IT security

Powerful Zyklon malware exploiting MS Office flaws

Cyber attackers are exploiting three recently discovered vulnerabilities in Microsoft Office to spread multifunction Zyklon malware, security researchers warn Continue Reading

By

• Warwick Ashford, Security Editor

The rights and wrongs about GDPR compliance

We explore some common myths surrounding the forthcoming General Data Protection Regulation Continue Reading

By

• Jimmy Desai

Create security culture to boost cyber defences, says Troy Hunt

Security suffers when there is tension between software developers and security professionals, but it is common in many organisations, says world-renowned security blogger and trainer Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attackers upped their game in 2017, warns report

Cyber attackers ranging from criminals to nation states have upped their game in the past year, “moving the needle” in terms of tactics, techniques and procedures, a report by a cyber security firm warns Continue Reading

By

• Warwick Ashford, Senior analyst

Next-gen Mirai botnet targets cryptocurrency mining operations

A variant of the Satori botnet, a successor of the IoT device hijacking Mirai botnet, is designed to hijack cryptocurrency mining operations, syphoning off newly created digital coins Continue Reading

By

• Warwick Ashford, Senior analyst

Meltdown and Spectre: to patch or not to patch

As IT recoils from the Spectre and Meltdown chip exploits, companies face patches that are incompatible, leading to crashes, reduced performance and lock-ups Continue Reading

By

• Cliff Saran, Managing Editor

Business needs to reduce cyber threat to payment card data

Cardholder data is a prime target for cyber criminals, and that is only likely to increase in the coming year, according to a cloud-based secure payments firm Continue Reading

By

• Warwick Ashford, Senior analyst

North Korean hackers tied to cryptocurrency attacks in South Korea

North Korea's Lazarus Group targeted South Korean cryptocurrency exchanges and users in late 2017, but may soon go after exchanges and users in other countries, warns report Continue Reading

By

• Warwick Ashford, Senior analyst

Davos: Disintegration of the internet could create economic turmoil

Politicians and business leaders will discuss the risks posed by fake news, cyber attacks, and artificial intelligence to jobs, political stability and global security, at the World Economic Forum in Davos Continue Reading

By

• Bill Goodwin, Investigations Editor

Vulnerability exploit report shows importance of patching

Latest vulnerability exploit report by security firm AlienVault shows the most popular vulnerabilities remain exploited for several years Continue Reading

By

• Warwick Ashford, Senior analyst

LeakedSource operator could face up to 10 years in jail

Canadian man accused of selling stolen identities and passwords on website Continue Reading

By

• Zach Emmanuel, Computer Weekly

Sweden pilots surveillance technology to combat terrorism and crime

The Swedish police and security agencies are trialling surveillance equipment to help them respond to terrorism and crime more quickly Continue Reading

By

• Gerard O'Dwyer

Skygofree Android spyware active since 2014, say researchers

Powerful, highly advanced spyware has been targeting Android mobiles for the past four years, security researchers have discovered Continue Reading

By

• Warwick Ashford, Senior analyst

Beware fake Meltdown and Spectre patches

Security experts have warned that cyber attackers will be quick to use the Meltdown and Spectre exploits, but the first attempt to capitalise on them has come in the form of fake updates Continue Reading

By

• Warwick Ashford, Senior analyst

How to fix the Meltdown and Spectre chip flaws

In this week’s Computer Weekly, as CIOs come to terms with the Meltdown and Spectre processor flaws that make every computer a security risk, we examine how to protect your IT estate. We find out how Alexa-style voice recognition smart speakers can help with CRM strategies and open up new sources of customer data. And we look at how the public sector is implementing DevOps and the benefits being delivered. Read the issue now. Continue Reading

Most UK enterprise mobiles not patched for Meltdown and Spectre

Very few UK enterprise mobile devices have been patched against the recently discovered Meltdown and Spectre exploits and almost a quarter cannot be patched, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Meltdown and Spectre a big deal for enterprises

Although consumers are relatively unaffected by the recently disclosed security vulnerabilities in most modern processors, enterprises need to take the threat seriously. Computer Weekly looks at how enterprise IT and security professionals should be approaching these threats Continue Reading

