IT security

Texas judge throws out second lawsuit over CrowdStrike outage

A US judge has dismissed a lawsuit filed by CrowdStrike shareholders over the July 2024 outage that caused widespread disruption around the world Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft DCU uses UK courts to hunt down cyber criminals

Microsoft has taken down the RedDVS cyber crime-as-a-service network after obtaining a UK court order, marking its first civil legal action outside of the US Continue Reading

By

• Alex Scroxton, Security Editor

Nozomi Networks opens APAC headquarters in Singapore

Industrial cyber security firm Nozomi Networks has opened its Singapore headquarters, doubling its regional headcount, and pledging to remain vendor agnostic while targeting the manufacturing and utility sectors Continue Reading

By

• Aaron Tan, Informa TechTarget

UK government's U-turn on digital ID was inevitable from the start

The UK government’s plans for a national digital identity scheme were never going to be mandatory. That’s not some sort of scoop – although Computer Weekly predicted as much last year - nor is it ... Continue Reading

By

• Bryan Glick, Editor in chief

UK government backtracks on plans for mandatory digital ID

The proposed national digital identity app will no longer be compulsory for conducting right-to-work checks, removing the most contentious and widely criticised element of the scheme Continue Reading

By

• Bryan Glick, Editor in chief

Microsoft patches 112 CVEs on first Patch Tuesday of 2026

January brings a larger-than-of-late Patch Tuesday update out of Redmond, but an uptick in disclosures is often expected at this time of year Continue Reading

By

• Alex Scroxton, Security Editor

‘Dual-channel’ attacks are the new face of BEC in 2026

Business email compromise remains a significant threat as cyber fraudsters deploy a more diverse range of tactics against their potential victims, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Cutting through the noise: SaaS accelerators vs. enterprise AI

The Security Think Tank considers what CISOs and buyers need to know to cut through the noise around AI and figure out which AI cyber use cases are worth a look, and which are just hype. Continue Reading

By

• Richard Watson-Bruhn, PA Consulting

How one IT chief shifted the needle on a reactive IT strategy

In spite of headlines that suggest every business should be ploughing vast sums of money into tech innovation, the reality remains that IT plays a supporting role for most firms Continue Reading

By

• Cliff Saran, Managing Editor

Every Post Office victim deserves an OBE, says Betty Brown

In the first edition of the Computer Weekly ezine for 2026, we reveal who in the world of tech has received gongs in the New Year Honours List, and why. We also sit down with competition lawyer Maria Luisa Stasi, who is in the midst of a legal action to secure billions of pounds in compensation for UK businesses that have been allegedly overcharged by Microsoft for opting to run its software in competing cloud environments. Elsewhere in the issue, we find out why automotive enterprises are being advised to revamp their networks and embrace openness. And in the first of our three buyer’s guide features on the knotty topic of digital sovereignty, we find out what role data auditing has to play in building a cast-iron data sovereignty strategy. Read the issue now. Continue Reading

Business leaders see AI risks and fraud outpacing ransomware, says WEF

C-suite executives are more concerned with risks arising from AI vulnerabilities and cyber fraud than ransomware, according to the World Economic Forum Continue Reading

By

• Alex Scroxton, Security Editor

Ofcom begins investigation of explicit image generation on Grok

Elon Musk’s Grok image generator, from parent company X, is being investigated by the UK regulator under the Online Safety Act Continue Reading

By

• Cliff Saran, Managing Editor

Intersec Dubai highlights why AI has become critical in the race against cyber attackers

Cigna Healthcare’s Jean Wiles warns that healthcare security teams must act faster without sacrificing accuracy or compliance as threats driven by artificial intelligence scale Continue Reading

By

• Andrea Benito , Computer Weekly

Auditing, classifying and building a data sovereignty strategy

We look at data sovereignty – what it is and how to build a data sovereignty strategy around data auditing Continue Reading

By

• Antony Adshead, Computer Weekly

Singapore and Japan team up on quantum computing

The two countries will work together to bridge the gap between quantum research and real-world commercialisation, marking Singapore’s first government-to-government pact dedicated to the technology Continue Reading

By

• Aaron Tan, Informa TechTarget

UAE’s VentureOne to deploy secure autonomy technologies in Europe through Unikie and Solita partners

Partnerships with Finland’s Unikie and Solita will bring UAE-developed secure autonomy technologies to critical infrastructure, public safety and AI-enabled operations across Northern Europe Continue Reading

By

• Andrea Benito , Computer Weekly

From promise to proof: making AI security adoption tangible

The Security Think Tank considers what CISOs and buyers need to know to cut through the noise around AI and figure out which AI cyber use cases are worth a look, and which are just hype. Continue Reading

