Regulatory compliance and standard requirements

Surveillance capitalism in the age of Covid-19

Could the Covid-19 coronavirus pandemic further consolidate surveillance capitalist practices and enterprises? Author Shoshana Zuboff warns Computer Weekly it is possible Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Report reveals inadequate cyber security at Schiphol Airport

A report has revealed problems with critical security systems in Amsterdam’s Schiphol Airport Continue Reading

By

• Kim Loohuis

Security Think Tank: Burnt out CISOs are a huge cyber risk

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security pros manage their increased workload, safeguard their mental wellbeing, and avoid burnout? Continue Reading

By

• Cavan Arrowsmith, Turnkey Consulting

Nation state APT groups prefer old, unpatched vulnerabilities

The Cybersecurity and Infrastructure Security Agency and the FBI have published details of the most commonly exploited vulnerabilities of recent years, and there are some “classics” on the list Continue Reading

By

• Alex Scroxton, Security Editor

Can Lady Gaga and Madonna get people to take security seriously?

What does it take to get people to pay attention to cyber security? A celebrity law firm hack may hold some answers Continue Reading

By

• Alex Scroxton, Security Editor

European comms bodies set up standards group, call for vigilance on contact-tracing apps

New ETSI group will develop standardisation framework for secure smartphone-based proximity tracing systems, helping to break Covid-19 transmission chains Continue Reading

By

• Joe O’Halloran, Computer Weekly

Draft Covid-19 contact tracing legislation proposes formal oversight

Human Rights Committee chair Harriet Harman has outlined a proposed bill to guarantee the security and privacy of data generated by the UK’s Covid-19 contact tracing app Continue Reading

By

• Alex Scroxton, Security Editor

Details released of second UK contact-tracing app development

Contractual documents show Zuhlke Engineering receiving an official start date of 6 May to supply a managed delivery team to support and run proximity mobile application and services for the UK Continue Reading

By

• Joe O’Halloran, Computer Weekly

Police failing to consult public on new technologies

A freedom of information campaign has revealed that UK police are largely failing to consult the public on their use of new technologies, with the potential to undermine the principle of policing by consent Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Create healthy habits to avoid burnout

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security professionals manage their increased workload, safeguard their mental well-being and avoid burnout? Continue Reading

By

• Dan Norman

APAC firms still coming to grips with data protection

More governments in Asia are implementing data protection regimes, but challenges such as checkbox compliance and the lack of effective staff training remain Continue Reading

By

• Aaron Tan, TechTarget

How Australian firms can plug data protection gaps

Australian organisations can address data protection challenges by creating roles such as a data governance lead, classifying data and improving employee awareness of cyber hygiene Continue Reading

By

• Stephen Withers

Banks failing to protect customers from coronavirus fraud

Just 13 of the 64 banks accredited for the government’s Coronavirus Business Interruption Loan Scheme have implemented Dmarc protection Continue Reading

By

• Alex Scroxton, Security Editor

What are the security priorities for the post-coronavirus world?

The Covid-19 pandemic is forcing massive change across the business world and things may never go back to normal. What does security look like in this new world, and what will buyers be prioritising? Continue Reading

By

• Alex Scroxton, Security Editor

Contact-tracing app fails to protect privacy and human rights

Reassurances over the security and human rights implications of NHSX’s approach to developing its Covid-19 contact-tracing app are insufficient, says the cross-bench Human Rights Committee Continue Reading

By

• Alex Scroxton, Security Editor

Facebook announces oversight board members

New board will rule on freedom of expression issues and make policy recommendations to social media giant. Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

FBI search warrants reveal Trump aide’s messages to WikiLeaks founder Julian Assange

FBI search warrants reveal Trump campaigner Roger Stone sent private messages to WikiLeaks founder Julian Assange after the site published thousands of documents that damaged Hillary Clinton’s election campaign Continue Reading

By

• Bill Goodwin, Computer Weekly

Contact tracing: The privacy vs protection debate

The Covid-19 pandemic has necessitated extreme measures not seen in peacetime for over 100 years. Contact-tracing apps are being developed as a tool for managing the pandemic, but are they a step too far? Continue Reading

By

• Peter Ray Allison

Building security and privacy into contact-tracing apps

Governance and data decentralisation are among measures that organisations can take to allay security and privacy concerns over contact-tracing apps, according to RSA Continue Reading

