Security policy and user awareness

Malware being used to steal cash from ATMs

Criminals are using malware to steal cash from ATMs without debit and credit cards Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The future of digital government in the UK

In this week’s Computer Weekly, as the last political party conferences before the election come to an end, we examine the future of digital government in the UK, featuring interviews with Whitehall’s digital chief Mike Bracken and Labour’s policy leader Chi Onwurah. Also, we look at the growth of the open-source cloud computing platform Openstack, and find out what it’s like to be on the receiving end of a data breach. Read the issue now. Continue Reading

CW Europe - October 2014 Edition

BYOD policies: What’s allowed and what’s banned? As IT departments still try to come to terms with the notion of BYOD, CW Europe takes a look at what policies are being implemented to keep security under control. Continue Reading

Hacking IT from the inside

In this week’s Computer Weekly, car giant Daimler talks about its IT security strategy and the benefits of having its own in-house hacking team. App developers are under fire for collecting too much personal data – we examine the latest best practice. Our new buyer’s guide looks at virtualisation backup. And our review of Microsoft’s Surface Pro 3 tablet asks whether it can replace the laptop. Read the issue now. Continue Reading

Local authorities can improve data protection, says ICO audit

There is room for improvement in how local authorities protect personal data, says an audit report by the ICO Continue Reading

By

• Warwick Ashford, Senior analyst

Load balancing supports Kent County Council's VDI project

Kent County Council picks Kemp Technologies load balancers to support a deployment of VMware Horizon View and Workspace across its estate Continue Reading

By

• Alex Scroxton, Security Editor

Info sharing key to cyber defence, says financial services firm

Threat information sharing is key to success in combating cyber attacks, says the Depository Trust and Clearing Corporation Continue Reading

By

• Warwick Ashford, Senior analyst

Barclays passes government’s ‘internet-born threat’ test

Barclays Bank has been awarded the government’s cyber security certificate for digital banking services after independent tests of services such as Pingit Continue Reading

Adapting to life after Heartbleed

In this week’s Computer Weekly, we investigate the most significant flaw in recent history to impact the internet. The Heartbleed bug in OpenSSL leaves millions of internet servers vulnerable to attack. Hackers have already exploited Heartbleed to steal passwords from the Mumsnet parenting site. What can websites do to foil future attacks? Continue Reading

Cabinet Office vetoed Home Office plans for 'critical' e-Borders replacement

Home Office plans for IT systems to replace ageing border security systems that contain “critical vulnerabilities” were vetoed by the Cabinet Office Continue Reading

By

• Bryan Glick, Editor in chief

Hacktivism: good or evil?

IT lawyer Dai Davis looks at the rise of hacktivism and its impact on business and international politics Continue Reading

By

• Dai Davis, Percy Crow Davis & Co

IT Security Salary Index (UK)

Are you being paid the right rate for the job? Check out this IT Security salary index from Acumin. Continue Reading

— computerweekly.com

Indian CISOs to develop more business skills to succeed

Organizations require Chief Information Security Officers (CISOs) to be much more than just a technical expert but also possess business skills in today’s growing technology driven Indian market Continue Reading

By

• Shaleen Sinha

UK firms see 1,000+ internal data breaches a day, study finds

Internal threats are not a high priority for UK firms despite more than 1,000 internal data breaches a day Continue Reading

By

• Warwick Ashford, Senior analyst

Bank of England publishes Waking Shark II cyber security exercise results

Bank of England publishes the results of its Waking Shark II security exercise, which tested financial institutions' contingency plans for cyber attack Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

Internet at risk of 'cybergeddon' says WEF

Internet is at risk of fragmenting amid concerns over spying and cyber crime, says World Economic Forum Continue Reading

By

• Bill Goodwin, Investigations Editor

Top European IT initiative to support business in 2014?

