Data breach incident management and recovery

Microsoft releases rare zero-day free Patch Tuesday update

No zero-day flaws were addressed in May’s Patch Tuesday update but as usual there is much for admins to chew over in the coming days Continue Reading

By

• Alex Scroxton, Security Editor

UK government renews calls to sign Cyber Resilience Pledge

Westminster renews calls for business leaders to sign up to its yet-to-be-launched Cyber Resilience Pledge, and highlights growth, and challenges, for the UK’s cyber economy Continue Reading

By

• Alex Scroxton, Security Editor

ICO fines Cl0p victim South Staffs Water over data breach

The ICO has levied a reduced fine on South Staffordshire Water following cyber improvements in the wake of a Cl0p ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

The Netherlands leads in quantum technology but lags on quantum security

The Dutch government has invested €615m to build a world-class quantum technology ecosystem, but many institutions have not started any quantum-specific preparations to protect themselves against the security threat Continue Reading

By

• Kim Loohuis

UK financial security experts participate in sector-wide hackathon

Teams of security pros from UK financial services organisations came together at the end of April to participate in a hackathon exercise Continue Reading

By

• Alex Scroxton, Security Editor

ServiceNow Knowledge 2026: McDermott proclaims fully automated cyber defence

Chief executive’s conference keynote launches agentic artificial intelligence cyber security features for enterprise software player’s centralised platform Continue Reading

By

• Ryan Priest

CSA: Take AI cyber threats to the boardroom

Current cyber risk assumptions may no longer be valid given the speed of advanced AI, warns the chief executive of Singapore’s Cyber Security Agency Continue Reading

By

• Aaron Tan, Informa TechTarget

UK’s NCSC warns of ‘wave of patches’

Vulnerability discovery and mitigation continues to exercise the top minds at Britain’s NCSC as cyber experts continue to debate the impact of frontier AI models such as Mythos Continue Reading

By

• Alex Scroxton, Security Editor

IAM tools help Oracle Red Bull Racing keep pace with strict F1 regulations

Oracle Red Bull Racing massively improved the efficiency of its aerodynamics testing procedures after implementing new identity technology from 1Password. Learn more about this unlikely link Continue Reading

By

• Alex Scroxton, Security Editor

Almost half of UK businesses hit by cyber attacks

The government’s annual cyber security report reveals UK businesses are still struggling with the impact of attacks and breaches Continue Reading

By

• Alex Scroxton, Security Editor

AI is widening the asymmetry between attackers and defenders

As threat actors leverage AI to launch attacks at machine speed, cyber defenders must adopt an assumed breach mindset and prioritise breach containment Continue Reading

By

• Aaron Tan, Informa TechTarget

Why AI agents are triggering a rethink of enterprise identity

The Computer Weekly Security Think Tank considers the intersection of AI and IAM. In this article, we look at the specific impacts of agentic AI on the security stack. Continue Reading

By

• Jacob Connell, Quorum Cyber

Vect ransomware actually destructive wiper malware

Analysis of a form of ransomware called Vect has uncovered a serious flaw that breaks its core functionality and turns it from a locker to a wiper Continue Reading

By

• Alex Scroxton, Security Editor

One year on from the M&S cyber attack: What did we learn?

A year on from the Marks & Spencer cyber attack, we look back at the incident, consider the lessons learned and ask if the retail sector is any more secure today Continue Reading

One year on from M&S attack – has retail cyber security improved?

In this week’s Computer Weekly, it’s been a year since the ransomware attack that brought down Marks & Spencer – but has the retail sector learned from the experience? Connected vehicles are entering the AI era – we look at the latest automotive developments. And a quantum algorithm scientist explains what’s happening in this important emerging field. Read the issue now. Continue Reading

Black Hat Asia: Privacy and cyber security are inseparable

The separation of privacy and security is no longer tenable in a world where exposed personal data is increasingly the entry point for major cyber incidents, delegates at Black Hat Asia 2026 were told Continue Reading

