IT security

Zero in on your zero-day vulnerabilities

A zero-day attack comes, by definition, out of the blue. You cannot predict its nature or assess how much damage it might cause, but you can take some basic steps to protect yourself from a potentially crippling cyber strike Continue Reading

By

• Graeme Park

Meltdown and Spectre: AWS, Google and Microsoft rush to patch cloud chip flaws

Amazon, Google and Microsoft rush to fix chip flaws that could leave cloud customers at risk of having their data accessed or stolen by other users Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Critical Intel security patch will slow PCs, servers and Macs

AMD shares rise on news that the performance of millions of Windows PCs, Linux servers and Apple Macs is to be impacted by critical updates for a recently discovered security flaw in Intel chips manufactured in the past 10 years Continue Reading

By

• Warwick Ashford, Senior analyst

What the EU’s new data protection regime means for ASEAN

A large proportion of businesses in the regional economic grouping will be affected by Europe’s General Data Protection Regulation, but awareness of the new rules remains low, even in countries with existing data protection laws Continue Reading

By

• Aaron Tan, Informa TechTarget

IoT botnet DDoS attacks predicted after exploit code published

Security researchers are urging businesses to ensure they are prepared for large-scale DDoS attacks following the online publication of code to exploit a vulnerability in Huawei HG532 routers Continue Reading

By

• Warwick Ashford, Senior analyst

Top IT priorities for Nordic CIOs in 2018

Nordic CIOs tell Computer Weekly about their intentions for the year ahead Continue Reading

By

• Eeva Haaramo

Top UK and US firms still overestimating GDPR readiness

Less than five months before the compliance deadline for the EU’s General Data Protection Regulation (GDPR), most top UK and US firms are still overestimating their state of readiness, a study suggests Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware to hit cloud computing in 2018, predicts MIT

Ransomware targeting cloud services is one of the six biggest cyber threats likely to face organisations in 2018, according to the Massachusetts Institute of Technology Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 Australia IT stories of 2017

Australia capped the year with a slew of game-changing technology initiatives, from bolstering its supercomputing infrastructure and productivity of police officers to outlining an ambitious space programme Continue Reading

By

• Aaron Tan, Informa TechTarget

Antimalware software: How can Windows 10 disable it?

Kaspersky Lab recently accused Windows 10 of acting as an antivirus block to third-party antimalware software. Discover how your software is being blocked and how this can be fixed. Continue Reading

By

• Nick Lewis

Top 10 IT security stories of 2017

Here are Computer Weekly's top 10 IT security stories of 2017 Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 cyber crime stories of 2017

Here are Computer Weekly’s top 10 cyber crime stories of 2017 Continue Reading

By

• Warwick Ashford, Senior analyst

UK government blames North Korea for WannaCry cyber attack

The UK and US governments say a North Korean group was responsible for the ransomware attacks that hit the NHS and other organisations globally this year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

On digital identity in the UK - and the likely future for Gov.uk Verify

Did you know the UK government has a minister for identity? It’s Baroness Susan Williams, whose full responsibilities go under the grander title of minister of state for countering extremism. ... Continue Reading

By

• Bryan Glick, Editor in chief

Top cyber security predictions in APAC in 2018

Cyber criminals will ramp up efforts to mine cryptocurrencies, while mobile malware will rear its ugly head across the APAC region in 2018 Continue Reading

By

• Aaron Tan, Informa TechTarget

CW Europe: Eurosport pumps up digital technology for cycling fans

Read how Eurosport is using a novel combination of technology and information to develop immersive viewing experiences for sports fans across a range of platforms. Also find out how Russian state bank Vneshekonombank expects to become a vehicle for a blockchain revolution in the country’s public sector, and what the European Parliament's approval of a new electronic system to store biometric information might mean for UK citizens after Brexit. Continue Reading

Labour MP Liam Byrne launches ‘People’s Plan for Digital’

Shadow digital minister launches online collaborative project for the public and industry to share and debate ideas on the UK’s digital future Continue Reading

