IT security

There's AI and, er, AI....

It's hard to recall a recent presentation from a vendor that didn't include the AI or Machine-Learning buzz-phrases. I'm not just talking IT here - coffee vending machines probably also incorporate ... Continue Reading

By

• Steve Broadhead, Broadband Testing

AI will drive reskilling in problem solving, creativity and collaboration

A study from the Economist Intelligence Unit has found that executives do not believe that artificial intelligence will lead to job losses, but staff will need retraining Continue Reading

By

• Cliff Saran, Managing Editor

Saving bees with the internet of things

In this week’s Computer Weekly, we find out how internet of things technologies and “smart hives” are helping bee conservation. We examine Facebook’s new digital currency, Libra, and analyse its pros and cons. And we look at how IT leaders are rising to the challenge of delivering ethics and sustainability in tech. Read the issue now. Continue Reading

APT attack on telcos highlights need for comprehensive defence

A global cyber attack against multiple telecommunications firms underlines need for comprehensive approach to cyber defence, say researchers and industry commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Saudi banks trial blockchain-based identity technology at ATMs

Biometric and blockchain technologies are being used in tandem to provide ID verification at Saudi Arabian cash machines Continue Reading

By

• Alicia Buller

Airbus opens cyber innovation hub in Wales

Newport hub will focus on industrial control systems, artificial intelligence and data analytics Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attackers using wider range of threats

Businesses need to ensure they are able to defend against a wide range of threats in the face of increased malicious Office documents, Mac malware and web application exploits, report shows Continue Reading

By

• Warwick Ashford, Senior analyst

UK firms downloading vulnerable open source software

Vulnerable open source software components are posing a security threat to UK firms, according to a report that also shows how best practice, including automation, can reduce the risk Continue Reading

By

• Warwick Ashford, Senior analyst

Hospitality industry at highest risk of phishing

Benchmarking report shows average phish-prone percentage across all industries and sizes of organisations at 29.6% – up 2.6% since 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

UK takes world lead in surveillance camera security

Although the UK is sometimes referred to as “the most surveilled country” in the world, it has taken the lead in setting minimum security requirements for surveillance cameras. But how will this make a difference internationally? Continue Reading

By

• Warwick Ashford, Senior analyst

Nominations open for UK’s security unsung heroes

The Security Serious cyber awareness campaign has opened nominations for the fourth annual cyber security Unsung Heroes awards Continue Reading

By

• Warwick Ashford, Senior analyst

Parents don’t know enough about cyber careers

Research by the SANS Institute finds that while parents are aware of cyber security, they don’t know enough to encourage their children into cyber roles Continue Reading

By

• Clare McDonald, Business Editor

Small business not necessarily weakest security link

Small businesses may not be the weakest link in the supply chain after all, with a lack of skills and best practices being bigger factors, a study by (ISC)² reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Disaster planning: How to expect the unexpected

Focusing too much on specific disasters rather than considering an organisation’s data protection, network security and process requirements, can lead to unpredicted vulnerabilities Continue Reading

By

• Peter Ray Allison

Alibaba Cloud earns validation from Singapore banking association

Alibaba Cloud said it has become the first public cloud supplier in the industry to obtain the Outsourced Service Providers Audit Report (OSPAR) validation by the Association of Banks in Singapore ... Continue Reading

By

• Aaron Tan, TechTarget

CIOs experience stress, verbal and physical abuse during IT failures

Business continuity involves more than the investment in resilient IT – staff and their families need support too Continue Reading

By

• Cliff Saran, Managing Editor

Surveillance camera czar calls for stronger UK code of practice

Surveillance cameras are for supporting communities, not spying on them, but the UK needs stronger regulation and citizen engagement in this area, says surveillance camera commissioner Continue Reading

By

• Warwick Ashford, Senior analyst

Online porn age-verification checks delayed for six months

Changes to force UK internet users to prove their age to access adult content are postponed for a third time because of failure to notify the European Commission of key policy details Continue Reading

By

• Angelica Mari

Facebook officially unveils cryptocurrency plans

Facebook has released details about its Libra cryptocurrency, but questions still remain over how, and if, it will work Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Enterprises challenged with security basics

