IT security

Vulnerable firmware in enterprise server supply chain

Researchers are warning of vulnerabilities in firmware from a third-party supplier that put some servers from Lenovo, Gigabyte and six other manufacturers at risk Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Translating GDPR compliance into business benefits

What strategies can information security professionals use to shift focus from General Data Protection Regulation fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Podcast: The Computer Weekly Downtime Upload – Episode 24

In this week’s episode of the Computer Weekly Downtime Upload podcast, Brian McKenna, Caroline Donnelly and Clare McDonald talk about using Alexa to search for medical advice, how a good cup of tea can solve most problems and whether more should be done to provide childcare at tech events Continue Reading

By

• Clare McDonald, Business Editor

NCSC calls out Microsoft over Dmarc reports

The UK’s cyber security agency has called out Microsoft for seriously undermining global email security by failing to provide crucial reports from its email platforms Continue Reading

By

• Warwick Ashford, Senior analyst

Digital safety skills initiative launched against cyber crime

Security industry partners have launched an initiative aimed at raising individuals’ digital safety skills to enable them to protect themselves and their families from most common cyber attacks Continue Reading

By

• Warwick Ashford, Senior analyst

UN resolution ignores special rapporteur’s call for halt to spyware sales

UN’s Human Rights Council adopts resolution to explore the impact of new and emerging digital technologies on human rights, but the text ignores a damning report by the council’s own expert on freedom of expression Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

NCSC reports on second year of cyber defence at scale

The UK’s National Cyber Security Centre releases a report on the second year of its Active Cyber Defence programme to demonstrate its effects in the public sector and wider UK cyber ecosystem Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Aligning data privacy with business objectives

What strategies can infosec pros use to shift focus from GDPR fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Sanjana  Mehta, (ISC)2

BA/Marriott GDPR fines: What they were for and how to avoid them

We talk to Mathieu Gorge, CEO of Vigitrust, about the BA and Marriott GDPR fines and what organisations can do to ensure they achieve compliance with GDPR and similar regulations Continue Reading

By

• Antony Adshead, Storage Editor

UK launches 5G security inquiry

The Joint Committee on the National Security Strategy is to probe the UK government’s approach to telecoms technology as a national security issue Continue Reading

By

• Alex Scroxton, Security Editor

Smartodds bets on Rubrik backup appliance with cloud archive

Betting intelligence analytics firm Smartodds replaced its old tape backup infrastructure with Rubrik appliances to cut management time and database restores from hours to minutes Continue Reading

By

• Antony Adshead, Storage Editor

Billion-dollar privacy penalties put CEOs on notice

Facebook’s potential $5bn settlement with the FTC follows notifications of planned GDPR fines for British Airways and Marriott International, underlining the importance of data stewardship Continue Reading

By

• Warwick Ashford, Senior analyst

No technical grounds to ban Huawei, DCMS told

Science and Technology Committee tells Department for Digital, Culture, Media and Sport that there are no technical grounds for it to exclude Huawei Continue Reading

By

• Alex Scroxton, Security Editor

Organisations turn to AI in race against cyber attackers

Businesses are racing to automate their defences as hackers and nation states launch increasingly sophisticated cyber attacks Continue Reading

By

• Bill Goodwin, Computer Weekly

UK public sector needs to prioritise mobile device security

Only 10% of public service stolen and lost mobile are recovered, underlining the need for mobile-centric, zero-trust model to reduce the risk, says MobileIron Continue Reading

By

• Warwick Ashford, Senior analyst

UK boards ignoring £30bn cyber risk

Despite the danger posed by cyber attacks to mid-sized companies, boards are not prepared to manage the risk and firms are over-confident in their cyber capabilities, report finds Continue Reading

By

• Warwick Ashford, Senior analyst

How Apollo 11 influenced modern computer software and hardware

On 16 July 1969, Apollo 11 began its historic journey to send man to the Moon. We look at the pioneering computer technology developed by Nasa Continue Reading

By

• Cliff Saran, Managing Editor

Security Think Tank: Don’t dismiss the business benefits of GDPR

What strategies can infosec pros use to shift focus from GDPR fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Richard Hunt, Turnkey Consulting

New FinSpy versions extend surveillance capabilities

New versions of the FinSpy malware for iOS and Android smartphones have extended targeted surveillance capabilities, warn security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Windows 10 to enable passwordless sign-in