Why GDPR is great for SMEs

SME laggards facing potential fines for non-compliance should wake up and smell the tasty carrot of a leaner, smarter business post-GDPR Continue Reading

IT Priorities 2018: Growing interest in hybrid IT in ASEAN

CIOs and IT professionals in Southeast Asia have earmarked hybrid infrastructure as a top priority in 2018, in spite of waning interest across the wider Asia-Pacific region Continue Reading

By

• Aaron Tan, Informa TechTarget

London cyber security careers fair highlights opportunities

A cyber security careers fair in London on 17 January 2018 is aimed at anyone thinking of a career in the field, including experienced professionals and students Continue Reading

By

• Warwick Ashford, Senior analyst

Ohio computer programmer faces 16 criminal charges over monitoring thousands of computers

A 28-year-old computer expert has been charged for monitoring thousands of computers, using a form of malware he created Continue Reading

By

• Zach Emmanuel, Computer Weekly

Spectre of IT vulnerability looms large

In some ways the Meltdown and Spectre flaws represent a risk that goes to the very heart of computing. This microprocessor flaw has resulted in major network, server, PC and mobile hardware firms ... Continue Reading

By

• Cliff Saran, Managing Editor

Why GDPR is great for SMEs

SME laggards facing potential fines for non-compliance should wake up and smell the tasty carrot of a leaner, smarter business post-GDPR Continue Reading

By

• Jim Mortleman

Call for statutory regulation of police number plate cameras amid concerns over accuracy

The UK’s automatic number plate recognition database – one the largest non-military data-gathering systems – records up to 1.2 million false readings of number plates every day. It should be subject to statutory regulation, says an independent watchdog Continue Reading

By

• Bill Goodwin, Investigations Editor

Check Point finds AdultSwine malware in Google Play apps

Security researchers have discovered new malware code hidden in game apps, mainly aimed at youngsters Continue Reading

By

• Warwick Ashford, Senior analyst

Intel makes security-first pledge

As it scrambles to deal with the Meltdown and Spectre processor exploits, Intel has made a series of security commitments Continue Reading

By

• Warwick Ashford, Senior analyst

F-Secure highlights another critical Intel security issue

As Intel scrambles to issue security updates to address the Meltdown and Spectre exploits, researchers have highlighted another, unrelated, critical security issue that could affect millions of corporate laptops Continue Reading

By

• Warwick Ashford, Senior analyst

How secure are smart energy grids?

The improved efficiency of smart grids need to be weighed against the cost of security - presenting a unique opportunity for the tech sector and a new market for security companies Continue Reading

By

• Peter Ray Allison

Mobile app flaws are a risk to industrial IT systems, says report

Cyber security vulnerabilities in mobile applications could be exploited to compromise industrial network infrastructure, a report warns Continue Reading

By

• Warwick Ashford, Senior analyst

CES 2018: Hyundai and Cisco bring SDN to the automobile

Hyundai will debut a new generation of hyperconnected software-defined car in 2019, incorporating a Cisco-designed network platform Continue Reading

By

• Alex Scroxton, Security Editor

Spyware targets North Korean dissidents via social links, says McAfee

Researchers at security firm McAfee have confirmed that social networks are being used to target North Korean dissidents with spyware Continue Reading

By

• Warwick Ashford, Senior analyst

CW Middle East: Technology transforms healthcare delivery in Gulf region

The Gulf’s healthcare sector has witnessed exponential growth in the past two decades, driven by a rapidly growing population and a rise in lifestyle-related diseases. Read how technology is helping the region’s healthcare sector cope with demand. Also in this issue, find out how an initiative at Avaya hopes to use blockchain networks to help make the citizens of Dubai happy, and how the Dubai Electricity and Water Authority’s smart transformation is progressing. Continue Reading

Nuclear weapons’ cyber attack risk relatively high, says report

With the potential for catastrophic consequences from a nuclear weapons detonation attack, it is crucial to have the most robust nuclear policies in place, says an international affairs think-tank Continue Reading

