Web application security
- 
				E-Zine
					07 Oct 2025
					
								  Is the UK’s digital ID scheme doomed to fail?In this week’s edition of Computer Weekly, we take a look at the government’s somewhat controversial plan to introduce a national, compulsory digital ID scheme. Ranil Boteju, chief data and analytics officer at Lloyds Banking Group, also runs us through how the financial services giant is planning to use agentic AI to improve the customer experience. In the third part of our buyer’s guide on cloud management and security, details about the plethora of security tools that exist for enterprises looking to manage their Amazon Web Services stacks gets the deep-dive treatment. And, in our final feature in the issue, we look at the evolution in mobile app technology within the retail space. Read the issue now. Continue Reading 
- 
				News
					06 Oct 2025
					
									
										  Oracle patches E-Business suite targeted by Cl0p ransomwareOracle pushes a patch for a dangerous zero-day under active exploitation by one of the most notorious ransomware gangs around Continue Reading By- Alex Scroxton, Security Editor
 
- 
                Opinion
                03 Feb 2025
                  Vigilant buyers are the best recipe for accountable suppliersIn January 2025, outgoing CISA chief Jen Easterly called on IT buyers to demand better security standards from their software suppliers. The Security Think Tank considers what better means, and what does best practice for secure software procurement looks like in 2025. Continue Reading By- Aditya K Sood, Aryaka
 
- 
                News
                03 Feb 2025
                  DeepSeek-R1 more readily generates dangerous content than other large language modelsResearch scientists at cyber firm Enkrypt AI publish concerning findings from a red team exercise conducted against DeepSeek, the hot new generative AI tool Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                31 Jan 2025
                  AI jailbreaking techniques prove highly effective against DeepSeekResearchers at Palo Alto have shown how novel jailbreaking techniques were able to fool breakout GenAI model DeepSeek into helping to create keylogging tools, steal data, and make a Molotov cocktail Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                31 Jan 2025
                  DeepSeek API, chat log exposure a ‘rookie’ cyber errorSecurity researchers at Wiz find a trove of DeepSeek data including API secrets and chat logs publicly exposed via an open source database management tool, raising questions about the fast-growing service’s approach to security Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                29 Jan 2025
                  How government hackers are trying to exploit Google Gemini AIGoogle’s threat intel squad has shared information on how nation state threat actors are attempting to exploit its Gemini AI tool for nefarious ends Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                23 Jan 2025
                  ICO launches major review of cookies on UK websitesICO sets out 2025 goals, including a review of cookie compliance across the UK’s top 1,000 websites, as it seeks to achieve its ultimate goal of giving the public meaningful control over how their data is used Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                22 Jan 2025
                  APAC businesses face surge in email attacksSophisticated phishing and business email compromise campaigns are increasingly targeting organisations across the Asia-Pacific region, research reveals Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                News
                17 Jan 2025
                  US Supreme Court upholds TikTok banThe US Supreme Court has upheld a legal ban on TikTok, meaning that the video-sharing application will be shut down from midnight on Sunday 19 January Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                16 Jan 2025
                  Russia’s Star Blizzard pivots to WhatsApp in spear-phishing campaignThe Russian cyber spy operation known as Star Blizzard changed tactics after a takedown operation by Microsoft and the US authorities, turning to widely used messaging platform WhatsApp to try to ensnare its targets Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                15 Jan 2025
                  Users protest, flee TikTok as clock ticks on US banAs the US Supreme Court prepares to rule on the future of TikTok, rumours of a sale are swirling around Washington DC while panicked users make plans for an exodus Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                15 Jan 2025
                  Biggest Patch Tuesday in years sees Microsoft address 159 vulnerabilitiesThe largest Patch Tuesday of the 2020s so far brings fixes for more than 150 CVEs ranging widely in their scope and severity – including eight zero-day flaws Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                03 Jan 2025
                  US Treasury incident a clear warning on supply chain security in 2025A cyber incident at the US Department of the Treasury – blamed on a Chinese state actor – raises fresh warnings about supply chain risk after it was found to have originated via vulnerabilities in a remote tech support product Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                18 Dec 2024
                  Top 10 cyber security stories of 2024Data breaches, data privacy and protection, and the thorny issue of open source security were all hot topics this year. Meanwhile, security companies frequently found themselves hitting the headlines, and not always for good reasons. Here are Computer Weekly's top 10 cyber security stories of 2024 Continue Reading By- Alex Scroxton, Security Editor
 
