News

IT security

May 25, 2018 25 May'18
GDPR puts people first, says ICO

The day of 25 May 2018 marks the biggest change to UK data protection law in a generation, with benefits for businesses and consumers, according to the UK privacy watchdog
May 25, 2018 25 May'18
Commitment is the watchword on GDPR D-Day

New rules for protecting European citizens’ personal data are now enforceable by law, and organisations are being advised to focus broadly on commitment rather than narrowly on compliance
May 24, 2018 24 May'18
Grab outlines its approach to cyber security

Singapore-based ride-hailing company prefers detective controls rather than preventive ones to deter cyber threats – an approach it claims is less intrusive and costly to implement
May 24, 2018 24 May'18
Stronger rules on data protection by EU institutions agreed

On the eve of the GDPR compliance deadline, European politicians agree new rules to strengthen data protection in EU organisations

May 24, 2018 24 May'18
Security experts weigh in on GDPR checklists

Security experts give their views on what final checks businesses should be doing on the eve of the General Data Protection Regulation compliance deadline, while a survey reveals almost half of Brits have not heard of it
May 24, 2018 24 May'18
NHS to launch national data opt-out tool

Patients will be able to opt out of having their health and care data shared by using an online tool developed by NHS Digital
May 24, 2018 24 May'18
EU cyber security agencies pledge to up cooperation

Four European cyber security agencies have agreed to increase collaboration in five key areas
May 24, 2018 24 May'18
England and Wales Cricket Board to improve players’ medical data

Cricketers’ medical images will be stored securely in an independent clinical archive, enabling clinicians to access medical data and make treatment decisions more quickly
May 24, 2018 24 May'18
New UK Data Protection Act not welcomed by all

Legislation makes the UK one of the first countries to implement the GDPR in local law, but some have criticised it as a “lost opportunity”
May 23, 2018 23 May'18
UK calls for new data-sharing model with EU

The UK has proposed a new data-sharing model to ensure ongoing data protection collaboration and free flow of data between the EU and the UK post-Brexit

May 23, 2018 23 May'18
Compliance in the cloud: Avoiding the cloud compliance trap

When you hand over data to a cloud provider, you don’t hand over responsibility for legal and regulatory compliance. Beware of falling into a cloud compliance trap
May 23, 2018 23 May'18
Mobile fraud up 680% since 2015, RSA reports

Fake profiles and throw-away devices are transforming social media into a cyber criminal marketplace, a fraud report reveals
May 23, 2018 23 May'18
Skills shortage a major cyber security risk

Skill shortages remain a major risk to long-term information security capability and business is still struggling to defend against cyber breaches – but it is getting better at dealing with them, an IISP survey shows
May 23, 2018 23 May'18
Facebook is ready for GDPR, says Zuckerberg

Facebook chief Mark Zuckerberg has claimed the social network is ready for GDPR, but failed to give any answers to the most probing questions posed by European MEPs
May 22, 2018 22 May'18
Legit tools exploited in bank heists

Cyber criminals attacking the finance and other industry sector are continuing to exploit legitimate administration tools to hide their activities, highlighting the need for threat hunting, a report reveals
May 22, 2018 22 May'18
Security researchers find fourth CPU flaw

Security researchers have reported another flaw in common microprocessor chips related to the Meltdown and Spectre vulnerabilities
May 22, 2018 22 May'18
Sweden’s Telenor makes GDPR consent personal

Telenor Sweden says it has seen market-leading results for General Data Protection Regulation consent after enlisting a customer experience firm to manage the process
May 22, 2018 22 May'18
Finland government examines centralised cyber defence

The Finnish government is attempting to centralise its fight against increasing cyber threats to its infrastructure
May 22, 2018 22 May'18
Google sued for £3.2bn for tracking UK iPhone browsing

A lawsuit by a group called Google You Owe Us is seeking compensation from Google for tracking millions of UK iPhone users’ browsing data
May 21, 2018 21 May'18
Pen testers find weaknesses in banks’ cyber security

Humans are the biggest weakness in banks’ cyber defences, but there are several others that also need attention, penetration testers have revealed
May 21, 2018 21 May'18
ICO fines University of Greenwich £120,000

The UK privacy watchdog has issued a monetary penalty against the University of Greenwich for a "serious" security breach
May 21, 2018 21 May'18
UK government promises laws to police 'Wild West Internet'

UK government plans laws to make online activity safer after green paper reveals more needs to be done to protect citizens
May 21, 2018 21 May'18
ICO could use new GDPR powers in Facebook probe

UK privacy watchdog is considering using new powers in its investigation of Facebook, while the government is considering new laws to police social media firms
May 21, 2018 21 May'18
APAC organisations could lose $1.75tn from cyber attacks

A study by Frost and Sullivan has found that losses from cyber security incidents could account for 7% of the region’s GDP in 2017
May 18, 2018 18 May'18
NCSC calls for greater interaction with UK business

The UK’s cyber security agency has called for greater interaction with business, particularly when it comes to cyber security incidents
May 18, 2018 18 May'18
Most UK marketers GDPR ready, but not all firms have a plan

