Privacy and data protection

Defence minister opens £3m cyber security centre in Gloucester

UK minister for defence procurement has opened Lockheed Martin’s job-creating cyber security centre aimed at boosting UK cyber defence capability and skills Continue Reading

By

• Warwick Ashford, Senior analyst

NHS urged to spend extra cyber defence funds wisely

The NHS has been urged to invest wisely in cyber defences after the government announced plans to increase data security funding by millions of pounds in response to the Caldicott review Continue Reading

By

• Warwick Ashford, Senior analyst

Australia to push ahead with decryption plans

The Australian government remains undaunted in requiring tech firms to provide access to encrypted communications in law enforcement efforts Continue Reading

By

• Beverley Head

Encryption keys too predictable, warn security researchers

Encryption keys are not as random as most people think, which means encrypting data is often not as secure as it could be, according to security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Verizon denies data loss but admits potentially huge breach

Verizon has responded to reports of millions of customer records being exposed to the internet by saying no data was accessed by malicious third parties, but the incident raises thorny issues Continue Reading

By

• Warwick Ashford, Senior analyst

Criminal law: Are Twitter threats taken seriously?

As threats of violence become increasingly common online, law enforcement is taking stronger action against the perpetrators Continue Reading

By

• John F Marchiano

GDPR brings serious implications for data storage

New European Union data protection regulations put tough requirements on organisations that store “personally identifiable data”. We look at what is needed to achieve compliance Continue Reading

By

• Chris Evans

Royal Free and Google DeepMind data sharing not compliant with DPA, ICO rules

Information Commissioner’s Office finds that the controversial NHS data-sharing deal with Google DeepMind did not fully comply with the Data Protection Act Continue Reading

By

• Lis Evenstad

Collaboration is key to combating cyber crime

Interpol has called for speedy and effective information-sharing between law enforcement agencies, governments, businesses and cyber security companies to counter growing cyber threats Continue Reading

By

• Aaron Tan, TechTarget

Why immutable buckets are a worthy risk management tool

Immutable buckets offer businesses benefits in terms of data compliance, backup, archiving and security Continue Reading

By

• Michael O'Dwyer

Key lessons from ‘Petya’ ransomware attack

While the cyber security community is still working to understand the latest ransomware attack that has reportedly hit 60 countries, there are key lessons to be learned Continue Reading

By

• Warwick Ashford, Senior analyst

Petya ransomware hits Aussie businesses

The latest ransomware attack has reached Australia’s shores, prompting calls to dump on-premise IT infrastructure for the cloud Continue Reading

By

• Stuart Kennedy

Singapore authorities issue alert on Petya ransomware

The country’s emergency response team has called for users to boost their cyber defences as the Petya ransomware rages through IT systems in Asia and Australia Continue Reading

By

• Aaron Tan, TechTarget

Voice biometrics still relatively unheard

Authentication system could help reduce UK fraud by making it hard for fraudsters to glean information from contact centres Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Queen’s Speech highlights digital charter and data protection

Government confirms plans to create a digital charter to ensure the UK is “the safest place to be online”, and a new law protecting personal data Continue Reading

By

• Lis Evenstad

The Macedonian surveillance scandal that brought down a government

Macedonia has been accused of using surveillance technology for covert spying - the subsequent political protests were instrumental in the ruling party losing power after 10 years Continue Reading

By

• Tena Prelec

Australia’s decryption plan seen as untenable

Experts say efforts to get technology and social media firms to cooperate with the authorities in decrypting communications will be hard to achieve Continue Reading

By

• Beverley Head

10 ways to prevent breaches and minimise impact

Attackers are continually adapting to security technologies to fly under the radar, but taking action in 10 key areas can reduce the risk of breaches and minimise their impact, according to a resilience expert Continue Reading

By

• Warwick Ashford, Senior analyst

Microchips implanted in hands could be in use for payments in 20 years

UK consumers are becoming more accepting that biometric authentication will become the norm for payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Tips for buying hyper-converged systems

In this week’s Computer Weekly, we examine the growing market for hyper-converged infrastructure - combining processing, storage and networking into an integrated design - and assess the options available to IT leaders. We ask mature users of the cloud what’s next for their migration to off-premise systems. And we analyse how retail supply chains are developing to keep up with online and mobile shopping trends. Read the issue now. Continue Reading

Infosec17: Society needs to address encryption dilemma

There needs to be a discussion about how to balance the interests of privacy, security and the tech industry, says Infosecurity Europe Hall of Fame inductee Continue Reading

By

• Warwick Ashford, Senior analyst

Patent group prepares for tough data protection laws by moving HR to the cloud

CPA Global to replace ERP-based HR system as it gears up to comply with the General Data Protection Regulation Continue Reading