Windows 10 users will soon be able to sign in to devices without using a password to encourage the use of two-factor authentication methods to improve security Continue Reading

By

• Warwick Ashford, Senior analyst

APAC IoT adoption improves amid challenges

More enterprises across the region are using the internet of things to track fleet vehicles and improve operations, but technology integration and security concerns are still holding back widespread adoption Continue Reading

By

• Edwin Yapp

We shouldn't need to debate online identity again, but it's right that we do

The latest select committee report by MPs into the progress of digital government in the UK has resurrected a question that has reared its head on several occasions in the past – do we need a ... Continue Reading

By

• Bryan Glick, Editor in chief

Securing your mobile estate – best practice for CIOs

The prevalence of mobile devices in every part of daily life is shaping how enterprises make choices about software and network infrastructure, but how do businesses go about securing these vast new endpoint estates? Continue Reading

By

• Christian Annesley

Attacks against AI systems are a growing concern

European research group says attacks against AI systems are already occurring, difficult to identify, and could be far more common than currently understood Continue Reading

By

• Warwick Ashford, Senior analyst

RiskIQ uncovers new Magecart campaign

A fresh Magecart campaign is breaching websites on a massive scale using indiscriminate attacks exploiting misconfigured Amazon S3 buckets, say researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Align compliance objectives with business goals

What strategies can information security professionals use to shift focus from GDPR fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Maxine Holt, Omdia

Dutch privacy watchdog tells banks not to use customer payment data for marketing

Autoriteit Persoonsgegevens tells banks to respect client privacy and not to market products based on spending data Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Max Schrems not calling for SCCs to be invalidated

The privacy activist at the centre of legal battle against Facebook is not calling for all standard contractual clauses to be invalidated, according to his non-profit privacy organisation Continue Reading

By

• Warwick Ashford, Senior analyst

Agent Smith mobile malware hits millions of devices

New mobile malware that exploits Android vulnerabilities has infected millions of devices, security researchers have discovered Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Changing the GDPR focus to business benefit

What strategies can information security professionals use to shift focus from General Data Protection Regulation fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Paddy Francis

Demand for ICO help escalates in GDPR's first year

The past year has seen increased demand across all support services offered by the UK’s privacy watchdog as new data protection laws went into force Continue Reading

By

• Warwick Ashford, Senior analyst

Marriott International facing £99m GDPR fine

Hotel group Marriott International is the second major company to be fined by the UK privacy watchdog for infringements of the GDPR Continue Reading

By

• Warwick Ashford, Senior analyst

ICO issues warning about using facial recognition technology

The UK privacy watchdog has ruled that any police force or private organisation using live facial recognition technology is processing personal data and needs to pay attention to data protection laws Continue Reading

By

• Warwick Ashford, Senior analyst

Data protection: How privacy can be a benefit, not a burden

With the growing number of data breaches, consumers are becoming increasingly concerned about how their data is used. Organisations can take advantage of this trend by treating data protection and user privacy as product features Continue Reading

By

• Peter Ray Allison

Security Think Tank: Benefits of GDPR compliance

What strategies can information security professionals use to shift focus from General Data Protection Regulation fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Petra Wenham

European Court hears case on EU-US data transfers

Facebook could be forced to rethink its legal position regarding transfers of data of EU citizens to the US, as the CJEU considers the validity of standard contractual clauses that many businesses rely on Continue Reading

By

• Warwick Ashford, Senior analyst

Drone tech and the roar of Malaysia’s flying dragons

Malaysia is ramping up initiatives to speed up the global growth of local technology champions in the drone tech sector Continue Reading

By

• Avanti Kumar

Steering a voyage to the cloud at Maersk

In this week’s Computer Weekly, we find out how the world’s largest shipping company, Maersk, is steering a course to public cloud. We analyse SAP’s latest attempts to ease customers’ software licensing concerns. And we hear how one London borough, Hackney, is taking a lead in transforming digital government across the capital. Read the issue now. Continue Reading

Nearly half of firms fear cloud apps make them insecure

Survey shows more than one-third of global companies appoint a CISO in the face of data breaches, and the UK is giving CISOs more power despite making fewer appointments Continue Reading

By

• Warwick Ashford, Senior analyst

TfL launches wireless device tracking to gather Tube data

Transport for London aims to use passenger movement data to make using the London Underground a more pleasant experience Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Embrace data protection as a necessary business process

What strategies can information security professionals use to shift focus from GDPR fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Mike Gillespie

