IT security

Security skills gap will take a decade to fill

The British education systems cannot move fast enough to address the security skills crisis, and in the absence of government action increased reliance on automation may be the least worst solution Continue Reading

By

• Alex Scroxton, Security Editor

The super-resilient organisation

We need to build super-resilient organisations that can not only survive in a tempestuous world, but become energised by it Continue Reading

By

• Ade McCormack, Auridian Consulting

Enterprises muddled over cloud security responsibilities

A McAfee study suggests that 2020 will be a big year for cloud adoption, but confusion still persists over who is responsible for securing it Continue Reading

By

• Alex Scroxton, Security Editor

CW500 Interview: Jonathan Moreira, CTO of PrimaryBid.com

In this CW500 video, Jonathan Moreira, CTO of PrimaryBid.com, gives a fintech startup’s perspective on the security challenges small businesses can face when adopting new technologies. Continue Reading

By

• Clare McDonald, Business Editor

Facebook undermined rivals in bid to dominate global messaging

Facebook used buyouts and bullying tactics towards competitors to grow its business empire, documents leaked to Computer Weekly reveal Continue Reading

By

• Bill Goodwin, Computer Weekly
• Crina Boros

General Election 2019: The Conservatives’ technology policies and digital plans

With the UK gearing up for its third general election in four years, Computer Weekly outlines the Conservative and Unionist Party’s main technology policies and digital plans, as laid out in its manifesto Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

AI may open dangerous new frontiers in geopolitics

Truly artificial intelligence has the potential to provoke an international geopolitical crisis, warns F-Secure’s Mikko Hypponen Continue Reading

By

• Alex Scroxton, Security Editor

Uber app exploit posed safety risk to passengers

A flaw in Uber’s system meant thousands of trips in London were taken with unauthorised drivers at the wheel Continue Reading

By

• Alex Scroxton, Security Editor

Tim Berners-Lee launches nine principles for the web

Inventor of the worldwide web sets out Contract for the Web to protect its freedom, data privacy and access for all Continue Reading

By

• Cliff Saran, Managing Editor

Conservatives propose national cyber crime force

Manifesto also says Tories would “empower the police to safely use new technologies like biometrics and artificial intelligence, along with the use of DNA, within a strict legal framework” Continue Reading

By

• Alex Scroxton, Security Editor

CW500 Interview: Paddy Francis, CTO, Airbus CyberSecurity

In this CW500 video, Paddy Francis, CTO, Airbus CyberSecurity shares his advice and experiences of keeping tabs on security when trying to introduce emerging digital technologies into large organisations. Continue Reading

By

• Clare McDonald, Business Editor

Mystery surrounds leak of four billion user records

Threat researchers uncover four billion user records on a wide-open Elasticsearch server but who left them there is a mystery Continue Reading

By

• Alex Scroxton, Security Editor

IT chiefs recognise the risks of artificial intelligence bias

Artificial intelligence promises to change the way businesses operate. IT leaders are now taking bias in AI algorithms seriously Continue Reading

By

• Cliff Saran, Managing Editor

Some 29,000 UK web domains suspended for criminal activity

Domain suspensions for criminal activity over the past year has dropped for the first time since 2014 Continue Reading

By

• Alex Scroxton, Security Editor

Druva eyes data protection for IoT workloads

Cloud data protection software supplier Druva is looking at a comprehensive platform that will protect data generated by IoT workloads Continue Reading

By

• Aaron Tan, Informa TechTarget

Labour pledges review of NCSC in UK security overhaul

The UK's National Cyber Security Centre may get expanded powers under a Labour government Continue Reading

By

• Alex Scroxton, Security Editor

British Airways cancels flights due to technical issue

British Airways customers are suffering delays and cancellations as a result as a technical issue Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Stopping data leaks in the cloud

Misconfigured cloud environments are increasingly identified as the source of damaging data breaches and leaks, raising serious questions for enterprises. Where does responsibility for data security in the cloud lie, and how can security professionals best work with their teams and cloud providers to resolve the problem? Continue Reading

By

• Cath Goulding, Nominet

F-Secure’s Blackfin challenges perceptions of how AIs think

New research project aims to develop adaptive, autonomous and collaborative AI agents, and challenges the notion that machine intelligence should merely mimic human intelligence Continue Reading

By

• Alex Scroxton, Security Editor

CW Nordics: Automation pays off for Sweden’s social workers

Software robots are freeing up time for social workers in Sweden to help benefits claimants find employment and to receive the money they are entitled to. Also in this issue, read how Sweden’s SEB bank is using a Google-inspired, cloud-native core banking platform, and why India is leading the pack when it comes to IT outsourcing from the Nordic countries. Continue Reading

