Cloud security

2021 the year of commodity ransomware, says Sophos

Sophos researchers anticipate a trickle-down effect in the cyber criminal underground Continue Reading

By

• Alex Scroxton, Security Editor

How Aarogya Setu is addressing scale and security challenges

India’s contact-tracing platform leverages microservices, encryption techniques and cloud-based visibility tools to address scale and security requirements Continue Reading

By

• Aaron Tan, TechTarget

Choosing between proxy vs. API CASB deployment modes

Curious how to choose the right CASB deployment mode for your organization? Before you buy, compare how proxy vs. API CASB architectures work to secure SaaS applications. Continue Reading

By

• Ed Moyle, Drake Software

How Standard Chartered approaches cyber security

Bank uses security-by-design principles and conducts red-teaming exercises among other measures to fend off cyber breaches Continue Reading

By

• Aaron Tan, TechTarget

Human error blamed in Welsh Covid-19 patient data leak

Public Health Wales accepts recommendations of independent probe into data breach that saw PII on 18,105 coronavirus patients leaked Continue Reading

By

• Alex Scroxton, Security Editor

DDoS mitigation strategies needed to maintain availability during pandemic

The growing prevalence of DDoS attacks combined with the increased reliance on internet connectivity during the pandemic means enterprises can no longer afford to ignore the threat of DDoS attacks. Computer Weekly explores organisations’ perceptions of the risks and best practice for mitigation Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

CW Benelux: Dutch Alzheimer’s app helps dementia patients

An app aimed at helping dementia patients and their families has been developed by the Alzheimer Society in the Netherlands. Also in this issue, read about a Belgian startup's app based on blockchain technology to help container handling at ports, and why Rabobank ditched its legacy backup. Continue Reading

EU aid funds used to train ‘unaccountable intelligence agencies’ in high-tech surveillance

Hundreds of documents obtained by campaign group Privacy International show how the EU is supporting surveillance programmes in the Balkans, the Middle East and Africa Continue Reading

By

• Bill Goodwin, Computer Weekly

IT Priorities 2020: After Covid-19, security goes back to basics

This year’s transition to remote working highlighted big gaps in the fundamentals of security, as updated TechTarget/Computer Weekly data reveals Continue Reading

By

• Alex Scroxton, Security Editor

Singapore government rolls out digital signature service

Individuals and businesses will soon be able to sign documents digitally using a new service on the Singapore government’s SingPass digital identity platform Continue Reading

By

• Aaron Tan, TechTarget

India and Japan report stronger concern over cyber threats

Security operations teams in the two Asian giants see the increased volume of cyber threats as their biggest challenge amid the Covid-19 pandemic Continue Reading

By

• Aaron Tan, TechTarget

The UK government’s ‘flawed and misleading’ Covid-19 data

In this week’s Computer Weekly, the coronavirus data relied upon by the UK government is ‘flawed and misleading’ say experts – we examine the implications. Ikea talks about how it turned to the cloud to deal with the impact of the pandemic. And we look at the digital transformation underway at credit card giant Capital One. Read the issue now. Continue Reading

Tackling multicloud deployments with intelligent cloud management

Organisations are moving to hybrid and multicloud deployments, which complicates software assets tracking and workload management Continue Reading

By

• Cliff Saran, Managing Editor

CISOs more confident in identity practice after pandemic shock

Identity practice and management has become a critical element of cyber security strategies to support remote workers Continue Reading

By

• Alex Scroxton, Security Editor

Barracuda eyes Indochina markets

Barracuda is looking to expand its local presence and headcount in fast-growing emerging markets of Vietnam, Cambodia and Laos Continue Reading

By

• Aaron Tan, TechTarget

Pet project: How Pets at Home cares for customers with data analytics

In this week’s Computer Weekly, we talk to the chief data officer of Pets at Home, about using data analytics to care for customers. British Airways had its GDPR fine reduced to just £20m – we ask what this means for data protection regulation. And we look at GPT3, the language prediction tool that could revolutionise AI. Read the issue now. Continue Reading

