Endpoint security

Danish shipping giant Maersk recovering from major Petya cyber attack

Company confirms attack took down its IT system across multiple sites and business units, but has now been contained Continue Reading

By

• Eeva Haaramo

Petya ransomware hits Aussie businesses

The latest ransomware attack has reached Australia’s shores, prompting calls to dump on-premise IT infrastructure for the cloud Continue Reading

By

• Stuart Kennedy

Pirated software used to spread malware in APAC

A regional study by a Singapore university has found that counterfeit software distributed through discs and file-sharing networks is plagued by malware Continue Reading

By

• Aaron Tan, TechTarget

Australia’s decryption plan seen as untenable

Experts say efforts to get technology and social media firms to cooperate with the authorities in decrypting communications will be hard to achieve Continue Reading

By

• Beverley Head

Microchips implanted in hands could be in use for payments in 20 years

UK consumers are becoming more accepting that biometric authentication will become the norm for payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Islamic State supporters shun Tails and Tor encryption for Telegram

Confidential communications show terror group’s supporters are turning to simple mobile phone messaging apps to exchange messages and distribute propaganda Continue Reading

By

• Bill Goodwin, Computer Weekly

Interview: Nick Bleech, head of information security, Travis Perkins

Last year, Travis Perkins implemented Splunk to help it to respond more quickly to security threats. Now, the business is looking into machine learning and a single customer view Continue Reading

By

• Clare McDonald, Business Editor

HSBC voice authentication tricked by twins

Twin brothers managed to trick HSBC’s voice recognition security system into giving account access to the wrong person Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Command and control communications key to detecting threats

Malware command and control (C&C) communications are key to detecting advanced threats, according to a security researcher Continue Reading

By

• Warwick Ashford, Senior analyst

NHS hospitals hit in global ransomware attack

Hospitals across England are reporting problems with IT systems that are affecting healthcare treatment, caused by what could be a global ransomware campaign enabled by a leaked NSA exploit Continue Reading

By

• Warwick Ashford, Senior analyst

Mastercard integrates biometric technology into cards

MasterCard tests out biometric technology embedded into payment cards, with further trials in Europe planned Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Banks suffer average of 85 attempted serious cyber attacks a year, and one-third are successful

Banks face daily cyber attacks, many of which succeed in stealing data, research finds Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

InterContinental Hotel Group reveals extent of malware attack

Hotel group InterContinental (IHG) reveals that malware attempting to glean payment card details sat undetected on its network in the US for three months Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security as a service on the rise in the UAE

Organisations in the United Arab Emirates are increasingly turning to security services Continue Reading

By

• Alicia Buller

Outsourcing service left Scottrade Bank customer data exposed

Mistake by outsourcing service provider left the details of 20,000 Scottrade Bank customers vulnerable to theft Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Essential guide to laptop, desktop PC and mobile device strategy

A guide to the latest technologies and best practice in enterprise IT strategy for laptops, desktop PCs and mobile Continue Reading

Interview: F-Secure’s Mikko Hyppönen on the Nordics, Russia and the internet of insecure things

Computer Weekly sat down with Finnish cyber security expert Mikko Hyppönen to talk about security in the Nordics, Russia and the trouble with connected devices Continue Reading

By

• Eeva Haaramo

Threats grow in Saudi Arabia’s cyber sector

Saudi Arabia's wealth makes it an attractive target for cyber criminals, but what have been the recent trends in cyber crime? Continue Reading

By

• Triska Hamid

CW ASEAN: Raising national security standards

In this month’s CW ASEAN, we describe how Singapore is improving its cyber security defenses and preparations through a partnership with British security company BAE Systems. We also find out why the Thai military plans to recruit civilian cyber warriors and we take a look at evolving security approaches. Read the issue now. Continue Reading

CW Europe: Technology poses new risks to jobs, economies and society

Rapid advances in technology could have destabilising effects on employment and economic growth, and could exacerbate social unrest, the World Economic Forum (WEF) warned. Society’s failure to keep pace with technology change was a key risk under discussion at Davos in January. Continue Reading

