News

IT security

• December 10, 2018 10 Dec'18

  O2 expected to pursue Ericsson for compensation over 24-hour stoppage

  Mobile network operator could seek up to £100m in damages from its supplier, which failed to update expired software certificates, causing a day-long outage

• December 10, 2018 10 Dec'18

  UK businesses feel let down by government on cyber security

  Government needs to provide more support around cyber security issues in 2019, according to the majority of UK IT leaders polled

• December 07, 2018 07 Dec'18

  O2 outage highlights importance of software certificate audits

  A major outage on the O2 4G mobile network was caused by an expired certificate and could easily have been avoided, it has emerged

• December 07, 2018 07 Dec'18

  Half of business leaders unaware of BPC cyber attacks

  Half of management teams polled in 12 countries, including the UK, are unaware of business process compromise (BPC) attacks

• December 07, 2018 07 Dec'18

  Court orders Post Office to explain inability to access encrypted file

  Post Office unable to open encrypted recording of an interview that forms part of its evidence in High Court case

• December 06, 2018 06 Dec'18

  Fileless malware surge, warns Malwarebytes report 

  Data from millions of consumers reveals an uptick in fileless malware and other new-generation malware that calls for a new cyber security approach, report reveals

• December 06, 2018 06 Dec'18

  China demands release of arrested Huawei CFO

  The Chinese government has called for the release of Huawei chief financial officer Meng Wanzhou, who was detained in Canada at the weekend

• December 06, 2018 06 Dec'18

  Software failure paralyses O2’s 4G network

  O2 is racing to fix a major outage on its 4G network that has left millions of mobile subscribers without access to data services

• December 06, 2018 06 Dec'18

  Adobe releases Flash patch for zero-day exploit

  Emergency security update released for zero-day vulnerability that is being exploited in the wild via a Microsoft Office document, according to researchers

• December 05, 2018 05 Dec'18

  BT moves to strip Huawei kit from EE’s network

  Telco will remove Huawei’s networking equipment from the core of EE’s 4G mobile network

• December 05, 2018 05 Dec'18

  Symantec unveils AI-based protection for critical infrastructure

  Cyber security firm has unveiled what it claims to be the industry’s first neural network to protect critical infrastructure from USB-borne malware attacks

• December 05, 2018 05 Dec'18

  Nominet brings security expertise and tech to market

  The .uk domain registry is to bring its DNS expertise and technology developed for the NCSC to market to address cyber security ‘blindspot’

• December 05, 2018 05 Dec'18

  Phishing at centre of cyber attack on Ukraine infrastructure

  Phishing is one of the key tools used by cyber attackers against critical national infrastructure (CNI), as highlighted by attacks on telecommunications in Ukraine

• December 05, 2018 05 Dec'18

  UK consumers threaten data breach backlash

  Most UK and global consumers are willing to walk away from businesses that fail to look after personal data, with retailers most at risk, research shows

• December 04, 2018 04 Dec'18

  ‘Open-minded’ DVSA cuts cost of MOT testing

  Government agency harnesses customised open source platform to ensure data security while cutting costs and plans to extend its MOT testing capability to do the same for drivers’ theory tests

• December 04, 2018 04 Dec'18

  Financial institutions’ data at risk despite security spending

  Despite increased spending on cyber security, digital transformation and advanced attacks mean financial institutions’ data is still at risk, a report reveals

• December 04, 2018 04 Dec'18

  100 million Quora.com user details exposed

  Question-and-answer site is the latest organisation to admit a breach of users’ personal data, with industry commentators calling out credential theft as a top cause of such breaches

• December 03, 2018 03 Dec'18

  Liberty heads for judicial review over Investigatory Powers Act

  The UK's powers to conduct supsicionless bulk surveillance on individuals and organisations face a legal challenge in the high court next year

• December 03, 2018 03 Dec'18

  Digital identity market welcomes plan to hand Gov.uk Verify to private sector

  Players in the UK digital identity community welcome the clarity over the future of Verify, but question marks remain over prospects for government ID system

• December 03, 2018 03 Dec'18

  BT announces new head of security business

  BT has appointed a former law enforcement officer and BT investigator as the new head of its security business

• December 03, 2018 03 Dec'18

  UK government commits to opening up data in bid to push adoption of AI

  Opening up data is vital to government plans to push adoption of artificial intelligence across all sectors of the UK economy

• December 03, 2018 03 Dec'18

  Police investigations into cyber crime up 14% in a year

  Officers forced to follow up over 2,500 complaints of Instagram, Facebook, email and website hacking, and Bitcoin ransom, despite a rise in violent crime, report reveals

• November 30, 2018 30 Nov'18

  Cyber crime most significant harm in UK, says top cyber cop

  Cyber crime is the most significant harm in the UK, according to the cyber lead at the City of London Police, which is the national lead for online crime

• November 30, 2018 30 Nov'18

  Marriott data breach highlights basic failings

  A breach of a guest reservation database of the Starwood division of the Marriott International hotel group highlights basic personal data protection failures

• November 30, 2018 30 Nov'18

  WannaCry borderline national cyber emergency

  The May 2017 WannaCry attack, which disrupted services at one-third of NHS trusts and more than 600 primary care organisations is the closest the UK has come to a national cyber emergency, says the NCSC

• November 30, 2018 30 Nov'18

  E-commerce sites warned of heightened DDoS threat

  E-commerce sites are being urged to ensure that they have adequate DDoS protection ahead of the vital holiday trading season after attacks ramped up on Black Friday and Cyber Monday