Expanding IT to support business growth is one of the biggest areas of focus for IT departments in 2014, so what does this mean? Continue Reading

By

• Warwick Ashford, Senior analyst

Security considerations for UK enterprises

This Research Snapshot from Vanson Bourne looks at IT security spending trends, awareness of cyber-threats, and the factors perceived as the biggest security risks for organisations. Continue Reading

— Computer Weekly

Security Think Tank: Information security strategy should support the business

How should Edward Snowden's revelations about the NSA and GCHQ influence future information security strategies in the UK? Continue Reading

By

• Adrian Davis, (ISC)²

Bank robberies down 90% thanks to technology, says report

Robberies at British banks have fallen by over 90% in two decades, according to a report by the British Bankers’ Association Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

Can BlackBerry restore its business appeal?

In this week’s issue of Computer Weekly, we examine whether former Sybase chief, John Chen, will be able to stem the decline of BlackBerry and reinvent the the smartphone maker as a software business for the “bring your own device” (BYOD) era. Our buyer’s guide to the internet of things concludes with a look at how universal connectivity will yield insights in fields as diverse as aviation and hospitality. And we analyse Google’s attempts to compete with Amazon Web Services in public cloud. Continue Reading

Proof-of-concept malware jumps air gap with sound card

Researchers demonstrate proof-of-concept malware exfiltrating data using high-frequency transmissions inaudible to humans Continue Reading

By

• Warwick Ashford, Senior analyst

The Guardian denies Snowden stories damaged national security

Guardian editor Alan Rusbridger defends decision to publish stories on documents leaked by whistleblower Edward Snowden Continue Reading

By

• Warwick Ashford, Senior analyst

UK proposes formal talks on cyber security with China

Prime minister David Cameron has called on China to be more open about cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

EU calls on US to rebuild trust in post-Snowden era

The EC has called on the US to provide guarantees to restore trust in the wake of spying revelations Continue Reading

By

• Warwick Ashford, Senior analyst

European Parliament closes Wi-Fi after man-in-the-middle attack

A number of mailboxes have been compromised and users’ smartphones could be at risk following a man-in-the-middle attack on the European Parliament’s public Wi-Fi Continue Reading

By

• Jennifer Scott, TechTarget

FTSE 350 firms complete cyber risk assessment

Most FTSE 350 companies put cyber risk on the board agenda, but many need to improve how they manage that risk Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook authentication - Like?

As Cisco teams up with Facebook to offer authentication for public Wi-Fi, is this option safe for businesses? Continue Reading

By

• Steve Evans

Mass surveillance a bad idea, says Information Commissioner Christopher Graham

Information Commissioner Christopher Graham says issues of national security must not overshadow concerns of legitimate public interest Continue Reading

By

• Warwick Ashford, Senior analyst

Global profiles of the fraudster

Computers, rather than conmen, are set to be the future face of fraud, as criminals turn to robotics in an effort to avoid detection, this report from KPMG reveals. Continue Reading

— ComputerWeekly.com

Analysis: RSA says security needs to change, but what does that mean?

RSA executive chairman Art Coviello has issued a call to action to the security industry to improve technology and collaboration Continue Reading

The ICO issues BYOD warning after breach

The ICO is calling on organisations to ensure data protection policies reflect how employees are using personal devices for work Continue Reading

By

• Warwick Ashford, Senior analyst

10 security reasons to upgrade to iOS 7

Even if it did not include numerous security fixes, iOS 7 has compelling reasons for corporates to adopt it to improve their security Continue Reading

By

• Rob Buckley

Is India’s cyber policy all words and no action?

The Indian government is trying to strengthen cyber security with the new cyber policy, but little is yet understood about how the ambitious proposals will be put in place Continue Reading

By

• Viraj V Desai

Privacy concerns in the digital world

Considering the full spectrum of privacy, people need to ask themselves if they are comfortable with all their characteristics in the public domain Continue Reading

By

• Yves Le Roux, (ISC)2

NSA reveals how Snowden accessed secret Prism files

Prism whistleblower Edward Snowden accessed secret documents through a file-share, the NSA has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

NSA and GCHQ unlock online privacy encryption

UK and US intelligence agencies have unlocked the technology used to encrypt online services, including email, online banking and medical records. Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

Windows 2012 Server Network Security

This book chapter offers an introduction to Windows 8 and Windows Server 2012 network security and IPv6. It includes a 30% discount code for Computer Weekly readers. Continue Reading

— ComputerWeekly.com

Windows Server 2012 Security from End to Edge and Beyond

This extract from the book Windows Server 2012 Security from End to Edge and Beyond shows you how to plan your platform security requirements and gives you the critical questions to ask. Continue Reading

— ComputerWeekly.com

Printing: a false sense of security?

