IT security

Privacy advocates call for European probe into Palantir

Dutch group SOMI is trying to raise awareness of Palantir’s data privacy practices and how it works with European government agencies Continue Reading

By

• Alex Scroxton, Security Editor

Resident Evil studio Capcom confirms scale of Ragnar Locker breach

Videogame studio says the data of up to 350,000 people was likely to have been compromised in a Ragnar Locker ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Human error blamed in Welsh Covid-19 patient data leak

Public Health Wales accepts recommendations of independent probe into data breach that saw PII on 18,105 coronavirus patients leaked Continue Reading

By

• Alex Scroxton, Security Editor

Hackney systems could be unavailable for months, says council

A month after a highly disruptive cyber attack on its systems, Hackney Council is still struggling to get back up and running Continue Reading

By

• Alex Scroxton, Security Editor

Ticketmaster fined £1.25m by ICO for failing to protect customer data

Ticket website’s customer data was exposed through an attack on a third-party chatbot Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Humanitarian data collection practices put migrants at risk

United Nations report on smart borders warns that data collection about migrants and refugees by humanitarian organisations risks excluding them from essential basic services like access to food Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

DDoS mitigation strategies needed to maintain availability during pandemic

The growing prevalence of DDoS attacks combined with the increased reliance on internet connectivity during the pandemic means enterprises can no longer afford to ignore the threat of DDoS attacks. Computer Weekly explores organisations’ perceptions of the risks and best practice for mitigation Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Online kids’ game Animal Jam confirms large breach

Cyber criminals have stolen data on 46 million Animal Jam player accounts via a third-party attack Continue Reading

By

• Alex Scroxton, Security Editor

IT Priorities 2020: Budgets rejigged to support 2021 recovery

IT has been essential in helping organisations remain operational. IT chiefs are now considering the IT to drive a sustained business recovery Continue Reading

By

• Cliff Saran, Managing Editor

DCMS opens talks with private sector on future of digital identity market

Department has met with suppliers to discuss plans for a trust framework to show ‘what good looks like’ as it ploughs ahead with digital identity plans Continue Reading

By

• Lis Evenstad

Company accused of spying on Assange acted for Ecuadorian Intelligence, says ex UC Global manager

Former operations chief of UC Global told Spanish Court the company accused of spying on Assange at the Ecuadorian Embassy in London was acting on the orders of Ecuadorian Intelligence Continue Reading

By

• Bill Goodwin, Investigations Editor
• Ter García

CW Benelux: Dutch Alzheimer’s app helps dementia patients

An app aimed at helping dementia patients and their families has been developed by the Alzheimer Society in the Netherlands. Also in this issue, read about a Belgian startup's app based on blockchain technology to help container handling at ports, and why Rabobank ditched its legacy backup. Continue Reading

What businesses can learn from GovTech’s digital strategy

Modernising its infrastructure and putting digital at its core has given Singapore’s Government Technology Agency the agility it needs to respond to the Covid-19 pandemic Continue Reading

By

• Aaron Tan, Informa TechTarget

How do VPN vs. cloud services compare for remote work?

As remote work becomes increasingly normal, IT teams must decide which remote access technologies will benefit employees more. VPN and cloud services are two top choices. Continue Reading

By

• Andrew Froehlich, West Gate Networks

Tim Berners-Lee startup releases decentralisation tech to enterprises

Roll-out of Inrupt’s decentralised privacy technology to four large organisations is helping the startup to develop explicit use cases, which it hopes will prove the tech and lead to faster adoption Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security pros coped admirably with remote working transition

Despite facing tight timescales at the onset of the pandemic, security professionals have come through the transition to remote working remarkably well, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Gartner: IT spending to focus on fast time to value

There are no surprises in Gartner’s latest forecast. IT budgets are being spent on supporting remote workers, but CIOs have new metrics Continue Reading

