Network security management

How cyber security teams can conquer the four-day working week

The four-day week may be an idea whose time has come, but for always-on cyber security professionals, the impact of squeezing more work into fewer days is a tricky proposition Continue Reading

By

• Keiron Holyome

screened subnet

A screened subnet, or triple-homed firewall, refers to a network architecture where a single firewall is used with three network interfaces. Continue Reading

By

• Rahul Awati

Microsoft serves up three zero-days on March Patch Tuesday

Three zero-days pop up in Microsoft’s March update, along with a number of other noteworthy concerns for defenders Continue Reading

By

• Alex Scroxton, Security Editor

Google buys Mandiant for £4bn

Acquisition will see cyber defence and threat intelligence specialist folded into Google Cloud’s security suite Continue Reading

By

• Alex Scroxton, Security Editor

How APAC organisations can mitigate edge security threats

The move to the edge expands an organisation’s attack surface. Here are some measures that organisations can take to minimise their edge security risks Continue Reading

By

• Aaron Tan, Informa TechTarget

When more is too much in security

The view that more security tools equals better protection still persists, but security researcher Etay Maor argues that success in cyber lies in simplicity Continue Reading

By

• Etay Maor

Ukraine joins Nato cyber knowledge hub

Ukraine is to become a contributing participant in Nato’s Cooperative Cyber Defence Centre of Excellence Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft stops sales of products and services to Russia

Citing sanctions and cyber security concerns, Microsoft has become the latest company to withdraw from the Russian market Continue Reading

By

• Alex Scroxton, Security Editor

Nato Cyber Security unit tests post-quantum VPN

Nato’s Cyber Security Centre has successfully tested secure communication flows in a post-quantum world using a UK-designed VPN Continue Reading

By

• Alex Scroxton, Security Editor

Direct action is a risky business for Ukraine's volunteer hackers

Hackers have been responding to Ukraine’s call to create an IT army, but there are many reasons why taking direct action in a kinetic conflict is a bad idea Continue Reading

By

• Alex Scroxton, Security Editor

Cyber companies step up support for Ukraine

Security companies Bitdefender and Vectra AI are both to offer products and services in support of Ukraine Continue Reading

By

• Alex Scroxton, Security Editor

BBC blasted with millions of malicious emails

Responding to an FoI request, the BBC has revealed it receives more than 300,000 malicious email attacks every day Continue Reading

By

• Alex Scroxton, Security Editor

DCMS opens consultation on telecoms cyber standards

Proposed rules will set out the specific measures telecoms providers need to take to fulfil their legal duties under the Telecommunications Security Act Continue Reading

By

• Alex Scroxton, Security Editor

ESET details new IsaacWiper malware used on Ukraine

Having been among the first to report on the HermeticWiper malware used against Ukraine last week, ESET has now identified another destructive malware called IsaacWiper Continue Reading

By

• Alex Scroxton, Security Editor

Ukraine cyber attacks seen spiking, but no destructive cyber war yet

While cyber attacks linked to Russia’s war on Ukraine are taking place, they are having little impact beyond the region Continue Reading

By

• Alex Scroxton, Security Editor

Cloudflare: Our network is our product

Cloudflare’s chief product officer explains why its network is its product and how it protects organisations against cyber threats Continue Reading

By

• Aaron Tan, Informa TechTarget

Mass phishing attacks against Ukrainian citizens reported

The Ukrainian cyber authorities are alerting people located in the country to be alert to phishing attacks Continue Reading

By

• Alex Scroxton, Security Editor

The UK’s cyber security sector is thriving, but our work has only just begun

The government’s Annual Cyber Sector Report painted a positive picture of the UK security industry. CIISec’s Amanda Finch thinks we can go further in developing cyber talent and opening up the sector Continue Reading

By

• Amanda Finch, Institute of Information Security Professionals

Researchers link Dridex botnet to emergent Entropy ransomware

A little-known new ransomware called Entropy contains significant code similarities to the general purpose Dridex botnet, suggesting some kind of link between the two Continue Reading

