Privacy and data protection

Is the EU better equipped than the US to supervise the use of facial recognition?

Clearview AI can be an indispensable tool to reinforce national security, but there are many risks associated with the use of facial recognition technology that the EU might be better equipped to deal with than the US Continue Reading

By

• Mathilde Gérot, Signature Litigation

Google warns users not to mess with Huawei devices

Google tells users of Huawei devices to try to avoid bypassing controls preventing them from loading its apps Continue Reading

By

• Alex Scroxton, Security Editor

Sports retailer Decathlon left employee data exposed

More than 123 million records were accidentally exposed on an unsecured ElasticSearch server Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Gil Shwed’s 10-year vision for security

Check Point founder Gil Shwed discusses his new Infinity Next concept and how he plans to remodel the world of cyber security in the next 10 years Continue Reading

Cyber criminals targeting UK motorists, warns DVLA

Cyber criminals are offering various services and tax refunds that purport to be from the DVLA Continue Reading

By

• Alex Scroxton, Security Editor

McAfee buys Light Point to enhance web browser protection

Acquisition of Light Point Security will extend the capabilities of multiple McAfee products Continue Reading

By

• Alex Scroxton, Security Editor

Thai university to roll out data protection certification

Thailand’s National Institute of Development Administration is offering a certification programme to get organisations ready for the country’s data protection regime Continue Reading

By

• Aaron Tan, Informa TechTarget

Assange extradition is a politically motivated ‘abuse of power’, court hears

US government’s attempt to extradite WikiLeaks founder Julian Assange to face espionage charges in the US is politically motivated and an abuse of process, court told Continue Reading

By

• Bill Goodwin, Computer Weekly

WikiLeaks founder Assange ‘put lives at risk’ by disclosing names in leaked documents, court hears

WikiLeaks founder Julian Assange ‘put lives of US informants at risk’ by publishing unredacted documents, lawyers for the US argued at the first day of a week-long extradition hearing Continue Reading

By

• Bill Goodwin, Computer Weekly

Open security group unveils common OpenDXL language

Open Cybersecurity Alliance announces the availability of OpenDXL Ontology, the first open source language for connecting disparate security tools through a common messaging framework Continue Reading

By

• Alex Scroxton, Security Editor

Labour condemns Google data plans

Shadow digital minister Chi Onwurah challenges the government to stop Google’s plans to move UK user data out of the EU Continue Reading

By

• Alex Scroxton, Security Editor

Malicious apps still getting past Google controls

Check Point researchers have found multiple malware-infected apps in the Google Play store, including a clicker called Haken, which has been downloaded more than 50,000 times Continue Reading

By

• Alex Scroxton, Security Editor

F-Secure’s AI reads mean tweets to fight abuse and trolls

Researchers working on F-Secure’s Project Blackfin have developed a model for clustering tweets to help pinpoint abuse and harassment Continue Reading

By

• Alex Scroxton, Security Editor

The greatest contest ever – privacy versus security

Examining the technical, legal and ethical challenges around the privacy versus security debate Continue Reading

By

• Elliot Rose, PA Consulting

Addressing the IoT security challenge

We consider how best to address some of the critical security challenges around the internet of things Continue Reading

By

• Charaka Goonatilake, Panaseer

UK and US accuse Russian spooks of Georgia cyber attacks

Foreign secretary describes 2019 campaign of cyber attacks as reckless, brazen and unacceptable Continue Reading

By

• Alex Scroxton, Security Editor

Google plans to send Brits’ data to US after Brexit

Move puts British user data beyond the reach of the EU’s GDPR, makes it more accessible to UK and US law enforcement agencies, and has prompted anger Continue Reading

By

• Alex Scroxton, Security Editor

Facilities firm ISS World crippled by ransomware attack

An apparent ransomware attack has compromised some IT and email systems at Danish facilities firm ISS World Continue Reading

By

• Alex Scroxton, Security Editor

Cost of cloud misconfigurations set at $5tn

Cloud security outfit DivvyCloud says more than 33 billion records have been exposed in cloud misconfiguration incidents in the past 24 months Continue Reading

By

• Alex Scroxton, Security Editor

Blasé directors put business data at risk

The higher up within a business you go, the more likely you are to find people intentionally leaking confidential data, says Egress Continue Reading

By

• Alex Scroxton, Security Editor

US ‘breached due process’ in spying operation against Julian Assange’s lawyers

Surveillance footage of Julian Assange’s meetings with lawyers and doctors in the Ecuadorian Embassy in London was an “abuse of process” Continue Reading

By

• Bill Goodwin, Computer Weekly
• Sander Priston

Girlguiding hosts interactive cyber security workshop

100 Guides from South West England took part in an NCSC event to learn more about security fundamentals Continue Reading

By

• Alex Scroxton, Security Editor

Is this Netflix-style thriller the future of security training?

