IT for retail and logistics

Why it takes 11 hours to resolve one ID-related cyber incident

A recent ESG study revealed it takes an average of 11 hours for enterprises to resolve a single identity-related security incident. How did we get here, and what do we need to do differently? Continue Reading

By

• Ev Kontsevoy, Teleport

Alert over Medusa ransomware attacks targeting Fortra MFT

Microsoft warns it is seeing potential mass exploitation of a Fortra GoAnywhere vulnerability by a threat actor linked to the Medusa ransomware-as-a-service operation. Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: David Bradbury, CSO, Okta

Okta’s chief security officer talks security by default and explains why he thinks time is running out for the shared responsibility model Continue Reading

By

• Alex Scroxton, Security Editor

Building resilience in the cloud: Bridging SLA gaps and mitigating risk

The Computer Weekly Security Think Tank considers how security leaders can help assure access to the new and innovative cloud tech while minimising risk and ensuring they do not fall foul of regulators. Continue Reading

By

• Vaibhav Dutta, Tata Communications

Peer demands Fujitsu pay £700m in interim as it prepares response to Post Office scandal inquiry

Fujitsu, government and Post Office set to outline restorative justice plans, as peers calls for an interim payment towards costs. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Is the UK’s digital ID scheme doomed to fail?

In this week’s edition of Computer Weekly, we take a look at the government’s somewhat controversial plan to introduce a national, compulsory digital ID scheme. Ranil Boteju, chief data and analytics officer at Lloyds Banking Group, also runs us through how the financial services giant is planning to use agentic AI to improve the customer experience. In the third part of our buyer’s guide on cloud management and security, details about the plethora of security tools that exist for enterprises looking to manage their Amazon Web Services stacks gets the deep-dive treatment. And, in our final feature in the issue, we look at the evolution in mobile app technology within the retail space. Read the issue now. Continue Reading

Interview: Sacha Vaughan, chief supply chain officer, Joseph Joseph

As the houseware maker’s supply chain is being transformed for the digital age, its leader explains why technology knowledge is critical to her job Continue Reading

By

• Mark Samuels

Fujitsu’s role in the Post Office scandal: Everything you need to know

Computer Weekly has investigated the Post Office Horizon scandal since 2008. In this guide, we look at the part Fujitsu played in what is commonly referred to as the largest miscarriage of justice in UK history Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

US government shutdown stalls cyber intel sharing

A key US law covering cyber security intelligence sharing has expired without an extension or replacement amid a total shutdown of the federal government, putting global security collaboration at risk. Continue Reading

By

• Alex Scroxton, Security Editor

Apple’s first iOS 26 security update fixes memory corruption flaw

Apple issues an update for its brand new iOS 26 mobile operating system, fixing a potentially dangerous vulnerability affecting iPhones, iPads and other Mac devices Continue Reading

By

• Alex Scroxton, Security Editor

Harrods hackers start contacting customers

Retailer Harrods has revealed that a number of customers whose data was stolen in a cyber attack have been contacted by the perpetrators Continue Reading

By

• Alex Scroxton, Security Editor

UK and US urge Cisco users to ditch end-of-life security appliances

An ongoing campaign of cyber attacks is targeting users of end-of-life Cisco security appliance kit Continue Reading

By

• Alex Scroxton, Security Editor

Harrods hit by second cyber attack in six months

Data on approximately 430,000 Harrods shoppers was stolen in a third-party breach, but the cyber attack is not related to an earlier Scattered Spider incident, says the retailer Continue Reading

By

• Alex Scroxton, Security Editor

Why SLA gaps should not hinder cloud innovation

The Computer Weekly Security Think Tank considers how security leaders can help assure access to the new and innovative cloud tech while minimising risk and ensuring they do not fall foul of regulators. Continue Reading

By

• Ashley Barker and Irfan Ahmed, PA Consulting

Over half of India-based companies suffer security breaches

Business supply chains, which include Indian companies, are at risk of attack as more than half of suppliers were breached last year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Okta CEO: AI security and identity security are one and the same

