Network security management

Barco fixes ClickShare wireless flaw, but users still at risk

Supplier patches a major vulnerability in its popular ClickShare wireless presentation system with a firmware upgrade, but experts warn that users are not out of the woods yet Continue Reading

By

• Alex Scroxton, Security Editor

Alarm bells ring, the IoT is listening

With Christmas bearing down on us, a series of vulnerability disclosures has drawn attention to the parlous state of IoT security, and serves as a timely warning to people planning to buy smart devices as gifts Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Data-centric security requires context and understanding

The belief that effective perimeter security is the best way to protect data is a fallacy that is being repeatedly exposed. We must recognise the need for a data-centric security model to protect data from both internal and external threats, but what does this mean for security professionals? Continue Reading

By

• Eoin Keary

Rapid evolution of quantum computing a concern for CISOs

With the race to achieve so-called quantum supremacy hotting up, security pros are concerned that it will outpace the development of appropriate safeguards, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

China bans foreign computing kit from government contracts

All government offices and public institutions must eliminate foreign hardware and software within three years, according to a leaked directive dubbed 3-5-2 Continue Reading

By

• Alex Scroxton, Security Editor

How commodities firm ED&F Man solved its threat detection challenges

After a minor server breach, leading commodities trader turned to Vectra’s Cognito service to expose hidden threats, spot privilege misuse, and conduct conclusive investigations Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Is data more or less secure in the cloud?

Misconfigured cloud environments are increasingly identified as the source of damaging data breaches and leaks, raising serious questions for enterprises. Where does responsibility for data security in the cloud lie, and how can security professionals best work with their teams and cloud providers to resolve the problem? Continue Reading

By

• Benoit Heynderickx, Information Security Forum

Great Cannon DDoS operation fires on Hong Kong protesters

AT&T’s security unit has evidence that China is pressing its Great Cannon DDoS tool into service once again, specifically to target pro-democracy protests in Hong Kong Continue Reading

By

• Alex Scroxton, Security Editor

Aviatrix VPN vulnerability left user endpoints wide open

Immersive Labs has disclosed a serious vulnerability in VPN supplier Aviatrix’s enterprise client that could have granted hackers elevated user privileges across enterprise targets Continue Reading

By

• Alex Scroxton, Security Editor

Biometrics to enable $2.5tn of mobile payments by 2024

Juniper Research study predicts that biometric technology will be present on 90% of smartphones in five years’ time Continue Reading

By

• Joe O’Halloran, Computer Weekly

Tenable buys Indegy to integrate IT and OT security

Acquisition of industrial security specialist Indegy will create a unified, risk-based platform spanning both IT and OT security for Tenable Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: In-depth protection is a matter of basic hygiene

The belief that effective perimeter security is the best way to protect data is a fallacy that is being repeatedly exposed. We must recognise the need for a data-centric security model to protect data from both internal and external threats, but what does this mean for security professionals? Continue Reading

By

• Petra Wenham

Top Android apps at risk from StrandHogg vulnerability

Researchers at Promon say all of the 500 most-downloaded Android apps are at risk from a newly discovered vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Do cyber weapons need a Geneva Convention?

On a cold afternoon in Finland, F-Secure’s Mikko Hypponen discusses cyber weapons and nation state threats, and explains why arms limitations treaties might one day expand to include malware and other threats Continue Reading

By

• Alex Scroxton, Security Editor

Top APAC security predictions for 2020

More attacks on critical infrastructure, supply chain vulnerabilities and file-less attacks are some of the security threats that enterprises should keep an eye on next year Continue Reading

By

• Aaron Tan, Informa TechTarget

AI may open dangerous new frontiers in geopolitics

Truly artificial intelligence has the potential to provoke an international geopolitical crisis, warns F-Secure’s Mikko Hypponen Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Stopping data leaks in the cloud

Misconfigured cloud environments are increasingly identified as the source of damaging data breaches and leaks, raising serious questions for enterprises. Where does responsibility for data security in the cloud lie, and how can security professionals best work with their teams and cloud providers to resolve the problem? Continue Reading

By

• Cath Goulding, Nominet

F-Secure’s Blackfin challenges perceptions of how AIs think

New research project aims to develop adaptive, autonomous and collaborative AI agents, and challenges the notion that machine intelligence should merely mimic human intelligence Continue Reading

