Endpoint security

Intel admits chip security has a long way to go

A year ago, the world came to realise how a side-loading attack could compromise a microprocessor. Intel has been working hard to make fixes easier Continue Reading

By

• Cliff Saran, Managing Editor

Can we live without passwords?

Can you imagine a future in which we can be secure online without having to remember an unwieldly list of passwords? Solutions are emerging that could make passwords redundant, but there will be other security problems to resolve Continue Reading

By

• Bruno Halopeau & Adrien Ogee

Security Think Tank: Pay attention to attribute-based system access permissions

At the close of 2018, we asked CW Security Think Tank contributors to name one thing predicted for 2018 that did not happen, one thing that was not predicted and did happen and one thing that should happen in 2019, but probably will not Continue Reading

By

• Simon Persin, Turnkey Consulting

Government announces new plans to develop cyber talent

The government has announced plans for a Cyber Security Council to form a strategy for developing future cyber talent Continue Reading

By

• Clare McDonald, Business Editor

APAC cyber security landscape to be more tumultuous in 2019

Amid growing cyber threats, the Asia-Pacific cyber security landscape will not get any rosier in 2019 unless organisations start shoring up their cyber hygiene Continue Reading

By

• Aaron Tan, TechTarget

Australia passes controversial encryption law

Arguments continue over law that requires companies to work with government agencies to ensure that encrypted communications can be read if a crime is suspected Continue Reading

By

• Beverley Head

Court orders Post Office to explain inability to access encrypted file

Post Office unable to open encrypted recording of an interview that forms part of its evidence in High Court case Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The future of network-connected device security

The proliferation of poorly secured network-connected devices has prompted the UK government to publish new best practice guidelines. Do these go far enough? Continue Reading

By

• Peter Ray Allison

How bring-your-own-land attacks are challenging enterprises

FireEye researchers developed a new technique called bring your own land, which involves attackers creating their own tools. Discover more about how this works with Nick Lewis. Continue Reading

By

• Nick Lewis

Securing the SD-WAN: The next network challenge

Every time an enterprise weighs up whether or not to try SD-WAN, security is an essential part of the picture Continue Reading

By

• Christian Annesley

Norway’s IT industry must tackle security vulnerabilities

Report reveals growing threat posed by “hostile foreign actors” against Norway’s IT systems and critical national infrastructure Continue Reading

By

• Gerard O'Dwyer

VMware takes layered approach to securing datacentres

From securing workloads to segmenting the network, VMware’s architecture is using AppDefence and NSX for intrinsic datacentre security Continue Reading

By

• Cliff Saran, Managing Editor

Facebook to appeal EU-US data transfer ruling in Irish Supreme Court

Facebook will appeal a decision by the Irish High Court to refer questions over the legality of EU-US data transfers to the European Court of Justice in January, as the Dublin court rejects attempt by a UK IT expert to join the case Continue Reading

By

• Bill Goodwin, Computer Weekly

Australia’s data breaches are a ‘sign of naiveté’

McAfee executive attributes Australia’s poor cloud security record to the lack of data protection measures amid “new and confusing” cloud configurations Continue Reading

By

• Beverley Head

Kaspersky advances plans to encourage women into cyber

Cyber security provider Kaspersky Lab has partnered with several other organisations to try to encourage more women into cyber Continue Reading

By

• Clare McDonald, Business Editor

Time to implement new cyber security protections, says McAfee CEO Chris Young

Convergence of threats and technologies and an increasingly complex regulatory environment are driving the need to implement new cyber security protections, says McAfee chief Continue Reading

By

• Warwick Ashford, Senior analyst

APAC security spending tipped to reach new highs

Security services will be the largest and fastest-growing slice of the overall security pie in the Asia-Pacific region Continue Reading

By

• Aaron Tan, TechTarget

Apple challenges Australia’s proposed decryption law

Tech giant Apple argued that the lack of judicial oversight could reduce customer trust and security, among other reservations over Australia’s draft decryption legislation Continue Reading

By

• Aaron Tan, TechTarget

AI is no silver bullet for cyber security

A security expert has called for businesses to manage the risks of adopting new technologies and improve their cyber hygiene, rather than see artificial intelligence as a panacea for their security woes Continue Reading

By

• Aaron Tan, TechTarget

Optus to acquire Hivint in cyber security deal

The deal is expected to bolster the telco’s security pedigree in a market that is grappling with more data breaches and cyber incidents Continue Reading

By

• Aaron Tan, TechTarget

Detail of Dutch reaction to Russian cyber attack made public deliberately

Four Russian intelligence officials were expelled from the Netherlands after an attempted hack on the global chemical weapons watchdog. The Dutch government has been open about the detail Continue Reading