- 
                Opinion
                17 Dec 2024
                  2025-30: Geopolitical influence on cyber and the convergence of threatFrom Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading By- Rob Dartnall, SecAlliance
 
- 
                News
                13 Dec 2024
                  How AWS is protecting customers from cyber threatsAmazon Web Services reveals how its threat intelligence capabilities work under the hood to thwart cyber attacks and keep its customers’ data safe Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                Opinion
                12 Dec 2024
                  CISOs: Don’t rely solely on technical defences in 2025From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading By- Deepti Gopal, Gartner
 
- 
                News
                10 Dec 2024
                  Dangerous CLFS and LDAP flaws stand out on Patch TuesdayMicrosoft has fixed over 70 CVEs in its final Patch Tuesday update of the year, and defenders should prioritise a zero-day in the Common Log File System Driver, and another impactful flaw in the Lightweight Directory Access Protocol Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                10 Dec 2024
                  iOS vuln leaves user data dangerously exposedJamf threat researchers detail an exploit chain for a recently patched iOS vulnerability that enables a threat actor to steal sensitive data, warning that many organisations are still neglecting mobile updates Continue Reading By- Alex Scroxton, Security Editor
 
- 
                Opinion
                06 Dec 2024
                  Six trends that will define cyber through to 2030From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading By- Pierre-Martin Tardif, ISACA
 
- 
                News
                06 Dec 2024
                  US TikTok ban imminent after appeal failsTikTok’s appeal against a US government ban has failed, with a judge dismissing its arguments that its First Amendment free speech rights are being restricted Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                04 Dec 2024
                  Nordics move to deepen cyber security cooperationNordic countries are increasing collaboration on cyber security amid more sophisticated and aggressive attacks Continue Reading By- Gerard O'Dwyer
 
- 
                E-Zine
                03 Dec 2024
                  Curing cancer with computersIn this week’s Computer Weekly, we go behind the scenes at the Francis Crick Institute to find out how data science and AI support its groundbreaking medical research. As courts on both sides of the Atlantic target Google, we analyse the legal threats for Big Tech. And our latest buyer’s guide examines cloud and object storage. Read the issue now. Continue Reading 
- 
                Feature
                29 Nov 2024
                  Automated patch management: A proactive way to stay ahead of threatsTimely patch management should be crucial in any organisation, but too often it goes by the wayside. Automating the process may offer a path forward for hard-pressed cyber defenders Continue Reading By
- 
                Opinion
                27 Nov 2024
                  In the cloud, effective IAM should align to zero-trust principlesThe Security Think Tank considers best practices in identity and access management and how can they be deployed to enable IT departments to combat cyber-attacks, phishing attacks and ransomware Continue Reading By- Vladimir Jirasek, Foresight Cyber
 
- 
                News
                20 Nov 2024
                  Apple addresses two iPhone, Mac zero-daysTwo zero-day vulnerabilities uncovered in Apple’s operating systems could have allowed for arbitrary code execution and cross-site scripting attacks Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                19 Nov 2024
                  AI readiness stalls in APACDespite significant investment in AI, only 15% of organisations in Asia-Pacific are ready to deploy the technology today, according to Cisco’s latest regional AI readiness survey Continue Reading 
- 
                News
                18 Nov 2024
                  UK consumers losing more than ever to holiday scamsLast Christmas, UK consumers lost over £11m to cyber criminals. This year, to save them from tears, the NCSC and Action Fraud are teaming up to launch an anti-fraud campaign Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                12 Nov 2024
                  Microsoft fixes 89 CVEs on penultimate Patch Tuesday of 2024High-profile vulns in NTLM, Windows Task Scheduler, Active Directory Certificate Services and Microsoft Exchange Server should be prioritised from November’s Patch Tuesday update Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                12 Nov 2024
                  Zero-day exploits increasingly sought out by attackersThreat actors increasingly favour zero-day exploits to attack their victims before patches become available, according to the NCSC and CISA, which have just published a list of the most widely used vulnerabilities of 2023 Continue Reading By- Alex Scroxton, Security Editor
 
