IT security

Security industry welcomes GCHQ password guidelines

GCHQ's guidance on password policy covers some of the most pressing issues facing UK businesses and employees today, according to Skyhigh Networks Continue Reading

By

• Warwick Ashford, Senior analyst

DD4BC cyber extortion gang adds social media to arsenal

Cyber extortion gang DD4BC is using social media campaigns to garner more attention for its ability to create service disruptions by publicly embarrassing large organisations Continue Reading

By

• Warwick Ashford, Senior analyst

CW Europe – September 2015 edition

Find out the winners of the Computer Weekly European User Awards 2015. The awards aim to shine a light on businesses across Europe that have excelled in their approach to using technology. You can find a full list of winners in this issue and we have highlighted a few through in-depth case studies. Continue Reading

Researchers discover Android PIN locker ransomware

Researchers say LockerPIN is a self-defending, aggressive piece of ransomware currently targeting Android devices, mainly in the US Continue Reading

By

• Warwick Ashford, Senior analyst

US health insurer Excellus BlueCross BlueShield hit by data breach

Forensic investigation reveals a data breach at US health insurer Excellus BlueCross BlueShield exposing up to 11 million records 21 months after the first intrusion Continue Reading

By

• Warwick Ashford, Senior analyst

Cloudian boosts object storage HyperStore compliance features

Distributed object storage software maker Cloudian upgrades HyperStore with added granularity of data protection features that can help meet compliance requirements Continue Reading

By

• Antony Adshead, Storage Editor

Security pros failing to address digital certificate risks, survey shows

Even though 90% of security professionals believe a leading CA will be compromised in next two years, only 13% have existing automation to deal with that happening Continue Reading

By

• Warwick Ashford, Senior analyst

Conventional security measures hit productivity, study shows

Most IT professionals say context-aware security would improve productivity without compromising security, a survey from Dell reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Security vulnerability management more than patching, warns Secunia

Keeping track of what makes an IT environment vulnerable is an ongoing and complex task, according to Secunia Continue Reading

By

• Warwick Ashford, Senior analyst

US State Department plans cyber security playbook

The US State Department issues a request for information to determine the capabilities of commercial industry to provide and maintain a cyber security playbook Continue Reading

By

• Warwick Ashford, Senior analyst

DDoS attack on NCA highlights need to be prepared, says Barracuda Networks

A Lizard Squad DDoS attack the NCA says is a fact of life highlights the need for organisations to be prepared, according to Barracuda Networks Continue Reading

By

• Warwick Ashford, Senior analyst

Use 2FA to mitigate KeyRaider iOS malware, says Rapid7

KeyRaider iOS malware targeting iPhone users in China and 17 other countries including the UK has raised enterprise security concerns Continue Reading

By

• Warwick Ashford, Senior analyst

Police arrest six UK teenagers for using DDoS cyber attack tool

Police arrest six UK teenagers on suspicion of using a DDoS attack tool targeting a national newspaper, a school and online gaming companies and retailers Continue Reading

Rapid7 calls on router makers to eliminate backdoors

Until manufacturers stop using default passwords, we will continue to see opportunistic attacks on home and small business routers, says Rapid7's Tod Beardsley Continue Reading

By

• Warwick Ashford, Senior analyst

Many firms not getting to grips with third-party data security risk

Supply chain data security risk is pervasive, but being unable to deal with it is down to basic failings, says a cyber risk expert Continue Reading

By

• Warwick Ashford, Senior analyst

Sans Institute identifies top UK cyber talent

The cream of UK cyber security talent selected from 24,000 candidates are set to begin eight weeks of intensive training in the first-ever intake at the Sans UK Cyber Academy Continue Reading

By

• Warwick Ashford, Senior analyst

Life’s a breach: How to handle the press after a hacking attack

Emily Dent, specialist in crisis PR, offers some advice to organisations that unexpectedly find themselves in the headlines Continue Reading

By

• Emily Dent

Computer Weekly – 25 August 2015: Coping with a crisis

In this week’s Computer Weekly, IT leaders discuss their experiences of dealing with disaster and the importance of planning to ensure business continuity. Jaeger’s CIO talks about bring the iconic fashion brand into the digital age. And we look at the issues around writing supplier contracts for agile software development. Read the issue now. Continue Reading

Spotify to update privacy policy after user protest

Some Spotify users are unhappy about new privacy policies that allow access to users’ photos, video, mobile device location, voice controls and contacts Continue Reading

