Data breach incident management and recovery

Qilin gang claims cyber attack on Japanese brewing giant

The Qilin ransomware gang has claimed responsibility for a cyber attack that has halted brewing at Asahi Group Holdings, causing Japanese retailers to run low on beer Continue Reading

By

• Alex Scroxton, Security Editor

Why it takes 11 hours to resolve one ID-related cyber incident

A recent ESG study revealed it takes an average of 11 hours for enterprises to resolve a single identity-related security incident. How did we get here, and what do we need to do differently? Continue Reading

By

• Ev Kontsevoy, Teleport

Alert over Medusa ransomware attacks targeting Fortra MFT

Microsoft warns it is seeing potential mass exploitation of a Fortra GoAnywhere vulnerability by a threat actor linked to the Medusa ransomware-as-a-service operation. Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: David Bradbury, CSO, Okta

Okta’s chief security officer talks security by default and explains why he thinks time is running out for the shared responsibility model Continue Reading

By

• Alex Scroxton, Security Editor

Oracle patches E-Business suite targeted by Cl0p ransomware

Oracle pushes a patch for a dangerous zero-day under active exploitation by one of the most notorious ransomware gangs around Continue Reading

By

• Alex Scroxton, Security Editor

Nakivo expands Proxmox backup and DR capabilities in v11.1

Latest version of Backup & Replication adds MSP features, plus Proxmox VM backup functionality, while Nakivo responds to critical vulnerability it was tipped off about in February Continue Reading

By

• Antony Adshead, Storage Editor

US government shutdown stalls cyber intel sharing

A key US law covering cyber security intelligence sharing has expired without an extension or replacement amid a total shutdown of the federal government, putting global security collaboration at risk. Continue Reading

By

• Alex Scroxton, Security Editor

MPs press outsourcer TCS over Jaguar cyber attack

The government’s cross-bench Business and Trade Committee has written to Tata Consultancy Services seeking answers over possible links to cyber attacks on Jaguar Land Rover, Marks and Spencer, and Co-op Continue Reading

By

• Alex Scroxton, Security Editor

Harrods hackers start contacting customers

Retailer Harrods has revealed that a number of customers whose data was stolen in a cyber attack have been contacted by the perpetrators Continue Reading

By

• Alex Scroxton, Security Editor

Google unveils AI-powered security to trap ransomware attacks

The new security capability, available at no extra cost for most Google Workspace users, detects mass file encryption during ransomware attacks, stops the attacks from spreading and allows for restoration of files Continue Reading

By

• Aaron Tan, Informa TechTarget

Harrods hit by second cyber attack in six months

Data on approximately 430,000 Harrods shoppers was stolen in a third-party breach, but the cyber attack is not related to an earlier Scattered Spider incident, says the retailer Continue Reading

By

• Alex Scroxton, Security Editor

JLR tentatively restarts production, following £1.5bn government backing

Jaguar Land Rover is to resume car production after a £1.5bn government loan guarantee amid its cyber attack fallout. Debate is growing over the bailout and insurance Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Over half of India-based companies suffer security breaches

Business supply chains, which include Indian companies, are at risk of attack as more than half of suppliers were breached last year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government might support Jaguar Land Rover supply chain to mitigate cyber attack impact

The government is considering buying car parts from JLR’s supply chain to sell them on to the company once it recovers from the August cyber attack Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Co-op declares cyber attack damage cost £206m

Co-op reveals £206m costs from April cyber attack, with revenues hit, member data stolen and shelves emptied, exposing major retail supply chain vulnerabilities Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Netherlands establishes cyber resilience network to strengthen public-private digital defence

Network will connect organisations in a cyber crime defence initiative that goes way beyond information sharing Continue Reading

By

• Kim Loohuis

Jaguar Land Rover extends cyber attack-induced shutdown to October

Jaguar Land Rover is extending its production shutdown caused by the 31 August cyber attack into next month, as government ministers drop by and supply chain workers lose wages Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

‘Our worst day’: The untold story of the Electoral Commission cyber attack

As head of digital at The Electoral Commission, Andrew Simpson’s mettle was tested when threat actors gained access to the regulator’s email systems and accessed sensitive voter data. Three years on, he tells his story to Computer Weekly Continue Reading

