News

Regulatory compliance and standard requirements

• June 01, 2023 01 Jun'23

  Met Police director of intelligence defends facial recognition

  The Met Police’s director of intelligence has appeared before MPs to make the case for its continuing use of facial-recognition technology, following announcements from the force and the Home Office that they intend to press on with its adoption

• May 30, 2023 30 May'23

  Downstream breaches of Capita customers spreading

  As many as 90 organisations that used Capita services have now reported data breaches arising from various security incidents at the outsourcer

• May 26, 2023 26 May'23

  Cisco joins growing Manchester cyber security hub

  Networking kingpin signs up to Greater Manchester Digital Security Hub to support centre’s work on security resilience and skills

• May 25, 2023 25 May'23

  Cabinet Office publishes response to data sharing for digital ID consultation

  The majority of respondents to government’s consultation on data sharing for digital identity are critical to the plans and concerned about data privacy, but Whitehall’s response says many of the responses ‘were driven by anti-digital commentaries’

• May 24, 2023 24 May'23

  Almost all ransomware attacks target backups, says Veeam

  Some 93% of ransomware attacks go for backups and most succeed, with 60% of those attacked paying the ransom, according to a Veeam survey

• May 24, 2023 24 May'23

  Kuwait bank introduces biometric payments card

  Middle East bank launches payment cards with fingerprint sensor technology embedded

• May 23, 2023 23 May'23

  Cohesity Turing aims AI tools at backup and ransomware

  Backup supplier continues to enrich its ecosystem with more artificial intelligence for backup and ransomware, with chat-like reporting functions and new security partners in its alliance

• May 22, 2023 22 May'23

  Facebook owner Meta fined record €1.2 billion over EU-US data transfers

  Decision could have implications for other companies using Standard Contractual Clauses to share data between Europe and the US

• May 12, 2023 12 May'23

  Let’s put an end to secrecy and cover-ups in ransomware attacks

  The NCSC and the ICO are calling for organisations to bite the bullet and be more open about cyber security and ransomware incidents, and the community is firmly behind them

• May 11, 2023 11 May'23

  Australia to shore up cyber and digital capabilities in Budget 2023

  Australia is spending more than A$2bn to strengthen cyber resilience, improve digital government services and fuel AI adoption, among other areas, in its latest budget

• May 11, 2023 11 May'23

  Journalists’ confidential communications subject to unlawful spying, court hears

  Campaign group Liberty and the National Union of Journalists tell Court of Appeal the government has not gone far enough to protect confidential journalist information and sources from surveillance

• May 10, 2023 10 May'23

  Black Basta ransomware attack to cost Capita over £15m

  Exceptional costs arising from the March 2023 Black Basta ransomware attack on the systems of outsourcer Capita will be somewhere between £15m and £20m, the organisation says

• May 09, 2023 09 May'23

  OVHcloud aims to bring Glacier-like cloud archive to Europe

  OVHcloud makes Cold Archive GA with deep archive storage cheaper than AWS’s offer and all based on IBM 3592 tape hardware spread across four sites with Atempo backup

• May 08, 2023 08 May'23

  Chat control: EU lawyers warn plans to scan encrypted messages for child abuse may be unlawful

  Leaked legal advice warns that European ‘chat control’ proposals to require tech companies to scan private and encrypted messages for child abuse are likely to breach EU law

• May 05, 2023 05 May'23

  Capita pension clients told data may have leaked

  Capita has told trustees of some of the pension funds for which it provides outsourced services that their customer data may have been stolen by the Black Basta ransomware operation

• May 05, 2023 05 May'23

  Santander reports increase in scams and admits fraud head was impersonated

  Santander has reported an increase in impersonation scams, and admitted its own head of fraud was impersonated by a fraudster

• May 03, 2023 03 May'23

  Cyber Action Plan for Wales launched

  The devolved Welsh government has set out four priorities in an action plan designed to foster cyber resilience, talent and innovation across the country