Industrial control systems pose big risk to security

In this week’s Computer Weekly, we examine the risks to critical national infrastructure from security vulnerabilities in legacy industrial control systems. DevOps is growing in popularity – we find out about the organisational, process and cultural approaches to make it succeed. And we ask CIOs how they are becoming hybrid IT and digital leaders. Read the issue now. Continue Reading

Citizen Love: the story of an ordinary family's fight with the US government

Finnish documentary makers Raimo Uunila and Lauri Danska tell the behind-the-scenes story of activist Lauri Love’s battle with the US government – and the impact of the case on his family Continue Reading

By

• Bill Goodwin, Computer Weekly

MobileIron: Corporate IT policy and mobile device security are mismatched

MobileIron report identifies a gap between security policy and the actual deployment of that policy on mobile devices Continue Reading

By

• Cliff Saran, Managing Editor

Breaking the cyber kill chain

Traditional antivirus is no longer good enough for fileless malware attacks that don’t leave a trace Continue Reading

By

• Aaron Tan, TechTarget

CW Benelux: Is there a Dutch digital delusion?

On government and business levels, the Netherlands aspires to be a digital leader in Europe, but it may be losing ground because of a lack of research and development investment. Also in this issue, IT decision makers based in the Benelux region are less confident than their European neighbours that IT budgets will increase in 2017, and Dutch bank ING, which used digital technology to reinvent itself after the financial crash, is about to reinvent itself again. Continue Reading

Davos: Technology poses new risks to jobs, economies and society

Politicians and business leaders will discuss the risks posed by technology to jobs, political stability and cyber security at the World Economic Forum in Davos Continue Reading

By

• Bill Goodwin, Computer Weekly

TechUK launches framework to build public trust in the IoT

Tech sector association techUK wants to help overcome public distrust in the internet of things Continue Reading

By

• Alex Scroxton, Security Editor

Cyber security scare stories could sharpen focus at banks

There are continual cyber attacks on banks, and although most are repelled, there is significant room for improvement Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Top 10 IT security stories of 2016

Here are Computer Weekly’s top 10 IT security stories of 2016: Continue Reading

By

• Warwick Ashford, Senior analyst

Typo allowed Russian hackers to access US Democratic Party emails

Typographical mistake in an email warning of a phishing attack on the US Democrats led to thousands of private emails being accessed and published by Russian-backed hackers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

European law enforcement seeking smart ways to fight cyber crime

Cyber criminals are always likely to be better resourced than law enforcement. Now, national and regional police forces in Europe are switching tactics to even the odds. Under-resourced law enforcement needs a smarter approach as cyber crime becomes increasingly prevalent and sophisticated, backed by the money and expertise of organised crime groups set up and run as well-resourced and efficient professional business organisations. Cyber crime operations typically have teams dedicated to looking at open source intelligence, targets’ physical environments, weaknesses in supply chains, and potential collaborators inside target organisations to enable sophisticated, blended attacks that involve a combination of actions against a range of vulnerabilities, making them difficult to detect and defend against. Continue Reading

UK falls below global cyber security confidence

Global confidence in ability to accurately assess cyber risk has fallen in the past year, but the UK has fallen below the global average Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 ANZ enterprise IT stories of 2016

Here is a rundown of Computer Weekly’s most popular ANZ enterprise IT articles for 2016 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

One in four Wi-Fi hotspots vulnerable to attack, study finds

At least one in four Wi-Fi hotspots are open to attack, a study by Kaspersky Lab reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Counting the cost of financial cyber crime

In this week’s Computer Weekly, the cyber security of banks is under scrutiny after an attack on Tesco Bank leads to millions lost in fraudulent transactions. Our latest buyer’s guide, on server operating systems, looks at the new features in Windows Server 2016. And Coca-Cola explains how a move to the cloud is helping motivate staff. Read the issue now. Continue Reading

