IT security

Podcast: The Computer Weekly Downtime Upload – Episode 33

In this week’s episode of the Computer Weekly Downtime Upload podcast, Brian McKenna and Clare McDonald are joined by Alex Scroxton to talk about cyber warfare and digital healthcare Continue Reading

By

• Brian McKenna, Enterprise Applications Editor
• Alex Scroxton, Security Editor
• Clare McDonald, Business Editor

US likely to concede on Huawei export ban

The US government may make some concessions over the future of Huawei before the end of the year Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: The operational approach to integrated risk management

How can security professionals help their organisations move from traditional governance, risk and compliance to integrated risk management that integrates risk activities from across an organisation to enable better strategic decision-making? Continue Reading

By

• Simon Persin, Turnkey Consulting

CIO interview: Matt Harris, head of IT, Mercedes-AMG Petronas Motorsport

The IT chief at the world-leading Formula 1 team is focused on using technology to support and deliver marginal gains in performance for the team’s drivers Continue Reading

By

• Mark Samuels

How APAC enterprises can keep pace with container security

For all the promises of containers, changes in architecture and practices associated with the technology bring new challenges and opportunities Continue Reading

By

• Aaron Tan, TechTarget

IBM, McAfee among founders of open source security alliance

A group of cyber security suppliers have come together to form the Open Cybersecurity Alliance Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Get basic security policy right, and the rest will follow

Paying attention to basic aspects of cyber security such as policy and permission will give you a sold base to build from Continue Reading

By

• Petra Wenham

How to bolster IAM strategies using automation

Identity and access management processes and technologies play an important role in security strategies, but organisations and IT professionals need to ensure these strategies are robust enough to deal with new threats. Continue Reading

Showcasing the potential of 5G

In this week’s Computer Weekly, we visit an ambitious trial in Bristol that is showcasing the possibilities offered by 5G roll-out. We look at how emerging automation technologies are enhancing the use of identity and access management tools. And we assess the Government Digital Service plan for transforming public services. Read the issue now. Continue Reading

Security Think Tank: Risk is unavoidable in digital transformation

How can security professionals help their organisations move from traditional governance, risk and compliance to integrated risk management that integrates risk activities from across an organisation to enable better strategic decision-making? Continue Reading

By

• Maxine Holt, Omdia

Government departments sign up to web data-sharing plan

All but four Whitehall departments have so far agreed to share web analytics data to allow the government to monitor user behaviour across the Gov.uk domain Continue Reading

By

• Bryan Glick, Editor in chief

UK and US call on Facebook to walk back encryption plans

The US, Australian and UK governments have asked Facebook to ditch plans to deploy end-to-end encryption across Facebook Messenger, Instagram and WhatsApp Continue Reading

By

• Alex Scroxton, Security Editor

Five ways a managed print service can support cyber resilience

As IoT devices, smart MFPs are susceptible to the growing threat of attempts to implant malware, recruit to botnets (to help perpetrate DDoS attacks), as well as potentially providing an open ... Continue Reading

By

• Louella Fernandes, Quocirca

IT contractor charged over cyber attack on property valuation firm

Australian police charge 49-year-old man with stealing and posting more than 170,000 data records belonging to ASX-listed Landmark White on the dark web Continue Reading

By

• Beverley Head

Why data-driven applications need a governance framework

Data is the new oil – but without tight control, how can business determine that the data is valid? Data catalogues are back in vogue Continue Reading

By

• Cliff Saran, Managing Editor

LogRhythm touts unlimited data plan for SIEM systems

SIEM supplier introduces three-year, term-based pricing plan that lets enterprises ingest as much data as they want without breaking the bank Continue Reading

By

• Aaron Tan, TechTarget

Local authorities hit by 800 cyber attacks every hour

Local authorities and councils in the UK have reported being hit by more than 263 million cyber attacks in the first six months of this year Continue Reading

By

• Alex Scroxton, Security Editor

New threat group behind Airbus cyber attacks, claim researchers

Context Information Security’s threat intel and response teams says it has evidence that the recent supply chain attacks on Airbus are the work of a newly identified group called Avivore Continue Reading

By

• Alex Scroxton, Security Editor

Cyber war as big a threat as nuclear war, says ex-RSA head Coviello

Former RSA chairman Art Coviello has been speaking about the devastating potential of cyber weapons, and warned that humanity must learn from history in order to control them Continue Reading

