IT security

Emerging markets’ mobile financial services transactions set to surpass $1tn in by 2024

Mobile financial services transaction value will grow by 70% from 2019 to 2014 to total more than $1tn, driven by markets such as Latin America and Cico transactions Continue Reading

By

• Joe O’Halloran, Computer Weekly

Pitney Bowes ‘considering options’ after malware attack

Mailing and shipping services firm in recovery mode after key systems were encrypted by a malware attack Continue Reading

By

• Alex Scroxton, Security Editor

Sweden’s first GDPR fine sets regulatory tone

Secondary school fined for breaching General Data Protection Regulation, signalling the attitude of Sweden’s Data Protection Authority Continue Reading

By

• Jane Hamrin

Security Think Tank: Embed security professionals in your risk strategy

How can security professionals help their organisations move from traditional governance, risk and compliance to integrated risk management that integrates risk activities from across an organisation to enable better strategic decision-making? Continue Reading

By

• Deshini Newman, (ISC)²

Attackers hunt iPhone jailbreakers in click fraud campaign

Research by Cisco’s Talos threat intel unit has identified a new click fraud campaign targeting people looking to jailbreak their iPhone devices Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: The Computer Weekly Downtime Upload – episode 34

In this week’s episode of the Computer Weekly Downtime Upload podcast, the team discusses BBC conspiracy thriller, The Capture, and its focus on video surveillance and facial recognition technology Continue Reading

By

• Clare McDonald, Business Editor
• Caroline Donnelly, Senior Editor, UK
• Brian McKenna, Senior Analyst, Business Applications

Security Think Tank: Risk management must go beyond spreadsheets

How can security professionals help their organisations move from traditional governance, risk and compliance to integrated risk management that integrates risk activities from across an organisation to enable better strategic decision making? Continue Reading

By

• Richard Hunt, Turnkey Consulting

Securing the internet of things

In this week’s Computer Weekly, as security concerns prevent many organisations from adopting the internet of things, we examine mitigation strategies. Many firms are still struggling with GDPR policies – we assess if full compliance is ever possible. And we look at the technologies for delivering on-premise object storage. Read the issue now. Continue Reading

Private equity swoops on Sophos

British cyber security star picked up by technology sector investors for $3.9bn Continue Reading

By

• Alex Scroxton, Security Editor

Researchers reveal the cyber campaign that built China's new airliner

CrowdStrike has published details of a coordinated campaign of cyber espionage and hacking, forced technology transfer and physical theft as China seeks to gain an advantage in the commercial aviation industry Continue Reading

By

• Alex Scroxton, Security Editor

PCI DSS: Credit card data and what to expect from version 4.0

We preview October’s PCI Europe Community Meeting where attendees will discuss credit card payment data, with topics covered likely to include the cloud and point-to-point encryption Continue Reading

By

• Antony Adshead, Storage Editor

GDPR compliance: Whose job is it and is it really possible?

Nobody seems to have a good handle on business GDPR compliance, how many businesses are compliant, or indeed what compliance really is, but according to security experts, it very much depends on who you talk to. Continue Reading

How to mitigate IoT security risks to tap business benefits

Security concerns are preventing many businesses from adopting IoT-based technologies, but with a bit of planning, the business benefits can be realised by mitigating the risk. Continue Reading

The Security Interviews: Applying AI to Lego, and security

Ann Johnson, Microsoft corporate vice-president of cyber security, is on a mission to prove that artificial intelligence holds great promise for the security sector, and she has the analogies to back it up Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Consider risk holistically, not just from an IT angle

How can security professionals help their organisations move from traditional governance, risk and compliance to integrated risk management that integrates risk activities from across an organisation to enable better strategic decision making? Continue Reading

By

• Paddy Francis

Zuckerberg’s mentor condemns Facebook’s business practices

Long-time Silicon Valley investor speaks out against surveillance capitalism and the lack of rules and regulations governing big tech’s behaviour Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

McAfee’s push for secure cloud adoption

Organisations must do more to secure their cloud environments as malicious actors increasingly focus their attention on exploiting cloud vulnerabilities, says McAfee Continue Reading

By

• Sebastian Klovig Skelton , Senior reporter

CW Middle East: Saudi banks trial biometrics in ATMs

Biometric and blockchain technologies are being used in tandem to provide ID verification at Saudi Arabian cash machines. Also read about the first government organisation in Bahrain to migrate to Amazon Web Services, and an interview with Yasmeen Al Sharaf, head of fintech and innovation unit, Central Bank of Bahrain. Continue Reading

