IT operations management and IT support

Ransomware volumes grew faster than ever in 2021

Verizon’s annual DBIR assessment of the security landscape highlights an unprecedented boom in ransomware volumes, to the surprise of nobody Continue Reading

By

• Alex Scroxton, Security Editor

Netherlands approves beyond-visual-line-of-sight inspection drones

Drones can automate the traditionally challenging job of inspecting industrial sites, including hard-to-reach infrastructure Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Government has no plans to review controversial court rules on computer evidence

Government accused of ‘passing the buck’ and ‘not knowing what it is talking about’ after stating it has no plans to review court rules on computer evidence Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Did the Conti ransomware crew orchestrate its own demise?

Analysts examining the shutdown of the Conti ransomware syndicate suggest the cyber crime collective orchestrated its own demise Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Understanding attack paths is a question of training

The modern-day abundance of platforms, apps and IT tools presents malicious actors with a web of interconnection that is easily exploited to move rapidly through the network to compromise critical assets. Security teams need to understand these attack pathways better in order to fight back Continue Reading

By

• Mike Gillespie

How Ivanti views patch management with a security lens

Bringing development, operations and security teams together will help organisations to improve their visibility of IT assets and vulnerabilities while keeping threat actors at bay Continue Reading

By

• Aaron Tan, TechTarget

Applying international law to cyber will be a tall order

Many in the security community have voiced their support for the UK government’s ambitions to work towards agreement with other countries on the application of international law to cyber space, but not without some reservations Continue Reading

By

• Alex Scroxton, Security Editor

Third of organisations to outsource more IT amid talent shortage

Cutting costs is not the main reason for outsourcing IT in the UK, according to a major study Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Microsoft drops emergency patch after Patch Tuesday screw up

Microsoft fixed a certificate mapping issue that caused server authentication failures on domain controllers for users that had installed the most recent Patch Tuesday updates Continue Reading

By

• Alex Scroxton, Security Editor

Government will legislate to protect access to cash amid digital revolution

The government is giving the Financial Conduct Authority more powers to force banks to ensure cash withdrawal and deposit services are within easy reach of customers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Nature of cyber war evolving in real time, says Microsoft president

The past three months have seen the rapid evolution of the very nature warfare to incorporate cyber attacks, Microsoft’s Brad Smith tells the audience at its Envision conference in London Continue Reading

By

• Alex Scroxton, Security Editor

Deliveroo accused of ‘soft union busting’ with GMB deal

Smaller grassroots unions have criticised Deliveroo and GMB for making a “hollow” deal that will ultimately undermine workers’ self-organising efforts Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Red teaming will be standard in Dutch governmental organisations by 2025

The Dutch government wants to include the testing of the digital security of systems, processes and people – also known as red teaming – in all of its governmental organisations’ test planning and budgeting by 2025 at the latest Continue Reading

By

• Kim Loohuis

Security Think Tank: Yes, zero trust can help you understand attack paths

The modern-day abundance of platforms, apps and IT tools presents malicious actors with a web of interconnection that is easily exploited to move rapidly through the network to compromise critical assets. Security teams need to understand these attack pathways better in order to fight back Continue Reading

By

• Paul Holland, Information Security Forum

Relentless branch closures at Lloyds Bank continue as digital banking takes hold

UK bank branches are being shuttered in large numbers as consumers choose online banking, with Lloyds Banking Group announcing more closures Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: To follow a path, you need a good map

The modern-day abundance of platforms, apps and IT tools presents malicious actors with a web of interconnection that is easily exploited to move rapidly through the network to compromise critical assets. Security teams need to understand these attack pathways better in order to fight back Continue Reading

By

• Petra Wenham

Post Office scandal victim calls for government’s role in silencing victims to be investigated

Victims of the Post Office Horizon scandal in Scotland raise further questions about Post Office and government conduct Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

(ISC)² to train 100,000 cyber pros in UK

Security association (ISC)² unveils ambitious UK training programme Continue Reading

By

• Alex Scroxton, Security Editor

Controversial Post Office IT system to be replaced by 2025

Work is ongoing by the Post Office to replace the controversial Horizon retail and accounting system used in nearly 12,000 branches Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Santander has so far moved 80% of IT infrastructure to cloud

