IT security

Financial services firms face potential security bombshell

UK financial services are facing a security crisis over outdated services and applications, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Why the government should rethink the UK’s surveillance laws

The European Court of Human Rights has made clear that the Snoopers’ Charter is an unlawful violation of people’s rights and freedoms Continue Reading

By

• Megan Goulding

Fujitsu teams up with UTCs on cyber security training

Fujitsu, University Technical Colleges across England and other private sector partners have joined forces to help address the cyber security skills gap Continue Reading

By

• Warwick Ashford, Senior analyst

PCI DSS compliance falls despite security benefit

Despite the benefits of the payment card industry security standard, there is a concerning downward trend in compliance, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

MI5 admits to ‘unlawful’ spying on Privacy International

The UK's intelligence agencies acted unlawfully by intercepting communications data on NGO, Privacy International, the UK's most secret court ruled. Continue Reading

By

• Bill Goodwin, Computer Weekly

WannaCry and NotPetya inspiring new attacks

Designs and techniques used in 2017’s global cyber attacks have inspired a new breed of malware that exploits software vulnerabilities, according to a McAfee report Continue Reading

By

• Warwick Ashford, Senior analyst

Mac OS Mojave zero-day warning

The latest version of Apple’s Mac operating system contains a vulnerability that could be exploited by attackers to access protected files, a researcher warns Continue Reading

By

• Warwick Ashford, Senior analyst

NHS Digital hires chief information security officer

Robert Coles will lead the health and care sector’s response to cyber attacks and help local organisations meet the government’s cyber security standards Continue Reading

By

• Lis Evenstad

Business leaders expect suppliers to ensure they are cyber secure

Most UK business leaders expect suppliers to be cyber secure and nearly a third of businesses would terminate contracts because of suppliers’ security failings, a survey has revealed Continue Reading

By

• Warwick Ashford, Security Editor

Foreshadow mitigation obscures licensing impact

Performance of virtual machines could be severely affected by the workaround for Intel’s latest processor flaw. To compensate, more processors will be needed Continue Reading

By

• Cliff Saran, Managing Editor

DCMS plan aims to open up digital identity market - and might kill off Gov.uk Verify

The Department for Digital, Culture, Media and Sport (DCMS) has been conducting a review of digital identity since taking over policy responsibility from the Government Digital Service (GDS) in ... Continue Reading

By

• Bryan Glick, Editor in chief

Equifax fined by ICO for security failings

The Information Commissioners Office has fined Equifax UK in relation to a data breach at its UK parent last year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Europol cyber crime report highlights emerging threats to enterprise security

Research highlights increase in sophistication of ransomware attacks, while revealing details of new and emerging threats to enterprises Continue Reading

By

• Tasmin Lockwood

IT sector advises Swedish government on elections and voting system

Swedish IT secure is helping the government make election systems more secure and reduce external influence Continue Reading

By

• Gerard O'Dwyer

Employers turn to wearable technology to help staff manage work-life balance

Companies are realising that there are sound business reasons for ensuring their employees get enough sleep and exercise, so they are turning to wearable technology to help their staff stay healthy, despite the pressures of work Continue Reading

By

• Christian Annesley

AI is crucial element of security strategy in the IoT era

Machine learning and network visibility for users and internet of things devices are essential to battle threats inside the enterprise, according to a new report Continue Reading

By

• Alex Scroxton, Security Editor

Disaster recovery as a service: what you need to know

Technological advances make disaster recovery as a service possible, but Computer Weekly investigates whether it is practical option for all businesses. Continue Reading

Singapore government to start bug bounty programme

Singapore’s bug bounty programme will help the authorities identify cyber blind spots and benchmark its defences against skilled hackers Continue Reading

By

• Aaron Tan, Informa TechTarget

Danske Bank invests in anti-money laundering systems following Estonian problems

Danske bank improves its anti money laundering software, utilising artificial intelligence and machine learning Continue Reading

By

• Gerard O'Dwyer

Lib Dems want ‘Geneva Convention’ for use of tech in modern warfare

Deputy leader of the Liberal Democrats, Jo Swinson, wants an international treaty on use of technology in modern warfare, and warns of the dangers of new technology leaving people behind Continue Reading

