News

Regulatory compliance and standard requirements

• May 29, 2025 29 May'25

  Gov.uk Wallet open to public sector bodies

  Government departments can soon begin to add documents to Gov.uk Wallet, as the Government Digital Service publishes guidance for public sector bodies on how to use the smartphone app

• May 28, 2025 28 May'25

  UK biometric surveillance exists in ‘legal grey area’

  The rapid proliferation of ‘biometric mass surveillance technologies’ throughout the UK’s public and private sectors is taking place without legal certainty or adequate safeguards for the public

• May 27, 2025 27 May'25

  Maturing UK fintechs increase tech and cyber security hiring

  Increased hiring reflects that fintechs are maturing and now require more cyber security and compliance experts

• May 21, 2025 21 May'25

  Strong fintech security posture at risk via third-party weak links

  Despite having a strong security posture, the financial technology sector could be open to attack via third parties

• May 19, 2025 19 May'25

  Chinese cyber spooks lure laid-off US government workers

  A Washington DC-based think tank has published evidence that Chinese intelligence services have been running a network of digital ‘front’ companies targeting laid-off government workers as recruits

• May 15, 2025 15 May'25

  NHS asks suppliers to sign up to cyber covenant

  NHS digital and security leaders call on their suppliers to commit to a cyber security charter as the health service works to improve its resilience in the face of growing threat levels

• May 15, 2025 15 May'25

  How close is quantum computing to commercial reality?

  At a recent event, experts explored the progress towards logical qubits and how these will be applied to empower business IT

• May 14, 2025 14 May'25

  Enisa launches European vulnerability database

  The EU’s new vulnerability database is designed to offer a broader, more transparent source of information on new cyber vulnerabilities

• May 14, 2025 14 May'25

  Why we must reform the Computer Misuse Act: A cyber pro speaks out

  Britain’s outdated hacking laws are leaving the UK’s cyber practitioners hamstrung and afraid. Security professional Simon Whittaker reveals how he nearly ran afoul of the Computer Misuse Act, and why he’s speaking out for reform

• May 14, 2025 14 May'25

  New security paradigm needed for IT/OT convergence

  Industry leaders and policymakers highlight growing cyber threats from the integration of IT and operational technology systems, calling for collaboration and regulatory frameworks to protect critical systems, among other measures

• May 13, 2025 13 May'25

  Australian data breaches hit record high in 2024

  More than 1,100 data breaches were reported in Australia last year, a 25% jump from 2023, prompting calls for stronger security measures across businesses and government agencies

• May 08, 2025 08 May'25

  Government will miss cyber resiliency targets, MPs warn

  A Public Accounts Committee report on government cyber resilience finds that the Cabinet Office has been working hard to improve, but is likely to miss targets and needs a fundamentally different approach

• May 08, 2025 08 May'25

  Preparing for post-quantum computing will be more difficult than the millennium bug

  The job of getting the UK ready for post-quantum computing will be at least as difficult as the Y2K problem, says National Cyber Security Centre CTO Ollie Whitehouse

• May 08, 2025 08 May'25

  US tells CNI orgs to stop connecting OT kit to the web

  US authorities have released guidance for owners of critical national infrastructure in the face of an undisclosed number of cyber incidents

• May 07, 2025 07 May'25

  Europe leads shift from cyber security ‘headcount gap’ to skills-based hiring

  Research from Sans Institute reveals European organisations are leading a global shift in hiring priorities, driven by regional regulatory frameworks

• May 07, 2025 07 May'25

  Oxford Uni adds cyber resilience module to MBA programme

  Oxford University’s Saïd Business School is working with cyber response specialist Sygnia to help future business leaders get on top of security

• May 07, 2025 07 May'25

  UK at risk of Russian cyber and physical attacks as Ukraine seeks peace deal

  UK cyber security chief warns of ‘direct connection’ between Russian cyber attacks and physical threats to the UK

• May 01, 2025 01 May'25

  Thomas Herdman’s legal battle over Sky ECC encrypted phone distribution set to enter fifth year

