News

Regulatory compliance and standard requirements

• May 08, 2025 08 May'25

  Government will miss cyber resiliency targets, MPs warn

  A Public Accounts Committee report on government cyber resilience finds that the Cabinet Office has been working hard to improve, but is likely to miss targets and needs a fundamentally different approach

• May 08, 2025 08 May'25

  Preparing for post quantum computing will be more difficult than the millenium bug

  The job of getting the UK ready for post quantum computing will be at least as difficult as the Y2K problem, says Ollie Whitehouse chief technology officer of the National Cyber Security Centre (NCSC)

• May 08, 2025 08 May'25

  US tells CNI orgs to stop connecting OT kit to the web

  The US authorities have released new guidance for owners of critical national infrastructure in the face of an undisclosed number of cyber incidents.

• May 07, 2025 07 May'25

  Europe leads shift from cyber security ‘headcount gap’ to skills-based hiring

  Research from Sans Institute reveals European organisations are leading a global shift in hiring priorities, driven by regional regulatory frameworks

• May 07, 2025 07 May'25

  Oxford Uni adds cyber resilience module to MBA programme

  Oxford University’s Saïd Business School is working with cyber response specialist Sygnia to help future business leaders get on top of security

• May 07, 2025 07 May'25

  UK at risk of Russian cyber and physical attacks as Ukraine seeks peace deal

  UK cyber security chief warns of ‘direct connection’ between Russian cyber attacks and physical threats to the UK

• May 01, 2025 01 May'25

  Thomas Herdman’s legal battle over Sky ECC encrypted phone distribution set to enter fifth year

  Computer Weekly speaks to Julie Kawai Herdman, daughter of Thomas Herdman, the only person in custody for distributing Sky ECC encrypted phones

• April 30, 2025 30 Apr'25

  Current SaaS delivery model a risk management nightmare, says CISO

  JPMorgan Chase security chief Patrick Opet laments the state of SaaS security in an open letter to the industry and calls on software providers to do more to enhance resilience

• April 24, 2025 24 Apr'25

  Data breach class action costs mount up

  Organisations exposed to the US market paid out over $150m in class action settlements in just six months. Security leaders must do more to address cyber gaps, respond better to incidents and demonstrate compliance

• April 23, 2025 23 Apr'25

  Amid uncertainty, Armis becomes newest CVE numbering authority

  Amid an uncertain future for vulnerability research, exposure management company Armis has been given the authority to assign CVE IDs to newly discovered vulnerabilities

• April 23, 2025 23 Apr'25

  Qualys goes to bat for US cricket side San Francisco Unicorns

  Cloud security specialist Qualys partners with US T20 cricket squad San Francisco Unicorns and its Sparkle Army fanclub as the team prepares for its summer 2025 campaign

• April 22, 2025 22 Apr'25

  Investigatory Powers Tribunal has no power to award costs against PSNI over evidence failures

  Investigatory Powers Tribunal judges have called for the Home Secretary to step in after finding they have no powers to award costs against government bodies that fail to disclose evidence

• April 17, 2025 17 Apr'25

  Tariff turmoil is making supply chain security riskier

  Many businesses around the world are taking the decision to alter their supplier mix in the face of tariff uncertainty, but in doing so are creating more cyber risks for themselves, according to a report

• April 17, 2025 17 Apr'25

  Standard Chartered grounds AI ambitions in data governance

  The bank’s group chief data officer, Mohammed Rahim, outlines how the bank is modernising its data infrastructure and governance practices to support its AI initiatives

• April 16, 2025 16 Apr'25

  Footballers object to processing of performance data

  Football players are seeking to gain more control of their performance data through ‘stop processing’ requests, in an attempt to strike a better balance between firms’ commercial interests and the data rights of footballers

• April 16, 2025 16 Apr'25

  CISA extends Mitre CVE contract at last moment

  The US Cybersecurity and Infrastructure Security Agency has ridden to the rescue of the under-threat Mitre CVE Programme, approving a last-minute, 11-month contract extension to preserve the project’s vital security vulnerability work