By

• Lis Evenstad

Innovation key to halt cyber attacks

In the light of the number of cyber breaches taking place, innovative security systems are required, according to the UK National Cyber Security Centre (NCSC) Continue Reading

By

• Warwick Ashford, Senior analyst

Russian-speaking hackers targeting financial institutions

A Russian-speaking cyber criminal gang is targeting financial institutions in the UK, US and Russia, a Moscow-based security firm reports Continue Reading

By

• Warwick Ashford, Senior analyst

Hackers steal nearly $80m in bitcoin

Hackers have stolen nearly $80m worth of bitcoin from a bitcoin mining service as the cryptocurrency’s value continues to skyrocket Continue Reading

By

• Warwick Ashford, Senior analyst

Andromeda mastermind Sergey Jarets jailed, say security researchers

Security researchers say they believe that a hacker arrested by Belarus police is Andromeda botnet mastermind Sergey Jarets Continue Reading

By

• Warwick Ashford, Senior analyst

Bitcoin industry enters top 10 DDoS targets

The bitcoin industry has become one of the top 10 industries most targeted by distributed denial of service attacks, a report has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Researchers warn of new support scam malware

Security researchers have identified a new strain of support scam malware and a way of clearing up infected machines Continue Reading

By

• Warwick Ashford, Senior analyst

Steal a march on cyber criminals through security by deception

Security by obscurity, although a common and tempting practice, is generally not recommended, but security by deception offers a way for defenders to make it more difficult for attackers to succeed and easier for defenders to catch them Continue Reading

By

• Nicholas Fearn

Barclays Bank stops offering Kaspersky software to new users

Bank is no longer offering customers Kaspersky anti-virus software after UK security agency issues warning Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

We're living in a global beta test to determine the legal and ethical boundaries of data collection

In the fast-expanding world of ubiquitous personal data, sometimes it feels like we’re living in an enormous global beta test to work out what’s acceptable and what’s not. This week, Google was hit ... Continue Reading

By

• Bryan Glick, Editor in chief

Google faces £2.7bn claim on behalf of 5.4 million iPhone users

Technology giant is accused of harvesting and selling data from millions of iPhone users from 2011 to 2012 who could each receive compensation of several hundred pounds Continue Reading

By

• Warwick Ashford, Senior analyst

Top IT predictions in APAC in 2018

A “mega cloud” that weaves together multiple private and public clouds, along with the use of AI to perform data-driven “thinking tasks”, could emerge next year Continue Reading

By

• Aaron Tan, Informa TechTarget

Lauri Love would face ‘medieval’ conditions in US prison if extradited over hacking charges

Engineering student Lauri Love should be tried in the UK, court hears, as new evidence is presented on the “medieval” conditions in US jails for people with medical problems Continue Reading

By

• Bill Goodwin & Julia Gregory

Consumer identity management a growing trend

Consumer identity and access management is a growing trend, but system choice is still challenging, according to KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses need to balance user experience, privacy and security

Balancing user experience, privacy and security for the connected consumer is a key challenge for online businesses, according to KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

IoT and artificial intelligence dominate APAC tech landscape in 2017

Businesses across the APAC region have started to dip their toes into AI and the internet of things to improve operations and stay competitive Continue Reading

By

• Aaron Tan, Informa TechTarget

Fintech is increasing operational risk to banks

European Banking Association report reveals fear of greater operational risk because of increased take-up of fintech in financial services sector Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Lauri Love: how reformed hackers halted the WannaCry virus

Lauri Love presents a compelling story of the WannaCry malware that nearly brought down the NHS, and the behind the scenes work of former hackers, and security researchers that helped to prevent lives being lost. Love is facing extradition to the US after allegedly taking part in a hacking protest over the death of internet pioneer Aaron Swartz, who faced jail for using a hidden computer to downloading academic journals at MIT. Continue Reading

By

• Bill Goodwin, Computer Weekly

UK sale of surveillance equipment to Macedonia raises questions over export licence policy