By

• Cliff Saran, Managing Editor

Amazon charged with breaching EU antitrust rules

Tech giant accused of using data it collects on smaller retailers to benefit its own e-commerce business Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Microsoft drops fix for serious zero-day among 112 Patch Tuesday updates

November’s Patch Tuesday contains fixes for 112 bugs, including a potentially serious zero-day exploit that malicious actors are already taking advantage of Continue Reading

By

• Alex Scroxton, Security Editor

EU aid funds used to train ‘unaccountable intelligence agencies’ in high-tech surveillance

Hundreds of documents obtained by campaign group Privacy International show how the EU is supporting surveillance programmes in the Balkans, the Middle East and Africa Continue Reading

By

• Bill Goodwin, Investigations Editor

Intel and AMD processors affected by another side-channel exploit

Two years after Spectre and Meltdown, the x86 processor faces another side-channel exploit – only this time, it is based on sensing temperature Continue Reading

By

• Cliff Saran, Managing Editor

Leaky AWS S3 bucket once again at centre of data breach

Prestige Software exposed millions of records after failing to pay attention to the security of its cloud instances Continue Reading

By

• Alex Scroxton, Security Editor

Zoom rapped over historic security practices

The US Federal Trade Commission rules that Zoom’s practices undermined the security of its users Continue Reading

By

• Alex Scroxton, Security Editor

Better data sharing needed to help children during pandemic

Closing gaps in data infrastructure will help the education sector respond better to children’s needs during the Covid-19 pandemic, says Open Data Institute Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

IT Priorities 2020: After Covid-19, security goes back to basics

This year’s transition to remote working highlighted big gaps in the fundamentals of security, as updated TechTarget/Computer Weekly data reveals Continue Reading

By

• Alex Scroxton, Security Editor

Using digital twins to cut costs and improve safety at Shell

In this week’s Computer Weekly, we look at Shell’s digital twin strategy, which combines AI, internet of things and big data to improve safety and cut costs. Our latest buyer’s guide examines the best practices and technologies in business process automation. And we find out why securing DNS is critical to fighting cyber crime. Read the issue now. Continue Reading

Why securing the DNS layer is crucial to fight cyber crime

Domain name system security is often overlooked by organisations, but focusing on this layer could actually improve the effectiveness of cyber security strategies. We explore the latest DNS trends and best practice Continue Reading

EU moves closer to encryption ban after Austria, France attacks

Draft resolution document setting up an EU-wide ban on end-to-end encryption is set to be waved through this week Continue Reading

By

• Alex Scroxton, Security Editor

Credential stuffing: When DDoS isn’t DDoS

Ten years ago, credential stuffing attacks posed a comparatively minor threat, but with an escalating number of data breaches, the threat posed has now increased. What are the solutions to this very human problem? Continue Reading

By

• Peter Ray Allison

NHS warned over Ryuk spreading through Trickbot replacements

NHS Digital tells healthcare organisations to be mindful of a marked rise in usage of the Bazar and Buer loaders Continue Reading

By

• Alex Scroxton, Security Editor

ICO sued over ‘failure’ to address ad industry practices

Privacy campaigner the Open Rights Group claims the advertising technology industry is systematically breaching the GDPR, and the ICO is doing nothing about it Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft to support next generation of security startups

Tech giant lends its support to the NCSC Cyber Accelerator scheme, which is seeking its seventh cohort of startups Continue Reading

By

• Alex Scroxton, Security Editor

Consumer rights organisation warns of computer takeover scams

Consumers warned to be on guard against criminals pretending to be IT support staff to gain access to personal banking information Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Singapore government rolls out digital signature service

Individuals and businesses will soon be able to sign documents digitally using a new service on the Singapore government’s SingPass digital identity platform Continue Reading

By

• Aaron Tan, Informa TechTarget

EU to introduce data-sharing measures with US in weeks

The European Commission is to issue updated standard contractual clauses (SCCs) that will allow organisations in the EU to exchange data with the US, but they may arrive too late to incorporate into UK law Continue Reading