Cyber awareness specialists at KnowBe4 reckon that bringing Netflix-style production values to corporate videos heralds a new approach to security training Continue Reading

By

• Alex Scroxton, Security Editor

Veeam Availability Suite v10 adds NAS backup and cloud tiering

Availability Suite is mostly about consolidating the company’s data management platform idea, but it has added incremental forever NAS backup, cloud tiering and recovery to vSphere Continue Reading

By

• Antony Adshead, Storage Editor

Australians more savvy about cyber security

More Australians look out for signs of security features such as SSL encryption even as they remain sceptical of the data protection capabilities of small businesses Continue Reading

By

• Aaron Tan, Informa TechTarget

Mastercard opens European security resilience unit

Mastercard’s European Cyber Resilience Centre will bring together its partners and other industry bodies to support enterprise resilience Continue Reading

By

• Alex Scroxton, Security Editor

Ex-soldiers to become ethical hackers

A new programme will give armed forces veterans in Scotland a grounding in cyber security skills, including penetration testing and ethical hacking Continue Reading

By

• Alex Scroxton, Security Editor

Cyber criminals spread coronavirus conspiracy theories

The latest email campaigns identified by Proofpoint are spreading conspiracy theories about the coronavirus outbreak Continue Reading

By

• Alex Scroxton, Security Editor

Dutch government must facilitate and coordinate a broad eID system

 Continue Reading

Emotet evolving to exploit coronavirus fear

With coronavirus cases now reported across the world, Emotet campaigns are exploiting legitimate fears to compromise their targets Continue Reading

By

• Alex Scroxton, Security Editor

Internet Explorer zero day among 99 Patch Tuesday problems

After an eventful January Patch Tuesday that marked the end of support for Windows 7, the February 2020 update is another whopper, fixing close to 100 vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

MI5 failed to disclose failings in handling intercepted data, court hears

MI5 failed to disclose serious failures in the way it handled intelligence data to the Investigatory Powers Tribunal, the surveillance regulator and ministers. Continue Reading

By

• Bill Goodwin, Computer Weekly

Mac-based security threats outpacing Windows

Security threats targeting Apple endpoints are growing more quickly than those targeting Windows machines, according to Malwarebytes Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: The Computer Weekly Downtime Upload – episode 46

In this week’s episode of the Computer Weekly Downtime Upload podcast, Caroline Donnelly, Clare McDonald and Brian McKenna are joined by special guest Hannah Foulds, head of marketing and membership at the Open Data Institute, who flags stories about humans tricking AI. The group then discusses the Women in Software Powerlist, the loan charge and online targeting Continue Reading

By

• Brian McKenna, Enterprise Applications Editor
• Clare McDonald, Business Editor
• Caroline Donnelly, Senior Editor, UK

Chinese military personnel accused of Equifax hack

A US federal grand jury has indicted four Chinese army personnel over the 2017 Equifax breach Continue Reading

By

• Alex Scroxton, Security Editor

Tencent Cloud gains multi-tier cloud security certification

China's Tencent Cloud joins major cloud suppliers in securing tier three of Singapore’s Multi-Tier Cloud Security standard in a bid to grow its presence in Asia Continue Reading

By

• Aaron Tan, Informa TechTarget

Police use of facial recognition ‘unjustifiable’, says Scottish Justice Committee

Members of the Scottish Parliament have said police use of live facial recognition technology is “not fit for purpose” Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

What should be in Australia’s next cyber security strategy

The Australian government is reviewing the nation’s cyber security strategy, but is it looking at the right issues? Continue Reading

By

• Stephen Withers

Security Think Tank: Zero trust is complex, but has rich rewards

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Bhanu Jagasia

Joaquin Phoenix’s Joker is ‘most dangerous’ movie

Ahead of the 2020 Oscars, Kaspersky researchers say they found more than 300 files masquerading as the Joker movie Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: No trust in zero trust need not be a problem