• April 16, 2025 16 Apr'25

  CVE Foundation pledges continuity after Mitre funding cut

  With news that Mitre’s contract to run the world-renowned CVE Programme is abruptly terminating, a breakaway group is setting up a non-profit foundation to try to ensure the project’s continuity

• April 16, 2025 16 Apr'25

  Security leaders grapple with AI-driven threats

  Experts warn of AI’s dual role in both empowering and challenging cyber defences, and called for intelligence sharing and the need to strike a balance between AI-driven innovation and existing security practices

• April 15, 2025 15 Apr'25

  Mitre warns over lapse in CVE coverage

  Mitre, the operator of the world-renowned CVE repository, has warned of significant impacts to global cyber security standards, and increased risk from threat actors, as it emerges its US government contract will lapse imminently

• April 15, 2025 15 Apr'25

  Hertz warns UK customers of Cleo-linked data breach

  Car hire giant Hertz reveals UK customer data was affected in a cyber incident orchestrated via a series of vulnerabilities in Cleo managed file transfer products

• April 15, 2025 15 Apr'25

  The Investigatory Powers Tribunal explained

  The Investigatory Powers Tribunal is a semi-secret judicial body that has made significant legal rulings on privacy, surveillance and the use of investigatory powers. What does it do and why is it important? 

• April 14, 2025 14 Apr'25

  Meta settles lawsuit over surveillance business model

  Meta settles lawsuit over use of personal data in targeted advertising, opening up the possibility of other UK users raising legal objections to its processing

• April 10, 2025 10 Apr'25

  Google bets on unifying security tools to ease CISO pain

  At Google Cloud Next in Las Vegas, Google launches its Unified Security platform with the goal of bringing together disparate security solutions to help cyber leaders and practitioners address their most keenly felt pain points

• April 10, 2025 10 Apr'25

  Spirit of openness helps banks get serious about stopping scams

  Recent announcements show that banks, financial services firms and IT companies are increasing efforts to curb online scams

• April 10, 2025 10 Apr'25

  Investigative reporter files legal action over police surveillance and social media monitoring

  Journalist complains to Investigatory Powers Tribunal after Northern Irish police placed him under surveillance as he investigated their handling of a high-profile death

• April 08, 2025 08 Apr'25

  Over £18m stolen from Santander UK customers in first three months of year

  Bank’s latest quarterly report on scams said over £18m was stolen from its UK customers by scammers

• April 08, 2025 08 Apr'25

  UK authority’s search for answers over deleted Julian Assange emails comes too late to retrieve data

  The Crown Prosecution Service has finally searched for information about the destruction of emails from the WikiLeaks founder’s lawyer – but too late to retrieve data about the deleted documents

• April 07, 2025 07 Apr'25

  NIST calls time on older vulnerabilities amid surging disclosures

  The National Institute of Standards and Technology is deferring future updates to thousands of cyber vulnerabilities discovered prior to 2018 amid surging volumes of new submissions

• April 07, 2025 07 Apr'25

  Court rejects Home Office bid for blanket secrecy in hearings over Apple encryption case

  Investigatory Powers Tribunal rejects Home Office arguments that identifying the ‘bare details’ of legal action by Apple would damage national security, leaving open possibility of future open court hearings

• April 04, 2025 04 Apr'25

  Norway and Nordic financial sector ramps up cyber security

  Finans Norge sets up cyber security unit CTSU to support the finance sector in Norway amid increasing threats

• April 01, 2025 01 Apr'25

  Apple devices are at ‘most risk’ in UK following government ‘backdoor’ order

  Home Office refuses to answer questions from Lords over technical capability notice issued against Apple’s iCloud Advanced Data Protection encryption services

• March 31, 2025 31 Mar'25

  Top 1,000 IT service providers in scope of UK cyber bill

  The government’s proposed Cyber Security and Resilience Bill is set to include regulatory provisions covering both datacentre operators and larger IT service providers