By

• Aaron Tan, TechTarget

NHSX contact-tracing app needs legislative oversight

Legal experts have told Parliament’s Human Rights Committee that legislation is desirable to ensure public trust in the data security of the Covid-19 coronavirus contact-tracing app Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: How to get cyber accountability on the board agenda

We look at how boards should carry out strategic and operational risk profile assessments and plan for compliance on an ongoing basis to avoid fines and damage to the business Continue Reading

By

• Antony Adshead, Storage Editor

Four risks to data privacy and governance amid Covid-19

EY privacy experts assess some of the novel risks to data privacy, protection and governance during the Covid-19 coronavirus pandemic Continue Reading

By

• Pragasen Morgan and Paul Smith

Security Think Tank: CISOs must adapt to fight Covid-19 burnout

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security pros manage their increased workload, safeguard their mental wellbeing, and avoid burnout? Continue Reading

By

• Jason Yakencheck, Isaca

IT Priorities 2020: Compliance and risk are top security concerns

When it comes to security, buyers are prioritising solutions and services that address compliance issues, risk management and data protection, according to the Computer Weekly/TechTarget IT Priorities 2020 study Continue Reading

By

• Alex Scroxton, Security Editor

NCSC tackles unconscious bias in security terminology

The terms whitelisting and blacklisting are out at the UK’s National Cyber Security Centre Continue Reading

By

• Alex Scroxton, Security Editor

Why you should think before you Zoom

Feel free to use Zoom during the coronavirus lockdown, but think before you discuss anything confidential Continue Reading

By

• Dai Davis, Percy Crow Davis & Co

IMDA to issue 5G spectrum to Singtel and StarHub-M1 venture

Singapore’s telco regulator will award 5G spectrum to major operators whose proposals have exceeded its requirements in some cases Continue Reading

By

• Aaron Tan, TechTarget

Coronavirus: Call for extension to European payment security standard deadline

Payment processors across Europe want more time to meet the SCA payment security standard Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Julian Assange extradition hearing postponed amid coronavirus lockdown

Julian Assange’s lawyers say they have been unable to communicate or share legal documents with the WikiLeaks founder to enable them to prepare a defence in time for a planned extradition hearing in May Continue Reading

By

• Bill Goodwin, Computer Weekly

UK tech companies launch online safety body

Online Safety Tech Industry Association unites 14 technology companies to drive conversation and policy around online safeguarding Continue Reading

By

• Alex Scroxton, Security Editor

Australia’s CovidSafe app debuts, source codes to follow

Australia’s contact tracing app has been downloaded more than 1.1 million times, even as privacy concerns linger on Continue Reading

By

• Stephen Withers

Ransomware-stricken Travelex up for sale

Travelex’s parent Finablr is washing its hands of the ransomware-stricken forex provider as it struggles with the twin shocks of the Covid-19 pandemic and a developing fraud scandal Continue Reading

By

• Alex Scroxton, Security Editor

Public authorities set to receive expanded surveillance powers

UK government wants to extend the number of public authorities able to obtain communications data using mass surveillance Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

A carrot-and-stick approach to fixing cyber security complacency

With a majority of IT decision-makers holding the opinion that their employers are complacent when it comes to data protection, we look at what needs to be fixed, and how to fix it Continue Reading

By

• Matthew Staff

Podcast: Remote compliance assessments and how they are done

Remote working adds to IT compliance risks, but doesn’t remove the need to assess compliance. How are remote compliance assessments carried out and how can you prepare for them? Continue Reading

By

• Antony Adshead, Storage Editor

IT services company Cognizant warns customers after ‘Maze’ ransomware attack

US IT services company Cognizant alerts customers after the Maze ransomware group launches a cyber attack Continue Reading

By

• Bill Goodwin, Computer Weekly

Dutch organisations address business email compromise fraud

Public-private partnership in the Netherlands works to break the chains used by fraudsters to carry out BEC attacks Continue Reading

By

• Kim Loohuis

Australian workers are weakest link in fight against cyber attacks

About four in 10 employees are sharing inappropriate data across mobile devices and half of all security incidents in 2019 occurred through inappropriate IT use, new study finds Continue Reading