By

• Lis Evenstad

Cutting through the blockchain hype

Blockchain adoption is still in its infancy, with security challenges standing in the way of more widespread deployment, according to a blockchain expert Continue Reading

By

• Aaron Tan, Informa TechTarget

Printing, document capture and compliance risk in the GDPR era

Printers, scanners and mobile devices that capture data from documents all store data in some way or other. How can you be sure to be compliant with GDPR with regard to that data? Continue Reading

By

• Antony Adshead, Storage Editor

Security Think Tank: Supplement security with an MSSP to raise the bar

What is the most practical and cost-effective way for organisations to identify and remediate high-risk software vulnerabilities? Continue Reading

By

• Greg Temm

No Deal Brexit may hinder free flow of personal data from EU to UK

The government’s No Deal Brexit planning document on data protection warns free flow of personal data from EU isn’t guaranteed, and organisations must take action to ensure they will still be able receive data from Europe Continue Reading

By

• Lis Evenstad

GCHQ mass surveillance regime was in breach of human rights law, European court rules

The European Court of Human Rights in Strasbourg has ruled that the UK’s collection of bulk interception of communications data lacked adequate oversight and safeguards and was in breach of human rights law Continue Reading

By

• Bill Goodwin, Computer Weekly

Outcomes-based security is the way forward

Every security technology is effective for a limited time, but understanding data assets and their value to attackers is key to effective cyber defence, according to an industry veteran of 20 years’ experience Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Adopt a proactive approach to software vulnerabilities

What is the most practical and cost-effective way for organisations to identify and remediate high-risk software vulnerabilities? Continue Reading

By

• Richard Hunt, Turnkey Consulting

NCSC issues core questions to help boards assess cyber risk

The National Cyber Security Centre has published its first in a series of guidance for board members which highlights what businesses should be asking security teams Continue Reading

By

• Clare McDonald, Business Editor

FCA warns it cannot manage financial crime risks without sharing data with EU

FCA admits it will be unable to manage financial crime effectively if it cannot share data with EU authorities. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Two-thirds of emails not clean, says research

Two-thirds of emails don't make it to the inbox because security systems consider them unsafe, according to research Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Four key steps to managing software vulnerabilities

What is the most practical and cost-effective way for organisations to identify and remediate high-risk software vulnerabilities? Continue Reading

By

• Bruce Beam , (ISC)²

Higher education sector's poor response to cyber threats laid bare in EfficientIP report

The 2018 EfficientIP Global DNS Report shines a light on how ill-prepared the higher education sector is for handling cyber threats Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Four steps to managing software vulnerabilities

What is the most practical and cost-effective way for organisations to identify and remediate high-risk software vulnerabilities? Continue Reading

By

• Chris Hodson

British Airways data breach: Security researchers name suspects and query attack timeline

Security researchers claim to have pinpointed the cause and perpetrators of the British Airways data breach, and also claim the attackers may have had access to its customer data for far longer than previously thought Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

UK security vetting IT system failing, says NAO

The National Audit Office is critical of the government’s project to centralise its security vetting process, as the IT system has been plagued by failures from the start and has led to serious delays Continue Reading

By

• Lis Evenstad

Public cloud use surges among DDoS attackers, research shows

According to data accrued by DDoS mitigation firm, Link11, the number of attackers that rely on public cloud services soared during the 12 months to June 2018 Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Cyber criminals outspend businesses in cyber security battle

Cybercriminals are flexing their financial might and UK organisations are facing more attacks as a result Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Balancing cost and risk in software vulnerability management

What is the most practical and cost-effective way for organisations to identify and remediate high-risk software vulnerabilities? Continue Reading

By

• Alexander Drabek, 2|SEC

Security Think Tank: No shortcuts to addressing software vulnerabilities

What is the most practical and cost effective way for organisations to identify and remediate high-risk software vulnerabilities? Continue Reading

By

• Maxine Holt, Omdia

North Korean programmer charged for WannaCry attacks

The US has charged a member of a group of North Korean hackers linked to the WannaCry, Sony Pictures and other cyber attacks around the world Continue Reading

By

• Warwick Ashford, Senior analyst

Who is The Cloud Daddy?

Had a great couple of online sessions recently with Joe Merces of the splendidly named CloudDaddy. The aim of CloudDaddy is to simplify one of the great pain points of IT (no, not repairing ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Verify on the verge – what does it mean for GDS?

