News

IT strategy

• April 26, 2023 26 Apr'23

  Researchers deal blow to Gootloader gang that supported REvil

  Thousands of compromised WordPress blogs have been spreading the Gootloader malware for years, but eSentire’s security research team are turning the tables on the gang that played a key role in REvil ransomware attacks

• April 26, 2023 26 Apr'23

  Ransomware gang exploiting unpatched Veeam backup products

  Cyber criminals with links to multiple virulent ransomware strains are exploiting a recently disclosed vulnerability in Veeam’s Backup & Replication product, threat analysts have warned

• April 26, 2023 26 Apr'23

  UK government introduces Digital Markets Bill to Parliament

  The Digital Markets, Competition and Consumers Bill will seek to level the playing field in digital markets by empowering regulators with new tools and powers to directly enforce competition and consumer protection laws

• April 25, 2023 25 Apr'23

  CISOs under-supported, under pressure, Trellix finds

  The vast majority of CISOs say they are finding it difficult to get sign-off on the resources they need to do their job

• April 25, 2023 25 Apr'23

  Lloyds Bank joins industry IT standards group

  UK banking giant Lloyds Banking Group has joined an industry group which promotes global IT standards

• April 25, 2023 25 Apr'23

  Almost three-quarters of cyber attacks involve ransomware

  Data from Sophos’s annual Active Adversary Report reveals that almost three-quarters of the cyber security incidents it responded to in 2022 involved ransomware

• April 25, 2023 25 Apr'23

  UAE improves healthcare through information technology

  Health authorities in the United Arab Emirates are increasing their emphasis on new, smart technologies to modernise healthcare services

• April 25, 2023 25 Apr'23

  How non-fungible tokens can be used to manage health data

  Non-fungible tokens will give patients more ownership and control over their health data and improve its transparency in healthcare research, according to SingHealth clinicians

• April 24, 2023 24 Apr'23

  Most IT staff uncomfortable deploying surveillance tech at work

  The IT teams responsible for deploying and running digital surveillance in workplaces say they are uncomfortable with “extremely common” practice of spying on colleagues, research finds

• April 21, 2023 21 Apr'23

  CyberUK 23: New advice on smart city security issued

  The NCSC and key allies have drawn up new guidance to help communities balance the cyber security risks involved with creating smart cities

• April 21, 2023 21 Apr'23

  Prototype cyber tech has revolutionary potential

  The so-called CHERI protection model developed at the University of Cambridge is showing great promise for future cyber security technologies

• April 20, 2023 20 Apr'23

  Bumblebee malware flies on the wings of Zoom and ChatGPT

  Bumblebee malware, often used as a stepping stone to ransomware, is now spreading via trojanised installers for popular software applications

• April 20, 2023 20 Apr'23

  3CX incident may be world’s first double supply chain attack

  It’s supply chain attacks all the way down as Mandiant publishes information suggesting that the 3CX software supply chain compromise was initiated via a prior software supply chain compromise

• April 20, 2023 20 Apr'23

  Banks don’t want to develop fintech in-house

  Banks are increasingly partnering with fintechs to gain access to their platforms, with few interested in developing such capabilities in-house

• April 20, 2023 20 Apr'23

  Good Friday Agreement key to growth of Northern Ireland cyber hub

  Now 25 years since the historic Good Friday Agreement ended the Troubles, Northern Ireland has become a flourishing centre of cyber security excellence and has ambitions to grow further

• April 20, 2023 20 Apr'23

  New GovAssure cyber regime launches across UK government

  An enhanced cyber security regime is being put in place to better protect UK government IT systems from growing threats

• April 20, 2023 20 Apr'23

  Capita customer data was stolen in March ransomware attack

  Capita says it has uncovered evidence of data exfiltration from a small proportion of its server estate following a cyber attack at the end of March

