Endpoint security

Huge rise in rogue banking apps driving fraud attacks

Fraud perpetrated through fake mobile apps purporting to be from legitimate banks has seen a statistically significant spike, says RSA Continue Reading

By

• Alex Scroxton, Security Editor

Amazon consumer devices vulnerable to two-year-old exploit

Millions of older Amazon Echo and Kindle devices are still susceptible to a Wi-Fi vulnerability that was first disclosed in 2017 Continue Reading

By

• Alex Scroxton, Security Editor

BEIS launches multimillion-pound security investment package

Government is making available more than £50m to support a range of new cyber security initiatives and collaborations, including the latest phase of its Digital Security by Design programme Continue Reading

By

• Alex Scroxton, Security Editor

NHSX could transform NHS security capabilities

The health sector is increasingly confident that NHSX can deliver a streamlined, effective cyber security policy for the health service Continue Reading

By

• Alex Scroxton, Security Editor

Pitney Bowes ‘considering options’ after malware attack

Mailing and shipping services firm in recovery mode after key systems were encrypted by a malware attack Continue Reading

By

• Alex Scroxton, Security Editor

Attackers hunt iPhone jailbreakers in click fraud campaign

Research by Cisco’s Talos threat intel unit has identified a new click fraud campaign targeting people looking to jailbreak their iPhone devices Continue Reading

By

• Alex Scroxton, Security Editor

Private equity swoops on Sophos

British cyber security star picked up by technology sector investors for $3.9bn Continue Reading

By

• Alex Scroxton, Security Editor

McAfee’s push for secure cloud adoption

Organisations must do more to secure their cloud environments as malicious actors increasingly focus their attention on exploiting cloud vulnerabilities, says McAfee Continue Reading

By

• Sebastian Klovig Skelton , Senior reporter

CW Middle East: Saudi banks trial biometrics in ATMs

Biometric and blockchain technologies are being used in tandem to provide ID verification at Saudi Arabian cash machines. Also read about the first government organisation in Bahrain to migrate to Amazon Web Services, and an interview with Yasmeen Al Sharaf, head of fintech and innovation unit, Central Bank of Bahrain. Continue Reading

Small business guide: How to keep your organisation secure from fraudsters and hackers

Doing a few things well can keep your organisation protected from common cyber attacks and fraudsters Continue Reading

By

• Jan Youngren

US likely to concede on Huawei export ban

The US government may make some concessions over the future of Huawei before the end of the year Continue Reading

By

• Alex Scroxton, Security Editor

CIO interview: Matt Harris, head of IT, Mercedes-AMG Petronas Motorsport

The IT chief at the world-leading Formula 1 team is focused on using technology to support and deliver marginal gains in performance for the team’s drivers Continue Reading

By

• Mark Samuels

Security Think Tank: Get basic security policy right, and the rest will follow

Paying attention to basic aspects of cyber security such as policy and permission will give you a sold base to build from Continue Reading

By

• Petra Wenham

Five ways a managed print service can support cyber resilience

As IoT devices, smart MFPs are susceptible to the growing threat of attempts to implant malware, recruit to botnets (to help perpetrate DDoS attacks), as well as potentially providing an open ... Continue Reading

By

• Louella Fernandes, Quocirca

IT contractor charged over cyber attack on property valuation firm

Australian police charge 49-year-old man with stealing and posting more than 170,000 data records belonging to ASX-listed Landmark White on the dark web Continue Reading

By

• Beverley Head

LogRhythm touts unlimited data plan for SIEM systems

SIEM supplier introduces three-year, term-based pricing plan that lets enterprises ingest as much data as they want without breaking the bank Continue Reading

By

• Aaron Tan, TechTarget

Singapore outlines initiatives to tackle OT and IoT security

The Cyber Security Agency of Singapore has developed a blueprint to secure operational technology systems in critical sectors, among other measures to secure cyber-physical systems and the internet of things Continue Reading

By

• Aaron Tan, TechTarget

Nodersok malware campaign is infecting thousands, Microsoft warns

Thousands of Windows endpoints in the US and Europe have been infected by a new fileless malware campaign in the past few weeks Continue Reading

By

• Alex Scroxton, Security Editor

Overinvestment breeds overconfidence among security pros

CISOs have made an abundance of security investments in multiple suppliers, but this might not be the right approach Continue Reading

By

• Alex Scroxton, Security Editor

Latest Lorca cyber security challenge has IoT focus

Government-backed cyber security innovation centre Lorca has issued new challenges around connectivity for its next intake of scaleups Continue Reading