By

• Alex Scroxton, Security Editor

KnowBe4 cyber drama tackles Colonial Pipeline in fourth season

KnowBe4’s ongoing cyber security training drama, The Inside Man, reaches its fourth season with a plot drawing inspiration from one of the most impactful cyber attacks of 2021 Continue Reading

By

• Alex Scroxton, Security Editor

New wave of cyber attacks on Ukraine preceded Russian invasion

A wave of DDoS attacks, and a second data wiper attack, were seen hitting Ukraine in the hours leading up to the Russian invasion Continue Reading

By

• Alex Scroxton, Security Editor

New cyber guidelines to safeguard construction sector

NCSC launches sector-specific security guidance for organisations in the construction industry, with input from the Chartered Institute of Building Continue Reading

By

• Alex Scroxton, Security Editor

Russia behind dangerous Cyclops Blink malware

Joint NCSC CISA advisory attributes a dangerous malware, dubbed Cyclops Blink, to Russia’s Sandworm APT, likely a GRU unit, with WatchGuard users at particular risk Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft extends Defender umbrella to Google Cloud Platform

Redmond says extending Defender for Cloud native capabilities to the Google Cloud Platform will help simplify security for organisations pursuing multicloud strategies by eliminating the gaps where the bad guys can get in Continue Reading

By

• Alex Scroxton, Security Editor

IBM opens cyber security hub in India

Big Blue’s new cyber security hub, comprising a cyber range, software development facilities and a security operations centre, will serve enterprises across the Asia-Pacific region Continue Reading

By

• Aaron Tan, Informa TechTarget

Zoom gains NCSC Cyber Essentials Plus and NHS security badges

Video platform Zoom has added a number of UK-specific cyber certifications to help it demonstrate its platform is safeguarded against common threats Continue Reading

By

• Alex Scroxton, Security Editor

UK joins US in pinning Ukraine DDoS attacks on Russia

A series of DDoS attacks on Ukrainian defence and banking organisations last week is now being firmly attributed to Russian action Continue Reading

By

• Alex Scroxton, Security Editor

2021 another record year for UK cyber investment

Total revenue generated by the UK’s cyber sector was up 14% last year, and UK-registered security firms raised over £1bn in investment Continue Reading

By

• Alex Scroxton, Security Editor

Botched third-party configuration exposes Internet Society data to web

Personal data on members of The Internet Society was exposed after a supplier failed to secure its Azure storage Continue Reading

By

• Alex Scroxton, Security Editor

Lack of knowledge disastrous for effective security strategy within Dutch companies

Most Dutch companies still haven’t realised that security is an integral part of their IT and company strategy Continue Reading

By

• Kim Loohuis

Why security professionals should pay attention to what Russia is doing

Even though the average organisation is an unlikely target for a Russian state cyber attack, here's why security teams still need to watch what Russian threat groups are up to Continue Reading

By

• Alex Scroxton, Security Editor

CW Benelux: Unesco members adopt AI ethics recommendation

Unesco member state have adopted an AI ethics recommendation that seeks to define a common set of values and principles to guide the development of ethical AI globally. Also read about a large-scale national cyber exercise in the Netherlands, and the Estonian government’s Siri-like digital assistant. Continue Reading

Linux-based clouds an open door for attackers, says VMware

Its prevalence as a cloud operating system means Linux is becoming a meal ticket for malicious actors, but the security industry does not seem to have cottoned on to this yet, says VMware Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware ever more sophisticated and impactful, warns NCSC

UK’s National Cyber Security Centre teams up with US and Australian partners in a joint advisory warning organisations of the increasing sophistication exhibited by criminal ransomware gangs Continue Reading

By

• Alex Scroxton, Security Editor

Log4Shell, Ukraine and umbrella firm cyber attacks – Computer Weekly Downtime Upload podcast