Visibility, security tool overload and manual reporting are cited as top concerns by UK security leaders, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

UK to launch security standard for surveillance cameras

The UK is launching the world’s first voluntary cyber security standard and compliance certification mark for the manufacturers of surveillance cameras Continue Reading

By

• Warwick Ashford, Senior analyst

Most mobile apps vulnerable to malware

iOS and Android apps equally vulnerable to being exploited remotely by malware, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Lloyds Bank uses community effort to push out DevOps

The developers and IT operations teams were once separate. Now they are one. The challenge is getting this to scale across the business Continue Reading

By

• Cliff Saran, Managing Editor

IoT Security Foundation publishes smart building whitepaper

The IoT Security Foundation has published a guide on security for smart buildings to highlight key issues and gather feedback to inform future guidance for industry stakeholders Continue Reading

By

• Warwick Ashford, Senior analyst

Converged security takes centre stage at IFSEC

The importance and benefits of combining physical and cyber security was underlined in the opening session of the 2019 IFSEC security conference Continue Reading

By

• Warwick Ashford, Senior analyst

UK government pushes data-driven agenda

A smart data report has been published with consultations under way, while an open call for evidence has been launched to help shape the national data plan Continue Reading

By

• Angelica Mari

Signify goes after Wi-Fi with range of Li-Fi office lighting

Although analyst Gartner has urged IT departments to approach Li-Fi with caution, the use of light as an alternative to Wi-Fi is set to gain momentum Continue Reading

By

• Cliff Saran, Managing Editor

Debugging bug bounty programmes

Bug bounty programmes have become popular, but poor programme management can lead to development teams becoming overwhelmed and bugs being missed. Continue Reading

Applying AI to road safety

In this week’s Computer Weekly, we visit a Tokyo project where artificial intelligence is helping to improve road safety by detecting potential subsidence. As bug bounty programmes become popular, we look at what’s involved and the pitfalls to avoid. And we discuss digital development in healthcare with NHS England. Read the issue now. Continue Reading

UK to host world’s first surveillance camera day

The UK is to host the world’s first surveillance camera day to raise awareness about surveillance cameras and generate a debate about how they are used Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore faced fewer cyber threats in 2018

Despite the fall in the number of common cyber threats last year, Singapore will continue to face advanced persistent threats, CSA warns Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Business needs to see infosec pros as trusted advisers

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• RV Raghu, ISACA

A good business disaster recovery plan considers IT, staffing

Not sure if your disaster recovery plan takes business needs into account? A good plan should cover business operations, as well as technology and staffing requirements. Continue Reading

By

• Alan R. Earls

DevSecOps is key to uniting opposing forces

Unifying DevOps and security teams with the aid of automation will bring harmony and added business benefits, says systems engineer Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Top infosec task is getting on board agenda

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Petra Wenham

Asco breaks silence on ransomware attack

A week after reportedly being hit by a ransomware attack, Belgium-based mechanical equipment manufacturer Asco has finally provided some details Continue Reading

Inside F5’s cyber security playbook

F5 Networks' CISO talks up measures that the application delivery and security specialist is employing to fend off cyber attackers that come knocking on its doors Continue Reading

By

• Aaron Tan, TechTarget

Building a cyber-physical immune system

Shantanu Rane, researcher in cyber-physical systems security at the Palo Alto Research Center, explains how our own immune systems can inspire the design of modern cyber-physical systems Continue Reading

By

• Shantanu Rane, PARC

Security Think Tank: Infosec needs to avoid FUD and keep it real

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Ellie Hurst, Advent IM

Innovation drives Nominet to cyber security

Embracing an innovation strategy for a mature organisation led domain name registry Nominet to found a cyber security business based on its core expertise, its CEO tells London Tech Week Continue Reading

By

• Warwick Ashford, Senior analyst

CW Europe: Why are Dutch companies slow to take advantage of the IoT?

