IT security

Australians lost half a billion dollars to scams in 2018

Most of the losses went to investment scams as tricksters found innovative ways to dupe victims into parting with their money Continue Reading

By

• Aaron Tan, Informa TechTarget

Facebook faces fresh privacy actions from regulators

Facebook faces legal action from Canada after it dismissed regulators’ findings that it failed to protect customer privacy. The firm has set aside $5bn to settle a privacy action in the US and faces a new investigation in Ireland Continue Reading

By

• Bill Goodwin, Investigations Editor

Security Think Tank: Surviving the existential cyber punch part 2

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Gregory Touhill, ISACA

Top lessons from cyber attacks

Cyber security experts weigh in on lessons learned from cyber attack experiences, underlining that recovery capability is as important as defence Continue Reading

By

• Warwick Ashford, Senior analyst

Huawei leak inquiry launched

Cabinet secretary Mark Sedwill has instituted an inquiry aimed at discovering who leaked confidential discussions about UK mobile operators’ use of Huawei in their future 5G networks to the press Continue Reading

By

• Alex Scroxton, Security Editor

GDPR cases drive bigger budgets for Nordic regulators

High-profile General Data Protection Regulation cases in Finland and Sweden have increased the workload for regulators, which are to receive an increase in funding Continue Reading

By

• Gerard O'Dwyer

Public becoming more aware of privacy abuses and unethical tech

Widespread abuses of privacy, biometric information and artificial intelligence mean the internet is in poor health, but growing popular awareness of its problems gives some cause for hope, says the Mozilla Foundation Continue Reading

By

• Alex Scroxton, Security Editor

UK up for cyber challenge but work to be done, says minister

Lidington says National Cyber Security Strategy has “revolutionised the UK’s fight against cyber threats” Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC and ICO pledge to support data breach victims

The UK’s cyber security agency and privacy watchdog have agreed to work together to improve support for data breach victims and enhance cyber guidance Continue Reading

By

• Warwick Ashford, Senior analyst

European Union to create central biometrics database

New rules will see the introduction of a repository of personal data from hundreds of millions of citizens to support law enforcement across member states Continue Reading

By

• Angelica Mari

No final decision taken on Huawei 5G ban, government claims

Culture secretary tells MPs that a final decision on use of Huawei in UK 5G networks has not been taken, and says government is taking the leak of confidential discussions at the National Security Council very seriously Continue Reading

By

• Alex Scroxton, Security Editor

Cabinet Office addresses 5G security issue

Cabinet Office uses NCSC conference to lay out government’s approach to the security of 5G networks, as controversy grows around using equipment from Chinese supplier Huawei Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC looks to industry to scale Active Cyber Defence

The national cyber security agency is calling on wider government organisations as well as industry to help scale automated cyber attack blocking systems country-wide Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC to scale up intelligence sharing, says GCHQ director

The GCHQ director has outlined the agency’s cyber security mission in the third decade of the internet age at CyberUK, promising to scale up the sharing of declassified cyber intelligence with industry Continue Reading

By

• Warwick Ashford, Senior analyst

PM May approves Huawei for use in 5G networks despite opposition

The UK’s National Security Council has approved the use of Huawei’s networking equipment in parts of the country’s 5G mobile networks in spite of widespread opposition Continue Reading

By

• Alex Scroxton, Security Editor

Global intelligence agencies share UK stage for first time

Representatives of intelligence agencies from the Five Eyes alliance are to share a public platform in the UK for the first time at this year’s NCSC CyberUK conference Continue Reading

By

• Warwick Ashford, Senior analyst

Casual collaboration comms pose security risk, survey shows

UK employees have a worryingly casual attitude to workplace communications, underling the need for employers to take steps to counter related cyber attack vulnerabilities Continue Reading

By

• Warwick Ashford, Senior analyst

WannaCry hero pleads guilty, urges others to stay on ‘good side’

Briton hailed as WannaCry hero finally pleads guilty to charges of writing and distributing malware, but urges security researchers to stay away from the “dark side” Continue Reading

By

• Warwick Ashford, Senior analyst

APAC set for blockchain boom

Led by China, spending on blockchain technology in Asia-Pacific excluding Japan will surpass $2bn by 2022 Continue Reading