Louella Fernandes and Bob Tarzey show how secure printing technology can provide authentication, authorisation and accounting capabilities, helping businesses improve document security and meet compliance regulations. Continue Reading

— ComputerWeekly.com

Rapid7 United 2013 Security Summit

View the pics from Rapid7’s recent security summit in Boston. Continue Reading

By

• Kayleigh Bateman, Computer Weekly

Case study: Keeping it private at Beth Israel Deaconess after the Boston Marathon Attacks

Doctor and healthcare CIO shares his lessons learned from the Boston Marathon attacks and how to protect patient data Continue Reading

By

• Kayleigh Bateman, Computer Weekly

Targeted attacks and how to defend against them

Analysts Bob Tarzey and Louella Fernandes assess the scale and real impact of targeted attacks the measures being taken to defend against them. Continue Reading

— ComputerWeekly.com

Top 10 Android security tips

As Android becomes more prevalent in the enterprise, Computer Weekly gives you 10 top tips for keeping your devices secure Continue Reading

By

• Paul Marchant

Websites hacked to show child abuse images

More than 25 business websites worldwide have been hacked to show illegal images of child sex abuse Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

Big data journalism exposes offshore tax dodgers

How journalists harnessed big data to challenge offshore financial secrecy Continue Reading

By

• Duncan Campbell and Craig Shaw

FireEye partners with Phishme for multi-layered security

Security technology developer FireEye has partnered with phishing awareness training firm PhishMe to offer a multi-layered approach to securing information networks Continue Reading

By

• Warwick Ashford, Senior analyst

Insider threat: Balancing security with privacy

How can organisations increase security without affecting productivity or encroaching on employees’ right to privacy? Continue Reading

By

• Warwick Ashford, Senior analyst

IT security case studies

Four critical IT security case-studies selected from the winners of Computer Weekly's European User Awards for security Continue Reading

— ComputerWeekly.com

Needle in a Datastack: The rise of big security data

This research from McAfee investigates how well organisations are positioned to address the challenges of managing security in a world of ever increasing amounts and types of data. Continue Reading

— ComputerWeekly.com

2013 Cost of Data Breach Study: UK

The cost of data breaches has risen for UK organisations over the past year, the Ponemon Institute reveals. Continue Reading

— computerweekly.com

Security Think Tank Download: Bring your own device

Downloadable guide. How to make your company secure when you introduce BYOD. Continue Reading

— computerweekly.com

IT Security Case Studies

Warwick Ashford presents 4 essential IT security case-studies selected from the winners of Computer Weekly's European User Awards. Continue Reading

— computerweekly.com

FBI warns of increased spear phishing attacks

The FBI has issued a warning about an increase in spear-phishing attacks targeting multiple industry sectors Continue Reading

By

• Warwick Ashford, Senior analyst

Most firms underestimate volume of malware, study shows

Most companies greatly underestimate the number of malicious programs appearing daily, a global survey of more than 2,000 IT professionals has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Government launches cyber awareness campaign

UK government debuts the first stage of a £4m cyber awareness campaign as part of the National Cyber Security Programme Continue Reading

By

• Warwick Ashford, Senior analyst

2013 Cost of Data Breach Study: UK

The cost of data breaches has risen for UK organisations over the past year, but companies that appoint chief information security officers with enterprise-wide responsibilities can reduce their costs, this report from the Ponemon Institute reveals Continue Reading

— Computer Weekly

Human error causes most data breaches, Ponemon study finds

Human errors and system problems caused two-thirds of data breaches in 2012, according to a study from Symantec and the Ponemon Institute Continue Reading

By

• Warwick Ashford, Senior analyst

Privileged accounts key to most APT attacks, says Cyber-Ark

The theft, misuse and exploitation of privileged accounts is becoming an increasingly key tactic in advanced persistent threat attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals hack Washington court system

