News

IT security

• June 30, 2021 30 Jun'21

  Half of mobile phones sold in the UK at risk of security issues

  Lengthy mobile phone contracts leave buyers at risk of their devices losing support for security updates

• June 30, 2021 30 Jun'21

  REvil affiliates offer hefty ransom discounts, data reveals

  REvil or Sodinokibi ransomware activity is higher than ever, but its success appears to be relative, with some affiliates prepared to dramatically cut their prices

• June 30, 2021 30 Jun'21

  LinkedIn denies exposure of 700 million user records is a data breach

  Data relating to 700 million users of the LinkedIn networking platform has appeared for sale, but the firm says it is the victim of data scraping, not a security breach

• June 30, 2021 30 Jun'21

  Cops seize criminal VPN used by ransomware gangs

  A coordinated sting has ended the operations of the DoubleVPN service, the owners of which are accused of harbouring cyber criminal activity

• June 30, 2021 30 Jun'21

  Putting cloud repatriation into perspective

  Moving public cloud workloads back on-premise is among the decisions that organisations have to make as they straddle between public and private cloud environments

• June 29, 2021 29 Jun'21

  New Nobelium attacks a reminder to attend to cyber basics

  A new campaign from the same threat group that broke into SolarWinds serves as a reminder that cyber crime gangs will try to exploit any avenue they can, even if technically unsophisticated

• June 29, 2021 29 Jun'21

  UK Cyber Security Council launches inaugural initiatives

  Security association seeks to determine terms of reference for committees to oversee standards and ethics, and qualifications and careers in the cyber sector

• June 29, 2021 29 Jun'21

  EU recognises UK data protection adequacy but warns against divergence

  The European Commission has granted the UK data adequacy, allowing data sharing between the EU and the UK, but warns it may yet be revoked

• June 29, 2021 29 Jun'21

  Video game industry under relentless cyber attacks

  Web application attacks against the global video game industry grew by 340% in 2020 as more people turn to gaming during pandemic lockdowns

• June 28, 2021 28 Jun'21

  Insurers unprepared for challenges of underwriting ransomware

  RUSI think tank calls for an industry-wide reset amid intense challenges for providers of cyber security insurance

• June 28, 2021 28 Jun'21

  UK’s FCA bans crypto exchange Binance as crackdown spreads

  Ban on Binance Markets comes amid a wider global crackdown on the largely unregulated global market for cryptocurrencies and related assets.

• June 28, 2021 28 Jun'21

  HMRC-branded phishing scams surge despite protections

  The number of HMRC-branded phishing scams surged 87% in the past 12 months, according to latest revealed figures

• June 28, 2021 28 Jun'21

  Lazada rolls out public bug bounty programme

  Regional e-commerce giant Lazada is looking to uncover more vulnerabilities that could compromise data security in a public bug bounty programme that offers up to $10,000 per bounty

• June 25, 2021 25 Jun'21

  NCSC CEO: UK-Ireland collaboration crucial to stop cyber threats

  Speaking at a conference in Dublin, NCSC Lindy Cameron is highlighting the importance of continued collaboration between the UK and Ireland to protect shared interests and counter security threats

• June 25, 2021 25 Jun'21

  Anglesey schools offline after cyber attack

  Isle of Anglesey County Council is investigating a cyber attack that has forced it to shut down systems at all five secondary schools on the island

• June 25, 2021 25 Jun'21

  CMA to probe Amazon and Google over fake reviews

  The CMA has opened an investigation into Amazon and Google over possible breaches of consumer protection law

• June 25, 2021 25 Jun'21

  AWS launches bug-busting programme for developers

  Amazon Web Services is inviting customers to probe their code for software bugs and vulnerabilities using its CodeGuru console

• June 24, 2021 24 Jun'21

  Google hands third-party cookies a stay of execution

  Google’s proposed Privacy Sandbox initiative – which will see third-party cookies phased out in the Chrome web browser – has been pushed back to 2023

• June 24, 2021 24 Jun'21

  NCSC recognises cyber degree apprenticeships for the first time

  Addition of new cyber courses to National Cyber Security Centre’s accredited list will supposedly help students make better choices and help universities get more funding

• June 24, 2021 24 Jun'21

  Revealed: Crypto platform’s role in Cl0p ransomware raid

  Crypto infrastructure provider Binance provided assistance to law enforcement after finding its exchange was being used by cyber criminals to launder their ransomware profits

• June 24, 2021 24 Jun'21

  Stalkerware apps becoming normalised among young people

  Data in a new report appears to show that dangerous stalkerware apps are becoming normalised in younger age groups

• June 24, 2021 24 Jun'21

  (ISC)² makes ransomware education course free through 31 July

  Cyber security association is making its Professional Development Institute course on ransomware free to the general public until the end of July

• June 24, 2021 24 Jun'21

  Controversial cyber tycoon John McAfee dead at 75

  Founder of the eponymous cyber security firm has committed suicide in a Spanish prison

• June 24, 2021 24 Jun'21

  Make ransomware payments illegal, say 79% of cyber pros

  Report produced for MSSP Talion claims overwhelming support for the criminalisation of ransomware payments

• June 23, 2021 23 Jun'21

  City of York picks Barracuda Networks for data protection

  York Council needed to refresh its backup service to bring new security protections after it went ‘all-in’ on Microsoft Office 365