British Airways facing £183m GDPR fine

British Airways is to appeal against a record fine for infringement of data protection rules for a breach of customer data in 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

IISP gains Royal Charter status

The UK finally has its first national professional body for cyber security that will be responsible for setting the standards for skills and knowledge in the industry to reduce the skills gap and increase diversity Continue Reading

By

• Warwick Ashford, Senior analyst

St John Ambulance praised for response to ransomware attack

Charity’s response to ransomware attack demonstrates that it is possible to ensure minimal disruption if properly prepared Continue Reading

By

• Warwick Ashford, Senior analyst

Security and privacy key to smart buildings and cities

Security and privacy capabilities are essential for stakeholders if they are to realise the benefits of smart buildings and cities, says expert whitepaper Continue Reading

By

• Warwick Ashford, Senior analyst

Implementing IoT – overcoming barriers to commercial adoption

Tim Wright from the Institute of Telecoms Professionals reports from a recent seminar exploring questions around the barriers to commercial, at-scale adoption of the internet of things, and how to overcome them Continue Reading

By

• Tim Wright, Institute of Telecommunications Professionals

FireEye ties Microsoft Outlook exploit to Iranian hackers

US Cyber Command has issued a warning that a patched Microsoft Outlook vulnerability is being exploited by unnamed threat actors, and recommended immediate patching Continue Reading

By

• Warwick Ashford, Senior analyst

Email still top security vulnerability, survey shows

Email is still the top security vulnerability, a survey shows, but security researchers caution that switching to instant messaging is not necessarily a solution in the longer term Continue Reading

By

• Warwick Ashford, Senior analyst

APAC experts weigh in on cyber security trends

The onslaught of cyber attacks being reported each day has been a wake-up call, but experts say businesses need to be mindful of the limitations of certain security measures Continue Reading

By

• Aaron Tan, TechTarget

Sodin ransomware exploiting Windows zero-day, Kaspersky warns

Security researchers are warning that a recently discovered type of ransomware is now exploiting a zero-day Windows vulnerability, and does not require user interaction to trigger an infection Continue Reading

By

• Warwick Ashford, Senior analyst

Top VPNs secretly owned by Chinese firms

Nearly a third of top VPNs are secretly owned by Chinese companies, while other owners are based in countries with weak or no privacy laws, potentially putting users at risk, security researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

Cloudflare outage: Firm blames global website outage on routine software update gone rogue

Content delivery provider traces outage back to failings that occurred during a routine update to its web application firewall service Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

A glossary of 10 essential network security terms

This network security glossary covers both old and new key terms -- such as zero trust networks and microsegmentation -- that can bolster anyone's security vocabulary. Continue Reading

By

• Michaela Goss, Senior Site Editor

CPS faces legal ruling over refusal to disclose emails with US on WikiLeaks and Assange extradition

A court will decide whether the Crown Prosecution Service can refuse to neither confirm nor deny the existence of correspondence with US on investigations into Julian Assange and WikiLeaks Continue Reading

By

• Bill Goodwin, Computer Weekly

UK consumers still concerned about personal data security

Most UK consumers are still concerned about the security of their personal data, indicating that organisations need to do more to gain consumer trust, such as implementing biometric controls Continue Reading

By

• Warwick Ashford, Senior analyst

Sweden’s Protective Security Act targets cyber risks

IT suppliers must comply with tighter cyber security requirements, but are being offered help from government agencies Continue Reading

By

• Gerard O'Dwyer

Podcast: The Computer Weekly Downtime Upload – Episode 22

In this week’s episode of the Computer Weekly Downtime Upload podcast, Brian McKenna, Caroline Donnelly and Clare McDonald talk about digital transformation in the NHS, Sky’s efforts to get more women working in tech and how big businesses could be risking extinction by ignoring IT Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Orvibo data leak puts security spotlight on IoT back end

The security of devices that make up the internet of things (IoT) is a top concern for many in the industry, but leaks from an IoT database highlights the importance of back-end security too Continue Reading

By

• Warwick Ashford, Senior analyst

Perfect storm for data science in security

After nearly 20 years of research, the perfect storm of computing technologies is finally enabling data science to realise its potential to make valuable contributions to improving cyber security capabilities Continue Reading

