Cloud security

Cloudflare announces new integrations with Microsoft, others

New security integrations with Microsoft Azure Sentinel, Splunk, Datadog and Sumo Logic will supposedly make it easier for users to analyse network security data Continue Reading

By

• Alex Scroxton, Security Editor

Lorca Ignite programme targets breakout cyber talent

Six of the most successful companies to have come through Lorca’s existing accelerators are being inducted into an intensive programme Continue Reading

By

• Alex Scroxton, Security Editor

HammondCare takes procurement to the cloud

The Australian health and aged care provider migrated its procurement and invoicing systems to the cloud in just six months to improve efficiency and security Continue Reading

By

• Aaron Tan, TechTarget

Australian organisations face heightened cyber attacks

Nearly three in four Australian organisations experienced cyber attacks that largely resulted from a growing remote workforce in 2020 Continue Reading

By

• Aaron Tan, TechTarget

The rise and rise of supply chain attacks

Supply chain attacks in Asia-Pacific and elsewhere have intensified as cyber threat actors look to exploit the weakest links in business and digital supply chains Continue Reading

By

• Aaron Tan, TechTarget

Siloscape malware a risk to Windows containers, Kubernetes

Palo Alto’s Unit 42 reports on what appears to be the first-recorded malware targeting Kubernetes clusters through Windows containers Continue Reading

By

• Alex Scroxton, Security Editor

IBM pushes back against US government data requests

Technology giant IBM says the US government has ‘no jurisdiction’ to request data from its European entities Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Norway’s auditor general lifts lid on energy industry’s cyber security risks

Auditor General’s Office questions the security posture of Norway’s energy industry Continue Reading

By

• Gerard O'Dwyer

Pandemic a ‘once-in-a-lifetime’ chance to reshape security

The volume of remote working has made it hard to paint an accurate picture of the true state of enterprise cyber security, but it presents an opportunity to change things up Continue Reading

By

• Alex Scroxton, Security Editor

Essential Guide: How APAC firms can ride out the pandemic

In this Essential Guide, we examine the impact of Covid-19 on Asia-Pacific businesses, how they have responded and important lessons that can be learned as they ready themselves for the post-pandemic world. Continue Reading

By

• Aaron Tan, TechTarget

CW Nordics: Denmark takes a top-down approach to gender equality in tech entrepreneurship

Tech Nordic Advocates has adopted a new approach to closing the gender gap in Danish technology startups, looking to emulate Canada’s top-down approach. Also in this issue, find out the state of play with the adoption of open banking in Europe. Continue Reading

More data stolen in January 2021 than in all of 2017, says report

The volume of data being stolen through breaches is growing steadily and shows no sign of slowing, according to a report from Imperva Continue Reading

By

• Alex Scroxton, Security Editor

Dutch researchers build security software to mimic human immune system

Software could help IT systems develop immunity to some cyber attacks in a similar way to how the body fights infection Continue Reading

By

• Kim Loohuis

How Bureau Veritas migrated 85% of its applications to the AWS cloud

In six years, France-based services giant BV has migrated 115 applications to the AWS cloud, mostly using in-house expertise. We talk to the company’s IT director Continue Reading

By

• Gaétan Raoul, LeMagIT
• Antony Adshead, Storage Editor

Why the security stack needs to move to the edge

Akamai’s chief technology officer Robert Blumofe makes the case for a decentralised security model to address cyber threats that are emanating from the network edge Continue Reading

By

• Aaron Tan, TechTarget

CyberUK, bees and datacentres, Red Cross digital mapping – Computer Weekly Downtime Upload podcast

In this episode of the Computer Weekly Downtime Upload podcast, Caroline Donnelly and Brian McKenna are joined by Alex Scroxton, security editor, to discuss CyberUK, bees and datacentres, and the British Red Cross’ use of digital mapping to combat Covid-19 Continue Reading