The government’s flagship digital identity system Gov.uk Verify has become a car crash in motion, accelerating towards its demise. The Cabinet Office’s project watchdog has condemned Verify by ... Continue Reading

By

• Bryan Glick, Editor in chief

Ransomware down, but not out, report reveals

Cryptojacking has taken over from ransomware as the top money spinner for cyber criminals, but the threat is not over and spam is also seeing a resurgence as an attack method, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

BA praised for swift GDPR-aligned action on data breach

British Airways has been praised for its swift response to a customer data breach, which could be the first test case under the EU’s GDPR and new UK GDPR-aligned data protection laws Continue Reading

By

• Warwick Ashford, Senior analyst

Chrome 69 security improvements welcomed

The cyber security community has welcomed the improvements in the latest version of the Chrome browser, especially when it comes to generating strong, unique passwords Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: How to manage software vulnerabilities

What is the most practical and cost effective way for organisations to identify and remediate high-risk software vulnerabilities? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Government projects watchdog recommends terminating Gov.uk Verify identity project

Infrastructure & Projects Authority says Whitehall departments are unwilling to fund flagship GDS identity programme – cancellation would mean writing off at least £130m spent so far Continue Reading

By

• Bryan Glick, Editor in chief

Half a million UK firms hit by CEO fraud, Lloyds Bank estimates

Nearly 500,000 UK businesses are being hit by impersonation fraud, according to estimations by Lloyds Bank, with the legal sector most at risk Continue Reading

By

• Warwick Ashford, Senior analyst

People top target for cyber attackers, report confirms

As security controls have improved, cyber attackers are increasingly focusing their efforts on people within organisations as a way into corporate IT systems, a report confirms Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: How to achieve software hygiene

What is the most practical and cost-effective way for organisations to identify and remediate high-risk software vulnerabilities? Continue Reading

By

• Mike Gillespie

How insider fraud can be detected and avoided in the enterprise

IT sabotage and insider threats can put an organization at great risk. Guest expert Peter Sullivan details preventative measures to take and employee training techniques. Continue Reading

By

• Peter Sullivan

Security Think Tank: Eight controls to manage software vulnerabilities

What is the most practical and cost effective way for organisations to identify and remediate high-risk software vulnerabilities? Continue Reading

By

• Kevin Murphy

Three forthcoming government services to use Gov.uk Verify

Government Digital Service is in the process of private beta testing its identity assurance platform with three new central government services Continue Reading

By

• Lis Evenstad

UK and allies call for backdoors in encryption products

The Five Eyes intelligence alliance is calling on tech firms to include backdoors in their encrypted products to give access to law enforcement authorities or face various measures Continue Reading

By

• Warwick Ashford, Senior analyst

Power play – how GE builds digital into its products

In this week’s Computer Weekly, we speak to Bill Ruh, the head of GE Digital about how the business has changed to focus on customer outcomes following a change in senior leadership. The company is exploring new industries to take its Predix platform, such as the hospitality sector. We look at the problems of implementing SAP S/4 Hana and speak to experts about how to maximise success. We also explore the challenges of networking microservices. Our CIO interview is PayPoint CIO Jon Marchant. Read the issue now. Continue Reading

Security Think Tank: Follow good practice to reduce risk of software vulnerabilities

What is the most practical and cost effective way for organisations to identify and remediate high-risk software vulnerabilities? Continue Reading

By

• Paddy Francis

Majority of UK firms not insured for data breaches

Many UK firms are not insured against information security breaches and data loss, and would have to spend £1m on average to recover from a breach, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Security Serious Week to feature flash mob event

“Flash mob” event will create a human collage, highlighting cyber security advice Continue Reading

By

• Warwick Ashford, Senior analyst

Fraudulent money transfers are top aim of business email compromise

Business email compromise is increasingly popular with cyber criminals to steal money and information as well as spread malware, security researchers find Continue Reading

By

• Warwick Ashford, Senior analyst

Blockchain gains foothold in Australia

A number of blockchain projects are under way in Australia, but questions remain about whether the technology is wanted Continue Reading

By

• Beverley Head

Cobalt cyber heist group mounts new campaign

Security researchers discover new campaign using two malicious links to double the chances of infection, which is believed to be linked to a notorious cyber crime group Continue Reading