• May 03, 2023 03 May'23

  Government anti-fraud strategy targets the tech behind the scams

  The UK government’s anti-fraud strategy proposes to make it much harder for criminals to target their victims by cracking down on the exploitation of technology

• May 03, 2023 03 May'23

  US competition watchdog issues generative AI warning

  Generative AI can be used to manipulate people into making harmful decisions, says US Federal Trade Commission in warning to firms building and using AI-powered tools

• May 02, 2023 02 May'23

  UK Cyber Security Council launches certification mapping tool

  Cyber careers body aims to offer clarity for professionals seeking to advance through security certification

• April 28, 2023 28 Apr'23

  Government is playing ‘psychic war’ in battle over end-to-end encryption

  Peers hear that the UK government is being deliberately ambiguous about its plans to require technology companies to scan the content of encrypted messages

• April 26, 2023 26 Apr'23

  Police Scotland receive formal notice about cloud system

  Scotland’s biometrics watchdog has issued Police Scotland with an information notice over its deployment of a cloud-based digital evidence system, following disclosure of major data protection concerns by Computer Weekly

• April 25, 2023 25 Apr'23

  CISOs under-supported, under pressure, Trellix finds

  The vast majority of CISOs say they are finding it difficult to get sign-off on the resources they need to do their job

• April 25, 2023 25 Apr'23

  How non-fungible tokens can be used to manage health data

  Non-fungible tokens will give patients more ownership and control over their health data and improve its transparency in healthcare research, according to SingHealth clinicians

• April 24, 2023 24 Apr'23

  Most IT staff uncomfortable deploying surveillance tech at work

  The IT teams responsible for deploying and running digital surveillance in workplaces say they are uncomfortable with “extremely common” practice of spying on colleagues, research finds

• April 21, 2023 21 Apr'23

  UK biometrics watchdog questions police cloud deployments

  The UK biometrics commissioner has warned that policing and justice bodies must be able to demonstrate ‘immediately and unequivocally’ that their cloud deployments are lawful

• April 21, 2023 21 Apr'23

  CyberUK 23: New advice on smart city security issued

  The NCSC and key allies have drawn up new guidance to help communities balance the cyber security risks involved with creating smart cities

• April 20, 2023 20 Apr'23

  Online Safety Bill could pose risk to encryption technology used by Ukraine

  CEO of encrypted messaging service Element says Online Safety Bill could pose a risk to the encrypted comms systems used by Ukraine

• April 20, 2023 20 Apr'23

  New GovAssure cyber regime launches across UK government

  An enhanced cyber security regime is being put in place to better protect UK government IT systems from growing threats

• April 19, 2023 19 Apr'23

  UK plc sees fewer cyber breaches and attacks, but lacks resilience

  Latest government figures reveal UK businesses and charities reported lower volumes of cyber breaches and attacks over the past 12 months, but the statistics mask widespread underreporting and the true state of cyber readiness and resilience appears...

• April 19, 2023 19 Apr'23

  Surrey and Sussex police spared fines after recording 200,000 phone calls without people’s knowledge

  Police forces escape potential £1m fines following change of policy by ICO to protect the finances of public sector bodies

• April 19, 2023 19 Apr'23

  CyberUK 23: NCSC launches Cyber Advisor service for SMEs

  The UK’s NCSC has launched an industry assurance scheme designed to address the needs of SMEs, and is calling for potential advisors to step up and help out

• April 19, 2023 19 Apr'23

  Global finance firms take part in NATO cyber attack simulation

  Global financial services organisations take part in NATO annual event which simulates cyber attacks on critical infrastructure

• April 18, 2023 18 Apr'23

  CyberUK 23: NCSC conference centres cyber collaboration

  The NCSC’s annual CyberUK conference gets underway in Belfast this week, with collaboration and cooperation high on the agenda

• April 18, 2023 18 Apr'23

  Focus on these three risky behaviours to boost cloud security

  Some 80% of cloud security alerts are triggered by just 5% of security rules. Security teams can substantially improve their resilience by zeroing in on a small set of risky behaviours, according to a report

• April 18, 2023 18 Apr'23

  UK presses on with post-Brexit data protection reform

  The revised version of the Data Protection and Digital Information Bill has had its second reading in Parliament as the government presses on with post-Brexit changes, but critics remain sceptical that the EU will be convinced to maintain the UK's ...