At Oktane 2025 in Las Vegas, Okta CEO Todd McKinnon describes AI security and identity security as inseparable as he tees up a series of agentic security innovations Continue Reading

By

• Alex Scroxton, Security Editor

Netherlands establishes cyber resilience network to strengthen public-private digital defence

Network will connect organisations in a cyber crime defence initiative that goes way beyond information sharing Continue Reading

By

• Kim Loohuis

Oktane 2025: Okta takes aim at agentic AI governance gap

Identity specialist Okta is laying the groundwork for a number of incoming announcements designed to help its customers get to grips with the challenge of securing non-human, agentic identities. Continue Reading

By

• Alex Scroxton, Security Editor

Rethinking identity in the age of AI impersonation

Trust in business has long hinged on human instincts but with the advent of deepfakes, it is becoming dangerous to assume too much. Continue Reading

By

• Akif Khan, Gartner

Post Office Capture appeals slowed by poor records

Poor data on the use of the Post Office Capture software is slowing the review of criminal convictions, says lawyer Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Unbuckling of the green belt

In this week’s edition of Computer Weekly, we take a deep dive into an environmental-focused legal challenge that has the potential to upset the government’s plans to fast-track datacentre developments Continue Reading

Government meets with car parts suppliers amid JLR cyber crisis

Government officials have met with the Society of Motor Manufacturers and Traders to discuss the challenges they are facing amid disrupted production at Jaguar Land Rover Continue Reading

By

• Alex Scroxton, Security Editor

UK cyber action plan lays out path to resilience

A report produced for the government by academics at Imperial College London and the University of Bristol sets out nine recommendations to strengthen the UK’s cyber sector Continue Reading

By

• Alex Scroxton, Security Editor

Are AI agents a blessing or a curse for cyber security?

Agentic AI is touted as a helpful tool for managing tasks, and cyber criminals are already taking advantage. Should information security teams look to AI agents to keep up? Continue Reading

By

• Danny Palmer

Microsoft scores win against Office 365 credential thieves

Microsoft’s Digital Crimes Unit disrupts a major phishing-as-a-service operation that targeted and stole Office 365 usernames and credentials Continue Reading

By

• Alex Scroxton, Security Editor

NCC: How RaaS team-ups help Scattered Spider enhance its attacks

Scattered Spider’s alliances with ransomware-as-a-service gangs act as a force multiplier for the scope, and number, of its cyber attacks, according to NCC Group analysts Continue Reading

By

• Alex Scroxton, Security Editor

Jaguar Land Rover extends production shutdown for another week

Jaguar Land Rover says that vehicle production will remain suspended in the wake of a cyber attack, while the hackers allegedly responsible claim they are retiring from a life of crime Continue Reading

By

• Alex Scroxton, Security Editor

Cyber leaders must make better use of risk experts

The Computer Weekly Security Think Tank considers how security leaders can help assure access to the new and innovative cloud tech while minimising risk and ensuring they do not fall foul of regulators. Continue Reading

By

• Ellie Hurst, Advent IM
• Mike Gillespie

Turkish state tightens grip on comms

Turkish subscriptions to fixed broadband were the lowest in Europe in 2024 and half as common as those in more developed countries Continue Reading

By

• Mark Ballard

ShinyHunters linked to breach of French luxury goods house

Kering, the parent group of fashion houses including Balenciaga and Gucci, becomes the latest organisation to allegedly fall victim to ShinyHunters Continue Reading

By

• Alex Scroxton, Security Editor

‘Utter madness’ as Post Office paid law firm double the cost of scandal public inquiry

The Post Office legal representation at public inquiry into Horizon scandal cost twice as much as the actual inquiry Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Retailers turn to tech as in-store crime soars

Retailers such as H&M, Iceland, Poundland and Tesco are deploying tech in stores as a way of protecting themselves and their employees from rising shop crime Continue Reading