By

• Alex Scroxton, Security Editor

From breach to resilience: How the Electoral Commission rebuilt its cyber defences

The UK's Electoral Commission fell victim to a major cyber attack in 2022. Three years on, the organisation is reflecting on its experience and sharing the lessons it learned to help others improve their security resilience. Continue Reading

By

• Andrew Simpson, The Electoral Commission

Teen charged with Las Vegas casino cyber heist

Another arrest of a teenage hacker associated with the Scattered Spider gang has been made, this time in relation to two 2023 cyber attacks on Las Vegas casinos and resorts Continue Reading

By

• Alex Scroxton, Security Editor

Cyber attack that downed airport systems confirmed as ransomware

Authorities in Europe say the cyber attack that caused disruption to passenger-facing services at multiple airports, including Heathrow, was the result of ransomware, as investigations continue Continue Reading

By

• Alex Scroxton, Security Editor

Government meets with car parts suppliers amid JLR cyber crisis

Government officials have met with the Society of Motor Manufacturers and Traders to discuss the challenges they are facing amid disrupted production at Jaguar Land Rover Continue Reading

By

• Alex Scroxton, Security Editor

Are AI agents a blessing or a curse for cyber security?

Agentic AI is touted as a helpful tool for managing tasks, and cyber criminals are already taking advantage. Should information security teams look to AI agents to keep up? Continue Reading

By

• Danny Palmer

Teen hackers charged over Scattered Spider attack on TfL

Two men have appeared in court in London in connection with the September 2024 cyber attack that disrupted online services at Transport for London Continue Reading

By

• Alex Scroxton, Security Editor

NCC: How RaaS team-ups help Scattered Spider enhance its attacks

Scattered Spider’s alliances with ransomware-as-a-service gangs act as a force multiplier for the scope, and number, of its cyber attacks, according to NCC Group analysts Continue Reading

By

• Alex Scroxton, Security Editor

Jaguar Land Rover extends production shutdown for another week

Jaguar Land Rover says that vehicle production will remain suspended in the wake of a cyber attack, while the hackers allegedly responsible claim they are retiring from a life of crime Continue Reading

By

• Alex Scroxton, Security Editor

What is a forensic image?

A forensic image (forensic copy) is a bit-by-bit, sector-by-sector direct copy of a physical storage device, including all files, folders, and unallocated, free and slack space. Continue Reading

By

• Nick Barney, Technology Writer
• Paul Kirvan

ShinyHunters linked to breach of French luxury goods house

Kering, the parent group of fashion houses including Balenciaga and Gucci, becomes the latest organisation to allegedly fall victim to ShinyHunters Continue Reading

By

• Alex Scroxton, Security Editor

M&S parts ways with CTO after cyber attack

M&S chief digital and technology officer Rachel Higham steps back from her role in the wake of the April 2025 cyber attack on the retailer’s systems Continue Reading

By

• Alex Scroxton, Security Editor

Students an increasing source of cyber threat in UK schools

Insider threats arising from student activity now appears to be the chief cause of notifiable cyber or data breach incidents in Britain’s schools Continue Reading

By

• Alex Scroxton, Security Editor

Splunk.conf: Cisco and Splunk expand agentic SOC vision

The arrival of agentic AI in the security operations centre heralds an era of simplification for security professionals, Splunk claims Continue Reading

By

• Alex Scroxton, Security Editor

Jaguar Land Rover admits data has been compromised in cyber attack

The car maker revealed that data was stolen in the cyber attack that began on 31 August, as its production line continues to be affected Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

What is crisis communication?

Crisis communication is a strategic approach to corresponding with people and organizations during a disruptive event. Continue Reading

By

• Paul Kirvan
• Rahul Awati
• Paul Crocetti, Editorial Director

Lessons from Jaguar Land Rover: How can businesses prepare for cyber attacks?

