News

Identity and access management products

• October 22, 2020 22 Oct'20

  Protecting remote workers an opportunity to do security better

  Securing the fully remote workforce has been a challenge for IT teams, but it presents an opportunity to commit to a higher standard of cyber security, according to a Cisco report

• October 12, 2020 12 Oct'20

  Cyber security skills ad branded ‘crass’ by minister

  Security skills campaign advert depicting a ballet dancer comes in for criticism as the arts sector struggles in the pandemic

• October 12, 2020 12 Oct'20

  Making sense of zero-trust security

  Implementing zero-trust security is not an easy feat, but enterprises can still get it right if they approach it from a process perspective and get a handle on their infrastructure footprint

• October 09, 2020 09 Oct'20

  Magecart strikes website of school payments service Wisepay

  Magecart credit card skimmer harvested financial data of users of Wisepay’s platform over a two-day period

• October 07, 2020 07 Oct'20

  UK accounts for 45% of Europe’s card fraud as criminals target online transactions

  Payment card fraudsters steal €1.5bn, with card-not-present attacks accounting for three-quarters of this sum

• October 06, 2020 06 Oct'20

  EU’s top court questions legality of UK phone and internet data surveillance

  European Court of Justice rules that the UK and EU member states must comply with EU privacy laws when harvesting people’s sensitive communications data from telecoms and internet companies

• October 06, 2020 06 Oct'20

  Scotland digital identity prototype pilot successful

  Digital Identity Scotland’s 10-week test of its digital identity prototype finds that users understand the concept of two-factor authentication and using the same credentials across services

• September 30, 2020 30 Sep'20

  ‘American friends’ spied on Julian Assange in Ecuadorian Embassy, court hears

  Two former employees of UC Global, which provides security services to the Ecuadorian Embassy in London, claim the company shared surveillance footage with the US of the WikiLeaks founder meeting with lawyers and other visitors

• September 29, 2020 29 Sep'20

  Organisations locked out by Azure AD crash

  The Azure Active Directory was unavailable for a few hours in the evening of 28 September, preventing many from accessing MS online services

• September 28, 2020 28 Sep'20

  Security now main driving force behind digital transformation

  Organisations are urgently remodelling their core technology stack in the light of the Covid-19 pandemic, and this is pushing security to the top of the agenda

• September 28, 2020 28 Sep'20

  Airbnb hosts’ account data exposed in internal leak

  Data exposure within Airbnb’s system was the result of a technical issue but was swiftly fixed, says the firm

• September 24, 2020 24 Sep'20

  NHS whistleblower privacy concerns passed on to regulator, but campaigners not holding their breath

  NHS Improvement chair Dido Harding acknowledges receiving concerns raised about the anonymity of whistleblowers, but campaigners have little faith that anything will be done

• September 24, 2020 24 Sep'20

  Australians want more control over privacy

  Nearly nine in 10 Australians want more control and choice over the collection and use of their personal information amid declining trust in how organisations handle personal data, survey finds

• September 22, 2020 22 Sep'20

  Activision shoots down data breach claims

  Gaming company denies there has been any data breach after up to 500,000 accounts appeared to have been compromised, but evidence mounts that credential stuffing attacks are to blame

• September 17, 2020 17 Sep'20

  Saudi Arabia sees cyber security boom as coronavirus bites

  Saudi Arabian CIOs have been forced to increase their security posture as the Covid-19 pandemic transforms working methods

• September 16, 2020 16 Sep'20

  Banks report surge in impersonation scams

  Fraudsters are using the Covid-19 crisis to trick people into transferring money to them

• September 16, 2020 16 Sep'20

  Lorca security scaleups to get Splunk data expertise

  Lorca inducts Splunk onto its co-marketing programme, giving security scaleups access to new data expertise

• September 15, 2020 15 Sep'20

  MEPs denied access as observers to Julian Assange extradition hearing

  MEPs and NGOs say they have been denied access to observe extradition proceedings against WikiLeaks founder in Central Criminal Court

• September 11, 2020 11 Sep'20

  Zoom adds two-factor authentication for all users

  Latest enhancements to Zoom security make it easier for organisations to protect users and prevent breaches and unauthorised meeting access