By

• Aaron Tan, TechTarget

Coronavirus: How Nominet fights back against malicious domains

Domain name registry has thwarted hundreds of attempts to register malicious .uk domain names during the coronavirus pandemic Continue Reading

By

• Alex Scroxton, Security Editor

EU warns no compromise on privacy as NHS clashes with tech firms on contact tracing

EU and UK regulators express data privacy concerns days after Silicon Valley giants announce collaboration on contact-tracing apps to prevent the spread of the Covid-19 coronavirus Continue Reading

By

• Joe O’Halloran, Computer Weekly

Coronavirus: Security certification body puts exams online

Candidates for certification by the International Association of Privacy Professionals will now be able to sit their exams remotely Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: ICO temporarily relaxes regulatory approach

The Information Commissioner’s Office sets out a revised approach to its regulatory duties during the Covid-19 coronavirus pandemic Continue Reading

By

• Alex Scroxton, Security Editor

A legal perspective on data breaches and home working

Legal experts from Fieldfisher share guidance on how to deal with cyber attacks during the coronavirus crisis, and what the ICO expects in terms of notification Continue Reading

By

• Sabba Mirza and Michael Brown

Multicloud storage 101: Pros, cons, pitfalls and strategies

Not putting all your eggs in one basket can be helpful to an enterprise’s resilience strategy. We look at multicloud storage and the benefits and pitfalls it brings Continue Reading

By

• Rene Millman

BA and Marriott get GDPR fine reprieve

Both British Airways and Marriott International have had their General Data Protection Regulation fines deferred until later in 2020 Continue Reading

By

• Alex Scroxton, Security Editor

Covid-19 apps pose threat to digital privacy on a global scale

Digital security firm Surfshark has reviewed a number of apps aimed at tackling the spread of coronavirus, and found that many pose a threat to people’s digital privacy Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Continuity planning doesn’t have to be complex

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Andrew Morris, Turnkey Consulting

Morrisons appeal success is cold comfort for enterprises

The success of Morrisons’ appeal against judgments that it should be held vicariously liable for an insider data breach will be welcomed by businesses, but may be of limited comfort to them Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Covid-19, compliance risk, remote assessment and training

We talk to Mathieu Gorge, CEO of Vigitrust, about why organisations cannot drop their guard on compliance during the increased risks faced as a result of the coronavirus crisis Continue Reading

By

• Antony Adshead, Storage Editor

Swedbank to rebuild anti-money laundering systems after damning report

Report finds that €36.7bn in transactions, all carrying a high risk for money laundering, were processed through the bank’s branch network in Estonia, Latvia and Lithuania Continue Reading

By

• Gerard O'Dwyer

Marriott International hotel chain in second data breach

Marriott International notifies customers of a major data breach that unfolded earlier in 2020 – the second it has experienced in the past two years Continue Reading

By

• Alex Scroxton, Security Editor

Top five compliance concerns for UK business in 2020

We look at the top five legal and regulatory compliance concerns for UK businesses in 2020. It’s a list that includes GDPR, the DPA, PECR, PCI-DSS and the CCPA Continue Reading

By

• Stephen Pritchard

Why security validation matters

FireEye’s top executives in Asia-Pacific discuss the benefits of security validation and offer their take on the region’s cyber threat landscape Continue Reading

By

• Aaron Tan, TechTarget

Lorca calls on security scaleups to tackle coronavirus challenge

Lorca innovation programme has launched an open call for its next cohort of cyber security scaleups, with a timely focus on coronavirus challenges Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: What are the latest free cyber security offers?

We round up the latest free offers on cyber security products and services being made available during the Covid-19 coronavirus crisis Continue Reading

By

• Alex Scroxton, Security Editor

Developed APAC states most exposed to cyber risks

Singapore, South Korea, Japan, Australia and New Zealand have the highest exposure to cyber risks, but they are also the most prepared to deal with cyber attacks, study finds Continue Reading

By

• Aaron Tan, TechTarget

Almost half of UK businesses suffered a cyber attack in past year

Latest government statistics reveal the scale of the cyber security challenge facing UK plc, but reveals some cause for optimism Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus and privacy – finding the middle ground

Data collection has a role to play in fighting the deadly Covid-19 coronavirus outbreak, but governments need to be accountable for how it is used Continue Reading

