IT security

Security Think Tank: Outsource responsibility, not accountability

What critical security controls can be outsourced and how do organisations, SMEs in particular, maintain confidence that they are being managed effectively and appropriately? Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

Mobile banking Trojans reach all-time high

Mobile banking Trojans topped the list of cyber threats in the second quarter of the year, according to research by Kaspersky Lab Continue Reading

By

• Warwick Ashford, Senior analyst

Half of UK consumers to exercise GDPR rights within a year

More than half of UK consumers will exercise their General Data Protection Regulation rights within a year and almost two-thirds will retract or review data use because of the Facebook-Cambridge Analytica scandal, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Virus outbreak at iPhone chip plant could delay shipments

A computer virus at an iPhone chip manufacturing plant could delay shipments of Apple’s latest smartphones, but the impact will be limited, say analysts Continue Reading

By

• Warwick Ashford, Senior analyst

The value of unified endpoint management

Given the diversity of devices people can use for work, IT needs to look at how it can unify device security Continue Reading

By

• Bob Tarzey

Alibaba Cloud makes deeper inroads into Malaysia

The Chinese cloud supplier’s second availability zone and upcoming DDoS scrubbing centre in Malaysia comes on the heels of growing investments in the Southeast Asian nation Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Almost all security can be outsourced, but not the risk

What critical security controls can be outsourced and how do organisations, SMEs in particular, maintain confidence that they are being managed effectively and appropriately? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

UK security centre to launch IoT security standard

The London-based Centre for Strategic Cyber Space and Security Science is working on an internet of things security standard and has roped in participants from eight markets Continue Reading

By

• Aaron Tan, TechTarget

Google to alert firms of state-sponsored attacks on G Suite users

As cyber security increasingly becomes a market differentiator, Google has announced that businesses using G Suite cloud-based software can opt in to cyber attack alerts Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Risk tolerance key to security outsourcing policy

What critical security controls can be outsourced, and how do organisations – SMEs in particular – maintain confidence that they are being managed effectively and appropriately? Continue Reading

By

• Bruce Beam , (ISC)²

Gorgon Group shows simple cyber attacks remain effective

A highly effective cyber attack group that appears to be based in Pakistan is carrying out targeted attacks against nation states at the same time as criminal operations, researchers have found Continue Reading

By

• Warwick Ashford, Senior analyst

Reddit breach exposes 2FA flaws

Reddit has reported a password breach despite using 2FA, exposing the weaknesses of two-factor authentication based on mobile text messages Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR harmonised with local laws in Nordic EU states

Sweden provides an interesting challenge for the European Union’s data protection regulation due to its laws around freedom of press and free speech Continue Reading

By

• Gerard O'Dwyer

Who should bear responsibility in cyber attacks on healthcare IT systems?

On 20 July, the Singapore government revealed that the non-medical personal details of about 1.5 million patients who had visited SingHealth’s specialist outpatient clinics and polyclinics between ... Continue Reading

By

• Aaron Tan, TechTarget

Three Carbanak cyber heist gang members arrested

Three alleged members of the Carbanak gang believed to be responsible for more than 100 cyber heists worldwide have been arrested, US authorities have announced Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Top things to consider in security outsourcing

What critical security controls can be outsourced, and how do organisations – SMEs in particular – maintain confidence that they are being managed effectively and appropriately? Continue Reading

By

• Paddy Francis

Bromium evolves virtualisation-based security

Virtualisation-based security firm Bromium has evolved its technology to offer bidirectional protection for applications and underlying operating systems Continue Reading

By

• Warwick Ashford, Senior analyst

Top dark web indicators of compromise

There are 10 common activities on the dark web that indicate a data breach or some other security compromise has taken place, according to a specialist monitoring firm Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: A risk-based approach to security outsourcing

What critical security controls can be outsourced and how do organisations, SMEs in particular, maintain confidence that they are being managed effectively and appropriately? Continue Reading

By

• Rory Alsop

UK business overestimating level of consumer trust, study shows

UK consumer trust is low, with the majority of UK businesses admitting to selling customer data, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

SamSam ransomware reaps $5.9m and counting

In just two and a half years, SamSam campaigns are believed to have netted nearly $6m for cyber criminals, an analysis of this adaptive and evasive strain of active ransomware reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security top priority for aircraft makers, says Airbus