By

• Bill Goodwin, Computer Weekly

Islamic State supporters shun Tails and Tor encryption for Telegram

Confidential communications show terror group’s supporters are turning to simple mobile phone messaging apps to exchange messages and distribute propaganda Continue Reading

By

• Bill Goodwin, Computer Weekly

Ethical fears hinder growth of artificial intelligence in France

In this issue, read how France’s relatively slow adoption of artificial intelligence is partly the result of public confusion, and partly due to the way the French have approached the ethical debate around AI. Also, read now organisations in Europe are failing to address the most important risks because they do not have a structured approach to complying with the EU’s General Data Protection Regulation. And find out why, after 17 years, Dutch university TU Delft is saying goodbye to its legacy learning management system. Continue Reading

Europe faces shortage of 350,000 cyber security professionals by 2022

European companies are expected to go on the world’s biggest cyber security hiring spree in the next 12 months, driving demand for cyber talent that will far outstrip supply, a report has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR about change management, says startup DPO

There are threats and risks associated with the GDPR, but one data protection officer believes organisations should focus on the business opportunities instead Continue Reading

Enterprises struggle with emergency patching

Companies are struggling to maintain emergency patch cycles, despite the fact that enterprise reliance on legacy systems often means emergency patches are an everyday fact of life, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

WannaCry shows validity of risk-based security, says RSA head

WannaCry and other recent cyber attacks underline the importance of adopting a risk-based approach to security, says RSA president Continue Reading

By

• Warwick Ashford, Senior analyst

People can be strongest link in cyber security, says NCSC

People are often seen as the weakest link when it comes to cyber security, but that must change, says the National Cyber Security Centre Continue Reading

By

• Warwick Ashford, Senior analyst

Finding customer data is big hurdle to meeting GDPR right to erasure

Global organisations do not know where customer data is stored and use unreliable data removal methods to erase content, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

HSBC voice authentication tricked by twins

Twin brothers managed to trick HSBC’s voice recognition security system into giving account access to the wrong person Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Windows 7 accounts for most WannaCry infections

Statistics show that computers running Windows 7 accounted for the biggest proportion of machines infected with the WannaCry ransomware, while NHS suppliers are blamed for hampering patching by NHS trusts Continue Reading

By

• Warwick Ashford, Senior analyst

Command and control communications key to detecting threats

Malware command and control (C&C) communications are key to detecting advanced threats, according to a security researcher Continue Reading

By

• Warwick Ashford, Senior analyst

Strong cyber security posture reduces impact of breaches

There is a direct correlation between data breaches and falls in stock prices, but the impact is lighter on companies with good cyber security, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Organised crime exploiting new technology

European law enforcement is to focus on collaborating with industry around cyber crime as organised crime groups increasingly exploit new technologies, according to a regional crime threat report Continue Reading

By

• Peter Ray Allison

Political turmoil threatens global IT services sector

In this week’s Computer Weekly, we examine the threats to the global IT services sector caused by US president Donald Trump’s protectionist rhetoric, and by the UK’s planned departure from the EU. Home Office IT chief Sarah Wilkinson discusses the challenges of digital transformation in a large government department. And we find out how business leaders need to improve their digital skills. Read the issue now. Continue Reading

Attackers have no need of zero-days, breach data shows

Cyber attackers do not have to use previously unseen or extremely sophisticated attacks to bypass defences, analysis of publicly reported breaches in the past year reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Five cyber security imperatives for all companies

There are five things all companies should ensure they are doing in terms of cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore universities hit by advanced persistent threat attacks

The attacks on NUS and NTU networks appear to be the work of APT actors and not casual hackers Continue Reading

By

• Aaron Tan, TechTarget

Blockchain economy on the horizon

Blockchain technologies will enable many new and disruptive business models than the internet itself, an expert predicts Continue Reading

By

• Warwick Ashford, Senior analyst

Casting the IT skills net wider

In this week’s Computer Weekly, as research reveals that three-quarters of non-tech workers would be interested in a job in IT, we examine what’s stopping them from making the move and how cross-training can help. We analyse the key storage elements of building a private cloud. And Bloomberg’s head of data science talks about the benefits of machine learning. Read the issue now. Continue Reading

Testing is key to IoT security, says researcher

Building an effective testing process across all elements associated with a product is key to securing the internet of things, according to a researcher in the field Continue Reading

By

• Warwick Ashford, Senior analyst

Government privacy advisor quits and slams Cabinet Office for lack of support

Co-chair of Privacy and Consumer Advisory Group resigns and criticises officials for ignoring its advice and attempting to smuggle “inadequate proposals past ministers” Continue Reading