By

• Aditya K Sood, Aryaka

Computer Misuse Act reform is overdue - not all anniversaries should be celebrated

Let's not have any further anniversaries for the UK's outdated cyber security laws - the government has dragged its heels for too long and reform is urgently needed Continue Reading

By

• Lord Chris Holmes, House of Lords

Agentic AI requires rethink of cloud security strategy

Security leaders discuss the rise of agentic AI, warning that autonomous agents operating at machine speed will require organisations to move away from static protection towards behavioural monitoring and automated reasoning Continue Reading

By

• Aaron Tan, Informa TechTarget

Personal data of thousands stolen in attack on London councils

The West London council at the centre of a major cyber incident has now started the process of informing residents that their personal data was compromised in the attack Continue Reading

By

• Alex Scroxton, Security Editor

Campaigners urge UK to develop digital sovereignty strategy

UK digital rights campaigners have urged UK parliamentarians to implement a digital sovereignty strategy as part of the forthcoming Cyber Security and Resilience Bill to reduce reliance on technology subject to foreign interference Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

What will happen with Starmer’s digital ID scheme in 2026?

Last year, the UK government announced ambitious plans for a national digital identity scheme, but will 2026 lead to more disenchantment or new excitement? Continue Reading

By

• Lis Evenstad

Like it or not, AI will transform cyber strategy in 2026

Bubble or no bubble, from cyber skills to defensive strategies to governance, risk and compliance, artificial intelligence will remake the cyber world in 2026 Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Stop buying AI, start buying outcomes

The Security Think Tank considers what CISOs and buyers need to know to cut through the noise around artificial intelligence and figure out which AI cyber use cases are worth a look, and which are just hype Continue Reading

By

• Rik Ferguson, Forescout

Labour MP Josh Simons to lead digital ID scheme

Cabinet Office parliamentary secretary Josh Simons to become digital ID minister as government prepares to launch public consultation on the scheme Continue Reading

By

• Lis Evenstad

Predictability emerging as enterprise IT’s new north star

Across ERP cloud migration, desktop and compliance decision-making, enterprise IT teams are prioritizing predictability, locking in cost, control and accountability before go-live. Continue Reading

By

• James Alan Miller, Senior Executive Editor

Preventing attacks on mobile applications in the enterprise

As mobile devices gain popularity as enterprise devices, mobile apps become a greater target for hackers. Understand the risks that come with mobile apps and how to mitigate them. Continue Reading

By

• Will Kelly

SQL Slammer lesson: A Computer Weekly Downtime Upload podcast

We speak to the head of the Microsoft Security Response Center about how the company works with the industry to get systems patched quickly Continue Reading

By

• Cliff Saran, Managing Editor

Home Office digital-only eVisa system could be ruled unlawful

The Home Office is facing a judicial review over refusing to allow alternative proof of immigration status outside of the electronic visa system, despite data quality and integrity issues plaguing the system Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Why AI agent recoverability is vital for business resilience

While AI agents are transforming operations they bring risks. Governance, monitoring, and instant rollback can help with resilience, trust, and safe innovation Continue Reading

By

• Richard Cassidy

Privacy will be under unprecedented attack in 2026

The UK and Europe are ramping up opposition to encryption and stepping up surveillance of private communications. Here is what to expect this year Continue Reading

By

• Bill Goodwin, Investigations Editor

Will there be a technology policy epiphany in 2026?

The UK government faces many complex technology policy decisions in the year ahead, which could reshape the country for a digital, AI-led future Continue Reading

By

• Lord Chris Holmes, House of Lords

Addressing UK’s technical debt is only way to secure country’s digital future

This is a guest blog post by Rob Lay, Director of Solutions Engineering UK&I at Cisco. The recently announced Cybersecurity and Resilience Bill is a welcome move by the UK government to ... Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Results and prospects for AI in business applications in 2026

Agentic AI dominated enterprise IT discourse in 2025, evolving from generative AI. In 2026, AI convergence and governance will determine AI’s impact on enterprise IT Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Fujitsu Post Office IT support team were ‘legalised hackers’

Backdoors meant it was possible for Fujitsu staff to steal money from Post Office branches, says former Fujitsu tech worker Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK government to spend £210m on public sector cyber resilience

The UK government unveils a £120m Cyber Action Plan to help reinforce and promote IT security resilience across the country's public services Continue Reading

By

• Alex Scroxton, Security Editor

Identity: the new perimeter of ransomware defence

Ransomware exponents can target identity, bypassing technical defences. Boards should prioritise identity security, align investments, and embed cyber risk in governance Continue Reading