Alex Scroxton joins the team to discuss the Log4j vulnerability and Russian pressure on Ukraine. Also discussed are cyber attacks on umbrella companies, neuro-diversity and junk in space Continue Reading

By

• Alex Scroxton, Security Editor
• Caroline Donnelly, Senior Editor, UK
• Clare McDonald, Business Editor

The Security Interviews: Building the UK’s future cyber ecosystem

As the government lays out the next iteration of its Cyber Security Strategy, we speak to Plexal and Lorca’s Saj Huq about his work building a cyber ecosystem to support the UK’s future ambitions Continue Reading

By

• Alex Scroxton, Security Editor

Cyber attacks on European oil facilities spreading

Following a cyber attack on distribution facilities in Germany, more incidents have been reported in Belgium and the Netherlands, but it is too early to necessarily draw a link between them Continue Reading

By

• Alex Scroxton, Security Editor

Check Point looks to plug ASEAN’s cyber security gap

Check Point is shoring up its sales force and partner ecosystem to address the cyber security needs of small and mid-sized businesses in a region that is highly targeted by threat actors Continue Reading

By

• Aaron Tan, Informa TechTarget

BlackCat crew supposedly behind OilTanking ransomware heist

Preliminary reports from Germany’s national cyber authority indicate the recent OilTanking ransomware attack may have been the work of the BlackCat group Continue Reading

By

• Alex Scroxton, Security Editor

Crisp supply shortage looms after KP Snacks hit by ransomware

Supplies of Hula Hoops and many other snack brands are under threat after a ransomware attack on the systems of KP Snacks Continue Reading

By

• Alex Scroxton, Security Editor

French Supreme Court raises constitutional questions over EncroChat hacking secrecy

Conseil Constitutionnel to decide whether ‘defence secrecy’ over state EncroChat cryptophone hacking breaches French constitution Continue Reading

By

• Bill Goodwin, Computer Weekly

Zero-trust to soar in 2022, but dogged by implementation challenges

IT leaders are keen to invest in zero-trust, but face issues around a lack of expertise, and selling the concept into the C-suite Continue Reading

By

• Alex Scroxton, Security Editor

What neurodivergent people really think of working in cyber security

Many firms are filling cyber security skills gaps by hiring neurodivergent talent – but more support is needed for neurodivergent cyber security professionals, writes autistic tech journalist Nicholas Fearn Continue Reading

By

• Nicholas Fearn

German fuel supplier taken offline in cyber attack

Cyber attack against Germany’s Oiltanking, a major fuel logistics company, affects 13 distribution terminals across Germany, in an incident with echoes of last year’s hit on Colonial Pipeline Continue Reading

By

• Alex Scroxton, Security Editor

Over one-fifth of ransomware attacks target financial sector

Newly published data reveals a significant uptick in cyber attacks against the financial services sector during the third quarter of 2021 Continue Reading

By

• Alex Scroxton, Security Editor

Data on children of armed forces personnel exposed in breach

Data on 4,142 children of serving armed forces personnel was exposed in a data breach at the Ministry of Defence Continue Reading

By

• Alex Scroxton, Security Editor

CISOs must get out in front of Ukraine cyber crisis, says NCSC

The National Cyber Security Centre is urging UK organisations to take steps to bolster their cyber security resilience in response to the ongoing Ukraine crisis Continue Reading

By

• Alex Scroxton, Security Editor

DCMS taps Arqit for 5G project to provide Open RAN security by default

Quantum platform-as-a-service provider joins government’s programme to drive diversity in comms technology supply with the aim of integrating a novel quantum encryption service to enable security by default Continue Reading

By

• Joe O’Halloran, Computer Weekly

one-time pad

In cryptography, a one-time pad is a system in which a randomly generated private key is used only once to encrypt a message that is then decrypted by the receiver using a matching one-time pad and key. Continue Reading

By

• Andrew Froehlich, West Gate Networks

Integrating zero-trust practices into private 5G networks

One of the first steps in deploying a technology is protecting it from potential security threats. Learn how to secure a private 5G network with zero-trust security practices. Continue Reading