- 
                Feature
                08 Nov 2024
                  What are the security risks of bring your own AI?The rise of generative AI has led to a plethora of publicly accessible artificial intelligence tools, but what are the risks when external AI tools are used with corporate data? Continue Reading 
- 
                News
                25 Oct 2024
                  Dutch critical infrastructure at risk despite high leadership confidenceStark paradox in Dutch cyber security landscape has business leaders expressing high confidence in their IT infrastructure as cyber attacks rise Continue Reading By- Kim Loohuis
 
- 
                News
                22 Oct 2024
                  Danish government reboots cyber security council amid AI expansionDenmark’s government relaunches digital security initiative to protect business sectors and society at large Continue Reading By- Gerard O'Dwyer
 
- 
                Feature
                15 Oct 2024
                  Reinventing security operations for the modern threat landscapeThe growing pace of digital transformation has opened new avenues for attackers, making traditional security measures obsolete. Organisations must modernise their security operations to fortify their defences and navigate the evolving threat landscape Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                News
                09 Oct 2024
                  Five zero-days to be fixed on October Patch TuesdayStand-out vulnerabilities in Microsoft’s latest Patch Tuesday drop include problems in Microsoft Management Console and the Windows MSHTML Platform Continue Reading By- Alex Scroxton, Security Editor
 
- 
                Opinion
                03 Oct 2024
                  Rise of the cyber clones: When seeing isn’t believingIt is frighteningly easy to clone someone else's identity using readily-available artificial intelligence tools Continue Reading By- Jake Moore, ESET
 
- 
                Opinion
                30 Sep 2024
                  The cyber industry needs to accept it can't eliminate riskThe Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading By- Paul Lewis, Nominet
 
- 
                News
                27 Sep 2024
                  UK on high alert over Iranian spear phishing attacks, says NCSCThe NCSC and counterpart agencies in the US have issued a warning over enhanced Iranian spear phishing activity targeting politicians, journalists, activists and others with an interest in Middle Eastern affairs Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                27 Sep 2024
                  Printing vulnerability affecting Linux distros raises alarmSecurity pros need to get in front of a series of vulnerabilities affecting the Cups Linux printing service after an apparently botched disclosure process saw technical details published in advance of a patch Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                25 Sep 2024
                  CrowdStrike apologises to US government for global mega-outageCrowdStrike executive Adam Meyers appears before a US government committee to explain the series of errors that led directly to one of the biggest IT outages in history Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                23 Sep 2024
                  Microsoft shares progress on Secure Future InitiativeMicrosoft has published a progress report on its Secure Future Initiative, launched last year in the wake of multiple security incidents, and made a series of commitments to improve its internal cyber culture Continue Reading By- Alex Scroxton, Security Editor
 
- 
                Opinion
                23 Sep 2024
                  Security Think Tank: Win back lost trust by working smarterThe Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading By- Vladimir Jirasek, Foresight Cyber
 
- 
                News
                17 Sep 2024
                  First CyberBoost Catalyse startup cohort namedThe first group of companies named to a cyber incubator programme run by Plexal and the National University of Singapore includes two growing UK businesses Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                13 Sep 2024
                  Cyber workforce must almost double to meet global talent needResearch from ISC2 finds global cyber workforce needs additional 4.8 million people to fully secure businesses Continue Reading By- Clare McDonald, Business Editor
 
