IT operations management and IT support

NCSC and ICO sign MoU to forge deeper collaborative links

The scope of the MoU signed by the NCSC and the ICO includes collaboration on new cyber regulations and guidance, and how to support cyber attack victims appropriately and minimise regulatory penalties Continue Reading

By

• Alex Scroxton, Security Editor

Patch Tuesday: Microsoft fixes zero-days in Word and Streaming Service

September 2023 brings a light Patch Tuesday, with two zero-days and five critical vulnerabilities listed in the latest release Continue Reading

By

• Alex Scroxton, Security Editor

Cisco tightens link between observability and security

The company's observability platform now offers a way for IT decision-makers to understand the impact of security issues Continue Reading

By

• Cliff Saran, Managing Editor

ExtraHop open sources 16 million rows of threat domain data

NDR specialist ExtraHop says making its entire machine learning dataset available for anybody to view will help organisations better defend against cyber attacks originating from malicious domains generated by algorithms Continue Reading

By

• Alex Scroxton, Security Editor

US casino giant MGM Resorts battles 36-hour outage after cyber attack

Multiple systems at US hotel and casino operator MGM went down in the wake of the incident on 10 September, crippling several of Las Vegas’ most prominent casinos Continue Reading

By

• Alex Scroxton, Security Editor

European enterprises to spend more on generative IT to close gap on US

European organisations are upping their spending on generative AI innovation, but face challenges recruiting the right people to support this Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK boardrooms and CISOs increasingly aligned on cyber risks

Board members and CISOs in UK organisations seem to be working together much better, but while this is an encouraging sign, there remain some areas of concern over how the two relate to each other Continue Reading

By

• Alex Scroxton, Security Editor

Salesforce and Zoom embrace ethical hackers. You should, too

Software companies Salesforce and Zoom discuss their successful bug bounty programmes, what they learned at a recent in-person hackathon in which they participated, and why others shouldn’t be scared of hackers Continue Reading

By

• Alex Scroxton, Security Editor

AI-powered cloud SIEM: Real-time threat intel boosts defences

Thanks to their advanced data analysis and predictive capabilities, AI and ML will be valuable protective tools going forward. Learn about the potential of AI-backed cloud SIEM technology Continue Reading

By

• Isla Sibanda

North Koreans using new zero-day to target security researchers

A threat actor linked to the North Korean government is continuing a long-running campaign targeting legitimate security researchers, using an as-yet undisclosed zero-day vulnerability to gain access to their victims Continue Reading

By

• Alex Scroxton, Security Editor

Sensitive NatWest customer files set to be returned after High Court agreement

Sensitive NatWest customer files set to be secured by bank after years in the home of a data breach whistleblower Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Duplicate waypoints root cause of Nats subsystem failover

Processing of waypoints that determine when a flight enters and leaves UK airspace caused the air traffic system to report a critical error Continue Reading

By

• Cliff Saran, Managing Editor

Finnish government to bolster spending on cyber-AI defences

Finland’s government will increase spending on cyber security amid heightened threats from artificial intelligence-based attacks Continue Reading

By

• Gerard O'Dwyer

Mainframe remains a positive force among IT leaders

BMC’s annual survey of mainframe users finds there is continued demand, but some are concerned over DevOps tooling Continue Reading

By

• Cliff Saran, Managing Editor

Singapore taps Lidar and laser scanning in remote building inspections

With the 3D data generated reality capture technologies, detailed inspections can be conducted remotely, eliminating the need for inspectors from technical authorities to be present onsite Continue Reading

By

• Aaron Tan, TechTarget

Ryder Cup testbed to feature tech firsts in Rome

This year’s Ryder Cup will test out technology to improve how fans digitally consume the event while reducing the workload on IT teams Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Plymouth Uni spearheads research into wind farm cyber resilience

Project hosted at the University of Plymouth in Devon aims to develop cyber security measures to protect the UK’s increasingly important offshore wind farm assets Continue Reading

By

• Alex Scroxton, Security Editor

Ethical perspectives on ChatGPT

In the final of three essays, Marc Steen uses ChatGPT as a case study for how to use different ethical perspectives, and practical steps people can take to start incorporating ethics into their projects Continue Reading

By

• Marc Steen, TNO

Digital service: A Computer Weekly Downtime Upload podcast

We speak to Harmeen Mehta, chief digital innovation officer at BT, about service management in digital transformation Continue Reading

