News
Managing IT and business issues
-
July 24, 2023
24
Jul'23
Citrix NetScaler users told to patch new zero-day urgently
A vulnerability disclosed and patched last week by Citrix appears to be being exploited by China-backed threat actors as a zero-day, prompting warnings from government cyber bodies
-
July 24, 2023
24
Jul'23
Bank of England’s project to replace ‘beating heart’ is foundation for continuous development
The Bank of England has reached a major milestone in its core system replacement programme, with next landmark in sight
-
July 24, 2023
24
Jul'23
Security AI and automation may reduce cost of data breaches
Organisations that go all in on security AI and automation tend to incur lower financial costs when they experience a data breach incident, according to an IBM report
-
July 20, 2023
20
Jul'23
Electronic Trade Documents Act receives royal assent
Digital trade documents are to be accorded the same status in law as paper ones under a law implemented to help reduce paper waste and speed up the UK’s foreign trade
-
July 20, 2023
20
Jul'23
Online Safety Bill screening measures amount to ‘prior restraint’
The Open Rights Group is calling on Parliament to reform the Online Safety Bill, on the basis that its content-screening measures would amount to “prior restraint” on freedom of expression
-
July 20, 2023
20
Jul'23
BBC outsources IT to India’s Tata Consultancy Services
TCS continues to build its UK public sector business, with the BBC its latest customer
-
July 20, 2023
20
Jul'23
Attention-seeking KillNet hacktivists becoming more dangerous
The KillNet DDoS gang seems to be becoming more dangerous, but its primary goal remains to create a lot of noise and draw media attention, according to latest analysis
-
July 19, 2023
19
Jul'23
Australia’s IaaS market surges 37.1% in 2022
IaaS remains the engine of growth in the Australian IT market and is showing no signs of slowing down, according to Gartner
-
July 19, 2023
19
Jul'23
BlackCat and Clop gangs both claim cyber attack on Estée Lauder
Cosmetics conglomerate Estée Lauder is experiencing operational disruption in the wake of a cyber attack that seems to involve two different cyber crime gangs
-
July 19, 2023
19
Jul'23
‘Significant gaps’ in UK AI regulation, says Ada Lovelace Institute
UK government’s plans to diffuse regulatory responsibility for AI among existing regulators will mean the tech is “only partially regulated”, while its data reforms will undercut already-limited existing protections, says Ada Lovelace Institute
-
July 19, 2023
19
Jul'23
Half of cyber pros engage in risky behaviour at work, report claims
Approximately 55% of security professionals say they have engaged in behaviours they would more usually advise against in the workplace, according to a report
-
July 19, 2023
19
Jul'23
Cyber criminal AI tool WormGPT produces ‘unsettling’ results
A newly discovered generative AI tool dubbed WormGPT is being sold to the cyber criminal underground via the dark web, and poses a significant danger, researchers warn
-
July 18, 2023
18
Jul'23
Critical Adobe ColdFusion flaws chained in ongoing cyber attacks
Two vulnerabilities in Adobe ColdFusion have been chained by threat actors to target victim systems, apparently after one of them was accidentally disclosed
-
July 18, 2023
18
Jul'23
Traditional IT outsourcing rockets as Europe’s businesses cut costs
Overall spending on IT services is up in European countries despite continued reduction in investments in cloud-based contracts
-
July 17, 2023
17
Jul'23
Police Scotland use cloud for biometric data despite clear risks
Police Scotland confirms it has stored significant volumes of biometric data on a cloud-based digital evidence sharing system despite major ongoing data protection concerns, bringing into question the effectiveness of the current regulatory approach...
-
July 13, 2023
13
Jul'23
Civil society groups call on EU to put human rights at centre of AI Act
Dozens of civil society groups are calling on EU institutions to prioritise people and human rights in AI legislation as secretive negotiations begin
-
July 13, 2023
13
Jul'23
Microsoft issues new warning over Chinese cyber espionage
A newly uncovered Chinese espionage campaign exploited forged authentication tokens to access its victims’ email accounts, says Microsoft
-
July 13, 2023
13
Jul'23
One month after MOVEit: New vulnerabilities found as more victims are named
Five weeks after the mass MOVEit breach, new vulnerabilities in the file transfer tool are coming to light as the Clop cyber crime group continues to terrorise victims. But has the gang bitten off more than it can chew?