By

• Alex Scroxton, Security Editor
• Caroline Donnelly, Senior Editor, UK
• Brian McKenna, Senior Analyst, Business Applications

Lack of developer attention to cloud security prompts alerts

The personal data of over 100 million Android users may have been put at risk through a variety of cloud service misconfigurations Continue Reading

By

• Alex Scroxton, Security Editor

Cisco acquires Kenna Security amid security expansion

Cisco announces a new acquisition alongside service enhancements around XDR and SASE in support of its security customers Continue Reading

By

• Alex Scroxton, Security Editor

Okta and Auth0 to expand APAC coverage

Okta’s acquisition of rival Auth0 will enable both companies to expand their footprint in the Asia-Pacific region as demand for identity management services soars amid the pandemic Continue Reading

By

• Aaron Tan, TechTarget

Biden beefs up public-private security cooperation

Joe Biden has signed a new Executive Order to harden US cyber security and government networks, with an emphasis on information sharing Continue Reading

By

• Alex Scroxton, Security Editor

CW Benelux: Netherlands university launches centre of expertise in applied AI

Amsterdam University of Applied Sciences has launched a centre of expertise in applied artificial intelligence, and students from all faculties of the university will learn how to apply AI in their field of study. Also in this issue, read why a training ‘roadmap’ is needed to get Netherlands police officers up to speed with tackling cyber crime. Continue Reading

NCSC cyber guidance targets cloud and home working

The NCSC’s refreshed cyber security guidance for larger organisations places particular emphasis on cloud, home working and ransomware Continue Reading

By

• Alex Scroxton, Security Editor

Collaboration key to success of UK’s Cyber Security Council

The founders of the UK’s Cyber Security Council have been setting out their plans to professionalise the cyber sector at the NCSC’s CyberUK 2021 event Continue Reading

By

• Alex Scroxton, Security Editor

APAC career guide on cloud computing

Besides having engineering chops and certifications, aspiring cloud professionals should have curiosity and soft skills to succeed in the evolving cloud computing landscape Continue Reading

By

• Aaron Tan, TechTarget

EncroChat: Top lawyer warned CPS of risk that phone hacking warrants could be unlawful

Lord David Anderson QC warned prosecutors that there were formidable arguments against the lawfulness of a police operation to infiltrate the encrypted phone network, EncroChat Continue Reading

By

• Bill Goodwin, Computer Weekly

Gartner SASE 2021 Roadmap - You Know It Makes Sense...

As observed before in this blog, few of Gartner’s ‘inventions’ have caught on as quickly as SASE – Secure Access Service Edge. From traditional firewall vendors to declared SASE specialists, ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Recruiters can’t afford to hold out for cyber ‘unicorns’

The perfect security candidate is hard to find, so hiring policy needs to be more pragmatic Continue Reading

By

• Alex Scroxton, Security Editor

Leaky Azure storage account puts software developer IP at risk

Source code for multiple products was left exposed in an unsecured Microsoft Azure cloud storage account, say researchers, but attributing responsibility for the error has proved difficult Continue Reading

By

• Alex Scroxton, Security Editor

Automation, zero-trust, API-based security priorities for EMEA CISOs

Report by FireMon sheds light on buyer behaviour across the EMEA region Continue Reading

By

• Alex Scroxton, Security Editor

Finnish government strengthens country’s IT network security

Finland’s government has created a new national organisation to help public and private bodies improve network security Continue Reading

By

• Gerard O'Dwyer

Dutch accuse UK of ‘damaging confidence’ by disclosing details of EncroChat police collaboration

The Dutch Public Prosecution Service claims Britain has damaged confidence by disclosing details of an international investigation into the EncroChat encrypted phone network to the courts Continue Reading

By

• Bill Goodwin, Computer Weekly
• Sebastian Klovig Skelton, Data & ethics editor

CW Middle East: Qatari regulator launches platform to help combat money laundering