By

• Cliff Saran, Managing Editor

Police Scotland five-year digital strategy approved

Police Scotland’s new strategy outlines how the force will approach and invest in its digital transformation over the next five years, but notes its ability to achieve its ambitions is subject to the availability of funding Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Threat actors exploiting unpatched Juniper Networks devices

A series of vulnerabilities in Juniper Networks firewalls and switches appear to be being exploited in the wild to enable remote code execution, with thousands of devices thought to be exposed Continue Reading

By

• Alex Scroxton, Security Editor

Cisco expands customer experience services portfolio

Lifecycle services technology launched to give businesses ability to align priorities with clear and measurable outcomes to ensure their technology investments support their business, technology and operational goals Continue Reading

By

• Joe O’Halloran, Computer Weekly

IT organization (information technology organization)

An IT organization (information technology organization) is the department within a company that's charged with establishing, monitoring and maintaining information technology systems and services. Continue Reading

By

• Stephen J. Bigelow, Senior Technology Editor

Zurich Insurance slashes ServiceNow application development time

Insurance giant cuts time it takes to complete development of ServiceNow applications by days Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Zero-day that forced Barracuda users to bin kit was exploited by China

Mandiant has published details of how a Chinese threat actor targeted high-profile users of Barracuda Networks' Email Security Gateway appliances, including government agencies of interest to Beijing's intelligence goals Continue Reading

By

• Alex Scroxton, Security Editor

Nats resorts to fail-safe manual process after technical hitch

Just a few hours of manual processing has resulted in a massive backlog in flights Continue Reading

By

• Cliff Saran, Managing Editor

Top-performing CISOs reserve time for professional development

Survey of chief information security officers conducted by Gartner sheds light on habits shared by the top-performing members of the profession Continue Reading

By

• Alex Scroxton, Security Editor

deputy CIO (deputy chief information officer)

Deputy CIO (chief information officer) is a role within some organizations that generally has responsibility for overseeing day-to-day information technology (IT) operations. Continue Reading

By

• Paul Kirvan
• Mary K. Pratt

India gets ready for new data protection regime

The Digital Personal Data Protection Act will shape the way businesses collect, secure and use personal data as India looks to protect data privacy while driving innovation and economic growth Continue Reading

By

• Pratima Harigunani

Google bets on AI-backed cyber controls for Workspace users

Zero-trust and digital sovereignty controls are the focus of a series of enhancements being made for Google Workspace users Continue Reading

By

• Alex Scroxton, Security Editor

Six subpostmaster appeals to be heard in Scottish court

Scottish court will hear appeals against the convictions of six former subpostmasters based on evidence from a Post Office computer system Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

St Helens Council in Merseyside hit by ransomware attack

St Helens Borough Council is investigating a suspected ransomware incident targeting its systems, and is advising residents to be on the alert for follow-on phishing attacks Continue Reading

By

• Alex Scroxton, Security Editor

Cyber attacks in 2023 develop quicker as average dwell times plummet

The median attacker dwell time shrunk from 10 to eight days in the first seven months of 2023, and in the case of ransomware attacks it is down to just five days Continue Reading

By

• Alex Scroxton, Security Editor

Met Police data platform £64m over budget

A freedom of information request has revealed that the Met’s Connect integrated record management system is running tens of millions over budget, and has already generated more than 25,000 support requests so far Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

The right digital tools on the go for SMEs

SMEs should look out for business laptops that come with the performance, durability and easy management to empower their hybrid workforce to be more productive while on the move Continue Reading

By

• Siew TH

Alternative perspectives: relational and virtue ethics in tech

In the second of three essays, Marc Steen explores the benefits of grounding ethical considerations in an understanding of social and power dynamics, and how relational and virtue ethics can help Continue Reading

By

• Marc Steen, TNO

Red Hat CEO on AI moves and source code kerfuffle

Matt Hicks talks up Red Hat’s efforts to support generative AI adoption through OpenShift AI and weighs in on the issues surrounding the company’s decision to limit access to RHEL source code Continue Reading

By

• Aaron Tan, TechTarget

logical partition (LPAR)

A logical partition (LPAR) is a subset of a computer's processor, memory and I/O resources that behaves much like a physical server. Continue Reading

By

• Robert Sheldon

More than 400 Liberty Global IT staff move to Infosys as part of €1.5bn contract

TV and broadband giant outsources the build and operation of its entertainment and connectivity platforms to Indian supplier in five year deal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NatWest customer calls bank’s handling of breach of his data ‘disgusting’

A second NatWest customer has contacted Computer Weekly after finding out from a whistleblower that his sensitive personal data has been in her home for 14 years Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Terraform