The UK approved an export licence for the sale of surveillance equipment to Macedonia – while the country was engaged in an illegal surveillance programme against its citizens. A senior minister was consulted on the decision Continue Reading

By

• Tena Prelec

My brother Lauri Love should have the right to a trial in the UK

Lauri Love should face trial over hacking allegations in a British Court, rather than be extradited to the US, where his extraordinary skills will be lost to society, says his younger sister Continue Reading

By

• Natasha Love

UK only average in terms of digital public services

UK government has the innovation skills to become a digital public services leader, but needs to improve the ID and authentication that sits underneath it to reach this goal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Blockchain could be used for citizen identity services, says Reform

Reform think tank argues that government could use blockchain technology to create a secure identity for citizens to use across public services Continue Reading

By

• Lis Evenstad

CW Nordics: IT companies focus on job satisfaction

The Nordics IT industry’s increasing focus on job satisfaction is paying off. Computer Weekly’s global salary survey shows Nordic IT professionals are happy with their pay and training opportunities and few are actively seeking a new job. Also in this issue, read how there is still gender inequality in the IT sector despite Nordic countries being hailed as pioneers of digital and equal worker rights. And Anna Eriksson, CIO of the Swedish National Land Survey, talks about the organisation’s approach to digital transformation. Continue Reading

Uber recognises need for consumer trust after breach cover up

New Uber leadership has recognised the importance of consumer trust and that they never should have attempted to cover up a 2016 data breach that affected millions of customers and drivers Continue Reading

By

• Warwick Ashford, Senior analyst

UK cyber defenders set to build on existing capability

UK national cyber attack response and investigation is a well-defined and rehearsed process, but the responsible agencies say they are building more capability and closing the gaps Continue Reading

By

• Warwick Ashford, Senior analyst

What can intent-based networking do for you?

In this week’s Computer Weekly, intent-based networking promises to optimise networks through automation and analytics, but can it deliver? At its annual Symposium event, Gartner said the CIO role continues to evolve and IT leaders need to champion digital change – we examine the issues. And we find out how security analytics can help deal with cyber threats. Read the issue now. Continue Reading

Europe not ready for imminent cyber strikes, say infosec professionals

Information security leaders in Europe believe a major breach of critical infrastructure is coming and that data breaches in their own organisations are imminent – yet most are not ready Continue Reading

By

• Warwick Ashford, Senior analyst

CW ANZ: On cyber alert

Achieving any form of computer security is an uphill task, costing Australian companies time and money with no prospect of a reprieve any time soon. In this month’s CW ANZ, read about the state of cyber security in Australia, Telstra’s efforts to help enterprises improve their cyber security posture, and how Australian organisations can keep up with the demands of cyber security. Also, find out why unsanctioned cloud apps continue to be a major bugbear among security chiefs in Australia. Continue Reading

CW ASEAN: How managed security services help to reduce cyber risk

The growing complexity and volume of cyber threats has led to rising demand for managed security services that provide the capabilities and technological know-how to combat cyber threats. In this month’s issue of CW ASEAN, read more about the pros and cons of using managed security services and considerations you should be aware of. Also, find out what organizations can do to put the odds in their favor when combating cyber threats. Continue Reading

How the biggest cyber security disasters could have been avoided

The headline-grabbing breaches that hit Accenture and Equifax in 2017 could have been averted had basic cyber hygiene been in place Continue Reading

By

• Jessica McGreal, Contino

Only a quarter of UK law firms are ready for GDPR, study shows

Just 25% of UK law firms are ready for the General Data Protection Regulation and one in five have experienced an attempted cyber attack in the past month Continue Reading

By

• Warwick Ashford, Senior analyst

Why UK police are learning cyber forensics

The need for the UK police force to conduct forensic investigations on computers is nothing new, but a rapid escalation of cyber crime has demanded a different approach Continue Reading

By

• Alex Bennett, Firebrand Training

Muslim hactivists hack “unhackable” IS news site

A Muslim hacktivist group has hacked into Islamic State’s news site and published thousands of subscribers’ details just hours after the site claimed it was impenetrable Continue Reading

