IT security

IAM: Enterprises face a long, hard road to improve

Poor identity and access management puts enterprise data at risk, but the path to stronger IAM remains complex Continue Reading

By

• Stephen Pritchard

An explanation of ransomware

Ransomware encrypts data and demands payment for release. Protect yourself by backing up data, updating software and avoiding suspicious links. Continue Reading

By

• TechTarget Contributor

ESET shines light on cyber criminal RedLine empire

ESET publishes fresh data on the inner workings of the RedLine Stealer malware empire, which was taken down at the end of October Continue Reading

By

• Alex Scroxton, Security Editor

Beyond VPNs: The future of secure remote connectivity

As more companies adopt cloud services and remote work, the limitations of VPNs are becoming obvious. We explore what’s next for secure remote connectivity Continue Reading

By

• Isla Sibanda

What are the security risks of bring your own AI?

The rise of generative AI has led to a plethora of publicly accessible artificial intelligence tools, but what are the risks when external AI tools are used with corporate data? Continue Reading

By

• Peter Ray Allison

Google Cloud MFA enforcement meets with approval

Latest Google Cloud policy to enforce multifactor authentication across its user base is welcomed by security professionals Continue Reading

By

• Alex Scroxton, Security Editor

AI a force multiplier for the bad guys, say cyber pros

CIISec’s annual report on the security profession finds evidence of growing concern that artificial intelligence will ultimately prove more useful to threat actors than defenders Continue Reading

By

• Alex Scroxton, Security Editor

Interview: Petra Molnar, author of ‘The walls have eyes’

Refugee lawyer and author Petra Molnar speaks to Computer Weekly about the extreme violence people on the move face at borders across the world, and how increasingly hostile anti-immigrant politics is being enabled and reinforced by a ‘lucrative panopticon’ of surveillance technologies Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

UK government launches AI assurance platform for enterprises

The platform is designed to drive demand for the UK’s artificial intelligence assurance sector and help build greater trust in the technology by helping businesses identify and mitigate a range of AI-related risks Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Lords shoplifting inquiry calls for facial recognition laws

A Lords committee has expressed concern about the use of facial recognition technology by retailers to combat shoplifting, and is calling on the government to introduce new laws to ensure there are minimum standards for their deployments Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Starmer announces tech-enabled crackdown on people smuggling

The UK government has announced a further £75m of funding for its Border Security Command, meaning it will now have £150m over two years to spend on new technologies and staff Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Post Office data breach caused by botched website upgrade

Data breach exposed personal details of the hundreds of former subpostmasters who had defeated the Post Office in the High Court Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

User-centric security should be core to cloud IAM practice

The Security Think Tank considers best practices in identity and access management and how can they be deployed to enable IT departments to combat cyber-attacks, phishing attacks and ransomware Continue Reading

By

• Mike Gillespie

Data bill will boost NHS and police access to data, says government

The Data Use and Access Bill will pave the way for sharing medical records across the NHS and give police the ability to access databases without having to manually log the reasons for their use Continue Reading

Data bill aims to boost police and NHS productivity

In this week’s Computer Weekly, the government’s new data bill promises to improve productivity and efficiency for the NHS and police, but will it ensure privacy as well? We talk to Dell’s global CTO about how the IT giant sees the AI boom playing out. And we examine which industries stand to benefit most from the collaboration opportunities of virtual reality. Read the issue now. Continue Reading

Virtual collaboration within and across industries – promises and challenges

New technologies enable intuitive and realistic visual and auditory landscapes that put users within applications. We look at which industries will likely illustrate the impact of virtual collaboration in commercial environments Continue Reading

By

• Martin Schwirn, Computer Weekly

CISA looks to global collaboration as fraught US election begins

The US' CISA cyber agency has unveiled a two-year International Strategic Plan to advance collaboration and improve resilience against shared risks and threats Continue Reading

By

• Alex Scroxton, Security Editor

What is unified threat management (UTM)?