By

• Jamie Collier

Top 10 police technology stories of 2025

Here are Computer Weekly’s top 10 police technology stories of 2025 Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Top 10 surveillance, journalism and encryption stories of 2025

A transatlantic row between the UK and the Trump administration erupted after the UK attempted to force Apple to break its advanced encryption. That was just one of a series of stories reporting on the tension between state surveillance and privacy this year Continue Reading

By

• Bill Goodwin, Investigations Editor

Top 10 technology ethics stories of 2025

Here are Computer Weekly’s top 10 tech ethics stories of 2025 Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Top 10 European IT stories of 2025

Here are Computer Weekly’s top 10 European technology stories of 2025 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Top 10 cyber security stories of 2025

AI dominated all tech conversations this year, but the concerns of cyber security professionals extend far beyond. From remote work to supply chains, quantum to identity, there were plenty of other topics for the industry to chew over in 2025. Continue Reading

By

• Alex Scroxton, Security Editor

Middle East tech trends 2026: AI, cyber security and sovereign infrastructure take centre stage

As artificial intelligence moves from experimentation to production and cyber threats escalate, the Middle East is entering a decisive phase of digital transformation, says Omdia chief analyst Trevor Clarke Continue Reading

By

• Andrea Benito , Computer Weekly

Top 10 cyber crime stories of 2025

In many regards, 2025 proved to be a relatively normal year for the cyber security world as threat actors and security pros continued their long-running cat-and-mouse game, but it was also a stand-out year that saw some of the largest cyber attacks ever to befall the UK. Discover more in Computer Weekly’s top 10 cyber crime stories of 2025 Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 ANZ stories of 2025

The 2025 tech landscape in Australia and New Zealand was dotted with major data breaches even as organisations continue to press on with their digital transformation efforts in areas such as AI and automation Continue Reading

By

• Aaron Tan, Informa TechTarget

Why the Middle East needs hybrid, human-led cyber security in the age of AI

Obrela’s Mark Morland says AI is accelerating detection, but regional context and human expertise remain essential as threats across the Gulf become more sophisticated and specific to sectors Continue Reading

By

• Andrea Benito , Computer Weekly

Will Quantum Computing Kill Bitcoin?

Claims that Quantum Computing will destroy Bitcoin may be exaggerated, but Bitcoin will need to adapt.   Continue Reading

By

• By Eli Ben-Sasson, CEO & Co-Founder, StarkWare

Warlords v Merchants: who really controls ID and Information Policy

Sooner or later we will have to interface with the global market leaders, including for ID systems and the UK will be a more prosperous and secure place to live, work and do business if we do so ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

European Commission renews UK data adequacy agreement, ensuring continued free flow of data

Despite calls from some data protection campaigners, the UK's agreement to allow data movement with European Economic Area countries is extended until 2031 Continue Reading

By

• Bryan Glick, Editor in chief

‘Sensitive’ data stolen in Westminster City Council cyber attack

London borough confirms that data breach affecting three neighbouring councils in a shared IT services operation led to personal information being copied by a third party Continue Reading

By

• Bryan Glick, Editor in chief

UK government confirms Foreign Office cyber attack

Reports blame Chinese hacking group but minister insists the source of the attack is unclear Continue Reading

By

• Bryan Glick, Editor in chief

Fortinet vulnerabilities prompt pre-holiday warnings

Analysts track exploitation of two vulnerabilities disclosed last week by Fortinet Continue Reading

By

• Alex Scroxton, Security Editor

Passwords to prompts: Identity and AI redefined cyber in 2025

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Daniel Gordon, PA Consulting

Cyber resilience will define winners and losers in 2026

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Nick New, Optalysys

AI safeguards improving, says UK government-backed body

Inaugural AI Security Institute report claims that safeguards in place to ensure AI models behave as intended seem to be improving Continue Reading

By

• Alex Scroxton, Security Editor

ClickFix attacks that bypass cyber controls on the rise

NCC’s monthly threat report details the growing prevalence of ClickFix attacks in the wild Continue Reading

By

• Alex Scroxton, Security Editor

Security platform consolidation in 2026: The AI imperative

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• John Bruce, Quorum Cyber

Incident response: How to implement a communication plan

Communication is critical to an effective incident response plan. Here are best practices for communication planning and an editable template to help you get started. Continue Reading

By

• Paul Kirvan

Top IT predictions in APAC in 2026

Enterprises across the Asia-Pacific region are expected to prioritise sovereign architectures, double down on securing agentic systems and rewrite their infrastructure playbooks, among other tech trends Continue Reading

By

• Aaron Tan, Informa TechTarget

The three cyber trends that will define 2026

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

In cyber security, basics matter, even in 2025

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

What is driving the rise of infostealer malware?