By

• Lis Evenstad

UBS applies data protection for compliance and competitive advantage

Swiss bank UBS aims to get greater value out of investments in sensitive data protection systems by using its security capabilities as a differentiator Continue Reading

By

• Warwick Ashford, Senior analyst

Intel urges business to patch critical remote-execution flaw

Intel advises business customers to apply a security update for some versions of its administration firmware for vPro processors to fix a remote execution flaw Continue Reading

By

• Warwick Ashford, Senior analyst

Forge ahead with GDPR, says ICO

UK organisations cannot afford to lose the public’s trust in their ability to safeguard personal data and should be working to ensure they have that capability, says the Information Commissioner’s Office Continue Reading

By

• Warwick Ashford, Senior analyst

Backup testing: What to test, when to test, how often to test

We run the rule over what’s involved in backup testing in virtual and physical server environments, how often you should test and the key pitfalls to avoid Continue Reading

By

• Chris Evans

Cyber security centre of excellence to open at Cardiff University

Cardiff University and Airbus have launched the first centre of its kind in Europe to tackle cyber attacks on critical infrastructure Continue Reading

By

• Warwick Ashford, Senior analyst

InterContinental Hotel Group reveals extent of malware attack

Hotel group InterContinental (IHG) reveals that malware attempting to glean payment card details sat undetected on its network in the US for three months Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Enterprise adoption of encryption accelerating, study shows

Cloud adoption and escalating threats are accelerating adoption of encryption, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Security as a service on the rise in the UAE

Organisations in the United Arab Emirates are increasingly turning to security services Continue Reading

By

• Alicia Buller

Virtual reality in healthcare

In this week’s Computer Weekly, we find out how virtual reality technology is starting to be used to improve health and patient care. We examine the new UK tax laws that are causing IT contractors to quit government digital projects. And we analyse the software licensing issues arising from SAP’s recent court case over indirect access to its applications. Read the issue now. Continue Reading

IAM a core building block for GDPR compliance

Identity and access management is key to enabling organisations to become compliant with the GDPR, increase security and improve customer relationships, according to a senior analyst at KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Wonga warns 245,000 UK customers of cyber breach

Loan firm urges customers to be vigilant after data breach that may have exposed personal details, including some financial information Continue Reading

By

• Warwick Ashford, Senior analyst

How UK organisations are leaving themselves open for cyber attack

UK organisations are leaving themselves wide open to cyber attack despite huge investments in cyber security systems, according to two former hackers now working in cyber defence Continue Reading

By

• Warwick Ashford, Senior analyst

MEPs call for European Commission to reassess Privacy Shield

European parliamentarians have called for an immediate review of the Privacy Shield EU-US data transfer framework due to concerns about privacy protections being undermined in the US Continue Reading

By

• Warwick Ashford, Senior analyst

Interview: F-Secure’s Mikko Hyppönen on the Nordics, Russia and the internet of insecure things

Computer Weekly sat down with Finnish cyber security expert Mikko Hyppönen to talk about security in the Nordics, Russia and the trouble with connected devices Continue Reading

By

• Eeva Haaramo

Chinese hacking group targeted firms through IT MSPs

Security researchers have uncovered a China-based cyber espionage campaign that targeted IT services firms and their customers, underlining the need for supply chain security Continue Reading

By

• Warwick Ashford, Senior analyst

First cyber security startups graduate from GCHQ accelerator

The first group of companies has completed a government-led cyber accelerator programme aimed at helping UK startups take the lead in producing the next generation of cyber security systems, with another round to be announced in 2017 Continue Reading

By

• Warwick Ashford, Senior analyst

Non-malware attacks pose bigger threat than malicious software

Malware-free cyber attacks are on the rise and artificial intelligence in cyber security is still far from replacing humans, according to most cyber security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Threats grow in Saudi Arabia’s cyber sector

Saudi Arabia's wealth makes it an attractive target for cyber criminals, but what have been the recent trends in cyber crime? Continue Reading

By

• Triska Hamid

Making the UK fit for 5G

In this week’s Computer Weekly, we look at the government’s new 5G strategy and assess whether it’s enough to stimulate development of next generation mobile networks. We meet some of the Silicon Valley startups hoping to revolutionise big data analytics. And we examine how to prevent the move to DevOps from harming work-life balance for IT professionals. Read the issue now. Continue Reading

UK business least likely to offer rewards to infosec professionals

UK firms need to rethink incentives to attract and retain people with cyber security skills, according to the findings of a recent global study Continue Reading