How Nicigas is disrupting Japan’s gas market with IoT

Japanese energy retailer Nicigas is deploying 850,000 IoT devices to convert traditional gas meters into smart meters to unlock consumption data amid efforts to shake up the utilities industry Continue Reading

By

• Aaron Tan, Informa TechTarget

Senators raise questions over Facebook’s monitoring of phone users’ locations

After Facebook publishes a blog post with conflicting statements, two US senators ask for clarification on how the company collects location data from its users Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Mimecast blocked 99 billion suspicious emails in third quarter

Latest threat intelligence report reveals the scale of the threat posed by malicious emails, with the transport, legal and financial sectors hit hardest Continue Reading

By

• Alex Scroxton, Security Editor

Massive increase in fraud attacks on TSB customers during IT meltdown

There was a massive spike in attempts by fraudsters to steal from TSB customers when the bank’s IT systems failed in 2018 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Conservatives slammed over social media trickery

The Conservative Party has been caught spreading online disinformation during the General Election campaign for a second time Continue Reading

By

• Alex Scroxton, Security Editor

Carbon Black to open Australia datacentre in 2020

Australia datacentre comes on the heels of VMware’s acquisition of Carbon Black and will serve organisations with data sovereignty requirements Continue Reading

By

• Aaron Tan, Informa TechTarget

Public sector risks downplayed by senior IT leaders

Sophos reveals a significant cyber security perception gap between senior IT and security leaders in the public sector and their front-line teams Continue Reading

By

• Alex Scroxton, Security Editor

Macy’s Magecart breach presages Christmas fraud spike

US retailer Macy’s admits some customer data was accessed by unknown actors during a week-long Magecart attack Continue Reading

By

• Alex Scroxton, Security Editor

Anti-stalkerware coalition calls time on intrusive abusers

New coalition plans to tackle the scourge of stalkerware as a tool of domestic and other forms of abuse Continue Reading

By

• Alex Scroxton, Security Editor

Businesses failing to wipe data from old endpoints

Organisations are not taking adequate precautions to sanitise data held on endpoints when refreshing their PC or mobile device estates Continue Reading

By

• Alex Scroxton, Security Editor

Huawei shrugs off latest US reprieve

Chinese tech giant dismisses the latest extension of the US Temporary General Licence and maintains that the US government is harming its own interests in banning it Continue Reading

By

• Alex Scroxton, Security Editor

Managed services fuelling APAC security market

Spending on managed security services will account for almost half of Asia-Pacific’s cyber security market by 2023, as global and local providers shore up their offerings in the region Continue Reading

By

• Aaron Tan, Informa TechTarget

Is facial recognition happening too fast?

In this week’s Computer Weekly, as the information commissioner calls on police forces to slow down the introduction of facial recognition, we examine the issues. We look at what the use of DevOps methods means for storage strategy. And we talk to Microsoft’s global cyber security chief. Read the issue now. Continue Reading

The Security Interviews: Applying AI to Lego, and security

Ann Johnson, Microsoft corporate vice-president of cyber security, is on a mission to prove that artificial intelligence holds great promise for the security sector, and she has the analogies to back it up. Continue Reading

ICO says UK police must ‘slow down’ use of facial recognition

The Information Commissioner’s Office is calling for a statutory code of practice to govern how police in the UK deploy live facial recognition technology while controversy surrounding its use continues. Continue Reading

Microsoft increases data protection for enterprises following Dutch MoJ audit

Last year’s audit by the Dutch Ministry of Justice and Security got the attention of the European Data Protection Supervisor. Now Microsoft has reacted Continue Reading

By

• Cliff Saran, Managing Editor

The top 10 network security best practices to implement today

Even as security techniques improve, attackers are becoming more adept. Learn about 10 network security best practices and how they can keep your network secure. Continue Reading

By

• Amy Larsen DeCarlo, GlobalData

Notorious hackers claim responsibility for Labour DDoS

Hackers claiming to represent Lizard Squad say they were behind a distributed denial of service attack on the UK’s Labour Party Continue Reading

By

• Alex Scroxton, Security Editor

Home Office Brexit app contains multiple security flaws

The Home Office’s Brexit app may be putting EU citizens’ personal data at risk Continue Reading

By

• Alex Scroxton, Security Editor

Cyber criminals tool up for Christmas fraud season

Organised criminals are trying to cash in on the festive retail boom with both brand new and tried-and-tested techniques Continue Reading