Amber Rudd orders Lauri Love extradition to US to face hacking charges

Engineering student Lauri Love faces trials in three US states and a possible 99-year jail sentence for allegedly hacking into US government computer systems as part of a political protest, despite concerns over his health Continue Reading

By

• Fiona O'Cleirigh

Russian banks hit by IoT-enabled DDoS attacks

DDoS attacks on Russian banks have been linked to IoT botnets, further confirming this worrying trend and highlighting the need for IoT suppliers to improve security capabilties Continue Reading

By

• Warwick Ashford, Senior analyst

CW ASEAN: SMEs present security weakness

In this month's CW ASEAN, we look at how the cyber security defences at small and medium-sized enterprises in Southeast Asia may have some vulnerabilities, resulting in cyber security attacks on the large corporations they work with. We also consider the need to educate users of smartphones and tablets across the region as card fraud rates rise, with high use of mobile devices considered a contributing factor. Read the issue now. Continue Reading

CW ANZ: Using gamification to build cyber security skills

In this month's CW ANZ, we look at how PwC is using an online game to give its customers first-hand experience of what it means to face a cyber attack. We also look at how identity is gaining greater prominence in the security debate in Australia as the DTO takes the wraps off plans for a national identity system. Read the issue now. Continue Reading

Pure-play cyber security has real value, says incoming McAfee head

Intel Security has outlined its strategy to protect the new digital economy as it gears up for innovation as a new independent pure-play security firm under the McAfee banner Continue Reading

By

• Warwick Ashford, Senior analyst

UK government re-announces £1.9bn cyber security spend

Five-year spending increase - announced by Chancellor Philip Hammond 12 months after George Osborne did so - will support new UK cyber security strategy Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Dyn DDoS attack highlights vulnerability of global internet infrastructure

Last week’s DDoS attack on DNS firm Dyn has highlighted both the vulnerability of the world’s internet infrastructure, and the dangers of leaving internet of things devices unsecured Continue Reading

By

• Alex Scroxton, Security Editor

Gary McKinnon: Why Lauri Love should be spared the nightmare of extradition

Computer activist Lauri Love should be spared a life sentence in a US jail, says former hacker Gary McKinnon Continue Reading

By

• Gary McKinnon

Computer Weekly 50th anniversary special

It’s been 50 years since Computer Weekly's launch on 22 September 1966. To mark this achievement, we have compiled a special edition of the magazine to reflect on how much the British technology industry has contributed over that time – and, of course, to celebrate our role in keeping IT professionals in touch with those developments – week-in, week-out, for half a century. Read this 100-page anniversary special now. Continue Reading

Consumers trust banks more than government for biometric security

UK citizens think banks are the best organisations to provide biometric authentication for payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Lauri Love: the student accused of hacking the US

How did a brilliant but fragile computer science student from a rural English town end up facing life imprisonment in the US? Computer Weekly speaks to Lauri Love Continue Reading

By

• Bill Goodwin and Niels Ladefoged

Lauri Love - my battle with extradition

A court ruled today that Lauri Love, a 31-year old electrical engineering student, from Suffolk, can be extradited to the US to face hacking charges. Continue Reading

By

• Bill Goodwin, Computer Weekly

Mobile device use feeds card fraud in Asean region

Card fraud is rising in Asean countries, with the high use of mobile devices a contributing factor. Continue Reading

By

• Ai Lei Tao

Get protected: The importance of security

It is not uncommon for computer systems to be compromised by a company’s own employees. In this week’s issue we look at the Sage data breach, which highlights the risk every organisation faces from its staff. Staff are often motivated by revenge, but sometimes internal logins can be compromised, enabling hackers to circumvent firewalls. Our CIO interview is TalkTalk’s CTO, Gary Steen, and we have a report from the Intel Developer Forum on the chipmaker’s future plans. Continue Reading