HashiCorp Terraform is an infrastructure as code (IaC) software tool that allows DevOps teams to automate infrastructure provisioning using reusable, shareable, human-readable configuration files. Continue Reading

By

• Rahul Awati
• Alexander S. Gillis, Technical Writer and Editor

Accenture’s Brussels AI lab to focus on European public sector and health

Accenture will use its Brussels AI lab to test AI and generative AI's application in the European public sector Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NCSC expands Cyber Incident Response service more widely

The NCSC has added a level to its CIR programme to enable more cyber attack victims to take advantage of the service, which offers access to assured incident response specialists Continue Reading

By

• Alex Scroxton, Security Editor

ITAM influence on cyber risk becoming a factor in credit ratings

Credit agency S&P Global Ratings warns that organisations that pay inadequate attention to IT asset management as a factor in their cyber risk management processes may find their creditworthiness takes a dive Continue Reading

By

• Alex Scroxton, Security Editor

London calling as Zoom opens hub heralding new era of modern work

Communications tech provider makes latest evolutionary step having gained reputation as breakthrough pandemic collaboration company, opening doors on hub in UK capital to support hybrid ways of working Continue Reading

By

• Joe O’Halloran, Computer Weekly

Bank of England core system experiences outage

The “beating heart” of the UK financial system stopped after a technical issue Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Datacentre management vulnerabilities leave public clouds at risk

At the annual DEF CON hacking convention, researchers from Trellix have disclosed multiple vulnerabilities in key datacentre products underpinning the world’s public cloud infrastructure Continue Reading

By

• Alex Scroxton, Security Editor

Google speeds up security update frequency for Chrome

Changes to Google’s security update policy are supposed to help close the gap in which cyber criminals can exploit n-day vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

CTO interview: Gavin Rea, Gulf Bridge International

GBI ensures service continuity of submarine cable networks, which bring high-speed internet to the Gulf states, supporting the region’s ambitious plans to be one of the world’s leading poles for technological innovation Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Workplace monitoring needs worker consent, says select committee

Employers looking to monitor their employees through connected devices should only to so with the consent of those affected due to negative impacts such surveillance can have on work intensification and mental health Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Many UK organisations considering ChatGPT bans on employee devices

More than 60% of organisations in the UK have either banned, or are considering banning, the use of generative AI tools on employee- or business-owned devices Continue Reading

By

• Alex Scroxton, Security Editor

Ethics as a process of reflection and deliberation

In the first of three essays, Marc Steen outlines a three-step process for how organisations can practically integrate ethics into their IT projects and how different ethical perspectives can inform tech development Continue Reading

By

• Marc Steen, TNO

Microsoft fixes Azure flaw that was subject of researcher criticism

Microsoft has confirmed a potentially-dangerous flaw in the Azure platform has now been fully fixed, and moved to reassure customers that despite criticism it is committed to responsible disclosure and timely fixes Continue Reading

By

• Alex Scroxton, Security Editor

Log4Shell, ProxyShell still among most widely exploited flaws

Statistics released by the collective Five Eyes cyber agencies reveals insight into the most exploited vulnerabilities of 2022, and unsurprisingly there are some old ‘friends’ on the list Continue Reading

By

• Alex Scroxton, Security Editor

Biden’s SBOM mandate a ‘shot heard around the world’, report says

Two years and three months after Joe Biden mandated new standards in supply chain security, over 40% of UK respondents to a survey say they have implemented new SBOM policies in direct response Continue Reading

By

• Alex Scroxton, Security Editor

policy engine

A policy engine is a software component that allows an organization to create, monitor and enforce rules about how network resources and the organization's data can be accessed. Continue Reading

By

• Robert Sheldon

Scottish NHS trust ducks fine after staff shared patient data via WhatsApp

NHS Lanarkshire has been issued a formal reprimand by the ICO after staff members used WhatsApp to share patients’ personal data with one another Continue Reading

By

• Alex Scroxton, Security Editor

Ivanti MDM users told to patch against two dangerous flaws

Users of Ivanti’s mobile device management platform have been warned to act now to patch two vulnerabilities that were chained by a threat actor in a series of cyber attacks on the Norwegian government Continue Reading

By

• Alex Scroxton, Security Editor

AI has a place in cyber, but needs effective evaluation

Organisations that don’t leverage AI-based security solutions will find themselves more vulnerable than those that do., but cyber pros still need to ensure they can effectively evaluate AI-enhanced tech to ensure it meets their use case Continue Reading

