IT operations management and IT support

Slow government response to Post Office scandal compensation forces new legislation

Subpostmasters who exposed widest miscarriage of justice in UK history still waiting for compensation after decades of fighting Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Scope of Okta helpdesk breach widens to impact all users

Okta has widened the scope of the October breach of its systems to include every customer that has used its helpdesk service, after new information came to light Continue Reading

By

• Alex Scroxton, Security Editor

CCRC refers two posthumous subpostmaster appeals to Crown Court

CCRC refers posthumous appeals against convictions to Crown Court for first time Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Volume of unique malware samples threatens to overwhelm defenders

A massive increase in malware volumes could cause problems for security teams tasked with adapting their defences against them Continue Reading

By

• Alex Scroxton, Security Editor

Nominations open for Computer Weekly Innovation Awards APAC 2024

Computer Weekly is looking for nominations for its 2024 Innovation Awards to honour digital transformation initiatives that have transformed organisations in six industries Continue Reading

By

• Aaron Tan, TechTarget

NCSC publishes landmark guidelines on AI cyber security

The NCSC and its US counterpart CISA have brought together tech companies and governments to countersign a new set of guidelines aimed at promoting a secure-by-design culture in AI development Continue Reading

By

• Alex Scroxton, Security Editor

DORA raises the stakes for cloud use in financial services

The EU's DORA regulations will raise the stakes for cloud in financial services but resilience is more than just a tech issue, says NetApp's Steve Rackham Continue Reading

By

• Steve Rackham

North Korean APTs go all in on supply chain attacks, warns NCSC

Threat actors linked to the North Korean regime are becoming more adept at targeting software supply chains in the service of their cyber attacks Continue Reading

By

• Alex Scroxton, Security Editor

China Telecom, China Unicom, ZTE unveil digital twin-based network assurance

Leading Chinese communications technology firm teams with local operators to apply the industry's first digital twin-based smart operation for the co-construction and sharing network during the 19th Asian Games, providing network assurance for users Continue Reading

By

• Joe O’Halloran, Computer Weekly

Three-quarters of finance executives expect generative AI to replace them

Survey reveals an expectation that GenAI will take over many of the finance executive roles currently held by people Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

An inside look at a Scattered Spider cyber attack

Threat researchers at ReliaQuest share the inside track on a Scattered Spider cyber attack they investigated Continue Reading

By

• Alex Scroxton, Security Editor

Controversial Fujitsu contract with Post Office extended again

IT from Fujitsu is at the heart of the widest miscarriage of justice in UK history, yet the government keeps handing millions of pounds of taxpayers’ money to the IT giant Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CISA reveals how LockBit hacked Boeing via Citrix Bleed

As alarm grows around the world about the impact of the so-called Citrix Bleed vulnerability, Boeing has shared details of its experience at the hands of the LockBit ransomware crew Continue Reading

By

• Alex Scroxton, Security Editor

World Wide Fund for Nature signs IT deal with Atos

Global conservation organisation will harness latest technologies to improve ability to predict risks to natural environment Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Over half of SME cyber incidents now ‘malware-free’

The age of malware-driven cyber attacks may have peaked, at least when it comes to incidents affecting small and medium sized enterprises Continue Reading

By

• Alex Scroxton, Security Editor

Why transparency and accountability are important in cyber security

If we accept that the humans who build technology and systems are naturally fallible and mistakes inevitable, and then deal with that with good grace, we could do much to improve cyber standards, writes Bugcrowd's Casey Ellis Continue Reading

By

• Casey Ellis

AI productivity gains could result in four-day weeks for millions

Autonomy think tank publishes paper on potential for artificial intelligence-driven large language models to shorten people’s work weeks Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security incident response teams are human, too

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Mandy Andress, Elastic

Digital Edge secures green loan for South Korea datacentre

The Singapore-based datacentre provider has secured its first green loan for its latest colocation facility in Incheon Continue Reading

By

• Aaron Tan, TechTarget

US civil society groups demand better conditions for AI workers

Some 24 US civil society groups and unions and have written a letter to the US Senate asking for action to improve the working conditions of the people who train and maintain their artificial intelligence systems Continue Reading