By

• Eduardo Ustaran

The AWS bucket list: Keep your cloud secure

Misconfigured cloud installations risk billions of records being exposed, damaging organisations’ finances and reputations. Paying attention to securing AWS storage buckets is a simple matter Continue Reading

By

• Peter Ray Allison

Coronavirus: Kaspersky, Bitdefender make products free to NHS

Kaspersky and Bitdefender have both made various products and services available free to healthcare customers as the Covid-19 coronavirus pandemic intensifies Continue Reading

By

• Alex Scroxton, Security Editor

Why zero trust may not be all it’s cracked up to be

While they are discussed ad nauseam in the security industry, zero-trust architectures may not be all they’re cracked up to be, according to analyst Sam Bocetta Continue Reading

By

• Sam Bocetta

Cyber gangsters hit UK medical firm poised for work on coronavirus with Maze ransomware attack

The Maze ransomware group has published personal and medical details of thousands of former patients of a London-based medical research company after a failed attempt to disable the firm's computer systems Continue Reading

By

• Bill Goodwin, Computer Weekly

UK Coronavirus Bill relaxes restrictions on mass surveillance powers

Emergency legislation would massively expand state surveillance and police detainment powers Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Coronavirus: How to implement safe and secure remote working

Find out what CIOs and CISOs need to know to enable their end-users to work remotely and stay secure during the Covid-19 coronavirus crisis, and learn how users can help themselves Continue Reading

By

• Alex Scroxton, Security Editor

Prudential turns to AI to secure computer networks against cyber attacks

Prudential, the UK’s largest listed insurer, is turning to artificial intelligence to protect its computer networks in the US, Asia and Africa from malware hackers and internal threats Continue Reading

By

• Bill Goodwin, Computer Weekly

Travelex under threat as insolvency risk, hacking costs and coronavirus take their toll

Foreign exchange group’s future remains uncertain as its parent company, Finablr, prepares for potential insolvency Continue Reading

By

• Bill Goodwin, Computer Weekly

UN identifies tech companies working in Occupied Palestinian Territories

United Nations Human Rights Office report names a number of technology companies that could be involved in violating human rights Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: To tackle Covid-19, be prepared, flexible and resilient

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Dan Norman

UK makes its case for post-Brexit data adequacy decision

Government sets out an explanatory framework as it seeks adequacy decisions from the European Commission to maintain the free flow of personal data between the European Union, the UK and Gibraltar Continue Reading

By

• Alex Scroxton, Security Editor

Equality watchdog calls on police to stop using facial recognition

Equalities and Human Rights Commission says use of automatic facial recognition and predictive algorithms by police is discriminatory, stifles freedom of expression and lacks a proper legislative framework Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: A guide to security best practice for pandemics

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Petra Wenham

Security Think Tank: Coronavirus crisis helps put security in context

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Maxine Holt, Omdia

Cross-regulator taskforce on digital economy announced in 2020 Budget

UK regulators will join forces to look at how the potential regulation of the digital platforms and advertising markets would work Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Microsoft fixes 26 critical vulnerabilities in another heavy Patch Tuesday

March’s Patch Tuesday is another big one for Microsoft, addressing 115 vulnerabilities, 26 of them critical Continue Reading

By

• Alex Scroxton, Security Editor

Inside Oracle’s cloud strategy

Oracle may be late to the cloud infrastructure and platform game, but it believes it has what it takes to carve out a bigger slice of the Asia-Pacific’s cloud market Continue Reading

By

• Aaron Tan, TechTarget

Bill Gates backs Crest fintech security scheme for Africa and Asia

UK-based cyber security accreditation and certification non-profit Crest has been awarded a $1.4m grant from the Bill and Melinda Gates Foundation to expand cyber security capacity for fintechs in Africa and Asia Continue Reading

By

• Alex Scroxton, Security Editor

Virgin Media confirms 'misconfigured database' left personal data of 900,000 people exposed

Telco provider Virgin Media confirms 'data incident' that left personal details of 900,000 people exposed, but denies its systems were hacked or that it suffered a data breach Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Podcast: ‘The human element’ in compliance at RSA 2020

We review RSA 2020 and discuss the human element in compliance, plus network and data management, trust, Covid-19 and its implications for organisations, and GDPR and CCPA Continue Reading

