IT security

FireEye partners with Phishme for multi-layered security

Security technology developer FireEye has partnered with phishing awareness training firm PhishMe to offer a multi-layered approach to securing information networks Continue Reading

By

• Warwick Ashford, Senior analyst

MI5 and GCHQ call for FTSE 350 cyber health check

Intelligence agencies MI5 and GCHQ call on UK’s top listed companies to take part in a cyber governance health check Continue Reading

By

• Warwick Ashford, Senior analyst

Cisco buys cyber security company Sourcefire for $2.7bn

Networking giant Cisco has reached an agreement to buy cyber security business Sourcefire in a $2.7bn deal Continue Reading

By

• Warwick Ashford, Senior analyst

Insider threat: Balancing security with privacy

How can organisations increase security without affecting productivity or encroaching on employees’ right to privacy? Continue Reading

By

• Warwick Ashford, Senior analyst

UK to block online porn by default

The UK is to block online pornography by default to all new internet users, David Cameron is to announce Continue Reading

By

• Warwick Ashford, Senior analyst

How to assess the security of a cloud service provider

As businesses continue to put more information online, understanding cloud suppliers and agreements has never been more important Continue Reading

By

• Andrew Fitzmaurice

Facebook to acquire UK startup Monoidics

Facebook is to acquire UK startup Monoidics, which makes code verification and analysis tools and specialises in detecting coding errors Continue Reading

By

• Warwick Ashford, Senior analyst

IT security case studies

Four critical IT security case-studies selected from the winners of Computer Weekly's European User Awards for security Continue Reading

— ComputerWeekly.com

Needle in a Datastack: The rise of big security data

This research from McAfee investigates how well organisations are positioned to address the challenges of managing security in a world of ever increasing amounts and types of data. Continue Reading

— ComputerWeekly.com

Tech firms target piracy profiting websites

Tech firms including Google, Yahoo and Microsoft join an initiative targeting websites that profit from piracy by cutting off advert revenue Continue Reading

By

• Warwick Ashford, Senior analyst

2013 Cost of Data Breach Study: UK

The cost of data breaches has risen for UK organisations over the past year, the Ponemon Institute reveals. Continue Reading

— computerweekly.com

Security Think Tank Download: Bring your own device

Downloadable guide. How to make your company secure when you introduce BYOD. Continue Reading

— computerweekly.com

IT Security Case Studies

Warwick Ashford presents 4 essential IT security case-studies selected from the winners of Computer Weekly's European User Awards. Continue Reading

— computerweekly.com

CW500: Back to the Future: Big Data at Channel 4

Bob Harris, Chief Technology Officer of Channel 4 Television, explains the broadcaster's approach to big data in this presentation for Computer Weekly's 500 Club. Continue Reading

— computerweekly.com

More than one-fifth of UK firms hit by DDoS attacks in 2012

More than a fifth of UK firms experienced a disruptive distributed denial of service (DDoS) attack in 2012 Continue Reading

By

• Warwick Ashford, Senior analyst

Black market for software security flaws reaches new highs

The black market in previously undiscovered vulnerabilities in commercial software is so established that the average flaw sells for up to $160,000 Continue Reading

By

• Warwick Ashford, Senior analyst

OpenCorporates makes company data public

Company data is being made available as part of an initiative to place more government data in the public domain Continue Reading

Yahoo wants Fisa objections revealed

Yahoo is the latest company implicated in the Prism internet surveillance programme to call for more transparency around its involvement Continue Reading

By

• Warwick Ashford, Senior analyst

Protecting against modern password cracking

This article in our Royal Holloway Security Thesis series explains just how insecure passwords are and offers advice on alternative methods of security. Continue Reading

— ComputerWeekly.com

Smart cards: security risks

This article in our Royal Holloway Information Security Thesis series assess the new features introduced in Java Card 3 Connected Edition smart card specification and their associated security risks. Continue Reading

— ComputerWeekly.com

Security visualisation

This article in our Royal Holloway Information Security Thesis series shows how to generate a visual representation of a dataset and use visualisation in the evaluation of known security vulnerabilities. Continue Reading

— ComputerWeekly.com

Microsoft notches up over 3,000 copyright cases

In its battle against piracy, Microsoft says it has settled 3,265 copyright cases in the past year and warns of links to malware distribution Continue Reading

By

• Warwick Ashford, Senior analyst

Will cloud services follow the evolution of the banking industry?

