IT security

Security Think Tank: Top five access control mistakes

In the modern business environment, what are the most common access control mistakes and what is the best way to correct them? Continue Reading

By

• Tim Holman, 2-sec

CSA outlines CIOs’ top 12 cloud security concerns

Cloud Security Alliance’s research team uncovers the “dirty dozen” off-premise threats Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

RSAC16: RSA’s Amit Yoran comes out in support of strong encryption

A policy of weakened encryption would harm US economic interests and undermine those trying to defend digital environments, according to RSA president Amit Yoran Continue Reading

By

• Warwick Ashford, Senior analyst

RSAC16: US works on data access agreement with UK

The US is negotiating with the UK to establish a new framework that will permit UK authorities to access electronic communications directly from US companies Continue Reading

By

• Warwick Ashford, Senior analyst

Protecting the UK from cyber attacks

In this week’s Computer Weekly, we talk to the National Crime Agency’s top cyber cop, Sarah Goodall, about how the police are tackling IT security threats against the country through global collaborations. We ask CIOs for their tips on building an IT strategy for the digital age. And we review the big six storage suppliers’ plans for all-flash arrays. Read the issue now. Continue Reading

Majority of Britons support government surveillance for national security

A survey reveals that a majority of UK citizens support government surveillance for national security as Apple attempts to rally public support in its row with the FBI over encryption Continue Reading

By

• Warwick Ashford, Senior analyst

Nissan acts on Leaf car app security flaw after researcher goes public

Nissan suspends its electric car app after a researcher went public about a security flaw that could enable attackers to take control of heating systems Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber crime is fastest growing economic crime, says PwC report

More than half of UK organisations say they expect to be the victim of cyber crime in the next two years, suggesting it will become the UK’s largest economic crime, says a PwC report Continue Reading

By

• Warwick Ashford, Senior analyst

Surviving broadband failure

In this week’s Computer Weekly, after the recent BT broadband outage, we examine the options to keep your communications in place in the event of a failure, to ensure business continuity. We look at the prospects for the OpenStack open source cloud platform in the enterprise. And we see how Ireland is making progress on delivering a digital health service. Read the issue now. Continue Reading

Social engineering confirmed as top information security threat

Cyber attackers shifted away from automated exploits in 2015 and instead tricked people into doing the dirty work, Proofpoint researchers found Continue Reading

By

• Warwick Ashford, Senior analyst

HSBC launches biometric security for mobile banking in the UK

Bank claims UK’s largest planned roll-out of voice biometric security technology, with more than 15 million customers in line for voice and fingerprint authentication services Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile innovation shifts to smartphone services

As smartphone sales continue to stagnate, suppliers are looking to innovate in more novel ways Continue Reading

By

• Alex Scroxton, Security Editor

CW Europe: February 2016

In Europe cloud is restricted and hybrid setups make use of local compute and storage. Continue Reading

Judge orders Apple to unlock San Bernardino gunman’s iPhone

A US judge has ordered Apple to help the FBI bypass the auto-erase function on the San Bernardino gunman's iPhone to find the passcode and access data, but the company says it will contest the order Continue Reading

By

• Warwick Ashford, Senior analyst

EU managers need to up cyber security collaboration, study finds

There is still much work to be done in the area of collaboration and sharing responsibility when it comes to preventing data breaches, a study has found Continue Reading

By

• Warwick Ashford, Senior analyst

How AstraZeneca saved $350m by insourcing IT

In this week’s Computer Weekly, we talk to pharmaceutical giant AstraZeneca to find out why it brought its outsourced IT back in-house, and how it saved $350m per year as a result. As the data protection debate rages around Europe, we ask if the new EU/US Privacy Shield agreement will protect citizens’ data. And we examine the relative merits of datacentre colocation and the cloud. Read the issue now. Continue Reading

Interview: Cabinet Office minister Matt Hancock on digital government

The government’s minister for digital reform talks about creating a Digital Leadership Academy, learning valuable lessons, and his love for open data Continue Reading

By

• Lis Evenstad

US IT professionals overconfident in cyber attack detection, study finds

Most US IT professionals are confident in key security controls to detect cyber attacks – but unsure how long it would take automated tools to discover a breach Continue Reading

By

• Warwick Ashford, Senior analyst

Social engineering is top hacking method, survey shows

Social engineering tops the list of popular hacking methods, underlining the need for continuous monitoring, according to security firm Balabit Continue Reading

By

• Warwick Ashford, Senior analyst

TechUK calls on government to take reports on spy laws seriously

Government must address the fundamental concerns raised by expert witnesses, MPs and Lords about the draft Investigatory Powers Bill, says TechUK Continue Reading

