Privacy and data protection

GandCrab decryption tool released by No More Ransom

Another decryption tool has been made available free of charge in the battle against ransomware to help victims avoid paying to release their data Continue Reading

By

• Warwick Ashford, Senior analyst

ICO issues maximum £500,000 fine to Facebook

The UK privacy watchdog has confirmed that Facebook has escaped a fine of more than $1bn under the GDPR, but will face the maximum under the DPA for failing to protect users’ personal information Continue Reading

By

• Warwick Ashford, Senior analyst

Cathay Pacific under fire over breach affecting 9.4 million passengers

Hong Kong-based airline reveals massive data breach of the most sensitive personal data of passengers five months after loss was confirmed Continue Reading

By

• Warwick Ashford, Senior analyst

Becrypt security platform helps ease cloud adoption

Becrypt’s secure operating system is driving a new service aimed at helping organisations reduce cost and increase agility in using cloud-based services and online applications Continue Reading

By

• Warwick Ashford, Senior analyst

Choose security tools wisely to gain upper hand

The cyber threat landscape is continually changing, but staying abreast of attacker and defender innovation can help business leaders gain the upper hand, says KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Government can’t guarantee no-deal Brexit data-sharing agreement

Digital minister Margot James says there is no clear timetable on when the UK will secure a data adequacy decision from the EU, and cannot guarantee an agreement will be in place in the event of a no-deal Brexit Continue Reading

By

• Lis Evenstad

Sibos 2018: ‘Black swan’ cyber event is inevitable

With security experts and bankers expecting a 9/11-style cyber event, deeper collaboration between companies and governments is necessary to identify emerging threats before they occur Continue Reading

By

• Beverley Head

Yahoo to pay at least $85m for data breach settlement

Yahoo has agreed to a settlement in a class action lawsuit on behalf of 200 million consumers affected by a data breach in 2013 Continue Reading

By

• Warwick Ashford, Senior analyst

Interview: Steve Grobman, McAfee CTO shares his views on some burning security questions

Cyber security technology innovator and veteran Steve Grobman shares his views on adversarial artificial intelligence, post-quantum cryptography and security for next-gen tech Continue Reading

By

• Warwick Ashford, Senior analyst

Morrisons loses appeal against data breach liability ruling

Supermarket chain has lost its appeal against a High Court ruling that found it liable for a data leak by a former employee, underlining the importance of managing insider threats Continue Reading

By

• Warwick Ashford, Senior analyst

Centralised identity risky and not web 3.0 friendly, says entrepreneur

User controlled identity is less risky than centralised identity and essential for the next evolution of the web, according to an entrepreneur and evangelist of self-sovereign identity and blockchain technologies Continue Reading

By

• Warwick Ashford, Senior analyst

McAfee CTO raises concerns about election cyber security

The security industry needs to look at the security of election processes around the world as well as the security of voting and counting machines, says McAfee CTO Continue Reading

By

• Warwick Ashford, Senior analyst

Learn lessons from attacks, says McAfee investigations chief

Organisations should use every cyber attack as an opportunity to learn, identify weaknesses and improve security posture, according to McAfee’s head of cyber investigations Continue Reading

By

• Warwick Ashford, Senior analyst

McAfee researchers uncover ‘significant’ espionage campaign

Researchers discover campaign targeting South Korea, the US and Canada with links to eight-year-old source code from a threat group that has been dormant for five years Continue Reading

By

• Warwick Ashford, Senior analyst

Best of VMworld Europe 2018 Awards nominations now open until 26 October

Read the criteria for the Best of VMworld Europe User Awards and find out how to submit your nomination Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Time to implement new cyber security protections, says McAfee CEO Chris Young

Convergence of threats and technologies and an increasingly complex regulatory environment are driving the need to implement new cyber security protections, says McAfee chief Continue Reading

By

• Warwick Ashford, Senior analyst

'Sealed cloud' promises better data security

TÜV SÜD’s Singapore Sealed Cloud does not grant administrators access to data, reducing the possibility of hackers breaking into databases using compromised administrator credentials Continue Reading

By

• Aaron Tan, TechTarget

Zero-trust security model gaining traction

The zero-trust model of security is finally gaining traction as security professionals tap into new tools and executive buy-in to support this approach in an effort to improve security posture and practices Continue Reading