Data management strategies are evolving – so must enterprises

A growing number of data-driven initiatives, alongside heightened demand for security in governance, data management and compliance, has led to the rise of a more holistic approach – integrated risk management Continue Reading

By

• Peter Ray Allison

Small business guide: How to keep your organisation secure from fraudsters and hackers

Doing a few things well can keep your organisation protected from common cyber attacks and fraudsters Continue Reading

By

• Jan Youngren

Podcast: The Computer Weekly Downtime Upload – Episode 33

In this week’s episode of the Computer Weekly Downtime Upload podcast, Brian McKenna and Clare McDonald are joined by Alex Scroxton to talk about cyber warfare and digital healthcare Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications
• Alex Scroxton, Security Editor
• Clare McDonald, Business Editor

US likely to concede on Huawei export ban

The US government may make some concessions over the future of Huawei before the end of the year Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: The operational approach to integrated risk management

How can security professionals help their organisations move from traditional governance, risk and compliance to integrated risk management that integrates risk activities from across an organisation to enable better strategic decision-making? Continue Reading

By

• Simon Persin, Turnkey Consulting

CIO interview: Matt Harris, head of IT, Mercedes-AMG Petronas Motorsport

The IT chief at the world-leading Formula 1 team is focused on using technology to support and deliver marginal gains in performance for the team’s drivers Continue Reading

By

• Mark Samuels

How APAC enterprises can keep pace with container security

For all the promises of containers, changes in architecture and practices associated with the technology bring new challenges and opportunities Continue Reading

By

• Aaron Tan, TechTarget

IBM, McAfee among founders of open source security alliance

A group of cyber security suppliers have come together to form the Open Cybersecurity Alliance Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Get basic security policy right, and the rest will follow

Paying attention to basic aspects of cyber security such as policy and permission will give you a sold base to build from Continue Reading

By

• Petra Wenham

How to bolster IAM strategies using automation

Identity and access management processes and technologies play an important role in security strategies, but organisations and IT professionals need to ensure these strategies are robust enough to deal with new threats. Continue Reading

Showcasing the potential of 5G

In this week’s Computer Weekly, we visit an ambitious trial in Bristol that is showcasing the possibilities offered by 5G roll-out. We look at how emerging automation technologies are enhancing the use of identity and access management tools. And we assess the Government Digital Service plan for transforming public services. Read the issue now. Continue Reading

Security Think Tank: Risk is unavoidable in digital transformation

How can security professionals help their organisations move from traditional governance, risk and compliance to integrated risk management that integrates risk activities from across an organisation to enable better strategic decision-making? Continue Reading

By

• Maxine Holt, Omdia

Government departments sign up to web data-sharing plan

All but four Whitehall departments have so far agreed to share web analytics data to allow the government to monitor user behaviour across the Gov.uk domain Continue Reading

By

• Bryan Glick, Editor in chief

UK and US call on Facebook to walk back encryption plans

The US, Australian and UK governments have asked Facebook to ditch plans to deploy end-to-end encryption across Facebook Messenger, Instagram and WhatsApp Continue Reading

By

• Alex Scroxton, Security Editor

Five ways a managed print service can support cyber resilience

As IoT devices, smart MFPs are susceptible to the growing threat of attempts to implant malware, recruit to botnets (to help perpetrate DDoS attacks), as well as potentially providing an open ... Continue Reading

By

• Louella Fernandes, Quocirca

IT contractor charged over cyber attack on property valuation firm

Australian police charge 49-year-old man with stealing and posting more than 170,000 data records belonging to ASX-listed Landmark White on the dark web Continue Reading

By

• Beverley Head

Why data-driven applications need a governance framework

Data is the new oil – but without tight control, how can business determine that the data is valid? Data catalogues are back in vogue Continue Reading

By

• Cliff Saran, Managing Editor

LogRhythm touts unlimited data plan for SIEM systems

SIEM supplier introduces three-year, term-based pricing plan that lets enterprises ingest as much data as they want without breaking the bank Continue Reading

By

• Aaron Tan, TechTarget

Local authorities hit by 800 cyber attacks every hour

Local authorities and councils in the UK have reported being hit by more than 263 million cyber attacks in the first six months of this year Continue Reading

By

• Alex Scroxton, Security Editor

New threat group behind Airbus cyber attacks, claim researchers

Context Information Security’s threat intel and response teams says it has evidence that the recent supply chain attacks on Airbus are the work of a newly identified group called Avivore Continue Reading

By

• Alex Scroxton, Security Editor

Cyber war as big a threat as nuclear war, says ex-RSA head Coviello

Former RSA chairman Art Coviello has been speaking about the devastating potential of cyber weapons, and warned that humanity must learn from history in order to control them Continue Reading