By

• Alex Scroxton, Security Editor

A security breach is inevitable, IT leaders warned

No matter how much IT security tech and training is in place, sophisticated, targeted attacks are going to breach company defences, Carbon Black warns Continue Reading

By

• Cliff Saran, Managing Editor

The most influential women in UK technology 2019

In this week’s Computer Weekly, we announce our annual list of the 50 most influential women in UK technology. Meet the winner, Debbie Forster, CEO of Tech Talent Charter, and find out who are this year’s five rising stars. Also, our latest buyer’s guide looks at the latest developments in robotic process automation. Read the issue now. Continue Reading

Singapore outlines initiatives to tackle OT and IoT security

The Cyber Security Agency of Singapore has developed a blueprint to secure operational technology systems in critical sectors, among other measures to secure cyber-physical systems and the internet of things Continue Reading

By

• Aaron Tan, TechTarget

CIO interview: Michael Ibbitson, executive VP for technology and infrastructure, Dubai Airports

Former CIO at Gatwick Airport took flight to the Middle East three years ago, and is using data to transform the technology and infrastructure at Dubai Airports Continue Reading

By

• Mark Samuels

ABN Amro investigation lends weight to anti-money laundering collaboration by Dutch banks

Dutch authorities are investigating ABN Amro for possible failures to monitor and report potential money laundering activity Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Nodersok malware campaign is infecting thousands, Microsoft warns

Thousands of Windows endpoints in the US and Europe have been infected by a new fileless malware campaign in the past few weeks Continue Reading

By

• Alex Scroxton, Security Editor

Five million DoorDash customers’ details lost in data breach

Takeaway delivery service was breached in May 2019, resulting in the data of millions of users and delivery drivers being stolen Continue Reading

By

• Alex Scroxton, Security Editor

GDPR compliance: Whose job is it and is it really possible?

Nobody seems to have a good handle on business GDPR compliance, how many businesses are compliant, or indeed what compliance really is, but according to security experts, it very much depends on who you talk to Continue Reading

By

• Alex Scroxton, Security Editor

Attackers breached supplier systems to steal Airbus secrets

Airbus has been the subject of at least four major cyber attacks in the past 12 months, with contractors and suppliers targeted through their VPNs Continue Reading

By

• Alex Scroxton, Security Editor

Overinvestment breeds overconfidence among security pros

CISOs have made an abundance of security investments in multiple suppliers, but this might not be the right approach Continue Reading

By

• Alex Scroxton, Security Editor

Teen TalkTalk hacker accused of cryptocurrency fraud in US

Elliott Gunton, one of the teenage hackers who broke into TalkTalk’s systems in 2015, faces extradition to the US to face fraud charges Continue Reading

By

• Alex Scroxton, Security Editor

Instagram and WhatsApp – the new tools of social media propaganda

Facebook and Twitter have been cast as the villains of the piece, but social media disinformation and propaganda are evolving in new and alarming directions, say Oxford University researchers Continue Reading

By

• Alex Scroxton, Security Editor

Latest Lorca cyber security challenge has IoT focus

Government-backed cyber security innovation centre Lorca has issued new challenges around connectivity for its next intake of scaleups Continue Reading

By

• Alex Scroxton, Security Editor

Singapore payment card data compromised by JavaScript sniffers

Raw data of thousands of payment cards issued by Singapore banks stolen by the online equivalent of a traditional card sniffer Continue Reading

By

• Aaron Tan, TechTarget

GandCrab ransomware writers still active despite ‘retirement’

Apparent links between an emerging ransomware family known as REvil and GandCrab suggests the GandCrab authors are keeping busy despite having “retired” in June Continue Reading

By

• Alex Scroxton, Security Editor

Enterprises exposed to data loss by cloud configuration errors

Only 1% of misconfigured cloud environments are spotted and attackers are capitalising on this, claims McAfee Continue Reading

By

• Alex Scroxton, Security Editor

Google pushes back on scale of YouTube phishing threat

Millions of YouTubers may be at risk after some high-profile influencers reported their accounts were compromised in an apparent phishing attack, but the platform’s owner, Google, is not so sure Continue Reading

By

• Alex Scroxton, Security Editor

Ecuador citizens’ data breach holds lessons for enterprises

What caused the mass breach of Ecuadorian citizens’ data, and what can businesses learn from it? Continue Reading

