Regulatory compliance and standard requirements

CISOs struggle to keep up with MITRE ATT&CK framework

Despite its proven benefits for security, the MITRE ATT&CK framework is proving difficult for many, according to a joint study from McAfee and UC Berkeley Continue Reading

By

• Alex Scroxton, Security Editor

FBI seized ‘legally privileged’ material from Ecuador Embassy, claims Julian Assange’s lawyer

The US struck a secret deal with Ecuador to seize WikiLeaks founder Julian Assange’s property from the Ecuadorian Embassy in London days before his arrest. The haul included legally privileged documents, says his solicitor Continue Reading

By

• Bill Goodwin, Computer Weekly

Honesty is the best policy: Forging a security culture in the NHS

Clinician and technologist Sam Shah helped set up NHSX in 2019. Now he’s helping advance digital transformation in healthcare from the outside, and a big part of that is addressing security in the sector Continue Reading

By

• Alex Scroxton, Security Editor

Security pros face sanctions if they help ransomware victims pay

New advisory from the US government warns cyber insurance and incident response specialists that they could be skating on thin ice if they help ransomware victims pay their attackers off Continue Reading

By

• Alex Scroxton, Security Editor

Judge to give verdict on Julian Assange’s extradition after Christmas

Judge Vanessa Baraitser said today that she would make a ruling in early January on whether WikiLeaks founder Julian Assange should be extradited to the US Continue Reading

By

• Bill Goodwin, Computer Weekly

WikiLeaks revelations ‘shed light of truth’ on war on terror, court hears

WikiLeaks disclosures led to ‘revelations of extraordinary journalistic importance’ about detention in Guantanamo Bay and civilian casualties in Iraq and Afghanistan Continue Reading

By

• Bill Goodwin, Computer Weekly

‘American friends’ spied on Julian Assange in Ecuadorian Embassy, court hears

Two former employees of UC Global, which provides security services to the Ecuadorian Embassy in London, claim the company shared surveillance footage with the US of the WikiLeaks founder meeting with lawyers and other visitors Continue Reading

By

• Bill Goodwin, Computer Weekly

NatWest offers online banking customers free security services

Bank responds to a surge in cyber crime targeting users of online banking services Continue Reading

By

• Alex Scroxton, Security Editor

Julian Assange would be held in ‘solitary confinement’ in US jail

WikiLeaks founder would be held in a cell the size of a parking space for 22 or 23 hours a day without contact with other inmates before trial Continue Reading

By

• Bill Goodwin, Computer Weekly

Sustrans opens door to NCSC cyber certification via the cloud

Sustainable transport charity turned to Qualys to help it attain needed certifications to bid for government work Continue Reading

By

• Alex Scroxton, Security Editor

Police Scotland to set up new cyber crime centre

National Centre of Excellence will employ specially trained officers to tackle a vertiginous rise in cyber crime Continue Reading

By

• Alex Scroxton, Security Editor

Security now main driving force behind digital transformation

Organisations are urgently remodelling their core technology stack in the light of the Covid-19 pandemic, and this is pushing security to the top of the agenda Continue Reading

By

• Alex Scroxton, Security Editor

Covid-19 has changed how we think about cyber security forever

Six months into the global pandemic, the true impact on the future of cyber security is beginning to look clearer, says Microsoft’s Ann Johnson Continue Reading

By

• Ann Johnson, Microsoft

‘Not unjust’ to extradite WilkiLeaks founder Julian Assange, court hears

Nigel Blackwood, NHS consultant psychiatrist, told the Old Bailey court that WikiLeaks founder Julian Assange had ‘moderate depression’ and autistic traits, but said they did not prevent his extradition Continue Reading

By

• Bill Goodwin, Computer Weekly

NHS whistleblower privacy concerns passed on to regulator, but campaigners not holding their breath

NHS Improvement chair Dido Harding acknowledges receiving concerns raised about the anonymity of whistleblowers, but campaigners have little faith that anything will be done Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government blasted over ‘reckless’ contact-tracing security

The Open Rights Group and Big Brother Watch accuse the government of endangering public health with a reckless attitude to contact-tracing data security Continue Reading

By

• Alex Scroxton, Security Editor

Australians want more control over privacy

Nearly nine in 10 Australians want more control and choice over the collection and use of their personal information amid declining trust in how organisations handle personal data, survey finds Continue Reading

By

• Aaron Tan, Informa TechTarget

Over half of firms intend to continue US data transfers despite Schrems II

Survey shows many organisations do not intend to significantly change their data-sharing practices, at least until there is more guidance from regulators or governments Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