By

• Warwick Ashford, Senior analyst

UK faces 10 cyber attacks a week as hostile states step up hacking, says NCSC

The UK’s National Cyber Security Centre has thwarted more than 1,600 attacks over the past two years – many by hostile nation states Continue Reading

By

• Bill Goodwin, Computer Weekly

Tech companies should not be under legal duty to remove terrorist material, says watchdog

The internet should not be a safe place for terrorists, but making it compulsory for technology companies to trawl for radical content risks interfering with the rights of innocent people, says Max Hill QC, the independent reviewer of terrorism legislation Continue Reading

By

• Bill Goodwin & Fiona O'Cleirigh

Good data governance is good business

Organisations are failing to understand the importance of getting their data relationship with customers right and seeing the business opportunities that it enables, an industry analyst warns Continue Reading

By

• Warwick Ashford, Senior analyst

Apple challenges Australia’s proposed decryption law

Tech giant Apple argued that the lack of judicial oversight could reduce customer trust and security, among other reservations over Australia’s draft decryption legislation Continue Reading

By

• Aaron Tan, TechTarget

FS-ISAC awards cyber security scholarships in Europe

Five women have been awarded cyber security scholarships at FS-ISAC’s 2018 EMEA Summit Continue Reading

By

• Warwick Ashford, Senior analyst

Some 10% of user-reported emails malicious

On average, 1 in 10 user-reported emails is identified as malicious, and more than half can be tied to credential phishing, a Cofense report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Watchdog calls for clarity on Schedule 7 terrorism powers

The Independent Reviewer of Terrorism Legislation has called for greater clarity over police Schedule 7 powers to seize mobile phones and computers and question people without grounds for suspicion at ports and airports Continue Reading

By

• Bill Goodwin, Computer Weekly
• Fiona O'Cleirigh

RATs and Mimikatz among top publicly available hacking tools

Remote access Trojans (RATs), web shells and Mimikatz among the top publicly available tools that are used in cyber attacks around the world, a five-nation cyber intelligence report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

The troublesome saga of Gov.uk Verify

As the government plans to hand over its flagship identity assurance programme to the private sector, Computer Weekly looks at the history of the troubled project and how Gov.uk Verify ended up on the chopping board Continue Reading

By

• Lis Evenstad

Nato to be fully operational in cyber space by 2023

Nato is aiming to achieve full operational readiness in cyber space within five years Continue Reading

By

• Warwick Ashford, Senior analyst

MEPs urge Facebook to roll out election fraud prevention measures

Facebook is coming under pressure from European lawmakers to do more to prevent its user data from being misappropriated during elections Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Bug bounties not a silver bullet, Katie Moussouris warns

Targeted bug bounties have a role to play in cyber security, but they are not a "silver bullet", and run the risk of wiping out talent pipelines if poorly implemented, warns bug bounty pioneer Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC head says attribution of GRU attacks important

The head of the UK’s National Cyber Security Centre has described the attribution of a wave of cyber attacks to Russia’s military intelligence service as “historically important” at a conference in Poland Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore extends reach of digital ID system with cloud

GovTech is using AWS to host a developer platform that enables government agencies and businesses to develop services that build on the upcoming National Digital Identity system Continue Reading

By

• Ai Lei Tao

Security Think Tank: Monitoring key to outcomes-based security

What is the first step towards moving from a tick-box approach to security to one that is outcomes-based, and how can an organisation test if its security defences are delivering the desired outcome? Continue Reading

By

• Ramsés Gallego, Isaca

Cooperation vital in cyber security, says former Estonian minister

States acting alone cannot be efficient in cyber security and need to cooperate with others to build trust, says a former foreign minister of Estonia Continue Reading

By

• Warwick Ashford, Senior analyst

Consumer Google+ dumped in favour of enterprise focus

Google+ will no longer be offered to consumers, following a security audit. Instead, the company plans to flesh out an enterprise social media strategy Continue Reading

By

• Cliff Saran, Managing Editor

High Court blocks Google iPhone privacy lawsuit

The UK High Court has thrown out a group action lawsuit against Google for tracking iPhone browsing data, but campaign group Google You Owe Us, which brought the litigation, will appeal the decision Continue Reading

By

• Lis Evenstad

NCSC head calls for technocratic partnership to fix cyber risks

The UK’s National Cyber Security Centre is appealing for collaboration with the technology industry to remedy key vulnerabilities in current IT Continue Reading

