News

IT for financial services

• May 15, 2024 15 May'24

  Critical SharePoint, Qakbot-linked flaws focus of May Patch Tuesday

  A critical SharePoint vulnerability warrants attention this month, but it is another flaw that seems to be linked to the infamous Qakbot malware that is drawing attention

• May 14, 2024 14 May'24

  CyberUK 24: UK insurance industry gets tough on ransomware

  Three of the UK’s largest insurance associations have signed on to a new initiative spearheaded by the NCSC to try to bring down the number of ransomware payments being made

• May 09, 2024 09 May'24

  Cyber attack victims need to speak up, says ICO

  The Information Commissioner’s Office is urging organisations to be transparent and learn from each other’s mistakes as it reveals most of the cyber attacks it responds to stem from the same core errors

• May 01, 2024 01 May'24

  EMEA CISOs must address human factors behind cyber incidents

  The 17th annual Verizon report on data breaches makes for sobering reading for security pros, urging them to do more to address the human factors involved in cyber incidents, and highlighting ongoing issues with zero-day patching

• May 01, 2024 01 May'24

  Secure coding benchmark to increase standards among developers

  Developer security advocate Secure Code Warrior has launched what it claims is the industry’s first benchmark designed to quantify the security competence of its customers’ software developer teams

• May 01, 2024 01 May'24

  DWP anti-fraud measures will allow monitoring of bank accounts of landlords, carers and parents

  Parliamentarians raise concerns that a proposed law to require banks to monitor the accounts of millions of people receiving state benefits could lead to those on welfare being denied accommodation or bank accounts

• April 22, 2024 22 Apr'24

  IT leaders hiring CISOs aplenty, but don’t fully understand the role

  Most businesses now have a CISO, but perceptions of what CISOs are supposed to do, and confusion over the value they offer, may be holding back harmonious relations, according to a report

• April 18, 2024 18 Apr'24

  International police operation infiltrates LabHost phishing website used by thousands of criminals

  The Metropolitan Police working with international police forces have shut down LabHost, a phishing-as-a-service website that has claimed 70,000 victims in the UK

• April 18, 2024 18 Apr'24

  Lords to challenge controversial DWP benefits bank account surveillance powers

  Members of the House of Lords are pressing for amendments to the Data Protection and Digital Information Bill following concerns over government powers to monitor the bank accounts of people receiving benefits

• April 16, 2024 16 Apr'24

  CISOs not yet convinced to invest in AI

  CISOs say their eyes are fixed firmly on threats like ransomware and supply chain attacks, and while AI is becoming a threat that needs to be dealt with, it’s not yet an immediate spending priority

• April 16, 2024 16 Apr'24

  CW Innovation Awards: Gleaning data insights with AI

  Hong Kong-based Citic Telecom CPC has built a data platform that leverages large language models to generate insights and speed up data retrieval and analysis

• April 16, 2024 16 Apr'24

  CW Innovation Awards: Making AI pervasive

  DBS Bank’s AI Industrialisation Programme has been instrumental in industrialising the use of data and artificial intelligence across its business, resulting in over S$370m of incremental economic benefits

• April 15, 2024 15 Apr'24

  Nib shutters last datacentre, moves most workloads to AWS

  The Australian health and travel insurance provider has closed the last of its seven datacentres, marking the end of its nine-year cloud migration programme

• April 09, 2024 09 Apr'24

  UK plc failing on multiple cyber measures

  Government report shows 50% of businesses and 32% of charities reported a cyber attack or breach in the past 12 months and organisations across the UK are failing on multiple cyber measures

• April 03, 2024 03 Apr'24

  RDP abused in over 90% of cyber attacks, Sophos finds

  Threat actors continue to see great success using simple, tried and tested methods, and many defenders are failing to do the basics

• March 29, 2024 29 Mar'24

  Organisations getting better at spotting identity fraud

  As the barriers to committing identity fraud continue to drop, organisations should consider more sophisticated technical measures to successfully up their game, according to a report