By

• Warwick Ashford, Senior analyst

EC underlines need for data transfer agreement post-Brexit

The European Commission has emphasised the importance of having a data transfer agreement in place after the UK leaves the European Union Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals exploit Oracle WebLogic flaw

Researchers are urging companies to apply a security update to patch a flaw in Oracle’s WebLogic Server component that is being exploited to mine cryptocurrency Continue Reading

By

• Warwick Ashford, Senior analyst

Margot James takes over as digital minister after government reshuffle

Former minister for business succeeds Matt Hancock after his promotion to secretary of state Continue Reading

By

• Bryan Glick, Editor in chief

UAE tech growth prompts firms to review internal IT security

As IT becomes more prominent in the UAE economy, more and more internal connections between people and systems are created, all of which need to be secured Continue Reading

By

• Alicia Buller

ICO fines Carphone Warehouse £400,000

Mobile retailer hit with one of the highest fines for putting personal data at risk as UK privacy watchdog warns that more stringent data protection laws will apply from 25 May 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

Spectre: How reverse-engineering a microprocessor revealed a fundamental flaw

Researchers have published their work on Spectre, a flaw that affects every modern CPU. We find out what went wrong from one of the engineers Continue Reading

By

• Cliff Saran, Managing Editor

Max Schrems champions NGO to fight for GDPR rights

Privacy activist whose legal challenge of Facebook led to the scrapping of the Safe Harbour Agreement says crowdfunding a new type of non-government organisation is essential to deliver privacy rights Continue Reading

By

• Warwick Ashford, Senior analyst

Meltdown and Spectre: Making a case for greater public cloud use

The Meltdown and Spectre CPU vulnerabilities constitute the greatest test yet of the public cloud provider community’s data security claims, says Caroline Donnelly, while providing enterprise IT ... Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Meltdown and Spectre a big deal for enterprises

Although consumers are relatively unaffected by the recently disclosed security vulnerabilities in most modern processors, enterprises need to take the threat seriously. Computer Weekly looks at how enterprise IT and security professionals should be approaching these threats Continue Reading

By

• Warwick Ashford, Senior analyst

Hold The Front Page: Common Sense Prevails In IT Security Shock!

IT is overloaded with slick marketing terms that have little or no substance behind them – the classic “solution searching for a problem” scenario but… just occasionally the complete opposite prevails Continue Reading

By

• Steve Broadhead, Broadband Testing

Countdown to GDPR

In this week’s Computer Weekly, with the EU General Data Protection Regulation (GDPR) coming in to force this year, we look at the challenges for businesses to comply by the 25 May deadline. We examine the future for HPE as CEO Meg Whitman steps down. And we find out how the move to hyper-converged systems affects your backup strategy. Read the issue now. Continue Reading

Cyber attacks in 2017 drive Nordic security efforts

The volume of cyber attacks last year has increased boardroom focus on security in the Nordic region Continue Reading

By

• Eeva Haaramo

Intel to set up new group to focus on hardware security

Chip maker is reportedly planning to form a new group to focus on hardware security as it scrambles to limit the impact of recently discovered security flaws in chip designs Continue Reading

By

• Warwick Ashford, Senior analyst

Top UK and US firms still overestimating GDPR readiness

Less than five months before the compliance deadline for the EU’s General Data Protection Regulation (GDPR), most top UK and US firms are still overestimating their state of readiness, a study suggests Continue Reading

Sweden steps up cyber defence measures

Sweden is tightening up its cyber security defences as part of a wider national security strategy Continue Reading

By

• Gerard O'Dwyer

Florida warns 30,000 medical records may have been exposed

The health agency in the US state of Florida has warned that the records of up to 30,000 Medicaid patients may have been exposed when the agency’s IT systems were breached Continue Reading

By

• Warwick Ashford, Senior analyst

Get tooled up to meet GDPR requirements

We look at options for tools to help organisations comply with the EU’s General Data Protection Regulation Continue Reading

By

• Renee Murphy

IT Priorities 2018: ANZ ups ante on cloud services and software

Organisations in Australia and New Zealand are bullish on IT spending, particularly in cloud infrastructure services, cloud applications and all-flash storage arrays Continue Reading