By

• Bill Goodwin, Investigations Editor

India and Japan report stronger concern over cyber threats

Security operations teams in the two Asian giants see the increased volume of cyber threats as their biggest challenge amid the Covid-19 pandemic Continue Reading

By

• Aaron Tan, Informa TechTarget

GDPR lawsuit against Oracle and Salesforce moves forward

Class action suit seeks claims worth more than £10bn over the processing of personal information Continue Reading

By

• Alex Scroxton, Security Editor

The UK government’s ‘flawed and misleading’ Covid-19 data

In this week’s Computer Weekly, the coronavirus data relied upon by the UK government is ‘flawed and misleading’ say experts – we examine the implications. Ikea talks about how it turned to the cloud to deal with the impact of the pandemic. And we look at the digital transformation underway at credit card giant Capital One. Read the issue now. Continue Reading

NHS weathers cyber crime storm during pandemic, says NCSC

The NCSC dealt with over 700 incidents in the 12 months to August 2020, with over 200 specifically related to Covid-19, and the NHS a critical area of focus Continue Reading

By

• Alex Scroxton, Security Editor

Maze ransomware shuts down with bizarre announcement

The operators of Maze announce they are shutting down, and claim their crime spree was merely intended to demonstrate lax security at their targets Continue Reading

By

• Alex Scroxton, Security Editor

Tackling multicloud deployments with intelligent cloud management

Organisations are moving to hybrid and multicloud deployments, which complicates software assets tracking and workload management Continue Reading

By

• Cliff Saran, Managing Editor

Accidental heroes: How one scaleup pivoted to cyber

Simeon Quarrie designed his business using virtual reality and interactivity as a tool to tell stories that effect cultural change in enterprise environments – then a cyber criminal emptied his bank account Continue Reading

By

• Alex Scroxton, Security Editor

CISOs more confident in identity practice after pandemic shock

Identity practice and management has become a critical element of cyber security strategies to support remote workers Continue Reading

By

• Alex Scroxton, Security Editor

ICO slashes Marriott breach fine to £18.4m

Reduced fine reflects both improvements made to hotel group’s cyber security and impact of coronavirus on the travel and hospitality sector Continue Reading

By

• Alex Scroxton, Security Editor

Surge in Ryuk ransomware attacks has hospitals on alert

Russian cyber criminals are conducting a targeted campaign against hospitals with Ryuk ransomware Continue Reading

By

• Alex Scroxton, Security Editor

Zero-trust investment seen accelerating through pandemic

New analyst report details some of the main indicators for success in zero-trust implementation Continue Reading

By

• Alex Scroxton, Security Editor

Trump supporters targeted by cryptocurrency scammers

The successful breach of Donald Trump’s official website shows up lax security on his campaign team and is yet another timely warning that nobody is immune to cyber crime Continue Reading

By

• Alex Scroxton, Security Editor

British businesses need to be prepared for post-Brexit changes to our data protection laws

This is a guest blogpost by Ben Tomlinson, Personally Identifiable Information Security Officer and Marketing Manager at Atlas Cloud. Data is arguably now the most valuable resource on earth; the ... Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Finnish therapy centre accused of covering up cyber attack

Private therapy practice Vastaamo faces questions over its security and business practices in the months leading up to one of the biggest data breaches in Finland’s history Continue Reading

By

• Alex Scroxton, Security Editor

Privacy and online safety are focus of new UKRI research funding

Online safety research centre of excellence will look into technology to boost privacy and tackle disinformation, fake news, conspiracies and other online harms Continue Reading

By

• Alex Scroxton, Security Editor

Barracuda eyes Indochina markets

Barracuda is looking to expand its local presence and headcount in fast-growing emerging markets of Vietnam, Cambodia and Laos Continue Reading