Putting blockchain technology to good use

Experts share their views on the best and most effective ways information security professionals can use blockchain technology Continue Reading

By

• Cliff Saran, Managing Editor

The UK’s digital identity policy conundrum

The UK government’s recent consultation on digital identity suggests that past mistakes and assumptions have yet to be resolved – a different, more user-centric vision is required Continue Reading

By

• Colin Wallis, Kantara Initiative

Government insists 'nothing sinister' about web user data gathering

Government Digital Service responds to allegations that personal data gathered through Gov.uk portal could be used to target political messaging to citizens Continue Reading

By

• Bryan Glick, Editor in chief

Going online for a SIBOS press pass was harder than applying for a bank account

My troubles getting a press pass online for SIBOS made m,e appreciate how easy mobile banking is Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Facebook automatically generates pages for Islamic State and Al-Qaeda

Facebook algorithms have auto-generated hundreds of Facebook pages for the Islamic State, Al-Qaeda and Ansar al-Sharia, according to a whistleblower Continue Reading

By

• Bill Goodwin, Computer Weekly

Universities tempting targets for cyber criminals, warns NCSC

As hundreds of thousands of students prepare for the new academic year, universities have been warned that they are at high risk of cyber attack Continue Reading

By

• Alex Scroxton, Security Editor

WannaCry variants accidentally protecting against WannaCry

New variants of the infamous WannaCry malware continue to emerge, and many of them have accidentally turned themselves into a somewhat effective, although ill-advised, vaccine against infection Continue Reading

By

• Alex Scroxton, Security Editor

Emotet phishing botnet returns from summer vacation

The Emotet phishing trojan-turned-botnet is back in action after a three-and-a-half month break, say threat researchers Continue Reading

By

• Alex Scroxton, Security Editor

Ecuador citizens’ data breach holds lessons for enterprises

What caused the mass breach of Ecuadorian citizens’ data, and what can businesses learn from it? Continue Reading

By

• Alex Scroxton, Security Editor

PSD2 security deadline extension is not a reason for further can kicking

The extension of a compliance deadline for PSD2 should not be a signal for banks to reduce preperations Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

US lawmakers demand internal Facebook, Google, Apple and Amazon documents in antitrust probe

US lawmakers have given big tech companies a deadline to disclose a wide range of documents as the House Judiciary Committee’s bipartisan investigation into competition gathers pace Continue Reading

By

• Bill Goodwin, Computer Weekly

Ensign InfoSecurity opens global headquarters in Singapore

The Singapore-based cyber security firm’s new headquarters will also be home to a new security operations centre that will be supported by Singapore-centric threat intelligence Continue Reading

By

• Aaron Tan, TechTarget

Police use of algorithms needs stronger safeguards to prevent bias, report says

A study by the Royal United Services Institute calls for new code of practice to guide use of algorithmic tools in policing Continue Reading

By

• Sebastian Klovig Skelton , Senior reporter

Inside blockchain and its various applications

We explore the technology around blockchain shaping how businesses use data Continue Reading

By

• Bob Tarzey

European court to decide on legality of bulk phone and internet surveillance

The European Court of Justice will decide whether intelligence agencies across Europe can continue to lawfully collect the telephone and internet communications data of citizens, following a two-day hearing this week Continue Reading

By

• Bill Goodwin, Computer Weekly

Ditch hoodies and hackers to encourage diverse security recruitment

The cyber security industry needs to address a systemic image problem if it is to succeed in recruiting more diverse teams Continue Reading

By

• Alex Scroxton, Security Editor

When AIs go to war: Autonomous cyber weapons ‘inevitable’

CISOs must start thinking about how to engage with intelligent, adaptive, non-human attackers, says Trend Micro’s Rik Ferguson Continue Reading

By

• Alex Scroxton, Security Editor

Dutch banks to work together in fight against money laundering

Dutch banks are sharing expertise and resources to help reduce money laundering through their accounts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government seeks views on post-Brexit security alignment

The government has called for views on its proposals to align the UK’s post-Brexit cyber security policy to that of the European Union Continue Reading

By

• Alex Scroxton, Security Editor

A Cybercommunity Safety Partnership to address On-line Harms and Abuse

We need voluntary co-operation to join up cybercommunity safety across silo boundaries without waiting for governments, regulators and lobbyists Continue Reading