  Computer Weekly speaks to Julie Kawai Herdman, daughter of Thomas Herdman, the only person in custody for distributing Sky ECC encrypted phones

• April 30, 2025 30 Apr'25

  Current SaaS delivery model a risk management nightmare, says CISO

  JPMorgan Chase security chief Patrick Opet laments the state of SaaS security in an open letter to the industry and calls on software providers to do more to enhance resilience

• April 24, 2025 24 Apr'25

  Data breach class action costs mount up

  Organisations exposed to the US market paid out over $150m in class action settlements in just six months. Security leaders must do more to address cyber gaps, respond better to incidents and demonstrate compliance

• April 23, 2025 23 Apr'25

  Amid uncertainty, Armis becomes newest CVE numbering authority

  Amid an uncertain future for vulnerability research, exposure management company Armis has been given the authority to assign CVE IDs to newly discovered vulnerabilities

• April 23, 2025 23 Apr'25

  Qualys goes to bat for US cricket side San Francisco Unicorns

  Cloud security specialist Qualys partners with US T20 cricket squad San Francisco Unicorns and its Sparkle Army fanclub as the team prepares for its summer 2025 campaign

• April 22, 2025 22 Apr'25

  Investigatory Powers Tribunal has no power to award costs against PSNI over evidence failures

  Investigatory Powers Tribunal judges have called for the Home Secretary to step in after finding they have no powers to award costs against government bodies that fail to disclose evidence

• April 17, 2025 17 Apr'25

  Tariff turmoil is making supply chain security riskier

  Many businesses around the world are taking the decision to alter their supplier mix in the face of tariff uncertainty, but in doing so are creating more cyber risks for themselves, according to a report

• April 17, 2025 17 Apr'25

  Standard Chartered grounds AI ambitions in data governance

  The bank’s group chief data officer, Mohammed Rahim, outlines how the bank is modernising its data infrastructure and governance practices to support its AI initiatives

• April 16, 2025 16 Apr'25

  Footballers object to processing of performance data

  Football players are seeking to gain more control of their performance data through ‘stop processing’ requests, in an attempt to strike a better balance between firms’ commercial interests and the data rights of footballers

• April 16, 2025 16 Apr'25

  CISA extends Mitre CVE contract at last moment

  The US Cybersecurity and Infrastructure Security Agency has ridden to the rescue of the under-threat Mitre CVE Programme, approving a last-minute, 11-month contract extension to preserve the project’s vital security vulnerability work

• April 16, 2025 16 Apr'25

  CVE Foundation pledges continuity after Mitre funding cut

  With news that Mitre’s contract to run the world-renowned CVE Programme is abruptly terminating, a breakaway group is setting up a non-profit foundation to try to ensure the project’s continuity

• April 16, 2025 16 Apr'25

  Security leaders grapple with AI-driven threats

  Experts warn of AI’s dual role in both empowering and challenging cyber defences, and called for intelligence sharing and the need to strike a balance between AI-driven innovation and existing security practices

• April 15, 2025 15 Apr'25

  Mitre warns over lapse in CVE coverage

  Mitre, the operator of the world-renowned CVE repository, has warned of significant impacts to global cyber security standards, and increased risk from threat actors, as it emerges its US government contract will lapse imminently

• April 15, 2025 15 Apr'25

  Hertz warns UK customers of Cleo-linked data breach

  Car hire giant Hertz reveals UK customer data was affected in a cyber incident orchestrated via a series of vulnerabilities in Cleo managed file transfer products

• April 15, 2025 15 Apr'25

  The Investigatory Powers Tribunal explained

  The Investigatory Powers Tribunal is a semi-secret judicial body that has made significant legal rulings on privacy, surveillance and the use of investigatory powers. What does it do and why is it important? 