Many organisations in the Netherlands are missing out on the benefits of the internet of things because they lack awareness of its potential. Also read why construction of Apple's first non-US datacentre has halted in Denmark, and why some scientists have raised questions about the effects of 5G mobile phone radiation on public health. Continue Reading

UK firms need to address risky user habits

McAfee calls for companies to ramp up their security culture and improve the integration of technical security controls to minimise exposure from workers Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook London hiring spree focuses on tackling online harms

Facebook is hiring for 500 tech jobs in the capital in the next six months, with a particular focus on seeking out and clamping down on malicious content and fake accounts, and curbing other harmful behaviour on its platforms Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Security risk ratings key to security/business understanding

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Maxine Holt, Omdia

AI-enabled cyber attacks a reality soon, warns Mikko Hypponen

Technology continues to shape human conflict and artificial intelligence will be no exception, so business needs to up its ability to detect attacks and respond, says security expert Continue Reading

By

• Warwick Ashford, Senior analyst

Operational technology security improving, but attack surface continues to grow

Critical national infrastructure providers and others are improving cyber security capabilities around industrial control systems, but the cyber threat remains high and continues to evolve, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Focus on business impact and likelihood of cyber attacks

How can cyber security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Paddy Francis

Austrian Supreme Court green-lights GDPR case against Facebook

A potential landmark case against Facebook for violating General Data Protection Regulation rights has been given the go-ahead by the Austrian Supreme Court Continue Reading

By

• Warwick Ashford, Senior analyst

Why the rise of IT managed by the business is driving creative thinking

Organisations that encourage business units to implement and run their own IT systems have an edge over competitors that rely entirely on the IT department, research from Harvey Nash and KPMG reveals Continue Reading

By

• Steve Bates, KPMG

In a cyber data breach, preparation is key

The importance of preparation was strongly emphasised at a breach response workshop hosted by DAC Beachcroft as part of London Tech Week Continue Reading

By

• Warwick Ashford, Senior analyst

Cisco shows off AI-driven network analysis at customer event

New tools to help IT departments better understand network behaviour and predict potential problems were among a series of announcements made on the opening day of Cisco Live in the US Continue Reading

By

• Alex Scroxton, Security Editor

Government increases efforts to drive Verify uptake

Renewed push to create a ubiquitous digital identity market will include a consultation with the private sector and the creation of a dedicated unit Continue Reading

By

• Angelica Mari

Are schools delivering on digital skills?

In this week’s Computer Weekly, we look at the differing approaches to teaching computer science across the UK and assess the pros and cons of each. Our latest buyer’s guide examines the technologies and best practices of multicloud environments. And we find out what you get for your money when buying cyber insurance. Read the issue now. Continue Reading

Most code-signing processes insecure, study shows

The majority of organisations are failing to enforce security for code-signing processes, providing opportunities for cyber criminals, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

MP brands Huawei exec a ‘moral vacuum’ as operators demand 5G clarity

Huawei chief security officer John Suffolk faces tough questions from parliament’s Science and Technology Select Committee over the firm’s links to the Chinese government Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Frame cyber security impacts in business contexts

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Simon Persin, Turnkey Consulting

Implementing Dmarc a top priority for UK

Basic email security should be a top priority for UK firms, followed by reducing third-party web exposure and monitoring data flows leaving the enterprise, a Rapid7 study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Infosec letter to the board

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Large firms look to zero-trust security to reduce cyber risk

In the face of increasing cyber breach risk as organisations move to hybrid multi-cloud IT environments, just over half of large firms in Europe are planning a zero-trust approach to security Continue Reading

By

• Warwick Ashford, Senior analyst

‘A breath of fresh air’ for Gov.uk Verify?

Three months ago, the Government Digital Service (GDS) appointed the first ever director of digital identity, Lisa Barrett – tasked with taking on the troubled Gov.uk Verify programme. Barrett ... Continue Reading

By

• Bryan Glick, Editor in chief

NotPetya offers industry-wide lessons, says Maersk’s tech chief

There are several key industry-wide lessons to be learned from the NotPetya attack in 2017, according to the information chief at one of the companies most heavily impacted Continue Reading

By

• Warwick Ashford, Senior analyst

Threat vs trust: the overlooked power of words

Words have power – in particular, your choice of words modifies how your readers or listeners react to what you write or say. Politicians do this sort of thing all the time, swapping one word or ... Continue Reading