• September 11, 2020 11 Sep'20

  Russian interference in US elections ramps up on schedule

  With the critical US 2020 presidential election looming, Russian-state backed hackers are once again after organisations directly involved in political elections, launching thousands of targeted attacks

• September 10, 2020 10 Sep'20

  Cyber security is next frontier for open source

  Open security will facilitate the interoperability and capabilities of cyber security tools while alleviating vendor lock-in for enterprises, says IBM

• September 09, 2020 09 Sep'20

  Branch-based anti-fraud scheme to be expanded to online banking

  A successful branch-based anti-fraud scheme will be expanded by banks to include online and telephone banking

• September 03, 2020 03 Sep'20

  Phishing scam targets Lloyds Bank customers

  Bank customers warned of emails and SMS messages that direct them to a fraudulent site and then request account log-in details

• September 02, 2020 02 Sep'20

  Northumbria University suffers major disruption after cyber attack

  Some exams cancelled as university appoints external specialists to investigate incident

• September 01, 2020 01 Sep'20

  UK government unveils next steps in digital identity plans

  Long-awaited response to July 2019 consultation highlights private sector demands for digital identity support from government

• September 01, 2020 01 Sep'20

  Norway’s corporates want government to support ‘herd immunity’ to cyber attack

  Leading business organisations in Norway call on government to play a more active role in improving and coordinating the country’s cyber defences

• August 28, 2020 28 Aug'20

  Benefit fraud: Underground trade in stolen identities revealed

  A roaring underground trade in stolen identities is undermining the Universal Credit system and could potentially defraud it out of millions of pounds

• August 27, 2020 27 Aug'20

  NHS whistleblowers’ anonymity at mercy of inadequate trust IT policies and processes

  They were clapped in the streets for their bravery at the height of the Covid-19 pandemic, but some NHS staff who raise workplace concerns are suffering abuse as a result

• August 26, 2020 26 Aug'20

  Government must urgently prioritise digital identity, says tech sector

  TechUK calls on government to make digital identity a focus of its digital strategy as the Covid-19 pandemic has highlighted the ‘urgent need’ for digital IDs

• August 21, 2020 21 Aug'20

  Australian regulator sues RI Advice for cyber security lapses

  The Australian Securities and Investments Commission is suing RI Advice for cyber security breaches at the financial firm’s authorised representatives

• August 14, 2020 14 Aug'20

  US decision to file new charges against Julian Assange ‘astonishing and potentially abusive’

  Lawyer for WikiLeaks founder slams US decision to serve a second indictment at the 11th hour alleging that Assange conspired with hackers, as a potential abuse of process

• August 14, 2020 14 Aug'20

  Oracle and Salesforce sued over online ad tracking

  Class action lawsuits filed in Amsterdam and London will accuse Oracle and Salesforce of breaching GDPR in their processing and sharing of personal data to sell online advertising

• August 13, 2020 13 Aug'20

  APAC consumers do not feel responsible for data security

  Just one in four consumers believe they should protect their own data, underscoring the tightrope between security and convenience that organisations have been walking on

• August 12, 2020 12 Aug'20

  How Dharma ransomware became an effective services business

  New research looks under the bonnet of a Dharma ransomware attack, with the ransomware's ease of use being particularly dangerous for small to medium-sized enterprises

• August 12, 2020 12 Aug'20

  Security training body Sans Institute hit by data breach

  Around 28,000 items of personally identifiable data were lost in a phishing attack on Sans, proving that even the professionals can be caught out

• August 06, 2020 06 Aug'20

  Australia updates cyber security strategy but offers little new

  The nation’s latest cyber security strategy includes centralised management of networks and a voluntary code of practice for deploying internet-connected devices, among other areas

• August 05, 2020 05 Aug'20

  Netherlands investigates innovative privacy technology SSI

  Dutch research organisation is looking into areas where self-sovereign identity technology could be used in society and business

• August 04, 2020 04 Aug'20

  Liam Fox hack raises questions over government security

  The hack of a former cabinet minister’s emails casts doubt over the effectiveness of safeguards and security training processes at the highest levels of the British government

• August 03, 2020 03 Aug'20

  Estonian police and border services need better IT to block criminals from becoming e-residents

  Police and Border Guard Board of Estonia needs to improve its IT systems to stop criminals from becoming e-residents, says report

