News

IT security

• November 13, 2024 13 Nov'24

  Ex-boxer fights US government over legality of Sky ECC cryptophone intercepts

  Lawyers for former heavyweight boxer Goran Gogic argue that US prosecutors’ reliance on messages obtained by a European police hacking operation into the SKY ECC encrypted phone network breaches the US constitution

• November 12, 2024 12 Nov'24

  Microsoft fixes 89 CVEs on penultimate Patch Tuesday of 2024

  High-profile vulns in NTLM, Windows Task Scheduler, Active Directory Certificate Services and Microsoft Exchange Server should be prioritised from November’s Patch Tuesday update

• November 12, 2024 12 Nov'24

  Zero-day exploits increasingly sought out by attackers

  Threat actors increasingly favour zero-day exploits to attack their victims before patches become available, according to the NCSC and CISA, which have just published a list of the most widely used vulnerabilities of 2023

• November 12, 2024 12 Nov'24

  More data stolen in 2023 MOVEit attacks comes to light

  Over a year since the infamous MOVEit Transfer cyber attacks affected thousands of organisations, more new victims have come to light after an anonymous threat actor leaked their data on the dark web

• November 12, 2024 12 Nov'24

  Police cloud project raises data protection concerns despite legal reforms

  Ongoing data protection issues with the use of hyperscale public cloud infrastructure by UK police could complicate the ambitions of nine forces to move their common records management system into the cloud

• November 12, 2024 12 Nov'24

  How quantum computing could reshape financial services

  Experts at the Singapore FinTech Festival predict quantum computing will improve risk management, investment strategies and fraud detection in the financial sector, while also posing new challenges for data security

• November 11, 2024 11 Nov'24

  Fresh concerns over NHS England registries procurement

  Clinicians and technologists behind a number of medical devices registries being brought together by NHS England on a new common platform have accused the health service of flouting public sector procurement regulations

• November 08, 2024 08 Nov'24

  ESET shines light on cyber criminal RedLine empire

  ESET publishes fresh data on the inner workings of the RedLine Stealer malware empire, which was taken down at the end of October

• November 07, 2024 07 Nov'24

  Google Cloud MFA enforcement meets with approval

  Latest Google Cloud policy to enforce multifactor authentication across its user base is welcomed by security professionals

• November 07, 2024 07 Nov'24

  AI a force multiplier for the bad guys, say cyber pros

  CIISec’s annual report on the security profession finds evidence of growing concern that artificial intelligence will ultimately prove more useful to threat actors than defenders

• November 07, 2024 07 Nov'24

  Interview: Petra Molnar, author of ‘The walls have eyes’

  Refugee lawyer and author Petra Molnar speaks to Computer Weekly about the extreme violence people on the move face at borders across the world, and how increasingly hostile anti-immigrant politics is being enabled and reinforced by a ‘lucrative ...

• November 06, 2024 06 Nov'24

  UK government launches AI assurance platform for enterprises

  The platform is designed to drive demand for the UK’s artificial intelligence assurance sector and help build greater trust in the technology by helping businesses identify and mitigate a range of AI-related risks

• November 06, 2024 06 Nov'24

  Lords shoplifting inquiry calls for facial recognition laws

  A Lords committee has expressed concern about the use of facial recognition technology by retailers to combat shoplifting, and is calling on the government to introduce new laws to ensure there are minimum standards for their deployments

• November 06, 2024 06 Nov'24

  Starmer announces tech-enabled crackdown on people smuggling

  The UK government has announced a further £75m of funding for its Border Security Command, meaning it will now have £150m over two years to spend on new technologies and staff

• November 05, 2024 05 Nov'24

  Post Office data breach caused by botched website upgrade

  Data breach exposed personal details of the hundreds of former subpostmasters who had defeated the Post Office in the High Court