Unified threat management (UTM) is an information security system that provides a single point of protection against cyberthreats, including viruses, worms, spyware and other malware, as well as network attacks. Continue Reading

By

• Paul Kirvan
• Linda Rosencrance

Bank of England warns against AI ‘complacency’

UK financial services regulator wants to increase understanding of AI’s benefits and how firms are managing the risks it poses, as take-up grows and use cases increase Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The network is dead - long live the network

It’s been a good week for "reinventing networking" conversations. And not before time – I mean, look at all the changes we’ve seen in IT in the past decade, from data types and scale thereof, ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Linux enters the cold war

The news that the Linux Foundation has removed Russian software developers from the Linux kernel maintainers mailing list is something that is sending shockwaves through the LInux community. While ... Continue Reading

By

• Cliff Saran, Managing Editor

What is face detection and how does it work?

Face detection, also called facial detection, is a computer technology that identifies human faces in digital images and video. Continue Reading

By

• Robert Sheldon
• Nick Barney, Technology Writer
• Corinne Bernstein

RedLine, Meta malwares meet their demise at hands of Dutch cops

A multinational action led by authorities in the Netherlands has resulted in the takedown of the notorious RedLine and Meta infostealer malwares Continue Reading

By

• Alex Scroxton, Security Editor

IAM best practices for cloud environments to combat cyber attacks

The Security Think Tank considers best practices in identity and access management and how can they be deployed to enable IT departments to combat cyber-attacks, phishing attacks and ransomware Continue Reading

By

• Varun Prasad, ISACA

Why geopolitics risks global open source collaborations

Linux Foundation’s decision to ban Russian maintainers has the potential to destroy open source’s global collaboration model Continue Reading

By

• Cliff Saran, Managing Editor

EMEA businesses siphoning budgets to hit NIS2 goals

With NIS2 now in effect, European business leaders are having to divert budget from elsewhere to achieve compliance Continue Reading

By

• Alex Scroxton, Security Editor

Russian Linux kernel maintainers blocked

To ensure compliance, the Linux kernel will no longer allow Russian software developers to work on maintaining the codebase Continue Reading

By

• Cliff Saran, Managing Editor

UK launches cyber guidance package for tech startups

The NCSC and NPSA, alongside agencies from the Five Eyes alliance, have issued guidance for startups on how to secure themselves against common cyber threats and targeted industrial espionage Continue Reading

By

• Alex Scroxton, Security Editor

What is two-factor authentication (2FA)?

Two-factor authentication (2FA), sometimes referred to as two-step verification or dual-factor authentication, is a security process in which users provide two different authentication factors to verify themselves. Continue Reading

By

• Paul Kirvan
• Peter Loshin, Former Senior Technology Editor
• Michael Cobb

Inside Google Cloud’s secure AI framework

Google Cloud’s secure AI framework that’s integrated into its Vertex AI platform offers practical tools and guidance to manage the lifecycle, data governance and operational risks of AI Continue Reading

By

• Aaron Tan, TechTarget

How Manulife is empowering sales and call centre agents with AI

Canadian insurance giant is leveraging generative AI to personalise customer experiences, transform contact centre workflows and automate underwriting processes Continue Reading

By

• Aaron Tan, TechTarget

Dutch critical infrastructure at risk despite high leadership confidence

Stark paradox in Dutch cyber security landscape has business leaders expressing high confidence in their IT infrastructure as cyber attacks rise Continue Reading

By

• Kim Loohuis

How Infoblox is tackling multicloud complexity and boosting security

Infoblox CEO Scott Harrell discusses the company’s new Universal DDI service designed to address the growing challenges of managing network security in hybrid IT environments Continue Reading

By

• Aaron Tan, TechTarget

Data bill will boost NHS and police access to data, says government

The Data Use and Access Bill will pave the way for sharing medical records across the NHS and give police the ability to access databases without having to manually log the reasons for their use Continue Reading

By

• Bill Goodwin, Computer Weekly
• Sebastian Klovig Skelton, Data & ethics editor

Aryaka's Sassy Additions - The SASE Bandwagon Continues To Gather Pace Five Years On...