• August 02, 2020 02 Aug'20

  More data breaches from ransomware attacks in Australia

  The number of data breaches caused by ransomware rose to 33 in the first half of 2020 from 13 in the previous six-month period, according to the latest report from the Office of the Australian Information Commissioner

• July 31, 2020 31 Jul'20

  Twitter confirms it was hit by targeted spearphishing attack

  Investigation into 15 July 2020 hack of a number of high-profile accounts by cryptocurrency scammers has found evidence of a targeted spearphishing incident

• July 30, 2020 30 Jul'20

  EC launches digital identity consultation

  European Commission’s consultation will look at revisions to the eIDAS regulation, aiming to improve effectiveness and extend it to the private sector

• July 30, 2020 30 Jul'20

  Tech sector calls on government to 'urgently' resolve delays in digital identity policy

  Trade body TechUK has written privately to DCMS secretary of state to express industry frustrations and request ‘urgent needs’ are resolved to enable digital identity market in UK

• July 29, 2020 29 Jul'20

  Majority of organisations at risk of cloud data exposure

  Report casts doubt on the effectiveness of the shared responsibility model of cloud security

• July 29, 2020 29 Jul'20

  Bank of Ireland fined for six-year-old IT breach

  Bank of Ireland fined by regulator for its failings to prevent fraud six years ago

• July 28, 2020 28 Jul'20

  Digital bank customer data breached through third party

  FBI is investigating digital bank customer data breach that occurred via a former third-party supplier

• July 28, 2020 28 Jul'20

  NCSC inducts six security startups to Cyber Accelerator

  10-week programme will guide some of the UK’s most innovative security startups as they scale their businesses for future growth

• July 26, 2020 26 Jul'20

  Australia issues new cloud computing guidelines

  The new guidance, which comes after the expiry of the government’s cloud services certification programme, will help to bolster Australia’s cyber security resilience

• July 21, 2020 21 Jul'20

  Australian industry panel calls for ‘clear consequences’ of cyber attacks

  A government-appointed panel recommends strong deterrence and other measures to be implemented in Australia’s next cyber security strategy

• July 17, 2020 17 Jul'20

  Twitter hack fallout: Investigators on trail of cyber criminals

  Investigators are hunting the cyber criminals who broke into Twitter’s systems to hijack prominent accounts, amid concerns that more attacks may come

• July 16, 2020 16 Jul'20

  Coronavirus shines spotlight on cyber security

  Programme committee chair of this year's RSA Conference Asia-Pacific and Japan talks up the challenges that IT security professionals in APAC are facing to mitigate security risks amid the Covid-19 pandemic

• July 15, 2020 15 Jul'20

  Video providers slammed by credential stuffing attacks

  Attacks on the media sector are spiking as cyber criminals try to gain access to valuable consumer accounts

• July 14, 2020 14 Jul'20

  Australian enterprises facing more cyber attacks

  The volume of cyber attacks in Australia jumped from 90% in October 2019 and 81% in February 2019, underscoring the worsening threat landscape in the country

• July 09, 2020 09 Jul'20

  Dutch banking’s transaction monitoring utility gets green light

  Plans for a shared utility to monitor financial transactions in the Netherlands have been given the go-ahead after six months of proving the concept

• July 09, 2020 09 Jul'20

  Pubs and restaurants failing on cyber fraud protection

  Virtually all of the UK’s most popular restaurant and pub brands are failing to proactively block fraudulent emails from reaching their targets

• July 08, 2020 08 Jul'20

  Over 15 billion credentials for sale on dark web

  Research by Digital Shadows reveals the scale of the security threat facing consumers as it uncovers 15 billion usernames and passwords stolen in more than 100,000 different data breaches

• July 08, 2020 08 Jul'20

  Security funding soars despite Covid-19 slump, but problems lie ahead

  The overall cyber security funding ecosystem in the UK is healthier than ever despite Covid-19, but the figures mask stark and concerning disparities in where the money is going

• July 06, 2020 06 Jul'20

  Lorca scale-ups bring diverse security to the fore

  London Office for Rapid Cybersecurity Advancement announces the cyber security scale-ups that will make up its fifth cohort

• July 01, 2020 01 Jul'20

  UK’s unsung cyber security heroes sought

  Nominations have opened for the fifth annual Security Serious Unsung Heroes Awards