APAC CISOs warm up to zero trust

Security leaders in Asia-Pacific are adopting zero-trust security, but challenges stand in their way of reaping the full potential of the security model Continue Reading

By

• Aaron Tan, TechTarget

Protecting remote workers an opportunity to do security better

Securing the fully remote workforce has been a challenge for IT teams, but it presents an opportunity to commit to a higher standard of cyber security, according to a Cisco report Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Cybersecurity Awareness Month, Covid-19 and storage

We look at how organisations can use Cybersecurity Awareness Month as an opportunity to revisit their handling of data and compliance, especially with changes brought by Covid-19 and home working Continue Reading

By

• Antony Adshead, Storage Editor

Why is IBM splitting in two and what does it mean for CIOs?

In this week’s Computer Weekly, IBM is splitting in two, hiving off its services business to focus on hybrid cloud – we examine what it means for CIOs. Our new buyer’s guide looks at how intelligent workload management can cut cloud complexity. And we analyse how getting backup right can help tackle ransomware threats. Read the issue now. Continue Reading

Cloud data protection keeps the Crick’s medical research Covid-secure

Cloud data management services from Rubrik gave the Francis Crick Institute a data protection edge and have helped keep its vital work going through the pandemic Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft fixes 87 bugs in October 2020 Patch Tuesday

Smaller October Patch Tuesday update includes fixes for critical bugs in Windows 10 and Windows Server 2019 Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Adapting defences to evolving ransomware and cyber crime

The threat of identity theft via a data breach is heightened with the rise of attacks where ransomware threat actors both encrypt and ransom, and exfiltrate and leak their victims’ data. How does this evolution in cyber crime heighten risk for the enterprise, and what steps can we take to safeguard the personal data we hold? Continue Reading

By

• Paddy Francis

Suppliers neglecting virtual appliance security, putting users at risk

Software suppliers are often distributing their products on virtual appliances that contain known vulnerabilities or are running outdated or unsupported operating systems, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

The future of storage

In this week’s Computer Weekly, we examine emerging technologies in storage such as helium disks and DNA. Ransomware is becoming more sophisticated and the attackers more tactical. And as the EU’s top court challenges the UK over surveillance, we ask what this means for data privacy after Brexit. Read the issue now. Continue Reading

Cyber security skills ad branded ‘crass’ by minister

Security skills campaign advert depicting a ballet dancer comes in for criticism as the arts sector struggles in the pandemic Continue Reading

By

• Alex Scroxton, Security Editor

Threat of GDPR fines increasingly driving security buying decisions

Scaring the people who hold the purse strings may be the best option for CISOs who need a little extra budget Continue Reading

By

• Alex Scroxton, Security Editor

Southeast Asia remains hotspot for cyber attacks

Geopolitics and Covid-19 have been fodder for cyber criminals to advance their motives in Southeast Asia in 2020 Continue Reading

By

• Aaron Tan, TechTarget

CISOs struggle to keep up with MITRE ATT&CK framework

Despite its proven benefits for security, the MITRE ATT&CK framework is proving difficult for many, according to a joint study from McAfee and UC Berkeley Continue Reading

By

• Alex Scroxton, Security Editor

Blackbaud admits hackers stole banking details, passwords

Software firm paid off a ransomware gang, believed its hackers when they said they had destroyed the data, and has now discovered the cyber criminals accessed even more sensitive information than it thought Continue Reading

By

• Alex Scroxton, Security Editor

Compare AWS CloudEndure vs. Azure Site Recovery services

Learn how DRaaS heavyweights AWS CloudEndure and Microsoft Azure Site Recovery compare when it comes to architectures, features, integrations, pricing and other considerations. Continue Reading