-
July 12, 2023
12
Jul'23
Digital public services ‘riddled’ with problems, says TUC
The UK’s increasingly digitised public services are plagued by design, governance and workplace issues that are undermining the government’s stated goal of improving efficiency, but can be alleviated by giving public sector workers a greater say in ...
-
July 12, 2023
12
Jul'23
Ofcom’s online safety preparedness efforts hobbled by government
Despite Ofcom’s progress so far, UK government changes to the scope and timetable of the Online Safety Bill are hobbling the ability of the regulator to successfully prepare for the new regime
-
July 12, 2023
12
Jul'23
Cozy Bear lures victims with used BMW 5 Series
A recent Cozy Bear campaign saw the Russian APT group pivot to exploiting an advert for a used car as it targeted diplomatic missions in Kyiv
-
July 12, 2023
12
Jul'23
Hackers: We won’t let artificial intelligence get the better of us
AI is changing how ethical hackers go about their work, and will continue to do so, but the community is convinced the technology will never be able to replicate the creativity of a flesh-and-blood hacker
-
July 12, 2023
12
Jul'23
Microsoft users on high alert over dangerous RCE zero-day
A serious RCE vulnerability in Microsoft Office and Windows is among several zero-days disclosed in Redmond’s July Patch Tuesday update, but this one does not have a patch yet
-
July 11, 2023
11
Jul'23
EU formally grants data adequacy to US
The European Commission has formally granted the US data adequacy, allowing companies and organisations to freely transfer personal data across the Atlantic via the EU-US Data Privacy Framework. But privacy activist Max Schrems has already committed...
-
July 11, 2023
11
Jul'23
Malicious URL volumes soar as cyber criminals pull on Threads
Malicious actors have been quick to exploit the buzz around Meta’s newly launched Threads platform, with thousands of new suspicious domains registered exploiting its branding
-
July 11, 2023
11
Jul'23
Finland’s VTT partners Nokia on data market
Finish state’s involvement in Nokia project will add weight and capital to work on creating a market for data
-
July 11, 2023
11
Jul'23
Apple pushes Rapid Response patch to fix WebKit zero-day
Apple deployed an emergency patch under its Rapid Security Response update programme, but had to temporarily suspend delivery after it caused problems for users of the Safari browser
-
July 11, 2023
11
Jul'23
Peer calls for every Post Office prosecution to be reviewed
Post Office prosecutions should be reviewed in light of damning evidence laid bare by statutory public inquiry into Horizon scandal, says peer James Arbuthnot
-
July 10, 2023
10
Jul'23
Post Office inquiry must examine rule on IT evidence if miscarriages of justice are to be avoided
Public inquiry must examine role of court rules around use of computer evidence that enabled Post Office to prosecute innocent people
-
July 07, 2023
07
Jul'23
Suspicious email reported every five seconds in UK
National Cyber Security Centre report reveals a suspicious email was reported by UK citizens and organisations every five seconds last year
-
July 06, 2023
06
Jul'23
Biometrics watchdog calls for public space surveillance review
The biometrics and surveillance camera commissioner is calling for a review of public space surveillance to gain a clearer picture about the proliferation of Chinese surveillance technology across the public sector, but warns against applying double...
