News

Regulatory compliance and standard requirements

September 06, 2019 06 Sep'19
Data-driven marketing, the real risk boards are missing

Boards need to act to break the cycle of privacy compliance failures, and shift focus to aligning business purpose with privacy and dealing with the real risk of data driven marketing, warns PwC’s GDPR and data protection lead
September 06, 2019 06 Sep'19
Australia government to chart 2020 cyber security strategy

Australia’s home affairs ministry has released a discussion paper to seek views from all segments of society on the country’s next cyber security blueprint
September 05, 2019 05 Sep'19
Security pros doubt officials can enact effective security laws

Elected officials cannot be trusted to enact effective cyber security legislation and social media firms should be subject to strict privacy regulation, according to most information security professionals in a survey
September 05, 2019 05 Sep'19
Tide Foundation aims to boost password security

While passwordless security remains just out of reach, a non-profit organisation has developed a mechanism that it says makes passwords exponentially more difficult to crack

September 05, 2019 05 Sep'19
Latest Facebook security lapse exposes millions to account hijack

18 million UK users are among the more than 400 million at risk of account hijacking after phone numbers linked to their Facebook accounts were found in an open online database
September 03, 2019 03 Sep'19
CISOs think cloud safer, but security fears remain

The majority of information security leaders think cloud is now safer than on-premise, but security fears remain, with recently breached and highly regulated organisations most concerned, poll reveals
August 29, 2019 29 Aug'19
Finland’s security agencies collaborate after cyber attacks

National Bureau of Investigations and National Cyber Security Centre aim to increase expertise and capability to defend Finland’s critical IT infrastructure
August 23, 2019 23 Aug'19
Kaspersky eyes enterprise business, opens APAC transparency hub

The security firm wants to engage with enterprises and use its newly launched Malaysian Transparency Centre to burnish its credentials
August 22, 2019 22 Aug'19
A helping hand from the Nordics in the eye of the GDPR storm

Nordic IT companies are well suited to supporting enterprises in their data protection projects, even though openness is more natural to them
August 22, 2019 22 Aug'19
Tech firms join forces to boost cloud security

Top tech firms are to collaborate on open source technologies, tools, frameworks and standards that accelerate the adoption of confidential computing to boost security in cloud and edge computing

August 16, 2019 16 Aug'19
ICO to probe facial recognition at King’s Cross

UK privacy watchdog is to investigate whether the use of live facial recognition technology at King’s Cross complies with data protection laws
August 15, 2019 15 Aug'19
Australia needs to get digital identity right

A top Ping Identity executive urges Australia to put more focus on digital identity management following the government’s efforts to lay the groundwork for an open banking regime
August 15, 2019 15 Aug'19
2019 set to be another record year for data breaches

The number of data breach incidents continues to rise and looks set to reach another record this year, with the business sector first in the firing line, according to a mid-year breach report
August 15, 2019 15 Aug'19
Melbourne researchers uncover privacy lapses in transport dataset

A team of University of Melbourne researchers has been able to re-identify individuals from a public transport dataset, raising serious privacy, safety and security issues
August 14, 2019 14 Aug'19
DCMS funding aims to increase diversity in cyber sector

A funding round has been announced as part of the Cyber Skills Immediate Impact Fund (CSIIF) with aims of encouraging more diverse talent into the UK’s cyber security sector
August 14, 2019 14 Aug'19
GDPR faces growing pains across Europe

The General Data Protection Regulation is over a year old now, but it faces challenges across Europe where compliance has taken place at different speeds
August 14, 2019 14 Aug'19
Digital domain identified as major security threat by Norway’s intelligence service

Norway's intelligence services has revealed the extent of the threat posed to the country by cyber attacks
August 14, 2019 14 Aug'19
UK finance regulator gives extra time for companies to meet payment security rules

Financial Conduct Authority gives companies under its watch an extra 18 months to meet an EU payments security standard
August 14, 2019 14 Aug'19
British Airways e-ticketing system could expose passenger details

British Airways has not addressed a potential leak of passenger details despite warnings from security researchers, but says it is aware of the issue and is taking action
August 13, 2019 13 Aug'19
Breach cost $53m in Q2, says Desjardins

Credit union cooperative Desjardins reveals that a data breach in June cost the company $53m in the second quarter, but that could be just the start, warn industry commentators
August 13, 2019 13 Aug'19
UK businesses still overlooking human element in security

Most UK businesses are still failing to address the human element in cyber security as part of an integrated approach, exposing themselves unnecessarily to cyber criminal attacks, a study shows
August 12, 2019 12 Aug'19
South Wales Police starts facial recognition trial despite opposition

The use of the facial recognition app by South Wales Police marks the latest deployment of controversial facial recognition technology by police forces in the UK
August 07, 2019 07 Aug'19
Southeast Asian ‘white hat’ urges more countries to sign the Paris Call

A renowned ethical hacker in Malaysia has called for more nations to support the Paris Call for Trust and Security in Cyberspace to counter the threat of cyber warfare
August 06, 2019 06 Aug'19
ICO joins international call for transparency around Facebook’s Libra currency

Data protection regulators from around the world have signed a statement raising privacy concerns about Libra
August 01, 2019 01 Aug'19
Facebook asked to explain discrepancies in evidence over Cambridge Analytica

DCMS Committee chairman asks Facebook to clarify what it knew about Cambridge Analytica’s use of its data and when
August 01, 2019 01 Aug'19
GDPR taken more seriously after first fines