By

• Jack Chapman

Chief data officer interview: Neema Raphael, Goldman Sachs

After two decades at Goldman Sachs, Neema Raphael tells Computer Weekly about his tech journey at one of the world’s biggest banks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Does AI have a future in cyber security? Yes, but only if it works with humans

Do AI and ML hold the promise of helping cyber pros achieving the holy grail of operating quicker, cheaper, and with higher efficiency? We shouldn’t hold our breath, says Nominet’s Paul Lewis Continue Reading

By

• Paul Lewis, Nominet

AI-enhanced cyber has potential, but watch out for marketing hype

As AI is a hot topic right now, it is no surprise there are some cyber solutions coming to market that have been thrown together in haste, but that said, genuine AI-powered security products do exist and their abilities could yet prove transformative. Continue Reading

By

• Shailendra Parihar, Turnkey Consulting

Post Office tried to convince independent IT witness that he was wrong about Horizon

‘Delusional’ Post Office tried to influence an expert witness and get him to change his view about IT evidence which was detrimental to its case against a subpostmaster Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK organisations lack confidence to carry out basic cyber tasks

Amid a shortfall of more than 10,000 cyber pros, UK businesses are still finding it difficult to fill their cyber security skills gaps, with even those in charge of security saying they lack confidence in themselves Continue Reading

By

• Alex Scroxton, Security Editor

Cisco, BT and others launch network security coalition

Network Resilience Coalition focuses on bringing together global expertise to improve data and network security Continue Reading

By

• Alex Scroxton, Security Editor

CCRC refers two more subpostmaster convictions for appeal

Two more subpostmaster convictions referred to appeal court by the Criminal Cases Review Commission Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CIO interview: Sean Green, University of East Anglia

In his role as director of digital and data at the University of East Anglia, Sean Green provides high-performance computing to researchers and manages the diverse needs of a campus with the characteristics of a small town, all while finding the time to study one of his passions Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Citrix NetScaler users told to patch new zero-day urgently

A vulnerability disclosed and patched last week by Citrix appears to be being exploited by China-backed threat actors as a zero-day, prompting warnings from government cyber bodies Continue Reading

By

• Alex Scroxton, Security Editor

Transforming the financial system's plumbing

Executive heading up the Bank of England’s core system replacement project says the financial services sector plumbing is getting the attention it deserves. Continue Reading

By

• Victoria Cleland

Bank of England’s project to replace ‘beating heart’ is foundation for continuous development

The Bank of England has reached a major milestone in its core system replacement programme, with next landmark in sight Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security AI and automation may reduce cost of data breaches

Organisations that go all in on security AI and automation tend to incur lower financial costs when they experience a data breach incident, according to an IBM report Continue Reading

By

• Alex Scroxton, Security Editor

BBC outsources IT to India’s Tata Consultancy Services

TCS continues to build its UK public sector business, with the BBC its latest customer Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Attention-seeking KillNet hacktivists becoming more dangerous

The KillNet DDoS gang seems to be becoming more dangerous, but its primary goal remains to create a lot of noise and draw media attention, according to latest analysis Continue Reading

By

• Alex Scroxton, Security Editor

AI and data experts to be brought into government through secondment programme

The government has announced plans for a secondment programme designed to bring digital experts into government departments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Five non-traditional talent pools that will help CIOs plug skills gaps

Some alternative ways for CIOs to fill talent gaps when its hard to find people with the right technology skills in the jobs market Continue Reading

By

• Lily Haake, Harvey Nash, and George Lynch, NashTech, part of Nash Squared

Half of cyber pros engage in risky behaviour at work, report claims

Approximately 55% of security professionals say they have engaged in behaviours they would more usually advise against in the workplace, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

proportional control

Proportional control is a control system technology in which the response (output) is proportional to the difference between a setpoint value and the current value of a process variable. Continue Reading

By

• Rahul Awati

Traditional IT outsourcing rockets as Europe’s businesses cut costs

Overall spending on IT services is up in European countries despite continued reduction in investments in cloud-based contracts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Subpostmaster compensation deadline will be missed, warns public inquiry chair

Subpostmasters that successfully sued the Post Office and exposed the Horizon scandal are at the ‘back of the queue’ and won’t receive compensation by current deadline Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Police Scotland use cloud for biometric data despite clear risks

Police Scotland confirms it has stored significant volumes of biometric data on a cloud-based digital evidence sharing system despite major ongoing data protection concerns, bringing into question the effectiveness of the current regulatory approach and the overall legality of using hyperscale public cloud technologies in a policing context Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