By

• Ai Lei Tao

Wiz founder: Hack yourself with AI, before the bad guys do

At Google Cloud Next, Wiz co-founder Yinon Costica called on security defenders to use AI to steal a march on threat actors, and launched agentic capabilities for cyber teams Continue Reading

By

• Alex Scroxton, Security Editor

Using AI to manage insider risk amid Middle East conflict

As geopolitical tensions reshape the cyber threat landscape across the region, organisations are turning to artificial intelligence-driven behaviour analytics, investigative automation and monitoring of AI agents to detect insider risk faster and strengthen operational resilience Continue Reading

By

• Andrea Benito , Computer Weekly

UK to build ‘national cyber shield’ to protect against AI cyber threats

Security minister Dan Jarvis calls for artificial intelligence companies to work with government to develop AI-driven cyber defences Continue Reading

By

• Bill Goodwin, Investigations Editor

Sans Institute preps live systems for Nato cyber exercise

Cyber training body the Sans Institute is preparing live power generation IT and OT systems for Nato’s annual Locked Shields blue team exercise, which this year appears more relevant than ever Continue Reading

By

• Alex Scroxton, Security Editor

M&S one year on: turning anticipation into secure by design

The cyber attack on M&S last year marked a turning point for resilience in the retail sector. One year on, knowing how to avoid the next incident is no longer the priority and being ready for when it happens is key. Continue Reading

By

• Chris Brown, NCC Group

North Korean social engineering campaign targets MacOS users

A MacOS-focused social engineering campaign orchestrated by North Korea-based threat actor Sapphire Sleet has been exposed by Microsoft’s Threat Intelligence Unit Continue Reading

By

• Alex Scroxton, Security Editor

Bank cyber teams on red alert as Anthropic promises them Mythos next week

Artificial intelligence supplier promises UK banks opportunity to review AI model, which has already revealed thousands of security flaws Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CyberUK 2026: UK lagging on legal protections for cyber pros

Ahead of next week’s CyberUK conference, the CyberUp Campaign for reform of the UK’s hacking laws urges the government to keep focus and proposes a four-pillar framework that would protect cyber professionals from prosecution Continue Reading

By

• Alex Scroxton, Security Editor

One year on from the M&S cyber attack: What did we learn?

A year on from the Marks & Spencer cyber attack, we look back at the incident, consider the lessons learned and ask if the retail sector is any more secure today Continue Reading

By

• Alex Scroxton, Security Editor

UK businesses must face up to AI threat, says government

Technology secretary Liz Kendall urges Britain’s business community to sit up and pay attention to emerging AI threats, following the debut of Anthropic’s new frontier model, Mythos Continue Reading

By

• Alex Scroxton, Security Editor

Danske Bank upgrade error exposed 20,000 customer addresses

Danish bank revealed details of a customer data leak last year which affected thousands of customers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

April Patch Tuesday brings zero-days in Defender, SharePoint Server

Microsoft’s latest Patch Tuesday update may be one of the largest in history, with more than 160 issues in scope Continue Reading

By

• Alex Scroxton, Security Editor

‘Grand Theft Auto’ publisher Rockstar hit by hackers again

The notorious ShinyHunters hacking collective menaces video game publisher Rockstar and says it will leak data on 14 April Continue Reading

By

• Alex Scroxton, Security Editor

Businesses are paying the price for CISO burnout

Discussions of burnout among security pros are about more than just mental health: when burnout strikes, it can present a serious business risk Continue Reading

By

• Cath Everett

Singapore Cyber Security Agency chief: Cyber stability a necessity, not a luxury

With state-linked attacks rising and international rules unravelling, Singapore’s cyber security commissioner calls for global cooperation to prevent catastrophic conflict in cyber space Continue Reading

By

• Aaron Tan, Informa TechTarget

Capita’s troubled Civil Service Pension Scheme hit by data breach

A data breach affecting 138 members of the Civil Service Pension Scheme piles pressure on the service’s administrator, Capita, amid ongoing issues Continue Reading