By

• Alex Scroxton, Security Editor

A security breach is inevitable, IT leaders warned

No matter how much IT security tech and training is in place, sophisticated, targeted attacks are going to breach company defences, Carbon Black warns Continue Reading

By

• Cliff Saran, Managing Editor

The most influential women in UK technology 2019

In this week’s Computer Weekly, we announce our annual list of the 50 most influential women in UK technology. Meet the winner, Debbie Forster, CEO of Tech Talent Charter, and find out who are this year’s five rising stars. Also, our latest buyer’s guide looks at the latest developments in robotic process automation. Read the issue now. Continue Reading

Singapore outlines initiatives to tackle OT and IoT security

The Cyber Security Agency of Singapore has developed a blueprint to secure operational technology systems in critical sectors, among other measures to secure cyber-physical systems and the internet of things Continue Reading

By

• Aaron Tan, TechTarget

CIO interview: Michael Ibbitson, executive VP for technology and infrastructure, Dubai Airports

Former CIO at Gatwick Airport took flight to the Middle East three years ago, and is using data to transform the technology and infrastructure at Dubai Airports Continue Reading

By

• Mark Samuels

ABN Amro investigation lends weight to anti-money laundering collaboration by Dutch banks

Dutch authorities are investigating ABN Amro for possible failures to monitor and report potential money laundering activity Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Nodersok malware campaign is infecting thousands, Microsoft warns

Thousands of Windows endpoints in the US and Europe have been infected by a new fileless malware campaign in the past few weeks Continue Reading

By

• Alex Scroxton, Security Editor

Five million DoorDash customers’ details lost in data breach

Takeaway delivery service was breached in May 2019, resulting in the data of millions of users and delivery drivers being stolen Continue Reading

By

• Alex Scroxton, Security Editor

GDPR compliance: Whose job is it and is it really possible?

Nobody seems to have a good handle on business GDPR compliance, how many businesses are compliant, or indeed what compliance really is, but according to security experts, it very much depends on who you talk to Continue Reading

By

• Alex Scroxton, Security Editor

Attackers breached supplier systems to steal Airbus secrets

Airbus has been the subject of at least four major cyber attacks in the past 12 months, with contractors and suppliers targeted through their VPNs Continue Reading

By

• Alex Scroxton, Security Editor

Overinvestment breeds overconfidence among security pros

CISOs have made an abundance of security investments in multiple suppliers, but this might not be the right approach Continue Reading

By

• Alex Scroxton, Security Editor

Teen TalkTalk hacker accused of cryptocurrency fraud in US

Elliott Gunton, one of the teenage hackers who broke into TalkTalk’s systems in 2015, faces extradition to the US to face fraud charges Continue Reading

By

• Alex Scroxton, Security Editor

Instagram and WhatsApp – the new tools of social media propaganda

Facebook and Twitter have been cast as the villains of the piece, but social media disinformation and propaganda are evolving in new and alarming directions, say Oxford University researchers Continue Reading

By

• Alex Scroxton, Security Editor

Latest Lorca cyber security challenge has IoT focus

Government-backed cyber security innovation centre Lorca has issued new challenges around connectivity for its next intake of scaleups Continue Reading

By

• Alex Scroxton, Security Editor

Singapore payment card data compromised by JavaScript sniffers

Raw data of thousands of payment cards issued by Singapore banks stolen by the online equivalent of a traditional card sniffer Continue Reading

By

• Aaron Tan, TechTarget

GandCrab ransomware writers still active despite ‘retirement’

Apparent links between an emerging ransomware family known as REvil and GandCrab suggests the GandCrab authors are keeping busy despite having “retired” in June Continue Reading

By

• Alex Scroxton, Security Editor

Enterprises exposed to data loss by cloud configuration errors

Only 1% of misconfigured cloud environments are spotted and attackers are capitalising on this, claims McAfee Continue Reading

By

• Alex Scroxton, Security Editor

Google pushes back on scale of YouTube phishing threat

Millions of YouTubers may be at risk after some high-profile influencers reported their accounts were compromised in an apparent phishing attack, but the platform’s owner, Google, is not so sure Continue Reading

By

• Alex Scroxton, Security Editor

Ecuador citizens’ data breach holds lessons for enterprises

What caused the mass breach of Ecuadorian citizens’ data, and what can businesses learn from it? Continue Reading

Putting blockchain technology to good use

Experts share their views on the best and most effective ways information security professionals can use blockchain technology Continue Reading