Cloud service providers say security will become the very reason companies choose cloud services in future Continue Reading

UK takes cyber threats to infrastructure seriously

The UK is taking seriously potential cyber threats to critical national infrastructure, according to GCHQ head Iain Lobban Continue Reading

By

• Warwick Ashford, Senior analyst

Tougher EU penalties for cyber crime not enough, say security experts

The European Parliament has adopted a draft directive to toughen up EU penalties for cyber crime, but security experts say this is not enough on its own Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Prism unlikely to change much

Does the data collected by Prism put the US Government at risk from other state or non-state sponsored activists? Continue Reading

By

• Petra Wenham

UK joins EU demands for Google to rewrite privacy policy

The UK’s privacy watchdog has joined data protection authorities in France, Spain, Germany and Italy in demanding changes to Google’s privacy policy Continue Reading

By

• Warwick Ashford, Senior analyst

NSA Prism scandal could hit US cloud providers, says EC vice-president

EC vice-president Neelie Kroes says US cloud services providers could lose business because of fears over US Prism surveillance programme Continue Reading

By

• Warwick Ashford, Senior analyst

FBI warns of increased spear phishing attacks

The FBI has issued a warning about an increase in spear-phishing attacks targeting multiple industry sectors Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Prism – Sitting duck or elaborate honeypot?

Does the data collected by Prism put the US Government at risk from other state or non-state sponsored activists? Continue Reading

By

• Robert Newby

Senior MPs flout EU cookie law

Two years after the EU cookie regulation and UK law came into force, not all UK websites are compliant, including the sites of 13 senior MPs Continue Reading

By

• Warwick Ashford, Senior analyst

Stuxnet leak investigation leads to project originator

The US government investigation into Stuxnet leak of classified information leads to retired general in the Marines, James Cartwright Continue Reading

By

• Warwick Ashford, Senior analyst

The Washington Post reveals more details of NSA Prism programme

The Washington Post has published new slides detailing processes in the US Prism online surveillance system Continue Reading

By

• Warwick Ashford, Senior analyst

Encrypting enterprises miss out on cloud benefits

Enterprises sending encrypted data to the cloud are missing out on some of the greatest benefits of cloud computing, says Thales e-Security Continue Reading

By

• Warwick Ashford, Senior analyst

BES extends MDM to Android and iPhones

Aiming to rekindle interest in the Blackberry Enterprise Server (BES), Blackberry has extended the platform to support Android and iOS Continue Reading

By

• Cliff Saran, Managing Editor

Identity management key to browser-based IT strategy

A cloud-based identity management system is key to enabling a browser-based IT strategy at online recruitment firm Reed.co.uk Continue Reading

By

• Warwick Ashford, Senior analyst

Most firms underestimate volume of malware, study shows

Most companies greatly underestimate the number of malicious programs appearing daily, a global survey of more than 2,000 IT professionals has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

UK businesses failing to secure virtual environments, study finds

Most UK businesses are failing to secure data in virtual environments, a survey of IT decision makers has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Government launches cyber awareness campaign

UK government debuts the first stage of a £4m cyber awareness campaign as part of the National Cyber Security Programme Continue Reading

By

• Warwick Ashford, Senior analyst

The challenges of information governance in our increasingly litigious age

Formulating the right enterprise-wide information governance policies is essential in heading off potential legal and compliance costs Continue Reading

By

• Doug Miles

UK links to US internet surveillance remain unclear

The government insists that UK spy agencies operate within the law, but questions remain Continue Reading

By

• Warwick Ashford, Senior analyst

Telefonica Digital forms security group Eleven Paths

The business division of mobile operator Telefonica launches Eleven Paths, an independent company working on security issues in the workplace Continue Reading

By

• Jennifer Scott, TechTarget

Manage identity and access to improve business processes

Streamlining identity and access management is essential to exploiting your organisation’s assets and employees’ productivity. Continue Reading

By

• Andras Cser

2013 Cost of Data Breach Study: UK

The cost of data breaches has risen for UK organisations over the past year, but companies that appoint chief information security officers with enterprise-wide responsibilities can reduce their costs, this report from the Ponemon Institute reveals Continue Reading

— Computer Weekly

PM urged to criminalise internet rape porn

Campaigners are calling for the criminalisation of possessing internet pornography depicting rape Continue Reading

By

• Warwick Ashford, Senior analyst

ICO fines Glasgow City Council for loss of unencrypted laptops

Glasgow City Council has been fined £150,000 for losing two laptops which held personal details of more than 20,000 people Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

Human error causes most data breaches, Ponemon study finds

Human errors and system problems caused two-thirds of data breaches in 2012, according to a study from Symantec and the Ponemon Institute Continue Reading

By

• Warwick Ashford, Senior analyst

Information Governance

This research from AIIM looks at the risk profile around electronic records, the keep-all versus delete-all options, e-discovery, and the implications of social, mobile and cloud on risk management policies. Continue Reading

— Computer Weekly

Stratfor hacker pleads guilty

US hacktivist Jeremy Hammond pleads guilty to accessing computers of law enforcement agencies and government contractors illegally Continue Reading

