News

IT security

• December 23, 2021 23 Dec'21

  Top 10 cyber security stories of 2021

  Cyber security dominated the headlines in 2021, making it hard to gain a clear picture of what to pay attention to. What is an IT buyer to do?

• December 22, 2021 22 Dec'21

  Top 10 cyber crime stories of 2021

  Cyber crime hit new heights and drew more attention than ever in 2021. We look back at the biggest stories of the year

• December 21, 2021 21 Dec'21

  IT Priorities 2022: Cloud-first mindset growing in India

  Nearly half of organisations in India are expected to spend more on cloud services, underscoring the growing cloud-first mindset that is taking root in the subcontinent

• December 20, 2021 20 Dec'21

  Top 10 artificial intelligence stories of 2021

  This year, artificial intelligence has moved to operationalisation, explainability and regulatory frameworks. Here are Computer Weekly’s top 10 artificial intelligence stories for 2021

• December 20, 2021 20 Dec'21

  Top 10 ransomware and backup stories of 2021

  Key articles from 2021 that highlight the link between ransomware and snapshots and backup and their role in repelling attacks, plus effects of the pandemic on backup and recovery

• December 17, 2021 17 Dec'21

  HSBC fined £64m for automated transaction monitoring failures

  Bank hit by multimillion-pound fine for failures related to its transaction monitoring, which failed to spot potential money-laundering activity

• December 15, 2021 15 Dec'21

  After Log4j, December Patch Tuesday piles on the pressure

  December’s Patch Tuesday update from Microsoft contains several critical CVEs, but this month all attention is focused on the fall-out from Log4Shell, and burn-out is becoming a real issue

• December 15, 2021 15 Dec'21

  UK government to take ‘whole-of-society’ approach to cyber

  Second iteration of the UK’s National Cyber Strategy broadens its focus to build a ‘whole-of-society’ security posture

• December 14, 2021 14 Dec'21

  Almost half of networks probed for Log4Shell weaknesses

  Close to half of corporate networks have already been actively targeted by individuals seeking to exploit the critical Log4Shell Apache bug

• December 13, 2021 13 Dec'21

  What is Log4Shell, and why are we panicking about it?

  It’s been described as a ‘design failure of catastrophic proportions’ that threatens the very fabric of the digital world. Find out what the Log4j2 Log4Shell panic is all about, and what you should do about it

• December 13, 2021 13 Dec'21

  Top IT predictions in APAC in 2022

  Operationalising zero trust, talent retention and containerisation are just some of the key trends that will shape Asia-Pacific’s technology landscape in 2022

• December 10, 2021 10 Dec'21

  Julian Assange can be extradited to the US to face espionage and hacking charges, court rules

  High Court overturns decision not to extradite WikiLeaks founder after US government gives assurances over his treatment

• December 10, 2021 10 Dec'21

  C-suite’s biggest ransomware fear: Post-attack regulatory sanctions

  Exposure to regulatory sanctions such as fines are the biggest worry for C-suite executives in the wake of a ransomware attack

• December 09, 2021 09 Dec'21

  What are the challenges associated with the MITRE ATT&CK framework?

  Businesses sometimes struggle to use the MITRE ATT&CK framework effectively. Learn more about some of the challenges, and how to overcome them

• December 09, 2021 09 Dec'21

  UK and US to collaborate on privacy innovation contest

  Joint UK-US innovation challenge contest centring on privacy-enhancing technology announced at Summit for Democracy in Washington DC

• December 09, 2021 09 Dec'21

  Aryaka announces ‘all-in-one’ SD-WAN, SASE offerings for hybrid workplace

  Cloud-first software-defined wide area network firm claims hybrid network innovation breakthrough, enabling businesses of all sizes to navigate change while focusing on growth and digital transformation

• December 08, 2021 08 Dec'21

  2021 another record-breaker for vulnerability disclosure

  More than 50 CVEs were logged every day in 2021, more than at any time since records began, while ethical hackers continue to prove their value

• December 08, 2021 08 Dec'21

  Russia may be collaborating with US to bring cyber criminals to heel

  Trustwave’s SpiderLabs says its analysis of chatter on underground dark web forums suggests cyber criminals are starting to panic that formerly ‘friendly’ governments are on their case

• December 08, 2021 08 Dec'21

  Most consumers expect banks to cover losses to scams

  Consumers expect banks to cover losses to cyber crime, as the number of attacks grows

• December 08, 2021 08 Dec'21

  UK privacy chief denies conflict of interest in new role

  UK information commissioner will join a private law firm that represents technology companies she used to regulate, raising questions about conflicts of interest and drawing ‘revolving door’ criticisms

• December 08, 2021 08 Dec'21

  Number of .uk domain suspensions at record low

  Statistics from Nominet show how effective law enforcement action against cyber crime in the UK is paying off

• December 07, 2021 07 Dec'21

  Investigation mounted into Spar supermarket cyber attack

  Possible supply chain cyber attack left more than 300 Spar supermarkets unable to process credit card payments

• December 06, 2021 06 Dec'21

  IT Priorities 2022: Pandemic’s long tail for cyber buyers

  Pandemic response has been top of mind for cyber leaders these past 18 months, and as Covid-19 turns two, the TechTarget/Computer Weekly IT Priorities 2022 study shows buyers are still focused on how Covid has upended the workplace

• December 06, 2021 06 Dec'21

  Surge in Nobelium-linked supply chain attacks

  Mandiant’s researchers share new intel on two distinct clusters of Russian APT activity, linked to the Nobelium SolarWinds attackers