By

• Cliff Saran, Managing Editor

The UK’s digital identity policy conundrum

The UK government’s recent consultation on digital identity suggests that past mistakes and assumptions have yet to be resolved – a different, more user-centric vision is required Continue Reading

By

• Colin Wallis, Kantara Initiative

Government insists 'nothing sinister' about web user data gathering

Government Digital Service responds to allegations that personal data gathered through Gov.uk portal could be used to target political messaging to citizens Continue Reading

By

• Bryan Glick, Editor in chief

Going online for a SIBOS press pass was harder than applying for a bank account

My troubles getting a press pass online for SIBOS made m,e appreciate how easy mobile banking is Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Facebook automatically generates pages for Islamic State and Al-Qaeda

Facebook algorithms have auto-generated hundreds of Facebook pages for the Islamic State, Al-Qaeda and Ansar al-Sharia, according to a whistleblower Continue Reading

By

• Bill Goodwin, Computer Weekly

Universities tempting targets for cyber criminals, warns NCSC

As hundreds of thousands of students prepare for the new academic year, universities have been warned that they are at high risk of cyber attack Continue Reading

By

• Alex Scroxton, Security Editor

WannaCry variants accidentally protecting against WannaCry

New variants of the infamous WannaCry malware continue to emerge, and many of them have accidentally turned themselves into a somewhat effective, although ill-advised, vaccine against infection Continue Reading

By

• Alex Scroxton, Security Editor

Emotet phishing botnet returns from summer vacation

The Emotet phishing trojan-turned-botnet is back in action after a three-and-a-half month break, say threat researchers Continue Reading

By

• Alex Scroxton, Security Editor

Ecuador citizens’ data breach holds lessons for enterprises

What caused the mass breach of Ecuadorian citizens’ data, and what can businesses learn from it? Continue Reading

By

• Alex Scroxton, Security Editor

PSD2 security deadline extension is not a reason for further can kicking

The extension of a compliance deadline for PSD2 should not be a signal for banks to reduce preperations Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

US lawmakers demand internal Facebook, Google, Apple and Amazon documents in antitrust probe

US lawmakers have given big tech companies a deadline to disclose a wide range of documents as the House Judiciary Committee’s bipartisan investigation into competition gathers pace Continue Reading

By

• Bill Goodwin, Computer Weekly

Ensign InfoSecurity opens global headquarters in Singapore

The Singapore-based cyber security firm’s new headquarters will also be home to a new security operations centre that will be supported by Singapore-centric threat intelligence Continue Reading

By

• Aaron Tan, TechTarget

Police use of algorithms needs stronger safeguards to prevent bias, report says

A study by the Royal United Services Institute calls for new code of practice to guide use of algorithmic tools in policing Continue Reading

By

• Sebastian Klovig Skelton , Senior reporter

Inside blockchain and its various applications

We explore the technology around blockchain shaping how businesses use data Continue Reading

By

• Bob Tarzey

European court to decide on legality of bulk phone and internet surveillance

The European Court of Justice will decide whether intelligence agencies across Europe can continue to lawfully collect the telephone and internet communications data of citizens, following a two-day hearing this week Continue Reading

By

• Bill Goodwin, Computer Weekly

Ditch hoodies and hackers to encourage diverse security recruitment

The cyber security industry needs to address a systemic image problem if it is to succeed in recruiting more diverse teams Continue Reading

By

• Alex Scroxton, Security Editor

When AIs go to war: Autonomous cyber weapons ‘inevitable’

CISOs must start thinking about how to engage with intelligent, adaptive, non-human attackers, says Trend Micro’s Rik Ferguson Continue Reading

By

• Alex Scroxton, Security Editor

Dutch banks to work together in fight against money laundering

Dutch banks are sharing expertise and resources to help reduce money laundering through their accounts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government seeks views on post-Brexit security alignment

The government has called for views on its proposals to align the UK’s post-Brexit cyber security policy to that of the European Union Continue Reading

By

• Alex Scroxton, Security Editor

A Cybercommunity Safety Partnership to address On-line Harms and Abuse

We need voluntary co-operation to join up cybercommunity safety across silo boundaries without waiting for governments, regulators and lobbyists Continue Reading

By

• Philip Virgo, Winsafe Ltd

ICO to probe government over Gov.uk data collection plan

The ICO is to look into the government’s leaked data collection plans over fears they may breach the law Continue Reading

By

• Alex Scroxton, Security Editor

UN agency Unicef praised for response to accidental data leak

The UN’s children’s agency has disclosed an inadvertent leak of personal data belonging to users of its online learning platform Agora Continue Reading

