News

IT suppliers

• December 09, 2022 09 Dec'22

  Iranian APT seen exploiting GitHub repository as C2 mechanism

  A subgroup of the Iran-linked Cobalt Mirage APT group has been caught taking advantage of the GitHub open source project as a means to operate its latest custom malware

• December 08, 2022 08 Dec'22

  Apple to tap third party for physical security keys

  Apple is launching a number of new security protections, including the addition of third-party-provided hardware security keys

• December 07, 2022 07 Dec'22

  Survey: Most want green IT but many won’t get it soon

  IT – and storage in particular – consume huge amounts of energy but sustainability targets are proving to be elusive, according to a survey commissioned by Pure Storage

• December 07, 2022 07 Dec'22

  Google, MS, Oracle vulnerabilities make November ’22 a big month for patching

  Vulnerabilities affecting the likes of Google, Microsoft and Oracle proved particularly troublesome in November

• December 07, 2022 07 Dec'22

  Post Office scandal – “cock-up or cook-up”?

  The second phase of the Post Office Horizon IT scandal raised more questions over who did what, when and where, with shocking revelations at every turn

• December 06, 2022 06 Dec'22

  EU fails to protect human rights in surveillance tech transfers

  Transfers of surveillance technology from the European Union to African governments are carried out without due regard for the human rights impacts, the European Ombudsman has found after a year-long investigation into the European Commission’s ...

• December 06, 2022 06 Dec'22

  Don’t become an unwitting tool in Russia’s cyber war

  Researchers have turned up evidence that enterprise networks are being co-opted by Russian threat actors to launch attacks against targets in Ukraine. How can you avoid becoming an unwitting tool in a state-backed attack?

• December 05, 2022 05 Dec'22

  Cohesity doubles down on cyber-defence failings via backup

  Datahawk service and Data Security Alliance bring clean data restores, ransomware artefact detection, data vaulting and data audit for a clearer understanding of attack impact

• December 01, 2022 01 Dec'22

  LastPass probes new cyber incident related to August attack

  The August 2022 cyber attack on LastPass seems to have begat another incident, according to company CEO Karim Toubba

• November 30, 2022 30 Nov'22

  Microsoft 365 banned in German schools over privacy concerns

  German schools cannot legally use Microsoft Office 365 over lack of clarity about how data is collected, shared and used, as well as the potential for unlawful transfer of European citizens’ personal data to the US

• November 30, 2022 30 Nov'22

  Subpostmaster federation deliberately kept public in dark over computer problems

  The federation representing subpostmasters deliberately suppressed information about computer errors that could have saved its members from devastating life-changing events

• November 30, 2022 30 Nov'22

  Latest LockBit ransomware versions have wormable capabilities

  Sophos researchers have reverse-engineered the Lockbit 3.0 ransomware, shedding new light on its evolving capabilities and firming up links with BlackMatter

• November 30, 2022 30 Nov'22

  NIS regulations to be extended to cover MSPs

  The UK government is moving ahead with plans to update the Network and Information Systems regulations to bring outsourcers and MSPs into scope

• November 30, 2022 30 Nov'22

  Parity AI talks about auditing recruitment algorithms for bias

  Algorithmic auditing firm Parity speaks to Computer Weekly about the process of auditing artificial intelligence for bias, following its partnership with AI-powered recruitment platform Beamery

• November 29, 2022 29 Nov'22

  ‘Legal but harmful’ clause dropped from Online Safety Bill

  Online Safety Bill’s ‘legal but harmful’ provision will be dropped by the UK government in favour of public risk assessments, tools to help users control the content they consume, and new criminal offences around self-harm

• November 27, 2022 27 Nov'22

  Plexal inducts six into cyber leadership scheme

  Tech innovation hub Plexal is expanding its Cyber Runway programme with a new Ignite strand dedicated to supporting high-potential security leaders

• November 25, 2022 25 Nov'22

  Data management, backup becoming the CISO's responsibility

  More and more CISOs are taking on responsibility for wider data management strategies, and this trend looks set to grow next year