• April 19, 2023 19 Apr'23

  CyberUK 23: Ukraine offers masterclass in withstanding cyber war

  Russian cyber activity has seen an unprecedented evolution in scale and pace over the past year, but Ukraine’s resilience has enabled it to mount a masterful response, says the NCSC

• April 19, 2023 19 Apr'23

  CyberUK 23: Irresponsible use of commercial hacking tools a rising threat

  Commercial cyber tools and hackers-for-hire pose a growing threat to organisations and individuals worldwide, according to an NCSC report

• April 19, 2023 19 Apr'23

  UK plc sees fewer cyber breaches and attacks, but lacks resilience

  Latest government figures reveal UK businesses and charities reported lower volumes of cyber breaches and attacks over the past 12 months, but the statistics mask widespread underreporting and the true state of cyber readiness and resilience appears...

• April 19, 2023 19 Apr'23

  IT Priorities 2023: Budget optimism among EMEA IT leaders

  IT leaders across the EMEA region are optimistic that their budgets will increase over the coming year

• April 19, 2023 19 Apr'23

  CyberUK 23: NCSC launches Cyber Advisor service for SMEs

  The UK’s NCSC has launched an industry assurance scheme designed to address the needs of SMEs, and is calling for potential advisors to step up and help out

• April 19, 2023 19 Apr'23

  CyberUK 23: NCSC CEO calls for collaboration and warns against complacency

  NCSC boss Lindy Cameron kicked off the annual CyberUK conference in Belfast with a plea for collaboration and a warning against complacency

• April 19, 2023 19 Apr'23

  Cisco urges users to keep its network hardware up-to-date

  In the wake of a campaign of threat activity targeting a six-year-old Cisco router vulnerability, the networking giant has warned users to be on high alert and update their hardware

• April 19, 2023 19 Apr'23

  CyberUK 23: Alert over mercenary Russian threat to CNI

  Russian hacktivists supportive of their government’s war on Ukraine are turning their attention to disruptive or destructive attacks on critical infrastructure in the UK, the NCSC has warned

• April 18, 2023 18 Apr'23

  Enterprise networking sees age of SASE and network as a service

  Report reveals complexity of third workspace has transformed how modern IT organisations view network and security, with 98% of IT executives planning to increase investment in cloud services

• April 18, 2023 18 Apr'23

  Fintechs get more certainty about open banking’s future direction

  Fintechs have welcomed the UK open banking regulators recommendations for the future of the sector

• April 18, 2023 18 Apr'23

  Reduced spending on cloud services weighs European IT services market down

  Reduced spending on cloud services in the EMEA region meant a year-on-year drop in total IT and BPO services spend

• April 18, 2023 18 Apr'23

  CyberUK 23: NCSC conference centres cyber collaboration

  The NCSC’s annual CyberUK conference gets underway in Belfast this week, with collaboration and cooperation high on the agenda

• April 18, 2023 18 Apr'23

  Focus on these three risky behaviours to boost cloud security

  Some 80% of cloud security alerts are triggered by just 5% of security rules. Security teams can substantially improve their resilience by zeroing in on a small set of risky behaviours, according to a report

• April 18, 2023 18 Apr'23

  UK presses on with post-Brexit data protection reform

  The revised version of the Data Protection and Digital Information Bill has had its second reading in Parliament as the government presses on with post-Brexit changes, but critics remain sceptical that the EU will be convinced to maintain the UK's ...

