Endpoint security

Government launches £500k healthcare security plan

A £500,000 funding pot from the government aims to help support small and mid-sized healthcare firms during the pandemic Continue Reading

By

• Alex Scroxton, Security Editor

Branch-based anti-fraud scheme to be expanded to online banking

A successful branch-based anti-fraud scheme will be expanded by banks to include online and telephone banking Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

September’s Patch Tuesday heavy on RCE vulnerabilities

Microsoft’s September update contains patches for 129 common vulnerabilities and exposures, including a high number of remote code execution issues Continue Reading

By

• Alex Scroxton, Security Editor

Why predictive threat intelligence is key

Threat intelligence startup Cyfirma is using virtual agents to gather intelligence on potential cyber attacks that are being coordinated in underground forums before they occur Continue Reading

By

• Aaron Tan, TechTarget

Lockdown sees increase in girls applying for GCHQ cyber courses

The shift to online learning saw an increase in participants for its CyberFirst cyber security training programme, GCHQ found Continue Reading

By

• Clare McDonald, Business Editor

Only 10% of tech talent have cyber skills to fill skills gap

The UK has a growing need for cyber skills as a result of the pandemic, but few IT professionals have the skills firms actually need Continue Reading

By

• Clare McDonald, Business Editor

New normal of remote working compounds enterprise security challenges

Sudden changes in priorities, poor network visibility and lack of time cited by Juniper Networks as key issues for security professionals struggling to cope with new norms Continue Reading

By

• Joe O’Halloran, Computer Weekly

Northumbria University suffers major disruption after cyber attack

Some exams cancelled as university appoints external specialists to investigate incident Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

DDoS downs New Zealand stock exchange for third day

Distributed denial of service attack from overseas has left stock exchange offline for days Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

When algorithms don’t play fair

In this week’s Computer Weekly, we report on the auditing of algorithms to countervail bias. We examine what CISOs can learn from Covid-19. And in our buyer’s guide to modern software development, we assess how competent artificial intelligence is at building applications that deliver the best possible customer experience. Read the issue now. Continue Reading

Australian regulator sues RI Advice for cyber security lapses

The Australian Securities and Investments Commission is suing RI Advice for cyber security breaches at the financial firm’s authorised representatives Continue Reading

By

• Aaron Tan, TechTarget

Reports Oracle to enter TikTok bidding war

Oracle may be about to make a bid to acquire the US operations of TikTok from its Chinese parent ByteDance, according to the FT Continue Reading

By

• Alex Scroxton, Security Editor

Russia’s Fancy Bear targets Linux environments with Drovorub malware

The Russian intelligence-linked Fancy Bear group is deploying a new malware called Drovorub against Linux environments as part of a cyber espionage operation, according to US warnings Continue Reading

By

• Alex Scroxton, Security Editor

CW Benelux: Security system concerns at Schiphol Airport

A report has revealed problems with critical security systems at Amsterdam’s Schiphol Airport. Also read why the Netherlands’ digital sector is yearning for attention from the government, and how data weaknesses persist despite Dutch companies investing heavily to comply with GDPR. Continue Reading

APAC consumers do not feel responsible for data security

Just one in four consumers believe they should protect their own data, underscoring the tightrope between security and convenience that organisations have been walking on Continue Reading

By

• Aaron Tan, TechTarget

How Dharma ransomware became an effective services business

New research looks under the bonnet of a Dharma ransomware attack, with the ransomware's ease of use being particularly dangerous for small to medium-sized enterprises Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft patches two zero-days with active exploits

Microsoft drops another major Patch Tuesday update, including fixes for two zero-day exploits that are already being exploited by cyber criminals Continue Reading

By

• Alex Scroxton, Security Editor

NHS hit by thousands of malicious emails at height of pandemic

The NHS received nearly 30,000 malicious emails at the height of the Covid-19 pandemic in March and April Continue Reading

By

• Alex Scroxton, Security Editor

Citrix users urged to patch five XenMobile CVEs

Patches are available for CVEs 2020-8208 through 8212 and should be installed as soon as possible Continue Reading

By

• Alex Scroxton, Security Editor

French data protection authorities to probe TikTok as suitors circle

France’s CNIL has confirmed a new investigation into TikTok’s data protection practices Continue Reading

By

• Alex Scroxton, Security Editor

TikTok to be banned in US in 45 days

Trump says his Executive Orders against Chinese mobile apps are in the interests of dealing with a national emergency Continue Reading