By

• Alex Scroxton, Security Editor

Public sector risks downplayed by senior IT leaders

Sophos reveals a significant cyber security perception gap between senior IT and security leaders in the public sector and their front-line teams Continue Reading

By

• Alex Scroxton, Security Editor

Huawei shrugs off latest US reprieve

Chinese tech giant dismisses the latest extension of the US Temporary General Licence and maintains that the US government is harming its own interests in banning it Continue Reading

By

• Alex Scroxton, Security Editor

Managed services fuelling APAC security market

Spending on managed security services will account for almost half of Asia-Pacific’s cyber security market by 2023, as global and local providers shore up their offerings in the region Continue Reading

By

• Aaron Tan, Informa TechTarget

The top 10 network security best practices to implement today

Even as security techniques improve, attackers are becoming more adept. Learn about 10 network security best practices and how they can keep your network secure. Continue Reading

By

• Amy Larsen DeCarlo, GlobalData

Notorious hackers claim responsibility for Labour DDoS

Hackers claiming to represent Lizard Squad say they were behind a distributed denial of service attack on the UK’s Labour Party Continue Reading

By

• Alex Scroxton, Security Editor

CW APAC: Expert advice on container security

For all the promises of containers, changes in architecture and practices associated with the technology bring new challenges and opportunities. In this handbook, Computer Weekly looks at the security challenges associated with container technology. Continue Reading

11 new 5G hacks enable user device tracking and monitoring

Researchers at Purdue University and the University of Iowa publish details of several new 5G mobile network vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

Business leaders fibbing to cover up lax security posture

Nominet study finds evidence that many businesses tout the robustness of their security posture as a selling point even though their security teams lack confidence in themselves Continue Reading

By

• Alex Scroxton, Security Editor

Attack on Labour shows need for DDoS defence but should alarm few

After being hit by two DDoS attacks in the space of 24 hours, many commentators are convinced the UK’s Labour Party is the victim of foreign interference in the General Election campaign. It probably isn’t Continue Reading

By

• Alex Scroxton, Security Editor

Taking responsibility for security in the cloud

From accidental leaks to full-on data breaches, maintaining security across cloud services is becoming a headache for enterprises. What questions should organisations be asking of their cloud service provider and, ultimately, whose responsibility is cloud security anyway? Continue Reading

By

• Peter Ray Allison

Nordic SMEs lack the money needed for cyber security

Businesses and governments in Denmark and Norway are working together to address a cyber security shortfall for SMEs in each country Continue Reading

By

• Gerard O'Dwyer

‘Robust’ security foils cyber attack on Labour Party

Labour claims to have been the victim of a cyber attack, but says it is confident no data leaked Continue Reading

By

• Alex Scroxton, Security Editor

Shared responsibility model key to solving 5G security problem

Both buyers and sellers need to cooperate to solve the thorny issues around 5G security Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Cloud security is a shared responsibility

Misconfigured cloud environments are increasingly identified as the source of damaging data breaches and leaks, raising serious questions for enterprises. Where does responsibility for data security in the cloud lie, and how can security professionals best work with their teams and cloud providers to resolve the problem? Continue Reading

By

• Paddy Francis

Amazon Ring video doorbell flaw left users open to attack

A vulnerability in Amazon’s Ring video doorbells left the internet-of-things devices open to a variety of attacks Continue Reading

By

• Alex Scroxton, Security Editor

Saudis recruited Twitter employees to spy on critics

Court documents reveal how the Saudi Arabian government targeted Twitter employees as part of a coordinated effort to gather information on known dissidents Continue Reading

By

• Alex Scroxton, Security Editor

Trend Micro insider breach exposes need for data-centric protection

Simple measures could have saved consumer security product supplier from insider breach Continue Reading

By

• Alex Scroxton, Security Editor

Global security workforce must more than double to meet demand

There are about 2.8 million cyber security professionals working today, and the world needs four million more Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Adapt security posture to your cloud model

Misconfigured cloud environments are increasingly identified as the source of damaging data breaches and leaks, raising serious questions for enterprises. Where does responsibility for data security in the cloud lie, and how can security professionals best work with their teams and cloud providers to resolve the problem? Continue Reading