By

• Aaron Tan, Informa TechTarget

Patch systems against Meltdown and Spectre, urges ICO

UK’s data protection watchdog is calling for organisations to apply security updates to mitigate against exploits of microprocessor flaws as soon as possible to safeguard personal data Continue Reading

By

• Warwick Ashford, Senior analyst

2018 could be year of critical infrastructure attacks, says report

The coming year is likely to see an increase in the number of cyber attacks on critical national infrastructure (CNI), according to a report based on experts’ forecasts Continue Reading

By

• Warwick Ashford, Senior analyst

Apple confirms all devices affected by Meltdown and Spectre

Apple has confirmed that all iPhones, iPads and Mac computers are affected by the recently discovered microprocessor exploits as the financial services industry assesses the risk Continue Reading

By

• Warwick Ashford, Senior analyst

Plugging Singapore’s cyber security skills gap

Some 20 teams of cyber security industry professionals and tertiary students in Singapore pitted their skills against one another in a competition aimed at plugging the cyber security skills gap in ... Continue Reading

By

• Aaron Tan, Informa TechTarget

Zero in on your zero-day vulnerabilities

A zero-day attack comes, by definition, out of the blue. You cannot predict its nature or assess how much damage it might cause, but you can take some basic steps to protect yourself from a potentially crippling cyber strike Continue Reading

By

• Graeme Park

Meltdown and Spectre: AWS, Google and Microsoft rush to patch cloud chip flaws

Amazon, Google and Microsoft rush to fix chip flaws that could leave cloud customers at risk of having their data accessed or stolen by other users Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Critical Intel security patch will slow PCs, servers and Macs

AMD shares rise on news that the performance of millions of Windows PCs, Linux servers and Apple Macs is to be impacted by critical updates for a recently discovered security flaw in Intel chips manufactured in the past 10 years Continue Reading

By

• Warwick Ashford, Senior analyst

What the EU’s new data protection regime means for ASEAN

A large proportion of businesses in the regional economic grouping will be affected by Europe’s General Data Protection Regulation, but awareness of the new rules remains low, even in countries with existing data protection laws Continue Reading

By

• Aaron Tan, Informa TechTarget

IoT botnet DDoS attacks predicted after exploit code published

Security researchers are urging businesses to ensure they are prepared for large-scale DDoS attacks following the online publication of code to exploit a vulnerability in Huawei HG532 routers Continue Reading

By

• Warwick Ashford, Senior analyst

Top IT priorities for Nordic CIOs in 2018

Nordic CIOs tell Computer Weekly about their intentions for the year ahead Continue Reading

By

• Eeva Haaramo

Top UK and US firms still overestimating GDPR readiness

Less than five months before the compliance deadline for the EU’s General Data Protection Regulation (GDPR), most top UK and US firms are still overestimating their state of readiness, a study suggests Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware to hit cloud computing in 2018, predicts MIT

Ransomware targeting cloud services is one of the six biggest cyber threats likely to face organisations in 2018, according to the Massachusetts Institute of Technology Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 Australia IT stories of 2017

Australia capped the year with a slew of game-changing technology initiatives, from bolstering its supercomputing infrastructure and productivity of police officers to outlining an ambitious space programme Continue Reading

By

• Aaron Tan, Informa TechTarget

Antimalware software: How can Windows 10 disable it?

Kaspersky Lab recently accused Windows 10 of acting as an antivirus block to third-party antimalware software. Discover how your software is being blocked and how this can be fixed. Continue Reading

By

• Nick Lewis

Top 10 IT security stories of 2017

Here are Computer Weekly's top 10 IT security stories of 2017 Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 cyber crime stories of 2017

Here are Computer Weekly’s top 10 cyber crime stories of 2017 Continue Reading

By

• Warwick Ashford, Senior analyst

UK government blames North Korea for WannaCry cyber attack

The UK and US governments say a North Korean group was responsible for the ransomware attacks that hit the NHS and other organisations globally this year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