By

• Aaron Tan, Informa TechTarget

NCSC urges better online security practices

UK cyber security agency is urging citizens to improve online safety and password security after research reveals most-hacked passwords and a survey exposes gaps in online security Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook leaks: Zuckerberg turned data into dollars in ruthless battle with competitors

Facebook’s CEO ruthlessly exploited personal data shared by its users to turn Facebook into the biggest social network, but internal documents show that privacy appeared to be an afterthought for executives Continue Reading

By

• Bill Goodwin, Sebastian Klovig Skelton and Duncan Campbell

20 firms join Tech Nation’s cyber security scale-up programme

Tech Nation scale-up programme is designed to boost the UK’s cyber sector, accelerate the growth of its top companies and build a robust, cross-industry network Continue Reading

By

• Warwick Ashford, Senior analyst

State-sponsored hackers are hijacking DNS, researchers warn

A DNS-hijacking campaign targeting the Middle East and Africa may lead to actors more broadly attacking the global DNS system Continue Reading

By

• Warwick Ashford, Senior analyst

UK government to introduce online porn age checks

World-first regulations will see age verification introduced in July and enforced by the British Board of Film Classification. Non-compliant sites risk withdrawal of payment services or being blocked Continue Reading

By

• Angelica Mari

Nearly a quarter of tech firms do not security check products

Nearly a quarter of organisations polled do not run security checks on products, and nearly a third admitted to shipping products with known security vulnerabilities, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Politics, privacy and porn: the challenges of age-verification technology

The age-verification requirements of the Digital Economy Act are to come into force in July this year, but registering people’s personal details for accessing age-restricted content carries significant risks and challenges Continue Reading

By

• Peter Ray Allison

TfL suspends Wi-Fi service as Extinction Rebellion spreads

Transport for London has cut off its public Virgin Media Wi-Fi service to disrupt climate change protests Continue Reading

By

• Alex Scroxton, Security Editor

Morrisons to launch fresh appeal against breach liability ruling

Supermarket chain Morrisons is to launch a second appeal against a High Court ruling that found it liable for a data leak by a former employee Continue Reading

By

• Warwick Ashford, Senior analyst

Wipro admits to potential breach to employee accounts by phishing attack

Indian IT services company Wipro is investigating a phishing attack, which hit some staff email accounts and launched attacks on customer environments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Singtel and NUS claim quantum breakthrough

Researchers from Singtel and the National University of Singapore have succeeded in coordinating the paths of photons across a fibre network to drive wider adoption of quantum key distribution Continue Reading

By

• Aaron Tan, Informa TechTarget

Security Think Tank: Surviving the existential cyber punch

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Gregory Touhill, ISACA

Huawei cyber security chief John Suffolk: It’s not our culture to be aggressive

John Suffolk, global cyber security and privacy officer at China-based telecoms equipment supplier Huawei, tells Huawei Analyst Summit growth is the best answer to US criticism Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Energy industry needs to up cyber defences, warns report 

Cyber threat actors are advanced and persistent, but firms in the energy industry are using outdated systems and technology to save money, putting them at risk of cyber attacks, warns F-Secure report Continue Reading

By

• Warwick Ashford, Senior analyst

NatWest eases business payments with biometric authentication on mobile

NatWest is making it easier and safer for businesses to make payments of any size via a mobile app using biometric authentication technology Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

How Palo Alto Networks fends off its cyber adversaries

Palo Alto Networks CIO Naveen Zutshi talks up the company’s approach in keeping threat actors at bay Continue Reading

By

• Aaron Tan, Informa TechTarget

Facebook takes extraordinary legal steps to contain document leak

Facebook targets journalists and news organisations for computer searches Continue Reading

By

• Bill Goodwin, Investigations Editor

Zero trust is about more than products

The zero trust security model is more than just products and network segmentation, it’s an architectural design principle with identity at its core that needs to be applied enterprise-wide, says KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Seven steps to manage risk of catastrophic cyber attack

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Simon Persin, Turnkey Consulting

Automation will bring job security, say most IT security pros

Most security professionals believe that although automation can support humans, it will not result in a reduction in job opportunities, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC seeks new breed of cyber security startups

The UK intelligence community is seeking to promote a new breed of technology startup to help detect, respond to and facilitate rapid recoveries from cyber attacks on the UK Continue Reading