• December 02, 2021 02 Dec'21

  Millions of credit card details for sale on dark web for as little as 75p

  The credit card details of millions of people from across the world can be bought by criminals using the dark web for as little as $1

• December 02, 2021 02 Dec'21

  GTT teams with Palo Alto to power SASE platform

  Secure access service edge platform will offer advanced security techniques, fortifying network access from any location

• December 01, 2021 01 Dec'21

  Kaspersky introduces cyber policy for bionic devices

  Cyber firm Kaspersky has become one of the first organisations in the world to develop and implement a security policy covering the use of bionic devices and other forms of human augmentation

• November 30, 2021 30 Nov'21

  Compliance, device management a challenge for NHS cyber teams

  Information gleaned by asset visibility specialist Armis reveals that despite improvements, some daunting security challenges still dog the NHS

• November 30, 2021 30 Nov'21

  MI6 will ‘open up’ to tech firms to innovate faster than adversaries, says chief Richard Moore

  MI6 will use investment fund to back tech companies to develop long-term technologies that will help it to keep pace with China and Russia

• November 30, 2021 30 Nov'21

  HP patches bugs in over 150 printer models

  More than 150 HP multifunction printers are at risk of compromise through a series of newly disclosed vulnerabilities, one of them wormable

• November 30, 2021 30 Nov'21

  Recovering from ransomware: One organisation’s inside story

  In February 2021, French office equipment supplier Manutan fell victim to a DoppelPaymer ransomware hit. IT ops director Jérôme Marchandiau tells the inside story of the incident

• November 29, 2021 29 Nov'21

  ICO warns facial recognition company Clearview AI it could face £17m fine over privacy breaches

  The UK’s information commissioner has issued a preliminary decision to fine Clearview over £17m for breaching UK data protection law and invited the company to make representations

• November 29, 2021 29 Nov'21

  British Army picks Immersive Labs for cyber training

  The British Army will make Immersive Labs’ security training platform available to all serving personnel

• November 29, 2021 29 Nov'21

  Three latest trends and developments around the Mitre ATT&CK framework

  Framework is set to receive important updates to help organisations and businesses evolve their cyber security. Learn more about what it offers

• November 26, 2021 26 Nov'21

  UK’s surveillance culture may be normalising use of tech for abuse

  Intense surveillance of public spaces by UK authorities may be playing a part in the normalisation of cyber stalking in intimate relationships

• November 25, 2021 25 Nov'21

  Government must prove its plans to police encryption work, says ex-cyber security chief

  Ciaran Martin, the former UK cyber security chief, says the government must explain how it can access encrypted communications without damaging cyber security and weakening privacy

• November 25, 2021 25 Nov'21

  UK consumers warned of increase in credit card application fraud

  There has been a sharp rise in fraudsters using stolen personal details to open credit card accounts

• November 24, 2021 24 Nov'21

  Consumer cyber bill to protect mobiles, smart devices

  Product Security and Telecommunications Infrastructure Bill will reinforce protections for consumer devices and mandate improvements to default security settings

• November 24, 2021 24 Nov'21

  Apple sues under-fire malware firm NSO

  Lawsuit alleges spyware firm NSO Group targeted Apple’s users, adding to the pressure on the under-fire company

• November 24, 2021 24 Nov'21

  Police tech introduced with little scrutiny or training

  A Lords inquiry into the adoption of advanced algorithmic technologies by police in England and Wales has been told that new tools are being introduced without proper training and with little scrutiny of their impacts

• November 23, 2021 23 Nov'21

  Schrems accuses Irish DPC of trying to block publication of Facebook documents

  Austrian lawyer Max Schrems has filed a complaint after the Irish data protection commissioner put his privacy organisation under pressure to sign a non-disclosure agreement

• November 23, 2021 23 Nov'21

  NCSC commits to new diversity measures

  The National Cyber Security Centre’s second annual report on diversity in cyber security finds room for improvement

• November 22, 2021 22 Nov'21

  Upcoming holidays prompt ransomware warning from authorities

  Ransomware gangs know how calendars work, and may target their attacks around major holidays to take advantage of more people being off work, according to a new alert

• November 22, 2021 22 Nov'21

  Black Friday cyber warning for 4,000 card-skimming victims

  NCSC warns thousands of small retailers that their websites are being exploited to steal customer data

• November 22, 2021 22 Nov'21

  CIO interview: Karl Hoods, CDIO, Department for Business, Energy and Industrial Strategy

  Moving to the cloud, developing staff skills and responding quickly to the pandemic – from a public sector IT leader’s perspective

• November 19, 2021 19 Nov'21

  Why is Emotet back, and should we be worried about it?

  The sudden reappearance of Emotet this week has security teams on high alert, but do we need to be worried about its return, and what should we be doing about it?

• November 19, 2021 19 Nov'21

  GCHQ, NSA chiefs recommit to counter cyber threats

  UK and US intelligence services reaffirm a joint commitment to disrupt and deter new and emerging cyber threats

• November 18, 2021 18 Nov'21

  Government to legislate to make APP fraud reimbursement mandatory

  UK payments regulator wants to reduce the huge sums of money lost to authorised push payment fraud and is calling on the banking and tech industries to play their part

• November 18, 2021 18 Nov'21

  Memento ransomware gang quick to retool for ‘optimum’ outcome

  The operators of a new ransomware called Memento are quick to retool for ‘success’ if they run up against a competent defender, says Sophos

• November 18, 2021 18 Nov'21

  Alert over spate of Iran-linked BitLocker attacks

  A joint advisory from western cyber agencies warns of a campaign of ‘ongoing malicious activity’ by an Iran-linked APT group exploiting BitLocker to extort its targets