By

• Alex Scroxton, Security Editor

Singapore payment card data compromised by JavaScript sniffers

Raw data of thousands of payment cards issued by Singapore banks stolen by the online equivalent of a traditional card sniffer Continue Reading

By

• Aaron Tan, TechTarget

WannaCry variants accidentally protecting against WannaCry

New variants of the infamous WannaCry malware continue to emerge, and many of them have accidentally turned themselves into a somewhat effective, although ill-advised, vaccine against infection Continue Reading

By

• Alex Scroxton, Security Editor

Ensign InfoSecurity opens global headquarters in Singapore

The Singapore-based cyber security firm’s new headquarters will also be home to a new security operations centre that will be supported by Singapore-centric threat intelligence Continue Reading

By

• Aaron Tan, TechTarget

European court to decide on legality of bulk phone and internet surveillance

The European Court of Justice will decide whether intelligence agencies across Europe can continue to lawfully collect the telephone and internet communications data of citizens, following a two-day hearing this week Continue Reading

By

• Bill Goodwin, Computer Weekly

Mirai descendants dominate IoT threat environment

Attacks leveraging compromised IoT devices are growing in size, scale and frequency, report security experts at F-Secure and Trend Micro, with Mirai-related botnets a major source of trouble Continue Reading

By

• Alex Scroxton, Security Editor

A tech boost for social care

In this week’s Computer Weekly, we explore how local authorities across the UK have been looking at assistive technologies, ranging from collaborative robots to voice assistants, to support delivery of adult social care services. We also look into the ramifications of HMRC targeting 1,500 GlaxoSmithKline IT contractors. Read the issue now. Continue Reading

Singapore’s SecureAge eyes US market

The Singapore-based supplier of encryption and anti-malware tools has set up a new office in Greater Washington, DC as the next logical step in its global expansion plan Continue Reading

By

• Aaron Tan, TechTarget

How to mitigate IoT security risks to tap business benefits

Security concerns are preventing many businesses from adopting IoT-based technologies, but with a bit of planning, the business benefits can be realised by mitigating the risk Continue Reading

By

• Warwick Ashford, Senior analyst

Finland’s security agencies collaborate after cyber attacks

National Bureau of Investigations and National Cyber Security Centre aim to increase expertise and capability to defend Finland’s critical IT infrastructure Continue Reading

By

• Gerard O'Dwyer

VMware’s latest acquisitions point to emerging platform war

VMware’s buyout of Carbon Black and Pivotal is a sign of an emerging platform war following the IBM-Red Hat deal Continue Reading

By

• Aaron Tan, TechTarget

Kaspersky eyes enterprise business, opens APAC transparency hub

The security firm wants to engage with enterprises and use its newly launched Malaysian Transparency Centre to burnish its credentials Continue Reading

By

• Edwin Yapp

A helping hand from the Nordics in the eye of the GDPR storm

Nordic IT companies are well suited to supporting enterprises in their data protection projects, even though openness is more natural to them Continue Reading

By

• Matthew Staff

UK businesses at risk due to PSD2 security standard myths re-emerging

UK businesses could put themselves at risk because of myths surrounding the PSD2 security standard Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Still work to be done securing Open Banking as PSD2 deadline looms

Banks and retailers have work to do to ensure that open banking and PSD2 don't open doors for fraudsters Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Silence APT group eyes APAC banks

Russian-speaking advanced persistent threat group has set its sights on banks in the region, customising its arsenal for targeted attacks Continue Reading

By

• Aaron Tan, TechTarget

PSD2 creates more potential entry points for fraudsters

PSD2 widens the target for fraudsters preying on consumers through social engineering and other non technical attacks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Malware still top security threat, say infosec pros

Malware remains the top security threat to organisations, with ransomware still considered to be the top malware threat and lack of budget the biggest obstacle to defence, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

How EDR is moving beyond the endpoint

An emerging breed of detection and response offerings is going beyond endpoints to collect and decipher telemetry data from across the enterprise Continue Reading

By

• Aaron Tan, TechTarget

Google finds that web users log in with compromised credentials

People continue to use passwords that have been breached. Google has proposed a protocol, which could warn them if their credentials have been stolen Continue Reading

By

• Cliff Saran, Managing Editor

DCMS funding aims to increase diversity in cyber sector

A funding round has been announced as part of the Cyber Skills Immediate Impact Fund (CSIIF) with aims of encouraging more diverse talent into the UK’s cyber security sector Continue Reading