By

• Alex Scroxton, Security Editor

Collaborative security approaches underpin container success

Containers are helping organisations to accelerate age-old software development approaches, but success is underpinned by a constant and team-wide attention to security. Continue Reading

How APAC enterprises can keep pace with container security

For all the promises of containers, changes in architecture and practices associated with the technology bring new challenges and opportunities. Continue Reading

CW APAC: Expert advice on container security

For all the promises of containers, changes in architecture and practices associated with the technology bring new challenges and opportunities. In this handbook, Computer Weekly looks at the security challenges associated with container technology. Continue Reading

What the EU’s decision on Facebook means for social media

Recent ruling by the Court of Justice of the European Union will have global implications for social media companies and any organisations that host online content Continue Reading

By

• Peter Ray Allison

11 new 5G hacks enable user device tracking and monitoring

Researchers at Purdue University and the University of Iowa publish details of several new 5G mobile network vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

Business leaders fibbing to cover up lax security posture

Nominet study finds evidence that many businesses tout the robustness of their security posture as a selling point even though their security teams lack confidence in themselves Continue Reading

By

• Alex Scroxton, Security Editor

Finnish biometric identity plans for seamless air travel

Finnair and Finavia explore options for automatic digital identification and authentication of air travellers Continue Reading

By

• Alex Cruickshank

Attack on Labour shows need for DDoS defence but should alarm few

After being hit by two DDoS attacks in the space of 24 hours, many commentators are convinced the UK’s Labour Party is the victim of foreign interference in the General Election campaign. It probably isn’t Continue Reading

By

• Alex Scroxton, Security Editor

Business must engage with consumers to boost AI

Artificial intelligence is set to become a core part of business, but to get the most from it, enterprises need to engage with consumers to focus personalisation Continue Reading

By

• Cliff Saran, Managing Editor

Taking responsibility for security in the cloud

From accidental leaks to full-on data breaches, maintaining security across cloud services is becoming a headache for enterprises. What questions should organisations be asking of their cloud service provider and, ultimately, whose responsibility is cloud security anyway? Continue Reading

By

• Peter Ray Allison

Cyber risk insurance is more than just insurance

Insurance companies such as Chubb are offering incident response services and security tools to help companies improve their cyber security posture and better cope with cyber attacks Continue Reading

By

• Aaron Tan, Informa TechTarget

Nordic SMEs lack the money needed for cyber security

Businesses and governments in Denmark and Norway are working together to address a cyber security shortfall for SMEs in each country Continue Reading

By

• Gerard O'Dwyer

PCI DSS payment security compliance drops again

Worldwide, barely one-third of companies are maintaining full compliance with the PCI DSS security standard – and the numbers are falling Continue Reading

By

• Alex Scroxton, Security Editor

‘Robust’ security foils cyber attack on Labour Party

Labour claims to have been the victim of a cyber attack, but says it is confident no data leaked Continue Reading

By

• Alex Scroxton, Security Editor

Shared responsibility model key to solving 5G security problem

Both buyers and sellers need to cooperate to solve the thorny issues around 5G security Continue Reading

By

• Alex Scroxton, Security Editor

IBM drums up quantum computing future

IBM’s head honcho, Ginni Rometty, welcomes Australia’s Woodside Energy to the quantum computing fold through a partnership to harness the technology to shore up cyber security and plant operations Continue Reading

By

• Beverley Head

Australia’s productivity woes pinned on poor employee experience

Research by Ricoh suggests that the lukewarm view of employee experience among IT leaders is part of the reason for Australia’s declining productivity Continue Reading

By

• Beverley Head

Security pros urged to get ahead of incoming BlueKeep exploits

The BlueKeep RDP vulnerability is beginning to be exploited in the wild, and security teams have no excuse for not trying to get in front of it, says Microsoft Continue Reading

By

• Alex Scroxton, Security Editor

Morrisons in new appeal over data breach fine

The Supreme Court has heard an appeal from retailer Morrisons as it attempts to overturn prior judgments holding it liable for a 2014 leak of employee data Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Base cloud security posture on your data footprint

Misconfigured cloud environments are increasingly identified as the source of damaging data breaches and leaks, raising serious questions for enterprises. Where does responsibility for data security in the cloud lie, and how can security professionals best work with their teams and cloud providers to resolve the problem? Continue Reading

By

• Rob Clyde, Isaca

Security Think Tank: Cloud security is a shared responsibility

Misconfigured cloud environments are increasingly identified as the source of damaging data breaches and leaks, raising serious questions for enterprises. Where does responsibility for data security in the cloud lie, and how can security professionals best work with their teams and cloud providers to resolve the problem? Continue Reading

