Hackers and cybercrime prevention

IT Priorities 2022: Pandemic’s long tail for cyber buyers

Pandemic response has been top of mind for cyber leaders these past 18 months, and as Covid-19 turns two, the TechTarget/Computer Weekly IT Priorities 2022 study shows buyers are still focused on how Covid has upended the workplace Continue Reading

By

• Alex Scroxton, Security Editor

Surge in Nobelium-linked supply chain attacks

Mandiant’s researchers share new intel on two distinct clusters of Russian APT activity, linked to the Nobelium SolarWinds attackers Continue Reading

By

• Alex Scroxton, Security Editor

Millions of credit card details for sale on dark web for as little as 75p

The credit card details of millions of people from across the world can be bought by criminals using the dark web for as little as $1 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

A ‘whole of society’ approach to cyber may be on the horizon

Nominet Cyber managing director David Carroll reflects on the NCSC’s latest annual review amid 2021’s fast-evolving threat landscape Continue Reading

By

• David Carroll, Nominet Cyber

HP patches bugs in over 150 printer models

More than 150 HP multifunction printers are at risk of compromise through a series of newly disclosed vulnerabilities, one of them wormable Continue Reading

By

• Alex Scroxton, Security Editor

Recovering from ransomware: One organisation’s inside story

In February 2021, French office equipment supplier Manutan fell victim to a DoppelPaymer ransomware hit. IT ops director Jérôme Marchandiau tells the inside story of the incident Continue Reading

By

• Yann Serra, LeMagIT

British Army picks Immersive Labs for cyber training

The British Army will make Immersive Labs’ security training platform available to all serving personnel Continue Reading

By

• Alex Scroxton, Security Editor

UK’s surveillance culture may be normalising use of tech for abuse

Intense surveillance of public spaces by UK authorities may be playing a part in the normalisation of cyber stalking in intimate relationships Continue Reading

By

• Alex Scroxton, Security Editor

Government must prove its plans to police encryption work, says ex-cyber security chief

Ciaran Martin, the former UK cyber security chief, says the government must explain how it can access encrypted communications without damaging cyber security and weakening privacy Continue Reading

By

• Bill Goodwin, Computer Weekly

UK consumers warned of increase in credit card application fraud

There has been a sharp rise in fraudsters using stolen personal details to open credit card accounts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

black hat hacker

A black hat hacker has been historically used to describe one who has malicious intent -- such as theft of information, fraud or disrupting systems -- but increasingly, more specific terms are being used to describe those people. Continue Reading

By

• Katie Terrell Hanna
• Taina Teravainen

Consumer cyber bill to protect mobiles, smart devices

Product Security and Telecommunications Infrastructure Bill will reinforce protections for consumer devices and mandate improvements to default security settings Continue Reading

By

• Alex Scroxton, Security Editor

Apple sues under-fire malware firm NSO

Lawsuit alleges spyware firm NSO Group targeted Apple’s users, adding to the pressure on the under-fire company Continue Reading

By

• Alex Scroxton, Security Editor

Upcoming holidays prompt ransomware warning from authorities

Ransomware gangs know how calendars work, and may target their attacks around major holidays to take advantage of more people being off work, according to a new alert Continue Reading

By

• Alex Scroxton, Security Editor

Black Friday cyber warning for 4,000 card-skimming victims

NCSC warns thousands of small retailers that their websites are being exploited to steal customer data Continue Reading

By

• Alex Scroxton, Security Editor

CIO interview: Karl Hoods, CDIO, Department for Business, Energy and Industrial Strategy

Moving to the cloud, developing staff skills and responding quickly to the pandemic – from a public sector IT leader’s perspective Continue Reading

By

• Mark Samuels

Why is Emotet back, and should we be worried about it?