By

• Scarlet Charles

Interview: Dan Huddart, CTO, Homeprotect

After building up experience in the insurance sector, Homeprotect’s chief technology officer sought the freedom to innovate being offered at the rapidly scaling company Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office scandal inquiry postpones more key witness hearings

Yet more witness hearings are cancelled due to the Post Office's late disclosure of documents Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

November Patch Tuesday heralds five new MS zero-days

Microsoft pushes fixes for five new zero-days in its latest monthly update Continue Reading

By

• Alex Scroxton, Security Editor

US government reinforces ICBC hack link to Citrix Bleed

US Treasury adds weight to reports that a ransomware gang gained access to the systems of Chinese bank ICBC by exploiting a critical Citrix flaw Continue Reading

By

• Alex Scroxton, Security Editor

Fast-acting cyber gangs increasingly disabling telemetry logs

Sophos guidance for security practitioners and defenders highlights a growing trend for threat actors to disable or wipe telemetry logs to cover their tracks Continue Reading

By

• Alex Scroxton, Security Editor

Breached? Don't panic… if you created a robust IR plan

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Paul Lewis, Nominet

Ransomware attack on major Chinese lender disrupts financial markets

The financial services arm of one of the world’s largest banks was taken offline by a supposed LockBit ransomware attack, causing problems for US markets Continue Reading

By

• Alex Scroxton, Security Editor

Revealed: How Russia’s Sandworm ramped up attacks on Ukraine’s critical infrastructure

New Mandiant intelligence reveals how the APT known as Sandworm has been evolving its playbook, twisting legitimate executables known as LoLBins into malicious tools as it seeks to disrupt daily life in Ukraine Continue Reading

By

• Alex Scroxton, Security Editor

The best IR plans are well-revised and deeply familiar

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Elliott Wilkes

Suspected ransomware attack hits Scottish council

Systems at Comhairle nan Eilean Siar were downed on 7 November in a suspected ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Why cyber needs to integrate better

Cyber security is an intensely technical field, but we shouldn’t ignore the soft skills of communication and collaboration. Wipro’s Tony Buffomante explains why a robust security posture is dependent on a security team engaging with the wider organisation Continue Reading

By

• Peter Ray Allison

How Village Roadshow modernised ITSM with cloud

Australian theme park and cinema operator reduced ITSM costs by 60% to improve problem resolution and other outcomes from use of Freshworks' cloud-based ITSM service Continue Reading

By

• Stephen Withers

ITIL V3

ITIL V3 is the third version of the Information Technology Infrastructure Library (ITIL), a globally recognized collection of best practices for managing IT and for implementing IT service management (ITSM) practices. Continue Reading

By

• Rahul Awati

Former Post Office manager has no memory of preparing witness statement in legal dispute

Evidence of computer problems was omitted from the witness statement of a former Post Office manager in a legal battle with a subpostmaster blamed for unexplained accounting shortfalls Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The plan for the inevitable cyber attack: Get the gist of NIST

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Theodore Wiggins, Airbus Protect

Iconic Singapore hotel caught up in major data breach

The Marina Bay Sands resort in Singapore uncovered a data breach of its guest loyalty programme last month Continue Reading

By

• Alex Scroxton, Security Editor

King’s Speech misses the mark on cyber law reform, says campaign

A group of activists who want to reform the UK’s computer misuse laws to protect bona fide cyber pros from prosecution have been left disappointed by a lack of legislative progress Continue Reading

By

• Alex Scroxton, Security Editor

Post Office disclosure failures delay Horizon scandal inquiry again

Many of the 300,000 emails unearthed could be relevant to evidence from future and past witnesses in the Post Office scandal inquiry Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Researchers ‘break’ rule designed to guard against Barracuda vulnerability

Vectra AI researchers found that a Suricata rule designed to detect exploitation of a dangerous Barracuda Email Security Gateway flaw was not entirely effective Continue Reading

By

• Alex Scroxton, Security Editor

Enhancing security: The crucial role of incident response plans

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Chris McGowan

IR plans: The difference between disaster and recovery

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Becky Gelder, Turnkey Consulting

Netherlands starts building its own AI language model

Dutch government allocates €13.5m to develop an open artificial intelligence language model according to national values and guidelines. Continue Reading