By

• Warwick Ashford, Senior analyst

WikiLeaks publishes code and analysis of CIA hacking tool

Security experts are questioning the wisdom of WikiLeaks releasing more source code for US intelligence agency hacking tools Continue Reading

By

• Warwick Ashford, Senior analyst

TSB customers can use their faces to authenticate payments

Bank’s latest addition to its mobile apps is a facial recognition option for Apple iPhone X users Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CW Benelux: Young wayward hackers could help fill Dutch IT skills gap

In this issue, read how an initiative in Rotterdam is helping young people get into the IT sector by targeting those overlooked by traditional methods. Also find out how Amsterdam’s Schiphol airport is utilising open source software to create and use a multi-cloud platform with an open API, and how the Netherlands’ Rabobank has moved from tape libraries and robotic arms to a platform-based storage and retrieval system. Continue Reading

GDPR fines may affect almost 80% of US firms, poll shows

Most US companies risk fines for non-compliance with new European data protection laws that apply to all organisations processing any personal data of EU citizens Continue Reading

By

• Warwick Ashford, Senior analyst

A guide for businesses to China’s first cyber security law

Companies that break China’s new cyber security law may be fined or even have their licence to trade in the country removed Continue Reading

By

• Nick Beckett, CMS

Go beyond GDPR for a competitive edge

By exceeding the bare minimum requirements set by privacy regulations, businesses can win customers by offering greater assurances, says a business adviser Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses unprepared for cyber attacks, warn cyber professionals

Businesses are nowhere near prepared enough for a cyber attack, according to a poll of information and security professionals Continue Reading

By

• Warwick Ashford, Senior analyst

Dmarc email validation – we're doing it all wrong

Dmarc is a hugely important way to reduce email fraud – just ask HMRC – but it also makes email marketing campaigns far more effective Continue Reading

By

• Ed Tucker, Human Firewall

Infosec pros urged to demonstrate value to business

Information security professionals have been urged to help business understand the value of what they do and the importance of security and privacy Continue Reading

By

• Warwick Ashford, Senior analyst

Personal data of 46.2 million Malaysia mobile subscribers leaked

The massive data breach is yet another example of a ‘low and slow’ attack that stays dormant inside networks for years, without anyone noticing Continue Reading

By

• Aaron Tan, Informa TechTarget

IT rules the waves in the Volvo Ocean Race

In this week’s Computer Weekly, we go behind the scenes at the Volvo Ocean Race to see the technology connecting fans and organisers to the seven yachts on a 45,000-mile round-the-world voyage. A newly discovered security vulnerability puts every Wi-Fi network at risk of attack – we examine the problem and the solutions. And we find out how the Mercedes F1 team used big data analytics to win this year’s F1 constructors’ championship. Read the issue now. Continue Reading

Cyber security professionals urged to embrace AI and automation

IBM security intelligence head says professionals should embrace artificial intelligence and automation to ensure they do not become obsolete Continue Reading

By

• Warwick Ashford, Senior analyst

Deloitte sponsorship helps progress of Bletchley cyber school

Sponsorship will provide hundreds of places on online Qufaro CyberEPQ course Continue Reading

By

• Cliff Saran, Managing Editor

Airbus saves millions after building a digital learning library

Airbus has created a digital learning library that is helping more than 100,000 staff in 35 countries keep their skills updated Continue Reading

By

• Christian Annesley

NAO calls on NHS to ‘get its act together’ after WannaCry attack

The NHS could have prevented the WannaCry cyber attack had it followed basic IT security best practice, according to National Audit Office boss Continue Reading

By

• Lis Evenstad

IOActive warns of security flaws in maritime communication system

Researcher discovers critical security flaws in an Inmarsat maritime communication system, highlighting the cyber risks facing the shipping industry Continue Reading

