News

IT security

• April 29, 2025 29 Apr'25

  Scattered Spider on the hook for M&S cyber attack

  The infamous Scattered Spider hacking collective may have been behind the ongoing cyber attack on Marks and Spencer that has crippled systems at the retailer and left its ecommerce operation in disarray.

• April 29, 2025 29 Apr'25

  Gov.uk One Login yet to meet government cyber security standards for critical public services

  The government’s flagship digital identity system still does not fully conform to key national security standards three years after launch, while questions remain over whether historic security problems have been resolved

• April 29, 2025 29 Apr'25

  Kaspersky calls for cyber immunity amid growing cyber threats

  The rise of professional cyber crime groups and state-sponsored actors targeting critical infrastructure requires a move towards inherently secure ‘cyber immune’ systems, says Kaspersky CEO Eugene Kaspersky

• April 25, 2025 25 Apr'25

  UK MoJ crime prediction algorithms raise serious concerns

  The Ministry of Justice is using one algorithm to predict people’s risk of reoffending and another to predict who will commit murder, but critics say the profiling in these systems raises ‘serious concerns’ over racism, classism and data inaccuracies

• April 25, 2025 25 Apr'25

  M&S suspends all online sales as cyber attack worsens

  M&S shuts down online sales as it works to contain and mitigate a severe cyber attack on its systems

• April 24, 2025 24 Apr'25

  M&S systems remain offline days after cyber incident

  M&S is still unable to provide contactless payment or click-and-collect services amid a cyber attack that it says has forced it to move a number of processes offline to safeguard its customers, staff and business

• April 24, 2025 24 Apr'25

  Data breach class action costs mount up

  Organisations exposed to the US market paid out over $150m in class action settlements in just six months. Security leaders must do more to address cyber gaps, respond better to incidents and demonstrate compliance

• April 24, 2025 24 Apr'25

  Ericsson boosts NetCloud SASE with integrated clientless ZTNA for wireless WAN

  Leading comms tech provider claims industry’s first fully integrated clientless zero-trust network access, designed for wireless wide area network with update to core secure access service edge platform

• April 24, 2025 24 Apr'25

  March ransomware slowdown probably a red herring

  An apparent slowdown in ransomware attack volumes is raising eyebrows, but the statistics never tell the full story

• April 23, 2025 23 Apr'25

  Financially motivated cyber crime remains biggest threat source

  Mandiant’s latest annual threat report reveals data on how financially motivated cyber criminals, such as ransomware gangs, dominate the cyber security landscape

• April 23, 2025 23 Apr'25

  Amid uncertainty, Armis becomes newest CVE numbering authority

  Amid an uncertain future for vulnerability research, exposure management company Armis has been given the authority to assign CVE IDs to newly discovered vulnerabilities

• April 23, 2025 23 Apr'25

  Qualys goes to bat for US cricket side San Francisco Unicorns

  Cloud security specialist Qualys partners with US T20 cricket squad San Francisco Unicorns and its Sparkle Army fanclub as the team prepares for its summer 2025 campaign

• April 23, 2025 23 Apr'25

  Digital ID sector calls for changes to government data legislation

  Suppliers urge technology secretary to work more collaboratively with private sector over concerns government’s digital wallet will gain a monopoly in the market

• April 22, 2025 22 Apr'25

  Cyber attack downs systems at Marks & Spencer

  A cyber attack at Marks & Spencer has caused significant disruption to customers, leaving them unable to make contactless payments or use click-and-collect services

• April 22, 2025 22 Apr'25

  Cyber ‘agony aunts’ launch guidebook for women in security

  Cyber ‘agony aunts’ Amelia Hewitt and Rebecca Taylor are launching a book aimed at empowering women in their cyber security careers

• April 22, 2025 22 Apr'25

  Secure Future Initiative reveals Microsoft staff focus

  IT security is now a metric in the Microsoft employee appraisal process

• April 22, 2025 22 Apr'25

  Ofcom bans leasing of Global Titles to crackdown on spoofing

  Telco regulator Ofcom is cracking down on a loophole being exploited by cyber criminals to access sensitive mobile data

