IT for financial services

iOS vuln leaves user data dangerously exposed

Jamf threat researchers detail an exploit chain for a recently patched iOS vulnerability that enables a threat actor to steal sensitive data, warning that many organisations are still neglecting mobile updates Continue Reading

By

• Alex Scroxton, Security Editor

Defending against cyber grinches: AI for enhanced security

On the Seventh Day of AI, Defending against cyber grinches: AI for enhanced security, we explore the double-edged sword of AI in cybersecurity and how businesses can protect themselves against the cyber grinches. Continue Reading

By

• Justin Young, ANS

In 2025: Identities conquer, and hopefully unite

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Stephen McDermid, Okta

AI and cloud: The perfect pair to scale your business in 2025

On the Sixth Day of AI, we explore how leveraging AI and cloud can enhance business performance and shares tips for successful implementation. Continue Reading

By

• Matt Gallagher, ANS

Six trends that will define cyber through to 2030

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Pierre-Martin Tardif, ISACA

How AI can help you attract, engage and retain the best talent in 2025

On the Fifth Day of AI, we explore how AI is reshaping HR – boosting productivity, addressing concerns, and preparing organisations for the future. Continue Reading

By

• Toria Walters, ANS

Are you on the naughty or nice list for responsible AI adoption?

On the Fourth Day of AI, we discuss the value of adopting AI responsibly, and outlines how businesses can build responsible adoption into their plans Continue Reading

By

• Kyle Hill, ANS

The most pressing challenges for CISOs and cyber security teams

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Elliot Rose, PA Consulting

2025: The year of AI for business - top trends to watch out for

On the Third Day of AI, we explore some of the key trends to keep an eye on, and prepare for, in 2025 Continue Reading

By

• Chris Huntingford, ANS

All businesses want for Christmas is a clear definition of AI

On the second of the 12 Days of AI, we look at the importance of truly understanding what AI is to enable true organisational transformation. Continue Reading

By

• Janet Robb, ANS

NCSC boss calls for ‘sustained vigilance’ in an aggressive world

NCSC CEO Richard Horne is to echo wider warnings about the growing number and severity of cyber threats facing the UK as he launches the security body’s eighth annual report Continue Reading

By

• Alex Scroxton, Security Editor

CISOs will face growing challenges in 2025 and beyond

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Mike Gillespie and Ellie Hurst, Advent IM

Unwrapping the benefits of AI for marketing

In the first of a new series of articles, the 12 Days of AI, we explore how AI is being used in marketing, the benefits and key use cases, as well as concerns and how marketers can best take advantage of AI Continue Reading

By

• Sophie Rea, ANS

UK economy could see £600m boost through digital IDs for businesses

Government-backed organisation kicks off initiative to widen use of digital identities, in an effort to streamline financial services and cut hundreds of millions of pounds of economic crime Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Automated patch management: A proactive way to stay ahead of threats

Timely patch management should be crucial in any organisation, but too often it goes by the wayside. Automating the process may offer a path forward for hard-pressed cyber defenders Continue Reading

By

• Isla Sibanda

In the cloud, effective IAM should align to zero-trust principles

The Security Think Tank considers best practices in identity and access management and how can they be deployed to enable IT departments to combat cyber-attacks, phishing attacks and ransomware Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

Russian threat actors poised to cripple power grid, UK warns

UK government escalates cyber rhetoric in a speech at a Nato event, saying Russian advanced persistent threats stand ready to conduct cyber attacks that could ‘turn off the lights for millions’ Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft calls on Trump to ‘push harder’ on cyber threats

Microsoft’s Brad Smith urges president-elect Donald Trump to keep the faith when it comes to fighting back against hostile cyber actors from China, Iran and Russia Continue Reading

By

• Alex Scroxton, Security Editor

Geopolitical strife drives increased ransomware activity

The lines between financially motivated cyber criminals and nation state APTs are rapidly blurring, as geopolitical influences weigh heavily on the threat landscape, according to data from NCC Continue Reading

By

• Alex Scroxton, Security Editor

BianLian cyber gang drops encryption-based ransomware

The Australian and American cyber authorities have published updated intelligence on the BianLian ransomware gang, which has undergone a rapid evolution in tactics Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft slaps down Egyptian-run rent-a-phish operation