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Silvano Sogus

Darktrace signs to McLaren for 2020 F1 season

McLaren Racing has enlisted Darktrace to become its official artificial intelligence cyber security partner Continue Reading

By

• Alex Scroxton, Security Editor

Web app ubiquity gives cyber criminals new opportunities

The popularity and ubiquity of web-based apps such as Office 365 and Salesforce is a temptation too good to miss for cyber criminals Continue Reading

By

• Alex Scroxton, Security Editor

Check Point pledges end to security updates

Check Point’s Gil Shwed expands on a vision for the next 10 years of cyber security, which he calls Infinity Next Continue Reading

By

• Alex Scroxton, Security Editor

IoT network flaw left Philips Hue bulbs open to attack

Vulnerabilities in the ZigBee internet of things networking protocol have left market-leading smart devices, including Philips Hue lightbulbs, open to exploitation Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Zero trust is not the answer to all your problems

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Mike Gillespie

Acronis CEO bullish as specialist goes beyond backup

Acronis is set to launch Cyber Protect as it rides a wave of confidence based on increasing revenues and investor funding. Will the backup-plus-cyber protection calculation pay off? Continue Reading

By

• Antony Adshead, Storage Editor

The fight against cyber crime: Why cooperation matters

With the WEF’s Global Risk Report 2019 ranking cyber attack in the top five global risks, we now see rising consensus at institutional level that no individual stakeholder can address the breadth of security challenges we face today Continue Reading

By

• Elisabetta Zaccaria

Social media targeting algorithms need regulation, says CDEI

The Centre for Data Ethics and Innovation is recommending regulation of social media algorithms as part of a drive to make user targeting safe and ethical Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

MI5 faces court ruling over unlawful surveillance warrants

Privacy groups Liberty and Privacy International ask the Investigatory Powers Tribunal to order MI5 to disclose full details of ‘unlawful’ conduct, after classified documents reveal the spy agency failed to comply with surveillance laws Continue Reading

By

• Bill Goodwin, Computer Weekly

Security Think Tank: Facing the challenge of zero trust

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Eoin Keary

Digital strategy for 2020-2030 sets out police technology plans

National policing strategy sets a number of technological ambitions for the next decade, placing a particular emphasis on collaborative working and building common standards or frameworks Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

NHS adds supplier security audits to procurement platform

A new feature in the NHS’s Edge4Health procurement platform will help NHS suppliers improve their cyber security posture and NHS organisations make better buying decisions Continue Reading

By

• Alex Scroxton, Security Editor

Davos: The clock is ticking on climate change but cyber crime and emerging technologies add to risks

Climate change, natural disasters, extreme weather and loss of biodiversity are the greatest risks we face. With cyber conflicts, state-sponsored hacking and internet fragmentation, doing nothing is not an option, says the World Economic Forum Continue Reading

By

• Bill Goodwin, Computer Weekly

UK police arrest three over Maltese cyber bank robbery

The NCA has made three arrests in Belfast and London following an investigation into money laundering linked to a cyber heist on a bank in Malta Continue Reading

By

• Alex Scroxton, Security Editor

NCSC launches study on cyber security diversity

The UK’s National Cyber Security Centre wants to improve the diversity of the cyber security sector Continue Reading

By

• Alex Scroxton, Security Editor

First coronavirus cyber threats seen in the wild

Kaspersky has reported the first incidences of cyber security threats playing on fears of the emerging coronavirus Continue Reading

By

• Alex Scroxton, Security Editor

Avast cans data harvesting subsidiary after outcry

Avast will close its Jumpshot big data unit following repeated allegations of inappropriate handling of customer data Continue Reading

By

• Alex Scroxton, Security Editor

UK cyber security sector worth more than £8bn

The UK’s cyber security industry employs 43,000 full-time workers, and contributed nearly £4bn to the UK economy in 2019, according to DCMS Continue Reading

By

• Alex Scroxton, Security Editor

NHS suffers fewer ransomware attacks, but threat persists

Ransomware attacks against the NHS have tapered off dramatically, according to statistics obtained under FoI legislation, but this does not mean the threat has diminished Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: How to boost staff awareness of compliance

Employee awareness of compliance, of the laws and regulations that affect your business, is vital, in some cases even mandatory. We look at the key ways to achieve it Continue Reading

By

• Antony Adshead, Storage Editor

Fintechs fear deepfake fraud

New research reveals the majority of CISOs working in the financial services sector are increasingly concerned about the potential use of deepfakes Continue Reading