• April 17, 2023 17 Apr'23

  Charity data stolen in ransomware attack on supplier

  A number of charities in Ireland and the UK have had their data compromised following a ransomware attack on an IT supplier

• April 13, 2023 13 Apr'23

  UK joins key allies to launch secure-by-design guidelines

  The UK has joined international partners in sharing new advice to help technology companies embed security into the product design and development process

• April 12, 2023 12 Apr'23

  UK police double down on ‘improved’ facial recognition

  The Met and South Wales Police have doubled down on their use of facial recognition technology after research found improved accuracy in their algorithms when using certain settings, but civil society groups maintain that the tech will still be used...

• April 12, 2023 12 Apr'23

  April Patch Tuesday fixes zero-day used to deliver ransomware

  A zero-day in the Microsoft Common Log File System that has been abused by the operator of the Nokoyawa ransomware is among 97 vulnerabilities fixed in April’s Patch Tuesday update

• April 12, 2023 12 Apr'23

  Okta integrates with Singapore’s national digital ID system

  The integration with Singpass will let Okta customers authenticate consumers using Singapore’s national digital ID system and is expected to expand the company’s reach in regulated industries

• April 11, 2023 11 Apr'23

  Anne Keast-Butler named as new director of GCHQ

  The government has appointed current MI5 deputy director general Anne Keast-Butler to head signals and cyber agency GCHQ

• April 11, 2023 11 Apr'23

  KFC, Pizza Hut data stolen in January ransomware attack

  Yum!, the parent organisation behind KFC and Pizza Hut in the UK, has disclosed that employee data was accessed and exfiltrated in a January 2023 ransomware attack

• April 06, 2023 06 Apr'23

  IBM's Nataraj Nagaratnam on the cyber challenges facing cloud services

  Governments are introducing increasingly prescriptive data protection policies, but with organisations becoming ever more reliant on multiple cloud service platforms for essential business needs, how can they ensure they meet regulatory requirements?

• April 06, 2023 06 Apr'23

  Prioritise automated hardening over traditional cyber controls, says report

  A report from strategic risk specialist Marsh McLennan advises security buyers to funnel their budgets towards automated cyber security hardening techniques, saying they have a much better chance of reducing risk in a meaningful way

• April 05, 2023 05 Apr'23

  Italy’s ChatGPT ban: Sober precaution or chilling overreaction?

  Italy’s data protection authority issued a temporary ban on ChatGPT citing data protection concerns and alleged breaches of the GDPR. Is this a reasonable precaution, or a chilling restriction on personal freedoms?

• April 04, 2023 04 Apr'23

  TikTok fined in UK over unlawful use of children’s data

  The ICO has fined TikTok £12.7m for breaches of data protection law, including unlawfully collecting data on children under 13

• April 04, 2023 04 Apr'23

  National Cyber Force carrying out daily hacking operations to disrupt hostile threats

  Government discloses details about the National Cyber Force’s disruption activities against terrorists, organised criminals and nation states – and names first NCF chief as James Babbage

• April 03, 2023 03 Apr'23

  Australia’s media and telecoms sector saw most data breaches in 2022

  The media and telecoms industry accounted for the bulk of stolen credentials in Australia in 2022, underscoring the need to shore up the country’s cyber security posture

• March 30, 2023 30 Mar'23

  NCSC issues revised security Board Toolkit for business leaders

  National Cyber Security Centre calls on CEOs and senior business leaders to take a more hands-on approach to cyber resilience with the launch of revised board-level tools