Hackers gain access to the personal data of 160,000 US citizens after compromising Washington State court service servers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Computer Weekly European User Awards for Security: Winners

The winners are in for the Computer Weekly European User Awards for Security. See who made the top spots. Continue Reading

By

• Kayleigh Bateman, Computer Weekly

CW buyer's guide: context-aware security

This 11-page Computer Weekly buyer's guide looks at how organisations should approach context-aware security technologies and what business benefits they can deliver. Continue Reading

— Computer Weekly

CW Special Report on CSC

This 16-page report from Computer Weekly analyses the challenges facing CSC, its financial performance, the services it offers, its place in the IT market and its future strategy. Continue Reading

— Computer Weekly

Another online firm hit by data breach

Online deals service LivingSocial is the latest company to report a breach of its computer systems that may mean attackers accessed customer details Continue Reading

Protecting against modern password cracking

This article in our Royal Holloway Security Thesis series explains just how insecure passwords are and offers advice on alternative methods of security. Continue Reading

— Computer Weekly

How to create a good information security policy

Information security policies provide vital support to security professionals, yet few organisations take the time to create decent policies Continue Reading

By

• Andi Scott

Bots and web apps among top threats to data security, says Check Point

Bots, viruses, breaches and attacks are a constant and real threat to the information security of organisations Continue Reading

By

• Warwick Ashford, Senior analyst

Porn websites pose malware risk, says researcher

Browsing popular pornography internet sites pose a growing risk of malware infection, according to a security researcher Continue Reading

By

• Warwick Ashford, Senior analyst

Effective print security for SMBs

Analysts Louella Fernandes and Clive Longbottom discuss how integrated print management provides SMBs with a simple and scalable approach for print security. Continue Reading

— Computer Weekly

US Army practises poor data security on mobile devices

Pentagon inspector general finds smartphones and tablets the US Army buys are not configured to protect sensitive data and allow remote wipe Continue Reading

By

• Warwick Ashford, Senior analyst

Employees ignore security rules, say infosec pros

Most information security professionals believe corporate employees wilfully ignore security rules, survey at RSA Conference 2013 reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Phishing emails sent in pairs to lend authenticity, says training company

Phishing emails are now being deployed in pairs to create the illusion of authenticity, says security awareness training company PhishMe Continue Reading

By

• Warwick Ashford, Senior analyst

The security risk sweeping Europe

Never have we been so open about the information we share online, without so little concern for our privacy. Social media can be a threat to a company, not just to what information an employee chooses to disclose, but because social media sites are prime targets for cybercrime. In this issue of CW Europe read how the increase in social media usage has created new privacy concerns for businesses. Continue Reading

Security the future: Keeping up with the business

Gareth Lindahl-Wise, group information security manager at British American Tobacco, explains the company's approach to enterprise security architecture. Continue Reading

— ComputerWeekly

350,000 different types of spam SMS messages were targeted at mobile users in 2012

350,000 different variants of unsolicited spam SMS messages were accounted for in 2012, with 53,000 variants logged for December alone Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

Health records should be protected like bank details, says BCS

The BCS and NHS say people should protect their online medical records in the same way they look after their bank details Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The Demise in Effectiveness of Signature and Heuristic Based Antivirus

Anti-virus technology is failing to protect organisations from malicious attacks. Security professionals should look at alternative strategies, the NNC group argues in this report. Continue Reading

— www.ComputerWeekly.com

Bad outsourcing decisions cause 63% of data breaches

Bad outsourcing decisions nearly two-thirds of data breaches investigated by security firm Trustwave in the past year Continue Reading

By

• Warwick Ashford, Senior analyst

How to find the most vulnerable systems on your internal network

Most corporate networks share common vulnerabilities, but many could be mitigated with education in “hacker thinking” for technical staff Continue Reading

By

• Peter Wood, First Base Technologies LLP

Social media: A security challenge and opportunity

Generation Y workers are posing increasing security challenges to their employers as they share data unreservedly Continue Reading

By

• Warwick Ashford, Senior analyst

Encryption is safe bet, says SafeNet

Encryption is the only thing that can give peace of mind to CIOs and CISOs, says Dave Hansen, president and CEO of security firm SafeNet Continue Reading