Most UK marketers believe they are ready for GDPR, but a worrying number believe their employers may not be, as businesses are urged to embrace the positives a week before the compliance deadline
May 18, 2018 18 May'18
BYOD in UK SMEs linked to security incidents

Bring your own device practices have been identified as a cyber security risk for six in 10 SMEs in research published a week ahead of the GDPR compliance deadline
May 18, 2018 18 May'18
GDS seeks advice on migration from Public Services Network

The Government Digital Service has started the process of moving public sector organisations away from the Public Services Network
May 18, 2018 18 May'18
Use GDPR to propel business forward, says ICO

GDPR is about a new way of doing things that businesses can use to their advantage, and cyber security is a key element, according to the Information Commissioner’s Office
May 18, 2018 18 May'18
Government to get new digital visa service

The Home Office has signed up to a deal with Sopra Steria for a visa service allowing people to use biometrics and digital files as part of their application
May 17, 2018 17 May'18
Report highlights security risk of open source code to business

Increased adoption of open source code is introducing vulnerabilities into commercial software, with many audited codebases containing the Apache Struts flaw that enabled the Equifax breach, a report shows
May 17, 2018 17 May'18
GDPR impact on Whois data raising concern

The negative impact of the GDPR on internet domain registration information is raising concern in cyber security circles because the data is key to cyber crime fighting operations
May 17, 2018 17 May'18
European cyber attacks up nearly a third in first quarter 2018

The volume of cyber attacks hitting digital transactions in Europe was up by almost a third in the first quarter of 2018 compared with same period a year ago, a report reveals
May 16, 2018 16 May'18
Most firms see GDPR as an opportunity

A growing number of organisations consider the GDPR to be an opportunity to improve the way they handle data privacy and security, while leaders are using it as an opportunity for full business transformation, a study shows
May 16, 2018 16 May'18
NHS England on the cusp of launching first citizen identity pilot

The NHS will begin trialling its identity verification system with a non-clinical service shortly, with 20 other services in the pipeline, according to NHS England chief digital officer Juliet Bauer
May 16, 2018 16 May'18
US considers UK-style cyber defence model

The US is considering adopting a similar cyber defence model to the UK’s in recognition of the growing threat to all levels of society
May 16, 2018 16 May'18
Google opens third availability zone in Singapore

The latest Google Cloud Platform availability zone in Singapore follows recent efforts by rivals to extend their lead in the region
May 15, 2018 15 May'18
SMEs more worried about GDPR’s threat to reputation than fines

SMEs are more worried about the damage GDPR non compliance will do to their reputations than their wallets
May 15, 2018 15 May'18
Credential theft a top priority, Rapid 7 report shows

Credential theft is still a top priority for organisations to address in terms of making it more difficult for cyber attackers to gain unauthorised access to their networks, report reveals
May 15, 2018 15 May'18
Cross-site scripting a top vulnerability, hackers find

Despite the much-publicised advances in cyber attack techniques, a well-known, well-documented and avoidable vulnerability is still the most popular for attackers to exploit – along with others like it that are often overlooked, white hat hackers ...
May 15, 2018 15 May'18
Cage director Rabbani heads for Supreme Court after appeals court rules password demands lawful

Muhammad Rabbani, director of campaigning group Cage, will appeal to the Supreme Court after Court of Appeal rules that police did not act unlawfully by demanding his computer and mobile phone passwords under Section 7 of the Terrorism Act
May 15, 2018 15 May'18
Enterprise cyber threat remediation ineffective, study shows

Enterprise cyber threat remediation needs to improve in several key areas, according to an analysis of common remediation strategies
May 15, 2018 15 May'18
BSI launches kitemark for internet of things devices

The British Standards Institution has launched a new kitemark for IoT devices, designed to improve consumer trust in the technology
May 15, 2018 15 May'18
No need to panic about Efail attacks

Initial reports about vulnerabilities in email encryption technologies have urged organisations to disable encryption tools, but some security experts are taking a more balanced approach
May 14, 2018 14 May'18
Technology continues to transform crime, warns NCA

The UK’s National Crime Agency warns that developments in technology will continue to transform the future crime landscape, in its latest report on serious and organised crime
May 14, 2018 14 May'18
IoT and personal devices pose huge security risk to enterprises

After years of speculation about the risk IoT and personal devices pose to enterprise security, research has revealed the threat is “immense” and probably greater than most firms realise
May 11, 2018 11 May'18
Police Scotland did not inform public of mobile phone searches

Members of the Scottish Parliament heard that Police Scotland did not conduct impact assessments or give explanations to the public when they were accessing private data on their mobile phones
May 11, 2018 11 May'18
WannaCry’s EternalBlue exploit still a threat

A year after the global WannaCry attacks, the EternalBlue exploit that was a key enabler for the malware is still a threat to many organisations, and many UK firms have not taken action, security researchers warn
May 11, 2018 11 May'18
EFF welcomes backdoor-blocking US bill

International digital rights organisation welcomes proposed US legislation that will prevent the government from forcing a company to build backdoors into encrypted products and services
May 10, 2018 10 May'18
Citrix touts digital workspace app in services play

Software supplier Citrix’s cloud-based workspace app is part of its efforts to deliver integrated services that support the modern workplace