There is a high level of collaboration in the aircraft industry on cyber security, but not all other industries are at the same level, according to an industry veteran at multinational aerospace and defence firm Airbus Continue Reading

How Estonia took a digital lead

In this week’s Computer Weekly, we look at one of the world’s most digitally advanced nations, Estonia, and ask what the UK government can learn from this small Baltic state. We talk to Airbus about how aircraft manufacturers are prioritising cyber security. And we examine how AI and robots will augment – not replace – human productivity. Read the issue now. Continue Reading

Australia’s health sector reports most data breaches again

In the first full quarter since Australia’s mandatory breach disclosure scheme came into effect, healthcare providers reported the most data breaches amid controversy over the national health record system Continue Reading

By

• Beverley Head

Dixons Carphone ups data breach figure to 10 million

Dixons Carphone now believes the number of personal data records affected in 2017’s data breach is nearly 10 times greater than initially thought Continue Reading

By

• Warwick Ashford, Senior analyst

Briton ran pro-Kremlin disinformation campaign that helped Trump deny Russian links

A British IT manager and former hacker from Darlington ran a disinformation campaign that duped former US intelligence agents and provided Donald Trump with manufactured “evidence” to deny that Russia interfered with the US election Continue Reading

By

• Duncan Campbell , 2QQ Ltd, Sussex University

Pentagon flags risky software suppliers

The Pentagon has drawn up a list of software suppliers that it wants the US military and defence contractors to avoid due to fears of risks to national security Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Not all security service providers are created equal

What critical security controls can be outsourced, and how do organisations, SMEs in particular, maintain confidence that they are being managed effectively and appropriately? Continue Reading

By

• Maxine Holt, Omdia

Digital identity system for EU nationals should be used for all UK citizens, says report

Policy Exchange report recommends extending Home Office system for registering EU nationals post-Brexit to become UK-wide digital identity application Continue Reading

By

• Bryan Glick, Editor in chief

Search begins for UK’s cyber security Unsung Heroes

The Security Serious cyber awareness campaign has opened nominations for the third annual cyber security Unsung Heroes awards Continue Reading

By

• Warwick Ashford, Senior analyst

Burden of data protection rests on firms and governments

A senior executive at Singapore’s Cyber Security Agency stressed the role of corporate data governance and government regulations in raising the bar on cyber security Continue Reading

By

• Ai Lei Tao

Post-quantum security on Airbus’s radar

With quantum computing on the horizon, multinational aerospace and defence firm Airbus is among those organisations that are looking at evolving their cryptography capabilities to stay ahead of technology Continue Reading

By

• Warwick Ashford, Senior analyst

Fileless malware a growing trend, warns McAfee

Cyber attackers are increasingly moving away from traditional malware to using trusted Windows executables to invade systems and breach corporate networks, say security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Hackers targeting software supply chains, US report warns

A US government report on cyber espionage by China, Russia and Iran says software supply chains are increasingly under attack Continue Reading

By

• Warwick Ashford, Senior analyst

App users in developing APAC prefer convenience over security

By Kimberly Chua Mobile app users in developing Asia-Pacific (APAC) countries prefer convenience over security, signaling a potential rift between companies and users, a new F5 Networks study has ... Continue Reading

By

• Aaron Tan, TechTarget

Large organisations less confident over cloud security compared to smaller businesses

A study has found larger enterprises are not as confident as smaller businesses about the security of their data in the public cloud Continue Reading

By

• Zach Emmanuel, Computer Weekly

Brace for PowerGhost cryptominer, warns Kaspersky Lab

Corporate networks are the target of a new illicit cryptocurrency mining malware that is difficult to detect and eradicate, security researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

Crest report highlights need for bug bounty best practice

A lack of best practice guidelines for bug bounties is leaving researchers, organisations and bounty platforms confused and at risk, a report reveals Continue Reading

Cities key to making data a new form of infrastructure, says Nesta

City governments need to take charge of data use and leverage responsible innovation, as data should not be seen as a saleable commodity, but a common good, according to the innovation foundation Continue Reading

By

• Lis Evenstad

Software development remains insecure

The prevalence of common and well-known web-based vulnerabilities underlines the need for better education around secure software development Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook stock price falls on slowing growth forecast