GDS reviewing Cloud First policy post-Schrems II

Review seeks to determine the future of government engagement with cloud hosting services as they relate to cross-border data flows Continue Reading

By

• Alex Scroxton, Security Editor

Why business resilience management should be high on the agenda

Business resilience management is key to business survival in the face of rapidly changing IT, cyber threat and regulatory environments Continue Reading

By

• Warwick Ashford, Senior analyst

Big questions to be answered over TikTok and WeChat reprieve

TikTok and WeChat seem to have received a stay of execution, but big questions and contradictions remain Continue Reading

By

• Alex Scroxton, Security Editor

WikiLeaks video ‘electrified’ public to civilian war deaths, court hears

New Zealand investigative journalist and author Nicky Hager said that WikiLeaks’ publication of a video showing a US helicopter firing on civilians, along with the publication of secret war logs, ‘electrified’ the world to civilian deaths Continue Reading

By

• Bill Goodwin, Computer Weekly

Congressman offered Julian Assange a ‘win-win’ deal that would help President Trump

Details have emerged of US congressman Dana Rohrabacher’s offer of a pardon to WikiLeaks founder Julian Assange in a ‘win-win deal that would benefit US President Donald Trump Continue Reading

By

• Bill Goodwin, Computer Weekly

Top five ways to benefit from tape today

We look at the benefits that tape can bring, including in backup and recovery, long-term and ‘warm’ archiving, compliance and WORM use cases and ‘air gapping’ to protect data Continue Reading

By

• Stephen Pritchard

Saudi Arabia sees cyber security boom as coronavirus bites

Saudi Arabian CIOs have been forced to increase their security posture as the Covid-19 pandemic transforms working methods Continue Reading

By

• Alicia Buller

What are the habits of highly effective CISOs?

Data crunched by Gartner analysts reveals the behaviours that differentiate the top-performing chief information security officers from the pack Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Edge security in the world of Covid-19

That datacentre security is a complex subject is not in doubt and, given the trend to move beyond centralised datacentre to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• Petra Wenham

NCSC steps up ransomware support for schools and universities

New alert and updated guidance comes after several academic institutions were targeted in ransomware attacks Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Edge datacentre security depends on specific needs

That datacentre security is a complex subject is not in doubt and, given the trend to move beyond centralised datacentres to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• Paddy Francis

Gartner Security Summit: Covid-19 brings agile security to the fore

The evolving threat landscape is the top driver impacting cyber security during the next three to five years, and Covid-19 has accelerated the trend towards more agile security deployments Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: No secret sauce for edge security, just good practice

That datacentre security is a complex subject is not in doubt, and given the trend to move beyond centralised datacentres to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• Tom Venables, Turnkey Consulting

TikTok-Oracle partnership moves forward for consideration

Joint venture proposal could create thousands of jobs and secure TikTok’s future outside China Continue Reading

By

• Alex Scroxton, Security Editor

Data of every Welsh Covid-19 patient leaked online

Data on all 18,105 people in Wales who have received positive tests for the coronavirus was uploaded to a public-facing web server in error Continue Reading

By

• Alex Scroxton, Security Editor

Travel industry websites are laughably insecure, claims Which?

The travel industry is failing to take the data security of its customers seriously, according to a Which? investigation Continue Reading

By

• Alex Scroxton, Security Editor

Cyber security is next frontier for open source

Open security will facilitate the interoperability and capabilities of cyber security tools while alleviating vendor lock-in for enterprises, says IBM Continue Reading

By

• Aaron Tan, Informa TechTarget

Julian Assange warned against interrupting witnesses in extradition hearing

On the second day of his extradition hearing at the Old Bailey, judge informs the WikiLeaks founder he could be removed and potentially banned from court for interrupting witnesses Continue Reading

By

• Bill Goodwin, Computer Weekly

Court rejects request to exclude ‘11th hour’ US evidence against WikiLeaks founder Julian Assange

Lawyers for Julian Assange say the US has introduced an 11th hour indictment against the WikiLeaks founder that provides additional grounds for his extradition Continue Reading

By

• Bill Goodwin, Computer Weekly

Government DPOs challenged by volume of GDPR work

Data protection officers working across the UK government are finding it tough to keep up with the increased workload generated by GDPR, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Why predictive threat intelligence is key

Threat intelligence startup Cyfirma is using virtual agents to gather intelligence on potential cyber attacks that are being coordinated in underground forums before they occur Continue Reading