By

• Warwick Ashford, Senior analyst

Gov.uk Verify identity system targets 50 government services for April go-live

Government identity assurance system is set to move from beta to live in April, three years after its original target date Continue Reading

By

• Bryan Glick, Editor in chief

How software protects people

In this week’s Computer Weekly, we find out how software is helping to maintain safety in high-risk sectors like oil & gas, aerospace and healthcare – and what lessons they hold for other organisations. We offer six tips from CIOs for innovation with data. And after the HSBC cyber attack, we examine the continuing threat to businesses from distributed denial of service (DDoS) attacks. Read the issue now. Continue Reading

Bulk data collection unnecessary for surveillance, says cyber expert

Opting for bulk data collection and other intrusive surveillance overlooks other means available that do not involve collateral damage to businesses and innocent people, says cyber expert Continue Reading

By

• Warwick Ashford, Senior analyst

Google’s Chrome to flag deceptive embedded content

Browser will warn of any embedded content such as ads that pretend to act like, and look and feel like, a trusted entity Continue Reading

By

• Warwick Ashford, Senior analyst

DDoS is most common cyber attack on financial institutions

January’s attack on HSBC is typical for the financial sector, but no business should consider itself unlikely to be targeted in this way, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

HSBC online services hit by DDoS attack

HSBC was hit by a distributed denial of service (DDoS) attack, which targeted its online personal banking services. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

ICO launches data privacy assessment tool for SMEs

The ICO has launched an online self-assessment tool to help SMEs to comply with data protection laws and improve data handling procedures Continue Reading

By

• Warwick Ashford, Senior analyst

Business urged to take action on data privacy

Security professionals use Data Protection Day to encourage businesses to do more to protect personal data Continue Reading

By

• Warwick Ashford, Senior analyst

Keep data safe or risk financial impact, ICO warns business

The knock-on effect of a data breach can be devastating for a company, warns information commissioner Christopher Graham Continue Reading

By

• Warwick Ashford, Senior analyst

New government plan to support cyber security startups

Government has announced a £250,000 programme to increase the rate of cyber security startup development in the UK Continue Reading

By

• Warwick Ashford, Senior analyst

Average DDoS attacks fatal to most businesses, report reveals

Criminal activity is top motivation for DDoS attacks as average attacks become strong enough to down most businesses, Arbor Networks report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Beyond India – the emerging outsourcing destinations

In this week’s Computer Weekly, we look at the growing number of offshore alternatives to the dominant outsourcing destination of India and assess their relative merits. We examine how to respond if your organisation is affected by a data breach. And we analyse how virtualisation technology can help improve your disaster recovery strategy. Read the issue now. Continue Reading

$54m cyber fraud hits aircraft supplier share price

Austrian aircraft industry supplier reports cyber fraud loss of $54m, way above the average cost of the worst breaches in the UK of up to $4.4m in 2015 Continue Reading

By

• Warwick Ashford, Senior analyst

CW Europe - January 2016

This month, CW Europe looks in-depth at an issue that is set to affect people across all 28 European Union member states – the abolition of mobile roaming charges, set for mid-2017. Continue Reading

Candy Crush maker King secures mobile access through cloud

Candy Crush maker King.com uses cloud-based Duo Security authentication for access to cloud services, customised apps and remote VPNs Continue Reading

By

• Warwick Ashford, Senior analyst

Most Android devices running outdated versions

Nearly a third of Android devices in enterprises today are running version 4.0 or older of the operating system, leaving them highly susceptible to vulnerabilities, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Is government surveillance going too far?

In this week’s Computer Weekly, as the UK prepares new laws on surveillance and data collection, we hear from security experts on the challenges of balancing privacy and security and their insider view on GHCQ and the NSA. We examine the growing threat of ransomware and how to tackle it. And we look at the implications of new EU data protection rules. Read the issue now. Continue Reading

Australian prime minister Malcolm Turnbull calls for free, open and secure internet

International norms of behaviour should prohibit states from conducting cyber intellectual property theft, says Australian prime minister Malcolm Turnbull Continue Reading

By

• Warwick Ashford, Senior analyst

Chinese university targeted by Islamic State hacktivist

Beijing’s Tsinghua University is the latest organisation to be attacked by hackers with a social or political agenda Continue Reading

By

• Warwick Ashford, Senior analyst

GMB takes concerns over British Airways IT outsourcing to MPs

Trade union fears that the expansion of IT outsourcing at BA is a risk to security and will see UK jobs disappear Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK not involved in mass surveillance, says Theresa May