Infostealer malware is a growing problem for cyber security teams, and these attacks have the potential to cause significant damage to businesses. What is enabling them to thrive? Continue Reading

By

• Anne Heim, Socura

Streisand effect: Businesses that pay ransomware gangs are more likely to hit the headlines

Research by ransomware expert Max Smeets suggests companies that pay up to criminal gangs are more likely to attract press attention Continue Reading

By

• Bill Goodwin, Investigations Editor

Trump plans bonfire of US state-level AI regulation

US president’s executive order targets state-level AI regulatory frameworks across the country, saying they are too onerous and endangering leadership in the field Continue Reading

By

• Alex Scroxton, Security Editor

Quantum risk to quantum readiness: A PQC roadmap

No one knows exactly when quantum computing will arrive, but accelerating progress is prompting security and IT leaders to recognise the potential risks. So how do organisations begin implementing post-quantum cryptography? Continue Reading

By

• Ben Packman, PQShield

What lies in store for cyber security skills in 2026?

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Haris Pylarinos, Hack The Box

Digital Ethics Summit 2025: Open sourcing and assuring AI

Industry experts met to discuss the ethical challenges associated with assuring AI systems, and how open source approaches can challenge concentrations of capital and power Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Microsoft expands bug bounty scheme to include third-party software

The company is to offer bug bounty awards for people who report security vulnerabilities in third-party and open source software impacting Microsoft services Continue Reading

By

• Bill Goodwin, Investigations Editor

Security pros should prepare for tough questions on AI in 2026

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Ellie Hurst, Advent IM

How AI agents are driving the future of security operations

AI agents can transform security operations and ease workloads, but security teams need to look past the hype to find tools that truly augment human analysts and deliver measurable outcomes Continue Reading

By

• Craig Lawson

Microsoft patched over 1,100 CVEs in 2025

The final Patch Tuesday update of the year brings 56 new CVEs, bringing the year-end total to more than 1,100 Continue Reading

By

• Alex Scroxton, Security Editor

How Chinese-owned Radisson Hotel Group split US enterprise resource planning

During the UK and Ireland SAP user group conference in Birmingham, Computer Weekly met with the SAP platform lead at Radisson Hotel Group Continue Reading

By

• Cliff Saran, Managing Editor

Are we mistaking regulation for resilience?

We have a growing number of cyber compliance regulations, yet our country’s cyber resilience remains fragile. What is going wrong? Continue Reading

By

• Richard Starnes

MPs maul digital ID plans in Parliamentary debate

MPs brand the government’s digital ID plans ‘un-British’ and ‘an attack on civil liberties’ during debate on the controversial policy Continue Reading

By

• Lis Evenstad

Digital sovereignty about outcomes, not theoretical ideals

SAP’s chief executive counsels against abstractly idealistic conceptions of digital sovereignty that over-focus on physical data centres Continue Reading

By

• Christian Klein, SAP

Why bug bounty schemes have not led to secure software

Computer Weekly speaks to Katie Moussouris, security entrepreneur and bug bounty pioneer, about the life of security researchers, bug bounties and the artificial intelligence revolution Continue Reading

By

• Bill Goodwin, Investigations Editor

OAIC to launch blitz on privacy compliance

Australia’s privacy watchdog will begin the new year with a compliance sweep targeting businesses that run afoul of privacy rules, including the over-collection of personal information in-person, warning that non-compliance could trigger fines Continue Reading

By

• Aaron Tan, Informa TechTarget

Ethical hackers can be heroes: It's time for the law to catch up

The UK government's plan to finally rewrite the 1990 Computer Misuse Act to provide much-needed legal protections for ethical hackers is welcome, but now we need firm action. Continue Reading

By

• Ed Parsons, Intigriti

NCSC warns of confusion over true nature of AI prompt injection

Malicious prompt injections to manipulate GenAI large language models are being wrongly compared to classical SQL injection attacks. In reality, prompt injection may be a far worse problem, says the UK’s NCSC Continue Reading

By

• Alex Scroxton, Security Editor

How police live facial recognition subtly reconfigures suspicion

A growing body of research suggests that the use of live facial recognition is reshaping police perceptions of suspicion in ways that undermine supposed human-in-the-loop protections Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Cyber teams on alert as React2Shell exploitation spreads