Spanish banking giant Santander continues its journey into the cloud as it strives to be cloud native Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

App-based Starling Bank doubles its Cardiff workforce

Digital bank is recruiting nearly 500 people, including data scientists and engineers, to its Cardiff operation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Amdocs unveils digital transformation and SaaS support

Software and services provider supports media and communications base with offerings designed to deliver integration of streaming services for leading UK cableco Continue Reading

By

• Joe O’Halloran, Computer Weekly

Security Think Tank: Your path to understanding attack paths

The modern-day abundance of platforms, apps and IT tools presents malicious actors with a web of interconnection that is easily exploited to move rapidly through the network to compromise critical assets. Security teams need to understand these attack pathways better in order to fight back Continue Reading

By

• Paddy Francis

Cyber accreditation body Crest forges new training partnerships

Crest says partnerships with Hack The Box and Immersive Labs will enhance its members’ defensive and offensive security skills Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft fixes three zero-days on May Patch Tuesday

It’s the second-to-last Patch Tuesday as we know it, and Microsoft has fixed a total of 75 bugs, including three zero-days Continue Reading

By

• Alex Scroxton, Security Editor

CCRC to contact 88 more former subpostmasters with potentially wrongful convictions

The Criminal Cases Review Commission is to contact 88 more potentially wrongfully convicted Post Office workers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NCSC pins Viasat cyber attack on Russia

UK authorities have attributed the 24 February cyber attack on the network of satellite comms company Viasat to Russia Continue Reading

By

• Alex Scroxton, Security Editor

Post Office scandal inquiry chair brings forward urgent compensation hearings

The chair of the Post Office Horizon scandal inquiry has brought forward hearings about compensation as victims warn that at this rate “people will die” before they get anything Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CyberUK 22: NCSC refreshes cloud security guidance

The National Cyber Security Centre is revising its cloud guidance as increasing uptake of potentially vulnerable cloud services puts more organisations at risk of compromise Continue Reading

By

• Alex Scroxton, Security Editor

European retailers see embedded finance as a revenue builder

Retailers and e-commerce businesses are working with tech suppliers to embed financial products and services in their customer offerings Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Tech Data enhances managed print offering

Distributor adds more depth to its OpenMPS cloud-based offering after getting partner feedback Continue Reading

By

• Simon Quicke, Microscope Editor

Post Office scandal victims in Scotland to tell their stories, raising questions of law

Inquiry into Post Office scandal moves to Scotland, with differences in English and Scottish law raising further serious questions about subpostmaster prosecutions Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Interview: Success in Belgium’s high-tech job market

Veteran executive recruiter shares his perspective on the Belgian job market, both for outsiders seeking work in the country and for young Belgian nationals just beginning their careers Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

How to retain cyber talent in the Great Resignation

The cyber security industry is experiencing alarming rates of resignations, leaving organisations vulnerable to cyber attacks. How can we better retain cyber talent? Continue Reading

By

• Nicholas Fearn

Security Think Tank: Identify, assess and monitor to understand attack paths

The modern-day abundance of platforms, apps and IT tools presents malicious actors with a web of interconnection that is easily exploited to move rapidly through the network to compromise critical assets. Security teams need to understand these attack pathways better in order to fight back Continue Reading

By

• Rob McElvanney

Security Think Tank: Defenders must get out ahead of complexity

The modern-day abundance of platforms, apps and IT tools presents malicious actors with a web of interconnection that is easily exploited to move rapidly through the network to compromise critical assets. Security teams need to better understand these attack pathways to fight back Continue Reading

By

• Jack Chapman

Five TLS comms vulnerabilities hit Aruba, Avaya switching kit

Five new vulnerabilities in the implementation of transport layer security communications leave several popular switches vulnerable to remote code execution Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Solving for complexity in the network

The modern-day abundance of IT platforms, apps and tools gives the bad guys ample opportunity to move rapidly through the network to hit critical assets. Security teams must understand these attack pathways better in order to fight back Continue Reading

By

• Mike Lloyd, RedSeal

Post Office scandal CEO could be stripped of CBE

Honours Forfeiture Committee to review Paula Vennells’ CBE in the light of Post Office scandal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

horsepower (hp)