• March 27, 2024 27 Mar'24

  Cyber spies, not cyber criminals, behind most zero-day exploitation

  Analysis from Google has found that zero-day vulnerabilities are much more heavily exploited for espionage purposes than for financially motivated cyber crime

• March 26, 2024 26 Mar'24

  Shareholders win when businesses do better at cyber

  The more advanced a company’s cyber security performance, and the more engaged its board is with security issues, the greater the return for shareholders, a report has found

• March 25, 2024 25 Mar'24

  Which? calls for government action on fake banking sites

  Amid high volumes of spoofed, fraudulent banking websites, Which? is calling for the government to implement new legal obligations for domain registrars

• March 22, 2024 22 Mar'24

  Nationwide building society falls victim to IT outage

  Nationwide joins McDonald’s, Greggs, Sainsbury’s and Tesco as the fifth major high street name to experience an IT service outage in the space of a week

• March 21, 2024 21 Mar'24

  NCSC guidance to help CEOs work through cyber incidents

  The NCSC has published in-depth guidance on how business leaders should respond to a cyber attack or data breach. Learn about some of the key steps you will need to follow

• March 20, 2024 20 Mar'24

  UK’s cyber resilience stagnates as more fall victim to attacks

  The government is calling on businesses to ramp up their cyber protections as study shows improvements to resilience are stagnating amid an ever-growing volume of attacks

• March 18, 2024 18 Mar'24

  The Security Interviews: Alex Yampolskiy, SecurityScorecard

  Alex Yampolskiy conceived the idea for risk management specialist SecurityScorecard after getting stung by a SaaS supplier that was being cavalier with its customer data. He tells his story to Computer Weekly

• March 17, 2024 17 Mar'24

  UK’s AI ambitions pointless while cyber security is still neglected

  The UK’s AI ambitions may be at considerable risk without stronger cyber defences across the private and public sectors

• March 13, 2024 13 Mar'24

  Microsoft AI-powered cyber service to go live in April

  After a year being previewed by beta customers, Microsoft’s much vaunted Copilot for Security service is about to go on general release, promising time savings and improved accuracy for hard-pressed security pros

• March 12, 2024 12 Mar'24

  March Patch Tuesday throws up two critical Hyper-V flaws

  Two critical vulnerabilities in Windows Hyper-V stand out on an otherwise unremarkable Patch Tuesday

• March 12, 2024 12 Mar'24

  Nationwide IT infrastructure poised to absorb Virgin Money

  A Nationwide takeover of Virgin Money will be the biggest financial services acquisition since 2008, but what about the IT challenges and opportunities that go with it?

• March 05, 2024 05 Mar'24

  American Express customers exposed through third-party breach

  US card giant warns customers that their personal details may have been exposed after a third party experienced a systems breach

• March 05, 2024 05 Mar'24

  Banning ransomware payments back on the agenda

  The idea of banning ransomware payments to cyber criminals is back on the agenda, with former NCSC chief Ciaran Martin arguing that tougher measures need to be taken

• February 28, 2024 28 Feb'24

  75% of third-party breaches target software, IT supply chains

  Data drawn from SecurityScorecard’s telemetry reveals how supply chain breaches are becoming a weapon of choice for threat actors

• February 28, 2024 28 Feb'24

  Users love their cyber teams, but find them frustrating

  Despite strong support for security teams, a good number of ordinary workers see them as obstructive to business goals, and would like to see them operate more transparently

• February 27, 2024 27 Feb'24

  Black Basta and Bl00dy ransomware gangs exploiting ConnectWise vulns

  More ransomware gangs have been observed exploiting two dangerous vulnerabilities in ConnectWise ScreenConnect software, prompting new warnings for users to get patching