By

• Warwick Ashford, Senior analyst

ICO hits Heathrow Airport with £120,000 data breach fine over lost USB stick

Information Commissioner’s Office fines airport after a member of the public came across a USB stick containing sensitive personal information about airport staff Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Customers need to be at the centre of GDPR plans

Responding to a breach is not just about data, it is about taking care of, and protecting, customers Continue Reading

By

• Dominic Cockram, Deloitte

Security Think Tank: Enable outcomes-based security in software development

What is the first step towards moving from a tick box approach to security to one that is outcomes based, and how can an organisation test if its security defences are delivering the desired outcome? Continue Reading

By

• Bruce Beam , (ISC)²

Google Safety Center goes live in the UK

Google says its commitment to transparency is as strong as ever as its new Safety Center goes live in the UK to help keep businesses and consumers safe online Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR case work swamps Denmark’s data protection agency

The agency investigating alleged breaches of GDPR in Denmark is recruiting additional resources to cope with the increase in work Continue Reading

By

• Gerard O'Dwyer

Security Think Tank: C-suite needs to drive outcomes-based security

What is the first step towards moving from a tick-box approach to security to one that is outcomes-based and how can an organisation test whether its security defences are delivering the desired outcome? Continue Reading

By

• Mike Gillespie

Security Serious Unsung Heroes announced

Awards celebrate the people of the cyber security industry on the front lines of organisations battling cyber threats Continue Reading

By

• Warwick Ashford, Senior analyst

Business email compromise made easy for cyber criminals

Poor security practices and access to hacking services are making it easy for cyber criminals to compromise business email, research reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Apps are gateway to business data for cyber attackers

Application security is becoming increasingly important because apps are often the main way cyber attackers are getting into corporate networks, a threat researcher warns Continue Reading

By

• Warwick Ashford, Senior analyst

Rise in data-stealing Betabot malware

Researchers are warning about an increase in Betabot malware after detecting multiple infections in recent weeks, underlining the importance of software patching Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Shift to outcomes-based security by focusing on business needs

What is the first step towards moving from a tick-box approach to security to one that is outcomes-based and how can an organisation test whether its security defences are delivering the desired outcome? Continue Reading

By

• Simon Persin, Turnkey Consulting

Security Think Tank: Start outcomes-based security with asset identification

What is the first step towards moving from a tick-box approach to security to one that is outcomes-based and how can an organisation test whether its security defences are delivering the desired outcome? Continue Reading

By

• Paddy Francis

UK firms’ password security score ‘average’

While businesses are making strides in strengthening password security, there is more work to be done, with the UK password score lagging behind the frontrunners, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Tesco Bank gets first cyber-related FCA fine

UK’s financial watchdog issues its first cyber-related fine to Tesco Bank in connection with a multimillion-pound cyber fraud in 2016 Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Security governance key to outcomes-based approach

What is the first step towards moving from a tick-box approach to security to one that is outcomes based, and how can an organisation test if its security defences are delivering the desired outcome? Continue Reading

By

• Maxine Holt, Omdia

Facebook could face up to $1.6bn fine for data breach

Facebook is under increased pressure to demonstrate that users’ personal data is protected as it faces a potential fine of more than a billion dollars for a data breach affecting millions of users Continue Reading

By

• Warwick Ashford, Senior analyst

Keeping Commvault on its toes in ASEAN

Backup and data protection software supplier is going after mid-sized companies and renewing its focus on partners to make deeper inroads in Southeast Asia Continue Reading

By

• Aaron Tan, TechTarget

EU sees eIDAS regulation come into full force

A regulation aimed at cutting red tape to enable a digital single market in Europe will soon be in full force, but it could present some challenges to the UK after Brexit Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attackers are increasingly exploiting RDP, warns FBI

Businesses should to act to reduce the likelihood of compromise from cyber attackers exploiting the remote desktop protocol, warns the FBI Continue Reading

By

• Warwick Ashford, Senior analyst

Blockchain is no ‘magic wand’ for cyber security

The decentralised nature of blockchain networks may deter some cyber crooks, but ASEAN organisations still need to pay heed to the security of their blockchain infrastructure Continue Reading

By

• Aaron Tan, TechTarget

Business is at inflection point for proactive cyber security

The time is ripe for proactive cyber security, but many organisations must first overcome four key obstacles to achieve effective protection, according to a research report Continue Reading

By

• Warwick Ashford, Senior analyst

Explosion in fake data-stealing shopping sites

Cyber attackers are ramping up efforts to steal personal data by setting up look-alike domains that pose a phishing risk to online shoppers, researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