Security professionals believe the first big fines under the General Data Protection Regulation will get organisations to take the new rules more seriously, but will not necessarily change policies or practices
August 01, 2019 01 Aug'19
Leaked Sephora databases peddled on dark web

Cyber security firm finds two databases likely to be related to the Sephora data breach that affected online customers in Southeast Asia, Australia and New Zealand
July 31, 2019 31 Jul'19
Cisco pays $8.6m after whistleblower discloses security flaws in video surveillance system

James Glenn, a video surveillance expert working for a Cisco reseller in Denmark, alerted Cisco to security faults and stands to gain a share of a multimillion-dollar settlement with the US government
July 30, 2019 30 Jul'19
Australian firms grappling with “train-smash” of security legislation

While businesses should avoid going into checkbox compliance mode, the constant flux of regulations on cyber security and privacy has led to calls for more legislative coherence from regulators
July 29, 2019 29 Jul'19
ICO selects first innovation Sandbox participants

UK privacy watchdog has chosen the first firms to take part in its Sandbox programme aimed at developing innovative and beneficial products and services that are privacy compliant
July 25, 2019 25 Jul'19
F-Secure talks up threat-hunting to stay ahead of cyber attacks in APAC

Cyber security firm calls for organisations to double up on threat-hunting now that nearly all attack and reconnaissance traffic is automated
July 25, 2019 25 Jul'19
Facebook shrugs off $5bn fine, reports strong quarter

Investors responded positively after social networking firm reported better-than-expected second-quarter results after budgeting for FTC fine, but the company faces a further antitrust investigation
July 24, 2019 24 Jul'19
Zuckerberg responsible for Facebook privacy compliance after $5bn FTC fine

Facebook pays record fine after breaching users’ privacy, following settlements with Federal Trade Commission and Securities and Exchange Commission
July 24, 2019 24 Jul'19
Controversial ‘immigration exemption’ used in 60% of cases

The UK government has used a controversial GDPR opt-out in response to the majority of its immigration-related data requests since the start of 2019, the High Court has heard
July 23, 2019 23 Jul'19
Phishing attack highlights cyber security need at universities

UK university cyber security is once again under the spotlight after Lancaster University reveals that it has been targeted by a phishing attack used to send fake invoices
July 23, 2019 23 Jul'19
Almost a third of European firms still not compliant with GDPR

Almost a third of European businesses admit they are still not compliant with the EU’s General Data Protection Regulation, but there are encouraging signs of increased maturity in data protection, with the new rules driving better, ...
July 23, 2019 23 Jul'19
High Court to hear challenge to immigration exemption in DPA

The High Court is to hear a challenge by two human rights groups of a controversial clause in new UK data protection legislation they say is in conflict with the EU’s Charter of Fundamental Rights and undermines the General Data Protection Regulation
July 19, 2019 19 Jul'19
Latest ICO fine highlights privacy due diligence

A week after issuing the first serious GDPR fines, the ICO has further underlined the importance of data stewardship and due diligence regarding privacy practices
July 19, 2019 19 Jul'19
MPs warn of data adequacy hole in no-deal Brexit

Transferring data to and from the EU will only be possible if an agreement is in place before the UK leaves. No deal means no data agreement
July 18, 2019 18 Jul'19
Free tool reveals the true cost of ‘free’ online services

New data discovery portal developed by Finnish security firm F-Secure helps to uncover what Facebook, Amazon, Google and other tech giants know about consumers
July 18, 2019 18 Jul'19
Parliamentary committee calls for halt to facial recognition trials

Issues with biometrics and forensics pose a significant risk to effective functioning of the criminal justice system, according to a report by the Science and Technology Committee
July 17, 2019 17 Jul'19
Most security pros still concerned about public cloud security

Despite accelerated adoption of public cloud services by companies keen to benefit from increased efficiency, scalability and agility, most security professionals have reservations
July 16, 2019 16 Jul'19
NCSC calls out Microsoft over Dmarc reports

The UK’s cyber security agency has called out Microsoft for seriously undermining global email security by failing to provide crucial reports from its email platforms
July 16, 2019 16 Jul'19
UN resolution ignores special rapporteur’s call for halt to spyware sales

UN’s Human Rights Council adopts resolution to explore the impact of new and emerging digital technologies on human rights, but the text ignores a damning report by the council’s own expert on freedom of expression
July 15, 2019 15 Jul'19
Billion-dollar privacy penalties put CEOs on notice

Facebook’s potential $5bn settlement with the FTC follows notifications of planned GDPR fines for British Airways and Marriott International, underlining the importance of data stewardship
July 15, 2019 15 Jul'19
UK public sector needs to prioritise mobile device security

Only 10% of public service stolen and lost mobile are recovered, underlining the need for mobile-centric, zero-trust model to reduce the risk, says MobileIron
July 12, 2019 12 Jul'19
New FinSpy versions extend surveillance capabilities

New versions of the FinSpy malware for iOS and Android smartphones have extended targeted surveillance capabilities, warn security researchers
July 11, 2019 11 Jul'19
Dutch privacy watchdog tells banks not to use customer payment data for marketing

Autoriteit Persoonsgegevens tells banks to respect client privacy and not to market products based on spending data
July 10, 2019 10 Jul'19
Max Schrems not calling for SCCs to be invalidated

The privacy activist at the centre of legal battle against Facebook is not calling for all standard contractual clauses to be invalidated, according to his non-profit privacy organisation
July 10, 2019 10 Jul'19
Demand for ICO help escalates in GDPR's first year

The past year has seen increased demand across all support services offered by the UK’s privacy watchdog as new data protection laws went into force