By

• Alex Scroxton, Security Editor

Met Police could deploy facial recognition against protesters

Live facial recognition will be rolled out operationally by the Met Police, but police monitoring group Netpol believes it will hamper people’s ability to exercise their rights to protest Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

The Dream Team: why data security, compliance and privacy come hand in hand

This is a guest blogpost by Anthony Di Bello, VP Strategic Development, OpenText Today’s business landscape is littered with valuable data. The rapid adoption of digital technologies, means that ... Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Top four compliance considerations for SMEs

We look at the key data compliance regulations that affect smaller companies – such as GDPR, the Data Protection Act, PCI-DSS and PECR – and some key industry-specific frameworks Continue Reading

By

• Stephen Pritchard

Organisations losing control of cloud data

Data is more widely dispersed in enterprise clouds than most organisations think, and as a result they are at risk of losing control of it, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Data privacy benefits outweigh spend, says Cisco

Cisco’s 2020 data privacy study shows organisations can generate substantial returns on their data privacy and protection spending Continue Reading

By

• Alex Scroxton, Security Editor

Interpol uncovers cyber crime operation in Indonesia

An Interpol-coordinated cyber operation leads to the arrest of three people in Indonesia who allegedly used a JavaScript-sniffer malware to steal payment card details of online shoppers Continue Reading

By

• Aaron Tan, Informa TechTarget

UK in catch-22 decision over Huawei security

The UK’s final decision on whether to permit mobile operators to use Huawei equipment is expected imminently, and its decision will have ramifications far beyond the technology sphere Continue Reading

By

• Alex Scroxton, Security Editor

Government tightens law around IoT cyber security

New legislation developed by DCMS and the NCSC may help guarantee the security and privacy of users of consumer IoT devices Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Bug bounties are changing the image of hackers

The traditional picture of a hacker is of a script kiddie in a hoodie hunched over a computer keyboard, but this stereotype is stale and outdated. Is it time to move away from a fear-based approach to security? Continue Reading

By

• Paul Holland, Information Security Forum

Met Police to launch facial recognition operationally

Despite the continuing controversy around its use, the Metropolitan Police will be deploying live facial recognition across the capital Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Cyber gangsters publish staff passwords following ‘Sodinokibi’ attack on car parts group Gedia

Sodinokibi hacking group steps up pressure on German automotive manufacturer by publishing information, including the CEO’s computer password and sensitive details of its IT systems, on the internet Continue Reading

By

• Bill Goodwin, Computer Weekly

NHS alerted to severe vulnerabilities in GE health equipment

A series of vulnerabilities in patient monitoring equipment manufactured by General Electric could have left patient data exposed in hospitals around the world, including the UK Continue Reading

By

• Alex Scroxton, Security Editor

Milan hosts Cisco’s first European security innovation unit

Cisco has cut the ribbon on its first Cyber Security Co-Innovation Centre in Europe, at Milan’s Leonardo da Vinci Science and Technology Museum Continue Reading

By

• Alex Scroxton, Security Editor

Travelex hackers shut down German car parts company Gedia in massive ‘cyber attack’

Car parts manufacturer says cyber attack will have far-reaching consequences for its business, and it has put emergency plans in place to continue deliveries Continue Reading

By

• Bill Goodwin, Computer Weekly

CISOs fear becoming the next Travelex

Poll of security professionals by the organisers of the Infosecurity Europe trade fair highlights huge gaps in incident response capabilities Continue Reading

By

• Alex Scroxton, Security Editor

End-user security ignorance laid bare in new report

Proofpoint’s 2020 State of the Phish report highlights an urgent need for better user training and reporting Continue Reading

By

• Alex Scroxton, Security Editor

Six disaster recovery pitfalls and how to avoid them

We look at some key pitfalls in disaster recovery, such as failing to plan, not testing the plan, not protecting backups, poor communication and neglecting the human element Continue Reading

By

• Stephen Pritchard

Startup uses machine learning to support GDPR’s right to be forgotten

Non-intrusive algorithms enable users to track which companies hold their data, so they can take it back Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Citrix releases IoC scanner for ADC and Gateway vulnerabilities

As patches for its compromised NetScaler ADC and Gateway products begin to roll out, Citrix enlists FireEye Mandiant to develop an indicator of compromise scanner for end-users Continue Reading