By

• Warwick Ashford, Senior analyst

Syrian hackers deface Sky Android apps

Syrian hackers have defaced several of Sky’s Android apps, forcing the broadcaster to remove them temporarily from the Google Play store Continue Reading

By

• Warwick Ashford, Senior analyst

UK ISPs block access to pirate sites

UK internet service providers have begun blocking access to two sites accused of breaking copyright laws Continue Reading

By

• Warwick Ashford, Senior analyst

Privileged accounts key to most APT attacks, says Cyber-Ark

The theft, misuse and exploitation of privileged accounts is becoming an increasingly key tactic in advanced persistent threat attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Most IT environments immature, Microsoft reveals

Most business IT environments are immature, analysis of data from Microsoft’s Cloud Security Readiness Tool has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft declares conformance with ISO 27034-1

Microsoft has declared conformance with ISO 27034-1, the first part of an international standard for secure software development Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals hack Washington court system

Hackers gain access to the personal data of 160,000 US citizens after compromising Washington State court service servers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Symantec helps NHS trust cut security costs by a quarter

The Royal Liverpool and Broadgreen University Hospitals NHS Trust cut security costs by 25% in its partnership with security supplier Symantec Continue Reading

By

• Warwick Ashford, Senior analyst

Netherlands considers hacking powers for police

The Netherlands government considers legislation to give police powers to hack into computers, install spyware and read emails Continue Reading

By

• Warwick Ashford, Senior analyst

Computer Weekly European User Awards for Security: Winners

The winners are in for the Computer Weekly European User Awards for Security. See who made the top spots. Continue Reading

By

• Kayleigh Bateman, Computer Weekly

What’s to be done about data breach discovery?

The time from first contact by cyber attackers to the victim learning of it is still measured in months and years, not hours and days Continue Reading

By

• Warwick Ashford, Senior analyst

CW buyer's guide: context-aware security

This 11-page Computer Weekly buyer's guide looks at how organisations should approach context-aware security technologies and what business benefits they can deliver. Continue Reading

— Computer Weekly

Information Security Breaches Survey 2013

Security breaches cost large businesses an average of £850,000, the 2013 Information Security Breaches Survey reveals. Continue Reading

— Computer Weekly

CW Special Report on CSC

This 16-page report from Computer Weekly analyses the challenges facing CSC, its financial performance, the services it offers, its place in the IT market and its future strategy. Continue Reading

— Computer Weekly

Big data security: getting a grip on multiple data sources

Big data analyses multiple data points, but how do you ensure that ecosystem is secure? In this podcast, Mathieu Gorge, CEO of Vigitrust, outlines the key steps in achieving big data security Continue Reading

By

• Antony Adshead, Storage Editor

Another online firm hit by data breach

Online deals service LivingSocial is the latest company to report a breach of its computer systems that may mean attackers accessed customer details Continue Reading

Infosec 2013: Cyber crime challenges law enforcement

Cyber crime is forcing police and law enforcement agencies to re-think basic skills needed, according to experts at Infosecurity Europe 2013 Continue Reading

By

• Warwick Ashford, Senior analyst

Lib Dems will block Snoopers’ Charter, says Nick Clegg

The draft Communications Data Bill will not go ahead while the Lib Dems are in government, says deputy prime minister Nick Clegg Continue Reading

By

• Warwick Ashford, Senior analyst

Spam SMS messages drop following ICO penalty

The number of spam SMS messages has significantly reduced since government regulator ICO issued £440,000 fines last year Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

Protecting against modern password cracking

This article in our Royal Holloway Security Thesis series explains just how insecure passwords are and offers advice on alternative methods of security. Continue Reading

— Computer Weekly

Infosec 2013: University research challenges reliability of IPS

Research shows intrusion prevention systems (IPS) are not as effective at detecting malicious activity as some might think Continue Reading

By

• Warwick Ashford, Senior analyst

Security spend misaligned with threats, says security veteran

Security budget allocations have remained the same for the past 15 years, but threats have changed, says Shlomo Kramer, chief executive at security firm Imperva Continue Reading

The internet of things is set to change security priorities

IT leaders must protect against the security risks introduced by the growing interaction between technology and the physical world. Continue Reading

By

• Andrew Rose

US jails LulzSec hacker Cody Kretsinger

The US has jailed a member of hacktivist group LulzSec for a year for his role in breaching computer systems at Sony Pictures Entertainment in 2011 Continue Reading

By

• Warwick Ashford, Senior analyst

Conficker makes way for web-based attacks, says Microsoft

Web attacks emerge as top threat as businesses finally begin to win the battle against Conficker and other worms, says Microsoft Continue Reading

By

• Warwick Ashford, Senior analyst

How to create a good information security policy

Information security policies provide vital support to security professionals, yet few organisations take the time to create decent policies Continue Reading

By

• Andi Scott

One man’s mission to uncover a WWII decryption machine

How Brian Randell unlocked the secrets of Colossus, the world’s first programmable computer. Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