By

• Alex Scroxton, Security Editor

Don’t believe the hype: AI is no silver bullet

We want to believe AI will revolutionise cyber security, and we’re not necessarily wrong, but it’s time for a reality check Continue Reading

By

• Mike Lloyd, RedSeal

Australia updates cyber security strategy but offers little new

The nation’s latest cyber security strategy includes centralised management of networks and a voluntary code of practice for deploying internet-connected devices, among other areas Continue Reading

By

• Anthony Caruana

Qualcomm chip vulnerability puts millions of phones at risk

Qualcomm has patched multiple vulnerabilities in its chip hardware that left hundreds of millions of smartphones open to compromise by malicious actors Continue Reading

By

• Alex Scroxton, Security Editor

Five signs you’re about to get hit with ransomware

A series of Sophos reports on the ransomware threat landscape shows how security professionals can sniff out a potential ransomware attack before it happens Continue Reading

By

• Alex Scroxton, Security Editor

The UK’s $500m space technology gamble

In this week’s Computer Weekly we ask why the UK government is spending $500m on a bankrupt satellite technology company. After a European court quashes the EU-US data sharing agreement, we examine the implications for a UK-EU data protection deal after Brexit. And how have small cloud suppliers coped in the pandemic? Read the issue now. Continue Reading

More data breaches from ransomware attacks in Australia

The number of data breaches caused by ransomware rose to 33 in the first half of 2020 from 13 in the previous six-month period, according to the latest report from the Office of the Australian Information Commissioner Continue Reading

By

• Aaron Tan, TechTarget

Diversity in cyber improving but inclusion needs work, says NCSC

Study into diversity and inclusion in the cyber security sector has found that diversity is off to a good start, but inclusion is lacking Continue Reading

By

• Clare McDonald, Business Editor

Serious BootHole vulnerability puts millions of systems at risk

BootHole is a GRUB2 bootloader vulnerability and puts millions of PCs, servers and other devices at risk of compromise Continue Reading

By

• Alex Scroxton, Security Editor

Majority of organisations at risk of cloud data exposure

Report casts doubt on the effectiveness of the shared responsibility model of cloud security Continue Reading

By

• Alex Scroxton, Security Editor

Cosmetics firm Avon faces new cyber security incident

Technical information relating to Avon’s web and mobile sites was inadvertently left exposed on an unsecured Microsoft Azure server Continue Reading

By

• Alex Scroxton, Security Editor

Garmin may have paid hackers ransom, reports suggest

Garmin’s services are coming back online, but the company remains tight-lipped about what exactly happened to it Continue Reading

By

• Alex Scroxton, Security Editor

Digital bank customer data breached through third party

FBI is investigating digital bank customer data breach that occurred via a former third-party supplier Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Meet the CIO connecting IT in the most inhospitable environments

In this week’s Computer Weekly, we discuss the challenges of running global IT in the world of copper mining. We look at how tech suppliers are adapting their products to meet the lockdown demands of working from home. And we exam-ine how zero-trust methods can help secure container tech-nology. Read the issue now. Continue Reading

Australia issues new cloud computing guidelines

The new guidance, which comes after the expiry of the government’s cloud services certification programme, will help to bolster Australia’s cyber security resilience Continue Reading

By

• Aaron Tan, TechTarget

Garmin outage prompts ransomware attack speculation

Details are thin on the ground following a major service outage at Garmin, prompting industry speculation that the firm has fallen victim to a ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Australian industry panel calls for ‘clear consequences’ of cyber attacks

A government-appointed panel recommends strong deterrence and other measures to be implemented in Australia’s next cyber security strategy Continue Reading

By

• Aaron Tan, TechTarget

Australian workers are weakest link in fight against cyber attacks

About four in 10 employees are sharing inappropriate data across mobile devices and half of all security incidents in 2019 occurred through inappropriate IT use, new study finds. Continue Reading

CW ANZ: Expert advice on security

Supply chain risks are invisible to many organisations, which means they are often not prioritised from an IT security perspective, partly because supply chain risk management is often seen as a procurement issue. In this handbook, Computer Weekly looks at how organisations in Australia and New Zealand can better protect themselves against supply chain attacks and other evolving cyber threats. Continue Reading