By

• Aaron Tan, Informa TechTarget

Commvault launches Metallic backup service in Europe

Backup giant adds backup as a service, with cloud-to-cloud backup and e-discovery functionality that can work across on-site datacentres and the AWS and Azure clouds Continue Reading

By

• Antony Adshead, Storage Editor

Zero-trust network policies should reflect varied threats

Role-based access systems create enormous pools of responsibility for administrators. Explore how to eliminate these insecure pools of trust with zero-trust network policies. Continue Reading

By

• Katie Donegan, Social Media Manager
• O'Reilly Media

Zero-trust methodology's popularity a double-edged sword

The authors of 'Zero Trust Networks' discuss how the zero-trust methodology's popularity produces both vendor hype and renewed attention to critical areas of security weakness. Continue Reading

By

• Katie Donegan, Social Media Manager

ICO slams Experian over ‘invisible’ data processing

Data processing practices used by Experian broke data protection law, says Information Commissioner’s Office Continue Reading

By

• Alex Scroxton, Security Editor

Risk and reward: How to succeed in digital transformation

Most organisations are seeking to step up their digital transformation efforts, but history has shown that such efforts can be doomed to failure if they take the wrong approach Continue Reading

By

• Warwick Ashford, Senior analyst

Calls for clarity over Amazon insider breach

Security experts call for more clarity from Amazon over an apparent leak of customer data Continue Reading

By

• Alex Scroxton, Security Editor

Sopra Steria hit by new version of Ryuk ransomware

IT services company Sopra Steria says it has contained the ransomware virus, but systems will take a few weeks to be fully operational Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Pet project: How Pets at Home cares for customers with data analytics

In this week’s Computer Weekly, we talk to the chief data officer of Pets at Home, about using data analytics to care for customers. British Airways had its GDPR fine reduced to just £20m – we ask what this means for data protection regulation. And we look at GPT3, the language prediction tool that could revolutionise AI. Read the issue now. Continue Reading

BA breach penalty sets new GDPR precedents

 Continue Reading

APAC CISOs warm up to zero trust

Security leaders in Asia-Pacific are adopting zero-trust security, but challenges stand in their way of reaping the full potential of the security model Continue Reading

By

• Aaron Tan, Informa TechTarget

Highly unusual hacking attack directly threatens therapy patients

A hacker has directly contacted therapy patients to say their highly personal therapy notes will be put on the internet unless they pay the ransom Continue Reading

By

• Cliff Saran, Managing Editor

Forrester: CIOs must prepare for Brexit data transfer

With the end of the Brexit transition period just weeks away, multi-national organisations will need to re-evaluate how intercompany data is transmitted Continue Reading

By

• Cliff Saran, Managing Editor

Policy Exchange calls on government to publish digital ID strategy

The lack of reliable digital ID services in the UK is limiting the country’s digital infrastructure potential, according to a report on digital identity, which also recommends the government to clarify the future of Gov.uk Verify Continue Reading

By

• Lis Evenstad

Cooperation between Norway’s security agencies planned following cyber attack on parliament

Government seeks to develop enhanced national IT infrastructure with an embedded early warning system and defence shield to protect the IT systems of public and private organisations Continue Reading

By

• Gerard O'Dwyer

Cyber attack on Hackney Council is ‘morally repugnant’, says mayor

Mayor of Hackney is ‘incredibly angry’ at the cyber criminals behind the attack, which will continue to disrupt key council services for some time Continue Reading

By

• Lis Evenstad

Securing Australia’s distributed workforce

This is a guest post by Tom Kellermann, head of cyber security strategy at VMware Carbon Black 2020 has been a year like no other. The global pandemic has quickly changed work and business as we ... Continue Reading

By

• Aaron Tan, Informa TechTarget

SonicWall patches 11 firewall vulnerabilities

SonicWall users are advised to download updates that fix 11 CVEs in the SonicOS operating system, uncovered by Positive Technologies Continue Reading