By

• Andrew Froehlich, West Gate Networks

More intel emerges on WhisperGate malware that hit Ukraine

Security experts have been poring over the WhisperGate malware with which alleged Russia-backed entities targeted Ukrainian government websites Continue Reading

By

• Alex Scroxton, Security Editor

MPs to debate landmark IoT security law

Proposed bill mandates tighter protections for connected products, and adds new rules for broadband roll-out into the bargain Continue Reading

By

• Alex Scroxton, Security Editor

Prepare, but don’t panic, over supposed Russian cyber threat

A fresh alert from the US Department of Homeland Security may have IT security teams jumpy over the possibility that their organisations could be targeted by Russian state actors Continue Reading

By

• Alex Scroxton, Security Editor

Cyber Essentials programme gets biggest update since launch

NCSC implements a thorough revision of its Cyber Essentials scheme to reflect the changing security landscape Continue Reading

By

• Alex Scroxton, Security Editor

Cyber pros: Don’t revel in REvil’s downfall just yet

The arrests of REvil’s alleged kingpins is a welcome step, but as with any disruption to cyber criminal activity, it is never wise to assume law enforcement action means the threat has passed entirely Continue Reading

By

• Alex Scroxton, Security Editor

New normal sees SASE, SD-WAN surge as MPLS is phased out

Research confirms that MPLS is ‘out’ and SD-WAN and SASE systems are the clear winners in enterprise networking as more and more European organisations are eliminating all on-prem datacentres, with cloud adoption steaming ahead Continue Reading

By

• Joe O’Halloran, Computer Weekly

Ransomware attacks dropped 37% in December, claims NCC

Latest monthly data reveals a significant decline in ransomware attacks at the end of 2021, but a new, emergent gang is making waves Continue Reading

By

• Alex Scroxton, Security Editor

Updated cyber security regulations proposed for managed services sector

The Network and Information Systems regulations are to be updated to include MSPs and outsourcers, following a spate of supply chain attacks Continue Reading

By

• Alex Scroxton, Security Editor

Data of 515,000 vulnerable people stolen in Red Cross attack

The International Committee of the Red Cross is probing a cyber attack that has already seen the personal data of hundreds of thousands of the world’s most vulnerable people compromised Continue Reading

By

• Alex Scroxton, Security Editor

Chasm exists between ‘true’ and portfolio SASE approaches

Survey of enterprise IT leaders finds little difference between respondents without SASE and those who adopted SASE product portfolios regarding issues such as trade-offs between performance and security Continue Reading

By

• Joe O’Halloran, Computer Weekly

Trellix looks to democratise access to XDR in APAC

The company formed from the merger of FireEye Enterprise and McAfee will team up with managed service providers, among other efforts, to democratise access to extended detection and response capabilities in the region Continue Reading

By

• Aaron Tan, Informa TechTarget

Trellix XDR platform forged out of McAfee, FireEye union

The private equity owners of McAfee Enterprise and FireEye are merging the companies into a new entity to ‘define the future’ of cyber security through XDR technology Continue Reading

By

• Alex Scroxton, Security Editor

Exium, Teneo team to deliver digital experience, 5G-capable SASE platform

Work-from-anywhere IT services company and cyber security provider enter into partnership to assist lean enterprise IT teams in their transition to a secure access service edge Continue Reading

By

• Joe O’Halloran, Computer Weekly

Cobalt Strike still C2 infrastructure of choice

Its utility and ease of use, coupled with explosive growth in ransomware actions, makes Cobalt Strike Team Servers the C2 infrastructure of choice for malicious actors Continue Reading

By

• Alex Scroxton, Security Editor

Nordic companies targeted in wave of cyber attacks

After a slew of cyber attacks hit major companies in the Nordics at the end of last year, we look at how they were affected and how they have recovered Continue Reading

By

• Gerard O'Dwyer

UK government bodies challenged on secure identity

Public sector bodies in the UK recognise secure identity and access management as critical to the roll-out of digital services, but face challenges in addressing this Continue Reading