By

• Paddy Francis

Amazon Ring video doorbell flaw left users open to attack

A vulnerability in Amazon’s Ring video doorbells left the internet-of-things devices open to a variety of attacks Continue Reading

By

• Alex Scroxton, Security Editor

Security in the supply chain – a post-GDPR approach

A year and a half after the introduction of the EU’s General Data Protection Regulation, Fieldfisher's James Walsh reviews the fundamentals of supply chain security Continue Reading

By

• James Walsh, Fieldfisher

Saudis recruited Twitter employees to spy on critics

Court documents reveal how the Saudi Arabian government targeted Twitter employees as part of a coordinated effort to gather information on known dissidents Continue Reading

By

• Alex Scroxton, Security Editor

CW Benelux: Dutch banks fight money laundering

Dutch banks are sharing expertise and resources to help reduce money laundering through their accounts. Also read in this issue how companies could lose loyal IT staff because salary rises do not match those at rival employers, and why a Dutch province is pioneering a no-code software development platform. Continue Reading

Navigate PII data protection and GDPR to meet privacy mandates

Know the commonalities surrounding personally identifiable information to better navigate and comply with the regulations and penalties IT managers must contend with today. Continue Reading

By

• Marc Staimer, Dragon Slayer Consulting

Trend Micro insider breach exposes need for data-centric protection

Simple measures could have saved consumer security product supplier from insider breach Continue Reading

By

• Alex Scroxton, Security Editor

How Facebook’s ‘Switcheroo’ plan concealed scheme to kill popular apps

Leaked documents reveal how Facebook used and abused app developers, cut off data to competitors, gave privileged access to its friends and used privacy as a cover story Continue Reading

By

• Bill Goodwin, Computer Weekly
• Sebastian Klovig Skelton, Data & ethics editor
• Duncan Campbell , 2QQ Ltd, Sussex University

Global security workforce must more than double to meet demand

There are about 2.8 million cyber security professionals working today, and the world needs four million more Continue Reading

By

• Alex Scroxton, Security Editor

Professional cyber criminals command $75k per annum

An ill-advised career in cyber crime is potentially almost as well-paying as a job as a threat researcher in the industry, according to Tenable researchers Continue Reading

By

• Alex Scroxton, Security Editor

Lawmakers study leaked Facebook documents made public today

Computer Weekly publishes cache of leaked documents disclosed to Congress Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor
• Bill Goodwin, Computer Weekly

What changes are needed to create a cyber-savvy culture?

PA Consulting's Cate Pye considers the people and process changes that are necessary to build a security aware business culture Continue Reading

By

• Cate Pye, PA Consulting

Huawei: 5G growth will be maintained with or without US tech supply

Huawei dismisses US tech sabre-rattling and claims it will continue robust business growth in 5G with or without US suppliers Continue Reading

By

• Joe O’Halloran, Computer Weekly

Security Think Tank: Adapt security posture to your cloud model

Misconfigured cloud environments are increasingly identified as the source of damaging data breaches and leaks, raising serious questions for enterprises. Where does responsibility for data security in the cloud lie, and how can security professionals best work with their teams and cloud providers to resolve the problem? Continue Reading

By

• Maxine Holt, Omdia

Making sense of the current UK Cybersecurity Skills scene

But that is for the future. For the here and now I strongly recommend participation in the DPA cybersecurity skill sub-group in order to make sense of what it happening and ensure that your needs, ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Ransomware authors seeking new ways to avoid being spotted

Sector analysis from Sophos has revealed some insight into how malware authors are adapting to thwart cyber security controls Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: The cloud needs security by design

Misconfigured cloud environments are increasingly identified as the source of damaging data breaches and leaks, raising serious questions for enterprises. Where does responsibility for data security in the cloud lie, and how can security professionals best work with their teams and cloud providers to resolve the problem? Continue Reading

By

• Simon Persin, Turnkey Consulting

The benefits of API-first software development

In this week’s Computer Weekly, we find out how organisations are using an API-based approach to software development to boost digital initiatives. We examine the potential pitfalls in using cloud storage. And we talk to the Department for Work and Pensions about its four-year project to move from outsourced IT to the cloud. Read the issue now. Continue Reading

ICO launches data security campaign for UK General Election

Information commissioner Elizabeth Denham launches campaign to remind the public of their rights when personal data is used for political purposes Continue Reading

By

• Alex Scroxton, Security Editor

Gartner: The time is right to make IT a boardroom issue

In many businesses, IT is regarded as an internal service provider and cost centre. Gartner says now is the best time for CIOs to make IT strategic Continue Reading