CW Nordics: Dealing with digital disruption

The Nordic countries are renowned for being home to thriving tech startup scenes, so it is hardly surprising that IT is a disruptive force in the region. In this quarter’s CW Nordics ezine we look more closely at how the Nordic region is being affected by technology disruption across industry sectors and how organisations are reacting to it. Continue Reading

PwC Australia uses gamification to teach cyber security lessons

With the number of cyber incidents identified by Australian organisations more than doubling in the past year, PwC is using an online game to give enterprises first-hand experience of what it means to face a cyber attack Continue Reading

By

• Beverley Head

Italian-based Android RAT spies on mobiles in Japan and China, say researchers

Researchers discover an Italian-based Android RAT designed for spying that is targeting mobile devices using their unique identification codes Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile payments get Isaca’s security approval

Mobile contactless payments enable three key security controls that make them more secure than physical and e-commerce payments, according to a report by Isaca Continue Reading

By

• Warwick Ashford, Senior analyst

Carbon Black bets on next-generation antivirus

Carbon Black is betting on next-generation antivirus technology by acquiring Confer to extend the capability and appeal of its endpoint protection offerings Continue Reading

By

• Warwick Ashford, Senior analyst

IBM sets up security centre in Canberra

IBM leads the charge as large private businesses invest heavily in security resources across Australia in an attempt to close the security gap Continue Reading

By

• Beverley Head

CW ASEAN: July 2016

Lessons from the Philippine government hack: In this issue we ask why a hack on the Philippine Commission on the Elections (Comelec) was allowed to happen and what organisations in Southeast Asia can learn from this breach of security. Retailers in the region are concerned – read how the theft of customer data is their biggest worry. Continue Reading

CW ANZ: July 2016

Australia knows it has a cyber security problem, but not the scale. In this month’s CW ANZ we describe how Australia's $230m security strategy serves as a wake-up call to enterprises. We also reveal the techniques and technologies being used to protect one Australian school, as well as a more general look at the main cyber threats to orgainsations in Australia. Read the issue now. Continue Reading

Lauri Love may be faking mental illness claims lawyer for US

Prosecution lawyer Peter Caldwell questions whether activist Lauri Love is exaggerating mental health problems to avoid extradition to face hacking charges in the US Continue Reading

By

• Fiona O’Cleirigh and Bill Goodwin

Enterprises urged not to view security as a barrier to internet of things adoption

The Lower Colorado River Authority’s chief administrative officer urges enterprises to balance the risks of using the internet of things with the benefits connected devices can bring Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Lower average cost of Australian data breaches is not a sign of comfort

The average cost of a data breach to Australian organisations dropped in 2015, according to research Continue Reading

By

• Beverley Head

Shadow data and the risks posed by cloud storage and apps

Cloud storage and apps can open up an organisation to risks of data leakage. Computer Weekly looks at key areas of vulnerability and what you can do to prevent your data going viral Continue Reading

By

• Bryan Betts, Freeform Dynamics

Philippines government data breach is a warning to Asean region

Security is a rising concern in the Asean region, with fears fuelled by incidents such as the recent hacking incident in Manila Continue Reading

By

• Zafar Anjum

Internet traffic to triple by 2020, says Cisco

The latest edition of Cisco’s Visual Networking Index predicts a near tripling of internet traffic during the coming years as more than a billion people come online Continue Reading

By

• Alex Scroxton, Security Editor

My first IoT project: A guide for businesses

We’ve all had a good giggle about having our fridges hacked – but now it’s time to get real. What are the first steps enterprises should take when implementing their first internet of things project? Continue Reading

By

• Rene Millman

A new wave of cyber attacks targets the Middle East’s banks

Hot on the heels of the Qatar National Bank breach comes a campaign employing advanced social engineering techniques Continue Reading