Government proposes IoT security enforcement body

The government is today publishing new proposals concerning planned legislation that will protect users of smart IoT devices from cyber criminals Continue Reading

By

• Alex Scroxton, Security Editor

Warning over security holes in fake Cisco kit

Two counterfeit Cisco Catalyst 2960-X switches were only found after a software update caused them to stop working Continue Reading

By

• Alex Scroxton, Security Editor

Australian enterprises facing more cyber attacks

The volume of cyber attacks in Australia jumped from 90% in October 2019 and 81% in February 2019, underscoring the worsening threat landscape in the country Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Ignore AI overheads at your peril

Artificial intelligence and machine learning techniques are said to hold great promise in security, enabling organisations to operate an IT predictive security stance and automate reactive measures when needed. Is this perception accurate, or is the importance of automation being gravely overestimated? Continue Reading

By

• Andrew Morris, Turnkey Consulting

Zoom zero-day a reminder to stop using Windows 7

Researchers have disclosed a newly discovered zero-day vulnerability to videoconferencing service Zoom, which only affects users of Windows 7 systems Continue Reading

By

• Alex Scroxton, Security Editor

HSBC customers targeted in new smishing scam

SMS phishing scam is targeting HSBC customers in the UK to trick them into handing over their bank account details Continue Reading

By

• Alex Scroxton, Security Editor

Use of spyware apps linked to domestic abuse soars in lockdown

The rise in domestic violence during the pandemic has been linked to increase use of stalkerware apps by abusers Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: The past and future of security automation

Artificial intelligence and machine learning techniques are said to hold great promise in security, enabling organisations to operate an IT predictive security stance and automate reactive measures when needed. Is this perception accurate, or is the importance of automation being gravely overestimated? Continue Reading

By

• Paddy Francis

Security funding soars despite Covid-19 slump, but problems lie ahead

The overall cyber security funding ecosystem in the UK is healthier than ever despite Covid-19, but the figures mask stark and concerning disparities in where the money is going Continue Reading

By

• Alex Scroxton, Security Editor

Lorca scale-ups bring diverse security to the fore

London Office for Rapid Cybersecurity Advancement announces the cyber security scale-ups that will make up its fifth cohort Continue Reading

By

• Alex Scroxton, Security Editor

Need to secure industrial IoT more acute than ever

A report from the Lloyd’s Register Foundation is calling for urgent action to secure industrial infrastructure, as the IoT leaves it increasingly exposed Continue Reading

By

• Alex Scroxton, Security Editor

Cops take out encrypted comms to disrupt organised crime

The UK’s National Crime Agency, alongside other law enforcement agencies in France and the Netherlands, have busted illicit arms and drugs rings after disabling an encrypted comms platform Continue Reading

By

• Alex Scroxton, Security Editor

UK’s unsung cyber security heroes sought

Nominations have opened for the fifth annual Security Serious Unsung Heroes Awards Continue Reading

By

• Alex Scroxton, Security Editor

Remote workers more aware of security, but still flout the rules

Almost three-quarters of remote workers reckon they have gained in cyber security awareness during lockdown, but don’t seem to be especially bothered about keeping themselves safe Continue Reading

By

• Alex Scroxton, Security Editor

FakeSpy Android malware targets Royal Mail app users

The FakeSpy malware was first identified in October 2017 but is now significantly more powerful and dangerous Continue Reading

By

• Alex Scroxton, Security Editor

Australia to invest a record A$1.35bn in cyber security

The Australian government is making its largest ever investment in cyber security over the next decade to identify cyber threats, disrupt foreign cyber criminals and build new capabilities Continue Reading

By

• Aaron Tan, TechTarget

Post-pandemic security market still set for growth, but slower

Frost & Sullivan report says the global security industry will withstand the economic crash caused by the Covid-19 pandemic, but growth will be slower for a few years Continue Reading

By

• Alex Scroxton, Security Editor

How Malaysia’s industries are tapping IoT

Computer Weekly speaks to four industries that claim to have benefited from various IoT deployments and how it has changed their businesses Continue Reading

By

• Edwin Yapp

Making the case for cloud-based security

Cloud-based security tools can hasten threat detection and response, but adoption will depend on where an enterprise is on the cloud readiness scale Continue Reading

By

• Aaron Tan, TechTarget

Australian government has failed on cyber security

The federal government’s current approach of allowing each agency to make its own cyber decisions is not working and more needs to be done to hunt down adversaries Continue Reading

