News

Managing IT and business issues

• January 25, 2024 25 Jan'24

  Bugcrowd sees surge in vulnerability submissions, led by public sector

  Crowdsourced vulnerability disclosure and bug bounty platform Bugcrowd says it saw a 151% uptick in submissions related to government and public sector organisations in 2023

• January 24, 2024 24 Jan'24

  WebKit vulnerability sparks Apple’s first major security update of 2024

  A zero-day in the open source WebKit browser engine that powers Safari has sparked Apple’s first major patch roll-out of the new year

• January 24, 2024 24 Jan'24

  Southern Water confirms cyber attack after Black Basta claims

  Southern Water, which supplies millions of customers in southeast England, has confirmed it has fallen victim to a cyber attack, although its services appear to be running normally

• January 24, 2024 24 Jan'24

  Inside Cisco’s security platform strategy

  Raj Chopra, senior vice-president of Cisco’s security business, outlines the company’s security platform strategy and how it brought different products together into a single platform

• January 24, 2024 24 Jan'24

  Critical vulnerability exposes Fortra GoAnywhere users

  Fortra GoAnywhere MFT users must take steps to address a newly disclosed zero-day vulnerability without delay

• January 24, 2024 24 Jan'24

  AI will heighten global ransomware threat, says NCSC

  The benefits of artificial intelligence to cyber criminals being well-known, the NCSC now assesses it’s likely AI will soon be widely used to enhance ransomware attacks

• January 24, 2024 24 Jan'24

  Salesforce’s bug bounty programme paid out $3m in 2023

  Ethical hackers disclosed more than 4,000 vulnerabilities to Salesforce last year through its bug bounty programme, and received over $3m in rewards

• January 23, 2024 23 Jan'24

  GitHub: Top tips to make software developers more productive

  Study highlights importance of good documentation and processes, as well as fewer work distractions

• January 23, 2024 23 Jan'24

  Treat cyber risk like financial or legal issue, says UK government

  UK government and NCSC launch proposed code of practice on cyber security governance to help directors and business leaders toughen their defences

• January 23, 2024 23 Jan'24

  Leak of 26 billion records may prove to be ‘mother of all breaches’

  The discovery of a dataset comprising 26 billion stolen records may prove to be record-breaking in both its size and the danger it poses to ordinary people

• January 23, 2024 23 Jan'24

  UN chief blasts AI companies for reckless pursuit of profit

  The United Nations general secretary has blasted technology companies and governments for pursuing their own narrow interests in artificial intelligence without any consideration of the common good, as part of wider call to reform global governance

• January 23, 2024 23 Jan'24

  SEC bitcoin hack was result of SIM-swapping

  A cyber attack on the US financial regulator earlier in January 2024 occurred after hackers took over one of its mobile phone accounts in a so-called SIM-swapping attack

• January 22, 2024 22 Jan'24

  SolarWinds hackers attack Microsoft in apparent recon mission

  Russian-backed threat actor behind infamous 2020 SolarWinds Sunburst intrusion hacked into Microsoft’s systems, apparently in an attempt to get hold of intel on themselves

• January 22, 2024 22 Jan'24

  Dutch companies not ready for AI

  Many Dutch organisations are not ready to start working with AI, according to the Cisco AI Readiness Index

• January 22, 2024 22 Jan'24

  Fujitsu agrees to support former subpostmasters’ families beyond financial redress

  Fujitsu will meet with victims of the Post Office scandal and their representatives to discuss what the IT giant can do for them beyond financial redress

• January 22, 2024 22 Jan'24

  Chat control: Tech companies warn ministers over EU encryption plans

  Tech companies have written to EU ministers to urge them to back the European Parliament, rather than the European Commission, over proposed regulations to police child abuse

• January 22, 2024 22 Jan'24

  Urgent question asks which ministers knew of Post Office’s shocking plan to remove judge