By

• Clare McDonald, Business Editor

Digital domain identified as major security threat by Norway’s intelligence service

Norway's intelligence services has revealed the extent of the threat posed to the country by cyber attacks Continue Reading

By

• Gerard O'Dwyer

UK finance regulator gives extra time for companies to meet payment security rules

Financial Conduct Authority gives companies under its watch an extra 18 months to meet an EU payments security standard Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

How tech experts could earn millions as whistleblowers

In this week’s Computer Weekly, a tech expert is set to earn millions after successfully blowing the whistle on vulnerabilities in Cisco’s video surveillance software. Our latest buyer’s guide examines the issues around big data architecture. And we look at how the end of Windows 7 could spark a new era for desktop productivity. Read the issue now. Continue Reading

Phishing top security threat to business

A new Telefónica security service for business shows that phishing is the most-blocked threat and smaller businesses are a popular attack target in the first two months of deployment Continue Reading

By

• Warwick Ashford, Senior analyst

CW Benelux: Dutch academic hunts the personality behind the hacker

Rutger Leukfeldt, senior researcher on cyber crime at the Netherlands Institute for the Study of Crime and Law Enforcement, is working to help organisations understand the personalities behind criminal hackers. Also in this issue, read about research that shows over half of Dutch organisations admit their knowledge of blockchain is substandard. We also feature an article about ABN Amro’s work with researchers to explore how quantum computing can be used to secure online banking. Continue Reading

Mobiles top target of nation state surveillance

Nation states are targeting individual mobile users for intelligence gathering and disruption of rivals as security on mobile devices lags behind traditional computing, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Space – the new frontier in cyber security

50 years after the Moon landings, our growing reliance on satellite communications presents a new target for malicious cyber attacks Continue Reading

By

• Elliot Rose

Cyber kill chain is outdated, says Carbon Black

The chief cyber security officer of Carbon Black calls for a new cognitive paradigm to fend off cyber adversaries that are now attacking in cycles Continue Reading

By

• Aaron Tan, TechTarget

Microsoft talks up benefits and pitfalls of machine learning in security

Software giant Microsoft uses machine learning models to detect emerging threats while keeping an eye on potential bias in security data points that could derail its analysis Continue Reading

By

• Aaron Tan, TechTarget

HID weighs in the glacial move towards digital ID

There are still concerns over data integrity, security and privacy of digital identities, but the convenience of the technology outweighs the risks, says a HID expert Continue Reading

By

• Aaron Tan, TechTarget

CW ASEAN: Trend Watch – Security

Artificial intelligence tools are becoming a vital part of the security arsenal for organizations and cyber criminals alike. In this handbook, Computer Weekly looks at how ASEAN firms are using AI to combat cyber threats and experts discuss the latest smart cyber security tools. Continue Reading

CW ANZ: Trend Watch – Security

With regulations pushing data protection up the business agenda, we look at how Australia’s Notifiable Data Breaches scheme has been received and consider why a survey that found Australian firms are experiencing fewer cyber breach incidents appears to conflict with anecdotal evidence that suggests the opposite. Continue Reading

Suspected malicious MS Office tool maker arrested

Dutch police have arrested a man suspected of producing and selling toolkits to create malicious Microsoft Office documents Continue Reading

By

• Warwick Ashford, Senior analyst

Organisations turn to AI in race against cyber attackers

Businesses are racing to automate their defences as hackers and nation states launch increasingly sophisticated cyber attacks Continue Reading

By

• Bill Goodwin, Computer Weekly

APAC IoT adoption improves amid challenges

More enterprises across the region are using the internet of things to track fleet vehicles and improve operations, but technology integration and security concerns are still holding back widespread adoption Continue Reading

By

• Edwin Yapp

Securing your mobile estate – best practice for CIOs

The prevalence of mobile devices in every part of daily life is shaping how enterprises make choices about software and network infrastructure, but how do businesses go about securing these vast new endpoint estates? Continue Reading

By

• Christian Annesley

Agent Smith mobile malware hits millions of devices

New mobile malware that exploits Android vulnerabilities has infected millions of devices, security researchers have discovered Continue Reading

By

• Warwick Ashford, Senior analyst

TfL launches wireless device tracking to gather Tube data

Transport for London aims to use passenger movement data to make using the London Underground a more pleasant experience Continue Reading