Microsoft’s Digital Crimes Unit has conducted a successful takedown of almost 250 malicious websites used in the cyber criminal ONNX phishing-as-a-service operation Continue Reading

By

• Alex Scroxton, Security Editor

Apple addresses two iPhone, Mac zero-days

Two zero-day vulnerabilities uncovered in Apple’s operating systems could have allowed for arbitrary code execution and cross-site scripting attacks Continue Reading

By

• Alex Scroxton, Security Editor

Underfunded, under pressure: We must act to support cyber teams

With almost half of cyber pros experiencing more incidents this year, security leaders say their teams are coming under increasing strain. Businesses must be more proactive approach about building a resilient, future-ready workforce Continue Reading

By

• Chris Dimitriadis, ISACA

Overcoming the cyber paradox: Shrinking budgets – growing threats

The challenging macro environment has left security budgets stretched thin even while new tech like AI presents a threat multiplier. In the face of these challenges, it becomes vital for security leads to do more to maintain funding Continue Reading

By

• Richard Watson, EY

Nationwide Building Society backs HPE GreenLake for hybrid cloud push

Nationwide Building Society's digital transformation efforts are continuing apace, with the company enlisting the help of HPE GreenLake to meet its hybrid cloud goals Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

How banks are navigating the AI landscape

Industry experts discuss the transformative potential of artificial intelligence in banking, while addressing the challenges and governance implications of integrating AI into financial services Continue Reading

By

• Aaron Tan, TechTarget

AWS widening scope of MFA programme after early success

AWS reports strong take-up of multi-factor authentication among customers since making it compulsory for root users earlier this year, and plans to expand the scope of its IAM programme in spring 2025 Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft fixes 89 CVEs on penultimate Patch Tuesday of 2024

High-profile vulns in NTLM, Windows Task Scheduler, Active Directory Certificate Services and Microsoft Exchange Server should be prioritised from November’s Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

Zero-day exploits increasingly sought out by attackers

Threat actors increasingly favour zero-day exploits to attack their victims before patches become available, according to the NCSC and CISA, which have just published a list of the most widely used vulnerabilities of 2023 Continue Reading

By

• Alex Scroxton, Security Editor

Strengthening cyber: Best IAM practices to combat threats

The Security Think Tank considers best practices in identity and access management and how can they be deployed to enable IT departments to combat cyber-attacks, phishing attacks and ransomware Continue Reading

By

• Andrew Peel, Scott Swalling, PA Consulting

How quantum computing could reshape financial services

Experts at the Singapore FinTech Festival predict quantum computing will improve risk management, investment strategies and fraud detection in the financial sector, while also posing new challenges for data security Continue Reading

By

• Aaron Tan, TechTarget

Beyond VPNs: The future of secure remote connectivity

As more companies adopt cloud services and remote work, the limitations of VPNs are becoming obvious. We explore what’s next for secure remote connectivity Continue Reading

By

• Isla Sibanda

What are the security risks of bring your own AI?

The rise of generative AI has led to a plethora of publicly accessible artificial intelligence tools, but what are the risks when external AI tools are used with corporate data? Continue Reading

By

• Peter Ray Allison

Google Cloud MFA enforcement meets with approval

Latest Google Cloud policy to enforce multifactor authentication across its user base is welcomed by security professionals Continue Reading

By

• Alex Scroxton, Security Editor

AI a force multiplier for the bad guys, say cyber pros

CIISec’s annual report on the security profession finds evidence of growing concern that artificial intelligence will ultimately prove more useful to threat actors than defenders Continue Reading

By

• Alex Scroxton, Security Editor

User-centric security should be core to cloud IAM practice

The Security Think Tank considers best practices in identity and access management and how can they be deployed to enable IT departments to combat cyber-attacks, phishing attacks and ransomware Continue Reading

By

• Mike Gillespie

Financiers isolate Middle East over sanctions-evading paytech

Cross-border payment system loses support of association of global central banks Continue Reading

By

• Mark Ballard

CISA looks to global collaboration as fraught US election begins

The US' CISA cyber agency has unveiled a two-year International Strategic Plan to advance collaboration and improve resilience against shared risks and threats Continue Reading

