Privacy and data protection

Generative AI – an early adopter’s experience

In this week’s Computer Weekly, as IT leaders start to implement GenAI in their organisations, we look at the experiences of one early adopter. Our latest buyer’s guide examines the key security trends for 2024. And Microsoft’s head of identity talks about a future without passwords. Read the issue now. Continue Reading

IT security strategy: Assessing the risks of generative AI

Most industry watchers see 2024 as the year when generative AI and large language models will begin moving into enterprise IT Continue Reading

By

• Cliff Saran, Managing Editor
• Adrian Bridgwater

UK police facial recognition explained: What you need to know

In this essential guide, Computer Weekly looks at the use of facial recognition technology by UK police forces, including the points of contention around its deployment so far and where it’s heading next Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Welsh workers’ AI experiences shaped by uneven power dynamics

Workers in Wales are being negatively affected by the unregulated introduction of artificial intelligence into workplaces due to asymmetric power dynamics Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

consumer data

Consumer data is the information that organizations collect from individuals who use internet-connected platforms, including websites, social media networks, mobile apps, text messaging apps or email systems. Continue Reading

By

• Robert Sheldon

Chat control: Tech companies warn ministers over EU encryption plans

Tech companies have written to EU ministers to urge them to back the European Parliament, rather than the European Commission, over proposed regulations to police child abuse. Continue Reading

Tech companies warn EU over encryption plans

In this week’s Computer Weekly, tech companies are calling on the European Commission to rethink plans to weaken internet encryption – we explore the issues. We talk to credit rating agency Moody’s about why it thinks now is the time to start investing in quantum computing. And we examine how a different approach to recruitment could ease the datacentre sector skills gap. Read the issue now. Continue Reading

Lords question legality of police facial recognition

Lords committee ‘deeply concerned’ about the rapid expansion of live facial recognition by UK police, which it says is progressing without any real oversight or accountability Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

What developers need to know about LLMs in the enterprise

We look at the main areas enterprise developers need to consider when building, testing and deploying enterprise applications powered by large language models Continue Reading

By

• Cliff Saran, Managing Editor
• Adrian Bridgwater

Security Think Tank: Expect more from GenAI in 2024

But 2024 also feels slightly different; the past 12 months have seen generative AI burst on to the scene, and this year its impact will continue to be felt, says Turnkey Consulting's Harshini Carey. Continue Reading

By

• Harshini Carey, Turnkey Consulting

Quantum, AI and geopolitical conflict: '24 will be a big year for cyber

With big trends like quantum, generative AI and geopolitical conflict, 2024 looks set to be a big year in security, but defenders have an unparalleled opportunity to harness these trends for good, says Quorum's Federico Charosky Continue Reading

By

• Federico Charosky

Akira ransomware gang claims Lush cyber attack

The Akira ransomware gang claims to have stolen over 100GB of data from cosmetics manufacturer and retailer Lush Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: What to expect in cyber this year

Risk arising from insecure generative AI, an explosion in mainstream acceptance of zero-trust, and increasingly tight cyber insurance policies will all be high on the agenda in 2024, writes Forrester senior analyst Alla Valente Continue Reading

By

• Alla Valente

Bulk sender authentication: More vital than ever

With new guidelines from Google and Yahoo governing bulk emails coming into force in February 2024, here's what you need to know to keep your sales and marketing lists compliant Continue Reading

By

• Gerasim Hovhannisyan

encryption key management

Encryption key management is the practice of generating, organizing, protecting, storing, backing up and distributing encryption keys. Continue Reading

By

• Rahul Awati
• Ed Hannan

WebKit vulnerability sparks Apple’s first major security update of 2024

A zero-day in the open source WebKit browser engine that powers Safari has sparked Apple’s first major patch roll-out of the new year Continue Reading

By

• Alex Scroxton, Security Editor

Southern Water confirms cyber attack after Black Basta claims

Southern Water, which supplies millions of customers in southeast England, has confirmed it has fallen victim to a cyber attack, although its services appear to be running normally Continue Reading

By

• Alex Scroxton, Security Editor

AI will heighten global ransomware threat, says NCSC

The benefits of artificial intelligence to cyber criminals being well-known, the NCSC now assesses it’s likely AI will soon be widely used to enhance ransomware attacks Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Storage and compliance outlook for 2024

Interesting times ahead in 2024 as we talk to Mathieu Gorge, CEO of Vigitrust, about updates to EU regs, PCI, NIST, post-Brexit divergence and 60 national elections across the globe Continue Reading

By

• Antony Adshead, Storage Editor

Leak of 26 billion records may prove to be ‘mother of all breaches’