• April 22, 2025 22 Apr'25

  AI-powered APIs proving highly vulnerable to attack

  The growth of AI is proving a double-edged sword for API security, presenting opportunities for defenders to enhance their resilience, but also more risks from AI-powered attacks, according to report

• April 22, 2025 22 Apr'25

  Investigatory Powers Tribunal has no power to award costs against PSNI over evidence failures

  Investigatory Powers Tribunal judges have called for the Home Secretary to step in after finding they have no powers to award costs against government bodies that fail to disclose evidence

• April 21, 2025 21 Apr'25

  Top APAC firms recognised at innovation awards

  Citic Telecom, CapitaLand Investment and DBS Bank were among the region’s top industry innovators recognised for their digital transformation efforts at the Computer Weekly Innovation Awards APAC 2025

• April 21, 2025 21 Apr'25

  CW Innovation Awards: Transforming cyber security with AI

  Facing rising cyber threats and a shortage of experts, Citic Telecom International CPC developed an AI-powered penetration testing tool to automate security audits and reduce costs

• April 17, 2025 17 Apr'25

  Tariff turmoil is making supply chain security riskier

  Many businesses around the world are taking the decision to alter their supplier mix in the face of tariff uncertainty, but in doing so are creating more cyber risks for themselves, according to a report

• April 17, 2025 17 Apr'25

  Standard Chartered grounds AI ambitions in data governance

  The bank’s group chief data officer, Mohammed Rahim, outlines how the bank is modernising its data infrastructure and governance practices to support its AI initiatives

• April 16, 2025 16 Apr'25

  Footballers object to processing of performance data

  Football players are seeking to gain more control of their performance data through ‘stop processing’ requests, in an attempt to strike a better balance between firms’ commercial interests and the data rights of footballers

• April 16, 2025 16 Apr'25

  CISA extends Mitre CVE contract at last moment

  The US Cybersecurity and Infrastructure Security Agency has ridden to the rescue of the under-threat Mitre CVE Programme, approving a last-minute, 11-month contract extension to preserve the project’s vital security vulnerability work

• April 16, 2025 16 Apr'25

  CVE Foundation pledges continuity after Mitre funding cut

  With news that Mitre’s contract to run the world-renowned CVE Programme is abruptly terminating, a breakaway group is setting up a non-profit foundation to try to ensure the project’s continuity

• April 16, 2025 16 Apr'25

  Security leaders grapple with AI-driven threats

  Experts warn of AI’s dual role in both empowering and challenging cyber defences, and called for intelligence sharing and the need to strike a balance between AI-driven innovation and existing security practices

• April 15, 2025 15 Apr'25

  Mitre warns over lapse in CVE coverage

  Mitre, the operator of the world-renowned CVE repository, has warned of significant impacts to global cyber security standards, and increased risk from threat actors, as it emerges its US government contract will lapse imminently

• April 15, 2025 15 Apr'25

  Hertz warns UK customers of Cleo-linked data breach

  Car hire giant Hertz reveals UK customer data was affected in a cyber incident orchestrated via a series of vulnerabilities in Cleo managed file transfer products

• April 15, 2025 15 Apr'25

  The Investigatory Powers Tribunal explained

  The Investigatory Powers Tribunal is a semi-secret judicial body that has made significant legal rulings on privacy, surveillance and the use of investigatory powers. What does it do and why is it important? 

• April 14, 2025 14 Apr'25

  Meta settles lawsuit over surveillance business model

  Meta settles lawsuit over use of personal data in targeted advertising, opening up the possibility of other UK users raising legal objections to its processing

• April 14, 2025 14 Apr'25

  Government faces claims of serious security and data protection problems in One Login digital ID

  The Government Digital Service was warned about serious cyber security and data protection problems in its flagship digital identity system, with insider claims that the data of three million users may still be at risk

• April 11, 2025 11 Apr'25

  AI surveillance towers place migrants in ‘even greater jeopardy’

  The use of autonomous surveillance towers throughout the English coast forces migrants into increasingly dangerous routes and contributes to their criminalisation

• April 11, 2025 11 Apr'25

  Comms consortium calls for greater vigilance on subsea cable security

  Open letter from European telecommunications operators and subsea cable stakeholders calls on cables ecosystem to align security objectives with operational feasibility as well create viable business model based on risk-based best practices

• April 11, 2025 11 Apr'25

  Met Police to deploy permanent facial recognition tech in Croydon

  The Met Police is set deploy permanent live facial recognition cameras on street furniture in Croydon from summer 2025, but local councillors say the decision – which has taken place with no community input – will further contribute the ...