By

• Alex Scroxton, Security Editor

How ‘Wikipedia of cyber’ helps SAP make sense of threat data

SAP runs enormous cloud environments for some of the world’s most heavily-regulated organisations, and in the hyperscale era, data security and compliance were becoming big challenges. It turned to cutting-edge agentic tools from Uptycs to cut through the noise Continue Reading

By

• Alex Scroxton, Security Editor

US government launches Bureau of Emerging Threats

The US’ Bureau of Emerging Threats sits within the State Department and will supposedly help address national security threats arising from cyber attacks, the weaponisation of space and other emerging technologies Continue Reading

By

• Alex Scroxton, Security Editor

Platformisation or platform theatre? Navigating cyber consolidation

The Security Think Tank looks at platformisation, considering questions such as how CISOs can distinguish between a truly integrated platform and 'integration theater, and how to protect unified platforms. Continue Reading

By

• John Bruce, Quorum Cyber

Why AI agents are one prompt away from ransomware

As AI adoption advances beyond chatbots, security leaders are up against rogue AI agents mirroring threat actors and a generational skills gap as security operations teams become overly dependent on AI Continue Reading

By

• Stephen Withers

US government bans imported routers, raising tough questions

The US communications regulator has enacted a ban on all router hardware made outside America citing security concerns, but experts say the move may risk creating more issues than it solves Continue Reading

By

• Alex Scroxton, Security Editor

Cyber platformisation is a skills issue for security teams

The Security Think Tank looks at platformisation, considering questions such as how CISOs can distinguish between a truly integrated platform and 'integration theater, and how to protect unified platforms. Continue Reading

By

• Haris Pylarinos, Hack the Box

Irish government launches CNI resilience plan

Ireland’s National Strategy on the Resilience of Critical Entities sets out a pathway to improved cyber resilience for the nation’s critical infrastructure, and establishes compliance with an EU directive Continue Reading

By

• Alex Scroxton, Security Editor

UK Cyber Monitoring Centre plans expansion in US amid risk of Category 5 attack

Organisations lulled into a false sense of security after Russian invasion of Ukraine are still at risk of a Category 5 attack in 2026 Continue Reading

By

• Bill Goodwin, Investigations Editor

Cisa tells US organisations to harden endpoint management after Stryker attack

Last week’s cyber attack on the systems of a US medical services company by Iranian hacktivists has prompted an alert from Cisa, urging organisations to reinforce their defensive posture Continue Reading

By

• Alex Scroxton, Security Editor

AI makes debut in Bridewell cyber security in CNI report

Regulation has superseded cyber threats as the main driver of cyber security spending, and AI has made its debut for attack and defence, according to a CNI-focused report from Bridewell Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Gartner: Ditch ‘big transformation’ cyber strategies for continuous improvement

As artificial intelligence reshapes the enterprise, CISOs must abandon risky big bang security transformation initiatives in favour of incremental changes to build cyber resilience Continue Reading

By

• Stephen Withers

Contactless payment limit removal will happen overnight, but change won’t

Banks will be able to set their own contactless card payment limits from 19 March, following rule change by Financial Conduct Authority Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Interview: D360 Bank redefines cyber security for Saudi Arabia’s cashless future

Muath Alhomoud, director of cyber security at D360 Bank, discusses payment security, cloud resilience and the responsible use of AI in a hyper-connected financial ecosystem Continue Reading

By

• Andrea Benito , Computer Weekly

Companies House restarts online services following cyber breach

Companies House was forced to pull its WebFiling service offline at the weekend after it emerged that a flawed update was putting data at risk of exposure Continue Reading

By

• Alex Scroxton, Security Editor

How CISOs can build a truly unified and resilient security platform

The Security Think Tank looks at platformisation, considering questions such as how CISOs can distinguish between a truly integrated platform and 'integration theater, and how to protect unified platforms. Continue Reading

By

• Vaibhav Dutta, Tata Communications

Vulnerability reports: Increase in quantity, decrease in quality?