Horsepower (hp) is a unit of measurement in the foot-pound-second (fps or ft-lb/s) or English system, sometimes used to express the rate at which mechanical energy is expended. Continue Reading

By

• Katie Terrell Hanna

Log4Shell, ProxyLogon, ProxyShell among most exploited bugs of 2021

These 15 CVEs were the most commonly exploited last year, and if you haven’t mitigated against them, now is the time Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware victims paying out when they don’t need to

Sophos’s annual State of Ransomware report shows dramatic increases in the impact of ransomware attacks, but also finds many organisations are paying ransoms when they don’t need to Continue Reading

By

• Alex Scroxton, Security Editor

Government digital ignorance puts Dutch economy at risk

In this interview, Michiel Steltman, managing director of Digital Infrastructure Netherlands, tells Computer Weekly why the Dutch digital economy is at risk due to a lack of knowledge and understanding at government level Continue Reading

By

• Kim Loohuis

Police question former Fujitsu worker again in Post Office scandal perjury investigation

Police have interviewed a former Fujitsu employee for the third time in the investigation into potential perjury during trials of wrongfully convicted subpostmasters Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Global digital wallet transactions set to soar

Payments using mobile phones are set to soar globally as suppliers expand the services available, according to research Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Odense Robotics helps develop key export for Denmark

Robotics seen as a future export sector for Denmark as investment startups build their skills in public sector projects Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Government appoints head of technology transfer unit

Government announces a CEO to lead its initiatives around commercialising its knowledge assets Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Sophos soaks up SOC.OS

Sophos says acquisition of BAE spinout SOC.OS will enhance its managed threat and extended detection and response services Continue Reading

By

• Alex Scroxton, Security Editor

UAE bolsters cyber security

The United Arab Emirates has successfully improved its security posture amid mounting cyber threats Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Finance regulator identifies challenger bank financial crime weaknesses

Financial Conduct Authority review finds challenger banks need to do more to prevent their platforms being used to commit financial crime, such as money laundering Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Five Eyes in new Russia cyber warning

Latest cross-body alert warns of Russian threat to utilities and other core elements of national infrastructure Continue Reading

By

• Alex Scroxton, Security Editor

Tech to account for over half of regulatory compliance spending

By 2026, regtech will account for more than half of the money that businesses spend on compliance with regulations Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

European cities moving fast to change business of parking

German cities are using the latest smart parking technology to reduce traffic and car pollution while collecting more fees for parking Continue Reading

By

• Gordon Feller

Dutch schools struggle with digitisation

Now is the time for schools in the Netherlands to determine how the opportunities of distance and digital learning resources can be made to work and how the risks involved can be mitigated Continue Reading

By

• Kim Loohuis

AWS fixes vulnerabilities in Log4Shell hot patch

AWS issues fixes for a series of Log4Shell hot patches after they turned out to leave its services vulnerable to further exploitation Continue Reading

By

• Alex Scroxton, Security Editor

Nationwide Building Society streamlines payment dispute process through software

Building society has speeded up the resolution of customer disputes over Visa payments by using Pegasystems software Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Financial Ombudsman Service chooses TCS as digital transformation partner

Tata Consultancy Services will build and implement key systems as part the Financial Ombudsman Service’s digital transformation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Median threat actor ‘dwell time’ dropped during 2021

Security teams appear to be getting better at detecting attackers within their networks, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Windows 7 and XP still more popular than Windows 11

Lansweeper audit of Windows devices finds more people are running unsupported Windows operating systems than the newest release Continue Reading

By

• Cliff Saran, Managing Editor

Refugee support group works with tech startup on reporting system

Computer Weekly speaks to a refugee support group about its ongoing collaboration with an academic tech startup to develop a digital human rights reporting system for refugees Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Zhadnost DDoS botnet deployed against Finland

A coordinated DDoS attack hit two government ministries in Finland at the same time as Ukrainian president Volodymyr Zelensky delivered a virtual address to the Finnish parliament Continue Reading

