News

Regulatory compliance and standard requirements

• October 24, 2022 24 Oct'22

  Complacency biggest cyber risk to UK plc, says ICO

  Information commissioner John Edwards warns against complacency as his office issues a multimillion-pound fine to a building company that failed to prevent a ransomware attack

• October 20, 2022 20 Oct'22

  NatWest data breach whistleblower demands bank pay data controller fee to ICO

  Whistleblower calls for NatWest to pay the Information Commissioner’s Office annual data controller fee, as the personal details of 1,600 current and former NatWest customers remain under her bed

• October 20, 2022 20 Oct'22

  Singapore extends cyber security labelling scheme to medical devices

  The Cyber Security Agency of Singapore is extending its cyber security labelling scheme to medical devices to encourage medical device manufacturers to adopt a security-by-design approach to product development

• October 19, 2022 19 Oct'22

  Treat cyber crime as a ‘strategic threat’, UK businesses told

  The government’s new National Cyber Advisory Board aims to help elevate cyber discussion and spur action in the business community

• October 14, 2022 14 Oct'22

  Annual costs of Hackney ransomware attack exceed £12m

  Hackney Council reveals new insight into the ongoing cost of a ransomware attack that devastated its systems two years ago

• October 14, 2022 14 Oct'22

  Protecting children by scanning encrypted messages is ‘magical thinking’, says Cambridge professor

  Ross Anderson argues in a rebuttal to GCHQ experts that using artificial intelligence to scan encrypted messaging services is the wrong approach to protecting children and preventing terrorism

• October 13, 2022 13 Oct'22

  Dutch influence standards for post-quantum cryptography

  Cryptology group at Dutch research institute is involved in the two primary algorithms of the next NIST portfolio comprising four new standards

• October 12, 2022 12 Oct'22

  French Supreme Court rejects EncroChat verdict after lawyers question secrecy over hacking operation

  France’s Supreme Court has sent a case back to the court of appeal after police failed to disclose technical details of EncroChat hacking operation

• October 12, 2022 12 Oct'22

  ICO selectively discloses reprimands for data protection breaches

  Data protection experts question ICO’s selective approach to publishing formal reprimands for contravening the law, after FoI request reveals the Cabinet Office was among the organisations reprimanded

• October 10, 2022 10 Oct'22

  Ukraine and EU explore deeper cyber collaboration

  A Ukrainian delegation has met with officials from the EU’s ENISA cyber agency to explore deeper cooperation on cyber security issues

• October 07, 2022 07 Oct'22

  Australia to amend telecoms regulations following Optus breach

  Amendments to Australia’s telecoms regulations are in the works to temporarily allow sharing of individuals’ identifier information between telcos and financial institutions

• October 06, 2022 06 Oct'22

  EU rolling out measures for online safety and AI liability

  The European Council has approved the passage of the Digital Services Act to protect people’s rights online, while the European Commission has announced proposals to help those negatively affected by artificial intelligence to claim compensation

• October 06, 2022 06 Oct'22

  Proposals for scanning encrypted messages should be cut from Online Safety Bill, say researchers

  Automatic scanning of messaging services for illegal content could lead to one billion false alarms each day in Europe

• October 05, 2022 05 Oct'22

  Italian Supreme Court calls for prosecutors to disclose information on Sky ECC hacking operation

  Italy’s Supreme Court says Italian prosecutors and police should disclose information on how they obtained intercepted messages from the Sky ECC cryptophone network

• October 05, 2022 05 Oct'22

  Inside Dell Technologies’ zero-trust approach

  Dell Technologies’ zero-trust reference model starts with defining business controls and having a central control plane that manages all the security aspects of an organisation’s infrastructure

• October 04, 2022 04 Oct'22

  Tories to replace GDPR

  IT industry reacts to the government’s plan to replace the pan-European data protection regulation

• October 04, 2022 04 Oct'22

  France extradites Spanish EncroChat cryptophone distributors for complicity with organised crime

  Three phone sellers have been extradited from Spain to France to face charges that they were complicit in the activities of criminal EncroChat phone users  

• October 03, 2022 03 Oct'22

  Security regulation cuts online payment fraud at 73% of retailers

  New online payments security standard, Strong Customer Authentication (SCA), sees immediate fall in fraudulent payments to retailers

• October 03, 2022 03 Oct'22

  CIO interview: James Fleming, Francis Crick Institute

  Francis Crick Institute CIO discusses how Europe’s largest biomedical research institute has co-developed a framework for data sharing

• September 29, 2022 29 Sep'22

  Failure of Russia’s cyber attacks on Ukraine is most important lesson for NCSC

  Russia has so far failed in its attempts to destabilise Ukraine through cyber attacks due to strength of Ukrainian, security industry and international efforts

• September 29, 2022 29 Sep'22

  Optus breach casts spotlight on cyber resilience

  The massive data breach that affected more than 10 million Optus customers has cast the spotlight on API security and other factors that contribute to the cyber resilience of organisations in Australia

• September 28, 2022 28 Sep'22

  Whistleblower Peter Duffy calls for oversight of NHS records to prevent evidence tampering

  A whistleblower has called for greater oversight in the handling of ‘safety-critical digital information’ across the NHS, in light of a number of cases that raise questions about data governance and record-keeping within the health service

• September 28, 2022 28 Sep'22

  Data protection in Finland, four years after GDPR came into force

  Data privacy has always been a big concern in Finland, so the country naturally has a lot to say about the General Data Protection Regulation four years on

• September 26, 2022 26 Sep'22

  More than 30 startups to join Plexal’s Cyber Runway accelerator

  Now in its second year, the Cyber Runway accelerator has been designed to support firms at various stages of growth, as well as help the cyber security sector to improve on its diversity, inclusion and regional representation