By

• Ben Sillitoe

Post Office Horizon accounts are still a mess and replacement system is years away

Sources say the Post Office doesn’t know whether millions of pounds of branch discrepancies are real or not Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

M&S parts ways with CTO after cyber attack

M&S chief digital and technology officer Rachel Higham steps back from her role in the wake of the April 2025 cyber attack on the retailer’s systems Continue Reading

By

• Alex Scroxton, Security Editor

Splunk.conf: Cisco and Splunk expand agentic SOC vision

The arrival of agentic AI in the security operations centre heralds an era of simplification for security professionals, Splunk claims Continue Reading

By

• Alex Scroxton, Security Editor

Quantum startups fear EU too slow to lead

Europe’s bid to win the race to build viable quantum computers wants details, money and confidence of the industry it is intended to serve Continue Reading

By

• Mark Ballard

Post Office Horizon scandal explained: Everything you need to know

Computer Weekly has investigated the Post Office Horizon scandal since 2008 and is, in fact, part of the story. This guide contains essential information about the scandal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Splunk.conf: Splunk urges users to eat their ‘cyber veggies’

The dawn of AI-enabled cyber attacks makes it even more important for defenders to bring their A-game, particularly when it comes to getting the basics right Continue Reading

By

• Alex Scroxton, Security Editor

Fujitsu braced for double-digit decline triggered by ‘foolish display of legal machismo’

Internally, Fujitsu UK is braced for major revenue decline as Post Office scandal takes its toll Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

AI help for pet parents

In this week’s edition of Computer Weekly, we do another deep-dive into the latest freedom of information request revelations that have emerged pertaining to Police Scotland’s use of Microsoft cloud technologies. Ex-Googler Kate Balingit, and head of digital innovation at Mars Pet Nutrition, opens up about how artificial intelligence is transforming pet care for the company’s customers. We also take a closer look at the possible impact the UK government’s devolution agenda could have on cloud spending trends within local authorities. And, in our final piece from this round of buyer’s guides, we delve into how platform engineering is affecting how enterprises approach DevOps-related projects. Read the issue now. Continue Reading

US politicians ponder Wimwig cyber intel sharing law

US cyber data sharing legislation is set to replace an Obama-era law, but time is running out to get it over the line, with global ramifications for the security industry, and intelligence and law enforcement communities Continue Reading

By

• Alex Scroxton, Security Editor

SLA promises, security realities: Navigating the shared responsibility gap

The Computer Weekly Security Think Tank considers how security leaders can help assure access to the new and innovative cloud tech while minimising risk and ensuring they do not fall foul of regulators. Continue Reading

By

• Aditya K Sood, Aryaka

Depression, anxiety, PTSD and suicidal thoughts: Post Office victims speak out

Report finds that former subpostmasters suffered and are continuing to suffer severe mental and physical problems due to their treatment by the Post Office Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Bridging the SLA gap: A guide to managing cloud provider risk

The Computer Weekly Security Think Tank considers how security leaders can help assure access to the new and innovative cloud tech while minimising risk and ensuring they do not fall foul of regulators. Continue Reading

By

• John Bruce, Quorum Cyber

Cyber attackers damage Jaguar Land Rover production

Jaguar Land Rover reports a cyber attack has ‘severely disrupted’ its vehicle production and retail operations, recalling similar attacks on other prominent British brands this year Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Interview: Holland & Barrett CDO preparing a Michelin star-worthy data strategy

Holland & Barrett’s chief data officer discusses the framework – and reasons – behind the retailer’s multi-layered data strategy Continue Reading

By

• Ben Sillitoe

Fujitsu’s roots in government go too deep

MPs and peers call on prime minister to review Japanese supplier’s ‘eligibility’ to bid for government contracts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK cyber security centre helps expose China-based cyber campaign

GCHQ cyber security centre and its international partners release details of malicious cyber activity linked to Chinese businesses Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