By

• Alex Scroxton, Security Editor

IBM introduces z15 mainframe with security data passport

In the new z15 enterprise server, IBM has focused on making data secure and auditable wherever it resides. Continue Reading

By

• Cliff Saran, Managing Editor

CW Europe: Dutch authorities call temporary halt to datacentre construction

Two Dutch municipalities are putting all datacentre construction on hold while they put together a strategy to help them control developments. A local alderman said datacentres take up a lot of space and place a large burden on the electricity grid. Also read how France is racing ahead of Germany in making the most of service companies in India, and about Google’s plans for a new datacentre and technology training hub in Finland. Continue Reading

Mirai descendants dominate IoT threat environment

Attacks leveraging compromised IoT devices are growing in size, scale and frequency, report security experts at F-Secure and Trend Micro, with Mirai-related botnets a major source of trouble Continue Reading

By

• Alex Scroxton, Security Editor

Could Boris Johnson and Dominic Cummings' ‘secret’ data sharing plan work?

Prime minister Boris Johnson and his controversial special advisor, Dominic Cummings, are “secretly” working on a plan to gather citizen data from across Whitehall to be used for targeting ... Continue Reading

By

• Bryan Glick, Editor in chief

Regulators globally are shaping up to rein in Facebook

We need to move fast and fix Facebook, before it breaks us Continue Reading

By

• Leighton Andrews , Cardiff Business School

Equifax and Heartbleed are most-Googled cyber security terms

Analysis of 15 years’ worth of Google search data has revealed some insight into what cyber security trends are capturing the imagination Continue Reading

By

• Alex Scroxton, Security Editor

Nordic countries deepen collaboration with Estonia-based cyber security operation

Nordic countries are now working closer with Nato’s Estonia-based centre of excellence in cyber security Continue Reading

By

• Gerard O’Dwyer

GDPR non-compliance worse than feared

Over half of UK businesses do not yet appear to be fully GDPR-compliant, and many have de-prioritised their compliance efforts Continue Reading

By

• Alex Scroxton, Security Editor

UK calls for cyber capacity-building at UN security group

The UK’s representative to a United Nations cyber security working group has called for increased investment in capacity around cyber security Continue Reading

By

• Alex Scroxton, Security Editor

BT gears up to take on rogue drones

BT’s Enterprise unit is offering customers an anti-drone security solution to protect their physical sites from intrusion Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: The case for blockchain-based identity

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Richard Hunt, Turnkey Consulting

A tech boost for social care

In this week’s Computer Weekly, we explore how local authorities across the UK have been looking at assistive technologies, ranging from collaborative robots to voice assistants, to support delivery of adult social care services. We also look into the ramifications of HMRC targeting 1,500 GlaxoSmithKline IT contractors. Read the issue now. Continue Reading

How Zuellig Pharma is fighting fake drugs with blockchain

The Asia-Pacific pharmaceutical giant is using a blockchain platform from SAP to help consumers identify the provenance of medicine Continue Reading

By

• Aaron Tan, TechTarget

Ransomware has evolved into a serious enterprise threat

Ransomware has seen a resurgence since the start of 2019, with cyber criminals changing code and tactics to target enterprises and local authorities for higher ransom payments, McAfee researchers warn. Continue Reading

Terror watchlist faces reform after court rules it violates rights of people entering US

A secret US terrorist database containing information on more than 1.2 million people – who face repeated interrogations, detentions and electronic searches – violates constitutional rights, a US judge said last week Continue Reading

By

• Bill Goodwin, Computer Weekly

Social engineering a factor in virtually all cyber attacks, report claims

Almost every single cyber attack will, at some stage, require a human to be tricked into doing something, according to research by Proofpoint Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Too soon to dismiss blockchain in cyber security

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Maxine Holt, Omdia

Data-driven marketing, the real risk boards are missing

Boards need to act to break the cycle of privacy compliance failures, and shift focus to aligning business purpose with privacy and dealing with the real risk of data driven marketing, warns PwC’s GDPR and data protection lead Continue Reading

By

• Warwick Ashford, Senior analyst

Australia government to chart 2020 cyber security strategy

Australia’s home affairs ministry has released a discussion paper to seek views from all segments of society on the country’s next cyber security blueprint Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Use blockchain for integrity and immutability checks

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Eoin Keary

Singapore’s SecureAge eyes US market

The Singapore-based supplier of encryption and anti-malware tools has set up a new office in Greater Washington, DC as the next logical step in its global expansion plan Continue Reading

By

• Aaron Tan, TechTarget