I’ve talked a lot about SASE in this ‘ere blog, including the SASE Network Scorecard I developed earlier in the year. For those who didn’t see that, here’s an example of one vendor completing it: ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Prudential taps AI to improve health insurance experience

Insurance giant Prudential teams up with Google Cloud to streamline claims processing, personalise healthcare journeys and improve health outcomes Continue Reading

By

• Aaron Tan, TechTarget

Government hails Cyber Essentials success

Scheme to help keep organisations’ IT safe and secure has given businesses more confidence they won’t fall victim to a cyber attack Continue Reading

By

• Cliff Saran, Managing Editor

Detect ransomware in storage to act before it spreads

Anomaly detection and immutable copies can be frontline tools against ransomware – we look at the role storage can play against the latest techniques employed by ransomware gangs Continue Reading

By

• Stephen Pritchard

ServiceNow touts Now platform as AI engine for transformation

At the ServiceNow World Forum in Melbourne, company executives touted the transformative power of AI in streamlining workflows, improving user experiences and driving business value Continue Reading

By

• Stephen Withers

Democracy campaigner to sue Saudi Arabia over Pegasus and QuaDream spyware in UK court

Pro-democracy campaigner Yahya Assiri given permission to file legal action in London court against Saudi Arabia over its use of Israeli spyware Continue Reading

By

• Bill Goodwin, Computer Weekly

Danish government reboots cyber security council amid AI expansion

Denmark’s government relaunches digital security initiative to protect business sectors and society at large Continue Reading

By

• Gerard O'Dwyer

Labour’s 10-year health service plan will open up data sharing

To save the health service, Labour is focusing on bolstering the NHS app and enabling greater sharing of patient records in England Continue Reading

By

• Cliff Saran, Managing Editor

Can AI be secure? Experts discuss emerging threats and AI safety

International cyber security experts call for global cooperation and proactive strategies to address the security challenges posed by artificial intelligence Continue Reading

By

• Aaron Tan, TechTarget

NCSC chief warns of gap in cyber threats and defence capabilities

The UK and its allies must take collective action to improve their cyber resilience and repel the increasing volume of severe cyber attacks, says NCSC chief Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

EU cyber security bill NIS2 hits compliance deadline

The EU’s NIS2 bill will harmonise how companies and member states approach cyber security, but its success will depend on how well it is implemented and enforced Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Preparing for disruptions to enterprise application ecosystems

From undersea cable sabotage to AI deepfakes and restrictive regulations, modern applications face a barrage of threats. Organisations must prioritise resilience by diversifying infrastructure, investing in cyber security, and embracing sustainable practices to ensure business continuity Continue Reading

By

• Neha Ralhan

How to build an incident response plan, with examples, template

With cyberthreats and security incidents growing by the day, every organization needs a solid incident response plan. Learn how to create one for your company. Continue Reading

By

• Paul Kirvan

Cato further expands SASE platform for ‘complete’ UK delivery

Secure access service edge platform gains digital experience monitoring capability so enterprises can monitor user experiences and fix them online or in private datacentres Continue Reading

By

• Joe O’Halloran, Computer Weekly

NCSC expands school cyber service to academies and private schools

The National Cyber Security Centre is expanding its PDNS for Schools service to encompass a wider variety of institutions up and down the UK Continue Reading

By

• Alex Scroxton, Security Editor

Reinventing security operations for the modern threat landscape

The growing pace of digital transformation has opened new avenues for attackers, making traditional security measures obsolete. Organisations must modernise their security operations to fortify their defences and navigate the evolving threat landscape Continue Reading

By

• Aaron Tan, TechTarget

Telefónica and Halotech integrate post-quantum encryption into IoT devices

Leading global telco implements state-of-the-art cyber security through internet of things managed connectivity platform allowing devices to be controlled and monitored in real time and remotely Continue Reading

By

• Joe O’Halloran, Computer Weekly

How Zoom is charting its course towards an AI-first platform

Zoom CEO Eric Yuan talks up his vision for the future of work, the company's transition to an AI-powered platform and what it is doing to stay ahead of rivals Continue Reading