By

• Brien Posey

Remote working world reveals cloud/SaaS security concerns

Research reveals pivotal moment when the cloud is playing a more important role than ever to support mass remote working, with CISO concerns over cloud security remaining stubbornly high Continue Reading

By

• Joe O’Halloran, Computer Weekly

Sustrans opens door to NCSC cyber certification via the cloud

Sustainable transport charity turned to Qualys to help it attain needed certifications to bid for government work Continue Reading

By

• Alex Scroxton, Security Editor

Security now main driving force behind digital transformation

Organisations are urgently remodelling their core technology stack in the light of the Covid-19 pandemic, and this is pushing security to the top of the agenda Continue Reading

By

• Alex Scroxton, Security Editor

So – We Have The “New Normal” But Then IT Infrastructure’s Changing Anyway…

I was at an event in London at the beginning of the year – in the days when we were allowed to do that kind of thing – a platform migration event as it happens. One of the key takeaways from that ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Covid-19 has changed how we think about cyber security forever

Six months into the global pandemic, the true impact on the future of cyber security is beginning to look clearer, says Microsoft’s Ann Johnson Continue Reading

By

• Ann Johnson, Microsoft

Race to patch as Microsoft confirms Zerologon attacks in the wild

Don’t be the organisation that made the headlines because it failed to patch. Microsoft says it is seeing cyber attacks ramping up around the Zerologon CVE-2020-1472 bug Continue Reading

By

• Alex Scroxton, Security Editor

Over half of firms intend to continue US data transfers despite Schrems II

Survey shows many organisations do not intend to significantly change their data-sharing practices, at least until there is more guidance from regulators or governments Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

GDS reviewing Cloud First policy post-Schrems II

Review seeks to determine the future of government engagement with cloud hosting services as they relate to cross-border data flows Continue Reading

By

• Alex Scroxton, Security Editor

Saudi Arabia sees cyber security boom as coronavirus bites

Saudi Arabian CIOs have been forced to increase their security posture as the Covid-19 pandemic transforms working methods Continue Reading

By

• Alicia Buller

Security Think Tank: Edge security in the world of Covid-19

That datacentre security is a complex subject is not in doubt and, given the trend to move beyond centralised datacentre to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• Petra Wenham

Security Think Tank: Edge datacentre security depends on specific needs

That datacentre security is a complex subject is not in doubt and, given the trend to move beyond centralised datacentres to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• Paddy Francis

Lorca security scaleups to get Splunk data expertise

Lorca inducts Splunk onto its co-marketing programme, giving security scaleups access to new data expertise Continue Reading

By

• Alex Scroxton, Security Editor

Risky development practice leaves company access keys exposed

Database stores, cloud storage and myriad other services are being put at risk by the accidental exposure of company access keys during development Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: No secret sauce for edge security, just good practice

That datacentre security is a complex subject is not in doubt, and given the trend to move beyond centralised datacentres to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• Tom Venables, Turnkey Consulting

TikTok-Oracle partnership moves forward for consideration

Joint venture proposal could create thousands of jobs and secure TikTok’s future outside China Continue Reading

By

• Alex Scroxton, Security Editor

CW Europe: IT expertise in banks’ boardrooms reduces risk, says European regulator

Banks have for many years been underpinned by vast IT operations, but in the age of digital banking the IT is now front, centre and back of operations. It is therefore surprising that there are relatively few IT professionals sitting on the boards of Europe’s big banks. Read the issue now. Continue Reading

Cyber security is next frontier for open source

Open security will facilitate the interoperability and capabilities of cyber security tools while alleviating vendor lock-in for enterprises, says IBM Continue Reading

By

• Aaron Tan, TechTarget

Lorca security scaleups hit funding milestone

£153m of investment has been raised by Lorca cohort companies in just two years, almost four times the original target Continue Reading

By

• Alex Scroxton, Security Editor

Datacentre firm Equinix investigating ransomware attack

A number of internal systems at cloud and datacentre firm Equinix have been affected by a ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Assange prosecution would put journalists around the world at risk