A cyber attack at Jaguar Land Rover has halted production lines and caused widespread disruption. How can businesses protect themselves and mitigate the risks of such an attack? Continue Reading

By

• Dominic Holden

US politicians ponder Wimwig cyber intel sharing law

US cyber data sharing legislation is set to replace an Obama-era law, but time is running out to get it over the line, with global ramifications for the security industry, and intelligence and law enforcement communities Continue Reading

By

• Alex Scroxton, Security Editor

AI and backup: How backup products leverage AI

We look at how AI helps with backup, from AI analysis of backup jobs and their integrity through natural language support functionality to ransomware and anomaly detection Continue Reading

By

• Stephen Pritchard

Incident response planning cuts the risk of claiming on cyber security insurance

Proper attention to incident response planning is emerging as a core cyber control when it comes to reducing the risk of having to claim on cyber security insurance, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware activity levelled off in July, says NCC

Ransomware levels held steady in the month of July, although the risk remained as persistent as ever Continue Reading

By

• Alex Scroxton, Security Editor

How to secure the identity perimeter and prepare for AI agents

Ping Identity CEO Andre Durand explains why identity has become the critical security battleground, how decentralised credentials will reduce data breach risks, and why AI agents will need their own identities to be trusted Continue Reading

By

• Stephen Withers

Ransomware attack volumes up nearly three times on 2024

During the first six months of 2025, the number of observed and tracked ransomware attacks far outpaced the volume seen in 2024 Continue Reading

By

• Alex Scroxton, Security Editor

Scale of MoD Afghan data breaches widens dramatically

Many more data breaches at the MoD's Arap programme to relocate at-risk Afghan citizens to Britain have emerged following an FoI request by BBC journalists Continue Reading

By

• Alex Scroxton, Security Editor

Warlock claims more victims as cyber attacks hit Colt and Orange

Ransomware gang Warlock is adding more victims to its data leak site as the impact of a spreading wave of cyber attacks continues to be felt Continue Reading

By

• Alex Scroxton, Security Editor

Jack of all managed security services, or master of none?

Large managed cyber services providers rule the roost when it comes to security buying priorities, but could this be watering down the overall quality of services available on the market? Continue Reading

By

• Andy Kays, Socura

Google spins up agentic SOC to speed up incident management

Google Cloud elaborates on its vision for securing artificial intelligence unveiling new protections and capabilities across its product suite Continue Reading

By

• Alex Scroxton, Security Editor

Preparation and appreciation – the human factor in incident response

Incident response is typically technical, so where do soft skills come in? Dan Raywood looks at a measurement option and the human consideration Continue Reading

Singapore board directors to get cyber crisis training

The Singapore Institute of Directors and Ensign InfoSecurity have launched a programme to equip 1,000 board leaders with the skills to navigate high-stakes decisions during a cyber crisis Continue Reading

By

• Aaron Tan, Informa TechTarget

Workday hit in wave of social engineering attacks

A campaign of voice-based social engineering attacks targeting users of Salesforce’s services appears to have struck HR platform Workday Continue Reading

By

• Alex Scroxton, Security Editor

Extremist hacker who defaced websites and stole data imprisoned

Hacker Al-Tahery Al-Mashriky pled guilty to attacking multiple websites based on extremist political and religious ideology Continue Reading

By

• Alex Scroxton, Security Editor

L’Oréal to promote cyber resilience for Britain’s beauty salons

L’Oréal UK and Ireland will work with law enforcement, cyber educators and students, and other large organisations to help thousands of small salons across the UK improve their cyber resilience practice Continue Reading

By

• Alex Scroxton, Security Editor

Warlock claims ransomware attack on network services firm Colt

UK network services firm Colt is attempting to recover various customer-facing systems following a cyber attack that has been claimed by the Warlock ransomware gang and may have arisen via a SharePoint flaw Continue Reading

By

• Alex Scroxton, Security Editor

BlackSuit ransomware payment recovered in takedown operation

US authorities reveal how over a million dollars’ worth of cryptocurrency assets laundered by the BlackSuit ransomware gang were seized ahead of a July takedown operation Continue Reading

By

• Alex Scroxton, Security Editor

What the UK's ransomware crackdown signals for Europe

The UK government is forging a bold path as it aims to ban ransomware payments from certain organisations. Its actions could herald an inflexion point in Europe's broader response to ransomware. Continue Reading