The Qatar Financial Markets Authority is using a digital platform to enable financial services professionals to assess their knowledge of anti-money laundering and combating the financing of terrorism. Also in this issue, read how the Covid-19 pandemic has changed the IT spending patterns among enterprises in Saudi Arabia. Continue Reading

Ultimate guide to cybersecurity incident response

Learn actionable incident response strategies that your IT and enterprise security teams can use to meet today's security threats and vulnerabilities more effectively. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

Cyber Security Council to champion UK security pros

A new cyber security professional body has launched with the aim of developing and promoting UK cyber security excellence globally and growing the skills base Continue Reading

By

• Alex Scroxton, Security Editor

Create an incident response plan with this free template

Want to boost your organization's ability to fight cybersecurity threats? Uncover the essentials to creating an incident response plan and download our free, editable template. Continue Reading

By

• Paul Kirvan

Warning: AWS IAM behaves differently to directory services

IT admins use group policies to manage user access via Active Directory, but AWS takes a subtly different approach, which can be exploited Continue Reading

By

• Cliff Saran, Managing Editor

Four in five UK businesses seek new security suppliers

Decision-makers are ready to buy new security technology, but suppliers must pay close attention to how they present themselves Continue Reading

By

• Alex Scroxton, Security Editor

Compare Azure Firewall vs. NSGs for network security

Traffic to and from resources needs proper security to protect data, but the wrong tool could leave you vulnerable. Explore these two services to find the right level of protection. Continue Reading

By

• Joydip Kanjilal

Top incident response tools to boost network protection

Incident response tools can help organizations identify, prevent and respond to malware exploits, ransomware and other targeted cybersecurity attacks. Continue Reading

By

• Dave Shackleford, Voodoo Security

ST Engineering teams up with Google Cloud

Singapore’s ST Engineering and Google Cloud will explore offering secure cloud services for organisations in regulated industries Continue Reading

By

• Aaron Tan, TechTarget

CW Europe: Nordic tech startups create blueprint for post-Covid working environment

Business can learn lessons from Nordic tech startups to prepare employees to return to the office after Covid restrictions end. Also read why Netherlands police need a training ‘roadmap’ to get them up to speed to tackle cyber crime. Continue Reading

SASE in focus for enterprises in post-pandemic 2021

Recently in this ‘ere blog I took off tangentially a couple of times from a recently published customer survey carried out by Cato Networks, itself at the epicentre of an IT pandemic known as SASE. ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Private equity house buys McAfee enterprise business

Deal to sell off enterprise unit will see McAfee become a pure-play consumer organisation Continue Reading

By

• Alex Scroxton, Security Editor

Okta picks up Auth0 for $6.5bn

Multibillion-dollar acquisition a vote of confidence in future of identity and access management services Continue Reading

XDR makes cyber a Stroll in the park for Aston Martin F1

Aston Martin Cognizant Formula One team will run SentinelOne’s Singularity XDR platform under the bonnet Continue Reading

By

• Alex Scroxton, Security Editor

2020 a record year for cyber, thanks to Covid

The UK’s cyber industry now employs close to 50,000 people and contributes billions to the economy Continue Reading

By

• Alex Scroxton, Security Editor

WFH: Creating A Change In Network Infrastructure

As promised in a recent blog focusing on Cato Networks’ recent customer survey results - “The 2021 Networking Survey The Future of Enterprise Networking and Security: Are You Ready For The Next ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Oracle claims major win in Australian public sector

Australian Data Centres will deploy Oracle’s Dedicated Region Cloud@Customer to host cloud services for the federal government Continue Reading

By

• Aaron Tan, TechTarget

Too few UK organisations offering cyber training for remote work

Nearly a year into the pandemic, a study reveals a concerning tendency for organisations not to bother offering security training for remote workers Continue Reading

By

• Alex Scroxton, Security Editor

Cloud security policy configuration in AWS, Azure and GCP

Explore cloud security policy configurations in AWS, Azure and GCP using native security tools in this excerpt of 'Multi-Cloud Architecture and Governance' by Jeroen Mulder. Continue Reading