• April 18, 2023 18 Apr'23

  Tech spending in India to grow by 9.6% in 2023

  Digital initiatives in the public sector along with investments in telecoms and other areas are expected to spur technology spending in India this year

• April 17, 2023 17 Apr'23

  Restaurants hit by IT problems after BlackCat attack on supplier NCR

  Ransomware attack on systems of payments giant causing service outages for restaurants around the world

• April 17, 2023 17 Apr'23

  Charity data stolen in ransomware attack on supplier

  A number of charities in Ireland and the UK have had their data compromised following a ransomware attack on an IT supplier

• April 13, 2023 13 Apr'23

  Thousands at risk from critical RCE bug in legacy MS service

  Thousands of organisations worldwide are at risk from three vulnerabilities – one critical – in a legacy Microsoft service that they may not be aware they are running

• April 13, 2023 13 Apr'23

  UK joins key allies to launch secure-by-design guidelines

  The UK has joined international partners in sharing new advice to help technology companies embed security into the product design and development process

• April 13, 2023 13 Apr'23

  Three charged over banking fraud for hire website

  UK authorities have charged three men in connection with the operation of a website that sold social engineering tools to cyber fraudsters

• April 13, 2023 13 Apr'23

  Italy to lift ChatGPT ban subject to new data protection controls

  Italian regulator will lift its ban on OpenAI’s ChatGPT subject to a strict new data protection regime

• April 13, 2023 13 Apr'23

  How Agoda is shaping up to be a technology powerhouse

  Agoda’s CTO Idan Zalzberg explains why the online travel agency with a massive technology footprint prefers to run things in-house and not rely too much on public cloud services

• April 13, 2023 13 Apr'23

  ICO responds to UK government AI regulation plans

  The ICO has officially responded to the government’s plans for regulating artificial intelligence as outlined in its recent whitepaper, but called for clarity on certain aspects before the proposals are taken further

• April 12, 2023 12 Apr'23

  April Patch Tuesday fixes zero-day used to deliver ransomware

  A zero-day in the Microsoft Common Log File System that has been abused by the operator of the Nokoyawa ransomware is among 97 vulnerabilities fixed in April’s Patch Tuesday update

• April 12, 2023 12 Apr'23

  Gartner: Rebalance cyber investment towards human-centric elements

  Security decision-makers need to reprioritise their investment outlooks towards people, rather than technology, according to the latest market forecast from Gartner

• April 11, 2023 11 Apr'23

  Anne Keast-Butler named as new director of GCHQ

  The government has appointed current MI5 deputy director general Anne Keast-Butler to head signals and cyber agency GCHQ

• April 11, 2023 11 Apr'23

  KFC, Pizza Hut data stolen in January ransomware attack

  Yum!, the parent organisation behind KFC and Pizza Hut in the UK, has disclosed that employee data was accessed and exfiltrated in a January 2023 ransomware attack

• April 11, 2023 11 Apr'23

  DWP appoints former Boots IT chief Richard Corbridge as CDIO

  In his new role as the chief digital and information officer for the Department for Work and Pensions, Corbridge will be responsible for a £1.4bn annual budget

• April 10, 2023 10 Apr'23

  How India’s Cropin is tapping the groundswell in agritech

  Cropin, one of the first movers in agriculture technology, has built an industry cloud platform that is now used by the likes of PepsiCo to maximise crop yields

• April 06, 2023 06 Apr'23

  IBM's Nataraj Nagaratnam on the cyber challenges facing cloud services

  Governments are introducing increasingly prescriptive data protection policies, but with organisations becoming ever more reliant on multiple cloud service platforms for essential business needs, how can they ensure they meet regulatory requirements?

• April 06, 2023 06 Apr'23

  Government to pump more than £100m into digital social care

  As part of its Better Care Fund framework, the government has allocated £100m to accelerate digitisation in social care, £50m to improve data, as well as £35m for the creation of an innovation and improvement unit

• April 06, 2023 06 Apr'23

  Prioritise automated hardening over traditional cyber controls, says report

  A report from strategic risk specialist Marsh McLennan advises security buyers to funnel their budgets towards automated cyber security hardening techniques, saying they have a much better chance of reducing risk in a meaningful way

• April 06, 2023 06 Apr'23

  Clop ransomware booms in March as Fortra zero-day pays off for gang

  Backed by the threat actor tracked variously as Gold Tahoe and TA505, the Clop ransomware operation hit new ‘heights’ of activity last month, according to researchers