By

• Bryan Betts, Freeform Dynamics

Misconfigured container services are a security risk

Researchers at Palo Alto Networks have released details of the scale of misconfigured and exposed container services putting organisations at risk of cyber attack Continue Reading

By

• Warwick Ashford, Senior analyst

Apple tackles iPad-to-Mac app portability

Xcode framework enables app developers to use one set of source code to target either iPadOS or MacOS Continue Reading

By

• Cliff Saran, Managing Editor

How ASEAN firms are using AI to combat cyber threats

Artificial intelligence tools are becoming a vital part of the security arsenal for organisations and cyber criminals alike Continue Reading

By

• Ai Lei Tao

Weak cyber security top challenge, says NCSC chief Ciaran Martin

UK cyber security agency NCSC is focusing on practical support and making the internet and technology safer to use, but says the area that needs most attention is improving basic cyber security in firms, says agency chief Continue Reading

By

• Warwick Ashford, Senior analyst

TNMOC showcases role of Wren Colossus operators in D-Day

Colossus was used to decypher German Lorenz encrypted messages, one of which appears to have given the Allies the green light Continue Reading

By

• Cliff Saran, Managing Editor

Firms face targeted bespoke cyber attacks, dark web study reveals

Academic study exposes prolific availability and demand for tailored malware, network access and corporate espionage services, which suggests many firms’ cyber defences are below standard Continue Reading

By

• Warwick Ashford, Senior analyst

Legacy IT systems a significant security challenge

Information security professionals need to work closely with the business to identify critical legacy IT systems to ensure security risks are managed effectively, CISO tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Digital transformation an opportunity for security

Digital transformation is an opportunity not only for the business to up its game, but also for security teams to engage with and win over the business, CISO tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Is GDPR worth the cost?

Regulations have costs, which are meant to be recouped by the expected benefits. But who decides whether this is a good deal? Ultimately, it’s you Continue Reading

By

• Tim Worstall, Adam Smith Institute

Joining the dots to deliver effective cyber security

In too many organisations, cyber security is dislocated and siloed. Security chiefs need to take a more joined-up approach, but that is likely to mean a rethink of how the security team operates Continue Reading

By

• Ed Tucker, Human Firewall

London could be world cyber risk leader, says ex-Lloyd’s chief

Collaboration across the cyber insurance, technology and security organisations in London could make the capital a leading world centre on these topics, says former Lloyd’s of London boss Continue Reading

By

• Warwick Ashford, Senior analyst

Making threat intelligence greater than the sum of its parts

Organisations can become more secure if they join up their varied sources of intelligence about business threats, and avoid losing valuable information within individual silos Continue Reading

By

• Elliott Rose & Matthew Arnold

DNS – a security opportunity not to be overlooked, says Nominet

Domain name system data is the best-kept secret for eliminating network cyber threats, Nominet tells Infosecurity Europe attendees Continue Reading

By

• Warwick Ashford, Senior analyst

Nearly two-thirds of businesses hit by credential abuse

Most businesses admit to breaches relating to abuse of user credentials, according to a report that highlights cyber hygiene failings in the UK and the importance of greater visibility and integration to cyber defence capability Continue Reading

By

• Warwick Ashford, Senior analyst

Big tech chiefs boycott parliamentarians investigating citizens’ privacy

An International Grand Committee on Big Data, Privacy and Democracy considers whether failure to protect citizens’ privacy constitutes grounds for anti-trust regulation against Facebook and other big tech companies Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Businesses investing blindly in cyber security

Businesses need to find out what their real cyber risks and weaknesses are before investing in new technologies, says ethical hacker Continue Reading

By

• Warwick Ashford, Senior analyst

Deterministic data-based AI key for security

AI-based cyber security systems have enormous potential, but under specific conditions that are essential for success, AI expert tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

CIO interview: Gary Foote, CIO, Rich Energy Haas F1

When he was offered the opportunity to set up the technology for a new Formula One team from scratch, CIO Gary Foote couldn’t wait to get on the starting line Continue Reading