By

• Alex Scroxton, Security Editor

Incontroller ICS malware has ‘rare, dangerous’ capabilities, says Mandiant

Mandiant joins a growing chorus of warnings over novel nation state threats to ICS systems Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft patches two zero-days, 10 critical bugs

Patch Tuesday is here once again. This month, security teams must fix two privilege escalation zero-days in the Windows Common Log File System Driver and the Windows User Profile Service Continue Reading

By

• Alex Scroxton, Security Editor

Criminals researched hacking TTPs post-breach in ‘messy’ cyber attack

Sophos shares details of a cyber attack that saw attackers hang out in their victim environment for five months while they prepared to sow further mischief Continue Reading

By

• Alex Scroxton, Security Editor

More ANZ organisations warm to DevSecOps

About four in 10 organisations in Australia and New Zealand are undertaking the transition to development, security and operations, while a further 36% plan to do so in 2022, study finds Continue Reading

By

• Aaron Tan, TechTarget

Universal IAM policy failings put cloud environments at risk

Almost all organisations lack appropriate IAM policy controls to effectively secure their data in the cloud, according to a damning study Continue Reading

By

• Alex Scroxton, Security Editor

PassiveLogic to get more active in smart building tech with $15m funding

Global alternative asset manager partners with provider of autonomous building systems and foundation technology for smart cities to bring the first general-purpose autonomous platform to the building market Continue Reading

By

• Joe O’Halloran, Computer Weekly

Sandworm rolls out Industroyer2 malware against Ukraine

A second generation of the Sandworm-linked Industroyer malware has been identified by ESET researchers and Ukraine’s national CERT Continue Reading

By

• Alex Scroxton, Security Editor

Border IT system fixed after 10-day outage

Post-Brexit border IT system failure fixed after going down at the start of April, allowing traders to once again file customs documents electronically rather than by hand Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Open source CMS platform Directus patches XSS bug

A stored cross-site scripting vulnerability in the Directus platform could have enabled malicious actors to gain access to valuable data Continue Reading

By

• Alex Scroxton, Security Editor

Building distributed systems requires effective developer teams

Technologies edge computing and containerisation call for teams capable of building distributed systems Continue Reading

By

• Junade Ali

We must target a broad church to fill vacant cyber roles

The security industry focuses a lot on cyber-specific specialisms and technical skills, but it could really benefit from widening its search. Take it from a social anthropologist Continue Reading

By

• Alex Scroxton, Security Editor

Raspberry Pi Foundation ditches default username policy

Raspberry Pi owners will no longer be able to use the default ‘pi’ username, as the Raspberry Pi Foundation clamps down on insecure practices Continue Reading

By

• Alex Scroxton, Security Editor

The role of infrastructure as code in edge datacentre computing

As datacentre computing is pushed to the edge of the organisation’s network, IT has to address the overheads associated with remote server management Continue Reading

By

• Cliff Saran, Managing Editor
• Adrian Bridgwater

Was Spring4Shell a lot of hot air? No, but...

Find out why Spring4Shell was apparently not as impactful a security problem as many had at first feared, and why it’s on the cyber community as a whole to do better Continue Reading

By

• Alex Scroxton, Security Editor

US shuts down Russia’s Cyclops Blink botnet operation

Operation by US authorities has taken the Russia-attributed Cyclops Blink botnet ‘off the board’ Continue Reading

By

• Alex Scroxton, Security Editor

Banks should be able to integrate e-krona into existing systems, says Swedish regulator

Swedish financial services regulator says banks and service providers should be able to integrate a potential digital currency into existing systems Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Apple criticised over unpatched CVEs in Catalina, Big Sur

Apple patched two zero-days in macOS Monterey last week, but did not address the same issue in Catalina or Big Sur, raising questions Continue Reading

By

• Alex Scroxton, Security Editor

Denonia malware may be first to target AWS Lambda

The newly discovered Denonia malware appears to be custom designed to target AWS Lambda environments, and may be the first of its kind Continue Reading

By

• Alex Scroxton, Security Editor

Structured decentralisation is the key to unlocking Nordic-level innovation

Finnish tech entrepreneurs will be taking the stage at the World Economic Forum to tell the world about the role of trust in Finnish startup success Continue Reading