• June 23, 2021 23 Jun'21

  How containerisation helps VW develop car software

  Volkswagen’s R&D centre is working with Red Hat to use containerisation to improve how it develops and tests software for the control systems in cars

• June 23, 2021 23 Jun'21

  European Union to set up new cyber response unit

  Proposed Joint Cyber Unit will tackle a rising number of serious incidents impacting public services, businesses and citizens of the EU

• June 23, 2021 23 Jun'21

  Time to patch increases significantly during pandemic

  New data from US-based endpoint management specialist Automox reveals some of the challenges security teams face in keeping up with endpoint security

• June 23, 2021 23 Jun'21

  UK councils reported over 700 data breaches to ICO in 2020

  Data disclosed under the Freedom of Information Act reveals an estimated 700 data breaches were reported to the Information Commissioner’s Office by local councils last year

• June 23, 2021 23 Jun'21

  Openness can protect Dutch companies against ransomware

  Dutch businesses that suffer ransomware attacks need to be more open about it, if this growing problem is to be brought under control

• June 22, 2021 22 Jun'21

  SonicWall sees 226.3 million ransomware attack attempts this year

  SonicWall detected 226.3 million attempted ransomware attacks between January and May 2021, more than double the number seen in the same period last year

• June 22, 2021 22 Jun'21

  Cloudflare announces new integrations with Microsoft, others

  New security integrations with Microsoft Azure Sentinel, Splunk, Datadog and Sumo Logic will supposedly make it easier for users to analyse network security data

• June 22, 2021 22 Jun'21

  Innova and RISE drive node development in Sweden

  Swedish cyber security project, National Node, opens its doors to the country’s security firms

• June 22, 2021 22 Jun'21

  NSPCC, IWF help under-18s scrub their nude photos from the web

  Report Remove tool is designed to be used by under-18s to report nude images or videos of themselves that have appeared online

• June 22, 2021 22 Jun'21

  UK SMEs lack capacity to fend off cyber attacks

  Three-quarters of UK SME leaders would not have sufficient capacity or expertise to deal with a cyber attack, according to a report

• June 21, 2021 21 Jun'21

  Parliamentary devices left in taxis, buses, trains and pubs

  Nearly 100 devices belonging to parliamentary staffers, including MPs and peers, were lost or stolen over the course of 2019 and 2020

• June 18, 2021 18 Jun'21

  NHS App reaches six million users, thanks to Covid vaccine feature

  More than two million new users have downloaded the NHS App since it was updated in May to include Covid-19 vaccination status

• June 18, 2021 18 Jun'21

  ICO issues guidance on facial recognition in public spaces

  Information commissioner’s concern over the problematic use of facial recognition in public spaces has prompted her to publish official guidance on its deployment, while civil society calls for an outright ban

• June 18, 2021 18 Jun'21

  Lorca Ignite programme targets breakout cyber talent

  Six of the most successful companies to have come through Lorca’s existing accelerators are being inducted into an intensive programme

• June 18, 2021 18 Jun'21

  Carnival Cruises hit by fourth cyber incident in a year

  Latest data breach at Covid-hit cruise line comes hot on the heels of two recent ransomware attacks and a spring 2020 breach

• June 17, 2021 17 Jun'21

  Cyber crooks target Amazon Prime users ahead of retail bonanza

  A surge in malicious domain registrations ahead of Amazon Prime Day indicates cyber criminals have set their sights on exploiting vulnerable shoppers

• June 17, 2021 17 Jun'21

  UnitingCare Queensland restores IT systems after cyber attack

  Australian healthcare service provider has restored key corporate systems and integrations between applications following a cyber attack earlier this year

• June 17, 2021 17 Jun'21

  Biden tackles Putin on ransomware at Geneva summit

  Discussions between Joe Biden and Vladimir Putin on cyber crime appear to have been somewhat positive, but the path ahead remains unclear

• June 16, 2021 16 Jun'21

  Cl0p ransomware gang clapped in irons, assets seized

  Ukrainian police report they have taken down the Cl0p, aka Clop, ransomware operation following a lengthy investigation

• June 16, 2021 16 Jun'21

  Organisations cannot rely on cyber insurance to cover losses

  Ransomware attacks have become a big driver of cyber insurance claims, but insurance must not be relied upon as a failsafe, says a report

• June 15, 2021 15 Jun'21

  NHS Test and Trace picks Risk Ledger to secure supply chain

  Risk Ledger’s technology promises ‘unparalleled’ visibility into NHS Test and Trace’s supply chain

• June 15, 2021 15 Jun'21

  Privacy pro salaries rise throughout pandemic, but at a cost

  Data from the IAPP’s latest salary survey reveals some insight into how the pandemic impacted the privacy profession

• June 15, 2021 15 Jun'21

  Ransomware most insidious cyber threat facing UK

  NCSC CEO urges organisations to do more to prepare for ransomware attacks

• June 15, 2021 15 Jun'21

  The Security Interviews: How to build a government model to ‘hack for good’

  Kyle Hanslovan started Huntress to give back after a career in the intelligence sector. After US authorities took action to help people hit by the Microsoft Exchange attacks, we discussed how governments can ‘hack for good’

• June 15, 2021 15 Jun'21

  Scottish government awards digital identity platform contract to Scott Logic

  Supplier is working on a two-year project to create a digital identity service through a suite of common platforms that will be adopted across Scottish government