The sudden reappearance of Emotet this week has security teams on high alert, but do we need to be worried about its return, and what should we be doing about it? Continue Reading

By

• Alex Scroxton, Security Editor

GCHQ, NSA chiefs recommit to counter cyber threats

UK and US intelligence services reaffirm a joint commitment to disrupt and deter new and emerging cyber threats Continue Reading

By

• Alex Scroxton, Security Editor

Memento ransomware gang quick to retool for ‘optimum’ outcome

The operators of a new ransomware called Memento are quick to retool for ‘success’ if they run up against a competent defender, says Sophos Continue Reading

By

• Alex Scroxton, Security Editor

Alert over spate of Iran-linked BitLocker attacks

A joint advisory from western cyber agencies warns of a campaign of ‘ongoing malicious activity’ by an Iran-linked APT group exploiting BitLocker to extort its targets Continue Reading

By

• Alex Scroxton, Security Editor

Sky ECC provided free cryptophones to a Canadian police force

Internal emails disclosed in a US court show how Sky Global supplied sample encrypted phones to a Canadian police force before its phone users became subject to an international police investigation Continue Reading

By

• Bill Goodwin, Computer Weekly

Cryptophone supplier Sky Global takes legal action over US government website seizures

Canadian tech company Sky Global has filed a legal motion claiming that the US government unlawfully seized the company’s internet sites following police investigations into the use of its cryptophones by organised crime Continue Reading

By

• Bill Goodwin, Computer Weekly

Security startups line up on Cyber Runway

Some 108 cyber security startups representing the UK’s most cutting-edge innovators are to join Plexal’s Cyber Runway accelerator Continue Reading

By

• Alex Scroxton, Security Editor

Zero-days: The next element of the service-based cyber economy?

Digital Shadows researchers have reported on the emergence of zero-days as a service, which could be the next big thing in the cyber criminal underworld Continue Reading

By

• Alex Scroxton, Security Editor

Out of the shadows: The rise of ethical hackers in 2021

Ethical hackers working on the Bugcrowd platform have saved organisations almost $30bn in risk during the Covid-19 pandemic, as the community sheds old stereotypes Continue Reading

By

• Alex Scroxton, Security Editor

One-fifth of NCSC-supported cyber incidents linked to Covid-19

National Cyber Security Centre has helped to thwart multiple cyber incidents that could have seriously disrupted the UK’s response to the pandemic Continue Reading

By

• Alex Scroxton, Security Editor

UK government proposes new rules for digital supply chain security

Proposals could see IT service providers legally required to adhere to the NCSC’s Cyber Assessment Framework, among other things Continue Reading

By

• Alex Scroxton, Security Editor

BT applies Covid-19 R number modelling to threat response

A prototype cyber security tool developed at BT uses epidemiological principles to detect and respond to cyber threats Continue Reading

By

• Alex Scroxton, Security Editor

IT Priorities 2022: APAC enterprises invest in digital future

Nearly two-thirds of enterprises in Asia-Pacific plan to increase their IT budgets next year in areas such as cloud computing and cyber security to secure their digital future Continue Reading

By

• Aaron Tan, TechTarget

HPE’s Aruba networking unit hit by cyber attack

Undisclosed threat actor compromised data buckets used to run the Aruba Central cloud environment using a stolen access key Continue Reading

By

• Alex Scroxton, Security Editor

Finance ombudsman overturns more than three-quarters of bank decisions on APP fraud

The financial services ombudsman is siding with customers in over 75% of complaints against banks that refuse to repay losses to authorised push payment fraud Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Scale of crime-as-a-service economy a growing concern, say researchers

The cyber criminal underground continues its evolution towards a service-based economy Continue Reading

By

• Alex Scroxton, Security Editor

CW Benelux: Dutch IT company rips up the HR rule book for better work-life balance

One Dutch tech firm has used learnings from the pandemic to rip up its HR rule book and implement an official work-from-home policy. In fact, Infolearn has gone further than hybrid working, with a personal mobility budget for staff and a four-day working week, all with retention of full-time salary. Also in this issue, read how Dutch education administrators appear to be underestimating the threat of cyber crime. Continue Reading