Coffee shops and libraries could be the target of interception warrants, Theresa May tells MPs and peers Continue Reading

By

• Julia Gregory

Watchdog urges US nuclear agency to close cyber security gaps

An audit report has called on the US nuclear agency to revise its IT contracts to ensure better cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

Firms can monitor employees’ online chats, EU court rules

Human rights court says it is not unreasonable for employers to want to verify that staff are completing their professional tasks during working hours Continue Reading

By

• Warwick Ashford, Senior analyst

Police take action against cyber extortion gang DD4BC

Police have made one arrest and gathered evidence in searches of properties in an international operation aimed at cyber extortion gang DD4BC Continue Reading

By

• Warwick Ashford, Senior analyst

ICO reiterates call for stronger sentences for data theft

The information commissioner (ICO) reiterates his call for stronger sentences for data theft after a court fined a woman just £1,000 for selling 28,000 customer records Continue Reading

By

• Warwick Ashford, Senior analyst

Tech firms critical of UK draft Investigatory Powers Bill

Facebook, Google, Microsoft, Twitter and Yahoo say they are particularly concerned about six key aspects of the UK's draft Investigatory Powers Bill Continue Reading

By

• Warwick Ashford, Senior analyst

UK IoT research hub opens with support from academic world

A consortium of nine UK universities have come together to work alongside the Engineering and Physical Sciences Research Council on research into the internet of things Continue Reading

By

• Alex Scroxton, Security Editor

Upgrade to Internet Explorer 11 to reduce risk

Failure to update to the latest version of Internet Explorer by 12 January 2016 could put users at risk, Microsoft warns Continue Reading

By

• Warwick Ashford, Senior analyst

Interview: James Bamford on surveillance, Snowden and technology companies

Investigative journalist and documentary maker James Bamford was among the first to uncover the secrets of the US National Security Agency and its global surveillance Continue Reading

By

• Bill Goodwin, Investigations Editor

Top 10 internet of things stories of 2015

2015 was the year the internet of things began to move from theory to widespread practice, and the fledgling industry shook off the millstone of connected kitchen appliances Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 IT security stories of 2015

Computer Weekly looks back at the most significant stories on IT security in the past 12 months Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 cyber crime stories of 2015

Computer Weekly takes a look back at the top cyber crime stories of 2015 Continue Reading

By

• Warwick Ashford, Senior analyst

Glasgow city email disruption continues after datacentre crash

Glasgow's IT woes continue following a shutdown of its datacente on Tuesday Continue Reading

By

• Cliff Saran, Managing Editor

National security ‘not affected’ by failed e-Borders programme, says Home Office

Despite the key Warnings Index system suffering an average of two high-priority incidents a week – such as a system component not being available – Home Office officials deny it causes risk to national security Continue Reading

By

• Bryan Glick, Editor in chief

Cloud IT is helping Uefa meet its goals

In this week’s Computer Weekly, we find out how cloud computing is helping European football federation Uefa with preparations for the Euro2016 tournament. We ask if UK government moves to support IT education are enough to bridge the skills gap. And we examine the new international standard for personal data privacy in the cloud and what it means for suppliers. Read the issue now. Continue Reading

Bracknell man arrested over VTech toy hack

Police have arrested a 21-year-old man in connection with the hacking of Hong Kong-based toymaker VTech Continue Reading

By

• Alex Scroxton, Security Editor

Eight startups selected for Cyber London security accelerator programme

Cyber London has selected startups from the UK, Finland, Hungary, Israel, Brazil and South Africa for its second cyber security accelerator programme Continue Reading

By

• Warwick Ashford, Senior analyst

UK firms act quickly to fix payment card data encryption

Security firm found that 16 global companies had failed to effectively encrypt traffic to the payment portion of their websites and apps Continue Reading

By

• Warwick Ashford, Senior analyst

How to deal with the aftermath of a data breach

Considering that a data breach could happen to any company, at any time, a plan of action is the best tactic Continue Reading

By

• Dan Raywood

Disaster recovery planning: Where virtualisation can help

The disaster recovery planning process is not fundamentally technology-centric, so when can virtualisation make it quicker and easier to restore services after an unplanned outage? Continue Reading

By

• Chris Evans

The FCA is open to cloud – but what of the firms it regulates?