The discovery of a dataset comprising 26 billion stolen records may prove to be record-breaking in both its size and the danger it poses to ordinary people Continue Reading

By

• Alex Scroxton, Security Editor

SEC bitcoin hack was result of SIM-swapping

A cyber attack on the US financial regulator earlier in January 2024 occurred after hackers took over one of its mobile phone accounts in a so-called SIM-swapping attack Continue Reading

By

• Alex Scroxton, Security Editor

Chat control: Tech companies warn ministers over EU encryption plans

Tech companies have written to EU ministers to urge them to back the European Parliament, rather than the European Commission, over proposed regulations to police child abuse Continue Reading

By

• Bill Goodwin, Computer Weekly

ICO prompts confusion over police cloud legality

The UK data regulator has suggested that, despite major data protection concerns, it is likely to greenlight police cloud deployments because of an information-sharing agreement with the US government Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Neighbouring Kent councils hit by simultaneous cyber attacks

Canterbury, Dover and Thanet Councils in Kent have all been struck by simultaneous cyber attacks knocking systems offline, with indications of a link between all three Continue Reading

By

• Alex Scroxton, Security Editor

Powering up cyber security defences with AI

AI holds great promise when it comes to securing valuable, and vulnerable, data, but security teams face some challenges if they are to get the best out of it, writes IBM’s Christopher Meenan Continue Reading

By

• Christopher Meenan

Cloud-to-cloud backup: What it is and why you (probably) need it

Basic cloud data protection is just not enough. Several loopholes leave business data vulnerable and that means additional cloud-to-cloud backup should be seriously considered Continue Reading

By

• Stephen Pritchard

Victims of 2023 Capita data breaches head to High Court

More than 5,000 people impacted by data breaches arising from two cyber incidents affecting outsourcer Capita have joined a group action lawsuit Continue Reading

By

• Alex Scroxton, Security Editor

Tape is back on the main menu

The news that another of the big players in global file systems, Hammerspace, has integrated tape access into its data orchestration software should remind us all that tape’s modern incarnations ... Continue Reading

By

• Bryan Betts, Freeform Dynamics

Singapore proposes governance framework for generative AI

AI Verify Foundation and Infocomm Media Development Authority have proposed a governance framework for generative AI to address the risks and concerns about the emerging technology Continue Reading

By

• Aaron Tan, Informa TechTarget

Kaspersky shares Pegasus spyware-hunting tool

Kaspersky has developed a way of easily exposing the presence of Pegasus spyware on iOS devices and believes its methodology may also help users identify other such surveillance malware Continue Reading

By

• Alex Scroxton, Security Editor

British Library catalogues back online after ransomware attack

The British Library has restored online access to its main catalogue of nearly 40 million items on a limited basis as it continues the long and arduous process of recovering from a ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Russia hacked ex-MI6 chief’s emails – what they reveal is more Dad’s Army than deep state

A Russian hacking group that published emails of ex-MI6 chief Richard Dearlove claimed to have uncovered a conspiracy, but it was more Dad’s Army than the ‘deep state’, Computer Weekly and Byline Times reveal Continue Reading

By

• Sophie Hill

NCA director sacked after WhatsApp and email security breaches

Nikki Holland, former director of investigations at the NCA, was sacked for “misconduct” after sending sensitive NCA information over personal email and WhatsApp Continue Reading

By

• Bill Goodwin, Computer Weekly

UK government seeks public views on impacts of AI-generated porn

The government’s Pornography Review will look in part at the use of AI throughout the industry to generate sexually explicit content without people’s consent Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

SEC social media hack highlights value of MFA

The US SEC briefly appeared to approve new bitcoin trading rules after a social media account was targeted by troublemakers, proving the value of MFA once again Continue Reading

By

• Alex Scroxton, Security Editor

Scotland ‘sleepwalking’ to mass surveillance with DPDI Bill

The independent checks and balances over biometrics and biometric-enabled surveillance must be strengthened to prevent Scotland from sliding into a surveillance state along with the rest of the UK Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Babuk Tortilla ransomware decryptor made available

A joint effort between Cisco Talos, Avast and the Dutch police will bring relief to many victims of a variant of the Babuk ransomware known as Tortilla Continue Reading

By

• Alex Scroxton, Security Editor

Study reveals cyber risks to US elections

With the 2024 US presidential election cycle beginning, a study produced by Arctic Wolf has highlighted big gaps in preparedness and resourcing at government bodies across the US Continue Reading

By

• Alex Scroxton, Security Editor

The future of CISOs in APAC

This is a guest post by Geoffrey Coley, regional chief technology officer for Asia-Pacific at Veritas Technologies The pace at which the cyber threat landscape is evolving with the use of malicious ... Continue Reading