By

• Alex Scroxton, Security Editor

Bank of England warns against AI ‘complacency’

UK financial services regulator wants to increase understanding of AI’s benefits and how firms are managing the risks it poses, as take-up grows and use cases increase Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

RedLine, Meta malwares meet their demise at hands of Dutch cops

A multinational action led by authorities in the Netherlands has resulted in the takedown of the notorious RedLine and Meta infostealer malwares Continue Reading

By

• Alex Scroxton, Security Editor

IAM best practices for cloud environments to combat cyber attacks

The Security Think Tank considers best practices in identity and access management and how can they be deployed to enable IT departments to combat cyber-attacks, phishing attacks and ransomware Continue Reading

By

• Varun Prasad, ISACA

EMEA businesses siphoning budgets to hit NIS2 goals

With NIS2 now in effect, European business leaders are having to divert budget from elsewhere to achieve compliance Continue Reading

By

• Alex Scroxton, Security Editor

Tata Consultancy Services to deliver Irish pension scheme

Indian IT services giant adds to its growing customer base in the pensions sector with Irish contract win Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

How Manulife is empowering sales and call centre agents with AI

Canadian insurance giant is leveraging generative AI to personalise customer experiences, transform contact centre workflows and automate underwriting processes Continue Reading

By

• Aaron Tan, TechTarget

Prudential taps AI to improve health insurance experience

Insurance giant Prudential teams up with Google Cloud to streamline claims processing, personalise healthcare journeys and improve health outcomes Continue Reading

By

• Aaron Tan, TechTarget

Danish government reboots cyber security council amid AI expansion

Denmark’s government relaunches digital security initiative to protect business sectors and society at large Continue Reading

By

• Gerard O'Dwyer

Techcombank’s tech investments set to fuel record profit

The Vietnam bank is targeting $1bn in profit in 2024 while maintaining a flat headcount and reducing physical branches, thanks to its investments in artificial intelligence and a data engine Continue Reading

By

• Ai Lei Tao

Robust cloud IAM should align to zero-trust principles

The Security Think Tank considers best practices in identity and access management and how can they be deployed to enable IT departments to combat cyber-attacks, phishing attacks and ransomware. Continue Reading

By

• Ricky Simpson, Quorum Cyber

Gartner: AI can be catalyst for new business models

Gartner expert Nicholle Lindner explains how companies like Klarna are leveraging AI to drive new revenue, and what businesses need to consider when embracing the technology Continue Reading

By

• Ai Lei Tao

How Recorded Future finds ransomware victims before they get hit

Threat intel specialists at Recorded Future have shared details of newly developed techniques they are using to disrupt Rhysida ransomware attacks before the gang even has a chance to execute them Continue Reading

By

• Alex Scroxton, Security Editor

MoneyGram customer data breached in attack

MoneyGram confirms that customer data has been stolen in an incident that appears to have started with a social engineering attack on its IT helpdesk staff Continue Reading

By

• Alex Scroxton, Security Editor

Five zero-days to be fixed on October Patch Tuesday

Stand-out vulnerabilities in Microsoft’s latest Patch Tuesday drop include problems in Microsoft Management Console and the Windows MSHTML Platform Continue Reading

By

• Alex Scroxton, Security Editor

Secureworks: Ransomware takedowns didn’t put off cyber criminals

The number of active cyber criminal ransomware gangs has surged by almost a third in the space of 12 months, according to the latest intelligence from Secureworks Continue Reading

By

• Alex Scroxton, Security Editor

NCSC celebrates eight years as Horne blows in

Outgoing NCSC interim leader Felicity Oswald shares her thoughts on the body’s work over the past eight years as she hands over the reins to incoming CEO Richard Horne Continue Reading

By

• Alex Scroxton, Security Editor

Cups Linux printing bugs open door to DDoS attacks, says Akamai

The Cups Linux printing vulnerabilities disclosed at the end of September would seem to have a nasty sting in their tail, according to researchers at Akamai Continue Reading

By

• Alex Scroxton, Security Editor

SOC teams falling out of love with threat detection tools

Security operations centre practitioners are fed up of being flooded with pointless alerts and many no longer have much confidence in their threat detection tools, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Rise of the cyber clones: When seeing isn’t believing