• April 14, 2025 14 Apr'25

  Meta settles lawsuit over surveillance business model

  Meta settles lawsuit over use of personal data in targeted advertising, opening up the possibility of other UK users raising legal objections to its processing

• April 10, 2025 10 Apr'25

  Google bets on unifying security tools to ease CISO pain

  At Google Cloud Next in Las Vegas, Google launches its Unified Security platform with the goal of bringing together disparate security solutions to help cyber leaders and practitioners address their most keenly felt pain points

• April 10, 2025 10 Apr'25

  Spirit of openness helps banks get serious about stopping scams

  Recent announcements show that banks, financial services firms and IT companies are increasing efforts to curb online scams

• April 10, 2025 10 Apr'25

  Investigative reporter files legal action over police surveillance and social media monitoring

  Journalist complains to Investigatory Powers Tribunal after Northern Irish police placed him under surveillance as he investigated their handling of a high-profile death

• April 08, 2025 08 Apr'25

  Over £18m stolen from Santander UK customers in first three months of year

  Bank’s latest quarterly report on scams said over £18m was stolen from its UK customers by scammers

• April 08, 2025 08 Apr'25

  UK authority’s search for answers over deleted Julian Assange emails comes too late to retrieve data

  The Crown Prosecution Service has finally searched for information about the destruction of emails from the WikiLeaks founder’s lawyer – but too late to retrieve data about the deleted documents

• April 07, 2025 07 Apr'25

  NIST calls time on older vulnerabilities amid surging disclosures

  The National Institute of Standards and Technology is deferring future updates to thousands of cyber vulnerabilities discovered prior to 2018 amid surging volumes of new submissions

• April 07, 2025 07 Apr'25

  Court rejects Home Office bid for blanket secrecy in hearings over Apple encryption case

  Investigatory Powers Tribunal rejects Home Office arguments that identifying the ‘bare details’ of legal action by Apple would damage national security, leaving open possibility of future open court hearings

• April 04, 2025 04 Apr'25

  Norway and Nordic financial sector ramps up cyber security

  Finans Norge sets up cyber security unit CTSU to support the finance sector in Norway amid increasing threats

• April 01, 2025 01 Apr'25

  Apple devices are at ‘most risk’ in UK following government ‘backdoor’ order

  Home Office refuses to answer questions from Lords over technical capability notice issued against Apple’s iCloud Advanced Data Protection encryption services

• March 31, 2025 31 Mar'25

  Top 1,000 IT service providers in scope of UK cyber bill

  The government’s proposed Cyber Security and Resilience Bill is set to include regulatory provisions covering both datacentre operators and larger IT service providers

• March 26, 2025 26 Mar'25

  Advanced Software fined £3m over LockBit attack

  The ICO has issued a £3m fine to software provider Advanced in the wake of security failings that led to significant disruption to NHS customers in a ransomware attack

• March 26, 2025 26 Mar'25

  Military AI caught in tension between speed and control

  The use of artificial intelligence in military contexts can unlock a range of benefits for defence organisations, but also highlights a clear tension between speed and control baked into the technology

• March 25, 2025 25 Mar'25

  ETSI launches first post-quantum encryption standard

  European telco standards body launches its first post-quantum cryptography cyber standard, covering the security of critical data and communications

• March 20, 2025 20 Mar'25

  NCSC proposes three-step plan to move to quantum-safe encryption

  The NCSC urges service providers, large organisations and critical sectors to start thinking today about how they will migrate to post-quantum cryptography over the next decade

• March 19, 2025 19 Mar'25

  Clop resurgence drives ransomware attacks in February

  The exploitation of two new vulnerabilities in a popular file transfer service saw the Clop ransomware gang soar in February, according to NCC

• March 18, 2025 18 Mar'25

  Seaco charts course for unified security strategy

  Shipping container leasing giant consolidates security tools onto a single platform, leveraging AI and extended detection and response to improve security operations

• March 17, 2025 17 Mar'25

  Online Safety Act measures come into effect

  Regulator Ofcom is now able to take enforcement action against platforms under the Online Safety Act if they fail to proactively safeguard against content such as terrorist or child sexual abuse material