Anonymous hacks North Korean websites for a second time

Members of the Anonymous hacktivist collective claim to have again hacked several prominent North Korean websites Continue Reading

Google reaches deal with EU competition authorities

Google has reportedly reached a deal with European Union (EU) competition authorities over concerns about its business practices Continue Reading

By

• Warwick Ashford, Senior analyst

Google has another go at allaying EU competition concerns

Google has submitted a fresh set of proposals to address European concerns about its business practices and avoid punitive action Continue Reading

By

• Warwick Ashford, Senior analyst

Bots and web apps among top threats to data security, says Check Point

Bots, viruses, breaches and attacks are a constant and real threat to the information security of organisations Continue Reading

By

• Warwick Ashford, Senior analyst

Windows XP end of support: What to do next

CIOs may not wish to carry on running a 12-year-old desktop OS, but thousands of incompatible applications leave many with no choice Continue Reading

By

• Cliff Saran, Managing Editor

Porn websites pose malware risk, says researcher

Browsing popular pornography internet sites pose a growing risk of malware infection, according to a security researcher Continue Reading

By

• Warwick Ashford, Senior analyst

South Korea accuses North Korea of launching cyber attacks

South Korea blames North Korea for the cyber attacks that shut down thousands of computers at broadcasters and banks two weeks ago Continue Reading

By

• Warwick Ashford, Senior analyst

Effective print security for SMBs

Analysts Louella Fernandes and Clive Longbottom discuss how integrated print management provides SMBs with a simple and scalable approach for print security. Continue Reading

— Computer Weekly

Case Study: 192business switches to tokenisation to speed up business processes

Online payment card verification firm 192business uses tokenisation to speed up its processes and protect credit card details from fraud Continue Reading

US Army practises poor data security on mobile devices

Pentagon inspector general finds smartphones and tablets the US Army buys are not configured to protect sensitive data and allow remote wipe Continue Reading

By

• Warwick Ashford, Senior analyst

Anonymous threatens to declare cyber war on North Korea

Anonymous hacktivist collective has threatened North Korea with cyber war if leader Kim Jong-un does not resign and install free democracy Continue Reading

Google closer to action from European privacy regulators

Google is another step closer to action by privacy regulators across Europe for failing to change the way it manages user data Continue Reading

By

• Warwick Ashford, Senior analyst

UK government sets up cyber security fusion cell

A cyber security “fusion cell” for cross-sector threat data sharing aims to put government, industry and information security analysts side-by-side Continue Reading

By

• Warwick Ashford, Senior analyst

Employees ignore security rules, say infosec pros

Most information security professionals believe corporate employees wilfully ignore security rules, survey at RSA Conference 2013 reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Securing the hypervisor: expert tips

There are many potential security issues with the various components of a virtualised infrastructure, and nowhere is this more of a concern than with the hypervisor platforms that host virtual systems and application instances Continue Reading

By

• Dave Shackleford, Voodoo Security

Malware in counterfeit software to cost business $114bn in 2013

Dealing with malware in counterfeit software will cost global enterprises an estimated $114bn in 2013, says research firm IDC Continue Reading

By

• Warwick Ashford, Senior analyst

How to configure Mac OS X Server

This step by step guide shows you how to configure Max OS X Server. Continue Reading

— ComputerWeekly

Six security issues to tackle before encrypting cloud data

Concern about security and privacy is likely to drive adoption of cloud encryption, but there are six security issues businesses should tackle Continue Reading

By

• Warwick Ashford, Senior analyst

Case study: Hamilton Fraser embraces BYOD with MobileIron

How insurance firm Hamilton Fraser is using MobileIron to enable employees to bring their own devices while following company policy Continue Reading

By

• Jennifer Scott, TechTarget

CIO Interview: Matthew Oakeley, global IT head of Schroders

Matthew Oakeley talks to Karl Flinders about his role as global IT head at investment management company Schroders Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

US authorities investigate hack of Michelle Obama and other high-profile people

US authorities are investigating hackers who allegedly stole financial information belonging to US first lady Michelle Obama Continue Reading

By

• Warwick Ashford, Senior analyst

The Deloitte Consumer Review: A more secure customer

This report from Deloitte assesses the impact of cybercrime on consumers and offers advice to businesses on how to respond. Continue Reading

— ComputerWeekly

Information security trends

This report from CompTIA, based on original research, assesses the current trends in information security. Continue Reading

— ComputerWeekly

Phishing emails sent in pairs to lend authenticity, says training company

Phishing emails are now being deployed in pairs to create the illusion of authenticity, says security awareness training company PhishMe Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft releases four critical security updates

Microsoft is to release four “critical” patches in its monthly Patch Tuesday security update, according to the advance notice. Continue Reading

By

• Warwick Ashford, Senior analyst