By

• Aaron Tan, Informa TechTarget

British Library ransomware attack could cost up to £7m

The cost of recovering the British Library’s ransomware-stricken IT systems could be up to £7m, it has emerged Continue Reading

By

• Alex Scroxton, Security Editor

Inside the Met Police’s investigation into EncroChat crime gangs

The Met’s senior investigating officer responsible for investigating criminals using the EncroChat encrypted phone network tells the inside story of the UK’s biggest organised crime bust in a BBC podcast series released this week Continue Reading

By

• Bill Goodwin, Computer Weekly

Mind the gap: AI leaders pulling ahead as LLMs take off

Advice on how to implement large language models safely within an enterprise IT environment Continue Reading

By

• Oliver King-Smith

Fighting money laundering with AI

Mike Foster, CEO of SymphonyAI Sensa-NetReveal, talks up how AI can be used to fight financial crime and how the company’s technology can augment existing AML investments Continue Reading

By

• Aaron Tan, Informa TechTarget

China’s UNC4841 pivots to new Barracuda ESG zero-day

The Chinese state threat actor behind a series of cyber attacks on Barracuda Networks customers embarked on a campaign targeting the supplier’s email security products in the run-up to Christmas Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 India IT stories of 2023

We recap the year’s top 10 stories in India, including the country’s datacentre boom and innovations in space and agriculture technologies Continue Reading

By

• Aaron Tan, Informa TechTarget

Top 10 AI regulation stories of 2023

From the UK government’s publication of its long-awaited AI whitepaper to its convening of the world’s first AI Safety Summit, here are Computer Weekly’s top 10 AI regulation stories of 2023 Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Top 10 technology and ethics stories of 2023

Here are Computer Weekly’s top 10 technology and ethics stories of 2023 Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Top 10 police technology stories of 2023

Here are Computer Weekly’s top 10 police technology stories of 2023 Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Top 10 government IT stories of 2023

In the year that gave life to four new government departments, Whitehall bosses have continued to fly the flag for technology, with mixed results and success. Here are the stories that made waves in 2023 Continue Reading

By

• Lis Evenstad

What is the CIA triad (confidentiality, integrity and availability)?

The CIA triad refers to confidentiality, integrity and availability, describing a model designed to guide policies for information security within an organization. Continue Reading

By

• Cameron Hashemi-Pour, Former Site Editor
• Wesley Chai

Top 10 cyber crime stories of 2023

Ransomware gangs dominated the cyber criminal underworld in 2023, a year that will prove notable for significant evolutionary trends in their tactics Continue Reading

By

• Alex Scroxton, Security Editor

Zero-trust principles: Your gateway to securing remote workers

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Michael Healey, Turnkey Consulting

What we learned in cyber in 2023, and what to look out for

PA Consulting's Rasika Somasiri looks back at a busy 12 months in the cyber security world, and highlights some key learnings from 2023 Continue Reading

By

• Rasika Somasiri

Top 10 cyber security stories of 2023

The past 12 months have seen the security agenda dominated by the usual round of vulnerabilities, concerns over supply chain security and more besides, but it was the chaotic state of global geopolitics that really made an impact Continue Reading

By

• Alex Scroxton, Security Editor

How hybrid work patterns change end user computing

While some organisations have mandated that staff return to the office, many places still operate a hybrid policy – we look at the IT admin challenges Continue Reading

By

• Cliff Saran, Managing Editor

Government plans to regulate to tackle datacentre threats

DSIT outlines a range of proposals designed to protect data storage facilities from cyber attacks, as well as physical threats and the effects of climate breakdown Continue Reading

By

• Alex Scroxton, Security Editor

ICO complaint seeks answers from prosecutors over deleted Assange emails

An Italian journalist has complained to the data protection watchdog after the Crown Prosecution Service gave conflicting explanations over its deletion of key emails on WikiLeaks founder Julian Assange Continue Reading

By

• Bill Goodwin, Computer Weekly

How ransomware gangs use the tech media against their victims

Ransomware gangs are increasingly media-savvy operators, and this means incident response plans now need to account for communications and PR strategies too Continue Reading

By

• Alex Scroxton, Security Editor

Inside the Singapore government’s cloud journey

The Smart Nation Group’s chief digital technology officer outlines the government’s cloud journey, including its approach to cloud migration and how it came to host mission-critical workloads on AWS Continue Reading