By

• Mark Samuels

Cyber crime widely under-reported, Isaca study shows

Cyber crime, which is the top cyber threat to business, remains widely under-reported, and only a third of organisations are confident in their ability to detect and respond to threats, a study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Beware of security blind spots in encrypted traffic

The growth of encrypted traffic has put the spotlight on intrusion prevention systems that help to surface cyber attacks conducted under the cloak of network encryption Continue Reading

By

• Aaron Tan, TechTarget

Australia’s Notifiable Data Breaches scheme drives compliance but issues remain

Australia’s data breach notification rules have largely been complied with, but some quarters are calling for more clarity on the reporting threshold and tougher action against errant firms Continue Reading

By

• Beverley Head

Business leaders failing to address cyber threats

Businesses are failing to address growing cyber threats as business leaders admit to knowledge gaps, a lack of resources and confusion about who is responsible for data breaches, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Passing the baton on Cybersecurity Skills

This year will be the first time I visit Infosec with no agenda. Or to be more precise I will have a Community Safety rather than a Cybersecurity Skills Agenda. This has caused me to take a cool ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Data governance: The importance of getting it right

With ever-increasing storage capacity, organisations are needing to take more control of their file management systems with thorough data governance policies. Otherwise, they run the risk of project data being exposed Continue Reading

By

• Peter Ray Allison

Facebook loses bid to halt European court decision on EU-US data sharing

Irish Supreme Court dismisses attempt by Facebook to prevent the European Court of Justice considering the validity of US-EU data transfers, after Austrian lawyer Max Schrems argued that they put the privacy of EU citizens at risk Continue Reading

By

• Bill Goodwin, Computer Weekly

GCHQ urged to abandon plans to access encrypted chats

Tech companies and security and policy experts are calling for more dialogue with GCHQ on encryption, urging it to ditch its proposal for eavesdropping on encrypted chats Continue Reading

By

• Warwick Ashford, Senior analyst

A lack of skills and ownership are top challenges to OT security

A lack of skills, visibility and clarity on which business function is responsible for securing operational technology are the biggest challenges to managing the risk, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

2.3 billion business and consumer data files exposed online

In the year since the GDPR compliance deadline, the number of data files exposed online without adequate protection is up more than 50% due to misconfigured security controls, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Salesforce completes Pardot fix after 12 days’ disruption

Plug was pulled on 17 May after a data script went wrong. Most users have had full access since 18 May, but 10 services remained down Continue Reading

By

• Cliff Saran, Managing Editor

Hackers targeting UK universities a threat to national security

Poorly defended UK university research that is mainly commissioned by government is a top target for hackers, putting national security at risk, a study reveals, underlining the need for better cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

Turla APT group beefs up cyber attack tool

An advanced persistent threat cyber espionage group has improved its tools to attack diplomatic targets, making their activities more difficult to detect and block Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber weapons readily available to criminals, researchers warn

Security researchers have discovered an attack campaign infrastructure designed to scan, brute-force and infect tens of thousands of MS-SQL and PHPMyAdmin servers Continue Reading

By

• Warwick Ashford, Senior analyst

IT in the Tory Candidates' Manifestos

I added a comment on Dominic Rabb's inclusion of degree apprenticeships in his call for Fairness and Choice to my recent blog on the IfA apprenticeship review.  In his opening campaign letter Rory ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

ICO to shortlist Sandbox applicants

Privacy watchdog’s Sandbox service aims to help develop innovative and beneficial products and services that are privacy compliant Continue Reading

By

• Warwick Ashford, Senior analyst

Perfect storm for data science in security

After nearly 20 years of research, the perfect storm of computing technologies is finally enabling data science to realise its potential to make valuable contributions to improving cyber security capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Many search engine users unaware of personal data collection

Many users of online search engines are still unaware that data is being collected about them for personalised advertising, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Dutch IT security firm dumps corporate structure

Boss of Netherlands-based Computest turns to self-management model to make company more nimble Continue Reading

By

• Kin Loohuis

Australian firms coming to grips with AI ethics

Australian businesses are warming up to AI, but just two in five have standards and guidelines for AI ethics, a study finds Continue Reading

By

• Aaron Tan, TechTarget