By

• Aaron Tan, TechTarget

Robust cloud IAM should align to zero-trust principles

The Security Think Tank considers best practices in identity and access management and how can they be deployed to enable IT departments to combat cyber-attacks, phishing attacks and ransomware. Continue Reading

By

• Ricky Simpson, Quorum Cyber

NFL and Cisco gain yardage with network and security partnership

Cisco scores contract extension with US sports body NFL to connect and protect 2024 roster of International Games in the UK, Germany, Brazil and Spain in 2025 Continue Reading

By

• Joe O’Halloran, Computer Weekly

What is the Mitre ATT&CK framework?

The Mitre ATT&CK -- pronounced miter attack -- framework is a free, globally accessible knowledge base that describes the latest behaviors and tactics of cyberadversaries to help organizations strengthen their cybersecurity strategies. Continue Reading

By

• Paul Kirvan
• Kinza Yasar, Technical Writer
• Ben Lutkevich, Site Editor

NCSC issues fresh alert over wave of Cozy Bear activity

The NCSC, FBI and NSA publish updated warning about Cozy Bear’s activities, highlighting a range of vulnerabilities the threat actor is using to set up its cyber attacks Continue Reading

By

• Alex Scroxton, Security Editor

What is threat intelligence?

Threat intelligence, also known as cyberthreat intelligence, is information gathered from a range of sources about current or potential attacks against an organization. Continue Reading

By

• Paul Kirvan
• Michael Cobb
• Ivy Wigmore

Government launches cyber standard for local authorities

Local government bodies are being invited to take advantage of a new NCSC-derived Cyber Assessment Framework to help enhance their resilience and ward off cyber attacks Continue Reading

By

• Alex Scroxton, Security Editor

Internet Archive web historians target of hacktivist cyber attack

The Internet Archive nonprofit digital library and Wayback Machine operator has been attacked by pro-Palestinian hacktivists Continue Reading

By

• Alex Scroxton, Security Editor

How Recorded Future finds ransomware victims before they get hit

Threat intel specialists at Recorded Future have shared details of newly developed techniques they are using to disrupt Rhysida ransomware attacks before the gang even has a chance to execute them Continue Reading

By

• Alex Scroxton, Security Editor

UK and US pledge closer working on children’s online safety

In their first agreement on the subject of children’s online safety, the UK and US governments have said they will create a new working group to boost cooperation Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Australia bolsters cyber defences with security bill

Legislation tackles IoT security and establishes a Cyber Incident Review Board to bolster Australia’s cyber resilience Continue Reading

By

• Stephen Withers

The Complexities Of Reinventing The Mainframe “Easy Life”

Just got back from a Commvault event in London (where I saw more people in 10 seconds than I do in a month in Devon!) which also gave me the opp to catch-up with old PR mate Ben Ralph. In between ... Continue Reading

By

• Steve Broadhead, Broadband Testing

MoneyGram customer data breached in attack

MoneyGram confirms that customer data has been stolen in an incident that appears to have started with a social engineering attack on its IT helpdesk staff Continue Reading

By

• Alex Scroxton, Security Editor

Five zero-days to be fixed on October Patch Tuesday

Stand-out vulnerabilities in Microsoft’s latest Patch Tuesday drop include problems in Microsoft Management Console and the Windows MSHTML Platform Continue Reading

By

• Alex Scroxton, Security Editor

What is OPSEC (operations security)?