FairPrice taps Google Cloud to build agentic AI workforce

Singapore’s largest retailer is deploying a suite of agentic AI applications built on Google’s Gemini, Vertex AI and Agentspace to transform its customer experience and internal workflows Continue Reading

By

• Aaron Tan, Informa TechTarget

Incident response planning cuts the risk of claiming on cyber security insurance

Proper attention to incident response planning is emerging as a core cyber control when it comes to reducing the risk of having to claim on cyber security insurance, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Home Office Fujitsu contract is ‘de facto’ conflict of interest in Post Office police probe

Fujitsu supplies police with the network that supports national investigations, while its former staff are part of a national investigation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ransomware activity levelled off in July, says NCC

Ransomware levels held steady in the month of July, although the risk remained as persistent as ever Continue Reading

By

• Alex Scroxton, Security Editor

Three new Citrix NetScaler zero-days under active exploitation

Citrix patches three new vulnerabilities in its NetScaler lines warning of active zero-day exploitation by an undisclosed threat actor Continue Reading

By

• Alex Scroxton, Security Editor

Okta makes AI identity play with Axiom acquisition

Okta says Axiom Security’s technology will reinforce its own offerings in privileged access management, especially when it comes to the growing number of non-human identities Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware attack volumes up nearly three times on 2024

During the first six months of 2025, the number of observed and tracked ransomware attacks far outpaced the volume seen in 2024 Continue Reading

By

• Alex Scroxton, Security Editor

Moscow exploiting seven-year-old Cisco flaw, says FBI

US authorities warn of an uptick in state-sponsored exploitation of a seven-year-old vulnerability in Cisco's operating system software Continue Reading

By

• Alex Scroxton, Security Editor

Apple iOS update fixes new iPhone zero-day flaw

Latest Apple zero-day found in the ImageIO framework opens the door for targeted zero-click attacks on iPhone users Continue Reading

By

• Alex Scroxton, Security Editor

Police investigation into Post Office scandal to cost more than £50m

Metropolitan Police-led investigation into Post Office scandal is expected to run to 2030 and cost taxpayers tens of millions of pounds Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Subpostmaster federation accepted money from Fujitsu in run-up to High Court Post Office trial

The National Federation of Subpostmasters accepted sponsorship money from Fujitsu in the run-up to a High Court case examining the IT firm’s faulty Post Office system Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Microsoft starts including PQC algorithms in cyber foundations

Microsoft updates on its post-quantum cyber strategy as it continues integrating quantum-safe algorithms into some of the core foundations underpinning its products and services Continue Reading

By

• Alex Scroxton, Security Editor

Commvault users told to patch two RCE exploit chains

Storage firm Commvault fixes four vulnerabilities that, when combined, create a pair of RCE exploit chains that could be used to target on-premise customers with ransomware and other nasties Continue Reading

By

• Alex Scroxton, Security Editor

Interview: David Walmsley, chief digital and technology officer, Pandora

The jewellery retailer is building on a four-year digital transformation by adding agentic AI alongside a major overhaul of its back-end ERP infrastructure Continue Reading

By

• Mark Samuels

Metropolitan Police contract with Fujitsu is ‘potential conflict of interest’ amid Post Office probe

Freedom of information request reveals sub-contract between Fujitsu and the police force leading nationwide investigation of the IT firm’s part in the Post Office scandal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Google spins up agentic SOC to speed up incident management

Google Cloud elaborates on its vision for securing artificial intelligence unveiling new protections and capabilities across its product suite Continue Reading

By

• Alex Scroxton, Security Editor

Workday hit in wave of social engineering attacks

A campaign of voice-based social engineering attacks targeting users of Salesforce’s services appears to have struck HR platform Workday Continue Reading

By

• Alex Scroxton, Security Editor

Would you hire a hacker?