By

• Fintan Quinn, Gartner

Researchers firm up ShinyHunters, Scattered Spider link

ReliaQuest researchers present new evidence that firms up a potential link, or outright partnership, between the ShinyHunters and Scattered Spider cyber gangs Continue Reading

By

• Alex Scroxton, Security Editor

UK work visa sponsors are target of phishing campaign

Mimecast identifies a phishing campaign targeting UK organisations that sponsor migrant workers and students, opening the door to account compromise and visa fraud Continue Reading

By

• Alex Scroxton, Security Editor

What boards should look for in a CISO

The role of the chief information security officer has evolved dramatically over the years – and will continue to do so. What should boards really looking for when hiring a security leader in 2025? Continue Reading

By

• Rinki Sethi, Upwind Security

ShinyHunters Salesforce cyber attacks explained: What you need to know

Computer Weekly gets under the skin of an ongoing wave of ShinyHunters cyber attacks orchestrated via social engineering against Salesforce users Continue Reading

By

• Alex Scroxton, Security Editor

McCullough Review into PSNI spying on journalists and lawyers delayed

Angus McCullough KC is to present findings of an independent review of police spying on phone data of lawyers, journalists and NGOs in Northern Ireland in October   Continue Reading

By

• Bill Goodwin, Investigations Editor

Cyber criminals would prefer businesses don’t use Okta

Okta details a phishing campaign in which the threat actor demonstrated some unusually strong opinions on what authentication methods they would like their targets to use Continue Reading

By

• Alex Scroxton, Security Editor

Australian scaleup to bring AI-led data protection to the MoD

The UK’s Ministry of Defence is embracing AI-led data protection in the wake of a major privacy breach, enlisting Australian cyber firm Castlepoint Systems to oversee sensitive records Continue Reading

By

• Alex Scroxton, Security Editor

Black Hat USA: Halcyon and Sophos tag-team ransomware fightback

Ransomware experts Halcyon and Sophos are to pool their expertise in ransomware, working together to enhance data- and intelligence-sharing and bringing more comprehensive protection to customers Continue Reading

By

• Alex Scroxton, Security Editor

Proliferation of on-premise GenAI platforms is widening security risks

Research finds increased adoption of unsanctioned generative artificial intelligence platforms is magnifying risk and causing a headache for security teams Continue Reading

By

• Alex Scroxton, Security Editor

Scattered Spider tactics continue to evolve, warn cyber cops

CISA, the FBI, NCSC and others have clubbed together to update previous guidance on Scattered Spider's playbook, warning of new social engineering tactics and exploitation of legitimate tools, among other things Continue Reading

By

• Alex Scroxton, Security Editor

AI-enabled security pushes down breach costs for UK organisations

Organisations that are incorporating AI and automation into their cyber security practice are seeing improved outcomes when incidents occur, according to an IBM study Continue Reading

By

• Alex Scroxton, Security Editor

GDPR’s 7th anniversary: in the AI age, privacy legislation is still relevant

Seven years after GDPR reshaped data protection, AI is forcing a fresh look at governance. GDPR’s principles remain critical, guiding ethical AI use, risk management, and trusted innovation Continue Reading

By

• James Hodge

Global cyber spend will top $200bn this year, says Gartner

Worldwide spending on cyber security will hit another record high in 2025, and will go higher still next year Continue Reading

By

• Alex Scroxton, Security Editor

Data resilience critical as ransomware attacks target backups

With more threat actors targeting backup repositories to ensure a payday, Veeam urges organisations to treat data resilience as a competitive advantage, not just an insurance policy Continue Reading

By

• Stephen Withers

The UK’s ransomware payment ban is a strategic win

The UK's proposed public sector ransomware payment ban could be a bold step, but it can't operate in isolation. Continue Reading

By

• Rob Dartnall, SecAlliance

SharePoint users hit by Warlock ransomware, says Microsoft

Microsoft’s security analysts confirm a number of cyber attacks on on-premise SharePoint Server users involve ransomware Continue Reading