By

• Alex Scroxton, Security Editor

Protecting remote workers an opportunity to do security better

Securing the fully remote workforce has been a challenge for IT teams, but it presents an opportunity to commit to a higher standard of cyber security, according to a Cisco report Continue Reading

By

• Alex Scroxton, Security Editor

Data reveals lack of ethics in decision making systems

A recent survey from price comparison site, comparethemarket.com, has highlighted the subtext, which obscures a host of unfair assumptions made in the depths of computer systems. These assumptions ... Continue Reading

By

• Cliff Saran, Managing Editor

NSA’s top CVE list a timely reminder to patch

Many of the CVEs detailed on the NSA’s top 25 chart are golden oldies Continue Reading

By

• Alex Scroxton, Security Editor

Charities warned over ‘Robin Hood’ cyber criminals

Accepting donations from cyber criminal groups could be deemed as profiting from crime, money laundering or handling stolen goods – so don’t do it Continue Reading

By

• Alex Scroxton, Security Editor

Trump and Biden campaign apps easy targets for cyber criminals

You don’t need a stellar IQ to exploit the dangerous StrandHogg Android vulnerability, and users of both Donald Trump’s and Joe Biden’s mobile apps are at risk of falling victim to it Continue Reading

By

• Alex Scroxton, Security Editor

Financial services staff want work-from-home policies to continue after Covid

About half of workers in the finance sector want their employers to retain remote working policies brought in during the pandemic Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Customer loyalty accounts in danger from cyber criminals

Billions of credential stuffing attacks are harvesting valuable customer data for the dark web economy Continue Reading

By

• Alex Scroxton, Security Editor

Why securing the DNS layer is crucial to fight cyber crime

Domain name system security is often overlooked by organisations, but focusing on this layer could actually improve the effectiveness of cyber security strategies. We explore the latest DNS trends and best practice Continue Reading

By

• Nicholas Fearn

Retailers get access to new security toolkit

The British Retail Consortium has worked with the NCSC to develop a new cyber security toolkit pitched at retailers Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Essential tools to mitigate double extortion attacks

The threat of identity theft via a data breach is heightened with the rise of attacks where ransomware threat actors both encrypt and ransom, and exfiltrate and leak their victims’ data. How does this evolution in cyber crime heighten risk for the enterprise, and what steps can we take to safeguard the personal data we hold? Continue Reading

By

• Jim Metcalfe

Hackney Council services to be disrupted ‘for some time’

Inability to make housing benefit payments is likely to sting some tenants as Hackney cyber attack drags on Continue Reading

By

• Alex Scroxton, Security Editor

Resilient Trickbot down but not yet knocked out

Global, Microsoft-led effort to disrupt the Trickbot botnet has seen some success, but new command and control servers continue to pop up Continue Reading

By

• Alex Scroxton, Security Editor

Police given access to self-isolation data

NHS Test and Trace self-isolation data will be made available to police after new guidance changes data-sharing rules Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

BA breach penalty sets new GDPR precedents

The 90% reduction in the fine levied on BA over a 2018 data breach has legal experts talking about the ramifications for the future of data protection Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Cybersecurity Awareness Month, Covid-19 and storage

We look at how organisations can use Cybersecurity Awareness Month as an opportunity to revisit their handling of data and compliance, especially with changes brought by Covid-19 and home working Continue Reading

By

• Antony Adshead, Storage Editor

Six Russians charged over NotPetya and other attacks

Six members of the APT group known as Sandworm have been charged in the US over a series of attacks including the destructive NotPetya incident Continue Reading

By

• Alex Scroxton, Security Editor

Why is IBM splitting in two and what does it mean for CIOs?