By

• Cliff Saran, Managing Editor

Security Think Tank: Secure the cloud when negotiating contracts

Misconfigured cloud environments are increasingly identified as the source of damaging data breaches and leaks, raising serious questions for enterprises. Where does responsibility for data security in the cloud lie, and how can security professionals best work with their teams and cloud providers to resolve the problem? Continue Reading

By

• Petra Wenham

Sumo Logic buys into cloud security software market

Jask’s cloud-native autonomous security operations software will be integrated into Sumo Logic’s intelligence platform Continue Reading

By

• Alex Scroxton, Security Editor

EU patches 20-year-old open source vulnerability

Ethical hackers taking part in a bug bounty programme on behalf of the European Union have uncovered a 20-year-old vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

Making the case for integrated risk management

Security experts discuss how an integrated approach to risk and governance can be effectively managed Continue Reading

By

• Cliff Saran, Managing Editor

Insurability is the key to Cybermaturity

Most organisations are uninsurable. They spend large amounts on security products and services technology but they are not doing that which reduces the risk of a successful cyberattack, limits the ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

General Election sees UK government defer ‘high-risk’ 5G tech supplier review

Decision on allowing so-called high-risk suppliers access to the UK’s market for 5G infrastructure delayed due to 12 December poll Continue Reading

By

• Joe O’Halloran, Computer Weekly

ICO says UK police must ‘slow down’ use of facial recognition

The Information Commissioner’s Office is calling for a statutory code of practice to govern how police in the UK deploy live facial recognition technology while controversy surrounding its use continues Continue Reading

By

• Sebastian Klovig Skelton , Senior reporter

CIO must focus on easing data access to help data scientists build models more quickly

Data scientists struggle to get the right data in the right format to build artificial intelligence models, so to benefit from AI, CIOs will need to simplify data access Continue Reading

By

• Cliff Saran, Managing Editor

Security Think Tank: In the cloud, the buck stops with you

Misconfigured cloud environments are increasingly identified as the source of damaging data breaches and leaks, raising serious questions for enterprises. Where does responsibility for data security in the cloud lie, and how can security professionals best work with their teams and cloud providers to resolve the problem? Continue Reading

By

• Mike Gillespie

Banks let customers down with mixed approaches to security

Treasury Committee report recommends new measures to tackle financial fraud Continue Reading

By

• Alex Scroxton, Security Editor

Facebook agrees to pay £500,000 fine over Cambridge Analytica data law breaches

Social media giant also promises to change the way its platform is used to protect people’s data Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Alibaba Cloud earns security credentials in automotive and healthcare sectors

Alibaba Cloud’s compliance with Tisax and GxP follows earlier efforts by major public cloud suppliers to win over enterprises with strict data protection and security rules Continue Reading

By

• Aaron Tan, Informa TechTarget

What will succeed the National Cyber Security Strategy?

As the National Cyber Security Strategy nears the end of its working life, the government is considering what comes next, and is asking probing questions of its successes and failures Continue Reading

By

• Alex Scroxton, Security Editor

NordVPN enlists ethical hackers, launches bug bounty programme

Breached consumer VPN supplier details steps it is taking to shore up its cyber security posture after an unknown actor gained access to one of its servers Continue Reading

By

• Alex Scroxton, Security Editor

Fancy Bear resumes Olympic hacks ahead of Tokyo games

Fancy Bear is back in action and once again targeting anti-doping bodies and sporting organisations, warns Microsoft Continue Reading

By

• Alex Scroxton, Security Editor

Mitigating social engineering attacks with MFA

The growing frequency of social engineering attacks highlights the increasing need for organisations to take steps to mitigate the effects of phishing. Continue Reading

IR35 reforms – the difficult decisions facing IT contractors

In this week’s Computer Weekly, we examine the difficult choices facing UK IT contractors from the controversial IR35 tax reforms. Social engineering is a major source of cyber security attacks – we look at mitigation strategies. And the IT chief at Mercedes F1 explains what it takes to support a world championship team. Read the issue now. Continue Reading

Security Think Tank: Embedding security in governance

How can security professionals help their organisations move from traditional governance, risk and compliance to integrated risk management that integrates risk activities from across an organisation to enable better strategic decision-making? Continue Reading

By

• Sandeep Godbole, ISACA

Windows 7 upgrade haunts health service tech vision

Windows 7 issues at the NHS are making headlines, 15 months after the release of the review of how legacy IT was exploited by the WannaCry attack Continue Reading

By

• Cliff Saran, Managing Editor

Security puzzle calls for some joined-up thinking

The age of digitisation brings new risks to organisations, so security needs to be more integrated Continue Reading

By

• Cliff Saran, Managing Editor