Trevor Timm, co-founder of the Freedom of the Press Foundation, tells a court that if the US prosecutes WikiLeaks founder Julian Assange, every reporter who receives a secret document will be criminalised Continue Reading

By

• Bill Goodwin, Computer Weekly

Why predictive threat intelligence is key

Threat intelligence startup Cyfirma is using virtual agents to gather intelligence on potential cyber attacks that are being coordinated in underground forums before they occur Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Beware security blind spots at the edge

That datacentre security is a complex subject is not in doubt and, given the trend to move beyond centralised datacentres to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• Jordon Kelly, ISF

Security Think Tank: Datacentre security is a business imperative

That datacentre security is a complex subject is not in doubt and, given the trend to move beyond centralised datacentres to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• Mike Gillespie

Northumbria University suffers major disruption after cyber attack

Some exams cancelled as university appoints external specialists to investigate incident Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Sharing responsibility: Why we need to work together to keep the cloud secure

The education sector has been fundamentally altered by months of lockdown, with cloud services topping must-have lists for academic staff, but now it’s time to consider security Continue Reading

By

• Andy Powell, JISC

Security Think Tank: Seven steps to edge security

That datacentre security is a complex subject is not in doubt and, given the trend to move beyond centralised datacentres to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• SIlvano Sogus and Alan Taberham

Security Think Tank: Security at the distributed edge

That datacentre security is a complex subject is not in doubt, and given the trend to move beyond centralised datacentres to distributed environments, this is not going to change. How can security professionals ensure such setups are just as secure as the traditional centralised model? Continue Reading

By

• Anup Deb, Palo Alto Networks

CW Nordics: Bergen’s tech hub seeks global success

Norway’s second-largest city, Bergen, is building a tech ecosystem that is beginning its development with a focus on the city’s industrial heritage. Also in this issue, read why now might be the time for businesses to consider how they will invest in outsourcing IT once the Covid-19 pandemic wanes. And read how Norway’s government has had to backtrack on a law that removed tax relief on energy consumption at datacentres that process cryptocurrency mining. Continue Reading

Microsoft wins on public cloud trust

IT spending set to grow in 2021, with many organisations buying more public cloud services. Security and trust are top buying criteria Continue Reading

By

• Cliff Saran, Managing Editor

Getting physical with datacentre security

Whether it is natural disasters, terrorism or break-ins, datacentres will be vulnerable to a range of risks unless they are physically secured. Here’s how you can improve the physical security of your datacentre Continue Reading

By

• Nicholas Fearn

CW APAC: Expert advice on hybrid cloud

Despite numerous benefits, organisations with lots of legacy applications can’t or won’t move everything to the public cloud. Some organisations may also choose to retain sensitive data on-premise for security reasons. In this edition of Expert Advice, we look at why and how APAC firms are deploying and managing their hybrid cloud infrastructure. Read the issue now. Continue Reading

CW Benelux: Security system concerns at Schiphol Airport

A report has revealed problems with critical security systems at Amsterdam’s Schiphol Airport. Also read why the Netherlands’ digital sector is yearning for attention from the government, and how data weaknesses persist despite Dutch companies investing heavily to comply with GDPR. Continue Reading

Security teams struggle to keep pace with cloud threats

Security professionals face challenges in keeping pace with cloud deployments and migrations, and the additional security threats they open up Continue Reading

By

• Alex Scroxton, Security Editor

Capital One hit with $80m fine by US regulators over 2019 data breach

US regulator imposes fine over data breach that affected 106 million Capital One customers in the US and Canada Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Australia updates cyber security strategy but offers little new

The nation’s latest cyber security strategy includes centralised management of networks and a voluntary code of practice for deploying internet-connected devices, among other areas Continue Reading

By

• Anthony Caruana

More data breaches from ransomware attacks in Australia

The number of data breaches caused by ransomware rose to 33 in the first half of 2020 from 13 in the previous six-month period, according to the latest report from the Office of the Australian Information Commissioner Continue Reading