AI in cyber security: Distinguishing hype from reality

We know that malicious actors are starting to use artificial intelligence (AI) tools to facilitate attacks, but on the other hand, AI can also be a powerful tool within the hands of cyber security professionals Continue Reading

By

• Dhairya Mehta, PA Consulting

provisioning

In the context of IT and computing, provisioning refers to the process of setting up IT infrastructure and providing access to authorized users to the various resources that are part of the infrastructure. Continue Reading

By

• Rahul Awati

Microsoft issues new warning over Chinese cyber espionage

A newly uncovered Chinese espionage campaign exploited forged authentication tokens to access its victims’ email accounts, says Microsoft Continue Reading

By

• Alex Scroxton, Security Editor

One month after MOVEit: New vulnerabilities found as more victims are named

Five weeks after the mass MOVEit breach, new vulnerabilities in the file transfer tool are coming to light as the Clop cyber crime group continues to terrorise victims. But has the gang bitten off more than it can chew? Continue Reading

By

• Alex Scroxton, Security Editor

Cozy Bear lures victims with used BMW 5 Series

A recent Cozy Bear campaign saw the Russian APT group pivot to exploiting an advert for a used car as it targeted diplomatic missions in Kyiv Continue Reading

By

• Alex Scroxton, Security Editor

Hackers: We won’t let artificial intelligence get the better of us

AI is changing how ethical hackers go about their work, and will continue to do so, but the community is convinced the technology will never be able to replicate the creativity of a flesh-and-blood hacker Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft users on high alert over dangerous RCE zero-day

A serious RCE vulnerability in Microsoft Office and Windows is among several zero-days disclosed in Redmond’s July Patch Tuesday update, but this one does not have a patch yet Continue Reading

By

• Alex Scroxton, Security Editor

Malicious URL volumes soar as cyber criminals pull on Threads

Malicious actors have been quick to exploit the buzz around Meta’s newly launched Threads platform, with thousands of new suspicious domains registered exploiting its branding Continue Reading

By

• Alex Scroxton, Security Editor

Horizon inquiry adjourned as Post Office disclosure failures threaten to ‘derail’ proceedings

Statutory public inquiry into Post Office Horizon scandal adjourned because of Post Office disclosure failures, ‘retraumatising’ victims of a scandal that destroyed the lives of thousands of people Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Apple pushes Rapid Response patch to fix WebKit zero-day

Apple deployed an emergency patch under its Rapid Security Response update programme, but had to temporarily suspend delivery after it caused problems for users of the Safari browser Continue Reading

By

• Alex Scroxton, Security Editor

Norwegian data privacy experts sound alarm over generative AI

Hundreds of millions of people embrace generative artificial intelligence, blissfully ignorant of what it’s doing to data privacy. Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Post Office inquiry must examine rule on IT evidence if miscarriages of justice are to be avoided

Public inquiry must examine role of court rules around use of computer evidence that enabled Post Office to prosecute innocent people Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Suspicious email reported every five seconds in UK

National Cyber Security Centre report reveals a suspicious email was reported by UK citizens and organisations every five seconds last year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Biometrics watchdog calls for public space surveillance review

The biometrics and surveillance camera commissioner is calling for a review of public space surveillance to gain a clearer picture about the proliferation of Chinese surveillance technology across the public sector, but warns against applying double standards on companies just because they are from China Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Former Fujitsu IT chief evidence postponed after late Post Office disclosure

Post Office has disrupted Horizon inquiry schedule through late disclosure of ‘significant’ evidence as key IT witness evidence is postponed Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Public inquiry hears how Post Office security withheld evidence from people it suspected of theft

The Post Office told investigators to include potential evidence in reports to their own lawyers, but not the subpostmasters they suspected of theft Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

HPE, BT team for global managed LAN service

Business division of leading UK telco and networking technology and service provider enter collaboration to introduce LANs supporting high-performance experiences for hybrid workers and IoT transformations Continue Reading

By

• Joe O’Halloran, Computer Weekly

BBVA launches tech job portal as it continues to add talent

Spanish bank BBVA ramps up its tech recruitment strategy with new online portal and target of 2,600 more people Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

SGN pens IT service desk outsourcing deal

Utility company SGN renews its internal IT services managed services contract with new supplier Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

‘Shadow’ AI use becoming a driver of insider cyber risk

Off-the-books use of generative AI tools will inevitably lead to a costly, high-profile data breach for someone, but a little attention paid to appropriate data management policy can help mitigate the risk Continue Reading

By

• Alex Scroxton, Security Editor