By

• Alex Scroxton, Security Editor

Scattered Spider victim Clorox sues helpdesk provider

Cleaning products manufacturer Clorox fell victim to a Scattered Spider social engineering attack two years ago – it blames its IT helpdesk provider, Cognizant Continue Reading

By

• Alex Scroxton, Security Editor

Monzo’s £21m fine highlights banks’ cyber security failures

Monzo’s recent fine over failings in its customer verification processes highlights wider security and privacy shortcomings in the personal finance world Continue Reading

By

• Nicholas Fearn

Microsoft confirms China link to SharePoint hacks

Microsoft confirms two known China-nexus threat actors, and one other suspected state-backed hacking group, are exploiting vulnerabilities in SharePoint Server Continue Reading

By

• Alex Scroxton, Security Editor

Overconfidence in cyber security: a silent catalyst for CNI breaches

Many CNI organisations are perilously overconfident in their ability to manage and combat cyber risks, according to Bridewell research. This is leaving vital systems exposed. Continue Reading

By

• Anthony Young

Chinese cyber spies among those linked to SharePoint attacks

Exploitation of the ToolShell RCE zero-day in Microsoft SharePoint continues to gather pace, with evidence emerging of exploitation by nation state-backed threat actors Continue Reading

By

• Alex Scroxton, Security Editor

UK government to bring in ransomware payment ban

Critical infrastructure operators, hospitals, local councils and schools will be among those banned from giving in to cyber criminal demands as the UK moves forward with proposals to address the scourge of ransomware Continue Reading

By

• Alex Scroxton, Security Editor

Patch ToolShell SharePoint zero-day immediately, says Microsoft

The active exploitation of a dangerous zero-day vulnerability chain in Microsoft SharePoint – which was disclosed over the weekend – is underway. Immediate action is advised Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Jason Nurse, University of Kent

Jason Nurse, reader in cyber security at the University of Kent, discusses the psychological side of cyber and online safety, why placing blame on users as ‘the weakest link’ is wrong – and why security pros should think about user needs more Continue Reading

By

• Danny Palmer

Singapore under ongoing cyber attack from APT group

Nation-state actor UNC3886 is actively targeting Singapore’s critical national infrastructure in a sophisticated espionage and disruption campaign, with the country mounting a whole-of-government response Continue Reading

By

• Aaron Tan, Informa TechTarget

NCSC exposes Fancy Bear's Authentic Antics malware attacks

Amid a new round of UK government sanctions targeting Moscow's intelligence apparatus, the NCSC has formally attributed attacks orchestrated with a cleverly-designed malware to the GRU's Fancy Bear cyber unit Continue Reading

By

• Alex Scroxton, Security Editor

CW EMEA: Vive la AI

In this quarter’s CW EMEA, we look at how one of the Netherlands’ leading technology education centres, Eindhoven University of Technology, fell victim to sophisticated cyber attacks. What unfolded in the university’s reaction is evidence that the hard work and preparation for such an event pays off. Continue Reading

Co-op chief ‘incredibly sorry’ for theft of 6.5m members’ data

Co-op chief executive Shirine Khoury-Haq has revealed that all the personal data of all 6.5 million of its members was compromised in the April 2025 cyber attack on its systems Continue Reading

By

• Alex Scroxton, Security Editor

Scattered Spider playbook evolving fast, says Microsoft

Microsoft warns users over notable evolutions in Scattered Spider’s attack playbook, and beefs up some of the defensive capabilities it offers to customers in response Continue Reading

By

• Alex Scroxton, Security Editor

Securonix tackles security data deluge with AI-driven platform

As security data volumes grow and security budgets tighten, Securonix is betting on its AI-driven platform to help businesses manage threats cost-effectively, says its CEO Continue Reading

By

• Aaron Tan, Informa TechTarget

MoD cyber breach put thousands of Afghan lives at risk

More than 18,000 Afghan citizens eligible to relocate to the UK under a government programme to protect them from the Taliban were put at risk in a heretofore unreportable data breach Continue Reading

By

• Alex Scroxton, Security Editor

Datadog doubles down on APAC, targets faster growth

The observability tools supplier is executing a multi-year growth plan for Asia-Pacific and Japan, focusing on data residency, localisation and AI-driven observability to grow its market share Continue Reading