By

• Alex Scroxton, Security Editor

Implementing IoT – overcoming barriers to commercial adoption

Tim Wright from the Institute of Telecoms Professionals reports from a recent seminar exploring questions around the barriers to commercial, at-scale adoption of the internet of things, and how to overcome them Continue Reading

By

• Tim Wright, Institute of Telecommunications Professionals

Sweden’s Protective Security Act targets cyber risks

IT suppliers must comply with tighter cyber security requirements, but are being offered help from government agencies Continue Reading

By

• Gerard O'Dwyer

Symantec gearing up for future cyber security

Symantec is focusing on enabling businesses to secure data in the cloud after a string of acquisitions, but it also has its eye on the future, which will be all about empowering people, says CTO Hugh Thompson Continue Reading

By

• Warwick Ashford, Senior analyst

How to get the basics of mobile device management right the first time

When adopting mobile device management, there are often fears around implementation and whether or not the strategy is even required Continue Reading

By

• Rene Millman

Dutch bank and researchers begin defence against quantum computing’s dark side

ABN Amro is working with QuTech to ensure that banks can protect data against quantum computers in the future Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Fido Alliance announces new standards

Fido Alliance announces new identity verification and IoT initiatives to expand the reach and impact of Fido authentication, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

Saudi banks trial blockchain-based identity technology at ATMs

Biometric and blockchain technologies are being used in tandem to provide ID verification at Saudi Arabian cash machines Continue Reading

By

• Alicia Buller

Facebook officially unveils cryptocurrency plans

Facebook has released details about its Libra cryptocurrency, but questions still remain over how, and if, it will work Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Signify goes after Wi-Fi with range of Li-Fi office lighting

Although analyst Gartner has urged IT departments to approach Li-Fi with caution, the use of light as an alternative to Wi-Fi is set to gain momentum Continue Reading

By

• Cliff Saran, Managing Editor

Inside F5’s cyber security playbook

F5 Networks' CISO talks up measures that the application delivery and security specialist is employing to fend off cyber attackers that come knocking on its doors Continue Reading

By

• Aaron Tan, TechTarget

Cisco shows off AI-driven network analysis at customer event

New tools to help IT departments better understand network behaviour and predict potential problems were among a series of announcements made on the opening day of Cisco Live in the US Continue Reading

By

• Alex Scroxton, Security Editor

Large firms look to zero-trust security to reduce cyber risk

In the face of increasing cyber breach risk as organisations move to hybrid multi-cloud IT environments, just over half of large firms in Europe are planning a zero-trust approach to security Continue Reading

By

• Warwick Ashford, Senior analyst

Apple tackles iPad-to-Mac app portability

Xcode framework enables app developers to use one set of source code to target either iPadOS or MacOS Continue Reading

By

• Cliff Saran, Managing Editor

How ASEAN firms are using AI to combat cyber threats

Artificial intelligence tools are becoming a vital part of the security arsenal for organisations and cyber criminals alike Continue Reading

By

• Ai Lei Tao

CIO interview: Gary Foote, CIO, Rich Energy Haas F1

When he was offered the opportunity to set up the technology for a new Formula One team from scratch, CIO Gary Foote couldn’t wait to get on the starting line Continue Reading

By

• Mark Samuels

What the UK can learn from the Nordics when it comes to digital ID

The UK and other countries can learn from the Nordic region when it comes to digital identity Continue Reading

By

• John Erik Setsaas

Dutch lecturer researches the person behind the cyber criminal

Dutch academic is trying to get inside the mind of cyber criminals by understanding what makes them tick Continue Reading

By

• Kim Loohuis

Danske Bank launches initiative to help SME customers with cyber security

Danske Bank launches initiative to support the cyber security efforts of its SME customers Continue Reading

By

• Gerard O'Dwyer

Security Think Tank: Proper segregation is more important than ever

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

APAC firms on the back foot in cyber security

Most Asia-Pacific organisations did not consider cyber security until after their digital transformation projects had begun, new survey finds Continue Reading

By

• Aaron Tan, TechTarget

Electronic ID in the Nordics – a model for other countries?