By

• Maxine Holt, Omdia

Ransomware authors seeking new ways to avoid being spotted

Sector analysis from Sophos has revealed some insight into how malware authors are adapting to thwart cyber security controls Continue Reading

By

• Alex Scroxton, Security Editor

General Election sees UK government defer ‘high-risk’ 5G tech supplier review

Decision on allowing so-called high-risk suppliers access to the UK’s market for 5G infrastructure delayed due to 12 December poll Continue Reading

By

• Joe O’Halloran, Computer Weekly

NordVPN enlists ethical hackers, launches bug bounty programme

Breached consumer VPN supplier details steps it is taking to shore up its cyber security posture after an unknown actor gained access to one of its servers Continue Reading

By

• Alex Scroxton, Security Editor

Fancy Bear resumes Olympic hacks ahead of Tokyo games

Fancy Bear is back in action and once again targeting anti-doping bodies and sporting organisations, warns Microsoft Continue Reading

By

• Alex Scroxton, Security Editor

Endpoint security is a procurement issue, says HP, IDC study

Report warns that buyers are falling at the first hurdle on security by not including it in their endpoint RFPs and tenders Continue Reading

By

• Alex Scroxton, Security Editor

Take responsibility for cyber security basics, urges NCSC CEO

At the launch of its third annual review, NCSC head Ciaran Martin appealed for individuals and businesses to address the fundamentals of cyber security hygiene to help lighten the load Continue Reading

By

• Alex Scroxton, Security Editor

NordVPN blames datacentre provider for server breach

VPN provider insists no user data was compromised in a March 2018 server breach, and says its datacentre provider failed to inform it of the issue Continue Reading

By

• Alex Scroxton, Security Editor

Attacker hit VPN firm Avast through its VPN

Avast has published details of how attackers attempted to gain access to its network over a five month period Continue Reading

By

• Alex Scroxton, Security Editor

Alleged state hackers adapting to cover their tracks, says NCSC

A group called Turla with suspected links to the Russian government stole Iranian tools and infrastructure to obscure the origins of attacks on multiple other countries, according to new evidence Continue Reading

By

• Alex Scroxton, Security Editor

Sodinokibi emerging as a diverse, multi-vector threat to businesses

McAfee shares insight into the Sodinokibi ransomware campaign gleaned from its network of honeypots Continue Reading

By

• Alex Scroxton, Security Editor

Amazon consumer devices vulnerable to two-year-old exploit

Millions of older Amazon Echo and Kindle devices are still susceptible to a Wi-Fi vulnerability that was first disclosed in 2017 Continue Reading

By

• Alex Scroxton, Security Editor

BEIS launches multimillion-pound security investment package

Government is making available more than £50m to support a range of new cyber security initiatives and collaborations, including the latest phase of its Digital Security by Design programme Continue Reading

By

• Alex Scroxton, Security Editor

Private equity swoops on Sophos

British cyber security star picked up by technology sector investors for $3.9bn Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Applying AI to Lego, and security

Ann Johnson, Microsoft corporate vice-president of cyber security, is on a mission to prove that artificial intelligence holds great promise for the security sector, and she has the analogies to back it up Continue Reading

By

• Alex Scroxton, Security Editor

Data management strategies are evolving – so must enterprises

A growing number of data-driven initiatives, alongside heightened demand for security in governance, data management and compliance, has led to the rise of a more holistic approach – integrated risk management Continue Reading

By

• Peter Ray Allison

IBM, McAfee among founders of open source security alliance

A group of cyber security suppliers have come together to form the Open Cybersecurity Alliance Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Get basic security policy right, and the rest will follow

Paying attention to basic aspects of cyber security such as policy and permission will give you a sold base to build from Continue Reading

By

• Petra Wenham

IT contractor charged over cyber attack on property valuation firm

Australian police charge 49-year-old man with stealing and posting more than 170,000 data records belonging to ASX-listed Landmark White on the dark web Continue Reading

By

• Beverley Head

LogRhythm touts unlimited data plan for SIEM systems

SIEM supplier introduces three-year, term-based pricing plan that lets enterprises ingest as much data as they want without breaking the bank Continue Reading

By

• Aaron Tan, Informa TechTarget

Attackers breached supplier systems to steal Airbus secrets

Airbus has been the subject of at least four major cyber attacks in the past 12 months, with contractors and suppliers targeted through their VPNs Continue Reading