By

• Kim Loohuis

Shadow IT use at Okta behind series of damaging breaches

Okta now believes the initial access vector in a series of damaging breaches was one of its own employees who used a corporate device to sign into their personal Google account Continue Reading

By

• Alex Scroxton, Security Editor

Designing software for efficient IT operations

Rapid development and deployment of applications is not enough to achieve digitisation – IT operations needs to be re-engineered too Continue Reading

By

• Joe Fay

Incident response planning requires constant testing

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Jack Chapman

Admins told to take action over F5 Big-IP platform flaws

Two vulnerabilities in the widely used F5 Networks Big-IP platform are now being exploited in the wild Continue Reading

By

• Alex Scroxton, Security Editor

Use existing structures to build your incident response plan

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Sam Lascelles

cross-functional team

A cross-functional team is a workgroup made up of employees from different functional areas within an organization who collaborate to reach a stated objective. Continue Reading

By

• Mary K. Pratt

Incident response planning is vulnerable to legacy thinking

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Mike Gillespie

Darktrace CEO Poppy Gustafsson on her AI Safety Summit goals

As the AI Safety Summit at Bletchley Park takes place, Computer Weekly caught up with Darktrace CEO Poppy Gustafsson to find out what one of the UK’s most prominent AI advocates wants from proceedings Continue Reading

By

• Alex Scroxton, Security Editor

British Library falls victim to cyber attack

The British Library is experiencing a major IT outage following a cyber incident of an undisclosed nature Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft warns over growing threat from Octo Tempest gang

The English-speaking Octo Tempest extortion gang – which became an ALPHV/BlackCat affiliate recently – presents one of the most significant and rapidly growing threats to large organisations at this time, says Microsoft Continue Reading

By

• Alex Scroxton, Security Editor

Boardrooms losing control in generative AI takeover, says Kaspersky

C-suite executives are increasingly fretful about what they perceive as a ‘silent infiltration’ of generative AI tools across their organisations Continue Reading

By

• Alex Scroxton, Security Editor

Exploitation of Citrix NetScaler vulns reaching dangerous levels

Observed activity exploiting two new Citrix NetScaler vulnerabilities disclosed earlier this month is ramping up, and users may be running out of time to patch lest they be attacked Continue Reading

By

• Alex Scroxton, Security Editor

Google saves almost $3bn by running servers for six years

Extending the life of its datacentre servers and network equipment has led to significant savings over the past nine months for Google Continue Reading

By

• Cliff Saran, Managing Editor

1Password caught up in Okta support breach

After breaches at BeyondTrust and Cloudflare, 1Password, a third customer of Okta operating in the same space, has revealed that it too was impacted in a breach of the IAM house’s support systems Continue Reading

By

• Alex Scroxton, Security Editor

Cisco hackers likely taking steps to avoid identification

Cisco confirms that a drop in detections of devices compromised by two zero-days was likely the result of reactive measures taken by the threat actors to avoid discovery Continue Reading

By

• Alex Scroxton, Security Editor

Customers speak out over Okta’s response to latest breach

Customers of identity specialist Okta have been attacked via a compromise of its systems, and are claiming Okta’s response leaves something to be desired Continue Reading

By

• Alex Scroxton, Security Editor

Suzy Lamplugh Trust treads path to improved cyber resilience

Personal safety charity enlists the support of the London Cyber Resilience Centre to improve staff awareness and strengthen its overall cyber resilience Continue Reading

By

• Alex Scroxton, Security Editor

Joining the dots for a seamless digital transformation journey

It is often the small things that have the greatest impact on a successful digital transformation project Continue Reading

By

• Cliff Saran, Managing Editor

Jaguar TCS Formula E racing team making breakthroughs that will fine-tune electric road vehicles

The Jaguar TCS Formula E racing team is using software and digital simulations to continually improve its electric racing cars, leading to better performing electric vehicles on our roads Continue Reading

By

• Dickon Ross

Collaboration paramount in KPN’s successful business transformation

KPN tells Oracle CloudWorld 2023 how it transformed when its legacy systems became obstacles to supporting its customers on their digital journeys Continue Reading