• November 25, 2022 25 Nov'22

  Wales launches beta version of its own NHS app

  NHS Wales has begun trialling the beta version of its patient-facing app ahead of plans for a full launch next year

• November 25, 2022 25 Nov'22

  Fujitsu put pressure on UK government to sign off troubled Horizon project, public inquiry hears

  Telegram from British Embassy in Tokyo to UK government reveals pressure on ministers to sign off controversial contract

• November 23, 2022 23 Nov'22

  UK tech sector given four-point plan to cut carbon emissions by more than 80 million tonnes

  According to a report by Tech Nation, leasing renewably powered office space, switching to plant-based food when catering events and curbing business travel would significantly bring down the UK tech sector’s carbon emissions

• November 23, 2022 23 Nov'22

  AI accountability held back by ‘audit-washing’ practices

  Algorithmic auditing will be useless in holding artificial intelligence accountable until there are common standards, approaches and goals that scrutinise systems at each stage of development and deployment, says think-tank

• November 23, 2022 23 Nov'22

  South Korea data adequacy pact brings £15m Brexit bonus

  UK government finalises a data adequacy agreement with South Korea, saying it will unlock a post-Brexit business bonus of just under £15m

• November 22, 2022 22 Nov'22

  Ducktail spins new tales to hijack Facebook Business accounts

  The increasingly active Ducktail cyber crime operation is refining its operations, seeking new methods to compromise its victims’ Facebook Business accounts

• November 22, 2022 22 Nov'22

  IT services sector hiring slows to pre-pandemic levels

  IT services firms have slowed their recruitment after a major acceleration in hiring during the Covid-19 pandemic

• November 22, 2022 22 Nov'22

  C-suite mystified by cyber security jargon

  Malware, supply chain attack, zero-day, IoC, TTP and Mitre ATT&CK are just some of the everyday terms that security pros use that risk making the world of cyber incomprehensible to outsiders

• November 21, 2022 21 Nov'22

  Genome lab puts Vast Data’s rapid I/O to work on patient data

  French government-backed SeqOIA ditched its Lustre-based storage after it reached performance limits and files got corrupted. That got fixed by a Vast Data QLC flash-based array

• November 21, 2022 21 Nov'22

  AI adopted without due consideration for workers, MPs told

  MPs have been warned that the rapid roll-out of artificial intelligence in workplaces has changed UK enterprises’ management practices so much that current employment law is no longer fit for purpose

• November 18, 2022 18 Nov'22

  Is Elon Musk’s Twitter safe, and should you stop using it?

  With a litany of security and compliance issues exposed and in many cases caused by Elon Musk’s takeover of social media platform Twitter, some may be asking if it’s still safe or appropriate to use

• November 18, 2022 18 Nov'22

  Post Office scandal inquiry’s expert IT witness ‘troubled’ by his findings

  Controversial Post Office Horizon system lacked the integrity required to trust accounting data and contained ‘joke’ coding akin to an ‘overly engineered mousetrap’, inquiry told

• November 17, 2022 17 Nov'22

  Scality Ring 9 brings Storage Accelerator enhanced flash tiers

  Scality upgrade to Ring 9 of its object (and file) storage software sees enhancements to tiering, the introduction of Prometheus-based monitoring and hooks into VMware vCloud Director

• November 17, 2022 17 Nov'22

  Brexit deregulation will make UK next Silicon Valley, vows Hunt

  Chancellor vows to revolutionise how the IT industry is regulated to spur competition, investment and innovation in a technological ‘Big Bang’

• November 17, 2022 17 Nov'22

  Another Log4Shell warning after Iranian attack on US government

  The breach of a US federal body by an Iranian threat actor exploiting the Adobe Log4j Log4Shell vulnerability has prompted a fresh flurry of patching

• November 16, 2022 16 Nov'22

  Team working on controversial Post Office Horizon EPOSS software was the ‘joke of the building’

  Former members of the ICL team developing software for the Post Office Horizon EPOSS system were unqualified and engaged in poor software development practices, public inquiry told