- 
                News
                11 Sep 2024
                  How Sonar is elevating code quality in the age of AISonar’s code quality platform helps developers maintain secure, high-quality code amid the rise of artificial intelligence-based coding assistants, now expanding into the Asian market Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                News
                10 Sep 2024
                  JFrog and GitHub unveil open source security integrationsSecure software specialist JFrog is working with code development service GitHub to integrate the onboard capabilities of its Software Supply Chain Platform service into GitHub’s platform Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                09 Sep 2024
                  Multiple Veeam vulns spark concern among defendersVeeam users are urged to patch a series of vulnerabilities in the firm’s Backup & Replication product to get out ahead of potential exploitation by ransomware gangs Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                04 Sep 2024
                  PyPI loophole puts thousands of packages at risk of compromiseThousands of PyPI packages are at risk of an attack technique dubbed Revival Hijack, which exploits a loophole in the platform’s package naming feature Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                28 Aug 2024
                  Global cyber spend to rise 15% in 2025, pushed along by AISecurity spending will increase at pace in 2025, with artificial intelligence, cloud and consultancy services all pushing outlay to new highs, according to Gartner Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                28 Aug 2024
                  How Kaspersky is driving growth in APACKaspersky is leveraging its threat intelligence capabilities and local market knowledge to navigate geopolitical tensions and expand its footprint across the Asia-Pacific region Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                News
                20 Aug 2024
                  Phishing links becoming bigger threat than email attachmentsPhishing techniques are evolving away from malicious email attachments, according to a report Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                19 Aug 2024
                  Popular Microsoft apps for Mac at risk of code injection attacksResearchers at Cisco Talos turn up evidence suggesting that Microsoft apps running on the Apple macOS operating system are not as secure as they seem Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                16 Aug 2024
                  Thousands of NetSuite customers accidentally exposing their dataMisconfigured permissions across live websites are leaving thousands of NetSuite users open to having their valuable customer data stolen, researchers say Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                14 Aug 2024
                  August Patch Tuesday proves busy with six zero-days to fixMicrosoft patches six actively exploited zero-days among over 100 issues during its regular monthly update Continue Reading By- Alex Scroxton, Security Editor
 
- 
                Feature
                09 Aug 2024
                  Deep dive into quantum-resistant cryptography for email securityQuantum computers have the potential to crack many of the encryption methods we currently rely on to keep our digital communications safe. Quantum-resistant cryptography may be the answer Continue Reading By
- 
                News
                06 Aug 2024
                  2024 seeing more CVEs than ever before, but few are weaponisedThe number of disclosed CVEs soared by 30% in the first seven-and-a-half months of the year, but a tiny fraction of these have been exploited by threat actors, a reminder of the importance of focused security strategies Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                05 Aug 2024
                  Chinese cyber attack sparks alert over six-year-old MS vulnAfter a proof-of-concept for a six-year-old Microsoft vulnerability emerged in a Chinese APT attack chain, defenders should be on the look-out for exploitation of CVE-2018-0824 Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                01 Aug 2024
                  CrowdStrike shareholders sue, alleging false security claimsA US pension fund is lining up a lawsuit against CrowdStrike, claiming the cyber company lied about the integrity of its systems, leading to failings that caused a worldwide IT outage Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                31 Jul 2024
                  API attacks surge by 65% in APAC, fuelled by rapid digitisationAkamai's report reveals a significant rise in cyber attacks on web applications and APIs in the region over the past year, with financial and commerce sectors hardest hit Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                Feature
                29 Jul 2024
                  CrowdStrike update chaos explained: What you need to knowA botched software update at cyber security firm CrowdStrike has caused IT chaos around the world. Learn more about the global CrowdStrike update outage as it develops Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                29 Jul 2024
                  Scam CrowdStrike domains growing in volumeHundreds of malicious domains exploiting CrowdStrike’s branding are appearing all over the web in the wake of the 19 July outage. Experts from Akamai share some noteworthy examples, along with guidance on how to avoid getting caught out Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                29 Jul 2024
                  CrowdStrike says most Falcon sensors now up and runningThe vast majority of CrowdStrike Falcon sensors affected by a coding error have now been recovered, with a final resolution expected this week Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                24 Jul 2024
                  CrowdStrike blames outage on content configuration updateCrowdStrike publishes the preliminary findings of what will be a lengthy investigation into the root causes of the failed 19 July update that caused Windows computers to crash all over the world Continue Reading By- Alex Scroxton, Security Editor
 
- 
                Blog Post
                24 Jul 2024
                  CrowdStrike reveals Windows weaknessThe bug that impacted 8.5m PCs last week was, says, CrowdStrike due to an update it refers to as “Rapid Response Content”, which is delivered as a “template instance”. This is data stored in a ... Continue Reading By- Cliff Saran, Managing Editor
 