OPSEC (operations security) is an analytical process that military, law enforcement, government and private organizations use to prevent sensitive or proprietary information from being accessed inappropriately. Continue Reading

By

• Robert Sheldon
• Linda Rosencrance
• Ben Cole, Executive Editor

UK Cyber Team seeks future security professionals

Young people from across the UK have a chance to represent the country in international competitions and advance their future careers in cyber security Continue Reading

By

• Alex Scroxton, Security Editor

Secureworks: Ransomware takedowns didn’t put off cyber criminals

The number of active cyber criminal ransomware gangs has surged by almost a third in the space of 12 months, according to the latest intelligence from Secureworks Continue Reading

By

• Alex Scroxton, Security Editor

UK’s cyber incident reporting law to move forward in 2025

The UK government says that enforced cyber incident and ransomware reporting for critical sectors of the economy will help to build a better picture of the threat landscape and enable more proactive and preventative responses Continue Reading

By

• Alex Scroxton, Security Editor

IBM: Data breach cost in ASEAN hits new high

The average cost of a data breach in ASEAN grew by 7% from last year, as organisations grapple with increasingly distributed IT environments and complex security systems Continue Reading

By

• Aaron Tan, TechTarget

UK telcos including BT at risk from DrayTek router vulnerabilities

A series of vulnerabilities in DrayTek's Vigor router product lines affects multiple comms service providers in the UK, according to new analysis Continue Reading

By

• Alex Scroxton, Security Editor

NCSC celebrates eight years as Horne blows in

Outgoing NCSC interim leader Felicity Oswald shares her thoughts on the body’s work over the past eight years as she hands over the reins to incoming CEO Richard Horne Continue Reading

By

• Alex Scroxton, Security Editor

Cups Linux printing bugs open door to DDoS attacks, says Akamai

The Cups Linux printing vulnerabilities disclosed at the end of September would seem to have a nasty sting in their tail, according to researchers at Akamai Continue Reading

By

• Alex Scroxton, Security Editor

Detective wrongly claimed journalist’s solicitor attempted to buy gun, surveillance tribunal hears

Darren Ellis, who led a surveillance operation against journalists who exposed police failures, wrongly accused a solicitor of attempting to buy arms Continue Reading

By

• Bill Goodwin and Cormac Kehoe

Ex-PSNI officer seeking legal advice over comments made at Investigatory Powers Tribunal

 Ex PSNI officer ‘deeply angered’ by comments made by a former detective at a tribunal investigating allegations of unlawful surveillance against journalists Continue Reading

By

• Bill Goodwin, Computer Weekly

Microsoft files lawsuit to seize domains used by Russian spooks

Microsoft has been given permission to seize multiple domains used by the Russian state threat actor Star Blizzard as part of a coordinated disruption effort undertaken ahead of the US elections Continue Reading

By

• Alex Scroxton, Security Editor

SOC teams falling out of love with threat detection tools

Security operations centre practitioners are fed up of being flooded with pointless alerts and many no longer have much confidence in their threat detection tools, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Rise of the cyber clones: When seeing isn’t believing

It is frighteningly easy to clone someone else's identity using readily-available artificial intelligence tools Continue Reading

By

• Jake Moore, ESET

Nutanix courts VMware customers in APAC amid Broadcom concerns

Nutanix is driving double-digit growth across the region by capitalising on the evolving cloud landscape with its hybrid cloud and artificial intelligence offerings, as well as anxieties about the future direction of VMware under Broadcom’s ownership Continue Reading

By

• Aaron Tan, TechTarget

UK and Singapore to collaborate on supporting ransomware victims

At the fourth Counter Ransomware Initiative Summit in the US, both the UK and Singapore have committed to working on new guidance designed to better support victims and undermine cyber criminal business models Continue Reading

By

• Alex Scroxton, Security Editor

Detective behind ‘unlawful’ surveillance blamed Catholics for ‘perverse’ court decisions

A former detective claimed Irish judges were ‘sectarians in robes’ after a court found police had unlawfully arrested journalists who produced a film exposing collusion with paramilitary murderers Continue Reading

By

• Bill Goodwin, Computer Weekly

Cyber UK’s quickest growing tech field, but skills gap remains

More people than ever are joining the cyber security profession in the UK, according to a report, but there is still a serious shortage even with a doubling in numbers Continue Reading

By

• Alex Scroxton, Security Editor

Amazon Mechanical Turk workers suspended without explanation

A likely glitch in Amazon Payments resulted in hundreds of Mechanical Turk workers being suspended from the platform without proper explanation or pay Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Detective reported journalist’s lawyers to regulator in ‘unlawful’ PSNI surveillance case