Bank of England loses 161 computing devices in three years

Bank cannot account for phones, laptops and tablets that have gone missing over the past three years Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The Netherlands still lacks digital resilience, says report

 Continue Reading

The Secret IR Insider’s Diary – this is not a fashion show

In the latest pages taken from their diary, the Secret IR Insider reveals why organisations should be worried about every threat, not just the latest and greatest Continue Reading

By

• The Secret IR Insider, Check Point

US seeks to extradite REvil affiliate who attacked Kaseya

US Department of Justice unseals charges against a Ukrainian national accused of being behind the summer 2021 REvil ransomware attack on Kaseya Continue Reading

By

• Alex Scroxton, Security Editor

How a cloud-first strategy helped save animals in the pandemic

In this week’s Computer Weekly, we talk to the RSPCA about how its cloud-first strategy helped to save animals throughout the pandemic. Data warehouses have been part of the IT landscape for 30 years – but are they now old technology, and what’s next? And we assess how Brexit has affected risk and resilience in the datacentre. Read the issue now. Continue Reading

REvil associates arrested in international ransomware crackdown

Two individuals suspected of conducting 5,000 REvil ransomware attacks were arrested by Romanian police last week as an international crackdown on the crime gang gathers pace Continue Reading

By

• Alex Scroxton, Security Editor

Shock horror... Humans used for security validation instead of AI/M-L!

As a judge on the Tech Trailblazers awards, I can assure you of two security-related actuality wotsits: The onslaught of security start-ups is anything but slowing down; this year has seen a record ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Splunk’s cloud shift is paying off in APAC

Splunk’s Asia-Pacific business is growing faster than the rest of the company, but it’s not resting on its laurels Continue Reading

By

• Aaron Tan, TechTarget

Immutable snapshots aim to neutralise ransomware

Snapshots – usually immutable anyway – get functionality to stop ransomware intruders moving or deleting snapshots, so customers know they have clean copies of data to restore from Continue Reading

By

• Antony Adshead, Storage Editor

cache poisoning

Cache poisoning is a type of cyber attack in which attackers insert fake information into a domain name system (DNS) cache or web cache for the purpose of harming users. Continue Reading

By

• Rahul Awati

US offers $10m reward for intel on DarkSide ransomware gang

US government puts up a $10m reward for information on the DarkSide ransomware gang, the group that attacked Colonial Pipeline six months ago Continue Reading

By

• Alex Scroxton, Security Editor

The Netherlands works on resilience with large-scale national cyber exercise

For the Netherlands, the biggest challenge in a large-scale cyber crisis is to maintain speed while exercising due care Continue Reading

By

• Kim Loohuis

Spyware firm NSO and others added to US banned Entity List

US government bans target Israeli spyware makers and cyber firms in Russia and Singapore Continue Reading

By

• Alex Scroxton, Security Editor

UK’s Labour Party hit by third-party data breach

Data on Labour Party members was recently compromised in an apparent cyber attack on a third-party data processor Continue Reading

By

• Alex Scroxton, Security Editor

BlackMatter ransomware crew shuts down, leaves victims in a bind

The BlackMatter ransomware gang appears to be winding down its activities, possibly due to pressure from law enforcement Continue Reading

By

• Alex Scroxton, Security Editor

Convicted Silk Road admin stripped of £500k in crypto earnings

Jailed Silk Road administrator Thomas White, aka Cthulhu, has been ordered to hand over more than £490,000 of illicit earnings Continue Reading

By

• Alex Scroxton, Security Editor

What the Budget means for UK technology

In this week’s Computer Weekly, we look through the Chancellor’s Autumn Budget and Spending Review to find what it means for the UK tech sector. As COP26 starts, we assess the green credentials of the IT industry. And we hear one CTO’s experiences of learning the privacy lessons of GDPR. Read the issue now. Continue Reading