Exploitation of an RCE flaw in a widely used open source library is spreading quickly, with China-backed threat actors in the driving seat Continue Reading

By

• Alex Scroxton, Security Editor

Cloudflare fixes second outage in a month

A change to web application firewall policies at Cloudflare caused problems across the internet less than three weeks after another major outage at the service, but no cyber attack is suspected Continue Reading

By

• Alex Scroxton, Security Editor

From trust to turbulence: Cyber's road ahead in 2026

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Aditya K Sood, Aryaka

NCC supporting London councils gripped by cyber attacks

Three west London councils hit by a cyber attack continue to investigate as services remain disrupted nearly two weeks on Continue Reading

By

• Alex Scroxton, Security Editor

Constrained budgets left security teams short-handed in 2025

With 2024 seeing surges in security funding cuts, lay-offs and hiring freezes, 2025 brought some relief for cyber pros, but constrained budgets are leaving security teams short-staffed Continue Reading

By

• Alex Scroxton, Security Editor

Home Office launches police facial recognition consultation

The Home Office has formally opened a 10-week consultation on a legal framework for police use of facial recognition technologies, and will consider extending any new rules to police deployments of other biometric and inferential technologies Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

In an AI-first world, the future of cyber security is its workforce

The cyber security industry will experience immense change due to AI by 2030, so both employers and professionals need to grasp the nettle, and quickly, if they are to have the right skills and experience in place to succeed Continue Reading

By

• Cath Everett

Western coalition supplying tech to Ukraine prepared for long war

Russia is deploying hybrid warfare against Europe as western nations supply critical IT and telecoms equipment to Ukraine’s front line Continue Reading

By

• Bill Goodwin, Computer Weekly

In 2026, collaboration, honesty and humility in cyber are key

As we prepare to close out 2025, the Computer Weekly Security Think Tank panel looks back at the past year, and ahead to 2026. Continue Reading

By

• Rik Ferguson, Forescout

UK government pledges to rewrite Computer Misuse Act

Campaigners celebrate as security minister Dan Jarvis commits to amending the outdated Computer Misuse Act to protect security professionals from prosecution Continue Reading

By

• Alex Scroxton, Security Editor

NCSC and BT block a billion dangerous clicks

A protective service jointly developed by the NCSC and BT has disrupted over a billion potential cyber incidents by stopping members of the public from clicking through to dangerous websites Continue Reading

By

• Alex Scroxton, Security Editor

UK national security strategy failing to account for online world

The UK government’s national security strategy is falling short on online matters, according to the independent reviewer of terrorism Continue Reading

By

• Alex Scroxton, Security Editor

Interview: Florence Mottay, global CISO, Zalando

Florence Mottay moved from mathematics to software engineering, and is now leading security at Zalando, a high-tech online fashion retailer Continue Reading

By

• Bill Goodwin, Investigations Editor

Post Office avoids £1m fine over botched website upgrade data breach

The Information Commissioner’s Office considered fining the Post Office £1m for a 2024 data breach that let subpostmasters down again Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Digital ID providers are placated (again) as anticipation builds towards government consultation

Yesterday (2 December 2025) was the second time this year that a confused and – in some quarters – angry digital identity sector was given the opportunity to sit down with the government and ask: ... Continue Reading

By

• Bryan Glick, Editor in chief

Women in Cybersecurity Middle East marks five years of impact at Black Hat MEA

As AI reshapes the regional cyber security landscape, diversity and skills development remain at the heart of building a resilient digital workforce Continue Reading

By

• Andrea Benito , Computer Weekly

Black Hat MEA: Saudi Vision 2030 fuels surge in cyber security innovation

Global cyber firms are racing to support the Kingdom’s mega-projects, but building trusted partnerships remains key, says Exabeam CEO Pete Harteveld Continue Reading

By

• Andrea Benito , Computer Weekly

UK prosecution of alleged Chinese spies was ‘shambolic’ says Parliamentary committee

The Joint Committee on National Security Strategy reports that China was engaged in malicious cyber attacks against UK Parliament and democratic institutions Continue Reading

By

• Bill Goodwin, Investigations Editor

AWS targets vulnerable code with security agent

At AWS re:Invent 2025, the cloud giant unveiled a security agent designed to bridge the gap between development speed and security validation, along with the general availability of Security Hub analytics Continue Reading

By

• Aaron Tan, Informa TechTarget

Strategic shift pays off as Okta bids to ease agentic AI risk

Nine months after restructuring its go-to-market, Okta is buoyed by a growing recognition of how crucial identity has become thanks to the spread of AI agents Continue Reading

By

• Alex Scroxton, Security Editor