By

• Alex Scroxton, Security Editor

Internal error left Microsoft customer service data exposed

Customer service and support records of nearly 250 million Microsoft customers left exposed after database misconfiguration Continue Reading

By

• Alex Scroxton, Security Editor

Computer Misuse Act ‘crying out for reform’

Group of campaigners says the Computer Misuse Act of 1990 risks criminalising cyber security professionals and needs reforming Continue Reading

By

• Alex Scroxton, Security Editor

ICO code sets out digital privacy standards for children

The Information Commissioner’s Office has published its Age Appropriate Design Code, a set of 15 standards that online platforms must meet to protect the privacy of younger users Continue Reading

By

• Alex Scroxton, Security Editor

Singapore updates model AI governance framework

Second edition of Singapore’s artificial intelligence governance framework includes new guidance, use cases and a self-assessment guide Continue Reading

By

• Aaron Tan, Informa TechTarget

5G builders test vulnerabilities in Finnish hackathon

University hackathon puts 5G security to the test as new wireless technology’s roll-out nears Continue Reading

By

• Gerard O'Dwyer

High-street banks face disruption three weeks after Travelex hack

Foreign exchange services still disrupted, three weeks after Travelex received a $6m ransom demand from cyber gangsters Continue Reading

By

• Bill Goodwin, Computer Weekly

Don’t become the next Travelex: Get ready for ransomware

With Travelex’s IT still in disarray and banks and travellers left without access to funds more than a week after it was hit by a ransomware attack, we ask what others can learn from the foreign exchange services company’s response to the incident. Continue Reading

Consent and GDPR: at least get the basics right!

Why do companies find it so hard to get their heads around even the basics of GDPR compliance? I’m not even thinking here of techie stuff like not getting hacked, and not losing a laptop full of ... Continue Reading

By

• Bryan Betts, Freeform Dynamics

Exposed AWS buckets again implicated in multiple data leaks

A series of data leaks in the past week have once again implicated poorly secured Amazon S3 buckets, which are supposed to be private by default Continue Reading

By

• Alex Scroxton, Security Editor

GDPR nets more than €100m in fines, with more to come

Fines totalling €114m have already been collected under GDPR, and this figure will spike in 2020 if the UK regulator succeeds in imposing record fines on BA and Marriott Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Teens in basements don’t represent a positive security culture

The traditional picture of a hacker is of a script kiddie in a hoodie hunched over a computer keyboard, but this stereotype is stale and outdated. Is it time to move away from a fear-based approach to security? Continue Reading

By

• Maxine Holt, Omdia

App developers sue Facebook over ‘anti-competitive conduct’

Lawsuit is based on leaked internal Facebook documents obtained and published by Computer Weekly and NBC last year Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

NCSC makes final call for entries to CyberFirst Girls contest

Entry to the National Cyber Security Centre’s CyberFirst Girls 2020 competition is about to close Continue Reading

By

• Alex Scroxton, Security Editor

Emotet reinvigorated after Christmas break

The high-volume Emotet campaign is back in action after the Christmas holidays, and is just as dangerous as ever Continue Reading

By

• Alex Scroxton, Security Editor

Cops take down data wholesale operation

The Police Service of Northern Ireland and the Dutch cyber crime unit have made two arrests in an operation targeting a website that provided criminals with access to billions of personal credentials Continue Reading

By

• Alex Scroxton, Security Editor

UK’s phone and internet bulk data surveillance unlawful, says EU court opinion

The Advocate General of the European Court of Justice issues legal opinions finding that the UK, French and Belgian bulk surveillance regimes are unlawful Continue Reading

By

• Bill Goodwin, Computer Weekly

A quarter of users will fall for basic phishing attacks

Phishing emails that appear to be security alerts are the most effective method of compromise, says KnowBe4 Continue Reading

By

• Alex Scroxton, Security Editor

Security Think-Tank: Tackle insider threats to achieve data-centric security

The belief that effective perimeter security is the best way to protect data is a fallacy that is being repeatedly exposed. We must recognise the need for a data-centric security model to protect data from both internal and external threats, but what does this mean for security professionals? Continue Reading

By

• Mike Yeomans, Information Security Forum

Thailand gets ready for data protection law

Thailand’s personal data protection law comes into effect in May 2020, subjecting organisations to new rules that safeguard the personal data of individuals Continue Reading

By

• Aaron Tan, Informa TechTarget