Hackers and cybercrime prevention

Security Think Tank: To tackle Covid-19, be prepared, flexible and resilient

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Dan Norman

NCSC issues coronavirus cyber security alert

The UK’s National Cyber Security Centre has issued a public alert and fresh guidance as more cyber criminals get wise to the lucrative potential of Covid-19 Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus-linked hacks likely as Czech hospital comes under attack

The world of cyber security is on high alert to heightened vulnerabilities as the spread of the Covid-19 coronavirus changes daily life across Europe Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: A guide to security best practice for pandemics

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Petra Wenham

UK’s security sector failing on most diversity measures

A DCMS report on the state of the UK’s cyber security workforce highlights a huge lack of diversity and a substantial skills gap Continue Reading

By

• Alex Scroxton, Security Editor

Turla’s use of Iranian infrastructure probably opportunistic

Turla, the Kremlin-linked APT group that last year hijacked an Iranian group’s infrastructure, was likely to have been operating opportunistically, according to researchers Continue Reading

By

• Alex Scroxton, Security Editor

Security pros just want to be loved, report finds

Being valued by the business for their role in keeping the organisation safe and upholding ethical standards is a primary motivator for CISOs and other security professionals Continue Reading

By

• Alex Scroxton, Security Editor

Cookie-stealing trojans found lurking on Android phones

Kaspersky discovers two new Android malware modifications that could give hackers control of their victims’ social media accounts Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft locks down new vulnerability with EternalBlue echoes

Microsoft has moved to get ahead of a serious remote code execution vulnerability in Microsoft Server Message Block 3.1.1, which was accidentally disclosed then missed in its March Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft fixes 26 critical vulnerabilities in another heavy Patch Tuesday

March’s Patch Tuesday is another big one for Microsoft, addressing 115 vulnerabilities, 26 of them critical Continue Reading

By

• Alex Scroxton, Security Editor

Schoolgirl security experts prepare to do battle

The finals of the CyberFirst Girls contest will take place on 16 March as the culmination of the NCSC’s annual competition to unearth future security talent Continue Reading

By

• Alex Scroxton, Security Editor

Hacking community targeted by cyber criminals in new trojan campaign

Cybereason’s Nocturnus threat research team has uncovered a cyber criminal campaign that weaponises popular hacking tools Continue Reading

By

• Alex Scroxton, Security Editor

VAT software supplier exposed data of millions

Eight million sales records belonging to UK and EU consumers left exposed due to misconfigured server Continue Reading

By

• Alex Scroxton, Security Editor

Bill Gates backs Crest fintech security scheme for Africa and Asia

UK-based cyber security accreditation and certification non-profit Crest has been awarded a $1.4m grant from the Bill and Melinda Gates Foundation to expand cyber security capacity for fintechs in Africa and Asia Continue Reading

By

• Alex Scroxton, Security Editor

DCMS to oversee coronavirus disinformation unit

A cross-departmental counter-disinformation unit will seek to protect and secure UK citizens from disinformation, scams and cyber security threats related to the Covid-19 outbreak Continue Reading

By

• Alex Scroxton, Security Editor

Boots and Tesco loyalty card schemes plagued by security issues

High-street retailers deal with fraudulent attempts to access the accounts of thousands of customers Continue Reading

By

• Angelica Mari

Cathay Pacific hit with £500,000 data protection fine from ICO over 2018 breach

Airline receives maximum financial penalty under Data Protection Act for data breach that led to nine million customers having their personal data accessed by hackers Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Australian government pulls plug on cloud certification programme

The Australian Signals Directorate is closing its cloud services certification programme to allow for more home-grown suppliers Continue Reading

By

• Aaron Tan, TechTarget

F-Secure reports a steep rise in hacking attempts

An increase in distributed denial of service attacks pushes up the volume of identified rogue internet traffic to almost three billion Continue Reading

By

• Cliff Saran, Managing Editor

Horangi and Tokio Marine team up on cyber security services

Singapore-based Horangi will provide penetration testing, among other cyber security services, to Tokio Marine Insurance Singapore’s cyber risk insurance clients Continue Reading

By

• Aaron Tan, TechTarget

Singapore among world’s top sources of online threats

Singapore remained a hotspot for originating cyber attacks in 2019, with 11 million attacks launched from servers in the city-state Continue Reading