By

• Warwick Ashford, Senior analyst

How botnets pose a threat to the IoT ecosystem

While connected devices are transforming our personal and working lives in a multitude of ways, they are also a growing security risk – attackers are hijacking these devices and turning them into internet of things botnets Continue Reading

By

• Nicholas Fearn

Security Think Tank: Cyber attack survival not a matter of luck

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Paddy Francis

Bounty UK fined £400,000 for sharing personal data unlawfully

UK pregnancy and parenting club fined for “unprecedented” level of unauthorised sharing of personal data by operating as a data broking service Continue Reading

By

• Warwick Ashford, Senior analyst

Police local cyber crime units get multimillion pound boost

UK policing marks the completion of the local phase of a national cyber crime programme to complement regional and national response capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Government breach data highlights cyber skills misconception

Results of a government-sponsored survey highlight a dangerous misconception around cyber skills, according to a former GCHQ trainer Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Aim for integrated resilience, continuity and recovery

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Mike Gillespie

Most organisations still lack incident response plans

Most companies lack incident response plans, others fail to test them and nearly half are not GDPR compliant, but some report improved security through automation, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Triton industrial malware group still active, researchers warn

Security researchers have found traces of a Russian-linked cyber attack group in another critical infrastructure facility, prompting calls for increased diligence around industrial cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

CW Middle East: Visibility and security of networks are top IT priorities

The 2019 Computer Weekly/TechTarget IT Priorities survey shows that enterprise buyers in the Middle East, like those in the UK and Europe, are looking to lock down their networks in the face of an almost constant barrage of threats and malicious actors. Also read how Facebook planned to use its Android app to track the location of its customers and to allow advertisers to send political advertising, and what further details operator O2 has revealed about how it is planning for the advent of 5G. Continue Reading

ANZ business users calling the shots in ICT decisions

Business users in ANZ firms have more sway about technology decisions, but it is not always a case of shadow IT Continue Reading

By

• Beverley Head

Security Think Tank: Incident response vital to guard against catastrophic cyber attack

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Maxine Holt, Omdia

A quarter of phishing emails bypass Office 365 security

Cloud-based email is leaving enterprises vulnerable to phishing attacks capable of giving cyber criminals access to a wide range of critical data, warn security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Why cyber security needs to be prioritised at board level

Despite the rising number of headline-grabbing security breaches, many company executives are still not prioritising cyber security in the boardroom Continue Reading

By

• Tom Kranz, Cyber Lab

Digital doppelgangers for sale to defeat anti-fraud tech

Security researchers have uncovered an online market selling digital identities to help cyber criminals to defeat anti-fraud technologies, as financial cyber crime becomes a bigger threat than ever before Continue Reading

By

• Warwick Ashford, Senior analyst

UK councils team up to boost cyber security

Three UK councils and data analysis firm Splunk have teamed up to improve cyber defence capabilities and maintain their security systems Continue Reading

By

• Warwick Ashford, Senior analyst

How simulated disaster management can help tackle security skills gap

With the increasing need for cyber security professionals, organisations are turning to new ways to address the skills gap facing the security sector Continue Reading

Using data science at Sainsbury’s

In this week’s Computer Weekly, we talk to one of the UK’s leading retailers, Sainsbury’s, about its data science strategy and how it helps the firm to better understand customers. We take a detailed look at the evolution of the business intelligence market and the impact of big data. And we find out how simulated disaster management can tackle the security skills gap. Read the issue now. Continue Reading

Security Think Tank: BC/DR plan key to cyber attack survival

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Petra Wenham

Podcast: The Computer Weekly Downtime Upload – Episode 11

In this week’s episode of The Computer Weekly Downtime Upload podcast, the team discuss Google’s forthcoming cloud conference, how tech can be used to boost social inclusion, while data analytics is being hailed as a means of assisting MI5 with with its terrorism detection work Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

GCHQ cyber courses for teens recognised by qualification board

The Scottish Qualifications Authority has accredited courses pioneered by GCHQ’s National Cyber Security Centre to teach teenagers about cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware getting more targeted, warns Flashpoint

Ransomware attacks are becoming more targeted and designed to infect different sized organisations in specific industries and regions, say security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR at a critical stage, says information commissioner