• November 01, 2024 01 Nov'24

  CISA looks to global collaboration as fraught US election begins

  The US' CISA cyber agency has unveiled a two-year International Strategic Plan to advance collaboration and improve resilience against shared risks and threats

• November 01, 2024 01 Nov'24

  Bank of England warns against AI ‘complacency’

  UK financial services regulator wants to increase understanding of AI’s benefits and how firms are managing the risks it poses, as take-up grows and use cases increase

• October 30, 2024 30 Oct'24

  RedLine, Meta malwares meet their demise at hands of Dutch cops

  A multinational action led by authorities in the Netherlands has resulted in the takedown of the notorious RedLine and Meta infostealer malwares

• October 30, 2024 30 Oct'24

  Why geopolitics risks global open source collaborations

  Linux Foundation’s decision to ban Russian maintainers has the potential to destroy open source’s global collaboration model

• October 29, 2024 29 Oct'24

  EMEA businesses siphoning budgets to hit NIS2 goals

  With NIS2 now in effect, European business leaders are having to divert budget from elsewhere to achieve compliance

• October 28, 2024 28 Oct'24

  Russian Linux kernel maintainers blocked

  To ensure compliance, the Linux kernel will no longer allow Russian software developers to work on maintaining the codebase

• October 28, 2024 28 Oct'24

  UK launches cyber guidance package for tech startups

  The NCSC and NPSA, alongside agencies from the Five Eyes alliance, have issued guidance for startups on how to secure themselves against common cyber threats and targeted industrial espionage

• October 28, 2024 28 Oct'24

  Inside Google Cloud’s secure AI framework

  Google Cloud’s secure AI framework that’s integrated into its Vertex AI platform offers practical tools and guidance to manage the lifecycle, data governance and operational risks of AI

• October 28, 2024 28 Oct'24

  How Manulife is empowering sales and call centre agents with AI

  Canadian insurance giant is leveraging generative AI to personalise customer experiences, transform contact centre workflows and automate underwriting processes

• October 25, 2024 25 Oct'24

  Dutch critical infrastructure at risk despite high leadership confidence

  Stark paradox in Dutch cyber security landscape has business leaders expressing high confidence in their IT infrastructure as cyber attacks rise

• October 25, 2024 25 Oct'24

  How Infoblox is tackling multicloud complexity and boosting security

  Infoblox CEO Scott Harrell discusses the company’s new Universal DDI service designed to address the growing challenges of managing network security in hybrid IT environments

• October 24, 2024 24 Oct'24

  Data bill will boost NHS and police access to data, says government

  The Data Use and Access Bill will pave the way for sharing medical records across the NHS and give police the ability to access databases without having to manually log the reasons for their use

• October 24, 2024 24 Oct'24

  Prudential taps AI to improve health insurance experience

  Insurance giant Prudential teams up with Google Cloud to streamline claims processing, personalise healthcare journeys and improve health outcomes

• October 23, 2024 23 Oct'24

  Government hails Cyber Essentials success

  Scheme to help keep organisations’ IT safe and secure has given businesses more confidence they won’t fall victim to a cyber attack

• October 23, 2024 23 Oct'24

  ServiceNow touts Now platform as AI engine for transformation

  At the ServiceNow World Forum in Melbourne, company executives touted the transformative power of AI in streamlining workflows, improving user experiences and driving business value

• October 23, 2024 23 Oct'24

  Democracy campaigner to sue Saudi Arabia over Pegasus and QuaDream spyware in UK court

  Pro-democracy campaigner Yahya Assiri given permission to file legal action in London court against Saudi Arabia over its use of Israeli spyware

• October 22, 2024 22 Oct'24

  Danish government reboots cyber security council amid AI expansion

  Denmark’s government relaunches digital security initiative to protect business sectors and society at large

• October 22, 2024 22 Oct'24

  Labour’s 10-year health service plan will open up data sharing

  To save the health service, Labour is focusing on bolstering the NHS app and enabling greater sharing of patient records in England