By

• Alex Scroxton, Security Editor

Latest Lorca cyber security challenge has IoT focus

Government-backed cyber security innovation centre Lorca has issued new challenges around connectivity for its next intake of scaleups Continue Reading

By

• Alex Scroxton, Security Editor

Universities tempting targets for cyber criminals, warns NCSC

As hundreds of thousands of students prepare for the new academic year, universities have been warned that they are at high risk of cyber attack Continue Reading

By

• Alex Scroxton, Security Editor

Ensign InfoSecurity opens global headquarters in Singapore

The Singapore-based cyber security firm’s new headquarters will also be home to a new security operations centre that will be supported by Singapore-centric threat intelligence Continue Reading

By

• Aaron Tan, Informa TechTarget

Security Think Tank: The case for blockchain-based identity

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Richard Hunt, Turnkey Consulting

How Zuellig Pharma is fighting fake drugs with blockchain

The Asia-Pacific pharmaceutical giant is using a blockchain platform from SAP to help consumers identify the provenance of medicine Continue Reading

By

• Aaron Tan, Informa TechTarget

Security Think Tank: Too soon to dismiss blockchain in cyber security

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Maxine Holt, Omdia

Security Think Tank: Use blockchain for integrity and immutability checks

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Eoin Keary

Security Think Tank: Blockchain is not for everyone, so look carefully before you leap

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Paddy Francis

At least 47,000 servers vulnerable to remote attack

All organisations using Supermicro servers are being urged to update firmware to block remote attacks exploiting vulnerabilities in baseboard management controllers Continue Reading

By

• Warwick Ashford, Senior analyst

UK organisations join quantum comms pilot

Four UK companies are taking part in a pilot project to build the most secure communication infrastructure in Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Finland’s security agencies collaborate after cyber attacks

National Bureau of Investigations and National Cyber Security Centre aim to increase expertise and capability to defend Finland’s critical IT infrastructure Continue Reading

By

• Gerard O'Dwyer

Kaspersky eyes enterprise business, opens APAC transparency hub

The security firm wants to engage with enterprises and use its newly launched Malaysian Transparency Centre to burnish its credentials Continue Reading

By

• Edwin Yapp

Healthcare faces triple cyber threat, says FireEye

Criminal and nation-state cyber attackers are increasingly targeting the healthcare industry to steal data, carry out espionage and cause disruption, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Silence APT group eyes APAC banks

Russian-speaking advanced persistent threat group has set its sights on banks in the region, customising its arsenal for targeted attacks Continue Reading

By

• Aaron Tan, Informa TechTarget

Huawei to US: Ban violates free market principles

Huawei has hit back at the US government’s latest moves to restrict its activities Continue Reading

By

• Alex Scroxton, Security Editor

US extends temporary stay on Huawei ban

American network operators given extra wiggle room to wean themselves off Huawei’s hardware Continue Reading

By

• Alex Scroxton, Security Editor

How EDR is moving beyond the endpoint

An emerging breed of detection and response offerings is going beyond endpoints to collect and decipher telemetry data from across the enterprise Continue Reading

By

• Aaron Tan, Informa TechTarget

Passwordless enterprise already possible, says RSA

The passwordless enterprise is getting easier to attain as the security industry gears up to support a passwordless future, says RSA’s identity chief Continue Reading

By

• Warwick Ashford, Senior analyst

New approach to risk management needed, says Gartner

Most third-party risks are discovered after the initial due diligence period, Gartner study shows, highlighting the need for a new approach to risk management and the importance of effective access controls Continue Reading

By

• Warwick Ashford, Senior analyst

Cisco frozen out of China as Trump’s trade war rages on

Cisco CEO Chuck Robbins reveals the firm is being edged out of the Chinese market Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Data architecture and security must evolve in parallel

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Deshini Newman, (ISC)²

DCMS funding aims to increase diversity in cyber sector

A funding round has been announced as part of the Cyber Skills Immediate Impact Fund (CSIIF) with aims of encouraging more diverse talent into the UK’s cyber security sector Continue Reading

By

• Clare McDonald, Business Editor

Digital domain identified as major security threat by Norway’s intelligence service

Norway's intelligence services has revealed the extent of the threat posed to the country by cyber attacks Continue Reading