• March 26, 2025 26 Mar'25

  Advanced Software fined £3m over LockBit attack

  The ICO has issued a £3m fine to software provider Advanced in the wake of security failings that led to significant disruption to NHS customers in a ransomware attack

• March 26, 2025 26 Mar'25

  Military AI caught in tension between speed and control

  The use of artificial intelligence in military contexts can unlock a range of benefits for defence organisations, but also highlights a clear tension between speed and control baked into the technology

• March 25, 2025 25 Mar'25

  ETSI launches first post-quantum encryption standard

  European telco standards body launches its first post-quantum cryptography cyber standard, covering the security of critical data and communications

• March 20, 2025 20 Mar'25

  NCSC proposes three-step plan to move to quantum-safe encryption

  The NCSC urges service providers, large organisations and critical sectors to start thinking today about how they will migrate to post-quantum cryptography over the next decade

• March 19, 2025 19 Mar'25

  Clop resurgence drives ransomware attacks in February

  The exploitation of two new vulnerabilities in a popular file transfer service saw the Clop ransomware gang soar in February, according to NCC

• March 18, 2025 18 Mar'25

  Seaco charts course for unified security strategy

  Shipping container leasing giant consolidates security tools onto a single platform, leveraging AI and extended detection and response to improve security operations

• March 17, 2025 17 Mar'25

  Online Safety Act measures come into effect

  Regulator Ofcom is now able to take enforcement action against platforms under the Online Safety Act if they fail to proactively safeguard against content such as terrorist or child sexual abuse material

• March 17, 2025 17 Mar'25

  How Oracle is using AI to combat financial crime

  The tech giant is leveraging artificial intelligence to surface fraudulent financial transactions and improve the efficiency of financial crime investigations, offering relief to banks battling high costs and alert fatigue

• March 14, 2025 14 Mar'25

  Apple encryption legal challenge heard behind closed doors despite calls for public hearing

  Investigatory Powers Tribunal hearing held behind closed doors as press and civil society groups argue for open hearings

• March 13, 2025 13 Mar'25

  US Congress demands UK lifts gag on Apple encryption order

  Apple and Google have told US lawmakers that they cannot tell Congress whether they have received technical capability notices from the UK

• March 11, 2025 11 Mar'25

  Dutch police disrupt half of ransomware operations, finds embedded PHD student

  Dutch PhD study reveals the impact of centralised intelligence and strategic interventions in the fight against ransomware

• March 11, 2025 11 Mar'25

  Secret London tribunal to hear appeal in Apple vs government battle over encryption

  Campaigners call for High Court hearing to be held in public as tech giant appeals against UK government order to open a backdoor into its encrypted iCloud service

• March 11, 2025 11 Mar'25

  UK government under-prepared for catastrophic cyber attack, hears PAC

  The Commons Public Accounts Committee heard government IT leaders respond to recent National Audit Office findings that the government’s cyber resilience is under par

• March 11, 2025 11 Mar'25

  Post Office scandal data leak interim compensation offers made

  Some subpostmasters affected by Post Office data breach offered interim compensation payments

• March 06, 2025 06 Mar'25

  CFIT publishes blueprint for digital company business IDs

  Plan to increase the use of digital identities by businesses could add billions of pounds to UK economy through compliance savings and reduced fraud

• March 05, 2025 05 Mar'25

  Apple IPT appeal against backdoor encryption order is test case for bigger targets

  The Home Office decision to target Apple with an order requiring access to users’ encrypted data is widely seen as a ‘stalking horse’ for attacks against encrypted messaging services WhatsApp, Telegram and Signal

• March 05, 2025 05 Mar'25

  NHS investigating how API flaw exposed patient data

  NHS patient data was left vulnerable by a flaw in an application programming interface used at online healthcare provider Medefer

• March 04, 2025 04 Mar'25

  Aussie businesses ramp up security spending

  Australian organisations are set to spend A$6.2bn on security and risk management in 2025, a 14.4% jump from the previous year, driven by the rise of AI and a growing threat landscape