By

• Warwick Ashford, Senior analyst

ICO orders Google to remove links to right to be forgotten takedowns

The Information Commissioner's Office (ICO) says Google must remove newer links that reveal the same details as previously removed links Continue Reading

Broadband Stakeholder Group to review UK net neutrality policy

The Broadband Stakeholder Group commissions an independent review into the UK’s industry-led approach to net neutrality and the open internet Continue Reading

By

• Alex Scroxton, Security Editor

Mumsnet suffers multi-vector cyber attack

Mumsnet has been hit by a DDoS attack, its admin hacked and data stolen, and then a hoax call sent armed police to the home of the organisation's co-founder, Justine Roberts Continue Reading

Premiership Rugby scores security and efficiency with Intralinks

By setting access controls, Premiership Rugby can ensure that its partners get quick access only to role-appropriate content Continue Reading

By

• Warwick Ashford, Senior analyst

AT&T a key NSA partner in internet spying Snowden docs show

The NSA considered its relationship with AT&T to be unique and especially productive, leaked documents show Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile phone users at risk as hackers bug and track victims

An investigation by Australian TV show 60 Minutes demonstrates how hackers based thousands of miles away in Germany were able to record the calls of an Australian senator and track his movements Continue Reading

By

• Ross Coulthart, 60 Minutes Australia

FBI uncovers cyber insider trading gang

Nine suspects are expected to be charged in the US with insider trading based on corporate press releases stolen by hackers before they had been made public Continue Reading

By

• Warwick Ashford, Senior analyst

BlackHat 2015: Industrial hacking - the untold story

Hackers have been penetrating industrial control systems for at least a decade for extortion, yet little is known about how they gain access Continue Reading

By

• Warwick Ashford, Senior analyst

Carphone Warehouse data breach hits 2.4 million UK customers

Carphone Warehouse confirms the authorities have been notified about the breach, and urges customers to take steps to protect themselves Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

CW Europe – August 2015

Data is a valuable thing nowadays, and more businesses are collecting it for exactly that reason. However, with the collection of data also comes concern for consumers and governments over where the data is stored and what companies will do with it. This issue of CW Europe investigates the different cultural attitudes towards data management ethics. Continue Reading

Cyber risks hit the road

In this week's Computer Weekly, after hackers took remote control of a Jeep Cherokee, we assess the security concerns for internet-connected cars. With the growth of digital banking, is there a need for high-street branches anymore? And we examine whether email overload is hindering the UK's economic productivity. Read the issue now. Continue Reading

Why the time is ripe for security behaviour analytics

Recent months have seen an uptick in announcements by security suppliers around behavioural analytics, but what is driving this trend? Continue Reading

By

• Warwick Ashford, Senior analyst

Commercial software more secure than open source, finds report

A study has found that commercial code is more compliant than open source code with security compliance standards, such as the Owasp top 10 and the CWE top 25 Continue Reading

By

• Warwick Ashford, Senior analyst

A third of employees will sell company data if the price is right, study reveals

For £5,000, a quarter of employees polled said they would sell confidential company data, and risk both their job and criminal convictions Continue Reading

By

• Warwick Ashford, Senior analyst

Technology experts warn of dangers of artificial intelligence arms race

An open letter signed by more than 12,000 technology experts calls for a ban on artificial intelligence (AI) to manage weapons “beyond meaningful human control” Continue Reading

By

• Warwick Ashford, Senior analyst

SaaS criteria to track for business outcomes

Organisations should evolve their SaaS selection criteria to focus on newer metrics that are better indicators of supplier performance Continue Reading

By

• Liz Herbert

Contactless card fraud highlights need for 2FA

A Which? report on contactless card fraud highlights the need for multi-factor authentication for payments, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

GDS targets three million new users of Gov.uk Verify service in next 12 months

Roll-out of the system for logging in to digital public services is taking longer than expected, but user numbers are expected to grow significantly in 2015 Continue Reading

By

• Bryan Glick, Editor in chief

Jeep hack raises questions about responsibility for security

The hack of a Jeep raises the question whether users or car manufacturers should be responsible for protecting against cyber attackers Continue Reading

By

• Warwick Ashford, Senior analyst

Information security governance maturing, says Gartner

Increasing awareness of the impact of digital business risks, coupled with high levels of publicity regarding cyber security incidents, is making IT risk a board-level issue, says Gartner Continue Reading

By

• Warwick Ashford, Senior analyst

UK considers 10-year jail sentences for online piracy

The UK government is considering new measures to increase the sanctions for criminals who infringe the rights of copyright holders for large-scale financial gain Continue Reading

By

• Warwick Ashford, Senior analyst

Hackers threaten to expose ALM’s dating and cheating site users

A hacking group, calling itself The Impact Team, claims to have compromised Avid Life Media’s user databases, source code repositories, financial records and email system Continue Reading

By

• Warwick Ashford, Senior analyst

United Airlines begins bug bounty payouts

United Airlines has paid out the maximum award to two hackers, which means the flaws are likely to be remote code execution vulnerabilities Continue Reading

By

• Warwick Ashford, Senior analyst

UK man arrested for hacking into US government computers

Briton Lauri Love is accused of hacking into various US agencies, including the US army, Nasa, the federal reserve and the environmental protection agency Continue Reading

By

• Warwick Ashford, Senior analyst

Anyone still running Windows Server 2003 is now at risk

Businesses still running Windows server 2003 are vulnerable to attack from hackers looking to exploit security holes Continue Reading

By

• Cliff Saran, Managing Editor

Vodafone scheme to help SMEs get online

Vodafone is to trial a series of digital workshops for SMEs aimed at equipping them with a stronger online presence Continue Reading

By

• Alex Scroxton, Security Editor

Land Rover praised for recall over software security bug

BT Security head Mark Hughes says Land Rover's recall of vehicles to fix a software security flaw is a sensible step to address evolving criminal threats Continue Reading

By

• Warwick Ashford, Senior analyst

Symantec bets on simplicity, cloud and mobile

Symantec is not trying to be all things to all people, but is instead focusing on threats and protecting information in the mobile and cloud environments Continue Reading

By

• Warwick Ashford, Senior analyst

UK sales teams are the most exposed to cyber attacks, study reveals

UK sales staff, callcentre agents and customer services teams are among the most highly targeted by cyber attacks, yet few firms give these groups IT security training, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Symantec uncovers Morpho cyber espionage operation

A cyber espionage group has targeted high-profile technology, internet, commodities and pharmaceutical companies in the US, Europe and Canada, reports Symantec Continue Reading

By

• Warwick Ashford, Senior analyst

MtGox chief Mark Karpeles arrested for fraud

Former chief Mark Karpeles is under arrest on suspicion of $1m fraud and involvement in the disappearance of 650,000 bitcoins Continue Reading

By

• Warwick Ashford, Senior analyst

Dashlane bullish about the future despite LastPass hack

Password management firm Dashlane is confident its business model will evolve and continue to be relevant even if passwords eventually disappear Continue Reading

By

• Warwick Ashford, Senior analyst

CW Europe – July 2015 Edition

The economy in central and eastern Europe (CEE) is starting to recover, which means investment in IT across the region is also starting to return. This issue of CW Europe investigates how the boost in IT is changing the role of the CIO, from supporting the business to driving its growth. Continue Reading

The IT behind Angry Birds

In this week's Computer Weekly, we talk to the CIO of Rovio Entertainment, the company behind the gaming phenomenon Angry Birds, about how he supports a global business with a five-person IT team. We assess your options for moving off Windows Server 2003 now support is ending. And our buyer's guide looks at log management. Read the issue now. Continue Reading

The internet of things could save the honeybee from extinction

Gemalto’s M2M unit is developing an ambitious project with agricultural science firm Eltopia and the University of Minnesota. The objective: to save the honeybee from extinction Continue Reading

By

• Alex Scroxton, Security Editor

Italy’s Hacking Team gets hacked

Unknown hackers have posted a torrent file-sharing link to more than 400GB of Hacking Team data, including source code, internal documents and emails that could reveal the identity of customers Continue Reading

Wi-Fi enhances guest experience and profitability for Belgian theme park

Bobbejaanland, one of the largest theme parks in Belgium, is using a Fortinet Wi-Fi network to offer visitors access on the go, and improve its management capabilities Continue Reading

By

• Xavier Mertens

How Deutsche Telekom plans to challenge AWS and Google in the cloud

German telco Deutsche Telekom wants to evolve into the public cloud and plans to beat sector giants such as Amazon and Google at their own game Continue Reading

By

• Anne Morris

Facebook wins first round in European privacy battle

Facebook has welcomed a Vienna court’s rejection of a 25,000-strong class action lawsuit against the social networking firm for allegedly breaching European privacy laws Continue Reading

By

• Warwick Ashford, Senior analyst

UK universities revise computer course guidelines to boost ranks of cyber warriors

UK universities revise course guidelines to transform computing degree courses and ensure that undergraduates learn cyber security skills Continue Reading

By

• Warwick Ashford, Senior analyst

Cisco launches IoT System for enterprise and smart cities

Cisco unveils 15 products to address the growing complexity of internet of things deployments Continue Reading

By

• Alex Scroxton, Security Editor

The legacy IT challenge for CIOs

In this week’s Computer Weekly, CIOs in financial services hoping to fight off challenger banks face a huge hindrance from their legacy IT – we assess the difficulties and reveal a diagram that shows the scale of the problem. We look at how to prepare for information security audits and why they are so vital. And we ask if HM Revenue & Customs’ plan for online tax accounts will make tax more taxing for the digitally excluded taxpayer. Read the issue now. Continue Reading

Computer Weekly European User Awards 2015 winners revealed

The winners have been announced for the Computer Weekly European User Awards 2015. See who made the top spots Continue Reading

By

• Kayleigh Bateman, Computer Weekly

Dutch court orders Facebook to identify revenge porn poster

Facebook has a legal obligation to provide information about a user who posted a revenge porn video on the site, a Dutch court has ruled Continue Reading

By

• Warwick Ashford, Senior analyst

Three things you may not know that DNS data can tell you

Big data tools can help network administrators gather new insights into security and performance from DNS data Continue Reading

By

• Simon McCalla, Nominet

App development companies fight back against digital piracy

How can digital companies protect their IP against a tidal wave of smartphone boosted piracy? Is digital rights management software effective enough, or is it better to adapt your business model? Continue Reading

By

• Peter Ray Allison

IT professionals give Windows 10 Start button the thumbs up

A survey of European and North American IT professionals has found that the return of the Start button is the most enticing feature in Microsoft's latest operating system Continue Reading

By

• Cliff Saran, Managing Editor

Pharmaceutical companies use BPM to cut cost of clinical trial drugs

Pharmaceutical companies have developed an IT system to secure the supply of medicines they need for clinical studies, saving hundreds of thousands on their drugs bill in the process Continue Reading

By

• Bill Goodwin, Computer Weekly

Government Digital Service insists Verify safe despite claims of vulnerabilities

An academic paper suggests the Gov.uk Verify system could be used as a spy network, but the Government Digital Service (GDS) insists this is not the case Continue Reading

By

• Clare McDonald, Business Editor

FBI investigates US baseball team over rival's hacking allegations

FBI investigations, into claims a US baseball team stole data from a rival, highlights cyber crime perpetrated by competitors – not just anonymous criminals Continue Reading

By

• Warwick Ashford, Senior analyst

DD4B cyber extortion gang ramps up operations

Cyber criminals using DDoS attacks to extort funds from victims are carrying out more attacks despite a $26,000 bounty Continue Reading

By

• Warwick Ashford, Senior analyst

Government preparing to let private sector companies use its Verify identity scheme

The Cabinet Office is talking to banks, insurers and retailers to establish Gov.uk Verify identity assurance as a national scheme Continue Reading

By

• Mark Ballard

Kaspersky Lab praised for handling of Duqu 2.0 cyber attack

Kaspersky Lab determined the best approach to cyber attack was to not only admit that it had been hacked, but also to provide extensive information on the malware Continue Reading

By

• Warwick Ashford, Senior analyst

International police operation arrests cyber fraud gang

Police in six countries have arrested 49 people suspected of committing financial fraud involving email account intrusions Continue Reading

By

• Warwick Ashford, Senior analyst

How to cull old, potentially risky data

Unused data is a potential security risk, with old spreadsheets, reports and email containing industry secrets and laced with company gossip. If it's no longer useful, it's time to delete it Continue Reading

By

• Christian Cawley

The file-sharing face-off: Box or Dropbox

In this week's Computer Weekly, we look at the two most popular tools for cloud-based enterprise file sharing and assess the relative merits of Box and Dropbox. We talk to some of the early pioneers in developing smartwatch apps. And we find out why IT security spending is shifting from prevention to detection and response. Read the issue now. Continue Reading

VMware puts network virtualisation to work in McAfee environments

VMware announces an integrated system to automate distribution and enforcement of McAfee’s network security platform using its NSX network virtualisation system Continue Reading

By

• Alex Scroxton, Security Editor

The drivers and inhibitors of cyber security evolution

A study shows a shift in IT security spending to detection and response – but why are most organisations falling way behind the more enlightened front runners? Continue Reading

By

• Warwick Ashford, Senior analyst

Most of more than 733,000 police communications data requests approved

Big Brother Watch is calling for a curb on the scale of police access to communications data and greater transparency in the use of this data Continue Reading

By

• Warwick Ashford, Senior analyst

A guide to threat management

This is a CIOs guide to threat management. Continue Reading

Data classification key to IP protection, says Titus

Data classification can help organisations get more value out of encryption and data loss prevention systems Continue Reading

By

• Warwick Ashford, Senior analyst

Google announces security features for Android

Google announces better app permission controls and other Android security changes at its Google I/O developer conference Continue Reading

By

• Warwick Ashford, Senior analyst

CIF cloud certification scheme wins European Commission's backing

Cloud Industry Forum's Code of Practice has been added to European list of trusted certification schemes Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Social engineering attacks more complex than ever, says expert

Expert warns attackers are starting to use increasingly sophisticated ways to get people in organisations to help them circumvent security controls Continue Reading

By

• Warwick Ashford, Senior analyst

NATS failure down to bug from the 90s and redundant code

A bug present in Nats since 1990s has been identified as the root cause of the five-hour outage of UK air traffic control on 12 December 2014 Continue Reading

By

• Cliff Saran, Managing Editor

How to reduce the risk of social engineering attacks

Implement simple checks to reduce the risk of the main types of social engineering attacks Continue Reading

By

• Peter Wood, First Base Technologies LLP

Researchers raise privacy concerns about Bluetooth Low Energy devices

Researchers have raised privacy concerns about a growing number of devices using Bluetooth Low Energy technology Continue Reading

By

• Warwick Ashford, Senior analyst

CIO interview: Austerity drives joined-up council IT with Force.com

Peterborough has become a big user of software-as-a-service for council services. We speak to its IT head Continue Reading

By

• Cliff Saran, Managing Editor

BT Openreach turns to Crimestoppers to catch cable thieves

Openreach extends its partnership with crime-fighting charity Crimestoppers to tackle cable theft Continue Reading

By

• Alex Scroxton, Security Editor

Google slashes public cloud prices to undercut rivals

Google cuts cost of its public cloud services to pass on hardware savings in line with Moore's Law Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

St Louis Federal Reserve Bank not target of DNS hack, say experts

The hacking of a domain name server (DNS) for the Federal Reserve Bank of St Louis is more likely to be aimed at customers than the bank itself, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

Wi-Fi Global Congress: Hotspot 2.0 standard addresses wireless security holes

At Wi-Fi Global Congress, Ruckus Wireless announces it will be first to market with the second release of Hotspot 2.0 Continue Reading

By

• Alex Scroxton, Security Editor

Whitehall technology chiefs vetoed new Windows XP support deal

Government technology chiefs vetoed a new deal with Microsoft to continue Windows XP support to force laggards to move off the OS Continue Reading

By

• Bryan Glick, Editor in chief

Digital age a turning point for policing, says commissioner Leppard

Policing in the digital age will face a turning point in the next two years, according to City of London Police commissioner Adrian Leppard Continue Reading

By

• Warwick Ashford, Senior analyst

Former nurse’s career blighted after blowing whistle on IT problems

Southwark's continuing care database included names of patients who had been dead for several years, a tribunal is told Continue Reading

By

• Julia Gregory and Bill Goodwin

PSNGB rebrands to drive information sharing across PSN

PSNGB, the trade association set up to promote the Public Services Network, rebrands itself as Innopsis and says its work is far from over Continue Reading

By

• Alex Scroxton, Security Editor

The IoT industry needs to do more to secure data, says Beecham Research

There are key areas where the industry supporting the internet of things (IoT) needs to provide better security, according to Beecham Research Continue Reading

By

• Warwick Ashford, Senior analyst

CW Europe – May 2015 Edition

In this issue, CW Europe's security editor investigates whether the legislation could strangle Europe's productivity and whether businesses see the regulations as a burden. Continue Reading

Businesses should prepare for black swans, says resiliency consultant

While black swan events are random and unexpected, businesses can still prepare for them, according to a resiliency consultant Continue Reading

By

• Warwick Ashford, Senior analyst

Future IAM will need to be broader, says Martin Kuppinger

Identity and access management systems need to look at all forms of identity, not just employees or users, says KuppingerCole analyst Continue Reading

By

• Warwick Ashford, Senior analyst

UK election special – who wins the digital vote?

In this week’s Computer Weekly, as the UK goes to the polls in the general election, we take an in-depth look at the political parties’ manifestos for technology, and examine what the IT sector wants from the next government. Our latest buyer’s guide covers collaboration software. And we analyse host identity protocol (HIP), an emerging standard for endpoint security. Read the issue now. Continue Reading