By

• Warwick Ashford, Senior analyst

Machine identity management crisis looming

Managing machine identities is looming as the next big security challenge, a study reveals, with few organisations capable of protecting them as they increasingly form the basis of online communications Continue Reading

By

• Warwick Ashford, Senior analyst

Fourth man jailed for iCloud celebrity hacking

The final hacker charged with leaking nude images of female celebrities in 2014 has been jailed Continue Reading

By

• Warwick Ashford, Senior analyst

US and UK days away from European Parliament ultimatum to suspend data transfers to the US

Threat to Privacy Shield as the European Union and US approach a critical European Parliament deadline to suspend data transfers from the EU to the US Continue Reading

By

• Kevin Cahill

Improving security is top driver for ISO 27001

Organisations are implementing the ISO 27001 standard in recognition of the fact that cyber attacks are increasingly inevitable and that it is best to be well-prepared to fend off attacks and mitigate their effect Continue Reading

By

• Warwick Ashford, Senior analyst

Security teams and C-suite exec views not aligned

There are key differences and potential challenges when it comes to security teams and C-suite executives communicating and aligning about cyber threats, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

IT leaders at a crossroads as they grapple with digital technology

CIOs have the opportunity to influence their company strategy as digital technology reshapes business. A survey of CIOs across 70 countries charts a path for IT leaders through emerging technologies Continue Reading

By

• Bill Goodwin, Computer Weekly

Cyber attackers switching to covert tactics

Cyber criminals are moving away from mass, high-profile attacks to ones that are stealthy and more subtle – as well as attacks targeting systems typically used in critical infrastructure, researchers say Continue Reading

By

• Warwick Ashford, Senior analyst

Information security risk – keeping it simple

Organisations should start with risk management to understand information security risks and communicate them better internally Continue Reading

By

• Richard Diston

Challenge to anti-GDPR immigration exemption in DPA to go ahead

Two human rights groups are challenging a controversial clause in new UK data protection legislation that they say is in conflict with the EU’s Charter of Fundamental Rights and undermines the General Data Protection Regulation Continue Reading

By

• Warwick Ashford, Senior analyst

Sharp rise in business email compromise

Cyber attackers are expanding their attack methods to steal money and to gain access to corporate and employee data, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

UK universities targeted by Iranian hackers

UK universities are among those targeted by a cyber threat group associated with the Iranian government Continue Reading

Gov.uk Verify chief to leave Government Digital Service

Nic Harrison is returning to the Department for Work and Pensions, with no replacement as leader of the identity assurance programme yet in place Continue Reading

By

• Bryan Glick, Editor in chief

North Koreans add Mac OS to cryptocurrency-stealing malware attacks

A North Korean hacking group is targeting cryptocurrency exchanges using Trojanised cryptocurrency trading software designed for both Microsoft’s Windows and Apple’s Mac OS, say researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Australian government agency trials secure cloud service

The Digital Transformation Agency has become the first government agency in Australia to test the use of Microsoft Office 365 in a secure cloud environment Continue Reading

By

• Aaron Tan, Informa TechTarget

Cryptographic agility is key to post-quantum security

Although post-quantum security is not an issue for all organisations today, an expert believes that those needing to ensure data is secure for decades to come should aim to achieve cryptographic agility above all else Continue Reading

By

• Warwick Ashford, Senior analyst

No Deal Brexit papers warn of stark future for UK tech

The government has published the first of its No Deal Brexit contingency planning notices, containing sobering messages for the UK technology industry Continue Reading

By

• Alex Scroxton, Security Editor

Apache Struts users urged to update due to new security flaw

Another security flaw has been discovered in the Apache Struts, which was at the heart of the massive Equifax data breach in 2017 Continue Reading

By

• Warwick Ashford, Senior analyst

Councils at risk from unsupported Windows Server and SQL Server

Some local authorities are using unsupported server software, while others are not paying for extended support Continue Reading

By

• Cliff Saran, Managing Editor

European cloud adopters still lack basic security

Despite outpacing the rest of the world, the majority of organisations adopting cloud in Europe, the Middle East and Africa lack basic security, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Nearly a third of organisations still not GDPR ready

As the UK and other states implement the EU’s GDPR, many organisations admit they are still not fully compliant, but most claim to be able to respond to data subject access requests Continue Reading