• April 11, 2025 11 Apr'25

  Warranty fraud fuels hidden army of hardware hackers

  Widespread warranty fraud is not only costing companies billions but also creating a breeding ground for advanced hardware exploits, warns hardware hacker and researcher Bunnie Huang at Black Hat Asia 2025

• April 10, 2025 10 Apr'25

  Google bets on unifying security tools to ease CISO pain

  At Google Cloud Next in Las Vegas, Google launches its Unified Security platform with the goal of bringing together disparate security solutions to help cyber leaders and practitioners address their most keenly felt pain points

• April 10, 2025 10 Apr'25

  Companies House goes live with One Login ID verification

  People can verify their identity with Companies House using Gov.uk One Login as the central government body becomes the 36th service to start using the digital identity system

• April 10, 2025 10 Apr'25

  Spirit of openness helps banks get serious about stopping scams

  Recent announcements show that banks, financial services firms and IT companies are increasing efforts to curb online scams

• April 10, 2025 10 Apr'25

  Investigative reporter files legal action over police surveillance and social media monitoring

  Journalist complains to Investigatory Powers Tribunal after Northern Irish police placed him under surveillance as he investigated their handling of a high-profile death

• April 09, 2025 09 Apr'25

  Microsoft’s April 2025 bumper Patch Tuesday corrects 124 bugs

  Microsoft is correcting 124 vulnerabilities in its March Patch Tuesday, one of which is being actively exploited in the wild, and 11 of which are ‘critical’

• April 09, 2025 09 Apr'25

  Nokia, Telia, Finnish Defence Forces claim 5G standalone slice first

  Companies showcase potential of 5G technology in enhancing critical communications for defence units operating in coalition environments to ensure seamless experience when crossing country borders

• April 08, 2025 08 Apr'25

  NCSC issues warning over Chinese Moonshine and BadBazaar spyware

  Two spyware variants are being used to target the mobile devices of persons of interest to Chinese intelligence, including individuals in the Taiwanese, Tibetan and Uyghur communities

• April 08, 2025 08 Apr'25

  Labour MPs launch digital ID campaign

  A large group of Labour MPs have called for the introduction of a digital ID system to crack down on illegal migration and benefits fraud

• April 08, 2025 08 Apr'25

  Spoofing vuln threatens security of WhatsApp Windows users

  Meta has disclosed and patched a potentially dangerous spoofing flaw in WhatsApp for Windows that could have caused big problems for unwitting users

• April 08, 2025 08 Apr'25

  IBM boosts AI mainframe capabilities with Z17

  IBM continues to try to break out of the mindset that mainframes are just for transaction processing. The latest server offers greater AI capabilities

• April 08, 2025 08 Apr'25

  Government punts cyber governance code of practice for UK businesses

  The Department for Science, Innovation and Technology’s cyber security minister Feryal Clark announces a cyber security code of governance for UK businesses to follow

• April 08, 2025 08 Apr'25

  Over £18m stolen from Santander UK customers in first three months of year

  Bank’s latest quarterly report on scams said over £18m was stolen from its UK customers by scammers

• April 08, 2025 08 Apr'25

  UK authority’s search for answers over deleted Julian Assange emails comes too late to retrieve data

  The Crown Prosecution Service has finally searched for information about the destruction of emails from the WikiLeaks founder’s lawyer – but too late to retrieve data about the deleted documents

• April 07, 2025 07 Apr'25

  UK SMEs losing over £3bn a year to cyber incidents

  A lack of access to technology, little to no staff training, and competing priorities are losing UK SMEs up to £3.4bn to cyber incidents every year