By

• Aaron Tan, Informa TechTarget

Security Think Tank: Beware security blind spots at the edge

That datacentre security is a complex subject is not in doubt and, given the trend to move beyond centralised datacentres to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• Jordon Kelly, ISF

Northumbria University suffers major disruption after cyber attack

Some exams cancelled as university appoints external specialists to investigate incident Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Sharing responsibility: Why we need to work together to keep the cloud secure

The education sector has been fundamentally altered by months of lockdown, with cloud services topping must-have lists for academic staff, but now it’s time to consider security Continue Reading

By

• Andy Powell, JISC

Vint Cerf: Why everyone has a role in internet safety

The Covid-19 pandemic has demonstrated the power of internet connectivity. Vint Cerf talks to Computer Weekly about the challenges the internet now faces Continue Reading

By

• Cliff Saran, Managing Editor

Security Think Tank: Security at the distributed edge

That datacentre security is a complex subject is not in doubt, and given the trend to move beyond centralised datacentres to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• Anup Deb, Palo Alto Networks

Benefit fraud: Underground trade in stolen identities revealed

A roaring underground trade in stolen identities is undermining the Universal Credit system and could potentially defraud it out of millions of pounds Continue Reading

By

• Alex Scroxton, Security Editor

DDoS downs New Zealand stock exchange for third day

Distributed denial of service attack from overseas has left stock exchange offline for days Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NHS whistleblowers’ anonymity at mercy of inadequate trust IT policies and processes

They were clapped in the streets for their bravery at the height of the Covid-19 pandemic, but some NHS staff who raise workplace concerns are suffering abuse as a result Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

What are the latest GDPR security breach enforcement trends?

A cyber breach specialist from Fieldfisher runs the rule over the latest trends in cyber security, data protection and GDPR Continue Reading

By

• Kirsten Whitfield, Fieldfisher

TikTok takes Trump to court

Under-fire video app TikTok files a formal complaint in the federal courts challenging the Trump administration’s attempt to ban it in the US Continue Reading

By

• Alex Scroxton, Security Editor

Getting physical with datacentre security

Whether it is natural disasters, terrorism or break-ins, datacentres will be vulnerable to a range of risks unless they are physically secured. Here’s how you can improve the physical security of your datacentre Continue Reading

By

• Nicholas Fearn

TikTok’s GDPR compliance probed amid accusations of data misuse

Dutch privacy organisation SOMI claims TikTok falls short in protecting young users, and that it is likely violating GDPR Continue Reading

By

• Alex Scroxton, Security Editor

MPs accuse ICO of failing to do its job on contact-tracing data

Cross-party group of MPs say the ICO has failed to enforce data protection standards or hold the government to account over the unlawful Test and Trace programme Continue Reading

By

• Alex Scroxton, Security Editor

Australian regulator sues RI Advice for cyber security lapses

The Australian Securities and Investments Commission is suing RI Advice for cyber security breaches at the financial firm’s authorised representatives Continue Reading

By

• Aaron Tan, Informa TechTarget

UKAS rejects ISO certification concerns

UK’s certification body says refreshed guidance is in place to cover the possibility of lapsed ISO certifications Continue Reading

By

• Alex Scroxton, Security Editor

Social media data leak highlights murky world of data scraping

A data brokerage left its database of 235 million Instagram, TikTok and YouTube profiles exposed to anybody who cared to access it Continue Reading

By

• Alex Scroxton, Security Editor

HMRC investigates over 10,000 Covid-19 phishing reports

HM Revenue & Customs received thousands of reports of coronavirus phishing scams exploiting its name during April, May and June Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Thousands of ISO certifications set to lapse

Delays and postponements in the auditing process are putting hard-earned security and data protection certifications at risk of lapsing Continue Reading

By

• Alex Scroxton, Security Editor

Marriott slapped with class action lawsuit over 2018 breach

Group action brings together millions of victims who stayed at the Starwood hotel chain over a four-year period Continue Reading

By

• Alex Scroxton, Security Editor

Carnival cruise lines hit by ransomware, customer data stolen

Cruise ship operator is likely to be the victim of a major data breach after customer information is apparently stolen in a ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Reports Oracle to enter TikTok bidding war

Oracle may be about to make a bid to acquire the US operations of TikTok from its Chinese parent ByteDance, according to the FT Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: How Crest is remaking the future of consultancy

Crest president Ian Glover taught himself cyber security while working on government computing systems in the 1970s and 1980s. Now he is on a decade-spanning mission to change security consultancy models Continue Reading