By

• Antony Adshead, Storage Editor

Cathay Pacific hit with £500,000 data protection fine from ICO over 2018 breach

Airline receives maximum financial penalty under Data Protection Act for data breach that led to nine million customers having their personal data accessed by hackers Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Australian government pulls plug on cloud certification programme

The Australian Signals Directorate is closing its cloud services certification programme to allow for more home-grown suppliers Continue Reading

By

• Aaron Tan, TechTarget

Singapore among world’s top sources of online threats

Singapore remained a hotspot for originating cyber attacks in 2019, with 11 million attacks launched from servers in the city-state Continue Reading

By

• Aaron Tan, TechTarget

Why ‘no breach’ is bad news for your compliance

You might think it’s a good thing if your organisation has a clean record when it comes to data breaches, but this is not necessarily the case Continue Reading

By

• Byron Shirley

Data breaches in Australia showing no signs of abating

Compromised login credentials and human error were the most common causes of data breaches reported under Australia’s notifiable data breach regime from July to December 2019 Continue Reading

By

• Aaron Tan, TechTarget

Clearview hack fuels debate over facial recognition

Customers of Clearview AI, a controversial startup that scrapes and sells billions of photos of people from social media to police forces, have found themselves at the centre of a major data breach Continue Reading

By

• Alex Scroxton, Security Editor

FCA data breach could happen to anybody, but easy to avoid

Minor data breach at the Financial Conduct Authority was the result of simple human error, and highlights the need for organisations to consider a wide range of potential threats Continue Reading

By

• Alex Scroxton, Security Editor

Met Police chief backs legislative framework for police tech

Met Police commissioner has called for legislative framework to govern police use of new technologies, while defending the decision to use live facial recognition technology operationally without it Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Google warns users not to mess with Huawei devices

Google tells users of Huawei devices to try to avoid bypassing controls preventing them from loading its apps Continue Reading

By

• Alex Scroxton, Security Editor

Cloud data leaks compounded by lack of automation tools

Data leaks caused by misconfigured clouds are being compounded because security teams lack appropriate automation and integration tools, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Thai university to roll out data protection certification

Thailand’s National Institute of Development Administration is offering a certification programme to get organisations ready for the country’s data protection regime Continue Reading

By

• Aaron Tan, TechTarget

Assange extradition is a politically motivated ‘abuse of power’, court hears

US government’s attempt to extradite WikiLeaks founder Julian Assange to face espionage charges in the US is politically motivated and an abuse of process, court told Continue Reading

By

• Bill Goodwin, Computer Weekly

Blasé directors put business data at risk

The higher up within a business you go, the more likely you are to find people intentionally leaking confidential data, says Egress Continue Reading

By

• Alex Scroxton, Security Editor

Is this Netflix-style thriller the future of security training?

Cyber awareness specialists at KnowBe4 reckon that bringing Netflix-style production values to corporate videos heralds a new approach to security training Continue Reading

By

• Alex Scroxton, Security Editor

Most CISOs ready to move jobs if something better comes along

The shortage of skilled security pros is creating an active recruitment market, with over 80% of CISOs saying they would consider a new role if approached Continue Reading

By

• Alex Scroxton, Security Editor

Veeam Availability Suite v10 adds NAS backup and cloud tiering

Availability Suite is mostly about consolidating the company’s data management platform idea, but it has added incremental forever NAS backup, cloud tiering and recovery to vSphere Continue Reading

By

• Antony Adshead, Storage Editor

Security Think Tank: Zero trust strategies must start small, then grow

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs approach moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Paddy Francis

Mastercard opens European security resilience unit

Mastercard’s European Cyber Resilience Centre will bring together its partners and other industry bodies to support enterprise resilience Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Ask yourself if zero trust is right for you

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Simon Persin, Turnkey Consulting

PM Johnson shuffles technology and digital ministers again

Boris Johnson has changed all the key Cabinet appointments responsible for tech and digital policy for the second time since becoming prime minister last year Continue Reading

By

• Bryan Glick, Editor in chief

Security Think Tank: How zero trust lets you take back control

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero trust architecture? Continue Reading

By

• James Walsh, Fieldfisher

Security Think Tank: Practical steps to achieve zero trust

In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading

By

• Petra Wenham