The Financial Conduct Authority (FCA) says cloud computing – even in its public form – is acceptable for finance organisations Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The most influential people in UK IT 2015

In this week’s Computer Weekly, we announce our sixth annual UKtech50 list of the 50 most influential people in UK IT, and talk to this year’s winner – BT chief executive Gavin Patterson, about the challenges facing the telecoms giant in 2016. Also, we find out how the genomics industry is pushing big data technology to its limits. Read the issue now. Continue Reading

The next stage in quantum key distribution

Authentication schemes based on quantum physics are emerging to address the growing number of ways to compromise data traffic Continue Reading

By

• Peter Ray Allison

Cyber attacks an increasing concern for Asean countries

Organisations in the Association of Southeast Asian Nations are increasingly the targets for cyber criminals, according to a report focused on the region Continue Reading

By

• Zafar Anjum

Essential guide to data breaches, the dark web and the hidden data economy

In this guide, we look at the aftermath of a data breach - what do cyber criminals use that stolen data for, and what can companies do to avoid becoming a victim? Continue Reading

Wetherspoon pub chain warns customers of data breach

Discovery of a data breach at JD Wetherspoons comes hard on the heels of a breach at TalkTalk, underlining the importance of keeping customer data safe Continue Reading

By

• Warwick Ashford, Senior analyst

Veracode finds most web apps fail Owasp security check list

The findings of a report on critical vulnerabilities in most web applications is raising concerns over potential security vulnerabilities in millions of websites Continue Reading

By

• Warwick Ashford, Senior analyst

The US and China agree more steps to fight cyber crime

The US and China have made progress in expanding co-operation on cyber crime as China claims criminals and not state-backed hackers broke into the US Office of Personnel Management Continue Reading

By

• Warwick Ashford, Senior analyst

Workday ringfences support in Europe after Safe Harbour ruled unsafe

US cloud HR and financial services provider reponds to Safe Harbour failure by ringfencing European data Continue Reading

By

• Bill Goodwin, Investigations Editor

Security analytics needs practical approach, says Fico Ciso Vickie Miller

Analytics must form part of a comprehensive defence-in-depth strategy, according to chief information security officer (Ciso) Vickie Miller at software firm Fico Continue Reading

By

• Warwick Ashford, Senior analyst

Balancing speed and risk in IT projects

In this week’s Computer Weekly, as IT leaders face boardroom pressure to roll out IT projects ever more quickly, we examine how to do that without running unacceptable risks. Michael Dell talks about how he sees the future for his company when it buys EMC in the largest IT acquisition in history. And we hear from IT chiefs about the challenges of implementing DevOps. Read the issue now. Continue Reading

Word ‘smart’ being abused by IoT advocates

Speakers at an event hosted by Cambridge Wireless say the term ‘smart’ is overused to describe connected devices on the internet of things Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft steps up efforts to clarify cloud security and privacy policy

Microsoft debuts merged security information hub to make it easier for cloud users to find out more about the privacy and security policies of its hosted products Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Use legal protection to soften cyber attack impact, says Kemp Little

IT outsourcing provides an opportunity for businesses to transfer risk and recover losses from cyber attacks, says law firm Kemp Little Continue Reading

By

• Warwick Ashford, Senior analyst

Dridex banking Trojan regains strength to mount attacks on the UK

Fresh Dridex banking Trojan campaigns target the US, UK and France – despite a recent law enforcement takedown operation – warn security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Data breach hits Hilton Worldwide hotel chain

Hilton Worldwide says malware found its way onto point of sale (PoS) systems and enabled attackers to steal payment card information Continue Reading

By

• Warwick Ashford, Senior analyst

Defence review promises 1.2% of defence budget spend on technology

The government’s defence review highlights need for technology investment, innovative ideas and cyber security Continue Reading

By

• Lis Evenstad

Technology helping to deliver aid for refugees

In this week's Computer Weekly, we find out how technology is helping to deliver vital aid to Syrian refugees in the Middle East. We look at the barriers to achieving the government's aim of a paperless NHS. And the CTO of special effects studio Framestore talks about the IT challenges behind hit movies such as Gravity. Read the issue now. Continue Reading

Five key strategies for IoT success

Companies need to be agile because in some IoT systems, it will be a question of the winner taking it all, according to Kent Eriksson, IoT business consultant at PTC Continue Reading

By

• Warwick Ashford, Senior analyst

Coalition of top tech firms opposes weakened encryption

Weakening security with the aim of advancing security simply does not make sense, a coalition of top tech firms tells US president Barack Obama Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security mindset needs to change, says report

Government organisations are prime targets for cyber attacks, leading to increased importance on robust information security, according to a report by Intel Security and the Digital Government Security Forum Continue Reading