By

• Warwick Ashford, Senior analyst

Better the data you know – how GDPR is affecting UK tech companies

As the dust settles from the General Data Protection Regulation, the implications for technology firms in the UK are becoming clearer Continue Reading

By

• Rebecca West, Coffin Mew

Superdrug denies data breach

Superdrug has warned online customers it believes may have had personal details exposed, but claims its systems were not compromised, in what could be the first GDPR-related extortion attempt Continue Reading

By

• Warwick Ashford, Senior analyst

New Zealand to run national cyber security exercise

The island-nation will test the resilience of its critical infrastructure in November 2018, bringing together multiple agencies to protect assets of national significance Continue Reading

By

• Beverley Head

Online crime costs more than $1m a minute

More than $1m is lost to cyber crime every minute, a report reveals, underlining the increasing and significant threats businesses face online Continue Reading

By

• Warwick Ashford, Senior analyst

Veritas aims to boost NetBackup with simplified UI and setup

Two decades-old enterprise product upgraded with backups that can be set in three clicks, down from 30, plus instant VM workload recovery and capacity monitoring and planning Continue Reading

By

• Antony Adshead, Storage Editor

Retail and finance top cyber targets

Retail and finance remain the top cyber attack targets, but the second quarter also saw a spike in attacks against the manufacturing industry and an increase in remote desktop attacks, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft announces free election cyber defence tools

Microsoft has revealed it recently disrupted domains associated with a Russian cyber attack group believed to be targeting US political groups ahead of the midterm elections Continue Reading

By

• Warwick Ashford, Senior analyst

Cloud security: Weighing up the risk to enterprises

In this guest post, Chris Hodson, chief information security officer for Europe, Middle East and Africa (EMEA) at internet security firm Zscaler, takes a closer look at why cloud security remains ... Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Malaysia’s financial sector warms up to cloud, but lacks security leadership

Almost two-thirds of Malaysia’s financial services firms are developing a cloud strategy, but not all have a security plan in place Continue Reading

By

• Aaron Tan, Informa TechTarget

AI: Black boxes and the boardroom

Computers can and do make mistakes and AI is only as good its training so relying purely on machine intelligence to make critical decisions is risky Continue Reading

By

• Tim Wright and Antony Bott

NHS trusts lose nearly 10,000 patient records a year

Report calls for NHS trusts to work to abolish handwritten notes in hospitals to prevent loss of personal documents and to introduce a patient identity protocol Continue Reading

By

• Warwick Ashford, Senior analyst

Planned Australian law raises tech firms’ security concerns

A digital industry group representing some of the world’s largest tech firms is opposed to proposed Australian laws aimed at compelling them to help security agencies and police Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber Security Challenge UK to scale up

Cybersecurity Challenge UK plans to scale up its events and its role in coordinating UK industry efforts to attract talented people to the cyber security profession Continue Reading

By

• Warwick Ashford, Senior analyst

Apple confirms teen hacker took no customer data

Teenage “fan” who broke into Apple’s mainframe from his home in Melbourne is believed to have downloaded 90GB of secure files, but no customer data Continue Reading

By

• Warwick Ashford, Senior analyst

ASEAN firms need to overcome DevOps hurdles

Southeast Asia has had pockets of success with DevOps, but most organisations across the region will need to overcome cultural and legacy challenges to succeed Continue Reading

By

• Ai Lei Tao

Trump sparks speculation after repealing cyber attack restraints

The US president has sparked speculation about US policy on launching cyber attacks by repealing Obama-era restraints, underlining the need for international rules on cyber warfare Continue Reading

By

• Warwick Ashford, Senior analyst

Global infosec spending to top $114bn in 2018, says Gartner

The need for improved detection, response and privacy is driving the demand for security products and services in response to security risks, business needs and industry changes, Gartner reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Inside DevOps, containers and enterprise security

Global corporates are waking up to containers and orchestrated containerisation for software development that is fast and safe. Computer Weekly looks at the best approach to ensure security is not compromised along the way Continue Reading

By

• Christian Annesley

Google Chrome flaw puts privacy at risk

Imperva security researcher urges Google Chrome users to update to the latest version after discovering a vulnerability that could be exploited to uncover private data Continue Reading

By

• Warwick Ashford, Senior analyst