It is frighteningly easy to clone someone else's identity using readily-available artificial intelligence tools Continue Reading

By

• Jake Moore, ESET

‘Shocked’ MoneyGram hits back at Post Office

Money transfer fintech wrote to subpostmasters expressing its disappointment with the Post Office over end of contract Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

AI advances in cancer care

In this week’s Computer Weekly, medtech startups are showing how AI can offer dramatic advances in cancer care – we talk to one such firm to find out more. Every CIO is used to delivering rapid response times for users, but not many target latency of eight nanoseconds – we find out how it’s done. And we examine the latest trends on datacentre cooling in the light of advances in energy efficiency. Read the issue now. Continue Reading

Cyber teams say they can’t keep up with attack volumes

Over 60% of European security pros say their teams are understaffed, and over 50% don’t have enough budget, according to data from ISACA Continue Reading

By

• Alex Scroxton, Security Editor

The cyber industry needs to accept it can't eliminate risk

The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading

By

• Paul Lewis, Nominet

Defaulting to open: Decoding the (very public) CrowdStrike event

The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading

By

• Elliott Wilkes, ACDS

Cyber companies need a best practice approach to major incidents.

The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading

By

• Andy Bridden and Ashley Barker, PA Consulting

Money transfer firm MoneyGram rushes to contain cyber attack

Money transfer specialist MoneyGram services remain down several days after a network outage developed into a full-blown cyber security incident Continue Reading

By

• Alex Scroxton, Security Editor

Unique malware sample volumes seen surging

BlackBerry’s latest ‘Global threat intelligence’ report details a surge in unique malware samples as threat actors ramp up the pace of targeted attacks Continue Reading

By

• Alex Scroxton, Security Editor

How to respond when your cyber company becomes the story

The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading

By

• Stephen McDermid

Security Think Tank: Win back lost trust by working smarter

The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

Gartner: Mitigating security threats in AI agents

Agents represent a step-change in the use of artificial intelligence in the enterprise - as attendees at Salesforce's annual conference saw first hand this month - but do not come without their risks Continue Reading

By

• Avivah Litan, Gartner

Metro Bank outsources IT to Infosys to cut costs and digitally transform

Indian IT services giant taken on to support Metro Bank’s digital transformation in multi-year deal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CrowdStrike incident shows we need to rethink cyber

The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading

By

• Mike Gillespie

HSBC tests post-quantum VPN tunnel for digital ledgers

Encryption required for post-quantum cryptography will have a material impact on the performance of distributed ledgers Continue Reading

By

• Cliff Saran, Managing Editor

Dreamforce 24: Salesforce taps Nvidia to power Agentforce

At Dreamforce in San Francisco, Salesforce and Nvidia detail some of the tech that will power the software giant's newly launched Agentforce service Continue Reading

By

• Alex Scroxton, Security Editor

Dreamforce 2024: Salesforce calls on customers to flesh out AI vision

A stream of customers helped Salesforce make the case for its Agentforce artificial intelligence offering on the opening day of the annual Dreamforce conference in San Francisco Continue Reading

By

• Alex Scroxton, Security Editor

Barclays takes on more GreenLake

Barclays has ramped up its HPE-powered private cloud, as it continues to modernise IT and reduce its carbon footprint Continue Reading

By

• Cliff Saran, Managing Editor

Mphasis expands UK roots with leap into quantum computing

Indian heritage software development services supplier opens London hub to help customers integrate the latest technologies into their business plans Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NCSC and allies call out Russia's Unit 29155 over cyber warfare

The NCSC and counterpart agencies from the US and other countries have exposed a long-running campaign of Russian cyber espionage and warfare conducted by GRU Unit 29155 Continue Reading

By

• Alex Scroxton, Security Editor

Fog ransomware crew evolving into wide-ranging threat

The emergent Fog ransomware gang appears to be changing up its victimology in search of more cash-rich victims Continue Reading

By

• Alex Scroxton, Security Editor

Lloyds Bank uses artificial intelligence to check trade finance documents

Bank is automating checks of digital and paper-based documentation in trade financing with the help of artificial intelligence Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Fraud and scam complaints hit highest ever level in UK