At a time when cyber security breaches are on the up and skills remain in short supply, security experts believe we may be missing a trick by overlooking unconventional sources of talent Continue Reading

By

• Cath Everett

UK cyber leaders feel impact of Trump cutbacks

The ripple effects of US cyber security cutbacks have reached this side of the Atlantic, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Teen hackers aren't the problem. They're the wake-up call

If we take the time to build the right pathways into cyber, young people could be our best line of defence. Continue Reading

By

• Fergus Hay, The Hacking Games

Fujitsu orders staff to retain Post Office-related documentation as it braces for legal action

Japanese supplier tells all UK staff to preserve documents related to its work with the Post Office Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Eight critical RCE flaws make Microsoft’s latest Patch Tuesday list

Microsoft rolls out fixes for over 100 CVEs in its August Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

Researchers firm up ShinyHunters, Scattered Spider link

ReliaQuest researchers present new evidence that firms up a potential link, or outright partnership, between the ShinyHunters and Scattered Spider cyber gangs Continue Reading

By

• Alex Scroxton, Security Editor

UK work visa sponsors are target of phishing campaign

Mimecast identifies a phishing campaign targeting UK organisations that sponsor migrant workers and students, opening the door to account compromise and visa fraud Continue Reading

By

• Alex Scroxton, Security Editor

What boards should look for in a CISO

The role of the chief information security officer has evolved dramatically over the years – and will continue to do so. What should boards really looking for when hiring a security leader in 2025? Continue Reading

By

• Rinki Sethi, Upwind Security

ShinyHunters Salesforce cyber attacks explained: What you need to know

Computer Weekly gets under the skin of an ongoing wave of ShinyHunters cyber attacks orchestrated via social engineering against Salesforce users Continue Reading

By

• Alex Scroxton, Security Editor

How CISOs can adapt cyber strategies for the age of AI

Traditional security measures may not be able to cope with the AI reality. In order to safeguard enterprise operations, reputation and data integrity in an AI-first world, security leaders need to rethink. Continue Reading

By

• Martin Riley, Bridewell Consulting

Black Hat USA: Startup breaks secrets management tools

Researchers at Cyata, an agentic identity specialist that has just emerged from stealth, found 14 CVEs in the widely used CyberArk Conjur and HashiCorp Vault enterprise secrets management platforms Continue Reading

By

• Alex Scroxton, Security Editor

Cyber criminals would prefer businesses don’t use Okta

Okta details a phishing campaign in which the threat actor demonstrated some unusually strong opinions on what authentication methods they would like their targets to use Continue Reading

By

• Alex Scroxton, Security Editor

Attacker could defeat Dell firmware flaws with a vegetable

Cisco Talos discloses five vulnerabilities in cyber security firmware used on Dell Latitude and Precision devices, including one that could enable an attacker to log on with a spring onion Continue Reading

By

• Alex Scroxton, Security Editor

Black Hat USA: Halcyon and Sophos tag-team ransomware fightback

Ransomware experts Halcyon and Sophos are to pool their expertise in ransomware, working together to enhance data- and intelligence-sharing and bringing more comprehensive protection to customers Continue Reading

By

• Alex Scroxton, Security Editor

Proliferation of on-premise GenAI platforms is widening security risks

Research finds increased adoption of unsanctioned generative artificial intelligence platforms is magnifying risk and causing a headache for security teams Continue Reading

By

• Alex Scroxton, Security Editor

Integrated platforms offer lifeline to Singapore’s F&B sector

A partnership between payments firm Adyen and restaurant operating system provider Atlas is helping merchants to streamline operations, slashing errors by up to 80% and boosting sales as the sector faces record closures Continue Reading

By

• Aaron Tan, Informa TechTarget

Scattered Spider tactics continue to evolve, warn cyber cops

CISA, the FBI, NCSC and others have clubbed together to update previous guidance on Scattered Spider's playbook, warning of new social engineering tactics and exploitation of legitimate tools, among other things Continue Reading

By

• Alex Scroxton, Security Editor

MS Authenticator users face passkey crunch time

The deadline for moving to passkeys in Microsoft Authenticator is rapidly approaching, and users are advised to take action now Continue Reading