The ICO is calling on data protection officials to help kick off the next phase of the GDPR by embedding sound data governance at its annual conference, where another DPO was recognised for excellence Continue Reading

By

• Warwick Ashford, Senior analyst

How APAC firms can tame the data beast

Companies and data management experts across Asia-Pacific reveal how they are tackling data management challenges that have been compounded by growing cloud usage and compliance requirements Continue Reading

By

• Aaron Tan, Informa TechTarget

UK plans for online safety laws not enough, says BCS

Government plans for online safety laws need to be complemented with a national cyber safety programme in schools, according to IT and computer science professional and educational body Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: How to reduce the impact of a potential cyber extinction event

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Andy Jones, Information Security Forum (ISF)

Critical infrastructure under relentless cyber attack

A lack of visibility into the attack surface, inadequate security staffing and reliance on manual processes undermine operational technology security capabilities, a study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

London council fined by the ICO for disclosing personal information held on Met Police Gangs Matrix

The London Borough of Newham has been fined for disclosing the sensitive personal information of more than 200 individuals that police held information on Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

European firms see value in ‘known good’ approach to security

European data protection regulations are driving enterprise interest in an approach to security being championed by virtualisation software maker VMware, says the company’s security lead Continue Reading

By

• Warwick Ashford, Senior analyst

Huawei ban will cost UK plc £6.8bn, delay 5G

If the UK government decides to impose tighter restrictions, or an outright ban on the use of Huawei in national 5G networks, the country faces severe consequences, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

The rise of digital workers and the bot economy

Automation Anywhere’s booming business, particularly in the Asia-Pacific region, is a sign of things to come in the new world of work where digital workers can be hired from a bot store Continue Reading

By

• Aaron Tan, Informa TechTarget

Enhanced Wi-Fi cuts costs to maximise efficiency at Dorset school

The need for cost-effective, manageable wireless infrastructure without additional annual licence fees drove Lytchett Minster School’s decision to upgrade its on-site network with TP-Link Continue Reading

By

• Alex Scroxton, Security Editor

Researchers uncover US-based malware distribution centre

More than a dozen US-based web servers are operating as the malware equivalent of an Amazon fulfilment centre to target businesses, security researchers have found Continue Reading

By

• Warwick Ashford, Senior analyst

Document-based malware on the rise, businesses warned

Document-based malware spiked in the first quarter of the year, building on a gradual rise in the past year, warn researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Third-party Facebook apps expose 540 million users’ details

Researchers have discovered another trove of Facebook users’ details, showing there is still no control over data shared with third parties, potentially exposing Facebook to more regulatory and legal action Continue Reading

By

• Warwick Ashford, Senior analyst

Fresh approach needed to reap cloud security benefits

Transitioning to cloud-based services offers businesses an opportunity to improve security capabilities, but only if they adopt a proactive cloud-native approach, says Palo Alto Networks cloud security expert Continue Reading

By

• Warwick Ashford, Senior analyst

Government urges businesses and charities to up cyber security

The UK government is urging businesses and charities to take action to prevent cyber attacks as the costs go up, despite an overall reduction in breaches, partly driven by new data protection laws Continue Reading

By

• Warwick Ashford, Senior analyst

Employees lack awareness of corporate data-sharing policies

IT leaders believe their organisations are highly likely to lose data in the next 12 months due to accidental data breaches Continue Reading

By

• Cliff Saran, Managing Editor

Akamai to open second traffic scrubbing centre in Australia

New centre in Melbourne will meet growing demand for scrubbing services to mitigate the impact of distributed denial of service attacks in Australia Continue Reading

By

• Beverley Head

Women now almost a quarter of cyber security workforce

Women in cyber security are younger, have achieved higher levels of education and are assuming leadership roles at higher rates than men, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Four in 10 leading banks failing on email fraud protection

Top UK traditional and challenger banks risk exposing customers to email fraud, a study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attacks increasingly exploiting supply chain weaknesses

Cyber attacks are increasingly characterised by supply chain attacks, counter incident response and lateral movement, research reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Huawei reports record numbers despite tumultuous year

Huawei has become one of the world’s largest technology companies by revenue, suggesting the accusations over its ties to the Chinese government are failing to have much impact Continue Reading