By

• Kim Loohuis

Belgian researchers raise speed limit in European datacentres

Researchers have developed a prototype of an optical receiver that will help datacentres process data at a much higher rate Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Computer Weekly contributor named Godfather of UK Security

Advent IM founder Mike Gillespie was among those honoured at the eighth annual Security Serious Unsung Heroes Awards Continue Reading

By

• Alex Scroxton, Security Editor

Fears grow over extent of Cisco IOS XE zero-day

Researchers have identified spiking numbers of victims of a recently disclosed Cisco zero-day, as users of the networking supplier’s IOS XE software are urged to take defensive measures Continue Reading

By

• Alex Scroxton, Security Editor

What are the cyber risks from the latest Middle Eastern conflict?

The outbreak of war between Hamas and Israel in October 2023 has seen a wide variety of accompanying cyber attacks from hacktivists and other groups. We look at the risks to organisations Continue Reading

By

• Alex Scroxton, Security Editor

Former Post Office executive admits he wouldn’t sign unfair contract he pushed on subpostmasters

Former contract manager said contract that subpostmasters had to sign with Post Office “put them on the hook” for everything Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Five Eyes issues five tips on thwarting nation state threats

Intelligence chiefs from the UK, Australia, Canada, New Zealand and the US have published guidance on building resilience against nation state cyber threats Continue Reading

By

• Alex Scroxton, Security Editor

Countrywide Healthcare manages Meraki with Highlight

The supplier of medical and janitorial equipment selected managed service that connects to its Cisco Meraki system via a single API Continue Reading

By

• Cliff Saran, Managing Editor

Alert sounded over dangerous Cisco IOS XE zero-day

Cisco warns customers using its IOS XE software of a newly discovered vulnerability that could enable a threat actor to take over their systems Continue Reading

By

• Alex Scroxton, Security Editor

What it takes to succeed in DevSecOps

Providing engineering leadership and balancing between speed and security are some areas that organisations will need to focus on in their DevSecOps journey Continue Reading

By

• Aaron Tan, TechTarget

Why the human factor is critical to ITOps success

Digitisation often means deploying software at pace. Along with tooling, IT leaders need to consider skills and training Continue Reading

By

• Fleur Doidge

US SEC launches probe into mass MOVEit breach

Progress Software is facing an investigation from the SEC for the breach of its MOVEit tool, as well as dozens of legal battles resulting from the exfiltration of personal data from the roughly 2,000 organisations affected Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

‘Angry’ lawyer warned against Post Office computer investigation in 2010 email

Angered by his exclusion from an important discussion, former Royal Mail lawyer told colleagues of the risks to the Post Office if, as planned, they publicly investigate allegations against its computer system Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Scottish biometrics watchdog outlines police cloud concerns

Police Scotland’s response to the biometrics commissioner’s formal information notice ‘did not ameliorate’ his concerns about the sovereignty and security of the sensitive biometric information being uploaded to cloud infrastructure that is subject to intrusive US surveillance laws Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

VMware reaffirms commitment to Tanzu

VMware CEO Raghu Raghuram emphasises the importance of having an infrastructure stack capable of supporting applications, with VMware Tanzu playing a pivotal role Continue Reading

By

• Aaron Tan, TechTarget

Microsoft: Nation-state cyber espionage on rise in 2023

Microsoft’s latest Digital Defence Report outlines how nation-state cyber activity has largely moved from destructive attacks to espionage and intelligence gathering Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Lloyds Bank launches digital identity app

Lloyds Bank has launched a digital identity app with tech startup Yoti, after it invested £10m in the firm Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

ICO issues guidance on workplace surveillance

Guidance on employee monitoring covers how employers can conduct their digital surveillance lawfully, transparently and fairly, and warns against businesses intruding on their workers’ private lives Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

IT decision-makers confident they can handle tech disruptions

The majority of IT decision-makers polled in a recent survey have admitted their organisations has been adversely affected by IT failures Continue Reading

By

• Cliff Saran, Managing Editor

Amnesia hides names of individuals behind Post Office’s ‘head on a spike’ strategy

Former Post Office lawyer deflects individual responsibility for a strategy that crushed subpostmasters, blaming the organisation as a whole Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CIISec scores DSIT funding to expand successful CyberEPQ scheme