By

• Aaron Tan, TechTarget

The Security Interviews: Inside the world of bug bounties

You may not make a million as a bug bounty hunter, but you might help remove some of the stigma that persists around cyber security, says HackerOne’s Shlomie Liberow Continue Reading

By

• Alex Scroxton, Security Editor

Data breaches in Australia showing no signs of abating

Compromised login credentials and human error were the most common causes of data breaches reported under Australia’s notifiable data breach regime from July to December 2019 Continue Reading

By

• Aaron Tan, TechTarget

NCSC makes ransomware attack guidance more accessible

Following a swathe of high-profile ransomware attacks, the UK’s National Cyber Security Centre has made changes to its guidance, emphasising the importance of offline backups Continue Reading

By

• Alex Scroxton, Security Editor

WikiLeaks founder Assange is well enough to participate in extradition proceedings, says judge

A judge dismissed claims that Julian Assange’s vulnerable psychological state would prevent him from taking part in his extradition hearing to face espionage and computer misuse charges in the US Continue Reading

By

• Greg Wilford

Clearview hack fuels debate over facial recognition

Customers of Clearview AI, a controversial startup that scrapes and sells billions of photos of people from social media to police forces, have found themselves at the centre of a major data breach Continue Reading

By

• Alex Scroxton, Security Editor

Redcar & Cleveland Council confirms ransomware attack

Local authority’s systems are still offline nearly three weeks after being attacked Continue Reading

By

• Alex Scroxton, Security Editor

CW Nordics: Swedes lose faith in social media as data security fears increase

Swedish citizens are becoming more concerned about the activities of social media companies and are reducing their online interaction with them as a result. Also read about new mobility-as-a-service projects gaining traction across Denmark, Finland, Norway and Sweden, and why the Finnish government has committed resources to a cyber security project aimed at local authorities. Continue Reading

Kr00k vulnerability compromises billions of Wi-Fi devices

Billions of Wi-Fi chips used in IoT devices, laptops, smartphones and tablets are vulnerable to a serious vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

IT Priorities 2020: ASEAN firms on the frontline of digital transformation

Southeast Asian companies plan to spend more on infrastructure and cyber security, but the growth in IT budgets appears to be slowing down Continue Reading

By

• Aaron Tan, TechTarget

Fake CDNs obscuring credit card fraudsters

Fake content delivery networks and ngrok servers are being pressed into service to obscure credit card skimming activities Continue Reading

By

• Alex Scroxton, Security Editor

Cloud Snooper firewall bypass may be work of nation state

Cloud Snooper deploys a combination of specialised techniques to sneak past enterprise firewalls, warns Sophos Continue Reading

By

• Alex Scroxton, Security Editor

WikiLeaks founder Julian Assange cannot be legally extradited for ‘political offences’, say lawyers

Lawyers for WikiLeaks founder Julian Assange argue that he has been charged with political offences and cannot be legally extradited to the US under the US-UK extradition treaty Continue Reading

By

• Greg Wilford

FCA data breach could happen to anybody, but easy to avoid

Minor data breach at the Financial Conduct Authority was the result of simple human error, and highlights the need for organisations to consider a wide range of potential threats Continue Reading

By

• Alex Scroxton, Security Editor

Julian Assange phoned White House to warn of risk to lives

Julian Assange phoned the White House to warn officials that unredacted cables published on the web posed a risk to lives, a court heard yesterday Continue Reading

By

• Bill Goodwin, Computer Weekly

Sports retailer Decathlon left employee data exposed

More than 123 million records were accidentally exposed on an unsecured ElasticSearch server Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Gil Shwed’s 10-year vision for security

Check Point founder Gil Shwed discusses his new Infinity Next concept and how he plans to remodel the world of cyber security in the next 10 years Continue Reading

Mastercard creates 1,500 tech jobs in Ireland

New roles at tech hub in Dublin will include professionals with expertise in artificial intelligence, cyber security, blockchain and user experience Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Cyber criminals targeting UK motorists, warns DVLA

Cyber criminals are offering various services and tax refunds that purport to be from the DVLA Continue Reading

By

• Alex Scroxton, Security Editor

Assange extradition is a politically motivated ‘abuse of power’, court hears

US government’s attempt to extradite WikiLeaks founder Julian Assange to face espionage charges in the US is politically motivated and an abuse of process, court told Continue Reading