By

• Alex Scroxton, Security Editor

The nightmare driving test – making driverless cars safe

In this week’s Computer Weekly, we talk to AI experts about the challenges of teaching autonomous vehicles how to drive safely in often extreme environments, and how deep learning simulations can help. Our latest buyer’s guide looks at business intelligence and analytics technologies. And we examine the implications of the EU’s controversial new copyright laws. Read the issue now. Continue Reading

Thales completes acquisition of Gemalto

Multi-billion-euro acquisition gives Thales a global leadership position in digital identity and security Continue Reading

By

• Warwick Ashford, Senior analyst

Black Hat Asia 2019: Get ready for the cyber arms race

The arms race is now squarely in the cyber realm as defence teams and threat actors arm themselves with AI tools Continue Reading

By

• Ai Lei Tao

Rapidly multiplying IoT cyber attacks use well-known weaknesses

Internet of things threats and attacks are increasing rapidly, but rely on well-known security weaknesses, security researchers discover Continue Reading

By

• Warwick Ashford, Senior analyst

Zuckerberg calls for new internet regulation

Facebook chief calls for new internet regulation in four key areas to define clear responsibilities for people, companies and governments, including more GDPR-aligned data protection rules Continue Reading

By

• Warwick Ashford, Senior analyst

Mind the Brexit gap in cyber security

Leaving the EU could mean a new cyber security regime for the UK – firms need to understand how the changes might affect them Continue Reading

By

• Elliot Rose

Singapore government to review data security in public sector

A high-level committee comprising ministers and private sector security experts will review data security practices and recommend measures to better protect citizens’ data Continue Reading

By

• Aaron Tan, Informa TechTarget

Windows 10 security breach highlights third-party vulnerabilities

The recent Windows 10 PC security breach brought on by third-party software from a Chinese tech company raises concern about the security strength of third-party providers. Continue Reading

By

• Jesse Scardina, News Writer

Magento e-commerce sites urged to apply security update

Security experts are urging companies using the Magento e-commerce site to apply security updates without delay to avoid a disastrous hacking campaign Continue Reading

By

• Warwick Ashford, Senior analyst

ICO kicks off sandbox beta to support innovation

The UK’s privacy watchdog has launched the first phase of an initiative aimed at enhancing data protection while supporting business innovation Continue Reading

By

• Warwick Ashford, Senior analyst

Infosec pros slam government-mandated backdoors

Government-mandated encryption backdoors increase vulnerability to nation-state attacks, according to the majority of cyber security professionals Continue Reading

By

• Warwick Ashford, Senior analyst

Huawei making no progress on addressing security concerns

Huawei has made no material progress on addressing the issues identified last year by the NCSC, according to the latest highly critical report from its HSCEC Oversight Board Continue Reading

By

• Alex Scroxton, Security Editor

Encryption adoption driven by new tech and compliance

The adoption of encryption is at its highest level yet, driven by the need to protect data generated by new digital initiatives, but still less than half of organisations are applying it consistently across the enterprise Continue Reading

By

• Warwick Ashford, Senior analyst

UK IoT research centre to tackle cyber risk

A government-backed national IoT research centre has been launched as part of UK efforts to become a world leader in tackling cyber threats   Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attacks targeting industrial control systems on the rise

Malicious cyber activity increased to almost half of the industrial infrastructure protected by Kaspersky Lab in 2018, but the UK is among the most secure countries, the security firm reports Continue Reading

By

• Warwick Ashford, Senior analyst

Mind the overlap between GDPR and ePD, warns privacy lawyer

Organisations need to be aware of the overlaps between European data protection and privacy rules, and which takes precedence, a privacy lawyer warns Continue Reading

By

• Warwick Ashford, Senior analyst

Norsk Hydro cyber attack cost estimates up to $41m

Initial estimates have put the financial impact of last week’s ransomware attack on the Norwegian aluminium producer of up to nearly $41m, raising questions about cyber insurance coverage Continue Reading

By

• Warwick Ashford, Senior analyst

Web inventor wants a web built on solid data principles

Tim Berners-Lee has urged app developers to be courteous to users’ data privacy, saying users should own their own data and apps need to interoperate Continue Reading

By

• Cliff Saran, Managing Editor