By

• Philip Virgo, Winsafe Ltd

ICO to probe government over Gov.uk data collection plan

The ICO is to look into the government’s leaked data collection plans over fears they may breach the law Continue Reading

By

• Alex Scroxton, Security Editor

UN agency Unicef praised for response to accidental data leak

The UN’s children’s agency has disclosed an inadvertent leak of personal data belonging to users of its online learning platform Agora Continue Reading

By

• Alex Scroxton, Security Editor

CW Europe: Dutch authorities call temporary halt to datacentre construction

Two Dutch municipalities are putting all datacentre construction on hold while they put together a strategy to help them control developments. A local alderman said datacentres take up a lot of space and place a large burden on the electricity grid. Also read how France is racing ahead of Germany in making the most of service companies in India, and about Google’s plans for a new datacentre and technology training hub in Finland. Continue Reading

IBM introduces z15 mainframe with security data passport

In the new z15 enterprise server, IBM has focused on making data secure and auditable wherever it resides. Continue Reading

By

• Cliff Saran, Managing Editor

Mirai descendants dominate IoT threat environment

Attacks leveraging compromised IoT devices are growing in size, scale and frequency, report security experts at F-Secure and Trend Micro, with Mirai-related botnets a major source of trouble Continue Reading

By

• Alex Scroxton, Security Editor

Could Boris Johnson and Dominic Cummings' ‘secret’ data sharing plan work?

Prime minister Boris Johnson and his controversial special advisor, Dominic Cummings, are “secretly” working on a plan to gather citizen data from across Whitehall to be used for targeting ... Continue Reading

By

• Bryan Glick, Editor in chief

Regulators globally are shaping up to rein in Facebook

We need to move fast and fix Facebook, before it breaks us Continue Reading

By

• Leighton Andrews , Cardiff Business School

Equifax and Heartbleed are most-Googled cyber security terms

Analysis of 15 years’ worth of Google search data has revealed some insight into what cyber security trends are capturing the imagination Continue Reading

By

• Alex Scroxton, Security Editor

Nordic countries deepen collaboration with Estonia-based cyber security operation

Nordic countries are now working closer with Nato’s Estonia-based centre of excellence in cyber security Continue Reading

By

• Gerard O’Dwyer

GDPR non-compliance worse than feared

Over half of UK businesses do not yet appear to be fully GDPR-compliant, and many have de-prioritised their compliance efforts Continue Reading

By

• Alex Scroxton, Security Editor

UK calls for cyber capacity-building at UN security group

The UK’s representative to a United Nations cyber security working group has called for increased investment in capacity around cyber security Continue Reading

By

• Alex Scroxton, Security Editor

BT gears up to take on rogue drones

BT’s Enterprise unit is offering customers an anti-drone security solution to protect their physical sites from intrusion Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: The case for blockchain-based identity

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Richard Hunt, Turnkey Consulting

A tech boost for social care

In this week’s Computer Weekly, we explore how local authorities across the UK have been looking at assistive technologies, ranging from collaborative robots to voice assistants, to support delivery of adult social care services. We also look into the ramifications of HMRC targeting 1,500 GlaxoSmithKline IT contractors. Read the issue now. Continue Reading

How Zuellig Pharma is fighting fake drugs with blockchain

The Asia-Pacific pharmaceutical giant is using a blockchain platform from SAP to help consumers identify the provenance of medicine Continue Reading

By

• Aaron Tan, TechTarget

Ransomware has evolved into a serious enterprise threat

Ransomware has seen a resurgence since the start of 2019, with cyber criminals changing code and tactics to target enterprises and local authorities for higher ransom payments, McAfee researchers warn. Continue Reading

Terror watchlist faces reform after court rules it violates rights of people entering US

A secret US terrorist database containing information on more than 1.2 million people – who face repeated interrogations, detentions and electronic searches – violates constitutional rights, a US judge said last week Continue Reading

By

• Bill Goodwin, Computer Weekly

Social engineering a factor in virtually all cyber attacks, report claims

Almost every single cyber attack will, at some stage, require a human to be tricked into doing something, according to research by Proofpoint Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Too soon to dismiss blockchain in cyber security