Bug bounties have become a staple of the cyber security toolkit, offering researchers a way to get paid to find and report bugs and giving businesses a route to fix unknown flaws. However, this model is now facing scrutiny. What is driving these concerns? Continue Reading

By

• Dan Raywood

Iran war a melting pot for other cyber threats

State-backed cyber threat actors from non-combatant states are taking advantage of the Israeli-US war on Iran to fulfil their own goals, according to Proofpoint analysts Continue Reading

By

• Alex Scroxton, Security Editor

Salesforce tracks possible ShinyHunters campaign targeting its users

Salesforce warns users of an uptick in malicious activity targeting Experience Cloud customers with misconfigured user settings via an open source tool Continue Reading

By

• Alex Scroxton, Security Editor

CISOs on alert: Strengthening cyber resilience amid geopolitical tensions in the Middle East

As regional uncertainty rises, security leaders across the Gulf focus on resilience, faster incident response and deeper threat intelligence to protect critical systems and data Continue Reading

By

• Andrea Benito , Computer Weekly

WA auditor general flags weak Microsoft 365 security controls across state entities

Western Australia’s Office of the Auditor General has uncovered weaknesses in M365 configurations across seven government agencies, leading to compromised accounts and data breaches Continue Reading

By

• Aaron Tan, Informa TechTarget

Scattered Spider attack on TfL affected 10 million people

The 2024 Scattered Spider attack on Transport for London affected approximately 10 million people, many of whom remain blissfully unaware their data was compromised Continue Reading

By

• Alex Scroxton, Security Editor

Spyware suppliers exploit more zero-days than nation states

Exploitation of zero-days by commercial surveillance and spyware developers outpaced exploitation by nation-state actors last year, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Iranian hacktivists muster their forces but state APTs lay low

Hacktivist activity surrounding the Iran war is sky-high but Iran’s state-backed cyber espionage actors have yet to show their hands, giving security teams a valuable window of time to shore up their defences Continue Reading

By

• Alex Scroxton, Security Editor

Tycoon2FA phishing platform dismantled in major operation

A Europol-led sting against the infamous Tycoon2FA MFA bypass phishing service has been successful, with operations disrupted and ringleaders and cyber criminal users identified Continue Reading

By

• Alex Scroxton, Security Editor

NCSC: No increase in cyber threat from Iran, but be prepared

While cyber threat levels remain stable following the outbreak of war in the Middle East at the weekend, at-risk organisations in the UK should take steps to ward off potential reprisals from Iran-linked threat actors Continue Reading

By

• Alex Scroxton, Security Editor

Qilin crew continues to dominate ransomware ecosystem

The Qilin ransomware gang remained ‘top dog’ in January 2026, with over 100 observed cyber attacks to its name, amid a rapidly evolving and fragmenting cyber criminal ecosystem Continue Reading

By

• Alex Scroxton, Security Editor

CrowdStrike touts agentic SOC to tackle security woes

By embedding AI agents across its platform, CrowdStrike is looking to help security teams automate repetitive security tasks, enabling them to focus on complex and stealthier threats that could slip under the radar Continue Reading

By

• Aaron Tan, Informa TechTarget

Cisco Catalyst SD-WAN users targeted in series of cyber attacks

The NCSC, Cisa, and other Five Eyes agencies have warned of mass exploitation of vulnerabilities in Cisco Catalyst SD-WAN, which Cisco is attributing to an unknown threat actor called UAT-8616 Continue Reading

By

• Alex Scroxton, Security Editor

Innovate UK cyber startup programme gets £10m funding booster

Graduates of DSIT and Innovate UK's CyberASAP scheme to commercialise cutting-edge cyber research projects have raised nearly £50m in the past decade Continue Reading

By

• Alex Scroxton, Security Editor

How to build an incident response plan, with examples, template

Threats from cyberattacks continue to grow in frequency and severity. Considering the potential disruptions from such events, an organization needs an incident response plan. Continue Reading

By

• Paul Kirvan

ICO wins appeal over data protection obligations in Currys cyber attack

The UK Information Commissioner’s Office has won an important appeal relating to data protection obligations arising from a 2017-18 cyber attack at electronics retailer Currys PC World Continue Reading