Facebook’s stock price has fallen dramatically in response to a forecast of slower revenue growth in 2018 and lower-than-expected user growth for the second quarter Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security vulnerability concerns skyrocket

Security professionals are more worried about data breaches and cyber attacks than they were a year ago, with most fearing that Meltdown-Spectre attacks are becoming the norm Continue Reading

By

• Warwick Ashford, Senior analyst

Combat mobile device security threats at home and abroad

Employees that travel for business face a higher risk of a mobile security breach. Take these steps to ensure that your mobile device fleet is secure. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

Smart cities face challenges and opportunities

IHS Markit analysts Noman Akhtar and Kevin Hasley assess the way forward for smart city technology projects around the world Continue Reading

By

• Norman Akhtar and Kevin Hasley

Dark web cyber crime markets thriving

The market for cyber criminals’ services is thriving on the dark web, research reveals Continue Reading

By

• Warwick Ashford, Senior analyst

ERP applications are under cyber attack, research confirms

ERP applications are increasingly being targeted by cyber criminals, hacktivists and nation-state actors, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Beyond GDPR: ePrivacy could have an even greater impact on mobile

From how we monitor air pollution and manage our public transport systems, to how we enable connected cars and the next generation of 5G mobile services, the forthcoming ePR could have a lasting impact on European society Continue Reading

By

• Jade Nester, GSMA

Apache OpenWhisk users urged to patch

IBM has patched vulnerabilities in its Cloud Functions service that is based on Apache OpenWhisk in response to vulnerability disclosures, and all other users are urged to do the same Continue Reading

By

• Warwick Ashford, Senior analyst

Application attacks demand new security approach

Applying security software updates is an ineffective way to deal with application layer cyber attacks and businesses should change their approach, security experts advise Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware concern drops despite being top cost

Fewer organisations are worried about ransomware even though it remains one of the most costly cyber attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Australian energy sector caught in security catch-22

With regulators unwilling to accept security investments that would lead to higher tariffs, there is a chance that Australia’s National Energy Market could face increased cyber risks Continue Reading

By

• Beverley Head

Google wants to ease hybrid cloud woes

Cloud supplier Google claims its Cloud Service Platform will alleviate complexities in managing microservices in a hybrid IT environment Continue Reading

By

• Aaron Tan, TechTarget

Ramp up security to mitigate Office 365 attacks

Public clouds tend to be more secure, but Office 365 has become a major target for attacks, which means internal IT security needs tightening Continue Reading

By

• Cliff Saran, Managing Editor

Top execs cyber security hypocrites, report shows

There is a critical disconnect between the cyber security behaviour that top executives recommend and the way they behave themselves, while many firms do not know where their data lives and moves, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Most firms have software security vulnerability

Most firms have a software vulnerability that can be exploited by cyber attackers, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

What the ICO's Facebook fine teaches us

Legal expert Alexander Egerton considers whether the ICO’s planned £500,000 fine for Facebook is the precursor of a spate of increased fines across the board, or if it shows the ICO’s stance has not changed and will continue to target certain activities Continue Reading

By

• Alexander Egerton, Seddons

MPs call for inquiry into smart meter roll-out

Government urged to conduct a review of the roll-out of smart meters for electricity and gas, and to intervene to tackle a number of failures Continue Reading

By

• Alex Scroxton, Security Editor

Singapore public healthcare sector limits internet use

Healthcare workers who require internet access will have to use separate internet workstations following an unprecedented attack on Singapore’s public healthcare system Continue Reading

By

• Aaron Tan, TechTarget

Zero trust security model boosts business confidence

Organisations that combine the zero trust security model with next-gen access are more confident about meeting access control challenges, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security: A work in progress

Piers Wilson, director of the Institute of Information Security Professionals, reflects on the findings of the latest IISP industry survey and suggests there is still more work to do Continue Reading

By

• Piers Wilson, IISP

Huge Singapore data breach shows need for new approach

A major data breach in Singapore underlines the need for a new approach to protecting critical data and applications, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR drives down UK insider threat

The insider threat in European countries is falling post-General Data Protection Regulation, but continues to rise in the US, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC report underlines cyber threat for legal firms