By

• Tijs Hofmans

Security Think Tank: Use Cyber Essentials to kick-start outcomes-based security

What is the first step towards moving from a tick-box approach to security to one that is outcomes-based and how can an organisation test whether its security defences are delivering the desired outcome? Continue Reading

By

• Petra Wenham

How Starbucks is using Splunk to automate mundane security tasks

Coffee giant Starbucks is using Splunk to automate some of its more tedious security tasks to reduce the workload for its cyber staff Continue Reading

By

• Clare McDonald, Business Editor

How Bank of England is using Splunk for proactive security

Head of the Bank of England’s security operations centre talks about how Splunk is helping it to take a more proactive approach to preventing cyber attacks Continue Reading

By

• Clare McDonald, Business Editor

Blockchain is no ‘magic wand’ for cyber security

The decentralised nature of blockchain networks may deter some cyber crooks, but ASEAN organisations still need to pay heed to the security of their blockchain infrastructure Continue Reading

By

• Aaron Tan, TechTarget

Norwegian state discusses vulnerabilities with IT sector

Government is collaborating with the country’s IT industry to improve the availability of security expertise Continue Reading

By

• Gerard O'Dwyer

Equifax fined by ICO for security failings

The Information Commissioners Office has fined Equifax UK in relation to a data breach at its UK parent last year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Singapore government to start bug bounty programme

Singapore’s bug bounty programme will help the authorities identify cyber blind spots and benchmark its defences against skilled hackers Continue Reading

By

• Aaron Tan, TechTarget

Printing, document capture and compliance risk in the GDPR era

Printers, scanners and mobile devices that capture data from documents all store data in some way or other. How can you be sure to be compliant with GDPR with regard to that data? Continue Reading

By

• Antony Adshead, Storage Editor

NCSC issues core questions to help boards assess cyber risk

The National Cyber Security Centre has published its first in a series of guidance for board members which highlights what businesses should be asking security teams Continue Reading

By

• Clare McDonald, Business Editor

Two-thirds of emails not clean, says research

Two-thirds of emails don't make it to the inbox because security systems consider them unsafe, according to research Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Cyber criminals outspend businesses in cyber security battle

Cybercriminals are flexing their financial might and UK organisations are facing more attacks as a result Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

New Zealand to run national cyber security exercise

The island-nation will test the resilience of its critical infrastructure in November 2018, bringing together multiple agencies to protect assets of national significance Continue Reading

By

• Beverley Head

Over 146 billion records to be stolen over next five years

The US will bear the brunt of data exfiltration efforts by cyber criminals, though Asia-Pacific nations such as Singapore will not be spared Continue Reading

By

• Aaron Tan, TechTarget

Microsoft looks at a Windows VM to sandbox rogue code

A feature revealed in the Windows Insider programme may appear in a future Windows 10 update for enterprises Continue Reading

By

• Cliff Saran, Managing Editor

The value of unified endpoint management

Given the diversity of devices people can use for work, IT needs to look at how it can unify device security Continue Reading

By

• Bob Tarzey

UK security centre to launch IoT security standard

The London-based Centre for Strategic Cyber Space and Security Science is working on an internet of things security standard and has roped in participants from eight markets Continue Reading

By

• Aaron Tan, TechTarget

How Estonia took a digital lead

In this week’s Computer Weekly, we look at one of the world’s most digitally advanced nations, Estonia, and ask what the UK government can learn from this small Baltic state. We talk to Airbus about how aircraft manufacturers are prioritising cyber security. And we examine how AI and robots will augment – not replace – human productivity. Read the issue now. Continue Reading

App users in developing APAC prefer convenience over security

By Kimberly Chua Mobile app users in developing Asia-Pacific (APAC) countries prefer convenience over security, signaling a potential rift between companies and users, a new F5 Networks study has ... Continue Reading

By

• Aaron Tan, TechTarget

Australian energy sector caught in security catch-22

With regulators unwilling to accept security investments that would lead to higher tariffs, there is a chance that Australia’s National Energy Market could face increased cyber risks Continue Reading

By

• Beverley Head

CW ASEAN: Defend against disruption

The security of industrial control systems (ICS) has come under the spotlight with several high-profile incidents affecting power plants and other critical infrastructure in recent years. What are the threats to these systems in ASEAN, and what is the common approach to securing ICS systems? In this month’s issue of CW ASEAN, we take a closer look at how ICS operators are improving the visibility of ICS environments without jeopardizing operations, addressing security vulnerabilities and enhancing cooperation between IT and operational technology teams. Read the issue now. Continue Reading