By

• Aaron Tan, Informa TechTarget

MoD fined after breach of Afghan staffers’ data put lives at risk

The MoD has been fined £350,000 by the ICO after an email blunder exposed data on Afghan nationals who had worked with British forces and were at risk of Taliban reprisals Continue Reading

By

• Alex Scroxton, Security Editor

Outdated data protection practice key factor in PSNI data breach

The August 2023 data breach at the Police Service of Northern Ireland arose chiefly from an outdated approach to data protection and compliance at the force, according to an independent review Continue Reading

By

• Alex Scroxton, Security Editor

Top IT predictions in APAC in 2024

Generative AI will continue to leave its mark on many areas in business and IT, along with other trends such as sustainability, cyber security and smart factories that are expected to shape the region’s technology landscape in 2024 Continue Reading

By

• Aaron Tan, Informa TechTarget

Nordic governments join forces to protect data transfers

Nordic countries deepen their cooperation over cyber security amid heightened threat from neighbouring Russia Continue Reading

By

• Gerard O'Dwyer

Fancy Bear targets Nato entities via critical Outlook flaw

A vulnerability patched in March has likely been exploited by the Russian state actor Fancy Bear, for over two years, according to the latest intelligence Continue Reading

By

• Alex Scroxton, Security Editor

UK names Russian FSB agents behind political hacking campaign

Russian hacking group, Star Blizzard, was part of a Russian intelligence operation aimed at interfering with UK politics and the democratic process, says government. Continue Reading

By

• Bill Goodwin, Computer Weekly

NCSC exposes Russian cyber attacks on UK political processes

The NCSC has firmly attributed a long-running campaign of cyber attacks targeting UK political processes to a group run out of Russia’s FSB intelligence agency, known as Star Blizzard Continue Reading

By

• Alex Scroxton, Security Editor

Considerations for the security of evolving workspaces

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Simon Backwell

How Proofpoint is helping to mitigate AI security threats

Proofpoint is offering monitoring tools to prevent leakage of sensitive information in generative AI models and other capabilities to mitigate AI mediated attacks Continue Reading

By

• Aaron Tan, Informa TechTarget

Operator of Sellafield nuclear facility denies hacking claims

The operator of the Sellafield nuclear site has denied allegations that senior managers covered up a series of cyber security lapses that enabled Chinese and Russian threat actors to compromise its networks Continue Reading

By

• Alex Scroxton, Security Editor

Rhysida ransomware gang hits hospital holding royal family’s data

Ransomware gang boasts of having stolen data on the royal family in an attack on a private London hospital Continue Reading

By

• Alex Scroxton, Security Editor

Human augmentation tech requires dual use oversight

Researchers investigating human augmentation technologies must acknowledge the potential military applications of their work, and military bodies cannot be allowed to dismiss ethical concerns in their pursuit of national security interests, says NGO Drone Wars UK Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Report reveals sorry state of cyber security at UK football clubs

Football clubs up and down the country are putting staff, players and fans alike at risk through outdated attitudes to cyber security, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Four steps to secure remote workers

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Olivia Rofe

privacy policy

A privacy policy is a legal document that explains how an organization handles any customer, client or employee information gathered in its operations. Continue Reading

By

• Gavin Wright

Government’s Online Fraud Charter welcomed

The government has corralled 11 of the largest tech platforms in the world to commit to its Online Fraud Charter, designed to tackle online scams, fake adverts, and more Continue Reading

By

• Alex Scroxton, Security Editor

Rhysida gang stole hundreds of gigabytes of British Library data

The Rhysida ransomware gang behind the cyber attack on the British Library has published almost 600GB of stolen data to its dark web leak site Continue Reading

By

• Alex Scroxton, Security Editor

Meta faces GDPR complaint over processing personal data without 'free consent'

Paid-for service means data protection is only available to those who can afford it, privacy group argues in data protection complaint Continue Reading

By

• Bill Goodwin, Computer Weekly

DORA raises the stakes for cloud use in financial services

The EU's DORA regulations will raise the stakes for cloud in financial services but resilience is more than just a tech issue, says NetApp's Steve Rackham Continue Reading

By

• Steve Rackham

UK police plan national roll-out of facial-recognition phone app

UK police chiefs plan to expand use of facial-recognition technology through a nationwide roll-out of mobile-based tools and increases in retrospective facial-recognition, but oversight problems persist Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Was the devil's greatest trick making you think tech CEOs are just people?