By

• Matthew Staff

Discount retailer The Works hit by cyber attack

A small number of The Works’ bricks-and-mortar stores were forced to close amid a cyber attack of an undisclosed nature Continue Reading

By

• Alex Scroxton, Security Editor

Triple-threat Borat malware no joke for victims

Unlike its namesake, the newly discovered Borat malware won’t raise a smile for IT security pros Continue Reading

By

• Alex Scroxton, Security Editor

Zopa bank profitable after just 21 months

The bank that emerged from peer-to-peer lending pioneer has hit its first profit after 21 months of operation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Saudi Arabian ICT sector hits $32.1bn after strong pandemic response

The Saudi Arabian IT and communications sector is recovering strongly from the Covid-19 pandemic Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Office Wi-Fi may not cope with hybrid work

Continued growth of online meetings is triggering disruption across the employee productivity technology market, research from CCS Insight has found Continue Reading

By

• Cliff Saran, Managing Editor

Fujitsu bags £430m government contracts despite rising cost of Post Office Horizon scandal

Fujitsu has won two huge government IT contracts, worth over £400m, while taxpayers face footing the massive bill for the Post Office scandal caused by its software Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Four moves to ‘checkmate’ critical assets thanks to lax cloud security

Malicious actors can compromise 94% of critical assets within four steps of the initial breach point, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

EU Act ‘must empower those affected by AI systems to take action’

Ada Lovelace Institute publishes recommendations on how European institutions can improve the Artificial Intelligence Act by establishing a ‘comprehensive remedies framework’ around those affected by the deployment of AI systems Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Bank fraud prevention scheme blocked £60m in fraud last year

Scheme to catch fraudsters, including online scammers, before they commit their crimes has reported a significant increase in crimes prevented Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Spring4Shell zero-day sprung on security teams

Some are describing a newly disclosed Spring Java framework vulnerability as the next Log4Shell, but what is Spring4Shell, and what can we do about it? Continue Reading

By

• Alex Scroxton, Security Editor

Compensation goal finally in sight for 555 Post Office scandal victims

The subpostmaster campaign group which exposed the Post Office Horizon scandal could be close to achieving the objective it was established for, with fair compensation for its members in sight Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

One-third of UK firms suffer a cyber attack every week

New statistics from the annual DCMS Cyber security breaches survey reveal the extent and frequency with which UK organisations are being attacked by malicious actors Continue Reading

By

• Alex Scroxton, Security Editor

Recruitment risks: Avoiding the dangers of fraudulent candidates

Tech companies are seeing an increase in fraudulent job applications, with associated impacts on risk and cyber security. So how can organisations protect themselves from fraudulent applicants while ensuring they recruit the best talent? Continue Reading

By

• Peter Ray Allison

Overhaul of UK police tech needed to prevent abuse

Lords inquiry finds UK police are deploying artificial intelligence and algorithmic technologies without a thorough examination of their efficacy or outcomes, and are essentially ‘making it up as they go along’ Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Wave of Log4j-linked attacks targeting VMware Horizon

Sophos issues a new warning to organisations that have so far failed to patch their VMware Horizon servers against Log4Shell Continue Reading

By

• Alex Scroxton, Security Editor

HSBC chooses IBM support for its quantum leap

UK bank moves to the next stage of its work with quantum computers through a deal with IBM Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Virgin Media O2 Business aims to ‘go beyond’ traditional broadband SLAs

Business arm of UK connectivity provider proposes new way of working, built on successful outcomes rather than service deliverables alone, with bespoke agreements offering flexible use, reduced dual running costs and next-level service for new large enterprise and public sector customers Continue Reading

By

• Joe O’Halloran, Computer Weekly

European Commission proposes new cyber security regulations

New cyber and information security regulations have been proposed by the European Commission to create a minimum set of standards in both areas Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

NHS health and social care staff offered training on healthcare apps

Health service staff have free access to training courses to help them understand which digital healthcare apps and websites are best for their patients Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The Security Interviews: Red gets automated

We speak to Jack Stockdale, CTO of Darktrace, about Cambridge’s strong data analytics and artificial intelligence links and the role of AI in cyber security Continue Reading

By

• Cliff Saran, Managing Editor