By

• Alex Scroxton, Security Editor

The year that speed changed cyber security

At a time when threat actors are operating at machine speed, understanding which essential systems are needed to keep the lights on can be the difference between business continuity and existential crisis Continue Reading

By

• Niraj Naidu

0APT ransomware crew makes embarrassing splash

A ransomware gang called 0APT has attracted attention, but many of its victims may not even be real, and its operators are being accused of over-egging their criminal pudding Continue Reading

By

• Alex Scroxton, Security Editor

Western cyber alliances risk fragmenting in new world order

The conduct of powerful nations is causing knock-on effects in the cyber world as long-standing security frameworks appear increasingly precarious Continue Reading

By

• Alex Scroxton, Security Editor

The evolution of threat research: Looking beyond best-of-breed

Traditional models of threat research as a service are changing and evolving towards a more bespoke model that puts more control in the hands of end-user cyber teams Continue Reading

By

• Matthew Staff

Government wages cyber campaign as half the UK’s SMEs are breached

UK government says half of all small businesses have been cyber breached in the recent past as it urges them to ‘lock the door’ Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Making sense of AI’s role in cyber security

Cyber security companies have jumped on the AI bandwagon. We look at where artificial intelligence is a useful add-on and where it poses potential risks Continue Reading

By

• Cliff Saran, Managing Editor

How to build an incident response framework

Frameworks provide the structure for an effective incident response program. Here's where to turn for guidance on what to include. Continue Reading

By

• Paul Kirvan

The Security Interviews: Mick Baccio, Splunk

Mick Baccio, global security advisor at Splunk SURGe and Cisco Foundation AI, reveals how the experience of running cyber on a dime for a US presidential campaign has informed how he does security, and why the basics still matter Continue Reading

By

• Alex Scroxton, Security Editor

The world’s default productivity tool is becoming a national security liability

The rapid exploitation of a bug in Office by Russian cyber attackers shows that the current system of patching - for a software application that is practically ubiquitous in enterprise IT - has become a security risk for everyone Continue Reading

By

• Bill McCluggage

Arctic Wolf targets mid-market security gap in APAC

Following the launch of its full portfolio in Malaysia, the SOC provider discusses the security challenges facing lean IT teams, the value of supplier neutrality, and its roadmap for AI and ransomware protection Continue Reading

By

• Stephen Withers

Researchers delve inside new SolarWinds RCE attack chain

Researchers at Huntress and Microsoft have shared findings from their analysis of a new SolarWinds Web Help Desk vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

Singapore mounts largest ever cyber operation to oust APT actor

Operation Cyber Guardian mobilised over 100 defenders to neutralise UNC3886, which infiltrated Singtel, StarHub, M1 and Simba networks, operators issue joint pledge on defence-in-depth Continue Reading

By

• Aaron Tan, Informa TechTarget

Russia’s cyber attacks on Polish utilities draws NCSC alert

A series of Russian cyber attacks targeting Poland’s energy infrastructure has prompted a warning from the UK’s National Cyber Security Centre Continue Reading

By

• Alex Scroxton, Security Editor

10 types of information security threats for IT teams

Know thine enemy -- and the common security threats that can bring an unprepared organization to its knees. Learn what these threats are and how to prevent them. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

UK government must get its hands dirty on security, report says

As the UK government develops its National Cyber Action Plan, a report from the Rusi think tank urges Westminster to take a more interventionist approach Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware gangs focus on winning hearts and minds

Ransomware-as-a-service operations are increasingly seeking to forge connections with employees, contractors and trusted partners of their target organisations as an alternative to straight-up hacking, says NCC Continue Reading

By

• Alex Scroxton, Security Editor

Security now one of the UK’s fastest-growing career paths

The number of people working in the cyber security field has almost trebled in the 2020s, with one cyber professional for every 68 businesses in the UK Continue Reading

By

• Alex Scroxton, Security Editor

Wave of ShinyHunters vishing attacks spreading fast

The ShinyHunters hacking collective that caused chaos in 2025 is ramping up a new voice phishing campaign, with several potential victims already identified Continue Reading