By

• Katie Donegan, Social Media Manager
• Packt Publishing

Crypto malware targets Kubernetes clusters, say researchers

Newly identified Hildegaard malware targets Kubernetes clusters and seems to herald a new campaign from the TeamTNT gang Continue Reading

By

• Alex Scroxton, Security Editor

SolarWinds patches two critical CVEs in Orion platform

New vulnerabilities disclosed as SolarWinds reels from December 2020 Solorigate/Sunburst attack – but do not appear to have been exploited yet Continue Reading

By

• Alex Scroxton, Security Editor

Mimecast breach was work of SolarWinds attackers

Mimecast’s investigation into a January 2021 breach of its systems turns up evidence that the culprit was the same group that targeted SolarWinds in December Continue Reading

By

• Alex Scroxton, Security Editor

Saudi IT spending to hit $11bn in 2021

Saudi Arabian organisations will spend about $11bn on IT this year, with emerging technologies high on shopping lists Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Are security teams the unsung heroes of 2020?

After a year of unprecedented disruption thanks to Covid-19, it looks like remote working is set to remain with us for now, which means security strategies will change in 2021. What will this change look like, and what tools and services will be selling like hotcakes? Continue Reading

By

• Josh Bregman

How can healthcare organisations fight increased cyber crime in 2021?

As the Covid-19 pandemic enters what may be its most dangerous phase, we explore how healthcare organisations can ward off cyber threats while preserving their ability to deliver critical care Continue Reading

By

• Nicholas Fearn

The Future of Enterprise Networking and Security

If you’re going to ask a customer a question, ask them a proper one! You can’t get much bigger than looking at the future of enterprise networking and security, but that’s what a recent survey by ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Malwarebytes also hit by SolarWinds attackers

The nation state group that attacked SolarWinds in December got inside Malwarebytes by exploiting privileged access to its Microsoft Office 365 tenant, the firm reveals Continue Reading

By

• Alex Scroxton, Security Editor

The UK’s struggle with digital schooling

In this week’s Computer Weekly, the UK government’s sudden decision to close schools left many unable to provide children with online schooling - we examine the home learning challenges. Cyber security experts give us their forecasts for 2021. And we find out how technology supports the work of the Guide Dogs charity. Read the issue now. Continue Reading

MAS offers guidance on mitigating supply chain threats

Monetary Authority of Singapore revises its technology risk management guidelines to help the financial sector guard against supply chain attacks Continue Reading

By

• Aaron Tan, TechTarget

US cyber security agencies get $9bn in Biden plan

New funding proposals come as US government reels from the impact of the December 2020 SolarWinds attack Continue Reading

By

• Alex Scroxton, Security Editor

Old, on-premise systems targeted in Hackney ransomware attack

Council reveals some more insight into how the Pysa ransomware gang infiltrated its systems by exploiting legacy technology Continue Reading

By

• Alex Scroxton, Security Editor

APAC firms grapple with cyber security amid pandemic

Some aspects of cyber security have taken a backseat as companies across the Asia-Pacific region rush to shore up their infrastructure to cope with the demands of remote work Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Plan for hybrid working to become normal

After a year of unprecedented disruption thanks to Covid-19, it looks like remote working is set to remain with us for now, which means security strategies will change in 2021. What will this change look like, and what tools and services will be selling like hot cakes? Continue Reading

By

• Martin Kuppinger, KuppingerCole

Palo Alto Networks opens Australia cloud location

The cyber security company’s Australia cloud location will address data localisation requirements amid growing adoption of cloud-based security services Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Don’t bet on a new normal just yet

After a year of unprecedented disruption thanks to Covid-19, it looks like remote working is set to remain with us for now, which means security strategies will change in 2021. What will this change look like, and what tools and services will be selling like hot cakes? Continue Reading