By

• Alex Scroxton, Security Editor

ICO acknowledges GDPR concerns over A-level results scandal

Information Commissioner’s Office says it has engaged with exams regulator Ofqual after its use of an algorithm to calculate A-level grades backfired Continue Reading

By

• Alex Scroxton, Security Editor

Oracle and Salesforce sued over online ad tracking

Class action lawsuits filed in Amsterdam and London will accuse Oracle and Salesforce of breaching GDPR in their processing and sharing of personal data to sell online advertising Continue Reading

By

• Alex Scroxton, Security Editor

APAC consumers do not feel responsible for data security

Just one in four consumers believe they should protect their own data, underscoring the tightrope between security and convenience that organisations have been walking on Continue Reading

By

• Aaron Tan, Informa TechTarget

EU and US start discussions on ‘enhanced’ Privacy Shield data-sharing agreement

Talks begin on a successor to the Privacy Shield EU-US data-sharing agreement declared unlawful in July 2020 – a decision by the European Court of Justice that left thousands of businesses facing legal uncertainty Continue Reading

By

• Bill Goodwin, Computer Weekly

Police use of facial recognition found ‘unlawful’ in court

In a landmark decision, the Court of Appeal has ruled that South Wales Police’s facial recognition deployments breached human rights and data protection laws Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Why data exports from the EU will be challenging without Privacy Shield

Organisations exporting data to the US under Privacy Shield or overseas generally, whether under standard contractual clauses or binding corporate rules, need to urgently review the legal basis of these transfers   Continue Reading

By

• Andrew Hartshorn, Shakespeare Martineau

French data protection authorities to probe TikTok as suitors circle

France’s CNIL has confirmed a new investigation into TikTok’s data protection practices Continue Reading

By

• Alex Scroxton, Security Editor

Hospitality sector is failing on contact-tracing obligations

Cyber security experts urge the government to do more to help small hospitality businesses improve their contact-tracing data-handling practices Continue Reading

By

• Alex Scroxton, Security Editor

Data Standards Authority publishes guidance on government data sharing

The Data Standards Authority (DSA) wants government departments to use new open data standards when sharing data, with the aim of improving public services Continue Reading

By

• Lis Evenstad

TikTok to be banned in US in 45 days

Trump says his Executive Orders against Chinese mobile apps are in the interests of dealing with a national emergency Continue Reading

By

• Alex Scroxton, Security Editor

How to achieve resilience – the modern uptime trinity

IT leaders can take responsibility for ensuring their organisations are resilient during times of crisis. There are no quick fixes, but if you think it is expensive to ensure resilience in your IT systems, try frequent failure instead Continue Reading

By

• Terry Critchley

Australia updates cyber security strategy but offers little new

The nation’s latest cyber security strategy includes centralised management of networks and a voluntary code of practice for deploying internet-connected devices, among other areas Continue Reading

By

• Anthony Caruana

Canon said to be latest Maze ransomware victim

Canon may have had up to 10TB of its data exfiltrated by the Maze ransomware gang Continue Reading

By

• Alex Scroxton, Security Editor

Seven questions you need to ask when buying security insurance

Find out what you need to ask to make an informed decision on cyber security insurance with new help from the UK’s NCSC Continue Reading

By

• Alex Scroxton, Security Editor

Netherlands investigates innovative privacy technology SSI

Dutch research organisation is looking into areas where self-sovereign identity technology could be used in society and business Continue Reading

By

• Kim Loohuis

The countdown is on for TikTok after Schrems II

Given the US’ threatened actions against TikTok and the outcome of Schrems II, it is clear that the spotlight is now firmly on international data transfers Continue Reading

By

• Jagvinder Singh Kang, Mills & Reeve

Five signs you’re about to get hit with ransomware

A series of Sophos reports on the ransomware threat landscape shows how security professionals can sniff out a potential ransomware attack before it happens Continue Reading

By

• Alex Scroxton, Security Editor

Liam Fox hack raises questions over government security

The hack of a former cabinet minister’s emails casts doubt over the effectiveness of safeguards and security training processes at the highest levels of the British government Continue Reading

By

• Alex Scroxton, Security Editor

The UK’s $500m space technology gamble

In this week’s Computer Weekly we ask why the UK government is spending $500m on a bankrupt satellite technology company. After a European court quashes the EU-US data sharing agreement, we examine the implications for a UK-EU data protection deal after Brexit. And how have small cloud suppliers coped in the pandemic? Read the issue now. Continue Reading