By

• Tom Paye

Countdown begins to new EU data protection rules

In this week’s Computer Weekly, with the new EU data protection rules ready to become law, firms now have just two years to prepare for the stringent regulations – we assess the challenges. Manufacturing giant Rolls-Royce talks about why it moved its HR systems to the cloud and the lessons it learned. And we look back at 50 years of technology innovation in storage. Read the issue now. Continue Reading

Australian health sector an easy target for cyber criminals, says IBM

A push to encourage greater adoption of electronic health records has raised the spectre of online record theft Continue Reading

By

• Beverley Head

Cyber security in Belgium will gain prominence after terror attacks

Belgium’s physical security has been branded inadequate, so how does the country’s cyber security measure up? Continue Reading

By

• Stef Gyssels

Technology moving too fast for governments to keep up, says former Darpa chief

Former US defence technology chief supports encryption and privacy, despite intelligence services’ fears Continue Reading

By

• Jennifer Baker

IPv6 alone will not secure IoT, warns GE CISO

It is important for all users of the internet of things to understand what they are getting into with IPv6, and to be aware of the risks and myths, says GE CISO Hanns Proenen Continue Reading

By

• Warwick Ashford, Senior analyst

Israeli volunteers ready their cyber defences as Anonymous affiliates attack

Every April, Israel braces itself for an onslaught from pro-Palestinian hackers, but the occupants of a small conference room in Tel Aviv stand in their way Continue Reading

By

• Niv Lilien

DDoS attacks on universities normally performed by “disgruntled” students or employees

The majority of distributed denial of service attacks on universities are made by students or employees, says the head of infrastructure services at the University of London Continue Reading

By

• Clare McDonald, Business Editor

Adwind at centre of cyber attack on Singapore bank

Kaspersky Lab has revealed that the Adwind malware-as-a-service platform was at the centre of an attack on a Singapore bank Continue Reading

By

• Zafar Anjum

Apple vows to raise security as FBI breaks into iPhone

Apple says it will help law enforcement with investigations, but will increase the security of its products after the FBI broke into an iPhone Continue Reading

Businesses urged to update Apple software to dodge zero-day attacks

Security experts are urging Apple Mac, iPhone and iPad users to update their operating systems to avoid data-stealing attacks that exploit a new zero-day vulnerability Continue Reading

By

• Warwick Ashford, Senior analyst

Australian girls believe online harassment is endemic

There are clear signals that online threats against women and attempts to invade their privacy are becoming societal norms in Australia Continue Reading

By

• Beverley Head

Most students say cyber security is a growing threat

Some 70% of higher education students say they are aware that cyber crime and attacks are a threat, but less than half think security is their responsibility Continue Reading

By

• Clare McDonald, Business Editor

Building datacentres under the sea

In this week’s Computer Weekly, we look at Microsoft’s trial of an underwater datacentre and assess the technology and environmental implications of running cloud services under the sea. As PC suppliers build new products around Windows 10, we ask if the desktop PC is set to be reinvented. And with ransomware on the rise, we examine the threat of cyber extortion. Read the issue now. Continue Reading

The problem with passwords: how to make it easier for employees to stay secure

An organisation’s IT security can be compromised if staff do not follow a strict policy of using strong passwords to access internal systems Continue Reading

By

• Jeremy Bergsman, CEB

Surviving broadband failure

In this week’s Computer Weekly, after the recent BT broadband outage, we examine the options to keep your communications in place in the event of a failure, to ensure business continuity. We look at the prospects for the OpenStack open source cloud platform in the enterprise. And we see how Ireland is making progress on delivering a digital health service. Read the issue now. Continue Reading

Mobile innovation shifts to smartphone services

As smartphone sales continue to stagnate, suppliers are looking to innovate in more novel ways Continue Reading

By

• Alex Scroxton, Security Editor

US IT professionals overconfident in cyber attack detection, study finds

Most US IT professionals are confident in key security controls to detect cyber attacks – but unsure how long it would take automated tools to discover a breach Continue Reading