Deloitte launches EMEA-wide initiative to close cyber security gender gap

Professional services organisation Deloitte expands its UK efforts to encourage more women into cyber security to cover the EMEA area Continue Reading

By

• Clare McDonald, Business Editor

CW ANZ: Fix the weak links

Recent reports have suggested that cyber threats are increasingly aimed at critical information infrastructure such as power grids, water treatment plants and transportation networks. While the scale of the problem that Australian industry faces is hard to quantify, no one disputes the threat is real. In this edition of CW ANZ, we look at how Australia is securing its industrial control systems and how it is bridging the security gap between IT and OT teams. Read the issue now. Continue Reading

An insider’s look into the dark web

A principal research scientist at Sophos offers a glimpse into the abysses of the dark web in a bid to uncover what cyber crooks are up to Continue Reading

By

• Aaron Tan, TechTarget

A third of organisations do not have a security expert, survey shows

Around a third of organisations are vulnerable to cyber attacks due to a lack of dedicated in-house cyber security experts, finds Gartner survey Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Mobile devices lost in London underline security risk

The security risk of lost mobile devices is underlined by the fact that almost 26,000 mobile phones and computing devices were lost in London in the past year alone Continue Reading

By

• Warwick Ashford, Senior analyst

Endpoint security tool fueled OpenText's Guidance Software acquisition

Endpoint security was the primary draw for OpenText's Guidance Software acquisition. But plans to improve e-discovery and data forensics with Magellan AI are part of the roadmap. Continue Reading

By

• Don Fluckinger, Senior News Writer

Cloudian adds Storage Made Easy file-sync-and-share compliance

Object storage maker adds file-sync-and-share with compliance filters from Storage Made Easy to restrict movement of potentially sensitive data between endpoints and datacentres Continue Reading

By

• Antony Adshead, Storage Editor

Australian startups team up to keep wind turbines humming

Using acoustic sensors and nanosatellite connectivity, two Australian startups hope to identify potential turbine problems before they occur to secure the country’s wind energy Continue Reading

By

• Beverley Head

Cyber security – why you’re doing it all wrong

Most organisations can list the IT security tools and controls they have, so why do most of them still get the security basics wrong? Continue Reading

By

• Ed Tucker, Human Firewall

IT On A Budget? Still Plenty Of Investment Money Around...

IT is often two-faced and never more so than when it comes to the financial health of the industry. Speak to one set and they'll tell you how tight it is, scrapping for every penny of profit, and ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Brexit a greater risk to UK financial system than cyber attack

While Brexit is seen as the biggest risk to the stability of the UK financial system, cyber attack is the most difficult risk to manage for over half of firms Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Global IoT security standard remains elusive

Despite the lack of a global internet of things security standard, existing security frameworks are on the same page in areas such as device upgradability and data stewardship Continue Reading

By

• Aaron Tan, TechTarget

Norway’s National Security Agency warns IT industry about security obligations

IT service providers serving organisations in Norway have received a timely reminder about their security obligations. Continue Reading

By

• Gerard O'Dwyer

Apple rejects claim of iPhone brute force hack

Apple has rejected claims by a security researcher that he was able to bypass the iPhone defences against brute force passcode hacks Continue Reading

By

• Warwick Ashford, Senior analyst

CW ANZ: Object storage hits a sweet spot

Enterprises in Australia are only getting started on object storage, which does away with the traditional file directories, making it easier to access and move data in a heterogeneous IT environment. In this issue of CW ANZ, we look at how Australian companies are dipping their toes into object storage, the challenges they are facing and the state of the market. Read the issue now. Continue Reading

More APAC consumer goods firms expected to adopt blockchain

The adoption of blockchain technology is likely to increase in the consumer goods industry as more businesses use the technology to address fraud and improve supply chain management Continue Reading

By

• Kimberly Chua

Singapore remains hotbed for cyber threats

Singapore was a victim of advanced persistent threats, phishing and website defacements in 2017, according to the latest threat landscape report by the Cyber Security Agency Continue Reading

By

• Aaron Tan, TechTarget

Singapore faced cyber attacks during Trump-Kim summit

Russian attackers allegedly scanned IP phones in the city-state for vulnerabilities, although it was unclear what they were after or whether they were successful Continue Reading

By

• Aaron Tan, TechTarget

Your PC is rooted and jailbroken: deal with it!