Prepare now for quantum computers, QKD and post-quantum encryption

The predicted processing power of quantum computers is likely to make existing encryption algorithms obsolete. Quantum key distribution (QKD) is a possible solution - we investigate whether QKD is viable Continue Reading

By

• Peter Ray Allison

Uber fined $148m for data breach cover-up

US court hits Uber with heavy fine which security industry commentators hope will encourage firms to take cyber security more seriously and resist the urge to cover up data breaches Continue Reading

By

• Warwick Ashford, Senior analyst

Australian teen Apple hacker avoids jail time

“Fan” who broke into Apple’s mainframe from his home in Melbourne has avoided prison because the information he gathered was recovered Continue Reading

By

• Warwick Ashford, Senior analyst

ICO threatens fines for outstanding fees

The UK’s privacy watchdog has issued warning letters to organisations, including some NHS trusts and government organisations, for failing to pay a new data protection fee Continue Reading

By

• Warwick Ashford, Senior analyst

Financial services firms face potential security bombshell

UK financial services are facing a security crisis over outdated services and applications, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Why the government should rethink the UK’s surveillance laws

The European Court of Human Rights has made clear that the Snoopers’ Charter is an unlawful violation of people’s rights and freedoms Continue Reading

By

• Megan Goulding

Fujitsu teams up with UTCs on cyber security training

Fujitsu, University Technical Colleges across England and other private sector partners have joined forces to help address the cyber security skills gap Continue Reading

By

• Warwick Ashford, Senior analyst

PCI DSS compliance falls despite security benefit

Despite the benefits of the payment card industry security standard, there is a concerning downward trend in compliance, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

MI5 admits to ‘unlawful’ spying on Privacy International

The UK's intelligence agencies acted unlawfully by intercepting communications data on NGO, Privacy International, the UK's most secret court ruled. Continue Reading

By

• Bill Goodwin, Computer Weekly

WannaCry and NotPetya inspiring new attacks

Designs and techniques used in 2017’s global cyber attacks have inspired a new breed of malware that exploits software vulnerabilities, according to a McAfee report Continue Reading

By

• Warwick Ashford, Senior analyst

Mac OS Mojave zero-day warning

The latest version of Apple’s Mac operating system contains a vulnerability that could be exploited by attackers to access protected files, a researcher warns Continue Reading

By

• Warwick Ashford, Senior analyst

Business leaders expect suppliers to ensure they are cyber secure

Most UK business leaders expect suppliers to be cyber secure and nearly a third of businesses would terminate contracts because of suppliers’ security failings, a survey has revealed Continue Reading

By

• Warwick Ashford, Security Editor

Europol cyber crime report highlights emerging threats to enterprise security

Research highlights increase in sophistication of ransomware attacks, while revealing details of new and emerging threats to enterprises Continue Reading

By

• Tasmin Lockwood

Employers turn to wearable technology to help staff manage work-life balance

Companies are realising that there are sound business reasons for ensuring their employees get enough sleep and exercise, so they are turning to wearable technology to help their staff stay healthy, despite the pressures of work Continue Reading

By

• Christian Annesley

Singapore government to start bug bounty programme

Singapore’s bug bounty programme will help the authorities identify cyber blind spots and benchmark its defences against skilled hackers Continue Reading

By

• Aaron Tan, TechTarget

Cutting through the blockchain hype

Blockchain adoption is still in its infancy, with security challenges standing in the way of more widespread deployment, according to a blockchain expert Continue Reading

By

• Aaron Tan, TechTarget

Printing, document capture and compliance risk in the GDPR era

Printers, scanners and mobile devices that capture data from documents all store data in some way or other. How can you be sure to be compliant with GDPR with regard to that data? Continue Reading

By

• Antony Adshead, Storage Editor

No Deal Brexit may hinder free flow of personal data from EU to UK

The government’s No Deal Brexit planning document on data protection warns free flow of personal data from EU isn’t guaranteed, and organisations must take action to ensure they will still be able receive data from Europe Continue Reading

By

• Lis Evenstad

GCHQ mass surveillance regime was in breach of human rights law, European court rules

The European Court of Human Rights in Strasbourg has ruled that the UK’s collection of bulk interception of communications data lacked adequate oversight and safeguards and was in breach of human rights law Continue Reading