By

• Bill Goodwin, Computer Weekly

WikiLeaks founder Assange ‘put lives at risk’ by disclosing names in leaked documents, court hears

WikiLeaks founder Julian Assange ‘put lives of US informants at risk’ by publishing unredacted documents, lawyers for the US argued at the first day of a week-long extradition hearing Continue Reading

By

• Bill Goodwin, Computer Weekly

Malicious apps still getting past Google controls

Check Point researchers have found multiple malware-infected apps in the Google Play store, including a clicker called Haken, which has been downloaded more than 50,000 times Continue Reading

By

• Alex Scroxton, Security Editor

F-Secure’s AI reads mean tweets to fight abuse and trolls

Researchers working on F-Secure’s Project Blackfin have developed a model for clustering tweets to help pinpoint abuse and harassment Continue Reading

By

• Alex Scroxton, Security Editor

The greatest contest ever – privacy versus security

Examining the technical, legal and ethical challenges around the privacy versus security debate Continue Reading

By

• Elliot Rose, PA Consulting

Addressing the IoT security challenge

We consider how best to address some of the critical security challenges around the internet of things Continue Reading

By

• Charaka Goonatilake, Panaseer

UK and US accuse Russian spooks of Georgia cyber attacks

Foreign secretary describes 2019 campaign of cyber attacks as reckless, brazen and unacceptable Continue Reading

By

• Alex Scroxton, Security Editor

Facilities firm ISS World crippled by ransomware attack

An apparent ransomware attack has compromised some IT and email systems at Danish facilities firm ISS World Continue Reading

By

• Alex Scroxton, Security Editor

Blasé directors put business data at risk

The higher up within a business you go, the more likely you are to find people intentionally leaking confidential data, says Egress Continue Reading

By

• Alex Scroxton, Security Editor

US ‘breached due process’ in spying operation against Julian Assange’s lawyers

Surveillance footage of Julian Assange’s meetings with lawyers and doctors in the Ecuadorian Embassy in London was an “abuse of process” Continue Reading

By

• Bill Goodwin, Computer Weekly
• Sander Priston

Girlguiding hosts interactive cyber security workshop

100 Guides from South West England took part in an NCSC event to learn more about security fundamentals Continue Reading

By

• Alex Scroxton, Security Editor

Untrusted security teams being left out of business decisions

Only a third of organisations are involving their cyber security function at the planning stage of business initiatives Continue Reading

By

• Alex Scroxton, Security Editor

Is this Netflix-style thriller the future of security training?

Cyber awareness specialists at KnowBe4 reckon that bringing Netflix-style production values to corporate videos heralds a new approach to security training Continue Reading

By

• Alex Scroxton, Security Editor

Trust no one – the benefits of zero-trust security

In this week’s Computer Weekly, we take an in-depth look at zero-trust security and examine how it changes traditional IT risk models. After SAP extended the support deadline for its ECC ERP system, we find out the options for users. And we analyse explainable AI and the ethical importance of understanding algorithms. Read the issue now. Continue Reading

Australians more savvy about cyber security

More Australians look out for signs of security features such as SSL encryption even as they remain sceptical of the data protection capabilities of small businesses Continue Reading

By

• Aaron Tan, TechTarget

Mastercard opens European security resilience unit

Mastercard’s European Cyber Resilience Centre will bring together its partners and other industry bodies to support enterprise resilience Continue Reading

By

• Alex Scroxton, Security Editor

Ex-soldiers to become ethical hackers

A new programme will give armed forces veterans in Scotland a grounding in cyber security skills, including penetration testing and ethical hacking Continue Reading

By

• Alex Scroxton, Security Editor

Cyber criminals spread coronavirus conspiracy theories

The latest email campaigns identified by Proofpoint are spreading conspiracy theories about the coronavirus outbreak Continue Reading

By

• Alex Scroxton, Security Editor

Emotet evolving to exploit coronavirus fear

With coronavirus cases now reported across the world, Emotet campaigns are exploiting legitimate fears to compromise their targets Continue Reading

By

• Alex Scroxton, Security Editor

Internet Explorer zero day among 99 Patch Tuesday problems

After an eventful January Patch Tuesday that marked the end of support for Windows 7, the February 2020 update is another whopper, fixing close to 100 vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

Inside the SOC: the nerve centre of security operations

Security operations centres are the bedrock of any cyber defence strategy, but operating one is increasingly challenging, with mounting workloads and a shortage of skilled personnel Continue Reading