Businesses and governments urged to take action over Trojan Source supply chain attacks

Businesses and governments have been put on alert to guard against Trojan Source hacking attacks Continue Reading

By

• Bill Goodwin, Computer Weekly

Online Safety Bill puts user protection onus on platform providers

The Online Safety Bill will place new duties and responsibilities on online platforms accessible from the UK, but as it currently stands, it contains several grey areas Continue Reading

By

• Peter Ray Allison

Changing the rules against cyber attacks

UKRI’s John Goodacre reveals how projects supported by the Digital Security by Design Challenge aim to improve cyber security resilience, beginning with the very fundamentals of computing Continue Reading

By

• John Goodacre

CIA sought revenge against Julian Assange over hacking tool leaks, court hears

The CIA discussed kidnapping Julian Assange after WikiLeaks published thousands of documents revealing its arsenal of hacking tools, defence lawyers tell a London court Continue Reading

By

• Bill Goodwin, Computer Weekly

How ransomware crews pile on the pressure to get victims to pay

Sophos researchers share some of the more common tactics ransomware gangs use to pressurise their victims into paying up Continue Reading

By

• Alex Scroxton, Security Editor

‘No-one extradited from UK to US has committed suicide,’ US tells court in Assange appeal

US government claims that a district judge has given WikiLeaks founder Julian Assange a ‘trump card’ to avoid extradition   Continue Reading

By

• Bill Goodwin, Computer Weekly

Cyber sector growth exacerbating skills shortage

Data from security association (ISC)² shows demand for cyber pros is still outpacing supply as the sector continues an upward growth trajectory Continue Reading

By

• Alex Scroxton, Security Editor

DarkMarket takedown results in 150 arrests

A coordinated operation by law enforcement has seen 150 taken into custody amid allegations of buying or selling illicit goods on the dark web Continue Reading

By

• Alex Scroxton, Security Editor

Cyber experts on how to nobble a Nobelium attack

A recent spate of attempted Nobelium cyber attacks were mostly unsuccessful, but serve as a reminder to pay attention to some more fundamental aspects of security Continue Reading

By

• Alex Scroxton, Security Editor

Managing cyber risk by integrating supply chains

In this week’s Computer Weekly, our latest Buyer’s Guide examines the security and IT integration challenges of modern supply chains, especially post-pandemic – while we also talk to the CEO of software provider SolarWinds about how the company overcame its huge supply chain attack. And we look at how a small town in Lancashire was chosen as the HQ for the UK’s new National Cyber Force. Read the issue now. Continue Reading

Attempted hack causes Tesco website outage

Retailer’s website and app back after attempted hack caused problems over the weekend Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Multi-government operation targets REvil ransomware group

REvil has been forced offline by a multi-government hacking operation, marking the second time in 2021 that the group has gone dark Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Airport operator MAG boosts threat visibility with hybrid SOC

With budget concerns weighing heavy during the pandemic, Manchester Airports Group ditched an impending capex-heavy cyber investment in favour of a hybrid managed/in-house approach. Learn more about its experience Continue Reading

By

• Alex Scroxton, Security Editor

APAC organisations warm to zero trust

Two-thirds of APAC organisations have a zero-trust strategy even as they grapple with the lack of skills and other organisational challenges, study finds Continue Reading

By

• Aaron Tan, TechTarget

US intelligence agencies issue advisory on BlackMatter gang

Joint advisory on ransomware gang warns about potential of further attacks on critical infrastructure providers Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

LightBasin hackers breach 13 telcos in two years

Hackers have obtained an undisclosed volume of subscriber information and call metadata in a sustained campaign against telecommunications firms Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

How Samlesbury, Lancashire became the home of the National Cyber Force

The National Cyber Force, a new branch of the military, is gearing up to fight battles in cyber space from the fields of Lancashire. Its presence is expected to bring a high-tech renaissance to the region Continue Reading