• July 01, 2020 01 Jul'20

  Zoom making progress on cyber security and privacy, says CEO

  Three months after being hit by a spate of security incidents, Zoom’s CEO, Eric Yuan, has been discussing progress towards a more secure product

• July 01, 2020 01 Jul'20

  Remote workers more aware of security, but still flout the rules

  Almost three-quarters of remote workers reckon they have gained in cyber security awareness during lockdown, but don’t seem to be especially bothered about keeping themselves safe

• June 30, 2020 30 Jun'20

  BNP Paribas uses biometrics to increase contactless payment limit

  French bank BNP Paribas is enabling customers to make higher value contactless payments through fingerprint-recognition technology

• June 29, 2020 29 Jun'20

  Post-pandemic security market still set for growth, but slower

  Frost & Sullivan report says the global security industry will withstand the economic crash caused by the Covid-19 pandemic, but growth will be slower for a few years

• June 21, 2020 21 Jun'20

  APAC still hotbed for cyber attacks

  Individuals and organisations in APAC are encountering malware more frequently than the rest of the world, study finds

• June 19, 2020 19 Jun'20

  Australian prime minister confirms country is suffering repeated nation-state cyber attacks

  Concern over critical national infrastructure as cyber attackers repeatedly try to gain access to network of organisations operating in multiple sectors

• June 18, 2020 18 Jun'20

  Check Point uncovers targeted Microsoft Office 365 phishing campaign

  Organised criminal campaign exploited Adobe, Oxford University and Samsung web domains to trick users into giving up their passwords

• June 15, 2020 15 Jun'20

  NatWest develops behavioural biometrics as additional authentication

  Bank is working with Visa to develop behavioural biometrics technology as an extra layer of invisible authentication

• June 12, 2020 12 Jun'20

  NHS email service users ensnared in phishing attack

  More than 100 accounts on the NHSmail service were affected by attack, but health service says no patient data was accessed

• June 12, 2020 12 Jun'20

  100,000 cheap wireless cameras vulnerable to hacking

  Active devices built by Chinese firm HiChip have been sold in the UK as webcams and connected baby monitors

• June 11, 2020 11 Jun'20

  CISOs buying into unified security proposition

  The time is right for all-in-one security solutions, according to a report

• June 10, 2020 10 Jun'20

  Government to fund nine advanced security projects

  Nine academic projects have been selected to receive a share of a £10m funding pot as they develop advanced cyber security solutions using prototype chipsets

• June 10, 2020 10 Jun'20

  Virtual GP practice accidentally exposes patient video calls

  A small number of users of Babylon’s GP at Hand service were briefly able to view other patients’ video GP consultations thanks to a bug in a new software feature

• June 10, 2020 10 Jun'20

  CaixaBank introduces facial recognition ATMs

  Spanish bank broadens its use of facial recognition technology on cash machines

• June 10, 2020 10 Jun'20

  How Australian firms can defend against supply chain attacks

  Supply chain security risks can wreak havoc if measures are not taken to deter cyber attackers from exploiting a supplier’s security gaps to target another firm

• June 09, 2020 09 Jun'20

  Poorly-secured AWS buckets used to launch Magecart attacks

  Cyber criminals are exploiting misconfigured AWS S3 buckets to run credit card fraud and malvertising campaigns, according to new data

• June 04, 2020 04 Jun'20

  Dutch organisations invest heavily in compliance – but in vain

  Despite the fact that companies in the Netherlands have invested heavily to comply with GDPR legislation introduced two years ago, 90% of them are still discovering fundamental weaknesses in their IT environment

• June 04, 2020 04 Jun'20

  Small businesses failing on remote worker protection

  Only one-third of people working for small businesses have received any guidance from their employers on how to secure their remote working set-up

• June 03, 2020 03 Jun'20

  Security procurement framework goes live for NHS and public sector

  Cyber Security Services Framework, developed by NHS Shared Business Services, has formally launched

• June 02, 2020 02 Jun'20

  VMware vulnerability leaves private clouds open to takeover

  Ethical hackers from Citadelo uncovered a vulnerability in VMware Cloud Director that left private cloud owners open to takeover

• June 01, 2020 01 Jun'20

  How managed threat hunting helps bust malicious insiders

  Managed threat hunting services can help take some of the pressure off security operations centres and help ensure potential breaches don’t escalate into something far worse. We explore one such case with a happy ending