It’s been one of those weeks where tech makes headlines for all the wrong reasons. (Sadly, the wrong reasons are often the only reasons tech makes national headlines, but anyway…) There was much ... Continue Reading

By

• Bryan Glick, Editor in chief

Navigating the DPDI Bill: A transformative shift ahead

The Data Protection and Digital Information (No. 2) Bill, or DPDI, is set to reshape the UK’s data protection framework. Louise Brooks of DQM GRC considers the implications Continue Reading

By

• Louise Brooks, DQM GRC

Australia ups ante on cyber security

Australia’s new cyber security strategy will focus on building threat-blocking capabilities, protecting critical infrastructure and improving the cyber workforce, among other priorities Continue Reading

By

• Stephen Withers

Palantir awarded NHS FDP data contract

NHS England has awarded a £330m, seven-year contract to US data specialist Palantir, prompting concerns from data privacy practitioners Continue Reading

By

• Alex Scroxton, Security Editor

Internal documents leaked as Rhysida claims responsibility for British Library ransomware attack

Ransomware group Rhysida threatens to sell documents stolen from the British Library to the highest bidder Continue Reading

By

• Bill Goodwin, Computer Weekly

Kingfisher develops AI-agnostic platform to power DIY assistant

The platform provides a framework for security and compliance and enables developers to test different large language models Continue Reading

By

• Cliff Saran, Managing Editor

Cubbit DS3 Composer brings DIY cloud to object storage pool

Cubbit customers can now build and configure S3-compatible clouds from unused capacity and offer MSP-grade services with high levels of resilience, security and data sovereignty Continue Reading

By

• Antony Adshead, Storage Editor

IT not ready for AI, Pure Storage survey finds

Storage, compute and networking hardware won’t cope without upgrades, and that often means total IT infrastructure overhaul Continue Reading

By

• Antony Adshead, Storage Editor

Defence lawyers seek appeal of tribunal ruling on police EncroChat cryptophone hack

Defence lawyers are seeking leave to appeal against a tribunal ruling that found the National Crime Agency had lawfully obtained warrants to access messages from 9,000 cryptophones used in the UK Continue Reading

By

• Bill Goodwin, Computer Weekly

Walmart’s enterprise software: A Computer Weekly Downtime Upload podcast

We speak to Walmart’s David Glick about the build/buy debate and how the retailer works with large language models Continue Reading

By

• Cliff Saran, Managing Editor

Outgoing police tech watchdog warns of declining oversight

The outgoing biometrics and surveillance camera commissioner for England and Wales discusses police deployment of powerful new surveillance technologies, and the declining state of oversight in this area Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Ransomware gang grasses up uncooperative victim to US regulator

The ALPHV/BlackCat ransomware gang has added a new tactic to its playbook, going to ever more extreme lengths in search of a pay-off Continue Reading

By

• Alex Scroxton, Security Editor

British Library’s Halloween cyber scare was ransomware

The British Library has provided an update on an ongoing cyber incident affecting its systems, confirming it to be the result of a ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

BlackCat affiliate seen using malvertising to spread ransomware

Researchers at eSentire identified a wave activity from an ALPHV/BlackCat ransomware affiliate which has adopted a somewhat unusual approach to delivering its locker Continue Reading

By

• Alex Scroxton, Security Editor

Russian cyber criminal pleads guilty to running IPStorm botnet

Sergey Manikin faces years in jail after his illicit proxy botnet service was taken down by US law enforcement Continue Reading

By

• Alex Scroxton, Security Editor

Rogue state-aligned actors are most critical cyber threat to UK

The prospect of rogue nation-state-aligned attackers bringing down the UK’s critical infrastructure is keeping the NCSC up at night Continue Reading

By

• Alex Scroxton, Security Editor

Encrypted mail service Tuta says it was wrongly accused of being a front for intelligence services

German encrypted email service Tuta, formerly known as Tutanota, has denied claims by a former Canadian police intelligence officer accused of passing secrets to criminals that it was compromised by intelligence services Continue Reading

By

• Bill Goodwin, Computer Weekly

ICO alerted after technical ‘issue’ exposed college files to student barristers

A training college for barristers has reported a data breach that left sensitive data on hundreds of current and former students accessible to other trainees Continue Reading

By

• Tommy Greene

NCSC makes annual Black Friday plea to consumers

Ahead of the annual festival of retail avarice, the NCSC is once again asking consumers to do the bare minimum to avoid falling victim to scams Continue Reading

By

• Alex Scroxton, Security Editor

UK government does not see need for specific AI legislation

The UK government does not currently see the need for new artificial intelligence legislation, as many regulators are already dealing effectively with AI-related harms Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Data-sharing management gap highlights cyber risk, says report

Organisations are struggling to secure their use of communications tools to share data with third-party partners and suppliers, and in the process are exposing themselves to heightened levels of risk, according to a report Continue Reading

By

• Alex Scroxton, Security Editor