DSIT has committed to enhanced funding to expand CIISec’s CyberEPQ education programme after recording excellent results to date Continue Reading

By

• Alex Scroxton, Security Editor

First subpostmaster Horizon conviction overturned in Scotland

Scotland has seen its first Post Office Horizon conviction overturned, taking the UK total to 92 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government ‘breached privacy’ of Horizon victims with compensation offer, says lawyer

The government breached the privacy of victims of the Post Office Horizon scandal through making a compensation offer public Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Scottish watchdog urges wider biometric oversight

Scotland’s biometrics watchdog urges Scottish Parliament to extend oversight of biometric information to include the entire criminal justice system, not just police Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Businesses disconnected from realities of API security

Business leaders feel confident they’ve got a handle on API security, but at the same time, incidents are through the roof, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Automated cloud IR: Empowering cyber with AI-powered playbooks

As cyber threats increasingly target cloud infrastructure, demand for robust and reliable incident response measures is through the roof. Find out why you might want to consider bringing artificial intelligence into play Continue Reading

By

• Isla Sibanda

Post Office had no interest in subpostmaster welfare when taking legal action, says Fujitsu memo

Fujitsu memo reveals Post Office didn’t care how legal action would affect its subpostmasters as it placed the reputation of its computer system before their welfare Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Researchers offer free threat briefings on Vegas casino hackers

Permiso, a cloud detection and response startup, is making its threat intel team available to speak on Scattered Spider, the group behind recent cyber attacks on MGM Resorts and Caesars Entertainment Continue Reading

By

• Alex Scroxton, Security Editor

City of Las Vegas masters cyber incident response with Darktrace

The high-rolling city of Las Vegas experiences unique cyber security challenges rarely seen elsewhere. CIO Mike Sherwood reveals how he turned to Darktrace to help address incidents quicker and with confidence Continue Reading

By

• Alex Scroxton, Security Editor

Cover-ups still the norm in the wake of a cyber incident

Almost half of organisations that have experienced a cyber incident did not report it to the appropriate authorities, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Crest and IASME to deliver upcoming NCSC Cyber Exercise programme

Crest and IASME have been tasked with assuring that security services providers signing up to a soon-to-launch NCSC Cyber Incident Exercising scheme are up to the job Continue Reading

By

• Alex Scroxton, Security Editor

Annual Security Serious Awards nominations announced

Annual Security Serious Awards will recognise the professionals and organisations doing the most to safeguard and advance cyber security, as well as those committed to diversity and mental health in the industry Continue Reading

By

• Alex Scroxton, Security Editor

Fear is the mind-killer: Governance key to safety in the cyber dunes

Whether you’re tasked with protecting your organisation against cyber threats or ravenous subterranean worms, getting the basics of governance and risk management right counts for a lot and choosing the right framework will remove a huge burden from security teams and executives Continue Reading

By

• Peter Woollacott

Poor digital experience a blocker for cyber resilience

Organisations that neglect the digital employee experience are not only vulnerable to employee attrition, but putting themselves at increased cyber risk, an Ivanti report finds Continue Reading

By

• Alex Scroxton, Security Editor

Toyota car plant outage shows database capacity planning is vital

How could database deletes and re-organisation take out car production for 36 hours at 14 plants? We drill down into the details of database capacity planning Continue Reading

By

• Antony Adshead, Storage Editor

Organisations failing to proactively address insider cyber risk

Organisations are spending less than 10% of their annual security budgets on trying to solve one of the costliest problems in cyber: insider risk Continue Reading

By

• Alex Scroxton, Security Editor

Government offers £600,000 to subpostmasters with overturned convictions

Subpostmasters wrongfully convicted of financial crimes based on evidence from faulty Horizon software will be offered £600,000 compensation by government Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

BlackCat on the hook for cyber attack that crippled Vegas casinos

The ALPHV/BlackCat ransomware operation claimed responsibility for an attack that forced MGM Resorts to shut down systems at some of Las Vegas’ most popular gambling venues Continue Reading

By

• Alex Scroxton, Security Editor

CIO interview: Petra Tesch, Vizrt

Straight-talking when it comes to getting her messages across to the wider company, Vizrt CIO Petra Tesch revels in transformation and communication Continue Reading

By

• Martin Veitch