News

IT security

• September 02, 2019 02 Sep'19

  CISOs turn to AI, detection, response and education

  Information security leaders are looking to artificial intelligence, better detection and response capabilities and user education in the face of cyber threats, but need more budget, a study shows

• August 30, 2019 30 Aug'19

  Social media and enterprise apps pose big security risks

  The lack of security policies in many business applications is putting enterprise data at risk and social media apps are the biggest source of malware, a poll of IT professionals reveals

• August 29, 2019 29 Aug'19

  UK gets first millionaire ethical hacker

  Six months after the first millionaire ethical hacker was announced, five more have been recognised, including a Briton, who have collectively discovered nearly 5,000 vulnerabilities

• August 29, 2019 29 Aug'19

  Finland’s security agencies collaborate after cyber attacks

  National Bureau of Investigations and National Cyber Security Centre aim to increase expertise and capability to defend Finland’s critical IT infrastructure

• August 29, 2019 29 Aug'19

  UK firms getting on top of IT downtime costs

  Despite data breach headlines, UK firms are generally improving in their data protection, business continuity, cyber preparedness and understanding of downtime costs, study shows

• August 29, 2019 29 Aug'19

  Dutch regulator reveals potential Microsoft privacy breach

  Netherlands privacy watchdog has revealed potential breaches while testing Microsoft software changes

• August 28, 2019 28 Aug'19

  Targeted cyber attacks, including ransomware, on the rise

  Governments and healthcare institutions are prime targets of ransomware operators, a report shows

• August 28, 2019 28 Aug'19

  Most UK firms ignore security in tech investments

  Less than a quarter of UK firms prioritise security when investing in new technology, despite the threat of cyber attacks and data protection regulations, a survey reveals

• August 28, 2019 28 Aug'19

  Ransomware has evolved into a serious enterprise threat

  Ransomware has seen a resurgence since the start of 2019, with cyber criminals changing code and tactics to target enterprises and local authorities for higher ransom payments, McAfee researchers warn

• August 27, 2019 27 Aug'19

  Employees, MSPs and developers top third-party risks

  Employees, managed service providers and developers are the top sources of third-party risks in terms of data security, a survey reveals, highlighting the value of workplace monitoring

• August 26, 2019 26 Aug'19

  VMware’s latest acquisitions point to emerging platform war

  VMware’s buyout of Carbon Black and Pivotal is a sign of an emerging platform war following the IBM-Red Hat deal

• August 23, 2019 23 Aug'19

  Three more identity providers to withdraw from troubled Gov.uk Verify programme

  Three of the five companies supporting the government's troubled digital identity scheme are pulling out, raising further questions over the viability of the £175m programme

• August 23, 2019 23 Aug'19

  Majority of organisations struggling with cloud security

  The majority of organisations find securing the cloud difficult and more than a quarter feel the shared security responsibility model is unclear, according to a survey of information security professionals

• August 23, 2019 23 Aug'19

  Kaspersky eyes enterprise business, opens APAC transparency hub

  The security firm wants to engage with enterprises and use its newly launched Malaysian Transparency Centre to burnish its credentials

• August 23, 2019 23 Aug'19

  Human rights group challenges police over counter-terrorism powers

  Bringing into question the effectiveness of terror laws, a report by human rights group Cage highlights poor conviction rates and the discriminatory application of police powers at the border

• August 22, 2019 22 Aug'19

  Security pros reiterate warning against encryption backdoors

  The majority of security professionals believe countries with government-mandated encryption backdoors are more susceptible to nation-state cyber attacks

• August 22, 2019 22 Aug'19

  A helping hand from the Nordics in the eye of the GDPR storm

  Nordic IT companies are well suited to supporting enterprises in their data protection projects, even though openness is more natural to them

• August 22, 2019 22 Aug'19

  Tech firms join forces to boost cloud security

  Top tech firms are to collaborate on open source technologies, tools, frameworks and standards that accelerate the adoption of confidential computing to boost security in cloud and edge computing

• August 22, 2019 22 Aug'19

  Cyber attackers exploiting poor cloud security

  More than a third of organisations report a cyber attack on the cloud environment due to a lack of basic cloud security hygiene

• August 21, 2019 21 Aug'19

  Box aims to shield businesses from data loss threat

  Box has introduced an add-in to its cloud-based collaboration platform to lock down and monitor access to files and folders

• August 21, 2019 21 Aug'19

  Healthcare faces triple cyber threat, says FireEye

  Criminal and nation-state cyber attackers are increasingly targeting the healthcare industry to steal data, carry out espionage and cause disruption, a report reveals

• August 21, 2019 21 Aug'19

  Security concerns blocking UK digital transformation

  The majority of UK firms are holding off adopting new, more efficient and cost effective technology because they are failing to see cyber security as a driver of strategic value, report reveals

• August 21, 2019 21 Aug'19

  Silence APT group eyes APAC banks

  Russian-speaking advanced persistent threat group has set its sights on banks in the region, customising its arsenal for targeted attacks

• August 20, 2019 20 Aug'19

  Human error a big risk to ICS cyber security, study shows

  Despite the rise in automation, industrial processes are at risk due to human error, a report on industrial cyber security reveals