By

• Carlo Minassian

APT groups’ mobile momentum finally faces resistance

State-backed APT groups are increasingly targeting mobile devices as Covid-19 puts the spotlight on remote working infrastructure security. We explore how the industry is fighting back Continue Reading

By

• Matthew Staff

Twitter contacts business users over data exposure

Issue relates to how web browsers cached confidential data entered in Twitter’s ads and analytics services, but is unlikely to have resulted in compromise Continue Reading

By

• Alex Scroxton, Security Editor

Flash-based MacOS malware hides in plain sight

By masquerading as a legitimate Adobe web application, the new malware strains can trick Mac users into bypassing their on-board defences Continue Reading

By

• Alex Scroxton, Security Editor

APAC still hotbed for cyber attacks

Individuals and organisations in APAC are encountering malware more frequently than the rest of the world, study finds Continue Reading

By

• Aaron Tan, TechTarget

Online shopping fraud hits £16m during lockdown

A quarter of victims were aged between 18 and 26, says Action Fraud Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CW APAC: Trend Watch – data protection

Asia-Pacific organisations see the importance of having good data protection practices, even as they are still grappling with organisational and operational challenges. In this handbook, Computer Weekly looks at the different levels of preparedness across the region and what firms can do to plug any gaps. Continue Reading

Check Point uncovers targeted Microsoft Office 365 phishing campaign

Organised criminal campaign exploited Adobe, Oxford University and Samsung web domains to trick users into giving up their passwords Continue Reading

By

• Alex Scroxton, Security Editor

Help secure the top UK entry point for cyberfraud

“NHS” is the UK’s most trusted brand. Until recently it was one of the least protected/secure. There have been significant improvements but, as a result of Covid, impersonating the NHS now comes ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Coronavirus: Cyber security spend to slow in 2020

Analysts revise down previous growth targets for security technology as the Covid-19 pandemic bites Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Enterprise VPN adoption in India set to rise

Advancement in cloud technologies and secured remote access to applications will significantly contribute to the overall growth of India’s VPN market, says GlobalData Continue Reading

By

• Aaron Tan, TechTarget

Fake contact-tracing apps delivering banking trojans

Spoof government coronavirus apps are popping up all over the world, says the Anomali Threat Research team Continue Reading

By

• Alex Scroxton, Security Editor

100,000 cheap wireless cameras vulnerable to hacking

Active devices built by Chinese firm HiChip have been sold in the UK as webcams and connected baby monitors Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Bungled British response leads to rise in security risks

Covid-19 cyber security threats are evolving over the course of the pandemic, becoming more targeted to virus hotspots such as the UK Continue Reading

By

• Alex Scroxton, Security Editor

CISOs buying into unified security proposition

The time is right for all-in-one security solutions, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

CW Europe: 5G rush in Russia

Russian mobile operators are pooling their resources to help them overcome the technical challenges of creating 5G networks. Also read why Swedbank is rebuilding its anti-money laundering systems, and how a public-private partnership in the Netherlands is combating business email compromise fraud. Continue Reading

Government to fund nine advanced security projects

Nine academic projects have been selected to receive a share of a £10m funding pot as they develop advanced cyber security solutions using prototype chipsets Continue Reading

By

• Alex Scroxton, Security Editor

Decade-old vulnerability among 129 Patch Tuesday fixes

A 10 year-old bug in Windows Group Policies could easily enable attackers to gain highly privileged user status on target systems, opening the doors to a wave of cyber attacks Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: How to go back to the office safely and securely

Security teams should be used to supporting remote workers effectively by now, but what’s going to happen when people start returning to their offices? We look at the risks and how to address them. Continue Reading

By

• Alex Scroxton, Security Editor

How Australian firms can defend against supply chain attacks

Supply chain security risks can wreak havoc if measures are not taken to deter cyber attackers from exploiting a supplier’s security gaps to target another firm Continue Reading

By

• Stephen Withers

Police chiefs working with Public Health England on contact-tracing security

Police force representatives are in talks with Public Health England over operational security concerns arising from the NHS Test and Trace coronavirus contact-tracing scheme Continue Reading

By

• Alex Scroxton, Security Editor

Small businesses failing on remote worker protection

Only one-third of people working for small businesses have received any guidance from their employers on how to secure their remote working set-up Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: How the BSI protects the IoT from itself