- 
                News
                23 Jul 2024
                  Innovations to power secure-by-design developmentSecure Code Warrior unveils technology designed to help CISOs and AppSec teams ensure their projects remain safe and free of coding errors and vulnerabilities – a big issue following the CrowdStrike incident Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                22 Jul 2024
                  CrowdStrike chaos shows risks of concentrated ‘big IT’The concentration of so much mission-critical technology in the hands of a few large suppliers makes incidents like the Microsoft-CrowdStrike outage all the more dangerous Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                16 Jul 2024
                  Incubator Plexal heads to Singapore for CyberBoostCyber startup hub Plexal expands its presence to Singapore through a new initiative, and sets its sights on helping new UK businesses break into the booming Asia-Pacific market Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                11 Jul 2024
                  Dutch research firm TNO pictures the SOC of the futureIn only a few years, security operations centres will have a different design and layout, and far fewer will remain Continue Reading By- Kim Loohius
 
- 
                News
                09 Jul 2024
                  Hyper-V zero-day stands out on a busy Patch TuesdayMicrosoft has fixed almost 140 vulnerabilities in its latest monthly update, with a Hyper-V zero-day singled out for urgent attention Continue Reading By- Alex Scroxton, Security Editor
 
- 
                Blog Post
                02 Jul 2024
                  IT's a vulnerable world out there...It was a pleasure to catch up t’other day with Rik “rock star” Ferguson, the former Trend Micro legend who is these days hanging out with Forescout as the company’s VP of Security Intelligence, ... Continue Reading By- Steve Broadhead, Broadband Testing
 
- 
                News
                28 Jun 2024
                  How Recorded Future is operationalising threat intelligenceRecorded Future is investing in APIs to enable automated security workflows, among other measures, to help organisations overcome the hurdles of operationalising threat intelligence Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                News
                13 Jun 2024
                  Black Basta ransomware crew may be exploiting Microsoft zero-dayA Microsoft vulnerability that was addressed without fanfare in March may in fact have been exploited as a zero-day by the notorious Black Basta ransomware gang, threat hunters warn Continue Reading By- Alex Scroxton, Security Editor
 
- 
                Opinion
                13 Jun 2024
                  Data leakage in the cloud – can data truly be safe in the cloud?This month, the Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading By- Scott Swalling
 
- 
                News
                07 Jun 2024
                  Sophos uncovers Chinese state-sponsored campaign in Southeast AsiaSophos found three distinct clusters of activity targeted at a high-level government organisation that appeared to be tied to Chinese interests in the South China Sea Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                Opinion
                04 Jun 2024
                  Building a more secure, and sustainable, open source ecosystemIn April 2024, the discovery of an intentionally-placed backdoor in the open source XZ Utils data compression caused concern. Sentry's Chad Whitacre says a more thoughtful approach is needed to balance the individual freedom and creativity of open source, with more rigorous security practice. Continue Reading By- Chad Whitacre
 
- 
                News
                29 May 2024
                  Proofpoint exposes AFF scammers’ piano gambitRansomware and nation state actors dominate the headlines, but fraud and scams still net career cyber criminals thousands from unsuspecting members of the public. Proofpoint reports on a campaign targeting victims of a musical inclination Continue Reading By- Alex Scroxton, Security Editor
 
- 
                Opinion
                29 May 2024
                  How to avoid joining the Dead Java Code SocietyUnused or dead Java code is bogging down software engineers and developers, causing weird dependencies and security risks. Eric Costlow of Azul shares some advice on how to avoid becoming a member of a rather unpleasant club Continue Reading By- Eric Costlow
 