By

• Bill Goodwin, Computer Weekly

No easy fix for vulnerability exploitation, so be prepared

Vulnerability management and disclosure is a tricky business with ethical and business ramifications for software vendors, CISOs and ethical hackers alike – and CISOs sit right in the middle of this Continue Reading

By

• Andrew Morris, Turnkey Consulting

Doing the right thing: How CISOs should approach responsible disclosure

Owen Wright, responsible for penetration testing and adversary simulation at Context, part of Accenture Security, advises how CISOs should approach responsible disclosure Continue Reading

By

• Owen Wright, Accenture Security

Apple scheme to detect child abuse creates serious privacy and security risks, say scientists

Apple’s plan to automatically scan photos to detect child abuse would unduly risk the privacy and security of law-abiding citizens and could open up the way to surveillance, say the world’s top cryptographic experts Continue Reading

By

• Duncan Campbell , 2QQ Ltd, Sussex University

CW APAC, October 2021: Tech Career Guide

Despite marked improvements, tech still faces a diversity problem. In this handbook, focused on cyber security’s gender gap in the Asia-Pacific region, Computer Weekly looks at the mentoring programmes aiming to combat the issue, the career path of IAG’s Elaine Muir, how hacking won Claudean Zheng a job and what else needs to be done to tackle the ongoing gender imbalance Continue Reading

NHS Digital enhances in-house cyber awareness drive

Keep IT Confidential campaign aims to help NHS staff understand more about security threats and learn how to reduce risk Continue Reading

By

• Alex Scroxton, Security Editor

FCA warns over future hybrid working security risks

Earlier this week, the Financial Conduct Authority issued fresh guidance to regulated organisations on keeping hybrid workers safe and secure Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft warns of MysterySnail on October Patch Tuesday

Microsoft has fixed a zero-day that is being actively exploited to deliver a new remote access trojan dubbed MysterySnail to targets Continue Reading

By

• Alex Scroxton, Security Editor

Former signals intel leader named godfather of UK security

Sixth annual Security Serious Unsung Heroes Awards honours former Royal Corps of Signals colonel and infosec pioneer John Doody Continue Reading

By

• Alex Scroxton, Security Editor

Australia unveils ransomware action plan

The Australian government has established a task force to address the ransomware menace and is proposing legislation to mandate reporting of ransomware incidents by businesses Continue Reading

By

• Stephen Withers

Microsoft thwarts mega-DDoS attack on Azure platform

2.4Tbps DDoS attack on an undisclosed Microsoft Azure customer may have been the largest ever attempted against a single target Continue Reading

By

• Alex Scroxton, Security Editor

Malaysia’s highway authority improves DR capabilities

The Malaysian Highway Authority is now more resilient against cyber attacks through a local disaster-recovery-as-a-service offering powered by Veeam software Continue Reading

By

• Edwin Yapp

Covid-19 will loom over cyber strategy for years to come

In remarks delivered to a Chatham House conference, NCSC head Lindy Cameron reflects on the security challenges facing the UK, and sets out some plans for the future Continue Reading

By

• Alex Scroxton, Security Editor

Singapore refreshes cyber security strategy

The city-state updates its national cyber security strategy to shore up the security of critical infrastructure and enterprises while growing its cyber security industry, among other goals Continue Reading

By

• Aaron Tan, TechTarget

Fast-moving Ryuk campaign targets healthcare organisations

Newly designated FIN12 gang leverages the work of the cyber criminal ecosystem to conduct lightning-fast ransomware attacks Continue Reading

By

• Alex Scroxton, Security Editor

Addressing the backup dilemma to ransomware recovery

Everyone knows good backups are essential if one is to recover from a ransomware attack, but using them effectively poses challenges that IT teams need to know about Continue Reading

By

• W Curtis Preston

Twitch data breach investigations continue

Investigations are ongoing into a 125GB data breach that hit livestreaming platform Twitch, apparently the work of hacktivists Continue Reading