By

• Gerard O'Dwyer

Norman evasive cryptominer conquers networks

Cryptomining malware designed to evade detection is capable of invading every device in targeted companies, researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Data architects should be key allies of infosec pros

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Eoin Keary

How tech experts could earn millions as whistleblowers

In this week’s Computer Weekly, a tech expert is set to earn millions after successfully blowing the whistle on vulnerabilities in Cisco’s video surveillance software. Our latest buyer’s guide examines the issues around big data architecture. And we look at how the end of Windows 7 could spark a new era for desktop productivity. Read the issue now. Continue Reading

Phishing top security threat to business

A new Telefónica security service for business shows that phishing is the most-blocked threat and smaller businesses are a popular attack target in the first two months of deployment Continue Reading

By

• Warwick Ashford, Senior analyst

NCC Group warns of security risks of leading printers

Researchers uncover more than 35 vulnerabilities in six leading enterprise printers, many of which could allow access to corporate networks, underlining the need to counter security risks of embedded systems Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Security is a business, not an IT function

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Mike Gillespie

Security Think Tank: Dialogue between data architects and security leads is essential

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Paddy Francis

African bank foils suspected North Korean cyber attack

An African bank is among the financial institutions to be targeted by North Korea’s multi-billion dollar cyber theft campaign to support its weapons programmes Continue Reading

By

• Warwick Ashford, Senior analyst

DDoS on the rise, warns Kaspersky

Security researchers at Kaspersky are among those warning business that, more than ever, mitigation of distributed denial of service attacks needs to be a key element of cyber defence strategies Continue Reading

By

• Warwick Ashford, Senior analyst

Developing innovative security analytics approaches in the digital age

With security threats growing in scale and complexity, security analytics provide a way for IT teams to stay one step ahead of cyber attackers. The challenge is to ensure this technology continues to be effective in the face of new security challenges Continue Reading

By

• Nicholas Fearn

Cisco pays $8.6m after whistleblower discloses security flaws in video surveillance system

James Glenn, a video surveillance expert working for a Cisco reseller in Denmark, alerted Cisco to security faults and stands to gain a share of a multimillion-dollar settlement with the US government Continue Reading

By

• Bill Goodwin, Investigations Editor

Huawei ‘galvanised’ by Trump ban

Huawei has found itself caught in the crossfire of the US president’s trade war with China, but chairman Liang Hua says the firm is rising to the challenge Continue Reading

By

• Alex Scroxton, Security Editor

Cyber kill chain is outdated, says Carbon Black

The chief cyber security officer of Carbon Black calls for a new cognitive paradigm to fend off cyber adversaries that are now attacking in cycles Continue Reading

By

• Aaron Tan, Informa TechTarget

Network teams spend more time than ever on network security issues

The workloads of network teams have evolved from their original objectives because of network security threats. Yet teams are still expected to maintain their initial goals. Continue Reading

By

• Michaela Goss, Senior Site Editor

Government delays final decision on Huawei

Culture secretary says he cannot yet make specific decisions about Huawei’s involvement in the UK’s telecoms and mobile networks due to a lack of clarity from the US, effectively green-lighting its use Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft talks up benefits and pitfalls of machine learning in security

Software giant Microsoft uses machine learning models to detect emerging threats while keeping an eye on potential bias in security data points that could derail its analysis Continue Reading

By

• Aaron Tan, Informa TechTarget

US fines Equifax $700m over 2017 breach

Global settlement with US authorities follows systems breach that saw more than 140 million customer records stolen Continue Reading

By

• Alex Scroxton, Security Editor

HID weighs in the glacial move towards digital ID

There are still concerns over data integrity, security and privacy of digital identities, but the convenience of the technology outweighs the risks, says a HID expert Continue Reading

By

• Aaron Tan, Informa TechTarget

CW ANZ: Trend Watch – Security

With regulations pushing data protection up the business agenda, we look at how Australia’s Notifiable Data Breaches scheme has been received and consider why a survey that found Australian firms are experiencing fewer cyber breach incidents appears to conflict with anecdotal evidence that suggests the opposite. Continue Reading

The 5 network security basics you need to know

In this compilation, learn what network security is, as well as how it differs from cybersecurity, common -- and potentially confusing -- technologies, threats and more. Continue Reading

By

• Michaela Goss, Senior Site Editor