- 
                News
                22 May 2024
                  ORBs: Hacking groups’ new favourite way of keeping their attacks hiddenBeware the ORB: why attacks on your network could come from a home router down the street Continue Reading By
- 
                News
                15 May 2024
                  Critical SharePoint, Qakbot-linked flaws focus of May Patch TuesdayA critical SharePoint vulnerability warrants attention this month, but it is another flaw that seems to be linked to the infamous Qakbot malware that is drawing attention Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                06 May 2024
                  Microsoft beefs up cyber initiative after hard-hitting US reportMicrosoft is expanding its recently launched Secure Future Initiative in the wake of a hard-hitting US government report on recent nation state intrusions into its systems Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                03 May 2024
                  Adobe expands bug bounty programme to account for GenAIAdobe has expanded the scope of its HackerOne-driven bug bounty scheme to incorporate flaws and risks arising from the development of generative artificial intelligence Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                02 May 2024
                  How Okta is fending off identity-based attacksOkta has been bolstering the security of its own infrastructure and building new tools to scan customer environments for vulnerable identities, among other efforts to fend off identity-based attacks Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                News
                01 May 2024
                  Australia’s Qantas apologises for mobile app data breachAustralian flag carrier Qantas has apologised after a glitch in its mobile application temporarily enabled some customers to view the flights and booking details of other frequent fliers on two separate occasions Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                01 May 2024
                  Secure coding benchmark to increase standards among developersDeveloper security advocate Secure Code Warrior has launched what it claims is the industry’s first benchmark designed to quantify the security competence of its customers’ software developer teams Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                30 Apr 2024
                  Bad bot traffic in Australia grew 23% in 2023Traffic from bad bots that perform malicious tasks accounted for 30.2% of Australia’s internet traffic in 2023 Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                News
                25 Apr 2024
                  Zero trust is a strategy, not a technologyZero-trust security should be seen as a strategy to protect high-value assets and is not tied to a specific technology or product, says the model’s creator John Kindervag Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                News
                24 Apr 2024
                  Mandatory MFA pays off for GitHub and OSS communityMandating multifactor authentication for select developers has been a huge success for GitHub, the platform reports, and now it wants to go further Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                24 Apr 2024
                  Cyber training leader KnowBe4 to buy email security firm EgressSecurity awareness training and phishing simulation specialist KnowBe4 is to buy email security expert Egress Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                24 Apr 2024
                  TikTok ban sails through US SenateA law that will ban TikTok in the US unless its owner sells up pronto passed the US Senate by a landslide majority after being included in a package of military aid Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                16 Apr 2024
                  CW Innovation Awards: Balancing security and user experienceThe National University of Singapore’s Safe initiative has strengthened the security of IT systems and end-user devices while prioritising user experience through passwordless access Continue Reading By
- 
                News
                15 Apr 2024
                  More social engineering attacks on open source projects observedIn the wake of the recent XZ Utils scare, maintainers of another open source project have come forward to say they may have experienced similar social engineering attacks Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                12 Apr 2024
                  Apple iPhone security alert renews spyware concernsAn Apple security alert received by users in 92 countries raises fresh fears over ongoing campaigns by users of mercenary spyware products Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                10 Apr 2024
                  Cyber crooks poison GitHub search to fool developersResearchers share data on new technique whereby malicious actors are manipulating GitHub’s search function and using cleverly crafted repositories to distribute malware Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                10 Apr 2024
                  Salesforce helps customers establish bug bounty programmesSalesforce has added new learning content to its Trailhead platform designed to help customers develop their own bug bounty programmes Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                08 Apr 2024
                  What Cisco’s Splunk acquisition means for APAC customersAPAC organisations can expect better visibility and insights into their networks and applications along with automation and response capabilities to improve their digital resilience Continue Reading By- Aaron Tan, Informa TechTarget
 
- 
                News
                01 Apr 2024
                  Open source alert over intentionally placed backdoorA backdoor in the open source XZ Utils data compression library could have led to widespread compromise across the Linux ecosystem - and the community is on the trail of a developer who seems to be behind it Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                29 Mar 2024
                  Organisations getting better at spotting identity fraudAs the barriers to committing identity fraud continue to drop, organisations should consider more sophisticated technical measures to successfully up their game, according to a report Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                28 Mar 2024
                  UK plc going backwards on cyber maturity, Cisco report claimsFewer UK organisations believe their cyber security postures have reached a mature level than did so 12 months ago, as they struggle to keep up with new challenges and a fast-evolving threat landscape Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                27 Mar 2024
                  Cyber spies, not cyber criminals, behind most zero-day exploitationAnalysis from Google has found that zero-day vulnerabilities are much more heavily exploited for espionage purposes than for financially motivated cyber crime Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                21 Mar 2024
                  US sues Apple, alleging smartphone monopolyA major legal action against Apple over its dominance of the smartphone market has kicked off in the US, alleging anticompetitive practices on Apple’s part that have damaged the sector and restricted consumer choice Continue Reading By- Alex Scroxton, Security Editor
 
- 
                News
                19 Mar 2024
                  Australia’s cyber security spending to grow 11.5% this yearHighly publicised cyber attacks and growing regulatory obligations are keeping security and risk top of mind for Australian organisations this year, says Gartner Continue Reading By- Aaron Tan, Informa TechTarget
 

 
		