Former Durham detective Darren Ellis told the Investigatory Powers Tribunal that he had concerns about lawyers acting for journalists placed under surveillance by Northern Irish police Continue Reading

By

• Bill Goodwin & Cormac Kehoe

Unmasked: The Evil Corp cyber gangster who worked for LockBit

The NCA has named and shamed a prominent member of the Evil Corp cyber crime collective who also worked as an affiliate of the LockBit ransomware gang as the UK unveils new sanctions against 16 Russian cyber criminals Continue Reading

By

• Alex Scroxton, Security Editor

Businesses are getting some value from AI, but struggling to scale

Survey from KPMG reveals IT leaders struggling to keep up with the pace of technology innovation Continue Reading

By

• Cliff Saran, Managing Editor

Post Office ditches MoneyGram after cyber attack

The Post Office offered a short extension to enable it to asses the impact of the MoneyGram cyber incident, but the contract has now expired and MoneyGram services are no longer available in Post Office branches Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Cyber teams say they can’t keep up with attack volumes

Over 60% of European security pros say their teams are understaffed, and over 50% don’t have enough budget, according to data from ISACA Continue Reading

By

• Alex Scroxton, Security Editor

The cyber industry needs to accept it can't eliminate risk

The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading

By

• Paul Lewis, Nominet

What is WPA3 (Wi-Fi Protected Access 3)?

WPA3, also known as Wi-Fi Protected Access 3, is the third iteration of a security certification standard developed by the Wi-Fi Alliance. WPA3 is the latest updated implementation of WPA2, which has been in use since 2004. Continue Reading

By

• Gavin Wright
• Alexander S. Gillis, Technical Writer and Editor

What is access control?

Access control is a security technique that regulates who or what can view or use resources in a computing environment. Continue Reading

By

• Gavin Wright
• Ben Lutkevich, Site Editor

UK on high alert over Iranian spear phishing attacks, says NCSC

The NCSC and counterpart agencies in the US have issued a warning over enhanced Iranian spear phishing activity targeting politicians, journalists, activists and others with an interest in Middle Eastern affairs Continue Reading

By

• Alex Scroxton, Security Editor

Printing vulnerability affecting Linux distros raises alarm

Security pros need to get in front of a series of vulnerabilities affecting the Cups Linux printing service after an apparently botched disclosure process saw technical details published in advance of a patch Continue Reading

By

• Alex Scroxton, Security Editor

Defaulting to open: Decoding the (very public) CrowdStrike event

The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading

By

• Elliott Wilkes, ACDS

Cyber companies need a best practice approach to major incidents.

The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading

By

• Andy Bridden and Ashley Barker, PA Consulting

What is a cloud access security broker (CASB)?

A cloud access security broker (CASB) is a software tool or service that sits between an organization's on-premises infrastructure and a cloud provider's infrastructure. Continue Reading

By

• Alexander S. Gillis, Technical Writer and Editor
• Dan Sullivan

How UEM Sunrise is driving transformation with Salesforce and AI

Malaysian property developer UEM Sunrise is leveraging Salesforce and AI to boost sales and enhance customer experience while prioritising data sovereignty and a diversified cloud strategy Continue Reading

By

• Aaron Tan, TechTarget

Closing the curtain on cyber security theatre

Leaders must redefine expectations, rethink responsibility and eliminate unproductive practices to move towards real security, says Gartner vice-president analyst Richard Addiscott Continue Reading

By

• Richard Addiscott

Racist Network Rail Wi-Fi hack was work of malicious insider

Police have revealed that this week’s racist cyber attack on public Wi-Fi networks at stations across the UK appears to have been the work of a malicious insider, after arresting an employee of one of the service providers Continue Reading

By

• Alex Scroxton, Security Editor

Islamophobic cyber attack downs Wi-Fi at UK transport hubs

An apparent hacktivist attack disrupted public-facing Wi-Fi networks at UK rail stations to display Islamophobic content Continue Reading

By

• Alex Scroxton, Security Editor