for answers

  Activist lawyer Max Schrems and Eduardo Ustaran, partner at Hogan Lovells, look for common ground in a problem with no easy answers

• July 16, 2021 16 Jul'21

  Legacy SonicWall kit exploited in ransom campaign

  Users of older versions of SonicWall Secure Mobile Access 100 and Secure Remote Access products are at risk from a new ransomware campaign

• July 15, 2021 15 Jul'21

  Macquarie Data Centres to build Sydney North facility

  Macquarie Data Centres’ latest 32MW facility will come with a cyber security centre that monitors and manages cyber security events

• July 15, 2021 15 Jul'21

  Lawyers take EncroChat hacking operation to French supreme court

  Lawyers head to French supreme court after appeals court finds EnroChat inception legal under French law

• July 15, 2021 15 Jul'21

  Privacy Shield: US surveillance law reforms essential for EU-US data, says EU parliamentary study

  EU Committee on Civil Liberties, Justice and Home Affairs study calls for major reforms of US spying laws to enable an EU-US data-sharing agreement to replace Privacy Shield

• July 15, 2021 15 Jul'21

  Singapore to invest S$50m in ‘digital trust’ capabilities

  The Singapore government is pumping in S$50m to bolster research in technologies that will foster digital trust in areas such as privacy protection and identity management

• July 14, 2021 14 Jul'21

  REvil ransomware crew drops offline, reasons murky

  The REvil ransomware operation appears to have gone dark, but claims about its demise are almost certainly exaggerated

• July 14, 2021 14 Jul'21

  Multiple Microsoft bugs being actively exploited

  Microsoft’s July Patch Tuesday update fixes 117 vulnerabilities, 13 rated as critical and four already being actively exploited

• July 13, 2021 13 Jul'21

  Regional cyber clusters score £700k of funding

  DCMS has awarded £700,000 of funding to a network of 20 regional cyber clusters

• July 13, 2021 13 Jul'21

  Modipwn vulnerability puts millions of building systems at risk

  Authentication bypass vulnerability in a Schneider Electric product could lead to device takeover

• July 13, 2021 13 Jul'21

  Secureworks sets up in EU datacentre for XDR services

  New datacentre location helps Secureworks’ customers meet EU data residency requirements

• July 13, 2021 13 Jul'21

  UK Cyber Security Council calls for new push on training

  Too many companies have cut back on security training and development during the pandemic, says UK Cyber Security Council

• July 13, 2021 13 Jul'21

  Met Police seize £180m worth of Bitcoin

  The largest ever seizure of cryptocurrency in the UK comes just weeks after a previous multi-million pound confiscation, as law enforcement clamps down on money laundering

• July 13, 2021 13 Jul'21

  Dutch prosecutor ordered to give evidence on EncroChat hack

  Netherlands court rules that a public prosecutor should give evidence about the role of the Dutch in the EncroChat cryptophone hack which has led to arrests of organised gangs worldwide

• July 12, 2021 12 Jul'21

  Kaseya VSA services coming online after week-long outage

  Kaseya has successfully deployed a patch to its ransomware-hit VSA product as per a revised schedule, and customers are beginning to come back online

• July 12, 2021 12 Jul'21

  NSW department of education hit by cyber attack

  Australia’s New South Wales department of education takes some systems offline as a precautionary measure in response to a cyber attack last Thursday

• July 11, 2021 11 Jul'21

  Ransomware and botnets among top cyber threats in Singapore

  The city-state saw more ransomware threats and command-and-control servers hosted out of its highly connected network infrastructure last year, as threat actors capitalised on the pandemic

• July 09, 2021 09 Jul'21

  Ransomware gangs seek people skills for negotiations

  The process of negotiating a ransomware payment is delicate, hence cyber criminal organisations are prepared to offer good terms to those with the right skillsets

• July 09, 2021 09 Jul'21

  Met Police should release information on British WikiLeaks journalists passed to US, tribunal told

  The Metropolitan Police should release correspondence with the US Department of Justice about three UK based WikiLeaks journalists, despite national security claims, a tribunal heard

• July 08, 2021 08 Jul'21

  Kaseya apologises for extended downtime after ransom attack

  CEO of Kaseya apologises after pushing back the restoration of the firm’s VSA service following a REvil ransomware attack

• July 08, 2021 08 Jul'21

  PrintNightmare haunts Microsoft as patch may miss mark

  Microsoft dropped an out-of-band patch to fix PrintNightmare, but there are concerns it may not be totally effective. This does not mean it shouldn’t be applied

• July 07, 2021 07 Jul'21

  US government given permission to appeal UK’s decision to not extradite Julian Assange

  US offers assurances that Assange could serve time in his home country of Australia if convicted