By

• Lis Evenstad

Irish hospital to offer patient access to records by November 2016

Galway Clinic plans a big-bang launch of its Meditech electronic medical record system, which includes a patient portal and mobile app Continue Reading

By

• Lis Evenstad

Three men charged over JP Morgan hacking and fraud

Exploiting the Heartbleed bug was one of the methods used by three men charged in connection with the theft of more than 100 million customer data records from financial institutions to carry out "pump and dump" fraud Continue Reading

By

• Warwick Ashford, Senior analyst

Snoopers’ charter will force ISPs to raise broadband prices

The Science and Technology Select Committee hears that ISPs may be forced to put up their service charges to cover the cost of retaining communications data, should the Investigatory Powers Bill become law Continue Reading

By

• Alex Scroxton, Security Editor

Germany is finalising legislation to shore up CNI cyber security

Germany is working to ensure digital sovereignty through IT security legislation and negotiations on IT security regulations and transatlantic trade at a European Union level Continue Reading

By

• Warwick Ashford, Senior analyst

EU data protection official optimistic on successor to Safe Harbour

An EU data protection official says he is optimistic that an alternative to the Safe Harbour agreement will be found, but it will take work from both the US and the EU Continue Reading

By

• Warwick Ashford, Senior analyst

GCHQ and NCA join forces to police dark web

GCHQ and the National Crime Agency are to track down paedophiles and serious online criminals by using the techniques and expertise used to find terrorists Continue Reading

By

• Warwick Ashford, Senior analyst

Avoiding security issues when recycling hardware

What are the options for the environmentally and ethically responsible recycling of end-of-life hardware, without compromising data security? Continue Reading

By

• Peter Ray Allison

CW Europe – November 2015

Cloud computing has huge benefits to businesses in Europe, but data protection rules have been different for organisations in different parts of Europe. This is about to change with the final version of the General Data Protection Regulation (GDPR) expected soon. All 28 EU member states will have one set of rules to follow. Continue Reading

UAE recognises importance of cyber security, says official

Like the UK, the UAE federal government has identified the importance of creating an environment in which it is safe to do business online Continue Reading

By

• Warwick Ashford, Senior analyst

Theresa May proposes bulk data and internet tracking under the Investigatory Powers Bill

The home secretary has unveiled the draft Investigatory Powers Bill, which sets out the government's plans to collect data on UK citizens' internet use Continue Reading

By

• Cliff Saran, Managing Editor

000Webhost blames PHP exploit for breach of 13.5 million records

Unencrypted passwords for a free web hosting firm were on sale for five months before customers were notified their records had been leaked, according to a security researcher Continue Reading

By

• Warwick Ashford, Senior analyst

Hewlett Packard Enterprise: think of us as a startup

As Hewlett Packard Enterprise and HP Inc finally part ways, UK managing director Andy Isherwood shares some insight on what the future holds for the newly minted enterprise business Continue Reading

By

• Alex Scroxton, Security Editor

Theresa May promises strong oversight in surveillance bill

The proposed Investigatory Powers Bill contains “very strong” oversight and “world-beating” authorisation procedures, according to home secretary Theresa May Continue Reading

By

• Warwick Ashford, Senior analyst

Law enforcement cracks down on DroidJack Android snooping malware users

A joint EU/US operation on the DroidJack malware is the latest example of international collaboration between law enforcement officers directed at cyber crime Continue Reading

By

• Warwick Ashford, Senior analyst

M&S data breach forces retailer to temporarily suspend service

A glitch that allowed online customers to see each others' details forced retailer Mark & Spencer to take its website offline while it resolved the issue Continue Reading

By

• Clare McDonald, Business Editor

Lack of data classification very costly to firms, says survey

Most data retained by organisations is not identified or classified and gobbles budget spent on storage, as well as being potentially non-compliant, reveals Veritas-sponsored survey Continue Reading

By

• Antony Adshead, Storage Editor

Blockchain sparks change in banking industry

In this week's Computer Weekly, we find out why blockchain, the technology that underpins bitcoin, is making waves in the banking sector. EasyJet tells us why digital is increasingly important for airlines. And we look at the forces driving digital disruption and why some sectors are changing faster than others. Read the issue now. Continue Reading

TalkTalk warns customers about personal data breach

TalkTalk has warned customers their personal data may have been compromised in the second cyber attack on the firm in 2015, with some data left unencrypted Continue Reading

By

• Warwick Ashford, Senior analyst

Police and industry to tackle cyber crime together, says TechUK

A TechUK report calls for collaboration between police and industry to raise standards of reporting, recording and responding to cyber crime Continue Reading

By

• Warwick Ashford, Senior analyst