David Mudd of the BSI reveals how a pragmatic and realistic approach to security vulnerabilities underpins its internet of things kitemark, helping give users the confidence to buy smart devices safely Continue Reading

By

• Alex Scroxton, Security Editor

Security procurement framework goes live for NHS and public sector

Cyber Security Services Framework, developed by NHS Shared Business Services, has formally launched Continue Reading

By

• Alex Scroxton, Security Editor

Aston Martin swaps out legacy antivirus for AI-driven service

Luxury car manufacturer says the advent of artificial intelligence-powered services will revolutionise its security posture Continue Reading

By

• Alex Scroxton, Security Editor

Keeping IT operations running for remote workers

Measuring employee experience and enabling self-service are some of the ways businesses can manage and empower a remote workforce Continue Reading

By

• Paul Mah

What will be the IT security priorities of the post-coronavirus world?

In this week’s Computer Weekly, with the working world after the pandemic set to be very different, we assess the IT security priorities for the ‘new normal’. Facial recognition firms are racing to identify people wearing face masks. And how did Europe’s telecoms networks cope with the switch to remote working? Read the issue now. Continue Reading

How managed threat hunting helps bust malicious insiders

Managed threat hunting services can help take some of the pressure off security operations centres and help ensure potential breaches don’t escalate into something far worse. We explore one such case with a happy ending Continue Reading

By

• Alex Scroxton, Security Editor

Government launches IoT security funding round

A £400,000 funding pot is on offer for innovators to design schemes that boost internet-of-things security Continue Reading

By

• Alex Scroxton, Security Editor

IoT buyers eye private network deployments for added security

Fully private, segregated networks for IoT deployments are becoming increasingly attractive to many organisations, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Australia is painting a big red cyber target on its critical infrastructure

Australia’s critical infrastructure is particularly vulnerable to cyber attacks right now because of years of under-investment in cyber security and ageing legacy systems Continue Reading

By

• Carlo Minassian

Enterprise clouds hammered by cyber attacks during pandemic

Remote workers logging onto enterprise cloud service accounts are an easy access point for attackers, says McAfee Continue Reading

By

• Alex Scroxton, Security Editor

StrandHogg mobile vulnerability has evil twin

Variant of the dangerous StrandHogg vulnerability affecting Android phones could allow hackers to access almost all apps on a target device Continue Reading

By

• Alex Scroxton, Security Editor

Android security vulnerabilities differ by country, say researchers

Manufacturers of Android devices including Huawei, Samsung and Xiaomi shipped devices with different levels of security in different regions, leaving their users exposed to attack Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Australia calls for stronger defences amid cyber attacks

The Australian Cyber Security Centre offers guidance for critical infrastructure operators to guard against cyber attacks which have already hit the healthcare sector Continue Reading

By

• Aaron Tan, TechTarget

Identification and access management: some possible futures

Learn about how we might be using our heartbeats, brainwaves and eye movements to unlock our mobiles in the future Continue Reading

By

• Francois Lasnier

NCSC discloses multiple vulnerabilities in contact-tracing app

National Cyber Security Centre has received mountains of feedback on the security of the government’s Covid-19 contact-tracing app, and has now taken the step of making multiple disclosures Continue Reading

By

• Alex Scroxton, Security Editor

Cancelled NCSC CyberUK event gets green light for 2021

The NCSC’s popular CyberUK event has been rescheduled to next year, and will again take place in Newport in south Wales Continue Reading

By

• Alex Scroxton, Security Editor

GDPR wholly inappropriate to govern contact-tracing data

Human Rights Committee Chair Harriet Harman says current data protection law is not up to the job of governing the data collected by the Covid-19 contact-tracing app Continue Reading

By

• Alex Scroxton, Security Editor

Harman seeks to bring private member’s bill over contact tracing

Chair of Human Rights Committee aims to put the proposed Contact Tracing (Data Protection) Bill 2020 before parliament as a private member’s bill if necessary Continue Reading

By

• Alex Scroxton, Security Editor

SK Telecom brings quantum security to the masses

The South Korean telco is readying the world’s first 5G smartphone equipped with a quantum random number generator chipset Continue Reading

By

• Aaron Tan, TechTarget

Report reveals inadequate cyber security at Schiphol Airport

A report has revealed problems with critical security systems in Amsterdam’s Schiphol Airport Continue Reading

By

• Kim Loohuis