One of the defining characteristics of the modern digital workplace is a Windows PC on every desk and a smartphone in every pocket. The ability to centrally discover, provision, deploy, update, and ... Continue Reading

By

• Richard Edwards, Freeform Dynamics

Insurer Beazley meets global challenge to secure mobile workforce

Beazley has stolen a march on other London-market insurers by implementing a versatile global digital workspace with improved security Continue Reading

By

• Christian Annesley

BYOD for mobile ‘a year away’ for Williams F1

Companies in the Williams Group – the Formula One racing operation Williams Grand Prix Engineering and its high-growth sister operation Williams Advanced Engineering – are investing with mobile security front-of-mind to enable more agile working practices within 12 months Continue Reading

By

• Christian Annesley

Huge rise in TSB-themed mobile phishing attacks after IT meltdown

Scammers have used bank’s IT problems as an opportunity to target its customers with mobile phishing attacks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ethical hacker, 86, rises to Santander’s challenge

Elderly hacker with little computing experience was able to hack WiFi and create phishing attack Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Cyber resilience key to securing industrial control systems

Operators of industrial control systems can build greater cyber resilience by getting IT and operational technology teams to work more closely together and improving the visibility of their infrastructure, among other security measures Continue Reading

By

• Aaron Tan, TechTarget

Grab outlines its approach to cyber security

Singapore-based ride-hailing company prefers detective controls rather than preventive ones to deter cyber threats – an approach it claims is less intrusive and costly to implement Continue Reading

By

• Aaron Tan, TechTarget

CW Nordics: Finland delays e-voting plan

Security concerns have re-emerged to further frustrate the Finnish government’s plans to launch a national e-voting system. Also read about a study by the Stockholm School of Economics that looks at the likely impact of AI, machine learning and robotics on people’s lives. And find out why Norway has accelerated plans to scale up its national cyber security infrastructure. Continue Reading

APAC organisations could lose $1.75tn from cyber attacks

A study by Frost and Sullivan has found that losses from cyber security incidents could account for 7% of the region’s GDP in 2017 Continue Reading

By

• Aaron Tan, TechTarget

SMEs more worried about GDPR’s threat to reputation than fines

SMEs are more worried about the damage GDPR non compliance will do to their reputations than their wallets Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

BSI launches kitemark for internet of things devices

The British Standards Institution has launched a new kitemark for IoT devices, designed to improve consumer trust in the technology Continue Reading

By

• Alex Scroxton, Security Editor

Citrix touts digital workspace app in services play

Software supplier Citrix’s cloud-based workspace app is part of its efforts to deliver integrated services that support the modern workplace Continue Reading

By

• Beverley Head

Hacking the internet of things just got easier – it’s time to look at your security

Are you taking security for internet-connected devices seriously enough? Continue Reading

By

• Dan Mosca, PA Consulting

Microsoft’s latest Windows 10 focuses on IT admins

While it will stop those annoying taskbar InBox and social media messages, at the heart of the April 2018 Windows 10 update is an effort to simplify management Continue Reading

By

• Cliff Saran, Managing Editor

British banks target Israeli security technology

British banks are turning to Israel’s high-tech sector to protect against cyber attacks Continue Reading

By

• Bill Goodwin, Computer Weekly

Finnish R&D and utilities in line of cyber espionage fire, say security police

Finnish research and development, as well as critical infrastructure, are being targeted by state-backed cyber espionage attacks, says report Continue Reading

By

• Tarmo Virki

Executive interview: Werner Knoblich, Red Hat

Red Hat is 25 years old. We speak to its European chief about how open source, containers and hybrid cloud computing represent the foundation for IT Continue Reading

By

• Cliff Saran, Managing Editor

CyLon continues to drive cyber security innovation with next accelerator cohort

CyLon has selected the next group of innovative cyber security startups for its seventh London accelerator programme Continue Reading

By

• Zach Emmanuel, Computer Weekly

Mastercard calls for global online payments standard

Mastercard and its EMV partners are pushing for online payments standards similar to those for point-of-sale payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CW ANZ: OpenStack gains a foothold in Australia

In this issue of CW ANZ, we look at how OpenStack has changed the way Australian enterprises operate their IT infrastructure. Also read how Australia’s Citic Pacific Mining is digging into IoT technology to track vehicles, and how Telstra is investing in two submarine cables to bolster Asia-US connectivity. Continue Reading

APAC is becoming a hotspot for DDoS attacks

The region’s largest and most-connected economies are most vulnerable to distributed denial-of-service attacks, according to CenturyLink Continue Reading

By

• Aaron Tan, TechTarget

Australian healthcare services most hit by data breaches

Nearly a quarter of data breaches reported under Australia’s new mandatory data breach regime took place in the healthcare sector Continue Reading