On digital identity in the UK - and the likely future for Gov.uk Verify

Did you know the UK government has a minister for identity? It’s Baroness Susan Williams, whose full responsibilities go under the grander title of minister of state for countering extremism. ... Continue Reading

By

• Bryan Glick, Editor in chief

Top cyber security predictions in APAC in 2018

Cyber criminals will ramp up efforts to mine cryptocurrencies, while mobile malware will rear its ugly head across the APAC region in 2018 Continue Reading

By

• Aaron Tan, Informa TechTarget

CW Europe: Eurosport pumps up digital technology for cycling fans

Read how Eurosport is using a novel combination of technology and information to develop immersive viewing experiences for sports fans across a range of platforms. Also find out how Russian state bank Vneshekonombank expects to become a vehicle for a blockchain revolution in the country’s public sector, and what the European Parliament's approval of a new electronic system to store biometric information might mean for UK citizens after Brexit. Continue Reading

Labour MP Liam Byrne launches ‘People’s Plan for Digital’

Shadow digital minister launches online collaborative project for the public and industry to share and debate ideas on the UK’s digital future Continue Reading

By

• Lis Evenstad

Innovation key to halt cyber attacks

In the light of the number of cyber breaches taking place, innovative security systems are required, according to the UK National Cyber Security Centre (NCSC) Continue Reading

By

• Warwick Ashford, Senior analyst

Russian-speaking hackers targeting financial institutions

A Russian-speaking cyber criminal gang is targeting financial institutions in the UK, US and Russia, a Moscow-based security firm reports Continue Reading

By

• Warwick Ashford, Senior analyst

Hackers steal nearly $80m in bitcoin

Hackers have stolen nearly $80m worth of bitcoin from a bitcoin mining service as the cryptocurrency’s value continues to skyrocket Continue Reading

By

• Warwick Ashford, Senior analyst

Andromeda mastermind Sergey Jarets jailed, say security researchers

Security researchers say they believe that a hacker arrested by Belarus police is Andromeda botnet mastermind Sergey Jarets Continue Reading

By

• Warwick Ashford, Senior analyst

Bitcoin industry enters top 10 DDoS targets

The bitcoin industry has become one of the top 10 industries most targeted by distributed denial of service attacks, a report has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Researchers warn of new support scam malware

Security researchers have identified a new strain of support scam malware and a way of clearing up infected machines Continue Reading

By

• Warwick Ashford, Senior analyst

Steal a march on cyber criminals through security by deception

Security by obscurity, although a common and tempting practice, is generally not recommended, but security by deception offers a way for defenders to make it more difficult for attackers to succeed and easier for defenders to catch them Continue Reading

By

• Nicholas Fearn

Barclays Bank stops offering Kaspersky software to new users

Bank is no longer offering customers Kaspersky anti-virus software after UK security agency issues warning Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

We're living in a global beta test to determine the legal and ethical boundaries of data collection

In the fast-expanding world of ubiquitous personal data, sometimes it feels like we’re living in an enormous global beta test to work out what’s acceptable and what’s not. This week, Google was hit ... Continue Reading

By

• Bryan Glick, Editor in chief

Google faces £2.7bn claim on behalf of 5.4 million iPhone users

Technology giant is accused of harvesting and selling data from millions of iPhone users from 2011 to 2012 who could each receive compensation of several hundred pounds Continue Reading

By

• Warwick Ashford, Senior analyst

Top IT predictions in APAC in 2018

A “mega cloud” that weaves together multiple private and public clouds, along with the use of AI to perform data-driven “thinking tasks”, could emerge next year Continue Reading

By

• Aaron Tan, Informa TechTarget

Lauri Love would face ‘medieval’ conditions in US prison if extradited over hacking charges

Engineering student Lauri Love should be tried in the UK, court hears, as new evidence is presented on the “medieval” conditions in US jails for people with medical problems Continue Reading

By

• Bill Goodwin & Julia Gregory

Consumer identity management a growing trend

Consumer identity and access management is a growing trend, but system choice is still challenging, according to KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses need to balance user experience, privacy and security

Balancing user experience, privacy and security for the connected consumer is a key challenge for online businesses, according to KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