• February 27, 2024 27 Feb'24

  VulnCheck bug listing to help track new threats quicker

  Exploit intelligence firm VulnCheck launches a proprietary Known Exploited Vulnerabilities catalogue in hopes of improving end-user access to intel on emerging threats and reaching those that the likes of CISA do not

• February 27, 2024 27 Feb'24

  Majority of UK employees ‘willingly gamble’ with security

  Human-centric threats originating from employees continue to damage organisations both financially and reputationally, according to a report

• February 27, 2024 27 Feb'24

  Cozy Bear and other APTs changing tack as cloud adoption increases

  A change in APT tactics has been observed resulting from greater adoption of cloud-based services, according to the NCSC

• February 23, 2024 23 Feb'24

  ConnectWise users see cyber attacks surge, including ransomware

  ConnectWise ScreenConnect users who have yet to patch against a critical vulnerability are now being targeted by a barrage of cyber attacks, including ransomware

• February 21, 2024 21 Feb'24

  CVE volumes set to increase 25% this year

  The number of reported Common Vulnerabilities and Exposures is likely to grow significantly in 2024, hitting a new high of almost 35,000, according to Coalition, a cyber insurance specialist

• February 21, 2024 21 Feb'24

  Co-op signs TCS deal for cloud-first push

  The Co-operative Group has contracted IT service provider Tata Consultancy Services to support its move to a cloud-first IT environment

• February 21, 2024 21 Feb'24

  How Indian fintechs can address compliance issues

  Fintechs will need to bolster their know-your-customer practices and establish self-regulatory mechanisms, among other measures, to address compliance issues that have come under the spotlight

• February 14, 2024 14 Feb'24

  Microsoft patches two zero-days for Valentine’s Day

  Two security feature bypasses impacting Microsoft SmartScreen are on the February Patch Tuesday docket, among more than 70 issues

• February 13, 2024 13 Feb'24

  How DBS is industrialising AI across its business

  Southeast Asia’s biggest lender is building a strong data foundation and upskilling employees on data and artificial intelligence to realise its vision of becoming an AI-fuelled bank

• February 13, 2024 13 Feb'24

  Hunter-killer malware volumes seen surging

  Latest Picus Security report on malware tactics, techniques and procedures reveals an increasing focus on disabling security defences

• February 09, 2024 09 Feb'24

  Europe carves out niche in quantum computing

  As the US, China and Europe accelerate investment in quantum computing, Europe is beginning to develop its own unique position in the fledgling global ecosystem

• February 06, 2024 06 Feb'24

  UK’s McPartland Cyber Review to probe trust in technology

  The UK government has launched a cyber security review that will investigate how best to give businesses the confidence they need to use new technologies

• January 31, 2024 31 Jan'24

  Aviva signs 15-year contract with Indian IT giant

  Tata Consultancy Services continues to make large gains in the UK life insurance and pensions sector

• January 25, 2024 25 Jan'24

  Bugcrowd sees surge in vulnerability submissions, led by public sector

  Crowdsourced vulnerability disclosure and bug bounty platform Bugcrowd says it saw a 151% uptick in submissions related to government and public sector organisations in 2023

• January 24, 2024 24 Jan'24

  WebKit vulnerability sparks Apple’s first major security update of 2024

  A zero-day in the open source WebKit browser engine that powers Safari has sparked Apple’s first major patch roll-out of the new year

• January 24, 2024 24 Jan'24

  AI will heighten global ransomware threat, says NCSC

  The benefits of artificial intelligence to cyber criminals being well-known, the NCSC now assesses it’s likely AI will soon be widely used to enhance ransomware attacks

• January 23, 2024 23 Jan'24

  Treat cyber risk like financial or legal issue, says UK government

  UK government and NCSC launch proposed code of practice on cyber security governance to help directors and business leaders toughen their defences

• January 23, 2024 23 Jan'24

  Leak of 26 billion records may prove to be ‘mother of all breaches’

  The discovery of a dataset comprising 26 billion stolen records may prove to be record-breaking in both its size and the danger it poses to ordinary people