By

• Alex Scroxton, Security Editor

AI-enabled security pushes down breach costs for UK organisations

Organisations that are incorporating AI and automation into their cyber security practice are seeing improved outcomes when incidents occur, according to an IBM study Continue Reading

By

• Alex Scroxton, Security Editor

Global cyber spend will top $200bn this year, says Gartner

Worldwide spending on cyber security will hit another record high in 2025, and will go higher still next year Continue Reading

By

• Alex Scroxton, Security Editor

Building digital resilience in retail

Retail is suffering economically and from hacking attacks. What steps can retailers can take to prevent cyber attacks, supply chain disruptions and migration downtime? Continue Reading

By

• Madeline Bennett, Mowser Media

Tesco IT problems lead to undelivered groceries and angry customers

Tesco customers have been left without groceries after IT problems disrupted deliveries from stores and fulfilment centres Continue Reading

By

• Bill Goodwin, Investigations Editor

European digital market figurehead pleads to Westminster

Big EU industry joins with Europhile MP to persuade obstinate government officials to join the dataspaces intended to become the bedrock of Europe’s digital single market Continue Reading

By

• Mark Ballard

Post Office will not compensate subpostmasters for IT outage

Subpostmasters were unable to trade for nearly two hours last week when a problem at a Fujitsu datacentre put the Horizon system offline, but they will receive no payment for lost business Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Data, digital receipts and demanding customers

More UK retailers are switching from paper to digital receipts, but what are the benefits and challenges, and what are the tech implications? Continue Reading

By

• Ben Sillitoe

Fujitsu to cut at least 100 more UK staff

Some Fujitsu employees feel they are suffering for the actions of the company’s management in the Post Office scandal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

SharePoint users hit by Warlock ransomware, says Microsoft

Microsoft’s security analysts confirm a number of cyber attacks on on-premise SharePoint Server users involve ransomware Continue Reading

By

• Alex Scroxton, Security Editor

Dutch researchers use heartbeat detection to unmask deepfakes

Dutch method to counter deepfakes analyses blood flow patterns in faces that current deepfake generation tools cannot yet replicate Continue Reading

By

• Kim Loohuis

Subpostmasters shoulder costs of Fujitsu’s Post Office IT outage

Fujitsu datacentre outage hit subpostmaster sales for two hours, leaving subpostmasters to seek compensation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Microsoft confirms China link to SharePoint hacks

Microsoft confirms two known China-nexus threat actors, and one other suspected state-backed hacking group, are exploiting vulnerabilities in SharePoint Server Continue Reading

By

• Alex Scroxton, Security Editor

Chinese cyber spies among those linked to SharePoint attacks

Exploitation of the ToolShell RCE zero-day in Microsoft SharePoint continues to gather pace, with evidence emerging of exploitation by nation state-backed threat actors Continue Reading

By

• Alex Scroxton, Security Editor

Patch ToolShell SharePoint zero-day immediately, says Microsoft

The active exploitation of a dangerous zero-day vulnerability chain in Microsoft SharePoint – which was disclosed over the weekend – is underway. Immediate action is advised Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Jason Nurse, University of Kent

Jason Nurse, reader in cyber security at the University of Kent, discusses the psychological side of cyber and online safety, why placing blame on users as ‘the weakest link’ is wrong – and why security pros should think about user needs more Continue Reading

By

• Danny Palmer

Meet the deepfake fraudster who applied to work at a deepfake specialist

A recruiter at voice fraud specialist Pindrop had a shock when they came face-to-face with the same deepfake job candidate not once, but twice. Hear their story and learn how to start to protect your hiring process Continue Reading

By

• Alex Scroxton, Security Editor

Peer warns IT suppliers against partnering with Fujitsu in government contracts

According to publicly available figures, Fujitsu has won over half a billion pounds in government business as prime contractor since January 2024, but there is more than what has been reported Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA