Identity and access management products

Third-party security weaknesses threaten Europe’s big banks

Security breaches via third parties increased by 25% at Europe’s largest finance firms Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Are we normalising surveillance in schools?

Children and teenagers are subjected to a vast array of surveillance technologies in schools. These are intended to keep them safe, but are we normalising surveillance for young people? Continue Reading

By

• Peter Ray Allison

UK ICO publishes AI and biometrics strategy

The UK data regulator has outlined how it will approach the regulation of artificial intelligence and biometric technologies, which will focus in particular on automated decision-making systems and police facial recognition Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

HMRC phishing breach wholly avoidable, but hard to stop

A breach at HMRC saw innocent taxpayers tricked into letting scammers impersonate them through simple phishing attacks leading to account takeover. Such attacks are avoidable, but hard to stop Continue Reading

By

• Alex Scroxton, Security Editor

UK’s error-prone eVisa system is ‘anxiety-inducing’

People experiencing technical errors with the Home Office’s electronic visa system explain the psychological toll of not being able to reliably prove their immigration status in the face of a hostile and unresponsive bureaucracy Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Building the foundations: A national roadmap for digital identity and sovereign data

Now the UK government has offered some clarity on the future of private and public sector digital identity services, it's time to work together to put the essential foundations in place to make digital ID work for everyone Continue Reading

By

• David Crack, Association of Digital Verification Professionals

NCSC sets out how to build cyber safe cultures

The UK’s National Cyber Security Centre has published guidance for security teams and leaders on how to foster accessible and appropriate cyber security cultures in their organisations Continue Reading

By

• Alex Scroxton, Security Editor

SailPoint charts course for AI-driven identity security

SailPoint is driving the use of agentic AI in identity security with its Harbor Pilot offering while preparing to help enterprises govern and secure AI agents Continue Reading

By

• Aaron Tan, Informa TechTarget

Dutch businesses lag behind in cyber resilience as threats escalate

While non-IT business professionals in the middle of their careers face the most disruption from AI, professionals in the IT services sector and their employers must prepare for change Continue Reading

By

• Kim Loohuis

Gov.uk Wallet open to public sector bodies

Government departments can soon begin to add documents to Gov.uk Wallet, as the Government Digital Service publishes guidance for public sector bodies on how to use the smartphone app Continue Reading

By

• Lis Evenstad

UK biometric surveillance exists in ‘legal grey area’

The rapid proliferation of ‘biometric mass surveillance technologies’ throughout the UK’s public and private sectors is taking place without legal certainty or adequate safeguards for the public Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Remote purchase fraud surges 14%, says banking industry

Brits lost over £1bn to payment fraud in its many forms last year, according to the latest banking industry numbers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Maturing UK fintechs increase tech and cyber security hiring

Increased hiring reflects that fintechs are maturing and now require more cyber security and compliance experts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Essex Police discloses ‘incoherent’ facial recognition assessment

An equality impact assessment of Essex Police live facial recognition deployments is plagued by inconsistencies and poor methodology, undermining the force’s claim that its use of the technology will not be discriminatory Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

NCSC: Russia’s Fancy Bear targeting logistics, tech organisations

The NCSC and its partner agencies have blown the whistle on an extensive campaign of malicious cyber attacks orchestrated by the Russian state Fancy Bear operation Continue Reading

By

• Alex Scroxton, Security Editor

UK Fraud Bill targets benefit claimants for mass surveillance

The UK government’s proposed Fraud Bill will disproportionately place millions of benefit claimants under constant surveillance, creating a two-tier system where people are automatically suspected of wrongdoing for seeking welfare Continue Reading

By

• Anna Dent

Calm settles over digital identity market - for now... (Hark, is that Big Tech on the horizon?)

A relative calm has settled over the digital identity sector after months of worry and vitriol – for now, at least. Digital ID players have largely welcomed the government’s announcement of the ... Continue Reading

By

• Bryan Glick, Editor in chief

What is Universal 2nd Factor (U2F)?

Universal 2nd Factor (U2F) is a physical device that can act as a form of authentication for an account. Continue Reading

By

• Gavin Wright

CW APAC – Trend Watch: API management

Application programming interfaces are subject to the pros and cons of emerging technologies. In this handbook, focused on API management in the Asia-Pacific region, Computer Weekly looks at governance and security, gateway tools, and strategic approaches to creating an automation framework Continue Reading

Security tests reveal serious vulnerability in government’s One Login digital ID system

A ‘red teaming’ exercise to simulate cyber attacks on the government’s flagship digital identity system has found that One Login can be compromised without detection Continue Reading

By

• Bryan Glick, Editor in chief

How digital identity will empower people and drive economic growth

The government has finally plotted out the future of digital identity in the UK in a way that makes sense for private sector, public sector, and citizens. Now let's make it happen Continue Reading

By

• David Crack, Association of Digital Verification Professionals

The Security Interviews: David Faugno, 1Password

David Faugno, co-CEO of 1Password, discusses how his background led to him joining the company and why maintaining profitability is a key factor in overcoming the challenges of switching markets. Continue Reading

By

• Peter Ray Allison

NHS asks suppliers to sign up to cyber covenant

NHS digital and security leaders call on their suppliers to commit to a cyber security charter as the health service works to improve its resilience in the face of growing threat levels Continue Reading

By

• Alex Scroxton, Security Editor

Government starts private sector engagement on digital ID and Gov.uk Wallet

Following concerns from the digital identity industry that Gov.uk Wallet would dominate the market, the government has offered private sector providers a ‘critical role’ in its future, as it revealed further details on the wallet Continue Reading

By

• Lis Evenstad

Is IPSIE the game changer that SaaS security demands?

It started with an announcement in October 2024, and now it seems the vision of secure identity in the enterprise is becoming a reality. We look at the prospects for IPSIE Continue Reading

By

• Dan Raywood

Scattered Spider retail attacks spreading to US, says Google

Google’s threat intel analysts are aware of a number of in-progress cyber attacks against US retailers linked to the same Scattered Spider gang that supposedly attacked M&S and Co-op in the UK Continue Reading

By

• Alex Scroxton, Security Editor

Gov.uk One Login loses certification for digital identity trust framework

The government’s flagship digital identity system has lost its certification against the government’s own digital identity system trust framework Continue Reading

By

• Bryan Glick, Editor in chief

UK government set to finally meet with digital identity providers - but will anything change?

Wednesday 14 May is set to be an important day in the long, slow, painful evolution of the use of digital identity in the UK. For the first time since the government announced its digital wallet ... Continue Reading

By

• Bryan Glick, Editor in chief

UK government websites to replace passwords with secure passkeys

Government websites are to replace difficult-to-remember passwords with highly secure passkeys that will protect against phishing and cyber attackers Continue Reading

By

• Bill Goodwin, Computer Weekly

Europe leads shift from cyber security ‘headcount gap’ to skills-based hiring

Research from Sans Institute reveals European organisations are leading a global shift in hiring priorities, driven by regional regulatory frameworks Continue Reading

By

• Kim Loohuis

UK at risk of Russian cyber and physical attacks as Ukraine seeks peace deal

UK cyber security chief warns of ‘direct connection’ between Russian cyber attacks and physical threats to the UK Continue Reading

By

• Bill Goodwin, Computer Weekly

Security and verification concerns dog debate over Data (Use & Access) Bill

With the long-awaited Data (Use & Access) Bill returning to the House of Commons on 7 May, there remain pros and cons in the bill in relation to financial crime and cyber security Continue Reading

By

• Andrew Churchill

Government and Ofcom disagree about scope of Online Safety Act

MPs heard different views from the online harms regulator and the UK government about whether and how the Online Safety Act obliges platforms to deal with disinformation Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Gov.uk One Login yet to meet government cyber security standards for critical public services

The government’s flagship digital identity system still does not fully conform to key national security standards three years after launch, while questions remain over whether historic security problems have been resolved Continue Reading

By

• Bryan Glick, Editor in chief

Kaspersky calls for cyber immunity amid growing cyber threats

The rise of professional cyber crime groups and state-sponsored actors targeting critical infrastructure requires a move towards inherently secure ‘cyber immune’ systems, says Kaspersky CEO Eugene Kaspersky Continue Reading

By

• Aaron Tan, Informa TechTarget

UK MoJ crime prediction algorithms raise serious concerns

The Ministry of Justice is using one algorithm to predict people’s risk of reoffending and another to predict who will commit murder, but critics say the profiling in these systems raises ‘serious concerns’ over racism, classism and data inaccuracies Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Rethink authentication to remove the burden on users

The rise of AI powered threats and non-human identities will push an already strained identity security model over the edge Continue Reading

By

• Patrick Wardrop, IBM

Financially motivated cyber crime remains biggest threat source

Mandiant’s latest annual threat report reveals data on how financially motivated cyber criminals, such as ransomware gangs, dominate the cyber security landscape Continue Reading

By

• Alex Scroxton, Security Editor

Digital ID sector calls for changes to government data legislation

Suppliers urge technology secretary to work more collaboratively with private sector over concerns government’s digital wallet will gain a monopoly in the market Continue Reading

By

• Bryan Glick, Editor in chief

AI-powered APIs proving highly vulnerable to attack

The growth of AI is proving a double-edged sword for API security, presenting opportunities for defenders to enhance their resilience, but also more risks from AI-powered attacks, according to report Continue Reading

By

• Alex Scroxton, Security Editor

CW EMEA: Shutting down cyber crime

In the Netherlands, the average ransomware attack costs firms about €514,000, and these huge sums mean it makes sense that the police invest their time and resources into combating it. One PhD student spent four years embedded in Dutch police cyber teams to conduct research on their efficacy. Continue Reading

Collaboration is the best defence against nation-state threats

The rise of DeepSeek has prompted the usual well-documented concerns around AI, but also raised worries about its potential links to the Chinese state. The Security Think Tank considers the steps security leaders can take to counter threats posed by nation state industrial espionage? Continue Reading

By

• Stephen McDermid, Okta

Footballers object to processing of performance data

Football players are seeking to gain more control of their performance data through ‘stop processing’ requests, in an attempt to strike a better balance between firms’ commercial interests and the data rights of footballers Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

UK digital identity turns to drama (or farce?) over industry fears and security doubts

Government at loggerheads with industry. Warnings of serious security and data protection problems undermining a vital public service. A burgeoning political campaign seeking greater influence. You ... Continue Reading

By

• Bryan Glick, Editor in chief

Meta settles lawsuit over surveillance business model

Meta settles lawsuit over use of personal data in targeted advertising, opening up the possibility of other UK users raising legal objections to its processing Continue Reading

By

• Adele Zeynep Walton

Government faces claims of serious security and data protection problems in One Login digital ID

The Government Digital Service was warned about serious cyber security and data protection problems in its flagship digital identity system, with insider claims that the data of three million users may still be at risk Continue Reading

By

• Bryan Glick, Editor in chief

What’s the government up to with digital verification services? ‘ID’ like to know

Is the government really looking to compete with the private sector for provision of digital identity? Such a move risks fundamentally undermining public trust in critical digital verification services Continue Reading

By

• Lord Chris Holmes, House of Lords

AI surveillance towers place migrants in ‘even greater jeopardy’

The use of autonomous surveillance towers throughout the English coast forces migrants into increasingly dangerous routes and contributes to their criminalisation Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Met Police to deploy permanent facial recognition tech in Croydon

The Met Police is set deploy permanent live facial recognition cameras on street furniture in Croydon from summer 2025, but local councillors say the decision – which has taken place with no community input – will further contribute the over-policing of Black communities Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Google bets on unifying security tools to ease CISO pain

At Google Cloud Next in Las Vegas, Google launches its Unified Security platform with the goal of bringing together disparate security solutions to help cyber leaders and practitioners address their most keenly felt pain points Continue Reading

By

• Alex Scroxton, Security Editor

Companies House goes live with One Login ID verification

People can verify their identity with Companies House using Gov.uk One Login as the central government body becomes the 36th service to start using the digital identity system Continue Reading

By

• Lis Evenstad

Spirit of openness helps banks get serious about stopping scams

Recent announcements show that banks, financial services firms and IT companies are increasing efforts to curb online scams Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Labour MPs launch digital ID campaign

A large group of Labour MPs have called for the introduction of a digital ID system to crack down on illegal migration and benefits fraud Continue Reading

By

• Lis Evenstad

Government punts cyber governance code of practice for UK businesses

The Department for Science, Innovation and Technology’s cyber security minister Feryal Clark announces a cyber security code of governance for UK businesses to follow Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Over £18m stolen from Santander UK customers in first three months of year

Bank’s latest quarterly report on scams said over £18m was stolen from its UK customers by scammers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Fintech body calls on government for national anti-fraud centre

Industry body says a national anti-fraud centre could be the vehicle required to effectively fight fraud through data sharing Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Norway and Nordic financial sector ramps up cyber security

Finans Norge sets up cyber security unit CTSU to support the finance sector in Norway amid increasing threats Continue Reading

By

• Gerard O'Dwyer

Banks to share fraud data with tech firms in cross-sector collaboration

UK banks join tech firms in fraud data-sharing initiative to enable collaboration on action to stop online scams Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Gmail ‘bubble’ encryption may be an S/MIME killer, says Google

Marking the 21st anniversary of Gmail, Google is preparing to roll out an end-to-end encryption standard for its email service in hopes of democratising encryption and leaving old standards in the dust Continue Reading

By

• Alex Scroxton, Security Editor

Apple devices are at ‘most risk’ in UK following government ‘backdoor’ order

Home Office refuses to answer questions from Lords over technical capability notice issued against Apple’s iCloud Advanced Data Protection encryption services Continue Reading

By

• Bill Goodwin, Computer Weekly

Distrust builds between digital ID sector and government amid speculation over 'ID cards by stealth'

Wednesday 2 April sees the latest meeting of the All-Party Parliamentary Group (APPG) on digital identity. It’s more exciting than it sounds – honest! APPGs have no power or governmental role – ... Continue Reading

By

• Bryan Glick, Editor in chief

Advanced Software fined £3m over LockBit attack

The ICO has issued a £3m fine to software provider Advanced in the wake of security failings that led to significant disruption to NHS customers in a ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

ETSI launches first post-quantum encryption standard

European telco standards body launches its first post-quantum cryptography cyber standard, covering the security of critical data and communications Continue Reading

By

• Alex Scroxton, Security Editor

Scottish police hold almost no data on facial recognition use

It is currently impossible to assess Police Scotland’s use of retrospective facial recognition for efficacy and fairness because the force does not collect meaningful information that would enable a proper evaluation Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Ethical qualms prompt challenging social media migrations

Changing content moderation and artificial intelligence training practices means social media has undergone a fundamental shift in the past six months, presenting organisations and people migrating away from these platforms for ethical reasons with a number of practical challenges Continue Reading

By

• Peter Ray Allison

Seaco charts course for unified security strategy

Shipping container leasing giant consolidates security tools onto a single platform, leveraging AI and extended detection and response to improve security operations Continue Reading

By

• Aaron Tan, Informa TechTarget

PSNI’s ‘ridiculous’ withholding of evidence in spying operation delayed court hearings 

Landmark ruling by the Investigatory Powers Tribunal will decide whether the surveillance court can award costs against government bodies accused of unreasonable behaviour  Continue Reading

By

• Bill Goodwin, Computer Weekly
• Cormac Kehoe

Chinese espionage group UNC3886 targets Juniper routers

Advanced persistent threat group UNC3886 deployed custom backdoors on end-of-life Juniper Networks routers, underscoring the need for timely patching and advanced security monitoring Continue Reading

By

• Aaron Tan, Informa TechTarget

Driving licence data could be used for police facial recognition

The government’s Crime and Policing Bill could allow police to access the UK driving licence database for use in facial recognition watchlists, but the Home Office denies biometric data would be repurposed in this way Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Perimeter security appliances source of most ransomware hits

Perimeter security appliances and devices, particularly VPNs, prove to be the most popular entry points into victim networks for financially motivated ransomware gangs, according to reports Continue Reading

By

• Alex Scroxton, Security Editor

Singapore IT leaders boost AI security defences

Study reveals a surge in perceived importance of artificial intelligence for cyber security in Singapore, but declining investment in traditional measures raises concerns as sophisticated cyber attacks intensify Continue Reading

By

• Aaron Tan, Informa TechTarget

What is Kerberos and how does it work?

Kerberos is a protocol for authenticating service requests between trusted hosts across an untrusted network, such as the internet. Continue Reading

By

• Rahul Awati
• Peter Loshin, Former Senior Technology Editor
• Michael Cobb

What is a certificate authority (CA)?

A certificate authority (CA) is a trusted entity that issues digital certificates to authenticate content sent from web servers. Continue Reading

By

• Rahul Awati
• Peter Loshin, Former Senior Technology Editor

Norway says ‘no way’ to global financial crime

Oslo’s startup ecosystem is fighting back against cyber criminals with tech to wipe out attacks rather than just detect them Continue Reading

By

• Matthew Staff

CFIT publishes blueprint for digital company business IDs

Plan to increase the use of digital identities by businesses could add billions of pounds to UK economy through compliance savings and reduced fraud Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NHS investigating how API flaw exposed patient data

NHS patient data was left vulnerable by a flaw in an application programming interface used at online healthcare provider Medefer Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

What is a domain controller?

A domain controller is a server that processes requests for authentication from users and computers within a computer domain. Continue Reading

By

• Gavin Wright
• Peter Loshin, Former Senior Technology Editor

US intelligence chief Tulsi Gabbard probes UK demand for Apple’s encrypted data

A secret order issued by the UK against Apple would be a ‘clear and egregious violation’ if it provides back door access to Americans’ encrypted data, says US director of national intelligence Continue Reading

By

• Bill Goodwin, Computer Weekly

Everything, everywhere, all at once: automated decision-making in public services

Despite the UK government's fervent embrace of artificial intelligence, there is still little meaningful transparency around the scope of the technology's deployment throughout public services Continue Reading

By

• Jasleen Chaggar, Big Brother Watch

Scottish police fail to record ethnicity in DNA database

Scottish policing bodies are failing to properly record and publish data on the ethnicity of arrested people, making it impossible to determine whether they are discriminating against certain sections of the population Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Singapore rolls out guidelines to bolster cloud and datacentre resilience

New advisory guidelines to enhance resilience and security of cloud services and datacentres in Singapore amid potential service disruptions and growing cyber threats Continue Reading

By

• Aaron Tan, Informa TechTarget

F1’s Red Bull charges 1Password to protect its 2025 season

For the upcoming 2025 Formula 1 season, Oracle Red Bull Racing adds cyber security partner 1Password to its roster of team suppliers and sponsors Continue Reading

By

• Alex Scroxton, Security Editor

A driving licence in an app is a boost for digital identity - but not for angry suppliers

It’s rare that a digital government development attracts interest from mainstream media, but last month’s announcement of a digital driving licence brought widespread national coverage and a mass ... Continue Reading

By

• Bryan Glick, Editor in chief

What is biometric verification?

Biometric verification is any means by which a person can be uniquely identified by evaluating one or more distinguishing biological traits. Continue Reading

By

• Michael Cobb
• Alexander S. Gillis, Technical Writer and Editor
• Rahul Awati

Can security operations ever be fully autonomous?

Focusing on targeted improvements, not full automation, is key to scaling security operations with AI Continue Reading

By

• Pete Shoard

What is biometrics?

Biometrics is the measurement and statistical analysis of people's unique physical and behavioral characteristics. Continue Reading

By

• Cameron Hashemi-Pour, Former Site Editor
• Alexander S. Gillis, Technical Writer and Editor
• Peter Loshin, Former Senior Technology Editor

Three sentenced over OTP.Agency MFA fraud service

Three men have been sentenced over their role in a cyber criminal subscription service that offered access to online accounts using illicitly obtained one-time passcodes Continue Reading

By

• Alex Scroxton, Security Editor

Inside CyberArk’s security strategy

CyberArk CIO Omer Grossman talks up the company’s security-first ethos, the importance of an assumed breach mentality and how the company is addressing threats from the growing use of AI Continue Reading

By

• Aaron Tan, Informa TechTarget

High Court: Sky Betting ‘parasitic’ in targeting problem gambler

UK High Court rules that Sky Betting acted unlawfully after breaching a customer’s data protection rights when it obtained his personal data through cookies and used it to profile him for the purposes of direct marketing, despite his ‘impaired’ ability to provide meaningful consent Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

What is SSL (Secure Sockets Layer)?

SSL (Secure Sockets Layer) is a networking protocol that secures connections between web clients and web servers over internal networks or the internet by encrypting the data sent between those clients and servers. Continue Reading

By

• Rahul Awati
• Michael Cobb
• Peter Loshin, Former Senior Technology Editor

UK eVisa system problems persist despite repeated warnings

Travellers are already having issues boarding UK-bound flights, while refugees have been left with no way to prove their immigration status in the UK, just two weeks after the Home Office transitioned to electronic visas Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Biden signs new cyber order days before Trump inauguration

With days left in the White House, outgoing US president Joe Biden has signed a wide-ranging cyber security executive order with far-reaching implications Continue Reading

By

• Alex Scroxton, Security Editor

US bank FNBO uses Pindrop to tackle voice fraud, deepfakes

Learn how First National Bank of Omaha in the US is enhancing customer authentication and verification in its contact centres, eliminating friction points and making life easier for its customer service teams, with Pindrop voice security technology Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 police technology stories of 2024

Here are Computer Weekly’s top 10 police technology stories of 2024 Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

What is a public key and how does it work?

In cryptography, a public key is a large numerical value that is used to encrypt data. Continue Reading

By

• Rahul Awati

Top 10 data and ethics stories of 2024

Here are Computer Weekly’s top 10 data and ethics stories of 2024 Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

What is a public key certificate?

A public key certificate is a digitally signed document that serves to validate the sender's authorization and name. Continue Reading

By

• Rahul Awati

Top 10 cyber security stories of 2024

Data breaches, data privacy and protection, and the thorny issue of open source security were all hot topics this year. Meanwhile, security companies frequently found themselves hitting the headlines, and not always for good reasons. Here are Computer Weekly's top 10 cyber security stories of 2024 Continue Reading

By

• Alex Scroxton, Security Editor

Look to the future: How the threat landscape may evolve next

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Elliott Wilkes, ACDS

Top 10 cyber crime stories of 2024

From ransomware targeting the NHS to nation-state-backed intrusions, 2024 was another big year for cyber criminals and cyber spooks alike, but they didn't have it all their own way as the good guys fought back Continue Reading

By

• Alex Scroxton, Security Editor