Legal firms are a top target for cyber attackers, the latest report from the National Cyber Security Centre shows, emphasising the need for comprehensive cyber defence capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Uptick in UK privacy awareness, says ICO

The UK’s privacy watchdog, the Information Commissioner’s Office, reports increased public awareness of privacy and information rights issues Continue Reading

By

• Warwick Ashford, Senior analyst

UK alerted to potential cyber risks of Huawei equipment

A report has raised concerns about the shortcomings of Huawei engineering processes, which it says could put UK telecommunications networks at risk Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals use fake domains to scam businesses

UK police are warning businesses that cyber criminals are using fake domains to scam businesses out of hundreds of thousands of pounds Continue Reading

By

• Warwick Ashford, Senior analyst

CNI sector lacks cyber security skills, government warned

The UK’s critical national infrastructure sector is being negatively impacted by the lack of cyber security skills, a report warns Continue Reading

By

• Warwick Ashford, Senior analyst

Collaborative alliance to advance UK’s cyber security profession

Leading UK organisations in cyber security have united to develop a national professional body in the field Continue Reading

By

• Warwick Ashford, Senior analyst

How Splunk is ‘splunking’ data for APAC enterprises

Splunk’s regional vice-president talks up the company’s business strategy and how its customers are using big data analytics in security and IT operations Continue Reading

By

• Aaron Tan, TechTarget

Uber appoints first privacy and data protection chiefs

Uber is getting its privacy and data protection house in order in the wake of damaging data breaches and in anticipation of the company’s planned stock market launch in 2019 Continue Reading

By

• Warwick Ashford, Senior analyst

CW ASEAN: Defend against disruption

The security of industrial control systems (ICS) has come under the spotlight with several high-profile incidents affecting power plants and other critical infrastructure in recent years. What are the threats to these systems in ASEAN, and what is the common approach to securing ICS systems? In this month’s issue of CW ASEAN, we take a closer look at how ICS operators are improving the visibility of ICS environments without jeopardizing operations, addressing security vulnerabilities and enhancing cooperation between IT and operational technology teams. Read the issue now. Continue Reading

NHS on the hunt for chief data officer

The NHS CDO will report directly to NHS Digital CEO Sarah Wilkinson, get paid up to £176,750 and be responsible for a budget of around £57m Continue Reading

By

• Lis Evenstad

Retail cyber security spending ineffective as breaches rise

Cyber attacks on the retail sector are increasing, and although most retailers plan to increase cyber security spending, planned investments are unlikely to be effective, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Deloitte launches EMEA-wide initiative to close cyber security gender gap

Professional services organisation Deloitte expands its UK efforts to encourage more women into cyber security to cover the EMEA area Continue Reading

By

• Clare McDonald, Business Editor

Cyber security top priority for aircraft makers, says Airbus

There is a high level of collaboration in the aircraft industry on cyber security, but not all other industries are at the same level, according to an industry veteran at multinational aerospace and defence firm Airbus Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore to bolster threat intelligence sharing in financial sector

Singapore’s Cyber Security Agency has partnered the Financial Services Information Sharing and Analysis Centre to glean cyber threat intelligence for the country’s financial industry Continue Reading

By

• Aaron Tan, TechTarget

Spectre variant gives buffer overflow a new twist

New variants of the Spectre microprocessor bugs use buffer overflow-style attacks to run malicious code Continue Reading

By

• Cliff Saran, Managing Editor

Most airports not protected from cyber threats

The chairman of the Israel Airports Authority paints a dismal picture of the state of cyber security in aviation, and offers advice on what can be done to avert the next disaster. Continue Reading

How Australia is keeping pace with ICS threats

Besides bridging the security gap between IT and operational technology teams, Australia is driving efforts to bolster the security of IoT devices Continue Reading

CW ANZ: Fix the weak links

Recent reports have suggested that cyber threats are increasingly aimed at critical information infrastructure such as power grids, water treatment plants and transportation networks. While the scale of the problem that Australian industry faces is hard to quantify, no one disputes the threat is real. In this edition of CW ANZ, we look at how Australia is securing its industrial control systems and how it is bridging the security gap between IT and OT teams. Read the issue now. Continue Reading

An insider’s look into the dark web

A principal research scientist at Sophos offers a glimpse into the abysses of the dark web in a bid to uncover what cyber crooks are up to Continue Reading