• October 21, 2024 21 Oct'24

  Can AI be secure? Experts discuss emerging threats and AI safety

  International cyber security experts call for global cooperation and proactive strategies to address the security challenges posed by artificial intelligence

• October 17, 2024 17 Oct'24

  NCSC chief warns of gap in cyber threats and defence capabilities

  The UK and its allies must take collective action to improve their cyber resilience and repel the increasing volume of severe cyber attacks, says NCSC chief

• October 17, 2024 17 Oct'24

  EU cyber security bill NIS2 hits compliance deadline

  The EU’s NIS2 bill will harmonise how companies and member states approach cyber security, but its success will depend on how well it is implemented and enforced

• October 16, 2024 16 Oct'24

  Cato further expands SASE platform for ‘complete’ UK delivery

  Secure access service edge platform gains digital experience monitoring capability so enterprises can monitor user experiences and fix them online or in private datacentres

• October 15, 2024 15 Oct'24

  NCSC expands school cyber service to academies and private schools

  The National Cyber Security Centre is expanding its PDNS for Schools service to encompass a wider variety of institutions up and down the UK

• October 15, 2024 15 Oct'24

  Telefónica and Halotech integrate post-quantum encryption into IoT devices

  Leading global telco implements state-of-the-art cyber security through internet of things managed connectivity platform allowing devices to be controlled and monitored in real time and remotely

• October 14, 2024 14 Oct'24

  How Zoom is charting its course towards an AI-first platform

  Zoom CEO Eric Yuan talks up his vision for the future of work, the company's transition to an AI-powered platform and what it is doing to stay ahead of rivals

• October 11, 2024 11 Oct'24

  NFL and Cisco gain yardage with network and security partnership

  Cisco scores contract extension with US sports body NFL to connect and protect 2024 roster of International Games in the UK, Germany, Brazil and Spain in 2025

• October 10, 2024 10 Oct'24

  NCSC issues fresh alert over wave of Cozy Bear activity

  The NCSC, FBI and NSA publish updated warning about Cozy Bear’s activities, highlighting a range of vulnerabilities the threat actor is using to set up its cyber attacks

• October 10, 2024 10 Oct'24

  Government launches cyber standard for local authorities

  Local government bodies are being invited to take advantage of a new NCSC-derived Cyber Assessment Framework to help enhance their resilience and ward off cyber attacks

• October 10, 2024 10 Oct'24

  Internet Archive web historians target of hacktivist cyber attack

  The Internet Archive nonprofit digital library and Wayback Machine operator has been attacked by pro-Palestinian hacktivists

• October 10, 2024 10 Oct'24

  How Recorded Future finds ransomware victims before they get hit

  Threat intel specialists at Recorded Future have shared details of newly developed techniques they are using to disrupt Rhysida ransomware attacks before the gang even has a chance to execute them

• October 10, 2024 10 Oct'24

  UK and US pledge closer working on children’s online safety

  In their first agreement on the subject of children’s online safety, the UK and US governments have said they will create a new working group to boost cooperation

• October 10, 2024 10 Oct'24

  Australia bolsters cyber defences with security bill

  Legislation tackles IoT security and establishes a Cyber Incident Review Board to bolster Australia’s cyber resilience

• October 09, 2024 09 Oct'24

  MoneyGram customer data breached in attack

  MoneyGram confirms that customer data has been stolen in an incident that appears to have started with a social engineering attack on its IT helpdesk staff

• October 09, 2024 09 Oct'24

  Five zero-days to be fixed on October Patch Tuesday

  Stand-out vulnerabilities in Microsoft’s latest Patch Tuesday drop include problems in Microsoft Management Console and the Windows MSHTML Platform

• October 09, 2024 09 Oct'24

  UK Cyber Team seeks future security professionals

  Young people from across the UK have a chance to represent the country in international competitions and advance their future careers in cyber security