By

• Warwick Ashford, Senior analyst

Government to ramp up help for UK cyber security industry

Government, in partnership with industry, is pursuing a range of initiatives aimed at establishing a UK cyber security ecosystem, developing skills and products and boosting exports, says DIT’s Conrad Prince Continue Reading

By

• Warwick Ashford, Senior analyst

US accuses Russian spies of directing Yahoo breach

US authorities have arrested a man in Canada who has been charged alongside two Russian intelligence officers and a Russian hacker in connection with a 2014 data breach at Yahoo affecting 500 million accounts Continue Reading

By

• Warwick Ashford, Senior analyst

CW ASEAN: Raising national security standards

In this month’s CW ASEAN, we describe how Singapore is improving its cyber security defenses and preparations through a partnership with British security company BAE Systems. We also find out why the Thai military plans to recruit civilian cyber warriors and we take a look at evolving security approaches. Read the issue now. Continue Reading

CW ANZ: Take cover from cyber threats

In the latest issue of CW ANZ we focus on security, with analysis of why Australian organisations are not sold on cyber insurance. It certainly isn’t a lack of cyber attacks – Australia is, in fact, making cyber security headlines for the wrong reasons. We also take a look at the need for organisations to meet IoT security challenges head-on. Read the issue now. Continue Reading

NCSC to educate UK politicians on the cyber threat

The National Cyber Security Centre is to deliver tailored seminars for politicians on how to protect their email communications and voters’ data to defend against cyber threats to the political system Continue Reading

By

• Warwick Ashford, Senior analyst

Paying ransomware attackers perpetuates attacks, says researcher

Continually evolving ransomware is among the threats organisations need to factor into their cyber defences in 2017, but only once they have taken care of the basics, says Kaspersky Lab researcher Continue Reading

By

• Warwick Ashford, Senior analyst

CW Europe: Technology poses new risks to jobs, economies and society

Rapid advances in technology could have destabilising effects on employment and economic growth, and could exacerbate social unrest, the World Economic Forum (WEF) warned. Society’s failure to keep pace with technology change was a key risk under discussion at Davos in January. Continue Reading

WhatsApp, Signal, ProtonMail safe from CIA hacking tools

Top secure messaging and email apps are said to be safe from CIA hacking tools, but organisations are urged to assess their own vulnerability if the tools were to fall into the hands of cyber criminals Continue Reading

By

• Warwick Ashford, Senior analyst

Retail industry steps up the fight against rising cyber threats

UK retail body BRC publishes the first of its kind step-by-step guide on how to manage cyber security threats Continue Reading

By

• Warwick Ashford, Senior analyst

More than a million Gmail and Yahoo account credentials on sale

Usernames, email addresses and plaintext passwords of more than a million Yahoo and Gmail accounts are reportedly on sale on the dark web, posing a threat to corporate security Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attack on Barts NHS trust exploited zero-day vulnerability

A cyber attack that forced parts of Barts NHS trust offline in January 2017 has been blamed on previously unknown malware that was able to bypass the antivirus systems, highlighting a common weakness in cyber defences Continue Reading

By

• Warwick Ashford, Senior analyst

Yahoo breaches underline executive role in cyber security

Yahoo's data breaches cost its top lawyer his job, CEO Marissa Mayer millions in bonuses, and $350m off its sale price, highlighting the importance of executive involvement Continue Reading

By

• Warwick Ashford, Senior analyst

The internet of things: an overview

Despite security and other concerns, there are many benefits associated with embracing the internet of things Continue Reading

By

• Bruce Hughes, KuppingerCole

Citizen Love: the story of an ordinary family's fight with the US government

Finnish documentary makers Raimo Uunila and Lauri Danska tell the behind-the-scenes story of activist Lauri Love’s battle with the US government – and the impact of the case on his family Continue Reading

By

• Bill Goodwin, Computer Weekly

Cyber criminals net £8bn from financial services in 2016

Organised cyber fraud gangs are turning their attention to online lenders and emerging financial services, potentially netting £8bn in 2016, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

NHS ‘mislays’ 500,000 confidential patient documents

Health service accused of a ‘cover-up’ after it came to light that more than half a million documents holding patient data were never delivered to their intended recipients Continue Reading

By

• Lis Evenstad

Banking malware, DDoS, ransomware and CEO fraud top UK cyber threats

Businesses need to be aware of the value of their data, how that data is likely to be attacked, and how to defend against particular attacks, says leading UK cyber cop Continue Reading

By

• Warwick Ashford, Senior analyst

Beware printer helpline scam, warns NTS eCrime Team

National Trading Standards is warning consumers about a scam targeting those looking for help with printer problems Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft issues critical patches but not for zero days