-
July 06, 2023
06
Jul'23
Privacy campaigners call for UK data adequacy to be revoked
The European Commission should revoke the UK’s data adequacy if its Data Protection and Digital Information Bill passes, which campaigners argue ‘flies in the face’ of the decision
-
July 06, 2023
06
Jul'23
Meta’s Threads hits app stores, but no EU launch in sight
Meta’s Twitter competitor makes its debut and signs up millions of users in just 12 hours, but concerns over compliance with the EU’s Digital Markets Act have sunk a pan-European launch for now
-
July 06, 2023
06
Jul'23
Public inquiry hears how Post Office security withheld evidence from people it suspected of theft
The Post Office told investigators to include potential evidence in reports to their own lawyers, but not the subpostmasters they suspected of theft
-
July 04, 2023
04
Jul'23
IT contractors urged to check umbrella payslips as two firms caught making unlawful deductions
Two recently published tribunal judgments emphasise why it is so important for umbrella company contractors to make sure they are being paid exactly what they are entitled to, warn experts
-
July 04, 2023
04
Jul'23
EU judgment sinks Meta’s argument for targeted ads
The EU Court of Justice has issued a significant judgment against Meta, ruling that national anti-trust bodies can investigate GDPR breaches, disrupting the platform’s entire basis for carrying out targeted advertising
-
July 04, 2023
04
Jul'23
How Maxeon is forging the path to SASE
Maxeon Solar Technologies is building out its security service edge capabilities with an eye on a SASE implementation that combines best of breed offerings from different suppliers
-
July 03, 2023
03
Jul'23
BlackCat gang claims cyber attack on Barts NHS Trust
Investigations continue into a claim by the ALPHV/BlackCat ransomware gang that it has stolen 7TB of data from Barts NHS Trust in London
-
July 03, 2023
03
Jul'23
BBVA launches tech job portal as it continues to add talent
Spanish bank BBVA ramps up its tech recruitment strategy with new online portal and target of 2,600 more people
-
July 03, 2023
03
Jul'23
Deutsche Bank completes migration of millions of Postbank customers
Deutsche Bank has completed the migration of 12 million Postbank customers to its banking platform
-
July 03, 2023
03
Jul'23
Driving synergies in digital healthcare
As group CIO of API Holdings, Chandresh Dedhia has been driving synergies across a spectrum of digital healthcare businesses to create operational efficiency and other business outcomes
-
June 30, 2023
30
Jun'23
SGN pens IT service desk outsourcing deal
Utility company SGN renews its internal IT services managed services contract with new supplier
-
June 30, 2023
30
Jun'23
NHS data stolen in Manchester Uni ransomware attack
The ransomware gang behind the cyber attack on the University of Manchester appears to have got its hands on an NHS dataset being used by the university for research purposes
-
June 29, 2023
29
Jun'23
‘Shadow’ AI use becoming a driver of insider cyber risk
Off-the-books use of generative AI tools will inevitably lead to a costly, high-profile data breach for someone, but a little attention paid to appropriate data management policy can help mitigate the risk
-
June 29, 2023
29
Jun'23
The Finnish Food Authority uses AI to accelerate research
Researchers have reduced the time taken to get critical insights into potential public health crises and address issues in real-time, through artificial intelligence
-
June 28, 2023
28
Jun'23
Charity demands transparency in digital universal credit system
The digital universal credit system needs overhauling to ensure greater transparency over benefit claims and more effective means of redress when things go wrong, says child poverty charity
-
June 28, 2023
28
Jun'23
Scottish government tech accelerator opens latest funding round
The Scottish government’s CivTech accelerator is seeking technology businesses to help develop new tools to improve public services, as well as to address pressing social and environmental issues
-
June 27, 2023
27
Jun'23
UK AI plans offer ‘inadequate’ human rights protection, says EHRC
The UK’s equality watchdog says the government must properly consider human rights when implementing rules to regulate artificial intelligence, as current plan offers little protection
-
June 27, 2023
27
Jun'23
WithSecure forges ahead with green coding initiative
WithSecure’s W/Sustainability programme kickstarts a number of initiatives, including a commitment to green coding the security supplier hopes will set an example for others to follow
-
June 27, 2023
27
Jun'23
3,600 potential cyber security experts apply to government scheme
The UK government’s Upskill in Cyber programme is reporting great success just a month after launch, with almost half of applicants women