By

• Aaron Tan, TechTarget

Cryptominers plateau while backdoors shoot up

Illicit cryptocurrency mining appears to be slowing down, but backdoors increased rapidly in the second quarter of the year, a report warns Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber resilience key to securing industrial control systems

Operators of industrial control systems can build greater cyber resilience by getting IT and operational technology teams to work more closely together and improving the visibility of their infrastructure, among other security measures. Continue Reading

Most airports not protected from cyber threats

The chairman of the Israel Airports Authority paints a dismal picture of the state of cyber security in aviation, and offers advice on what can be done to avert the next disaster. Continue Reading

APAC organisations could lose $1.75tn from cyber attacks

A study by Frost and Sullivan has found that losses from cyber security incidents could account for 7% of the region’s GDP in 2017 Continue Reading

A third of organisations do not have a security expert, survey shows

Around a third of organisations are vulnerable to cyber attacks due to a lack of dedicated in-house cyber security experts, finds Gartner survey Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Mobile devices lost in London underline security risk

The security risk of lost mobile devices is underlined by the fact that almost 26,000 mobile phones and computing devices were lost in London in the past year alone Continue Reading

By

• Warwick Ashford, Senior analyst

Application and device security under the spotlight

The security of internet-connected devices and associated applications has become a significant concern, prompting suggestions legislation may be required, while the UK government’s recent Secure by Design review suggests several solutions, including legislative measures. Continue Reading

Disaster recovery as a service: what you need to know 

Technological advances make disaster recovery as a service possible, but Computer Weekly investigates whether it is practical option for all businesses Continue Reading

By

• Rene Millman

ITPS expands datacentre to support Azure Stack and HPC

Datacentre company ITPS expands its County Durham facility to meet client needs for high performance computing and security Continue Reading

By

• Cliff Saran, Managing Editor

Russian cyber attacks show need for international rules

Russian cyber attacks aimed at influencing foreign elections highlight the need for the international community to agree on rules of conduct and punitive consequences Continue Reading

By

• Warwick Ashford, Senior analyst

New industry network to bolster data protection in ASEAN

The Data Protection Excellence network will assist organisations and individuals new to data protection laws by providing hands-on training and professional certification courses Continue Reading

By

• Aaron Tan, TechTarget

Injecting evidence into the On-line Child Safety Debate

1 in 10 of those who video chat with strangers have been asked to change or undress on camera … we need open and honest debate, not obfuscation and claims that these are technical matters, too ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Endpoint security tool fueled OpenText's Guidance Software acquisition

Endpoint security was the primary draw for OpenText's Guidance Software acquisition. But plans to improve e-discovery and data forensics with Magellan AI are part of the roadmap. Continue Reading

By

• Don Fluckinger, Senior News Writer

Matching disaster recovery to cyber threats

While it is important to take steps to prevent cyber attacks, they can still happen. That is why disaster recovery practices are equally critical Continue Reading

By

• Nicholas Fearn

Hackers increasingly targeting cloud infrastructure

Cloud infrastructure is a growing target for cyber attackers because of available computing resources, as well as the repositories of valuable data, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Brexit proposal calls for standards alignment and data sharing

Although the government’s Brexit whitepaper focuses on curbing immigration, collaboration on cyber crime, data sharing and services are among the bargaining chips Continue Reading

By

• Cliff Saran, Managing Editor

Security Think Tank: A good password policy alone is not enough

In light of the fact that complex passwords are not as strong as most people think and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Bruce Beam , (ISC)²

Cyber attackers cashing in on ‘hidden’ attack surface

Cyber attackers are cashing in on organisations’ lack of visibility into all online interactions that can involve multiple third parties, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

CW Middle East: Can Saudi Arabia build the Silicon Valley of the Middle East?

In April this year, Saudi Arabia’s crown prince Mohammed Bin Salman visited Silicon Valley in the US to meet tech giants such as Apple and Amazon in its efforts to fast-forward the kingdom’s technology capabilities. Read about its lofty ambitions. Also in this issue, read how demand for skilled IT professionals is increasing rapidly in the Middle East, which is facing a talent crunch. Meanwhile, Gulf Cooperation Council smart city initiatives are gathering momentum. Continue Reading