IoT and artificial intelligence dominate APAC tech landscape in 2017

Businesses across the APAC region have started to dip their toes into AI and the internet of things to improve operations and stay competitive Continue Reading

By

• Aaron Tan, Informa TechTarget

Fintech is increasing operational risk to banks

European Banking Association report reveals fear of greater operational risk because of increased take-up of fintech in financial services sector Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Lauri Love: how reformed hackers halted the WannaCry virus

Lauri Love presents a compelling story of the WannaCry malware that nearly brought down the NHS, and the behind the scenes work of former hackers, and security researchers that helped to prevent lives being lost. Love is facing extradition to the US after allegedly taking part in a hacking protest over the death of internet pioneer Aaron Swartz, who faced jail for using a hidden computer to downloading academic journals at MIT. Continue Reading

By

• Bill Goodwin, Investigations Editor

UK sale of surveillance equipment to Macedonia raises questions over export licence policy

The UK approved an export licence for the sale of surveillance equipment to Macedonia – while the country was engaged in an illegal surveillance programme against its citizens. A senior minister was consulted on the decision Continue Reading

By

• Tena Prelec

My brother Lauri Love should have the right to a trial in the UK

Lauri Love should face trial over hacking allegations in a British Court, rather than be extradited to the US, where his extraordinary skills will be lost to society, says his younger sister Continue Reading

By

• Natasha Love

UK only average in terms of digital public services

UK government has the innovation skills to become a digital public services leader, but needs to improve the ID and authentication that sits underneath it to reach this goal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Blockchain could be used for citizen identity services, says Reform

Reform think tank argues that government could use blockchain technology to create a secure identity for citizens to use across public services Continue Reading

By

• Lis Evenstad

CW Nordics: IT companies focus on job satisfaction

The Nordics IT industry’s increasing focus on job satisfaction is paying off. Computer Weekly’s global salary survey shows Nordic IT professionals are happy with their pay and training opportunities and few are actively seeking a new job. Also in this issue, read how there is still gender inequality in the IT sector despite Nordic countries being hailed as pioneers of digital and equal worker rights. And Anna Eriksson, CIO of the Swedish National Land Survey, talks about the organisation’s approach to digital transformation. Continue Reading

Uber recognises need for consumer trust after breach cover up

New Uber leadership has recognised the importance of consumer trust and that they never should have attempted to cover up a 2016 data breach that affected millions of customers and drivers Continue Reading

By

• Warwick Ashford, Senior analyst

UK cyber defenders set to build on existing capability

UK national cyber attack response and investigation is a well-defined and rehearsed process, but the responsible agencies say they are building more capability and closing the gaps Continue Reading

By

• Warwick Ashford, Senior analyst

What can intent-based networking do for you?

In this week’s Computer Weekly, intent-based networking promises to optimise networks through automation and analytics, but can it deliver? At its annual Symposium event, Gartner said the CIO role continues to evolve and IT leaders need to champion digital change – we examine the issues. And we find out how security analytics can help deal with cyber threats. Read the issue now. Continue Reading

Europe not ready for imminent cyber strikes, say infosec professionals

Information security leaders in Europe believe a major breach of critical infrastructure is coming and that data breaches in their own organisations are imminent – yet most are not ready Continue Reading

By

• Warwick Ashford, Senior analyst

CW ANZ: On cyber alert

Achieving any form of computer security is an uphill task, costing Australian companies time and money with no prospect of a reprieve any time soon. In this month’s CW ANZ, read about the state of cyber security in Australia, Telstra’s efforts to help enterprises improve their cyber security posture, and how Australian organisations can keep up with the demands of cyber security. Also, find out why unsanctioned cloud apps continue to be a major bugbear among security chiefs in Australia. Continue Reading

CW ASEAN: How managed security services help to reduce cyber risk

The growing complexity and volume of cyber threats has led to rising demand for managed security services that provide the capabilities and technological know-how to combat cyber threats. In this month’s issue of CW ASEAN, read more about the pros and cons of using managed security services and considerations you should be aware of. Also, find out what organizations can do to put the odds in their favor when combating cyber threats. Continue Reading