By

• Warwick Ashford, Senior analyst

Security visualisation

This article is guideline of how to generate a visual representation of a given dataset and use in the evaluation of known security vulnerabilities Continue Reading

— ComputerWeekly.com

UK Border Agency tenders for security systems

The UK Border Agency (UKBA) and Border Force is tendering for an integrated border security system Continue Reading

By

• Kathleen Hall, TechTarget

Highlights from PwC’s State of Information Security Survey, India 2013

We bring you excerpts from PwC’s India survey on the state of information security as part of this photofeature. Continue Reading

By

• SearchSecurity.in staff

2012 Cost of Cyber Crime Study: UK

The 2012 Cost of Cyber Crime Study: United Kingdom is independently conducted by Ponemon Institute. The benchmark study, sponsored by HP Enterprise Security is based on a representative sample of 38 organisations in various industry sectors. Continue Reading

— www.computerweekly.com

IT Security Purchasing Intentions 2013

This in-depth research from Computer Weekly and TechTarget reveals the IT security spending priorities of businesses in the UK and Europe. Continue Reading

— www.computerweekly.com

Cyber criminals target Skype, Facebook and Windows users

Cyber criminals targeted users of Skype, Facebook and Windows using multiple Blackhole exploits in October, according to security firm GFI Software Continue Reading

By

• Warwick Ashford, Senior analyst

Nasa to encrypt data after latest breach

Nasa is to encrypt all its mobile computers after the loss of a laptop containing personal information about more than 10,000 staff Continue Reading

By

• Warwick Ashford, Senior analyst

The Global State of Information Security Survey 2013: Key Findings

This global study examines the state of cyber-security and the impact of cyber crime and offers advice to businesses on reducing the risks. Continue Reading

— www.computerweekly.com

‘VM-aware’ viruses on the rise

Viruses targeting virtual machines (VM) are growing in numbers and will soon be the dominant force in the world of cyber crime, says Kaspersky Continue Reading

By

• Jennifer Scott, TechTarget

ICO hits Stoke-on-Trent City Council with £120,000 fine

Stoke City Council has breached the Data Protection Act, for the second time in two years, after details of a child protection legal case were emailed to the wrong person. Continue Reading

By

• Jennifer Scott, TechTarget

CW500: Managing the mobile workforce (part 1)

Mobile working has transformed Colt Telecommunications beyond recognition over the past three years Continue Reading

By

• Bill Goodwin, Investigations Editor

Android devices vulnerable to security breaches

More than 50% of devices running Google's Android OS have unpatched vulnerabilities, opening them up to malicious apps and other attacks Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

IT security awareness needs to be company-wide, says (ISC)²

Information security awareness needs to be more robust, started as early as possible, continually reinforced and organisation-wide, says Julie Peeler, director, (ISC)² Foundation Continue Reading

By

• Warwick Ashford, Senior analyst

IT in Europe, Security Edition: Password security standards and trends

Passwords have long been a security problem. This IT in Europe: Security Edition looks at password trends and alternative forms of authentication. Continue Reading

By

• SearchSecurity.co.UK Staff

ICO stands by unpopular UK cookie legislation with advice, warnings

Website owners have resisted compliance with cookie legislation so the ICO has issued more guidance and warnings to nudge them along. Continue Reading

By

• Ron Condon

Segregation of duties: Small business best practices

Segregating duties can be tough in organisations that have few staff members and resources. Get duty segregation best practices for SMBs. Continue Reading

By

• Michael Cobb

Concerned about tablet security issues? Some are, others not so much

Users love their tablets, but security pros are concerned about tablet security issues. However, though tablets bring new threats, not everyone is ringing the alarm. Continue Reading

By

• Ron Condon

Map your data classification policy to controls effectively: How-to

Data classification policy plays an important role in control implementation and effectiveness. We take a look at the involved parameters. Continue Reading

By

• Vishal Gupta

Scholarships aim to encourage women to pursue cybersecurity careers

To boost the percentage of women in IT security careers, (ISC)2 has instituted two new scholarships, each totalling up to $40,000 per year. Continue Reading

By

• Ron Condon