By

• Beverley Head

Government to set up £13.5m cyber security centre

Located at the 2012 Olympic Park, the London Cyber Innovation Centre could create up to 2,000 jobs in cyber security Continue Reading

By

• Alex Scroxton, Security Editor

Mobile phishing a growing threat, warns report

Phishing on mobile devices is a growing threat to business as attacks move beyond email to text messages and apps Continue Reading

By

• Warwick Ashford, Senior analyst

Podcast: Storage compliance for GDPR data subject requests

The General Data Protection Regulation is upon us. Mathieu Gorge, CEO of Vigitrust, talks you through the key areas needed for compliance in storage of data subjects’ data and how to find it quickly on request Continue Reading

By

• Antony Adshead, Storage Editor

Security professionals admit patching is getting harder

Vulnerable systems need patching to avoid being attacked by security exploits, yet many businesses find it hard to apply patches quick enough Continue Reading

By

• Cliff Saran, Managing Editor

IoT security cannot be an afterthought: it must be the foundation of design

As technologies for the internet of things mature, developers need to make security by design a fundamental part of their products Continue Reading

By

• Julian David, TechUK

Only newer systems will get Intel firmware updates for Spectre chip flaw

Intel will not issue patches for legacy processors, so older systems and legacy embedded applications will remain vulnerable to Spectre exploits Continue Reading

By

• Cliff Saran, Managing Editor

Facebook announces more privacy control updates

Social media giant updates privacy settings and tools in response to the unfolding controversy over Cambridge Analytica’s use of Facebook data for political campaigns Continue Reading

By

• Warwick Ashford, Senior analyst

Majority of firms fear mobile workers have been hacked

More than half of organisations fear that their mobile workers have been hacked and most are concerned that a growing mobile workforce means increased cyber security risk, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Fintech professional’s tech predictions: 2 - Smart meter breaches

Energy smart meters will increasingly be targets for cyber attacks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Dutch SMEs’ cyber security is insufficient

Nowhere in the Netherlands is digitisation as big as it is in small and medium-sized enterprises, but the sector still has a lot to do in terms of cyber security Continue Reading

By

• Kim Loohuis

Singapore government outlines its approach to IoT

Avoiding supplier lock-in, driving open standards and tapping modular platforms are part of the approach that the Singapore government has taken in implementing the internet of things in the city-state Continue Reading

By

• Aaron Tan, TechTarget

C-suite a cyber attack risk, say security chiefs

Those tasked with running organisations are the most likely group to expose them to a major cyber attack, a poll of UK information security executives shows Continue Reading

By

• Warwick Ashford, Senior analyst

Network security in the digital transformation era

Network security has always been a core focus for CISOs and IT security managers, but in an era of digital transformation, we examine if network security strategies are keeping up with new and emerging cyber threats Continue Reading

By

• Nicholas Fearn

CW ASEAN: Time to boost cyber defences

With a relatively young and tech-savvy population, ASEAN has been at the forefront of technology adoption. Yet, this has exposed its people and businesses to more cyber threats, including the massive data leak in Malaysia in 2017. In this month’s issue of CW ASEAN, we take a closer look at ASEAN’s patchy cyber security landscape, including varying levels of cyber resilience across the region, cyber security strategies adopted by different countries, as well as efforts to improve cyber capabilities and foster greater collaboration in the common fight against cyber threats. Download the issue now. Continue Reading

CW ANZ: Report data break-ins – it’s the law

Cyber security is an increasingly global endeavour, with threat actors who know no boundaries unleashing attacks from nearly anywhere in the world. In this month’s issue of CW ANZ, we look at how Australia’s mandatory data breach notification law underscores recent efforts to lift its cyber security game, both locally and internationally. Download the issue now. Continue Reading

APAC security chiefs expect imminent attack on critical systems

Nearly 70% of cyber security leaders in the APAC region believe a major attack affecting critical infrastructure across multiple countries will happen in the next two years, a survey reveals Continue Reading

By

• Aaron Tan, TechTarget

Public sector organisations ill-prepared for GDPR

Public sector organisations in the UK need to do much more to comply with the General Data Protection Regulation rule on providing information to citizens about details held about them Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Slingshot router malware: a warning for businesses

A stealthy malware that has been used to carry out cyber espionage undetected for six years should raise a red flag to businesses, say security commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Fileless attacks surge as hackers exploit PowerShell scripts

Malicious scripting through Microsoft’s PowerShell IT admin tool is being used to take control of Windows machines and Apple Macs Continue Reading

By

• Cliff Saran, Managing Editor