By

• Alex Scroxton, Security Editor

Macquarie joins NSW government’s cloud supplier panel

New South Wales state agencies will be able to access Macquarie’s sovereign cyber expertise and secure cloud, network and datacentre services Continue Reading

By

• Aaron Tan, Informa TechTarget

honeynet

A honeynet is a network set up with intentional vulnerabilities hosted on a decoy server to attract hackers. Continue Reading

By

• Andrew Zola

Google buys Siemplify in first phase of cyber investment

Once integrated into Google Cloud, Siemplify’s platform will serve as the basis for deeper security development at Google Continue Reading

By

• Alex Scroxton, Security Editor

access log

An access log is a list of all requests for individual files -- such as Hypertext Markup Language files, their embedded graphic images and other associated files that get transmitted -- that people or bots have made from a website. Continue Reading

By

• Andrew Zola

Admins warned that Exchange date fix will take time to roll out

At the start of the New Year, Exchange 2016 and 2019 email servers started queuing email messages due to a date bug Continue Reading

By

• Cliff Saran, Managing Editor

How APAC firms can stay ahead of cyber threats

Organisations will need to develop behavioural detection, machine learning and threat hunting capabilities to keep pace with the onslaught of cyber attacks Continue Reading

By

• Aaron Tan, Informa TechTarget

Top 10 cyber security stories of 2021

Cyber security dominated the headlines in 2021, making it hard to gain a clear picture of what to pay attention to. What is an IT buyer to do? Continue Reading

By

• Alex Scroxton, Security Editor

Is the IT sector beset by fear-mongering?

The arms race between hackers and security teams has led to a plethora of new technologies, but it can be hard to differentiate between sensible cyber purchases and those that are promoted by exaggerating risk Continue Reading

By

• Peter Ray Allison

What is Log4Shell - and why the panic?

In this week’s Computer Weekly, we assess the risks from Log4Shell, a new web software vulnerability described as “catastrophic”. We look at SASE – secure access service edge – which is set to be one of the networking priorities for 2022. And some victims of the Post Office IT scandal are still waiting for proper compensation. Read the issue now. Continue Reading

Enabling secure remote working is once again a top priority

The pandemic has bought many new security risks, particularly around remote working. As the UK government once again urges people to work from home under its Plan B restrictions, these risks must be tackled as a priority Continue Reading

By

• Warwick Ashford, Senior analyst

After Log4j, December Patch Tuesday piles on the pressure

December’s Patch Tuesday update from Microsoft contains several critical CVEs, but this month all attention is focused on the fall-out from Log4Shell, and burn-out is becoming a real issue Continue Reading

By

• Alex Scroxton, Security Editor

UK government to take ‘whole-of-society’ approach to cyber

Second iteration of the UK’s National Cyber Strategy broadens its focus to build a ‘whole-of-society’ security posture Continue Reading

By

• Alex Scroxton, Security Editor

password salting

Password salting is a technique to protect passwords stored in databases by adding a string of 32 or more characters and then hashing them. Continue Reading

By

• Rahul Awati

What is Log4Shell, and why are we panicking about it?

It’s been described as a ‘design failure of catastrophic proportions’ that threatens the very fabric of the digital world. Find out what the Log4j2 Log4Shell panic is all about, and what you should do about it Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: There’s much more to do to secure hybrid workers

Security learning is a career-long process, so as 2021 draws to a close, participants in the Computer Weekly Security Think Tank sum up the most important cyber lessons they’ve taken away from the past 12 months Continue Reading

By

• Jack Chapman

OCSP (Online Certificate Status Protocol)

OCSP (Online Certificate Status Protocol) is one of two common schemes used to maintain the security of a server and other network resources. Continue Reading

By

• Andrew Zola

UK and US to collaborate on privacy innovation contest

Joint UK-US innovation challenge contest centring on privacy-enhancing technology announced at Summit for Democracy in Washington DC Continue Reading