• September 23, 2022 23 Sep'22

  NCA ‘deliberately concealed’ information when it applied for EncroChat warrants, tribunal hears

  Investigatory Powers Tribunal hears that the National Crime Agency made ‘serious and fundamental errors’

• September 22, 2022 22 Sep'22

  Nordic private equity firms pursue cyber security acquisitions

  Increasing interest in the security sector from Nordic private equity firms is a reflection of growing threats and increasing enterprise security budgets

• September 22, 2022 22 Sep'22

  Privacy Pledge signatories dream of alternative internet

  A group of privacy-focused organisations have come together to establish a set of principles for taking the internet back from big tech and surveillance capitalism

• September 20, 2022 20 Sep'22

  Thousands of customers affected in Revolut data breach

  Digital challenger bank has warned its customers to be vigilant after their data was exposed in a cyber attack

• September 15, 2022 15 Sep'22

  New player pioneers ‘active cyber insurance’ for UK market

  Arrival of US-based insurer Coalition in London will supposedly offer SMEs more options when it comes to cyber security insurance

• September 15, 2022 15 Sep'22

  Organisations failing to account for digital trust

  The vast majority of businesses are well aware of the importance of digital trust, yet very few have a dedicated staff role responsible for it, report finds

• September 14, 2022 14 Sep'22

  Ex-CISA head Krebs: Disrupt ransomware support networks to win the war

  Speaking at an event hosted by data protection specialist Rubrik, former CISA director Chris Krebs calls for the security community to work collectively to kick out the supports from under ransomware gangs

• September 14, 2022 14 Sep'22

  DDoS attacks on UK financial sector surged during Ukraine war

  A quarter of cyber security incidents reported to the Financial Conduct Authority in the first six months of 2022 involved DDoS, with a likely link to events in Ukraine

• September 13, 2022 13 Sep'22

  Blancco works with charity to provide IT for African schools

  Blancco is providing data sanitisation and erasure software to The Turing Trust so that old IT equipment can be securely reused by school children in Sub-Saharan Africa, instead of adding to world’s growing e-waste problem

• September 12, 2022 12 Sep'22

  CISOs should spend on critical apps, cloud, zero-trust, in 2023

  Faced with a global recession next year, security buyers should try to direct investment towards technology that protects customer-facing and revenue-generating workloads, say analysts

• September 08, 2022 08 Sep'22

  NCSC CyberUK event heads to Belfast in 2023

  National Cyber Security Centre’s annual CyberUK roadshow is crossing the Irish Sea to Belfast in April 2023

• September 08, 2022 08 Sep'22

  Dutch cyber security organisations to join forces

  Cyber security organisations in the Netherlands are going to merge into a single central expertise centre and information hub, which all organisations in the country will soon be able to tap into

• September 08, 2022 08 Sep'22

  India’s wake-up call on health data privacy

  Health app developers and industry watchers in India are keeping an eye on data privacy following the reversal of the Roe vs Wade ruling in the US

• September 07, 2022 07 Sep'22

  Prince’s Trust teams with threat management specialist in skills push

  Prince’s Trust hopes to address shortfall in cyber professionals and improve diversity in the industry

• September 07, 2022 07 Sep'22

  Cyber threats to Europe’s grid: Utilities rethink strategy

  The separation of operational and information technology at utilities across Europe is opening doors for cyber criminals

• September 07, 2022 07 Sep'22

  Digital identity is key to coping with surge in air travel

  The International Air Transport Association’s One ID digital identity initiative will pave the way for seamless air travel from curb to gate and help airports cope with growing passenger traffic

• September 06, 2022 06 Sep'22

  Campaigners call on Truss to change UK’s archaic hacking laws

  The CyberUp coalition, a campaign to reform the Computer Misuse Act, has called on Liz Truss to push ahead with needed changes to protect cyber pros from potential prosecution

• September 06, 2022 06 Sep'22

  Saudi Arabian organisations choose to outsource to improve cyber security posture

  Overwhelmed by rising threats and a growing number of government mandates, many organisations in Saudi Arabia are looking for outside help to take care of cyber security

• September 01, 2022 01 Sep'22

  Local authorities experience 10,000 attempted cyber attacks every day

  Local authorities across the UK face a daily deluge of cyber incidents, with phishing and DDoS attacks the most prevalent, according to an insurance broker

• September 01, 2022 01 Sep'22

  Swedish Electronics Protection Act coincides with major cyber spend

  Swedish cyber security law comes at a time of heavy government investment

• September 01, 2022 01 Sep'22

  New (ISC)² cyber careers schemes go live

  (ISC)² has opened up two new global cyber careers schemes to applicants to try to help organisations fill 2.7 million vacant roles worldwide

• August 31, 2022 31 Aug'22

  Google debuts open source bug bounty programme

  Google is calling on hackers to take pot-shots at its open source projects for the first time through a new vulnerability research programme

• August 31, 2022 31 Aug'22

  Four years into GDPR, Norway hopes for safer data transfer to US

  Much of the data on the internet ends up on US servers at some point, and that is not always compatible with the General Data Protection Regulation, says Norwegian data protection authority

• August 30, 2022 30 Aug'22

  UK government presses on with new cyber rules for telcos

  Government has finalised new security rules for telecoms companies and will move to make them binding in the near future

• August 25, 2022 25 Aug'22

  CIOs: Geopolitics impacts your IT strategy

  Research from analyst Gartner illustrates how geopolitics is influencing IT strategies

• August 25, 2022 25 Aug'22

  Security pros fret about stress and promotion over cyber attacks

  CIISec’s annual report on the state of the security profession reveals some home truths for security leaders