• November 16, 2022 16 Nov'22

  Global network fragmentation a source of increasing risk

  Risk consultancy’s report says the weaponisation of cyber space and geopolitical clashes herald a breakdown of global networks into distinct regional or national architectures

• November 15, 2022 15 Nov'22

  Post Office changed view of Horizon problems before roll-out, because of a ‘sunk cost fallacy’

  Insider tells public inquiry that the Post Office continued to roll out the controversial Horizon system despite a ‘considerable’ number of errors, because it was too committed

• November 14, 2022 14 Nov'22

  Sadiq Khan launches Data for London Advisory Board

  Board will look at how to join up and share data between public and private London organisations in an effort to build a stronger data economy and improve public services

• November 11, 2022 11 Nov'22

  Volume of self-reported breaches to ICO jumps 30%

  The number of self-reported breaches to the UK’s Information Commissioner’s Office soared by nearly 30% in the 12 months to 30 June 2022

• November 11, 2022 11 Nov'22

  Defra confirms final settlement of £86.5m with HMRC over ‘historic’ IR35 status assessment errors

  The conclusion of HMRC’s long-running enquiry into errors made by the Department for Environment, Food and Rural Affairs when assessing the IR35 status of its contractors has seen it pay a final settlement of £86.5m to the tax collection agency

• November 11, 2022 11 Nov'22

  17 West Midlands NHS trusts deploy digital pathology

  Trusts hope digital pathology programme will transform cancer diagnosis in the region and reduce backlogs

• November 10, 2022 10 Nov'22

  Scrutinising AI requires holistic, end-to-end system audits

  Understanding the full impacts of artificial intelligence requires organisations to conduct end-to-end social and technical audits of their systems, but the process comes with a number of challenges

• November 09, 2022 09 Nov'22

  Anything can happen so IT teams need to be ready, says Kyiv City Council CIO

  Kyiv City Council’s IT team has experienced challenges faced by no other tech department and is determined to use what it has learnt to take Ukraine forward when the war is over

• November 09, 2022 09 Nov'22

  Microsoft serves smorgasbord of six zero-days

  November’s Patch Tuesday fixes significantly fewer vulnerabilities of late, but includes six actively-exploited zero-days, three of them of critical severity

• November 09, 2022 09 Nov'22

  Fujitsu expert witness in subpostmaster trial ‘manoeuvred’ into role, public inquiry told

  A former Fujitsu technology expert who defended the Horizon system’s robustness in court was unhappy after being ‘manoeuvred’ into acting as an expert witness, public inquiry hears

• November 08, 2022 08 Nov'22

  NortonLifeLock, Avast debut new ‘Gen’ identity

  The combined NortonLifeLock and Avast consumer cyber business, Gen, says it will serve over 500 million customers worldwide

• November 07, 2022 07 Nov'22

  UK climate tech startup investment doubles in 2022

  Climate technology investment has nearly doubled in the UK over the past year and is growing globally, but questions remain over how to scale capacity and whether the necessary change will occur in time to prevent climate catastrophe

• November 07, 2022 07 Nov'22

  Public sector IT projects need ethical data practices from start

  Data ethics needs to be integrated into public sector IT projects from the very start, and considered throughout every stage of the process, to be effective

• November 04, 2022 04 Nov'22

  Microsoft: Nation-state cyber attacks became increasingly destructive in 2022

  The willingness of nation-state actors to conduct destructive cyber attacks is a source of grave concern, as Microsoft’s latest annual Digital Defence Report lays bare

• November 03, 2022 03 Nov'22

  Microsoft pledges $100m in new IT support for Ukraine

  Microsoft will continue to offer free-of-charge technology support to Ukraine for the foreseeable future

• November 03, 2022 03 Nov'22

  Confirmation bias led Post Office to prosecute subpostmasters without investigation, inquiry told

  Former Post Office tech leader tells public inquiry that confirmation bias led to hundreds of subpostmasters being prosecuted for financial crimes without proper investigation

• November 03, 2022 03 Nov'22

  Russia risks shortage of PCs and software

  Russian consumers and businesses could face a shortage of IT equipment including PCs and software