By

• Petra Wenham

Cloud Application Acceleration

First, we had WanOp, then we had “son of WanOp” AKA SD-WAN (and its much misunderstood – mainly by vendors – sibling, SDN) and then the cloud came along and, well, clouded the scenario somewhat. If ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Security Think Tank: Cyber effectiveness, efficiency key in 2021

After a year of unprecedented disruption thanks to Covid-19, it looks like remote working is set to remain with us for now, which means security strategies will change in 2021. What will this change look like, and what tools and services will be selling like hot cakes? Continue Reading

By

• Simon Persin, Turnkey Consulting

Top 10 ASEAN IT stories of 2020

Here are Computer Weekly’s top 10 ASEAN IT stories of 2020 Continue Reading

By

• Aaron Tan, TechTarget

Security Long Reads: Cyber insiders reveal what’s to come in 2021

In this long read, we gather together the thoughts of cyber security insiders from across the industry to get their take on what will happen in 2021 Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 cyber crime stories of 2020

Here are Computer Weekly’s top 10 cyber crime stories of 2020 Continue Reading

By

• Alex Scroxton, Security Editor

How to manage non-human identities

Identity management has traditionally focused on human identities, but non-human identities are proliferating and must not be overlooked. Businesses can reduce risk by managing both types of identity in the same way using a services-based approach Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 cyber security stories of 2020

Here are Computer Weekly’s 10 top cyber security stories of 2020 Continue Reading

By

• Alex Scroxton, Security Editor

My Question Answered: Neteventing (not not eventing) In Cyberspace...

My fine friends at Netevents have continued to battle the global lockdown elements (and we now know in England that the words "lockdown" and "tier" mean the same thing - who would have guessed?) ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Why Security As A Service Makes Common Sense...

Let us go back in time to 2019 – a time when we could actually attend IT events in a physical way. There I am, on the top level of a stand, having a coffee and scanning the hall, seeing “me too” ... Continue Reading

By

• Steve Broadhead, Broadband Testing

NHS Scotland taps Check Point to secure Covid-19 data

NHS National Services Scotland is working with security firm Check Point to safeguard its sensitive data in the cloud and support its work on the coronavirus Continue Reading

By

• Alex Scroxton, Security Editor

UK police unlawfully processing over a million people’s data on Microsoft 365

The roll-out of Microsoft 365 to dozens of UK police forces may be unlawful, because many have failed to conduct data protection checks before deployment and hold no information on their contracts Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

AWS brings disaster recovery programme to Australia

Project Resilience will offer up to $5,000 worth of credits to public sector and community organisations to offset the cost of storing data on Amazon Web Services Continue Reading

By

• Aaron Tan, TechTarget

How security will be different after Covid-19

In this week’s Computer Weekly, the world of cyber security will probably never return to its pre-pandemic state – we look ahead. The combination of remote working and streaming video is putting extra strain on networks. And we look at how digital transformation is changing the way contact centres are run. Read the issue now. Continue Reading

Negotiating the complexities of international transfers of personal data

How to navigate international data transfers, standard contractual clauses and the impact of Brexit on data protection Continue Reading

By

• Leonie Power, Fieldfisher

Security Think Tank: Integration between SIEM/SOAR is critical

SIEM and SOAR share much in common but there are key differences between the two that may influence the best fit for your organisation. What should security pros consider when making a choice? Continue Reading

By

• Paddy Francis

Post-pandemic approaches to IAM for cloud security

Cloud technology may have saved businesses from catastrophe during the pandemic, but it has also introduced additional challenges around identity and access management. Here’s why IAM policies are crucial in the new normal Continue Reading

By

• Nicholas Fearn

After critical year, Vodafone trains security sights on CNI market

Vodafone’s security head Steve Knibbs explains how he plans to bring the lessons of a transformative few years in cyber security to bear on new markets Continue Reading