By

• Bill Goodwin, Computer Weekly

Outcomes-based security is the way forward

Every security technology is effective for a limited time, but understanding data assets and their value to attackers is key to effective cyber defence, according to an industry veteran of 20 years’ experience Continue Reading

By

• Warwick Ashford, Senior analyst

Two-thirds of emails not clean, says research

Two-thirds of emails don't make it to the inbox because security systems consider them unsafe, according to research Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Cyber criminals outspend businesses in cyber security battle

Cybercriminals are flexing their financial might and UK organisations are facing more attacks as a result Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

North Korean programmer charged for WannaCry attacks

The US has charged a member of a group of North Korean hackers linked to the WannaCry, Sony Pictures and other cyber attacks around the world Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware down, but not out, report reveals

Cryptojacking has taken over from ransomware as the top money spinner for cyber criminals, but the threat is not over and spam is also seeing a resurgence as an attack method, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

BA praised for swift GDPR-aligned action on data breach

British Airways has been praised for its swift response to a customer data breach, which could be the first test case under the EU’s GDPR and new UK GDPR-aligned data protection laws Continue Reading

By

• Warwick Ashford, Senior analyst

Chrome 69 security improvements welcomed

The cyber security community has welcomed the improvements in the latest version of the Chrome browser, especially when it comes to generating strong, unique passwords Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Eight controls to manage software vulnerabilities

What is the most practical and cost effective way for organisations to identify and remediate high-risk software vulnerabilities? Continue Reading

By

• Kevin Murphy

UK and allies call for backdoors in encryption products

The Five Eyes intelligence alliance is calling on tech firms to include backdoors in their encrypted products to give access to law enforcement authorities or face various measures Continue Reading

By

• Warwick Ashford, Senior analyst

Majority of UK firms not insured for data breaches

Many UK firms are not insured against information security breaches and data loss, and would have to spend £1m on average to recover from a breach, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Security Serious Week to feature flash mob event

“Flash mob” event will create a human collage, highlighting cyber security advice Continue Reading

By

• Warwick Ashford, Senior analyst

Fraudulent money transfers are top aim of business email compromise

Business email compromise is increasingly popular with cyber criminals to steal money and information as well as spread malware, security researchers find Continue Reading

By

• Warwick Ashford, Senior analyst

Fourth man jailed for iCloud celebrity hacking

The final hacker charged with leaking nude images of female celebrities in 2014 has been jailed Continue Reading

By

• Warwick Ashford, Senior analyst

US and UK days away from European Parliament ultimatum to suspend data transfers to the US

Threat to Privacy Shield as the European Union and US approach a critical European Parliament deadline to suspend data transfers from the EU to the US Continue Reading

By

• Kevin Cahill

Improving security is top driver for ISO 27001

Organisations are implementing the ISO 27001 standard in recognition of the fact that cyber attacks are increasingly inevitable and that it is best to be well-prepared to fend off attacks and mitigate their effect Continue Reading

By

• Warwick Ashford, Senior analyst

Challenge to anti-GDPR immigration exemption in DPA to go ahead

Two human rights groups are challenging a controversial clause in new UK data protection legislation that they say is in conflict with the EU’s Charter of Fundamental Rights and undermines the General Data Protection Regulation Continue Reading

By

• Warwick Ashford, Senior analyst

Sharp rise in business email compromise

Cyber attackers are expanding their attack methods to steal money and to gain access to corporate and employee data, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

UK universities targeted by Iranian hackers

UK universities are among those targeted by a cyber threat group associated with the Iranian government Continue Reading

Cryptographic agility is key to post-quantum security

Although post-quantum security is not an issue for all organisations today, an expert believes that those needing to ensure data is secure for decades to come should aim to achieve cryptographic agility above all else Continue Reading

By

• Warwick Ashford, Senior analyst

No Deal Brexit papers warn of stark future for UK tech

The government has published the first of its No Deal Brexit contingency planning notices, containing sobering messages for the UK technology industry Continue Reading

By

• Alex Scroxton, Security Editor

European cloud adopters still lack basic security

Despite outpacing the rest of the world, the majority of organisations adopting cloud in Europe, the Middle East and Africa lack basic security, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Nearly a third of organisations still not GDPR ready

As the UK and other states implement the EU’s GDPR, many organisations admit they are still not fully compliant, but most claim to be able to respond to data subject access requests Continue Reading

By

• Warwick Ashford, Senior analyst