By

• Aaron Tan, Informa TechTarget

Luxury retailer LVMH says UK customer data was stolen in cyber attack

French luxury goods retailer LVMH has disclosed multiple cyber attacks in 2025 so far, and their impact is now spreading to the UK as a new incident affecting Louis Vuitton comes to light Continue Reading

By

• Alex Scroxton, Security Editor

Four arrested in M&S cyber attack investigation

Police have made four arrests in connection with a trio of cyber attacks on UK retailers Marks & Spencer, Co-op and Harrods Continue Reading

By

• Alex Scroxton, Security Editor

Qantas details impact of data breach on 5.7 million customers

Australian flag carrier begins notifying millions of individuals after a cyber attack on a call centre, confirming that while financial and passport details are safe, a significant volume of other personal information was compromised Continue Reading

By

• Aaron Tan, Informa TechTarget

M&S calls for mandatory ransomware reporting

The government should extend ransomware reporting mandates to businesses to help gather more intelligence and better support victims, says M&S chairman Archie Norman Continue Reading

By

• Alex Scroxton, Security Editor

SEC and SolarWinds to settle lawsuit over 2020 breach

The US SEC and SolarWinds have reached a settlement in principle to resolve litigation over alleged security failings that led to the 2020 compromise of the supplier’s Orion platform by Russian cyber spies Continue Reading

By

• Alex Scroxton, Security Editor

Proofpoint bets on APAC growth amid spike in AI-driven threats

With cyber attacks spiking in non-English-speaking markets such as Japan, the security firm is boosting its regional presence to combat a wave of AI-generated threats Continue Reading

By

• Aaron Tan, Informa TechTarget

Digital warfare is blurring civilian front lines

Singapore’s defence cyber chief warns that the traditional lines between military conflict and civilian life are blurring, with adversaries now targeting civilian systems and using AI to put the threat landscape on steroids Continue Reading

By

• Aaron Tan, Informa TechTarget

US CISA agency extends Iran cyber alert, warns of CNI threat

The US Cybersecurity and Infrastructure Security Agency reiterates guidance for operators of critical national infrastructure as it eyes the possibility of cyber attacks from Iran Continue Reading

By

• Alex Scroxton, Security Editor

Scattered Spider link to Qantas hack is likely, say experts

A developing cyber attack at Australian airline Qantas that started at a third-party call centre is already being tentatively attributed to Scattered Spider. Find out more and learn about the next steps for those affected Continue Reading

By

• Alex Scroxton, Security Editor

Dutch study uncovers cognitive biases undermining cyber security board decisions

Dutch research reveals how cognitive biases can lead to catastrophic security decisions Continue Reading

By

• Kim Loohuis

Qantas customer data exposed in contact centre breach

Australian flag carrier is investigating significant data theft of personal information for up to six million customers after a third-party platform used by its call centre was compromised Continue Reading

By

• Aaron Tan, Informa TechTarget

Podcast: AIOps in storage management, security and sustainability

Dell’s Stewart Hunwick explains why AIOps – artificial intelligence for IT operations – is key to gaining efficiencies in storage management and sustainability, and discusses reactive and proactive data security Continue Reading

By

• Antony Adshead, Storage Editor

Citrix Bleed 2 under active attack, reports suggest

Days after news emerged of a Citrix NetScaler flaw comparable in its scope and severity to 2023’s infamous Citrix Bleed, there are already clear indicators that threat actors are taking advantage of the critical vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

Scattered Spider cyber gang turns fire on aviation sector

Multiple reports are emerging of cyber attacks on airlines – Google Cloud’s Mandiant believes them to be linked Continue Reading

By

• Alex Scroxton, Security Editor

Over 2 million affected by US supermarket breach

Belgian-Dutch supermarket operator Ahold Delhaize reveals that more than two million people, including employees, had their data compromised following a November 2024 ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

British hacker IntelBroker faces years in a US prison cell

US authorities have unsealed charges against 25-year-old hacker Kai West, aka IntelBroker, accusing him of being behind multiple cyber attacks Continue Reading

By

• Alex Scroxton, Security Editor