By

• Aaron Tan, TechTarget

Mac-based security threats outpacing Windows

Security threats targeting Apple endpoints are growing more quickly than those targeting Windows machines, according to Malwarebytes Continue Reading

By

• Alex Scroxton, Security Editor

Chinese military personnel accused of Equifax hack

A US federal grand jury has indicted four Chinese army personnel over the 2017 Equifax breach Continue Reading

By

• Alex Scroxton, Security Editor

What should be in Australia’s next cyber security strategy

The Australian government is reviewing the nation’s cyber security strategy, but is it looking at the right issues? Continue Reading

By

• Stephen Withers

Security Think Tank: Zero trust is complex, but has rich rewards

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Bhanu Jagasia

RobbinHood ransomware tricks Windows into deleting defences

By subverting kernel memory settings in Windows 7, Windows 8 and Windows 10, the RobbinHood ransomware can now delete cyber security defences from target systems Continue Reading

By

• Alex Scroxton, Security Editor

Joaquin Phoenix’s Joker is ‘most dangerous’ movie

Ahead of the 2020 Oscars, Kaspersky researchers say they found more than 300 files masquerading as the Joker movie Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: No trust in zero trust need not be a problem

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Silvano Sogus

Maastricht University pays €200,000 to Russian hackers

A Dutch university has taken the difficult decision to pay hundreds of thousands of Euros to Russian hackers that compromised its systems through a ransomware attack Continue Reading

By

• Kim Loohuis

Stressed, overworked CISOs losing £23k a year in unpaid overtime

Nominet’s latest CISO Stress Report has revealed the extent to which organisations are taking advantage of their security staff, and the deleterious effects of overwork and stress on mental health Continue Reading

By

• Alex Scroxton, Security Editor

Darktrace signs to McLaren for 2020 F1 season

McLaren Racing has enlisted Darktrace to become its official artificial intelligence cyber security partner Continue Reading

By

• Alex Scroxton, Security Editor

Scammers using fake PayPal emails stole over £1m in the UK in last quarter

Fraudsters tricked Brits into sending over £1m worth of goods to them that they hadn't paid for Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Web app ubiquity gives cyber criminals new opportunities

The popularity and ubiquity of web-based apps such as Office 365 and Salesforce is a temptation too good to miss for cyber criminals Continue Reading

By

• Alex Scroxton, Security Editor

Check Point pledges end to security updates

Check Point’s Gil Shwed expands on a vision for the next 10 years of cyber security, which he calls Infinity Next Continue Reading

By

• Alex Scroxton, Security Editor

IoT network flaw left Philips Hue bulbs open to attack

Vulnerabilities in the ZigBee internet of things networking protocol have left market-leading smart devices, including Philips Hue lightbulbs, open to exploitation Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Zero trust is not the answer to all your problems

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Mike Gillespie

Podcast: The Computer Weekly Downtime Upload – Episode 45

In this week’s episode of the Computer Weekly Downtime Upload podcast, Caroline Donnelly, Clare McDonald and Brian McKenna are joined by investigations editor Bill Goodwin to delve deeper into the Travelex and related affairs, and to discuss public sector cloud trends, AI and the NHS, and the Hangar 51 startups accelerator programme Continue Reading

By

• Brian McKenna, Enterprise Applications Editor
• Caroline Donnelly, Senior Editor, UK
• Clare McDonald, Business Editor

Security Think Tank: Facing the challenge of zero trust

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Eoin Keary

Ethics and the internet – how to build a web we can trust

In this week’s Computer Weekly, we examine the steps being taken to ensure the future development of the web is ethical and open. We discuss the UK’s cyber security skills gap and ask what more the government should be doing. And we find out how cloud technology could help people stop smoking. Read the issue now. Continue Reading

Can the UK government’s efforts solve the cyber skills gap?

There has been an active effort by the UK government to tackle the lack of skills in the cyber security space – but is it enough? Continue Reading

NHS adds supplier security audits to procurement platform

A new feature in the NHS’s Edge4Health procurement platform will help NHS suppliers improve their cyber security posture and NHS organisations make better buying decisions Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Zero trust – just another name for the basics?