By

• Warwick Ashford, Senior analyst

How software protects people

In this week’s Computer Weekly, we find out how software is helping to maintain safety in high-risk sectors like oil & gas, aerospace and healthcare – and what lessons they hold for other organisations. We offer six tips from CIOs for innovation with data. And after the HSBC cyber attack, we examine the continuing threat to businesses from distributed denial of service (DDoS) attacks. Read the issue now. Continue Reading

HSBC online services hit by DDoS attack

HSBC was hit by a distributed denial of service (DDoS) attack, which targeted its online personal banking services. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CW Europe - January 2016

This month, CW Europe looks in-depth at an issue that is set to affect people across all 28 European Union member states – the abolition of mobile roaming charges, set for mid-2017. Continue Reading

Candy Crush maker King secures mobile access through cloud

Candy Crush maker King.com uses cloud-based Duo Security authentication for access to cloud services, customised apps and remote VPNs Continue Reading

By

• Warwick Ashford, Senior analyst

Most Android devices running outdated versions

Nearly a third of Android devices in enterprises today are running version 4.0 or older of the operating system, leaving them highly susceptible to vulnerabilities, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

UK firms act quickly to fix payment card data encryption

Security firm found that 16 global companies had failed to effectively encrypt traffic to the payment portion of their websites and apps Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attacks an increasing concern for Asean countries

Organisations in the Association of Southeast Asian Nations are increasingly the targets for cyber criminals, according to a report focused on the region Continue Reading

By

• Zafar Anjum

Word ‘smart’ being abused by IoT advocates

Speakers at an event hosted by Cambridge Wireless say the term ‘smart’ is overused to describe connected devices on the internet of things Continue Reading

By

• Alex Scroxton, Security Editor

Coalition of top tech firms opposes weakened encryption

Weakening security with the aim of advancing security simply does not make sense, a coalition of top tech firms tells US president Barack Obama Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security mindset needs to change, says report

Government organisations are prime targets for cyber attacks, leading to increased importance on robust information security, according to a report by Intel Security and the Digital Government Security Forum Continue Reading

By

• Lis Evenstad

The true cost of a cyber security breach in Australia

The costs of cyber security breaches can quickly add up with fines, reputational damage and overhauls to network security all hitting the coffers. The case of one Australian firm shows why paying a ransom to a hacker might be tempting. Continue Reading

By

• Beverley Head

Apple removes more iOS apps over security concerns

Apple has blocked more apps over security concerns just weeks after ridding the App Store of XcodeGhost malware Continue Reading

By

• Warwick Ashford, Senior analyst

How cloud technology helps kittens

In this week's Computer Weekly, we talk to the CIO at the UK's leading animal charity, the RSPCA, about how her cloud-first strategy is helping animal welfare. Microsoft is ending support for older version of Internet Explorer – we assess the implications. And we ask the experts about the best practice in mobile security. Read the issue now. Continue Reading

Public-private co-operation in the Nordics tackles growing cyber crime threat

Nordic governments and businesses are putting cyber security at the centre of their planning as threats increase Continue Reading

By

• Eeva Haaramo

BT launches ethical hacking service for bankers

BT introduces a certified Crest Star ethical hacking test service for financial services customers Continue Reading

By

• Alex Scroxton, Security Editor

Researchers discover Android PIN locker ransomware

Researchers say LockerPIN is a self-defending, aggressive piece of ransomware currently targeting Android devices, mainly in the US Continue Reading

By

• Warwick Ashford, Senior analyst

Use 2FA to mitigate KeyRaider iOS malware, says Rapid7

KeyRaider iOS malware targeting iPhone users in China and 17 other countries including the UK has raised enterprise security concerns Continue Reading

By

• Warwick Ashford, Senior analyst

Anyone still running Windows Server 2003 is now at risk

Businesses still running Windows server 2003 are vulnerable to attack from hackers looking to exploit security holes Continue Reading

By

• Cliff Saran, Managing Editor