The UK manufacturing sector needs a digital upgrade

In this week’s Computer Weekly, the UK manufacturing sector is lagging behind on digital technology – we examine the challenges for the industry in becoming a global leader. Our buyer’s guide looks at enterprise social media and collaboration tools. And we find out how data science is helping to boost cyber security strategies. Read the issue now. Continue Reading

Singapore to beef up police tech capabilities

Singapore government singles out biometrics, data analytics and digital forensics as promising areas to boost crime-fighting efforts Continue Reading

By

• Aaron Tan, TechTarget

Few UK firms are cyber insured despite financial losses

More than one-fifth of UK firms have been impacted financially by cyber attacks, yet potentially more than three-quarters of companies polled have never been insured for cyber-related losses Continue Reading

By

• Warwick Ashford, Senior analyst

Symantec gearing up for future cyber security

Symantec is focusing on enabling businesses to secure data in the cloud after a string of acquisitions, but it also has its eye on the future, which will be all about empowering people, says CTO Hugh Thompson Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook’s privacy game – how Zuckerberg backtracked on promises to protect personal data

Facebook promised its users privacy then quietly abandoned its promises in pursuit of profits. Now it faces antitrust regulation Continue Reading

By

• Bill Goodwin and Sebastian Klovig Skelton

Huge jump in cyber incidents reported by finance sector

The number of cyber incidents reported by financial services firms increased nearly 12-fold in 2018 from 2017, mainly due to third-party failures, highlighting several key areas that need improvement Continue Reading

By

• Warwick Ashford, Senior analyst

How to get the basics of mobile device management right the first time

When adopting mobile device management, there are often fears around implementation and whether or not the strategy is even required Continue Reading

By

• Rene Millman

TIN coalition calls for industry action against cyber fraud

An industry group aimed at improving cyber security by tackling enduring challenges has called for collaboration in the fight against cyber fraud Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber crime reporting crucial, say UK police

UK police are gearing up to make it easier for business to report cyber crime, saying that under-reporting continues to be a challenge Continue Reading

By

• Warwick Ashford, Senior analyst

Comparing EDR tools: Cybereason vs. CrowdStrike vs. Carbon Black

Learn how tools from leading EDR vendors Cybereason, CrowdStrike and Carbon Black compare when it comes to helping security teams fight endpoint threats and respond to incidents. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

How to prevent cybersecurity attacks using this 4-part strategy

It can be daunting to defend an enterprise against cyberattacks, but these four defensive moves can help fortify and repel whatever comes your way. Continue Reading

By

• Dave Shackleford, Voodoo Security

Dutch bank and researchers begin defence against quantum computing’s dark side

ABN Amro is working with QuTech to ensure that banks can protect data against quantum computers in the future Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

How privacy could breathe new life into personalisation

As much of the advertising technology used by marketers to deliver personalised content online is deemed unlawful, there are signs regulation could actually be a win-win for both consumers and business – as long as the industry embraces change Continue Reading

By

• Jim Mortleman

DWP looks to extend digital identity capabilities

Department for Work and Pensions wants to reduce reliance on existing identity assurance methods such as Gov.UK Verify and face-to-face Continue Reading

By

• Bryan Glick, Editor in chief

Cloud snapshots and backups: How to protect data in the cloud

You often need more data protection than native cloud services will give. But should you choose backup or snapshots? And what about third-party backup in the cloud? Continue Reading

By

• Paul Stringfellow, Gardner Systems

Fido Alliance announces new standards

Fido Alliance announces new identity verification and IoT initiatives to expand the reach and impact of Fido authentication, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

Commercial interests put customer security at risk, survey shows

Firms are bypassing security to push products and services into the market, increasing security risks for the organisation and its customers, a poll of information security professionals shows Continue Reading

By

• Warwick Ashford, Senior analyst

Wider threat campaign behind Wipro breach

A sophisticated, far-ranging threat campaign was behind the breach at Indian IT services firm Wipro in April, which was not an isolated incident, RiskIQ report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Six arrested over €24m cryptocurrency theft

Police have arrested six people in the UK and the Netherlands in connection with the theft of cryptocurrency worth €24m Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore government forms digital industry office

New office will help local tech firms grow their regional footprint and build new capabilities in order to thrive in APAC’s booming digital economy Continue Reading

By

• Aaron Tan, TechTarget

How facial recognition technology threatens basic privacy rights

As adoption of facial recognition systems continues to grow worldwide, there is increasing concern that this technology could undermine fundamental privacy rights and how it can be kept in check Continue Reading

By

• Nicholas Fearn

UK cyber security progress stalled, says report

UK firms rank cyber attacks as a top business issue, but are stalling in cyber security best practice, lagging behind top performers in India Continue Reading

By

• Warwick Ashford, Senior analyst

There's AI and, er, AI....