By

• Warwick Ashford, Senior analyst

Kaspersky Lab explains how NSA data was uploaded

Malware detection triggered an upload of data from a National Security Agency contractor’s home computer, Kaspersky Lab says an internal investigation has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Oversight of intelligence agencies’ data sharing has ‘failed’, court hears

UK’s intelligence services lack adequate oversight and written guidelines when sharing databases of sensitive information, Privacy International argues in secret court Continue Reading

By

• Bill Goodwin, Computer Weekly

A history of hacking and hackers

A security professional’s view on criminal hacking has shifted away from the traditional stereotype of the hacker, towards a much more diverse cross-section of wider society Continue Reading

By

• Danny Moules

Bad Rabbit malware raises fears of third global ransomware attack

A ransomware attack that has commonalities with WannaCry NotPeya is reportedly hitting organisations in Russia, Ukraine, Turkey, Bulgaria and Germany Continue Reading

By

• Warwick Ashford, Senior analyst

Nearly 200 arrested for airline ticketing fraud

Police have arrested nearly 200 people for airline ticketing fraud in an international operation involving public and private sector organisations Continue Reading

By

• Warwick Ashford, Senior analyst

Almost 70% of customers willing to use fingerprint biometrics to shop

Consumers are becoming more comfortable using biometrics to pay when shopping, with fingerprint payments proving the most popular biometric identification method Continue Reading

By

• Clare McDonald, Business Editor

Where will artificial intelligence take us?

In this week’s Computer Weekly, artificial intelligence (AI) enthusiasts and sceptics debate the opportunities and risks of the much-hyped technology – we listen in to the House of Lords investigation. Our latest buyer’s guide examines the benefits and challenges of cloud-native applications. And we look at the best practice in defending email systems from cyber attacks. Read the issue now. Continue Reading

Nordic finance watchdogs losing patience over anti-money laundering systems at banks

The financial services watchdogs have informed banks that they have to do more to improve anti-money laundering systems Continue Reading

By

• Gerard O'Dwyer

IT security hindering productivity and innovation, survey shows

IT security is hindering productivity and innovation across enterprises, research has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Infoblox partners with McAfee to combine web and DNS security

Infoblox is to collaborate with McAfee to combine web and DNS security to deliver unified protection Continue Reading

By

• Warwick Ashford, Senior analyst

McAfee forges ahead with analytics, deep learning and AI

McAfee is forging ahead with its innovation efforts in advanced analytics, deep learning and artificial intelligence Continue Reading

By

• Warwick Ashford, Senior analyst

Focus needs to shift to breach impact, says McAfee researcher

Breach investigations commonly focus on the attackers and their motives, but a security researcher believes there needs to be more emphasis on business impact Continue Reading

By

• Warwick Ashford, Senior analyst

Shadow Cabinet Office minister slams Gov.uk Verify for being ‘inefficient’

Labour’s Jon Trickett says the government’s identity assurance platform is a poor use of taxpayers’ money and is “being handled appallingly” Continue Reading

By

• Lis Evenstad

RSA’s Middle East cyber security conference gains its own identity

RSA Abu Dhabi conference focuses on region’s cyber security needs as digital technology deployments expand Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CW500: How the NHS WannaCry cyber attack unfolded

NHS Digital’s head of security talks about the security landscape in the NHS and why it led to extra challenges when the WannaCry cyber attack hit the NHS in May 2017 Continue Reading

By

• Lis Evenstad

UK intelligence agencies ‘unlawfully’ sharing sensitive personal data, court hears

A secret court will decide whether Intelligence agencies are “unlawfully” sharing huge datasets containing sensitive information about the population with industry, government departments and overseas intelligence services. Continue Reading

By

• Bill Goodwin & Julia Gregory

Encryption flaw leaves every Wi-Fi network in the world wide open

A Belgian researcher has uncovered a major weakness in the WPA2 Wi-Fi security protocol that is thought to leave every Wi-Fi network in the world open to attack Continue Reading