By

• Alex Scroxton, Security Editor

Aryaka announces ‘all-in-one’ SD-WAN, SASE offerings for hybrid workplace

Cloud-first software-defined wide area network firm claims hybrid network innovation breakthrough, enabling businesses of all sizes to navigate change while focusing on growth and digital transformation Continue Reading

By

• Joe O’Halloran, Computer Weekly

Number of .uk domain suspensions at record low

Statistics from Nominet show how effective law enforcement action against cyber crime in the UK is paying off Continue Reading

By

• Alex Scroxton, Security Editor

Investigation mounted into Spar supermarket cyber attack

Possible supply chain cyber attack left more than 300 Spar supermarkets unable to process credit card payments Continue Reading

By

• Alex Scroxton, Security Editor

Surge in Nobelium-linked supply chain attacks

Mandiant’s researchers share new intel on two distinct clusters of Russian APT activity, linked to the Nobelium SolarWinds attackers Continue Reading

By

• Alex Scroxton, Security Editor

GTT teams with Palo Alto to power SASE platform

Secure access service edge platform will offer advanced security techniques, fortifying network access from any location Continue Reading

By

• Joe O’Halloran, Computer Weekly

A ‘whole of society’ approach to cyber may be on the horizon

Nominet Cyber managing director David Carroll reflects on the NCSC’s latest annual review amid 2021’s fast-evolving threat landscape Continue Reading

By

• David Carroll, Nominet Cyber

The way we talk and think about tech is crucial to helping solve the skills shortage crisis

Companies are looking to short-term fixes to find IT specialists, but there is still a need for long-term solutions Continue Reading

By

• Andy Heyes, Harvey Nash

HP patches bugs in over 150 printer models

More than 150 HP multifunction printers are at risk of compromise through a series of newly disclosed vulnerabilities, one of them wormable Continue Reading

By

• Alex Scroxton, Security Editor

Recovering from ransomware: One organisation’s inside story

In February 2021, French office equipment supplier Manutan fell victim to a DoppelPaymer ransomware hit. IT ops director Jérôme Marchandiau tells the inside story of the incident Continue Reading

By

• Yann Serra, LeMagIT

Security Think Tank: Dissecting the true value of SASE is a challenge

As a relatively nascent technology that is getting a lot of publicity, dissecting the true value of SASE is still a difficult proposition, for now Continue Reading

By

• Maximilian Brook

Computing at the edge: Let’s get on board

With the increasing complexity of networks today, whether it’s hybrid cloud infrastructure or time-sliced 5G, somehow we’ve got to manage it Continue Reading

By

• Graham Williamson

Security Think Tank: SASE will become operational reality

While still considered very much a buzzword, the pace of change in corporate networks and operational technology means secure access service edge (SASE) is becoming reality for many Continue Reading

By

• Tom Venables, Turnkey Consulting

Apple sues under-fire malware firm NSO

Lawsuit alleges spyware firm NSO Group targeted Apple’s users, adding to the pressure on the under-fire company Continue Reading

By

• Alex Scroxton, Security Editor

Upcoming holidays prompt ransomware warning from authorities

Ransomware gangs know how calendars work, and may target their attacks around major holidays to take advantage of more people being off work, according to a new alert Continue Reading

By

• Alex Scroxton, Security Editor

Black Friday cyber warning for 4,000 card-skimming victims

NCSC warns thousands of small retailers that their websites are being exploited to steal customer data Continue Reading

By

• Alex Scroxton, Security Editor

Why is Emotet back, and should we be worried about it?

The sudden reappearance of Emotet this week has security teams on high alert, but do we need to be worried about its return, and what should we be doing about it? Continue Reading

By

• Alex Scroxton, Security Editor

Memento ransomware gang quick to retool for ‘optimum’ outcome

The operators of a new ransomware called Memento are quick to retool for ‘success’ if they run up against a competent defender, says Sophos Continue Reading

By

• Alex Scroxton, Security Editor