In this week’s Computer Weekly, IBM is splitting in two, hiving off its services business to focus on hybrid cloud – we examine what it means for CIOs. Our new buyer’s guide looks at how intelligent workload management can cut cloud complexity. And we analyse how getting backup right can help tackle ransomware threats. Read the issue now. Continue Reading

Security Think Tank: Safeguarding PII in the current threat landscape

The threat of identity theft via a data breach is heightened with the rise of attacks where ransomware threat actors both encrypt and ransom, and exfiltrate and leak their victims’ data. How does this evolution in cybercrime heighten risk for the enterprise, and what steps can we take to safeguard the personal data we hold? Continue Reading

By

• Sarah Nadwick, Turnkey Consulting

BA argues ICO data breach fine down to £20m

Information Commissioner’s Office levies fine of £20m on British Airways for failing to protect the personal data of hundreds of thousands of passengers – a vast reduction on the initial £183m penalty Continue Reading

By

• Alex Scroxton, Security Editor

Spanish court to question witnesses over ‘illegal surveillance’ of WikiLeaks founder Julian Assange

The Spanish National Court in Madrid is to hear evidence from information security expert Andy Müller-Maguhn and two lawyers who were subject to ‘illegal surveillance’  of their meetings with Julian Assange at the Ecuadorian Embassy in London Continue Reading

By

• Bill Goodwin, Investigations Editor
• Ter García

Arrests and indictments made in cyber money laundering ring

The NCA has revealed six men were arrested in the UK as part of an international investigation into a money laundering network which handled transactions for some of the world’s most prolific cyber criminal groups Continue Reading

By

• Alex Scroxton, Security Editor

Cloud data protection keeps the Crick’s medical research Covid-secure

Cloud data management services from Rubrik gave the Francis Crick Institute a data protection edge and have helped keep its vital work going through the pandemic Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Essential tools to mitigate data loss and identity theft

The threat of identity theft via a data breach is heightened with the rise of attacks where ransomware threat actors both encrypt and ransom, and exfiltrate and leak their victims’ data. How does this evolution in cybercrime heighten risk for the enterprise, and what steps can we take to safeguard the personal data we hold? Continue Reading

By

• Jim Metcalfe

Hackney services still offline in ongoing cyber attack

Services remain disrupted two days after council was hit by a serious incident, as residents are warned to be on their guard Continue Reading

By

• Alex Scroxton, Security Editor

CW APAC: Trend Watch – storage

Many organisations turn to cloud to cut storage bills, but the options available and potential costs are many and varied. In this handbook, Computer Weekly takes a peek at future storage technologies, such as helium and DNA, and offers some valuable tips on how to keep cloud storage costs under control. Continue Reading

Public sector security failings leave UK at risk, says think tank

Reform report urges adoption of new policies in the next version of the UK’s National Cyber Security Strategy Continue Reading

By

• Alex Scroxton, Security Editor

US Elections: Malicious internet domains spike as campaigns heat up

Internet domains related to the US presidential election are 56% more likely to be malicious than regular ones Continue Reading

By

• Alex Scroxton, Security Editor

Public data should not be held by US tech giants

One-off evidence sessions to follow up on the recommendations of the House of Lords AI Committee revisit the data and ethics debate Continue Reading

By

• Cliff Saran, Managing Editor

Fintech ‘unicorn’ Klarna probed over data misuse

Online bank blames misuse of user data on human error as Information Commissioner’s Office weighs in Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft fixes 87 bugs in October 2020 Patch Tuesday

Smaller October Patch Tuesday update includes fixes for critical bugs in Windows 10 and Windows Server 2019 Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Adapting defences to evolving ransomware and cyber crime

The threat of identity theft via a data breach is heightened with the rise of attacks where ransomware threat actors both encrypt and ransom, and exfiltrate and leak their victims’ data. How does this evolution in cyber crime heighten risk for the enterprise, and what steps can we take to safeguard the personal data we hold? Continue Reading

By

• Paddy Francis

Suppliers neglecting virtual appliance security, putting users at risk

Software suppliers are often distributing their products on virtual appliances that contain known vulnerabilities or are running outdated or unsupported operating systems, according to a report Continue Reading

By

• Alex Scroxton, Security Editor