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Tim Holman, 2-sec

Davos: The clock is ticking on climate change but cyber crime and emerging technologies add to risks

Climate change, natural disasters, extreme weather and loss of biodiversity are the greatest risks we face. With cyber conflicts, state-sponsored hacking and internet fragmentation, doing nothing is not an option, says the World Economic Forum Continue Reading

By

• Bill Goodwin, Computer Weekly

UK police arrest three over Maltese cyber bank robbery

The NCA has made three arrests in Belfast and London following an investigation into money laundering linked to a cyber heist on a bank in Malta Continue Reading

By

• Alex Scroxton, Security Editor

NCSC launches study on cyber security diversity

The UK’s National Cyber Security Centre wants to improve the diversity of the cyber security sector Continue Reading

By

• Alex Scroxton, Security Editor

First coronavirus cyber threats seen in the wild

Kaspersky has reported the first incidences of cyber security threats playing on fears of the emerging coronavirus Continue Reading

By

• Alex Scroxton, Security Editor

UK cyber security sector worth more than £8bn

The UK’s cyber security industry employs 43,000 full-time workers, and contributed nearly £4bn to the UK economy in 2019, according to DCMS Continue Reading

By

• Alex Scroxton, Security Editor

NHS suffers fewer ransomware attacks, but threat persists

Ransomware attacks against the NHS have tapered off dramatically, according to statistics obtained under FoI legislation, but this does not mean the threat has diminished Continue Reading

By

• Alex Scroxton, Security Editor

Fintechs fear deepfake fraud

New research reveals the majority of CISOs working in the financial services sector are increasingly concerned about the potential use of deepfakes Continue Reading

By

• Alex Scroxton, Security Editor

Interpol uncovers cyber crime operation in Indonesia

An Interpol-coordinated cyber operation leads to the arrest of three people in Indonesia who allegedly used a JavaScript-sniffer malware to steal payment card details of online shoppers Continue Reading

By

• Aaron Tan, TechTarget

UK in catch-22 decision over Huawei security

The UK’s final decision on whether to permit mobile operators to use Huawei equipment is expected imminently, and its decision will have ramifications far beyond the technology sphere Continue Reading

By

• Alex Scroxton, Security Editor

Government tightens law around IoT cyber security

New legislation developed by DCMS and the NCSC may help guarantee the security and privacy of users of consumer IoT devices Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Bug bounties are changing the image of hackers

The traditional picture of a hacker is of a script kiddie in a hoodie hunched over a computer keyboard, but this stereotype is stale and outdated. Is it time to move away from a fear-based approach to security? Continue Reading

By

• Paul Holland, Information Security Forum

SANS Institute calls on Manchester security pros

Manchester will play host to a week-long cyber security training event during February Continue Reading

By

• Alex Scroxton, Security Editor

Cyber gangsters publish staff passwords following ‘Sodinokibi’ attack on car parts group Gedia

Sodinokibi hacking group steps up pressure on German automotive manufacturer by publishing information, including the CEO’s computer password and sensitive details of its IT systems, on the internet Continue Reading

By

• Bill Goodwin, Computer Weekly

NHS alerted to severe vulnerabilities in GE health equipment

A series of vulnerabilities in patient monitoring equipment manufactured by General Electric could have left patient data exposed in hospitals around the world, including the UK Continue Reading

By

• Alex Scroxton, Security Editor

Milan hosts Cisco’s first European security innovation unit

Cisco has cut the ribbon on its first Cyber Security Co-Innovation Centre in Europe, at Milan’s Leonardo da Vinci Science and Technology Museum Continue Reading

By

• Alex Scroxton, Security Editor

Travelex hackers shut down German car parts company Gedia in massive ‘cyber attack’

Car parts manufacturer says cyber attack will have far-reaching consequences for its business, and it has put emergency plans in place to continue deliveries Continue Reading

By

• Bill Goodwin, Computer Weekly

CISOs fear becoming the next Travelex

Poll of security professionals by the organisers of the Infosecurity Europe trade fair highlights huge gaps in incident response capabilities Continue Reading

By

• Alex Scroxton, Security Editor

Seven projects funded to explore CAV security

The winners of the Cyber Securities Feasibility Studies contest, exploring cyber security for self-driving cars, have been revealed Continue Reading

By

• Alex Scroxton, Security Editor

Six disaster recovery pitfalls and how to avoid them

We look at some key pitfalls in disaster recovery, such as failing to plan, not testing the plan, not protecting backups, poor communication and neglecting the human element Continue Reading

By

• Stephen Pritchard