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Maxine Holt, Omdia

Data-driven marketing, the real risk boards are missing

Boards need to act to break the cycle of privacy compliance failures, and shift focus to aligning business purpose with privacy and dealing with the real risk of data driven marketing, warns PwC’s GDPR and data protection lead Continue Reading

By

• Warwick Ashford, Senior analyst

Australia government to chart 2020 cyber security strategy

Australia’s home affairs ministry has released a discussion paper to seek views from all segments of society on the country’s next cyber security blueprint Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Use blockchain for integrity and immutability checks

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Eoin Keary

Singapore’s SecureAge eyes US market

The Singapore-based supplier of encryption and anti-malware tools has set up a new office in Greater Washington, DC as the next logical step in its global expansion plan Continue Reading

By

• Aaron Tan, TechTarget

Police use of controversial facial recognition technology deemed lawful

In a landmark hearing, the High Court has ruled that police use of automatic facial recognition technology is lawful, but that it still infringes on privacy rights Continue Reading

By

• Sebastian Klovig Skelton , Senior reporter

Security pros doubt officials can enact effective security laws

Elected officials cannot be trusted to enact effective cyber security legislation and social media firms should be subject to strict privacy regulation, according to most information security professionals in a survey Continue Reading

By

• Warwick Ashford, Senior analyst

Tide Foundation aims to boost password security

While passwordless security remains just out of reach, a non-profit organisation has developed a mechanism that it says makes passwords exponentially more difficult to crack Continue Reading

By

• Warwick Ashford, Senior analyst

Latest Facebook security lapse exposes millions to account hijack

18 million UK users are among the more than 400 million at risk of account hijacking after phone numbers linked to their Facebook accounts were found in an open online database Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Blockchain is not for everyone, so look carefully before you leap

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Paddy Francis

Check Point warns of Android phishing attacks

Researchers at Check Point have identified a security flaw in Android-based smartphones that exposes vulnerable users to phishing attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Blockchain utility depends on business type and cost

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Petra Wenham

TrickBot Trojan switches to stealthy Ostap downloader

Operators of the TrickBot banking Trojan have switched to a new downloader to evade detection and analysis for a high-volume malicious spam campaign targeting business, researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals tap into web social engineering toolkit 

Security researchers have discovered a web social engineering toolkit that enables cyber criminals to create fake update notification campaigns  Continue Reading

By

• Warwick Ashford, Senior analyst

CISOs think cloud safer, but security fears remain

The majority of information security leaders think cloud is now safer than on-premise, but security fears remain, with recently breached and highly regulated organisations most concerned, poll reveals Continue Reading

By

• Warwick Ashford, Senior analyst

At least 47,000 servers vulnerable to remote attack

All organisations using Supermicro servers are being urged to update firmware to block remote attacks exploiting vulnerabilities in baseboard management controllers Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Risk mitigation is key to blockchain becoming mainstream

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Mike Yeomans, Information Security Forum

UK organisations join quantum comms pilot

Four UK companies are taking part in a pilot project to build the most secure communication infrastructure in Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Blockchain – balance risk and opportunity for smart security

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• RV Raghu, ISACA

CISOs turn to AI, detection, response and education

Information security leaders are looking to artificial intelligence, better detection and response capabilities and user education in the face of cyber threats, but need more budget, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Passwordless enterprise already possible, says RSA

The passwordless enterprise is getting easier to attain as the security industry gears up to support a passwordless future, says RSA’s identity chief. Continue Reading

GDS reveals details of digital identity pilot for passport data checks

The Government Digital Service (GDS) has published details of the planned pilot project for opening up passport data to companies that wish to offer digital identity services. GDS recently held a ... Continue Reading

By

• Bryan Glick, Editor in chief

How to mitigate IoT security risks to tap business benefits

Security concerns are preventing many businesses from adopting IoT-based technologies, but with a bit of planning, the business benefits can be realised by mitigating the risk Continue Reading

By

• Warwick Ashford, Senior analyst

Social media and enterprise apps pose big security risks

The lack of security policies in many business applications is putting enterprise data at risk and social media apps are the biggest source of malware, a poll of IT professionals reveals Continue Reading

By

• Warwick Ashford, Security Editor

UK gets first millionaire ethical hacker

Six months after the first millionaire ethical hacker was announced, five more have been recognised, including a Briton, who have collectively discovered nearly 5,000 vulnerabilities Continue Reading

By

• Warwick Ashford, Senior analyst