After missing the monthly security update for 14 February, Microsoft has issued some patches but not for zero-day vulnerabilities despite the availability of exploit code Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Risk of DNS attacks goes beyond websites

What are the main security risks associated with DNS and how are these best mitigated? Continue Reading

By

• Eleanor Upson

RSAC17: Geopolitical changes driving encryption usage, survey shows

More organisations are planning to deploy encryption in response to geopolitical changes, but confidence in organisations’ ability to secure and protect encryption is low, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

RSAC17: Infosec pros must help create business-driven security, says RSA CTO

The inability to draw connections between security details and business metrics is one of the biggest challenges facing most companies, according to RSA CTO Zulfikar Ramzan Continue Reading

By

• Warwick Ashford, Senior analyst

Major DDoS attacks see huge increase, says Akamai

Akamai’s State of the Internet/Security Report for the fourth quarter of 2016 finds that distributed denial of service attacks larger than 100Gbps are rapidly increasing as more IoT devices are compromised Continue Reading

By

• Alex Scroxton, Security Editor

Under surveillance – what the Investigatory Powers Act means for business

In this week’s Computer Weekly, the UK government has passed the Investigatory Powers Act, labelled a “snoopers’ charter” that expands the scope of state surveillance – but what does it mean for businesses? We find out what digital transformation means in the fire and rescue service. And we examine the role of public cloud in supporting enterprise storage requirements. Read the issue now. Continue Reading

Breaking the cyber kill chain

Traditional antivirus is no longer good enough for fileless malware attacks that don’t leave a trace Continue Reading

By

• Aaron Tan, TechTarget

How a Dublin court case could derail EU-US data privacy agreements

The Irish Commercial Court will consider whether privacy protection offered by standard contractual clauses for data transfers to the US from Europe is legally valid Continue Reading

By

• Kevin Cahill and Dai Davis

NHS websites defaced by Tunisian Islamist hacktivists

Another series of pro-Islamic State hacktivist attacks on NHS websites has underlined the need to harden websites and keep software up to date as attackers exploit a vulnerability in WordPress Continue Reading

By

• Warwick Ashford, Senior analyst

Google to appeal against order to hand over foreign emails

UK firms urged to consider the risks of non-UK cloud service providers and to encrypt data in the light of another US warrant to access emails held by a US cloud services firm on non-US servers Continue Reading

By

• Warwick Ashford, Senior analyst

Data breach costs exceed 20% of revenue

The cost of data breaches topped 20% of revenue in the past year as cyber attacks became more sophisticated and defenders struggled to keep pace, the latest Cisco security report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook ups security with Fido U2F two-factor authentication

Social media giant is enabling users to increase the security of their logins with Fido U2F USB security keys Continue Reading

By

• Warwick Ashford, Senior analyst

Security spending leaving data vulnerable, study finds

Cyber breaches are increasing despite increased security spending, a study shows, highlighting that security investment decisions are not aligned with actual cyber threats Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft’s cloud privacy battle may go to US Supreme Court

The US Department of Justice is considering going to the Supreme Court after an appeals court refused to revisit its July 2016 landmark ruling blocking government access to Microsoft servers in Ireland Continue Reading

By

• Warwick Ashford, Senior analyst

Challenges of complying with the Investigatory Powers Act

Despite opposition by civil liberties groups and technology companies, the UK government has passed the controversial Investigatory Powers Act, adding a host of security and contingency requirements that UK businesses need to consider Continue Reading

By

• Peter Ray Allison

Lords ‘deeply concerned’ about Digital Economy Bill data-sharing clauses

Digital Economy Bill comes under fire again for its data-sharing principles, this time from the House of Lords Delegated Powers Committee Continue Reading

By

• Lis Evenstad

How information security professionals can help business understand cyber risk

Information security is continually moving up business and board agendas, but information security professionals find it challenging to help business leaders to understand fully the cyber risks across increasingly digital businesses. Continue Reading

By

• Warwick Ashford, Senior analyst

RAC digitises driver assistance

In this week’s Computer Weekly, we speak to the RAC about its modernisation initiative, where it is using Microsoft Azure to digitise older cars and gather real-time data to alert members of faults before they result in roadside breakdowns. We also look at how a lack of diversity in organisations is costing the UK economy money, and how attacks against IoT devices are highlighting the vulnerabilities of specific devices but failing to provide a complete picture of the security challenges. Continue Reading

Davos: Technology poses new risks to jobs, economies and society

Politicians and business leaders will discuss the risks posed by technology to jobs, political stability and cyber security at the World Economic Forum in Davos Continue Reading

By

• Bill Goodwin, Computer Weekly