By

• Aaron Tan, TechTarget

Majority of organisations at risk of cloud data exposure

Report casts doubt on the effectiveness of the shared responsibility model of cloud security Continue Reading

By

• Alex Scroxton, Security Editor

Cosmetics firm Avon faces new cyber security incident

Technical information relating to Avon’s web and mobile sites was inadvertently left exposed on an unsecured Microsoft Azure server Continue Reading

By

• Alex Scroxton, Security Editor

NCSC inducts six security startups to Cyber Accelerator

10-week programme will guide some of the UK’s most innovative security startups as they scale their businesses for future growth Continue Reading

By

• Alex Scroxton, Security Editor

Australia issues new cloud computing guidelines

The new guidance, which comes after the expiry of the government’s cloud services certification programme, will help to bolster Australia’s cyber security resilience Continue Reading

By

• Aaron Tan, TechTarget

A question of trust: University and supplier on the hook for data breach

Data on students at the University of York was stolen in a ransomware attack on a supplier two months ago, and the response of both parties raises serious questions Continue Reading

By

• Alex Scroxton, Security Editor

No let-up in cyber attacks as lockdown eases

Cyber attacks are up by one-third as the coalescence of cyber activity and nation state-linked threats around the pandemic bears fruit for bad actors Continue Reading

By

• Alex Scroxton, Security Editor

Avon calling: what happens when lockdown eliminates your business model?

In this week’s Computer Weekly, we talk to global beauty brand Avon, to find out how it coped with a huge lockdown dilemma – how to adapt its door-to-door sales model when its reps couldn’t leave home. Our latest buyer’s guide examines the use of artificial intelligence in IT security. And we analyse the government’s decision to strip Huawei from the UK’s 5G network. Read the issue now. Continue Reading

Australian industry panel calls for ‘clear consequences’ of cyber attacks

A government-appointed panel recommends strong deterrence and other measures to be implemented in Australia’s next cyber security strategy Continue Reading

By

• Aaron Tan, TechTarget

CW APAC: Trend Watch – security

It wasn’t that long ago when DevSecOps was little more than a mispronunciation of DevOps. Fast forward to today, the notion of embedding security into the development process is not only accepted, but increasingly championed. In this handbook, Computer Weekly looks at what organisations in the Asia-Pacific region are doing to secure their systems, from adopting a DevSecOps approach, to preparing for cyber attacks and ensuring the privacy of Covid-19 contact-tracing app users. Continue Reading

Australian government pulls plug on cloud certification programme

The Australian Signals Directorate is closing its cloud services certification programme to allow for more home-grown suppliers. Continue Reading

CW ANZ: Expert advice on security

Supply chain risks are invisible to many organisations, which means they are often not prioritised from an IT security perspective, partly because supply chain risk management is often seen as a procurement issue. In this handbook, Computer Weekly looks at how organisations in Australia and New Zealand can better protect themselves against supply chain attacks and other evolving cyber threats. Continue Reading

Coronavirus shines spotlight on cyber security

Programme committee chair of this year's RSA Conference Asia-Pacific and Japan talks up the challenges that IT security professionals in APAC are facing to mitigate security risks amid the Covid-19 pandemic Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Ignore AI overheads at your peril

Artificial intelligence and machine learning techniques are said to hold great promise in security, enabling organisations to operate an IT predictive security stance and automate reactive measures when needed. Is this perception accurate, or is the importance of automation being gravely overestimated? Continue Reading

By

• Andrew Morris, Turnkey Consulting

Majority of security pros fed up with alert fatigue

A vast majority of security professionals say they experience alert fatigue, and 88% are facing challenges with their current SIEM setup, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

NHS trust uses case management software to deliver time savings

To deal with inefficient and unreliable processes, East Suffolk and North Essex NHS Trust has implemented a case management system specifically designed for HR practitioners Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Oracle ups ante in cloud wars with dedicated customer regions