By

• Alex Scroxton, Security Editor

Broken decryptor leaves Sicarii ransomware victims adrift

A coding error in an emergent strain of ransomware leaves victims unable to recover their data, even if they cooperate with the hackers’ demands Continue Reading

By

• Alex Scroxton, Security Editor

US punts renewal of threat data sharing law to September

US lawmakers have extended the Cybersecurity Information Sharing Act of 2015 for another nine months, buying time to enact a replacement for the legislation. Continue Reading

By

• Alex Scroxton, Security Editor

Sportswear firm Under Armour falls victim to data breach

Details of over 70 million customers of US sportswear giant Under Armour were leaked following a supposed ransomware attack by the Everest gang Continue Reading

By

• Alex Scroxton, Security Editor

UK and China reach out across cyber no-man's land

London and Beijing have supposedly conducted high-level talks seeking to establish a joint security forum to help de-escalate potential cyber flashpoints, according to reports Continue Reading

By

• Alex Scroxton, Security Editor

UK public sector, CNI in Russian hacktivist crosshairs

Hacktivists aligned to the Russian state are ramping up their targeting of UK organisations with denial of service attacks Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft DCU uses UK courts to hunt down cyber criminals

Microsoft has taken down the RedDVS cyber crime-as-a-service network after obtaining a UK court order, marking its first civil legal action outside of the US Continue Reading

By

• Alex Scroxton, Security Editor

Intersec Dubai highlights why AI has become critical in the race against cyber attackers

Cigna Healthcare’s Jean Wiles warns that healthcare security teams must act faster without sacrificing accuracy or compliance as threats driven by artificial intelligence scale Continue Reading

By

• Andrea Benito , Computer Weekly

Personal data of thousands stolen in attack on London councils

The West London council at the centre of a major cyber incident has now started the process of informing residents that their personal data was compromised in the attack Continue Reading

By

• Alex Scroxton, Security Editor

UK government to spend £210m on public sector cyber resilience

The UK government unveils a £120m Cyber Action Plan to help reinforce and promote IT security resilience across the country's public services Continue Reading

By

• Alex Scroxton, Security Editor

Identity: the new perimeter of ransomware defence

Ransomware exponents can target identity, bypassing technical defences. Boards should prioritise identity security, align investments, and embed cyber risk in governance Continue Reading

By

• Jamie Collier

Top 10 cyber security stories of 2025

AI dominated all tech conversations this year, but the concerns of cyber security professionals extend far beyond. From remote work to supply chains, quantum to identity, there were plenty of other topics for the industry to chew over in 2025. Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 cyber crime stories of 2025

In many regards, 2025 proved to be a relatively normal year for the cyber security world as threat actors and security pros continued their long-running cat-and-mouse game, but it was also a stand-out year that saw some of the largest cyber attacks ever to befall the UK. Discover more in Computer Weekly’s top 10 cyber crime stories of 2025 Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 ANZ stories of 2025

The 2025 tech landscape in Australia and New Zealand was dotted with major data breaches even as organisations continue to press on with their digital transformation efforts in areas such as AI and automation Continue Reading

By

• Aaron Tan, Informa TechTarget

‘Sensitive’ data stolen in Westminster City Council cyber attack

London borough confirms that data breach affecting three neighbouring councils in a shared IT services operation led to personal information being copied by a third party Continue Reading

By

• Bryan Glick, Editor in chief

UK government confirms Foreign Office cyber attack

Reports blame Chinese hacking group but minister insists the source of the attack is unclear Continue Reading

By

• Bryan Glick, Editor in chief

Passwords to prompts: Identity and AI redefined cyber in 2025

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Daniel Gordon, PA Consulting

Cyber resilience will define winners and losers in 2026

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Nick New, Optalysys

ClickFix attacks that bypass cyber controls on the rise

NCC’s monthly threat report details the growing prevalence of ClickFix attacks in the wild Continue Reading

By

• Alex Scroxton, Security Editor

Security platform consolidation in 2026: The AI imperative

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• John Bruce, Quorum Cyber