The Financial Ombudsman Service says it recorded almost 9,000 complaints about fraud and scams from April to June, the most ever recorded Continue Reading

By

• Alex Scroxton, Security Editor

TSB systems could be on the move again as BBVA eyes its parent

TSB was migrated to the systems of Sabadell in a project remembered for its monumental IT meltdown in 2018 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Nationwide development platform uses Red Hat technology

Building society is speeding up its software releases through Red Hat cloud application development platform Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK and Ukraine digital trade deal comes into force

The UK eases access to the deep tech startup community in Ukraine through digital-only agreement Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Iranian APT caught acting as access broker for ransomware crews

Members of Iran-backed Pioneer Kitten APT appear to be trying to supplement their pay packets by helping Russian-speaking ransomware gangs to access their victims in exchange for a cut of the profits Continue Reading

By

• Alex Scroxton, Security Editor

Cyber law reform should be top of Labour's policy list

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Craig Watt

A coherent Labour cyber strategy depends on consistency

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Aled Lloyd Owen

Global cyber spend to rise 15% in 2025, pushed along by AI

Security spending will increase at pace in 2025, with artificial intelligence, cloud and consultancy services all pushing outlay to new highs, according to Gartner Continue Reading

By

• Alex Scroxton, Security Editor

Updating taxation: Can AI and data analysis help with HMRC’s human resources problem?

HMRC resources are currently thinly spread in the aftermath of Covid and Brexit. Could automating systems using generative AI help HMRC’s digital transformation? Continue Reading

By

• Peter Ray Allison

Extending zero-trust principles to endpoints

By combining zero-trust principles with other security strategies and continuously monitoring and improving their security posture, organisations can effectively mitigate risks and protect their resources, says Gartner's Nikul Patel Continue Reading

By

• Nikul Patel

The US courts may have thrown a wrench into cyber regulation

A recent decision by the US Supreme Court to overrule the longstanding Chevron Deference has serious implications for global cyber security regulation Continue Reading

By

• Brian Arnold

Public education on security must be a top priority for Labour

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Petra Wenham

New Qilin tactics a ‘bonus multiplier’ for ransomware chaos

Sophos X-Ops caught the Qilin ransomware gang stealing credentials stored by victims' employees in Google Chrome, heralding further cyber attacks and breaches down the line. Continue Reading

By

• Alex Scroxton, Security Editor

Women in data: Claire Thompson, chief data officer, L&G

The insurer’s data chief discusses using data for better insights, building data capabilities through apprenticeships, and the value of diversity in data leadership Continue Reading

By

• Mark Samuels

Wells Fargo bank turns to AI to help families settle estates after a death

Wells Fargo bank is winning customers after using business automation software and artificial intelligence to help people manage the estates of relatives following a bereavement Continue Reading

By

• Bill Goodwin, Computer Weekly

ICO launches privacy notice tool for SMEs

ICO tool designed to make it easier for small businesses and sole traders operating online to create bespoke data privacy notices for compliance purposes Continue Reading

By

• Alex Scroxton, Security Editor

Phishing links becoming bigger threat than email attachments

Phishing techniques are evolving away from malicious email attachments, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

How might the UK's cyber landscape change under Labour?

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Dhairya Mehta and Cate Pye

Google's cookie conundrum: What comes next?

Google's revised approach to third-party cookies shouldn't come as a surprise, and may also be welcome Continue Reading

By

• Christian Ward

With the right tools and strategy, public cloud should be safe to use

Despite the complexity and evolving nature of threats, with the right strategy, tools, and constant vigilance, businesses can safely and securely leverage public cloud services Continue Reading

By

• Jason Lau

August Patch Tuesday proves busy with six zero-days to fix

Microsoft patches six actively exploited zero-days among over 100 issues during its regular monthly update Continue Reading

By

• Alex Scroxton, Security Editor

NIST debuts three quantum-safe encryption algorithms

NIST has launched the first three quantum-resistant encryption algorithms, and as the threat of quantum-enabled cyber attacks grows greater, organisations are encouraged to adopt them as soon as they can Continue Reading

By

• Alex Scroxton, Security Editor