  Labour peer uses urgent question to uncover who, if anyone, in government was aware of the Post Office’s attempts to remove judge as it became clear it was losing

• January 19, 2024 19 Jan'24

  ICO prompts confusion over police cloud legality

  The UK data regulator has suggested that, despite major data protection concerns, it is likely to greenlight police cloud deployments because of an information-sharing agreement with the US government

• January 19, 2024 19 Jan'24

  Neighbouring Kent councils hit by simultaneous cyber attacks

  Canterbury, Dover and Thanet Councils in Kent have all been struck by simultaneous cyber attacks knocking systems offline, with indications of a link between all three

• January 19, 2024 19 Jan'24

  Fujitsu boss describes Post Office behaviour as 'shameful and appalling'

  The UK head of Fujitsu said he does not know why the Post Office did not reveal information about Horizon software errors to defendants during prosecutions

• January 19, 2024 19 Jan'24

  AWS plans huge investment in Japan cloud infrastructure

  Amazon Web Services plans to invest over $15bn into its existing cloud infrastructure in Tokyo and Osaka by 2027 to meet growing customer demand

• January 18, 2024 18 Jan'24

  Anger sparked by TV drama forces Fujitsu to put public sector contract bidding on hold

  It is not just the UK government that has been forced to act quickly amid public anger, as a wounded Fujitsu stalls government contract bidding

• January 18, 2024 18 Jan'24

  PSTN switch-off threatens access to adult social care services

  The Public Switched Telephone Network switch-off is threatening vulnerable Londoners access to adult social care and other vital services, as councils are left to manage the cost without financial support from the centre, says London chief digital ...

• January 18, 2024 18 Jan'24

  More than 900 subpostmaster convictions wouldn’t have happened without Post Office-backed law change

  IT expert says it cannot be the case that computer evidence is treated as accurate in court, without investigation into surrounding circumstances

• January 18, 2024 18 Jan'24

  Cyber non-profit enlists ex-NCSC head as technical chair

  Founding NCSC chief exec Ciaran Martin is to join the newly launched Cyber Monitoring Centre non-profit as chair of its technical committee

• January 17, 2024 17 Jan'24

  NCSC invites security pros to join the big leagues

  The NCSC is inviting security pros from across the UK to sign up to work with its experts on an intelligence-sharing initiative

• January 17, 2024 17 Jan'24

  Victims of 2023 Capita data breaches head to High Court

  More than 5,000 people impacted by data breaches arising from two cyber incidents affecting outsourcer Capita have joined a group action lawsuit

• January 16, 2024 16 Jan'24

  Kaspersky shares Pegasus spyware-hunting tool

  Kaspersky has developed a way of easily exposing the presence of Pegasus spyware on iOS devices and believes its methodology may also help users identify other such surveillance malware

• January 15, 2024 15 Jan'24

  British Library catalogues back online after ransomware attack

  The British Library has restored online access to its main catalogue of nearly 40 million items on a limited basis as it continues the long and arduous process of recovering from a ransomware attack

• January 15, 2024 15 Jan'24

  AI likely to worsen economic inequality, says IMF

  While artificial intelligence will replace some jobs and complement others, the International Monetary Fund says that, in most of the scenarios it envisages, the technology will likely deepen macro-economic inequalities

• January 15, 2024 15 Jan'24

  Cosmetics retailer Lush dealing with mystery cyber incident

  Cosmetics retailer Lush confirms it’s investigating a cyber attack of an undisclosed nature, but key public-facing systems appear to be unaffected

• January 15, 2024 15 Jan'24

  How legal disclosure failures disrupted the Post Office Horizon inquiry

  From overly narrow search terms, overzealous deduplication of documents and failed email migrations, poor management of legal discovery has delayed justice for postmasters in the Horizon inquiry  

• January 15, 2024 15 Jan'24

  IT failure caused weekend chaos at Sussex hospitals

  The critical incident at University Hospitals Sussex NHS Foundation Trust, caused by IT issues on Sunday night, has now been resolved