• August 20, 2019 20 Aug'19

  Malware still top security threat, say infosec pros

  Malware remains the top security threat to organisations, with ransomware still considered to be the top malware threat and lack of budget the biggest obstacle to defence, a study shows

• August 20, 2019 20 Aug'19

  Huawei to US: Ban violates free market principles

  Huawei has hit back at the US government’s latest moves to restrict its activities

• August 20, 2019 20 Aug'19

  Even fintech startups battling to meet cyber security challenges

  A study shows that most fintech startups, like most banks, are failing to address vulnerabilities in the web and mobile applications, underlining the scale of the challenge

• August 19, 2019 19 Aug'19

  UK financial account takeovers up, report warns

  Commercial cyber criminal services are helping to drive up the number of account takeovers, a fraud report for the first half of the year shows

• August 19, 2019 19 Aug'19

  Q2 shows ransomware proliferation, Kaspersky warns

  Ransomware modifications have more than doubled in the past year, the number of ransomware families has grown, and the number of attempted infections is up nearly 50%

• August 19, 2019 19 Aug'19

  US extends temporary stay on Huawei ban

  American network operators given extra wiggle room to wean themselves off Huawei’s hardware

• August 19, 2019 19 Aug'19

  How EDR is moving beyond the endpoint

  An emerging breed of detection and response offerings is going beyond endpoints to collect and decipher telemetry data from across the enterprise

• August 16, 2019 16 Aug'19

  Google finds that web users log in with compromised credentials

  People continue to use passwords that have been breached. Google has proposed a protocol, which could warn them if their credentials have been stolen

• August 16, 2019 16 Aug'19

  Passwordless enterprise already possible, says RSA

  The passwordless enterprise is getting easier to attain as the security industry gears up to support a passwordless future, says RSA’s identity chief

• August 16, 2019 16 Aug'19

  New approach to risk management needed, says Gartner

  Most third-party risks are discovered after the initial due diligence period, Gartner study shows, highlighting the need for a new approach to risk management and the importance of effective access controls

• August 16, 2019 16 Aug'19

  ICO to probe facial recognition at King’s Cross

  UK privacy watchdog is to investigate whether the use of live facial recognition technology at King’s Cross complies with data protection laws

• August 15, 2019 15 Aug'19

  Australia needs to get digital identity right

  A top Ping Identity executive urges Australia to put more focus on digital identity management following the government’s efforts to lay the groundwork for an open banking regime

• August 15, 2019 15 Aug'19

  2019 set to be another record year for data breaches

  The number of data breach incidents continues to rise and looks set to reach another record this year, with the business sector first in the firing line, according to a mid-year breach report

• August 15, 2019 15 Aug'19

  Most UK financial firms hit by cyber attack in the past year

  The majority of UK financial companies are failing to prevent cyber security incidents, mainly because of employees failing to follow security policies and a lack of security budget, a survey reveals

• August 15, 2019 15 Aug'19

  Cisco frozen out of China as Trump’s trade war rages on

  Cisco CEO Chuck Robbins reveals the firm is being edged out of the Chinese market

• August 15, 2019 15 Aug'19

  Formjacking dominates web-related data breaches

  Formjacking has become one of the most popular data stealing methods, say researchers, who urge commercial websites to review all third-party coding practices without delay

• August 15, 2019 15 Aug'19

  Melbourne researchers uncover privacy lapses in transport dataset

  A team of University of Melbourne researchers has been able to re-identify individuals from a public transport dataset, raising serious privacy, safety and security issues

• August 14, 2019 14 Aug'19

  Publicly accessible biometric database highlights key failings

  The discovery of a publicly accessible database of biometric information highlights failings by the supplier, the need for supply chain security, and the challenges of using biometric data

• August 14, 2019 14 Aug'19

  DCMS funding aims to increase diversity in cyber sector

  A funding round has been announced as part of the Cyber Skills Immediate Impact Fund (CSIIF) with aims of encouraging more diverse talent into the UK’s cyber security sector

• August 14, 2019 14 Aug'19

  GDPR faces growing pains across Europe

  The General Data Protection Regulation is over a year old now, but it faces challenges across Europe where compliance has taken place at different speeds

• August 14, 2019 14 Aug'19

  Cyber criminal collaboration intensifies

  The level of cooperation between high-profile cyber threat groups has shifted up a gear, enabling a higher level of automation and making attribution more difficult, research shows

• August 14, 2019 14 Aug'19

  Digital domain identified as major security threat by Norway’s intelligence service

  Norway's intelligence services has revealed the extent of the threat posed to the country by cyber attacks

• August 14, 2019 14 Aug'19

  Norman evasive cryptominer conquers networks

  Cryptomining malware designed to evade detection is capable of invading every device in targeted companies, researchers warn

• August 14, 2019 14 Aug'19

  UK finance regulator gives extra time for companies to meet payment security rules

  Financial Conduct Authority gives companies under its watch an extra 18 months to meet an EU payments security standard

• August 14, 2019 14 Aug'19

  British Airways e-ticketing system could expose passenger details

  British Airways has not addressed a potential leak of passenger details despite warnings from security researchers, but says it is aware of the issue and is taking action

• August 14, 2019 14 Aug'19

  NTT Security partners with Europol

  Link-up is part of a commitment to share strategic information with partners and law enforcement to bolster threat intelligence in the global fight against cyber crime