Oracle’s Dedicated Region Cloud at Customer will let enterprises run an entire cloud region in their own datacentres in a potentially game-changing move Continue Reading

By

• Aaron Tan, TechTarget

Security funding soars despite Covid-19 slump, but problems lie ahead

The overall cyber security funding ecosystem in the UK is healthier than ever despite Covid-19, but the figures mask stark and concerning disparities in where the money is going Continue Reading

By

• Alex Scroxton, Security Editor

Australian government foreshadows ‘sovereign data’ classification

The Australian government will examine if certain government datasets should be declared sovereign and only be hosted in the country Continue Reading

By

• Stephen Withers

UK’s unsung cyber security heroes sought

Nominations have opened for the fifth annual Security Serious Unsung Heroes Awards Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: ‘Shift left’ to secure containers

Adopting containers promises great organisational efficiency advantages, but the fast-evolving technology can be problematic for security teams. What do CISOs need to know to safeguard containers? Continue Reading

By

• Paul Holland, Information Security Forum

Post-pandemic security market still set for growth, but slower

Frost & Sullivan report says the global security industry will withstand the economic crash caused by the Covid-19 pandemic, but growth will be slower for a few years Continue Reading

By

• Alex Scroxton, Security Editor

Making the case for cloud-based security

Cloud-based security tools can hasten threat detection and response, but adoption will depend on where an enterprise is on the cloud readiness scale Continue Reading

By

• Aaron Tan, TechTarget

Australian government has failed on cyber security

The federal government’s current approach of allowing each agency to make its own cyber decisions is not working and more needs to be done to hunt down adversaries Continue Reading

By

• Carlo Minassian

SASE And Cato; The Fit...

As promised in the previous blog, given the seeming importance of SASE, here’s more definition in terms of what briefings with Cato Networks revealed. If we look at the key areas where SASE and ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Security Think Tank: Securing containers needn’t be taxing

Adopting containers promises great organisational efficiency advantages, but the fast-evolving technology can be problematic for security teams. What do CISOs need to know to safeguard containers? Continue Reading

By

• Andrew Morris, Turnkey Consulting

How to apply zero-trust models to container security

Containers have become a common fixture in software development, but they have resulted in new concerns for security teams. Is zero-trust the answer to tackling them? Continue Reading

By

• Nicholas Fearn

APAC still hotbed for cyber attacks

Individuals and organisations in APAC are encountering malware more frequently than the rest of the world, study finds Continue Reading

By

• Aaron Tan, TechTarget

Australian prime minister confirms country is suffering repeated nation-state cyber attacks

Concern over critical national infrastructure as cyber attackers repeatedly try to gain access to network of organisations operating in multiple sectors Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

CW APAC: Trend Watch – data protection

Asia-Pacific organisations see the importance of having good data protection practices, even as they are still grappling with organisational and operational challenges. In this handbook, Computer Weekly looks at the different levels of preparedness across the region and what firms can do to plug any gaps. Continue Reading

Cisco patches dangerous Webex vulnerability

CVE-2020-3347 bug enables cyber criminals to steal meeting records from within Cisco’s Webex service Continue Reading

By

• Alex Scroxton, Security Editor

Check Point uncovers targeted Microsoft Office 365 phishing campaign

Organised criminal campaign exploited Adobe, Oxford University and Samsung web domains to trick users into giving up their passwords Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Cyber security spend to slow in 2020

Analysts revise down previous growth targets for security technology as the Covid-19 pandemic bites Continue Reading

By

• Alex Scroxton, Security Editor

Macquarie eyes government contracts with new Canberra datacentre

New Macquarie datacentre in the Australian capital designed to achieve Tier 4 datacentre standards will deliver 1.5MW of capacity by December 2020 Continue Reading

By

• Aaron Tan, TechTarget