• January 15, 2024 15 Jan'24

  APAC leaders expect tech disruption to accelerate

  Nearly two-thirds of C-suite leaders in the region expect the pace of technology disruption to accelerate further in 2024, driven by advancements in generative AI

• January 12, 2024 12 Jan'24

  Post Office scandal inquiry hits mainstream after dramatic start to year

  Long-running statutory public inquiry restarts with hugely increased interest following ITV’s dramatisation of the two decades-long scandal

• January 12, 2024 12 Jan'24

  UK government seeks public views on impacts of AI-generated porn

  The government’s Pornography Review will look in part at the use of AI throughout the industry to generate sexually explicit content without people’s consent

• January 10, 2024 10 Jan'24

  Hundreds of subpostmasters to have convictions quashed in blanket exoneration

  The government has chosen to introduce legislation that will enable it to exonerate hundreds of subpostmasters as a group

• January 10, 2024 10 Jan'24

  Poor tech kills hybrid work productivity

  People who work from home say the IT they use is failing or performs poorly, which reduces their productivity, leading to hours of work lost

• January 10, 2024 10 Jan'24

  Windows Kerberos, Hyper-V vulns among January Patch Tuesday bugs

  Microsoft starts 2024 right with another slimline Patch Tuesday drop, but there are some critical vulns to be alert to, including a number of man-in-the-middle attack vectors

• January 10, 2024 10 Jan'24

  SEC social media hack highlights value of MFA

  The US SEC briefly appeared to approve new bitcoin trading rules after a social media account was targeted by troublemakers, proving the value of MFA once again

• January 10, 2024 10 Jan'24

  Scotland ‘sleepwalking’ to mass surveillance with DPDI Bill

  The independent checks and balances over biometrics and biometric-enabled surveillance must be strengthened to prevent Scotland from sliding into a surveillance state along with the rest of the UK

• January 09, 2024 09 Jan'24

  Babuk Tortilla ransomware decryptor made available

  A joint effort between Cisco Talos, Avast and the Dutch police will bring relief to many victims of a variant of the Babuk ransomware known as Tortilla

• January 09, 2024 09 Jan'24

  Study reveals cyber risks to US elections

  With the 2024 US presidential election cycle beginning, a study produced by Arctic Wolf has highlighted big gaps in preparedness and resourcing at government bodies across the US

• January 09, 2024 09 Jan'24

  Former Post Office CEO hands back CBE amid public backlash

  Former Post Office CEO hands back her CBE after public backlash following dramatisation of her role in Post Office Horizon scandal

• January 09, 2024 09 Jan'24

  Fujitsu gets stay of execution as MPs support exoneration of wrongfully convicted subpostmasters

  Fujitsu will have to wait until the end of the Post Office Horizon scandal public inquiry to hear how MPs will punish it

• January 08, 2024 08 Jan'24

  British Library ransomware attack could cost up to £7m

  The cost of recovering the British Library’s ransomware-stricken IT systems could be up to £7m, it has emerged

• January 08, 2024 08 Jan'24

  Post Office scandal furore is moment to change digital evidence rules

  The current rules around digital evidence are partly to blame for the widest miscarriage of justice in UK history

• January 08, 2024 08 Jan'24

  Datacentre operators form APAC industry group

  The Asia-Pacific Data Centre Association will advocate for policies to drive the security and resiliency of datacentres and minimise environmental impact, among other goals

• January 07, 2024 07 Jan'24

  India firms warm to responsible AI

  Almost two-thirds of organisations said their responsible AI practices and policies were mature or they had taken steps towards responsible AI adoption, according to a Nasscom study

• January 07, 2024 07 Jan'24

  Metropolitan Police launches second criminal investigation in Post Office scandal

  New investigation will examine potential crimes by the Post Office in its recovery of money from subpostmasters accused of theft and false accounting