By

• Alex Scroxton, Security Editor

US lawmakers propose ransomware reporting rules

Former presidential candidate Elizabeth Warren lends her support to a bill that would require corporate ransomware victims to disclose more information about their attacks to the authorities Continue Reading

By

• Alex Scroxton, Security Editor

Gaming service Twitch hacked, data leaked

Users of livestreaming platform Twitch may be at risk after a 125GB torrent of data was leaked Continue Reading

By

• Alex Scroxton, Security Editor

Apache web server users urged to patch immediately

New zero-day in Apache HTTP Server is already being actively exploited and must be addressed immediately Continue Reading

By

• Alex Scroxton, Security Editor

Auto-enrolment begins for Google multi-factor authentication

Google has started to turn on multi-factor authentication on consumer accounts by default, and aims to auto-enrol 150 million users by the end of 2021 Continue Reading

By

• Alex Scroxton, Security Editor

Top women in UK tech, AI on puffin island – Computer Weekly Downtime Upload podcast

In this episode, Caroline Donnelly, Clare McDonald and Brian McKenna discuss CW’s annual programme to choose the most influential women in UK tech, as well as Newham Sparks, and puffin-counting AI Continue Reading

By

• Caroline Donnelly, Senior Editor, UK
• Clare McDonald, Business Editor
• Brian McKenna, Enterprise Applications Editor

New Python-based ransomware attacks unfold in record time

Sophos researchers detail a new variety of Python-based ransomware attack targeting VMware ESXi-hosted VMs Continue Reading

By

• Alex Scroxton, Security Editor

Mandiant name returns to fore ahead of FireEye sale

Mandiant has completed its corporate rebrand pending the imminent sale of the FireEye products business to a private equity group Continue Reading

By

• Alex Scroxton, Security Editor

Two arrests made in European ransomware investigation

Unnamed ransomware operation was disrupted last week in Kiev, Ukraine, following a coordinated investigation Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Embracing vulnerability management for the greater good

When it comes to vulnerability management, CISOs should define a responsible disclosure policy so that they can receive and manage identified vulnerabilities transparently, practically and collaboratively, says Paul Watts of the ISF Continue Reading

By

• Paul Watts, Information Security Forum

Amnesty International exploited in malware campaign

According to new intelligence from Cisco Talos, Amnesty International’s branding and profile is being used as part of a new malware campaign that exploits people’s fears of the notorious Pegasus spyware app Continue Reading

By

• Alex Scroxton, Security Editor

JVCKenwood hit by Conti ransomware attack

Nearly 2TB of data was stolen from Japanese electronics firm in a Conti ransomware hit Continue Reading

By

• Alex Scroxton, Security Editor

IR35: Giant Group cyber attack prompts renewed calls for statutory regulation of umbrella companies

As details about the fallout from the cyber attack on the Giant Group umbrella company emerge, stakeholders say the incident should prompt the government to expedite regulating contractor payroll processing firms Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

UK consumers would collectively pay over £1bn a year for control of their data

UK consumers are willing to pay a small fee per month to have control of the data they share with Google and Facebook Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Russia arrests prominent cyber security executive

Founder and CEO of cyber security firm Group-IB detained in Moscow on treason charges Continue Reading

By

• Alex Scroxton, Security Editor

FoggyWeb malware latest tool of dangerous Nobelium APT

Microsoft’s threat intelligence team warns of a new strain of malware being used by the Russia-linked Nobelium APT Continue Reading

By

• Alex Scroxton, Security Editor

Dedicated number for victims of fraud launched amid national security threat

Consumers that suspect they are being targeted by fraudsters can call 159 to be directly linked to their bank, as part of a 12-month pilot Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The Security Interviews: How SolarWinds came through its darkest hour

In his first major UK press interview, SolarWinds CEO Sudhakar Ramakrishna tells Computer Weekly how a relentless focus on transparency saw the company safely through a nightmare cyber breach scenario Continue Reading

By

• Alex Scroxton, Security Editor