By

• Alex Scroxton, Security Editor

Pizza Hut data breach shows need for board control

The poor handling of the data breach by fast food chain Pizza Hut shows that company boards need to take control, a London-based law firm advises Continue Reading

By

• Warwick Ashford, Senior analyst

SMEs more vulnerable than ever to cyber attacks, survey shows

The biggest cyber threat to UK and US small businesses is employees’ weak passwords, as the frequency, intensity and cost of cyber attacks continue to rise, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

CW Middle East: Internet of things can help Gulf countries to diversify

The Middle East’s push towards economic diversification is driving innovation in internet of things (IoT) applications for emerging services sectors, such as transport and logistics, telecommunications, financial services and tourism. Also read how the Dubai Health Authority is rolling out Salama, a unified electronic medical record (EMR) system, and a survey shows organisations in the Middle East are not offering IT staff enough training and don’t employ enough women in IT. Continue Reading

CW500: A perfect storm – the cyber attack that hit Parliament

The former director of the Parliamentary Digital Service shares details and lessons learned from the cyber attack that hit UK parliament in June and explains why it was a “good experience” Continue Reading

By

• Lis Evenstad

Will the review of Gov.uk Verify fix the UK's digital identity problems?

The rumoured review of the UK government’s identity assurance programme provides the ideal opportunity to fix problems and accelerate progress Continue Reading

By

• Jerry Fishenden

Dutch government agreement increasingly focuses on IT security

The coalition government in the Netherlands has agreed its plan for the next four years, with IT security prominent Continue Reading

By

• Tijs Hofmans

Global cyber security collaboration initiative launched in Krakow

Cyber security ecosystems around the world have launched an initiative aimed at strengthening collaboration between regional ecosystems Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore’s public sector finds agility and speed in AWS

City-state’s government has been able to meet peak demands and address security issues through a cloud-based web-hosting platform powered by Amazon Web Services Continue Reading

By

• Aaron Tan, Informa TechTarget

How Australia is tackling cyber crime

Telcos such as Telstra and industry associations in Australia are chipping in to help enterprises that are being targeted by cyber criminals with phishing and social engineering exploits Continue Reading

By

• Beverley Head

Yahoo breach affected 3 billion accounts

Yahoo’s personal data breach affected three billion user accounts, the company’s new owners have revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security industry key to solving skills gap

In the face of a growing shortage of cyber security skills around the world, the security industry itself needs to do more to attract people Continue Reading

By

• Warwick Ashford, Senior analyst

Where the device hits the network – a mobile device management update

As business becomes increasingly mobile, we look at the latest trends in mobile device management to give businesses the edge Continue Reading

By

• Rene Millman

WannaCry an example of pseudo-ransomware, says McAfee

The global WannaCry and NotPetya attacks were both examples of pseudo-ransomware, according to McAfee researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Large scale IoT deployments double in 12 months

Vodafone’s fifth annual look at the IoT market reveals that the percentage of companies with more than 50,000 connected devices has effectively doubled in the past year Continue Reading

By

• Alex Scroxton, Security Editor

Global hacker botnet tops 6 million hijacked devices

A year after the first Mirai botnet attacks, the global botnet has grown, with many countries and cities unwittingly hosting large number of bot-infected devices Continue Reading

By

• Warwick Ashford, Senior analyst

How printers can be a launchpad for malware attacks

HP continues to shine a spotlight on print security with the recent announcement of embedded print security features that aim to mitigate the threat of malware. So how vulnerable are printers to ... Continue Reading

By

• Louella Fernandes, Quocirca

Mac OS passwords at risk of theft, researcher warns

Some Apple Mac users are at risk of password theft due to a zero-day vulnerability discovered in some versions of the operating system Continue Reading

By

• Warwick Ashford, Senior analyst

Cage director found guilty of terrorism offence after refusing to disclose passwords

Muhammad Rabbani, international director of Cage, is convicted of an offence under the terrorism act after refusing to disclose his mobile phone PIN and laptop password under Terrorism Act Continue Reading

By

• Bill Goodwin, Computer Weekly