New foundation to bolster security of open source software

The Open Source Security Foundation will bring together key open source security initiatives across the industry to improve and support the security of open source software Continue Reading

By

• Aaron Tan, Informa TechTarget

Estonian police and border services need better IT to block criminals from becoming e-residents

Police and Border Guard Board of Estonia needs to improve its IT systems to stop criminals from becoming e-residents, says report Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Microsoft offers way out of TikTok impasse

Microsoft offers to buy TikTok from its Chinese parent to ease security fears in the US Continue Reading

By

• Alex Scroxton, Security Editor

More data breaches from ransomware attacks in Australia

The number of data breaches caused by ransomware rose to 33 in the first half of 2020 from 13 in the previous six-month period, according to the latest report from the Office of the Australian Information Commissioner Continue Reading

By

• Aaron Tan, Informa TechTarget

Labour Party is latest victim of Blackbaud ransomware attack

Widening Blackbaud data breach ensnares the Labour Party as the cloud software firm continues to duck questions about its behaviour Continue Reading

By

• Alex Scroxton, Security Editor

US lawmakers grill big tech chiefs over market power

Sixth antitrust hearing sees CEOs of major technology companies face combative questioning from members of Congress over their market power and dominance Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

EU sanctions China and Russia over cyber attacks

The EU is applying restrictive measure to six individuals and three entities accused of conducting disruptive cyber attacks in Europe, including the Russian GRU Continue Reading

By

• Alex Scroxton, Security Editor

List of Blackbaud breach victims tops 120

More than 120 education and third-sector organisations may have had their data compromised through the breach of Blackbaud’s cloud platform Continue Reading

By

• Alex Scroxton, Security Editor

Bank of Ireland fined for six-year-old IT breach

Bank of Ireland fined by regulator for its failings to prevent fraud six years ago Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Campaigners urge government to resist big tech lobbying pressure

Lobbyists for big tech, supported by senior US politicians, have rallied against stricter regulation of technology companies, and threatened the US-UK trade deal unless Britain scraps plans to levy a digital services tax Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Schrems steps up pressure on Irish data protection commissioner on Facebook’s data sharing with US

Austrian lawyer is considering ‘other’ options if the Irish data protection commissioner does not make a decision by October on his seven-year-old complaint against Facebook Continue Reading

By

• Bill Goodwin, Computer Weekly

De Montfort, KCL, Newcastle universities join list of Blackbaud victims

Embattled cloud services provider now has big questions to answer over its handling of data belonging to UK universities and charities Continue Reading

By

• Alex Scroxton, Security Editor

NCSC names national security expert Lindy Cameron as new CEO

New National Cyber Security Centre head joins from the Northern Ireland Office and has spent 20 years in government at home and abroad Continue Reading

By

• Alex Scroxton, Security Editor

NCSC inducts six security startups to Cyber Accelerator

10-week programme will guide some of the UK’s most innovative security startups as they scale their businesses for future growth Continue Reading

By

• Alex Scroxton, Security Editor

MI6 apologises after attempt to interfere with intelligence court

The UK Secret Intelligence Service, MI6, has apologised after attempting to persuade the secretary of Britain’s most secret court to withhold documents from senior judges in a case about crimes by undercover agents Continue Reading

By

• Bill Goodwin, Computer Weekly

Australia issues new cloud computing guidelines

The new guidance, which comes after the expiry of the government’s cloud services certification programme, will help to bolster Australia’s cyber security resilience Continue Reading

By

• Aaron Tan, Informa TechTarget

Post-Privacy Shield, what chance for a Brexit data adequacy deal?

The striking down of Privacy Shield has been hailed as a victory for digital rights and privacy campaign groups, but it will have consequences that go beyond transatlantic data transfers Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Government drags its feet on online misinformation

Online misinformation about Covid-19 continues to spread unchecked, according to a DCMS committee report which has accused the government of dragging its feet over online harms Continue Reading

By

• Alex Scroxton, Security Editor

Russia Report reveals long-running cyber warfare campaign against UK

Russia has been hacking the UK for years and the British government has also known about it for years, according to the Intelligence and Security Committee’s report Continue Reading

By

• Alex Scroxton, Security Editor

Australian industry panel calls for ‘clear consequences’ of cyber attacks

A government-appointed panel recommends strong deterrence and other measures to be implemented in Australia’s next cyber security strategy Continue Reading

By

• Aaron Tan, Informa TechTarget