Use of electronic identity schemes in Sweden, Norway, Finland and Denmark is far ahead of other countries – but why? Continue Reading

By

• Alex Cruickshank

Some Australian firms still in the dark about cyber security

A report suggesting Australian firms are experiencing fewer cyber incidents has left its co-author perplexed with the findings Continue Reading

By

• Beverley Head

Young Dutch cyber criminals get re-education rather than jail time

 Continue Reading

Privileged access management moving to cloud

Survey shows nearly half of information security professionals are either planning to move privileged access management to the cloud or are exploring the possibility Continue Reading

By

• Warwick Ashford, Senior analyst

Defence secretary sacked over Huawei leak

Defence secretary Gavin Williamson has been sacked after leaking confidential discussions over the use of Huawei networking equipment Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: The Computer Weekly Downtime Upload – Episode 13

In this week’s episode of the Computer Weekly Downtime Upload podcast, the team are joined by security editor Warwick Ashford to talk about his time at the CyberUK conferences, as well as connected cars, education in the UK, and Brian McKenna’s trip to China Continue Reading

By

• Computer Weekly Staff

Australians lost half a billion dollars to scams in 2018

Most of the losses went to investment scams as tricksters found innovative ways to dupe victims into parting with their money Continue Reading

By

• Aaron Tan, TechTarget

GDPR cases drive bigger budgets for Nordic regulators

High-profile General Data Protection Regulation cases in Finland and Sweden have increased the workload for regulators, which are to receive an increase in funding Continue Reading

By

• Gerard O'Dwyer

APAC set for blockchain boom

Led by China, spending on blockchain technology in Asia-Pacific excluding Japan will surpass $2bn by 2022 Continue Reading

By

• Aaron Tan, TechTarget

Singtel and NUS claim quantum breakthrough

Researchers from Singtel and the National University of Singapore have succeeded in coordinating the paths of photons across a fibre network to drive wider adoption of quantum key distribution Continue Reading

By

• Aaron Tan, TechTarget

Energy industry needs to up cyber defences, warns report 

Cyber threat actors are advanced and persistent, but firms in the energy industry are using outdated systems and technology to save money, putting them at risk of cyber attacks, warns F-Secure report Continue Reading

By

• Warwick Ashford, Senior analyst

How Palo Alto Networks fends off its cyber adversaries

Palo Alto Networks CIO Naveen Zutshi talks up the company’s approach in keeping threat actors at bay Continue Reading

By

• Aaron Tan, TechTarget

CW Middle East: Visibility and security of networks are top IT priorities

The 2019 Computer Weekly/TechTarget IT Priorities survey shows that enterprise buyers in the Middle East, like those in the UK and Europe, are looking to lock down their networks in the face of an almost constant barrage of threats and malicious actors. Also read how Facebook planned to use its Android app to track the location of its customers and to allow advertisers to send political advertising, and what further details operator O2 has revealed about how it is planning for the advent of 5G. Continue Reading

How APAC firms can tame the data beast

Companies and data management experts across Asia-Pacific reveal how they are tackling data management challenges that have been compounded by growing cloud usage and compliance requirements Continue Reading

By

• Aaron Tan, TechTarget

Researchers uncover US-based malware distribution centre

More than a dozen US-based web servers are operating as the malware equivalent of an Amazon fulfilment centre to target businesses, security researchers have found Continue Reading

By

• Warwick Ashford, Senior analyst

Akamai to open second traffic scrubbing centre in Australia

New centre in Melbourne will meet growing demand for scrubbing services to mitigate the impact of distributed denial of service attacks in Australia Continue Reading

By

• Beverley Head

Black Hat Asia 2019: Get ready for the cyber arms race

The arms race is now squarely in the cyber realm as defence teams and threat actors arm themselves with AI tools Continue Reading

By

• Ai Lei Tao

Singapore government to review data security in public sector

A high-level committee comprising ministers and private sector security experts will review data security practices and recommend measures to better protect citizens’ data Continue Reading

By

• Aaron Tan, TechTarget

Windows 10 security breach highlights third-party vulnerabilities

The recent Windows 10 PC security breach brought on by third-party software from a Chinese tech company raises concern about the security strength of third-party providers. Continue Reading

By

• Jesse Scardina, News Writer

Cyber attacks targeting industrial control systems on the rise

Malicious cyber activity increased to almost half of the industrial infrastructure protected by Kaspersky Lab in 2018, but the UK is among the most secure countries, the security firm reports Continue Reading

By

• Warwick Ashford, Senior analyst

Layer your approach to web security

Combining unified threat management with other security systems and a strategic CISO is essential to defend against threats Continue Reading

By

• Cliff Saran, Managing Editor

Almost half UK firms hit by phishing attacks

Almost half of UK organisations have been compromised in the past two years using phishing attacks, despite high levels of cyber awareness and training, research shows Continue Reading

By

• Warwick Ashford, Senior analyst