• November 29, 2018 29 Nov'18

  UK cyber security strategy making ‘good progress’

  The National Cyber Security Strategy is making good progress, but there is much left to be done, according to a Cabinet Office official

• November 29, 2018 29 Nov'18

  120,000 police officers to receive cyber security training

  Cisco is partnering with UK police forces to offer cyber security training through the Cisco Networking Academy

• November 28, 2018 28 Nov'18

  Cyber resilience lacking due to apathy of UK leaders

  An unwillingness to accept that cyber is a real threat to critical national infrastructure by UK political and business leaders has resulted in a lack of resilience, says security industry veteran

• November 28, 2018 28 Nov'18

  CIO interview: Stephen Docherty on NHS data sharing

  The Cambridge Analytica scandal raised awareness about privacy. Stephen Docherty, CIO of South London and Maudsley NHS Trust, explains why

• November 28, 2018 28 Nov'18

  FCA deeply concerned as no end in sight for IT failures in banking

  The FCA has reported a massive increase in the number of banking IT failures in the UK and admitted there is no end in sight

• November 27, 2018 27 Nov'18

  Businesses failing to win consumer trust

  Businesses are still largely failing to win the trust of consumers to keep their personal data safe as data breaches continue to make headlines

• November 27, 2018 27 Nov'18

  York teen crowned 2018 UK cyber security champion

  Teenager beat off competition from 41 other cyber security enthusiasts from across the UK, and six from Singapore, in the UK Cyber Security Challenge final

• November 27, 2018 27 Nov'18

  ICO fines Uber £385,000 for data protection failings

  Like Facebook, Uber has escaped a potentially much higher fine for data protection failings because the 2016 breach that affected millions of UK customers is not covered by the GDPR

• November 27, 2018 27 Nov'18

  GDPR is encouraging UK IT directors to pay cyber ransoms

  As predicted ahead of the General Data Protection Regulation enforcement deadline, research shows that fear of fines under the new laws is making some firms more likely to pay cyber ransoms

• November 26, 2018 26 Nov'18

  Unprecedented actions by Commons committee augur badly for Facebook

  House of Commons’ serjeant-at-arms effectively arrested the CEO of a US software company and frogmarched him to Parliament, where he was told he would be imprisoned if he failed to hand over papers on Facebook

• November 23, 2018 23 Nov'18

  Interview: Roger Taylor, chair, Centre for Data Ethics and Innovation

  Chair of the new Centre for Data Ethics and Innovation says collaboration is vital for developing effective frameworks to manage the proliferation of AI and data-driven technologies

• November 22, 2018 22 Nov'18

  ICO finds Metropolitan Police's Gangs Matrix seriously breaches data protection laws

  A year-long ICO investigation has highlighted major problems with how the Metropolitan Police handles and shares the personal data of individuals on its Gangs Matrix

• November 21, 2018 21 Nov'18

  How voice biometrics catches fraudsters

  Telephone banking is often seen as the forgotten channel in multi-channel banking, something that fraudsters are now exploiting

• November 20, 2018 20 Nov'18

  Dutch audit finds Microsoft Office leaks confidential data

  The diagnostics Microsoft Office collects from users should be a source of concern for any government CISO, according to a DPIA audit

• November 20, 2018 20 Nov'18

  Police challenged over refusal to disclose files on WikiLeaks staff

  Lawyers will challenge the Metropolitan Police Service today to confirm or deny whether it holds correspondence with US law enforcement about three WikiLeaks staff – including two UK citizens – in a freedom of information tribunal

• November 19, 2018 19 Nov'18

  Government lacks cyber resilience leadership, according to MPs

  The government lacks political leadership and urgency in dealing with cyber threats, according to Joint Committee on National Security Strategy, calling for a minister in charge of delivering cyber resilience

• November 17, 2018 17 Nov'18

  Credit card fraud in ANZ showing no signs of abating

  The value of fraudulent transactions more than doubled that of legitimate purchases during the third quarter this year

• November 16, 2018 16 Nov'18

  Three factors marginalising the CISO role

  Chief information security officers are typically marginalised due to three factors, and de-coupling the technical and managerial aspects of the job will enable empowerment, says consultant

• November 16, 2018 16 Nov'18

  UK firms in the dark around the impact of cyber attacks

  UK firms have a long way to go in building the business resilience required to withstand cyber threats and other major disruptions, a study shows

• November 16, 2018 16 Nov'18

  Many firms still stuck in GDPR prep phase six months after its initiation

  Six months after the GDPR compliance deadline, many companies are struggling to make data protection principles part of everyday business, says PwC’s GDPR and data protection lead

• November 16, 2018 16 Nov'18

  Why is hiring a government chief security officer such a tricky business?

  Security bosses and CIOs weigh in on why they think the government is struggling to recruit a chief security officer

• November 15, 2018 15 Nov'18

  Keep people at the centre of risk management, says consultant

  In assessing the cyber risks to a business, security professionals should start with the people in an organisation and keep them at the centre in identifying and mitigating risk, says consultant

• November 15, 2018 15 Nov'18

  Enterprises lack capability against persistent cyber attacks

  A report urges organisations to strengthen their cyber defence capabilities to pre-empt, detect and respond to post-breach attacks

• November 15, 2018 15 Nov'18

  DeepMind won’t share patient data with Google ‘at this stage’, says company’s health boss

  Amid concerns and questions around Google’s takeover of the DeepMind’s Streams app, Dominic King, the company’s health lead, promises that ‘at this stage’, nothing will change, and it won’t share any patient data with the internet giant