By

• Alex Scroxton, Security Editor

How cloud-based SIEM tools benefit SOC teams

It's time for SIEM to enter the cloud age. Learn about the cloud-based SIEM features that can help SOC teams gain a holistic view of their organization's cloud infrastructure. Continue Reading

By

• Dave Shackleford, Voodoo Security

Security Think Tank: SOAR to the next level with automation

SIEM and SOAR have much in common, but there are key differences between the two that may influence the best fit for your organisation. What should security pros consider when making a choice? Continue Reading

By

• Jason Yakencheck, Isaca

There’s no going back to pre-pandemic security approaches

The cyber security world will probably never return to its pre-pandemic state, and different approaches to security will come to the fore in 2021 Continue Reading

By

• Alex Scroxton, Security Editor

Top IT predictions in APAC in 2021

The Asia-Pacific region will continue to be a cradle for technology innovation in the new year, whether it is 5G services, artificial intelligence, cloud computing or cyber security Continue Reading

By

• Aaron Tan, TechTarget

API, API, API, API (aye aye aye aye)

I very recently spoke at a webinar for a long-time client emanating from the artist formerly known as helpdesk market - Sunrise Software - on the increasing importance of APIs - usable ones, not ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Russian state actors exploiting VMware bug to hijack data, users warned

Russian APT groups are actively exploiting a vulnerability in VMware products to access protected data, according to latest warnings Continue Reading

By

• Alex Scroxton, Security Editor

Avast and Borsetta to support Intel’s AI security project

Security firm Avast and AI security specialist Borsetta have signed up to support an Intel-led artificial intelligence security research project Continue Reading

By

• Alex Scroxton, Security Editor

SIEM or SOAR or both? Consider your business complexity first

SIEM and SOAR have much in common, but there are key differences between the two that may influence the best fit for your organisation. What should security pros consider when making a choice? Continue Reading

By

• Petra Wenham

Re:Invent 2020: AWS CEO Andy Jassy on redefining hybrid cloud

Amazon Web Services’ Re:Invent user conference has moved online this year, with the firm’s CEO using the opening keynote to explain how AWS’s take on hybrid cloud has changed over time Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Double extortion ransomware will be a big theme in 2021

Defenders will see heightened levels of cyber crime next year as criminals pivot their attacks from data encryption to exfiltration Continue Reading

By

• Alex Scroxton, Security Editor

Singapore government remains ‘juicy target’ for cyber attackers

The government is baking security into the design and implementation of its IT systems and looking to increase bug bounties to fend off cyber threats Continue Reading

By

• Aaron Tan, TechTarget

What it takes for APAC firms to ride out the pandemic

Whether businesses will recover from the Covid-19 pandemic will depend on how they leverage technology to innovate, create new business models and build digital trust Continue Reading

By

• Aaron Tan, TechTarget

APAC plagued by APT, ransomware attacks

The Asia-Pacific region was a primary target of advanced persistent threat groups, mostly from China, Iran, North Korea and Russia, that carried out 34 campaigns between June 2019 to June 2020 Continue Reading

By

• Aaron Tan, TechTarget

Merger of national policing systems over budget and behind schedule

UK government effort to replace legacy IT systems suffers further delays, and will not be fully completed until 2025 at the earliest Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Inside Huawei’s APAC cloud strategy

The Chinese technology giant is counting on its strengths in hardware infrastructure and focus on research and development to make a mark in Asia Pacific’s public cloud market Continue Reading

By

• Aaron Tan, TechTarget

CW APAC: Expert advice on zero-trust security

Zero trust is a security model that eliminates the traditional perimeter and assumes that no user or device can be trusted until proven otherwise. In this handbook, Computer Weekly looks at how enterprises can take a zero-trust approach to securing their network, devices and workforce. Continue Reading

2021 the year of commodity ransomware, says Sophos

Sophos researchers anticipate a trickle-down effect in the cyber criminal underground Continue Reading

By

• Alex Scroxton, Security Editor