• May 29, 2020 29 May'20

  Test and Trace has not passed data protection impact assessment

  Public Health England failed to complete the required impact assessment before launching the Covid-19 Test and Trace programme

• May 28, 2020 28 May'20

  TSB Bank digitises banking forms in response to coronavirus lockdown

  As part of its 2022 digital strategy, TSB has begun rolling out electronic forms designed in Adobe XD and processed using Adobe Sign

• May 28, 2020 28 May'20

  IoT buyers eye private network deployments for added security

  Fully private, segregated networks for IoT deployments are becoming increasingly attractive to many organisations, according to a report

• May 27, 2020 27 May'20

  Fears contact-tracing app will open the floodgates for cyber criminals

  Study of UK consumers reveals worries over an uptick in cyber crime and a lack of trust in government

• May 20, 2020 20 May'20

  NCSC discloses multiple vulnerabilities in contact-tracing app

  National Cyber Security Centre has received mountains of feedback on the security of the government’s Covid-19 contact-tracing app, and has now taken the step of making multiple disclosures

• May 20, 2020 20 May'20

  Personal devices putting Singapore employers at risk

  More than half of Singapore respondents to a CrowdStrike-commissioned survey believe their devices are only somewhat secure against advanced cyber threats

• May 20, 2020 20 May'20

  Responsible Cyber acquires Secucial in S$7m deal

  Singapore startup Responsible Cyber plans to bolster its Immune platform with access control management capabilities, and sets out to expand its global footprint

• May 19, 2020 19 May'20

  GDPR wholly inappropriate to govern contact-tracing data

  Human Rights Committee Chair Harriet Harman says current data protection law is not up to the job of governing the data collected by the Covid-19 contact-tracing app

• May 19, 2020 19 May'20

  Cancelled NCSC CyberUK event gets green light for 2021

  The NCSC’s popular CyberUK event has been rescheduled to next year, and will again take place in Newport in south Wales

• May 19, 2020 19 May'20

  Doubts mount over effectiveness of UK contact-tracing app

  Studies from BCS and Anomali reveal that a significant proportion of the UK population is not prepared to download the Covid-19 contact-tracing app

• May 14, 2020 14 May'20

  Venafi buys cloud protection service Jetstack

  Jetstack specialises in open source machine identity protection software for Kubernetes and cloud native ecosystems

• May 14, 2020 14 May'20

  SK Telecom brings quantum security to the masses

  The South Korean telco is readying the world’s first 5G smartphone equipped with a quantum random number generator chipset

• May 13, 2020 13 May'20

  Report reveals inadequate cyber security at Schiphol Airport

  A report has revealed problems with critical security systems in Amsterdam’s Schiphol Airport

• May 12, 2020 12 May'20

  MPs take part in first live test of remote voting during Covid-19 debate

  MPs will use phones and computers to vote from their homes in a House of Commons debate today in the biggest change in parliamentary procedure for 150 years

• May 07, 2020 07 May'20

  Zoom buys secure messaging service Keybase

  Unified comms platform Zoom says the acquisition of Keybase will finally let it bring end-to-end encryption to the table

• May 07, 2020 07 May'20

  HM Treasury tells GDS: No further online services can use Gov.uk Verify

  The recent 18-month reprieve for Verify came with strict conditions – the digital identity scheme must not be added to any more services, and existing users must find alternatives

• May 07, 2020 07 May'20

  SilverTerrier cyber crime group targets Covid-19 key workers

  Organisations on the front line in the fight against coronavirus are under attack from Nigeria’s SilverTerrier criminal gang

• May 06, 2020 06 May'20

  End-users failing to protect themselves online

  Remote workers and stuck-at-home consumers are taking silly risks with their security during the coronavirus pandemic, according to a report

• May 05, 2020 05 May'20

  Coronavirus: NCSC issues urgent alert for healthcare sector

  UK National Cyber Security Centre and US Cybersecurity and Infrastructure Security Agency say they are seeing large-scale campaigns targeting healthcare bodies and medical research organisations

• May 04, 2020 04 May'20

  NHSX contact-tracing app needs legislative oversight

  Legal experts have told Parliament’s Human Rights Committee that legislation is desirable to ensure public trust in the data security of the Covid-19 coronavirus contact-tracing app