It's hard to recall a recent presentation from a vendor that didn't include the AI or Machine-Learning buzz-phrases. I'm not just talking IT here - coffee vending machines probably also incorporate ... Continue Reading

By

• Steve Broadhead, Broadband Testing

AI will drive reskilling in problem solving, creativity and collaboration

A study from the Economist Intelligence Unit has found that executives do not believe that artificial intelligence will lead to job losses, but staff will need retraining Continue Reading

By

• Cliff Saran, Managing Editor

Saving bees with the internet of things

In this week’s Computer Weekly, we find out how internet of things technologies and “smart hives” are helping bee conservation. We examine Facebook’s new digital currency, Libra, and analyse its pros and cons. And we look at how IT leaders are rising to the challenge of delivering ethics and sustainability in tech. Read the issue now. Continue Reading

APT attack on telcos highlights need for comprehensive defence

A global cyber attack against multiple telecommunications firms underlines need for comprehensive approach to cyber defence, say researchers and industry commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Saudi banks trial blockchain-based identity technology at ATMs

Biometric and blockchain technologies are being used in tandem to provide ID verification at Saudi Arabian cash machines Continue Reading

By

• Alicia Buller

Airbus opens cyber innovation hub in Wales

Newport hub will focus on industrial control systems, artificial intelligence and data analytics Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attackers using wider range of threats

Businesses need to ensure they are able to defend against a wide range of threats in the face of increased malicious Office documents, Mac malware and web application exploits, report shows Continue Reading

By

• Warwick Ashford, Senior analyst

UK firms downloading vulnerable open source software

Vulnerable open source software components are posing a security threat to UK firms, according to a report that also shows how best practice, including automation, can reduce the risk Continue Reading

By

• Warwick Ashford, Senior analyst

Hospitality industry at highest risk of phishing

Benchmarking report shows average phish-prone percentage across all industries and sizes of organisations at 29.6% – up 2.6% since 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

UK takes world lead in surveillance camera security

Although the UK is sometimes referred to as “the most surveilled country” in the world, it has taken the lead in setting minimum security requirements for surveillance cameras. But how will this make a difference internationally? Continue Reading

By

• Warwick Ashford, Senior analyst

Nominations open for UK’s security unsung heroes

The Security Serious cyber awareness campaign has opened nominations for the fourth annual cyber security Unsung Heroes awards Continue Reading

By

• Warwick Ashford, Senior analyst

Parents don’t know enough about cyber careers

Research by the SANS Institute finds that while parents are aware of cyber security, they don’t know enough to encourage their children into cyber roles Continue Reading

By

• Clare McDonald, Business Editor

Small business not necessarily weakest security link

Small businesses may not be the weakest link in the supply chain after all, with a lack of skills and best practices being bigger factors, a study by (ISC)² reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Disaster planning: How to expect the unexpected

Focusing too much on specific disasters rather than considering an organisation’s data protection, network security and process requirements, can lead to unpredicted vulnerabilities Continue Reading

By

• Peter Ray Allison

Alibaba Cloud earns validation from Singapore banking association

Alibaba Cloud said it has become the first public cloud supplier in the industry to obtain the Outsourced Service Providers Audit Report (OSPAR) validation by the Association of Banks in Singapore ... Continue Reading

By

• Aaron Tan, TechTarget

CIOs experience stress, verbal and physical abuse during IT failures

Business continuity involves more than the investment in resilient IT – staff and their families need support too Continue Reading

By

• Cliff Saran, Managing Editor

Surveillance camera czar calls for stronger UK code of practice

Surveillance cameras are for supporting communities, not spying on them, but the UK needs stronger regulation and citizen engagement in this area, says surveillance camera commissioner Continue Reading

By

• Warwick Ashford, Senior analyst

Online porn age-verification checks delayed for six months

Changes to force UK internet users to prove their age to access adult content are postponed for a third time because of failure to notify the European Commission of key policy details Continue Reading

By

• Angelica Mari

Facebook officially unveils cryptocurrency plans

Facebook has released details about its Libra cryptocurrency, but questions still remain over how, and if, it will work Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor