Hackers and cybercrime prevention

CW ANZ: Trend Watch – Security

With regulations pushing data protection up the business agenda, we look at how Australia’s Notifiable Data Breaches scheme has been received and consider why a survey that found Australian firms are experiencing fewer cyber breach incidents appears to conflict with anecdotal evidence that suggests the opposite. Continue Reading

UK poor cyber security practice undermining controls

UK firms investing in the latest cyber security products and services risk this being undermined by poor security practices, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Lateral phishing used to attack organisations on global scale

Lateral phishing is a growing type of account takeover that has enabled attackers to target more than 100,000 people by hijacking just 154 email accounts Continue Reading

By

• Warwick Ashford, Senior analyst

Most security pros still concerned about public cloud security

Despite accelerated adoption of public cloud services by companies keen to benefit from increased efficiency, scalability and agility, most security professionals have reservations Continue Reading

By

• Warwick Ashford, Senior analyst

Suspected malicious MS Office tool maker arrested

Dutch police have arrested a man suspected of producing and selling toolkits to create malicious Microsoft Office documents Continue Reading

By

• Warwick Ashford, Senior analyst

Vulnerable firmware in enterprise server supply chain

Researchers are warning of vulnerabilities in firmware from a third-party supplier that put some servers from Lenovo, Gigabyte and six other manufacturers at risk Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC calls out Microsoft over Dmarc reports

The UK’s cyber security agency has called out Microsoft for seriously undermining global email security by failing to provide crucial reports from its email platforms Continue Reading

By

• Warwick Ashford, Senior analyst

Digital safety skills initiative launched against cyber crime

Security industry partners have launched an initiative aimed at raising individuals’ digital safety skills to enable them to protect themselves and their families from most common cyber attacks Continue Reading

By

• Warwick Ashford, Senior analyst

UN resolution ignores special rapporteur’s call for halt to spyware sales

UN’s Human Rights Council adopts resolution to explore the impact of new and emerging digital technologies on human rights, but the text ignores a damning report by the council’s own expert on freedom of expression Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

NCSC reports on second year of cyber defence at scale

The UK’s National Cyber Security Centre releases a report on the second year of its Active Cyber Defence programme to demonstrate its effects in the public sector and wider UK cyber ecosystem Continue Reading

By

• Warwick Ashford, Senior analyst

Organisations turn to AI in race against cyber attackers

Businesses are racing to automate their defences as hackers and nation states launch increasingly sophisticated cyber attacks Continue Reading

By

• Bill Goodwin, Computer Weekly

UK public sector needs to prioritise mobile device security

Only 10% of public service stolen and lost mobile are recovered, underlining the need for mobile-centric, zero-trust model to reduce the risk, says MobileIron Continue Reading

By

• Warwick Ashford, Senior analyst

UK boards ignoring £30bn cyber risk

Despite the danger posed by cyber attacks to mid-sized companies, boards are not prepared to manage the risk and firms are over-confident in their cyber capabilities, report finds Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Don’t dismiss the business benefits of GDPR

What strategies can infosec pros use to shift focus from GDPR fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Richard Hunt, Turnkey Consulting

New FinSpy versions extend surveillance capabilities

New versions of the FinSpy malware for iOS and Android smartphones have extended targeted surveillance capabilities, warn security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Windows 10 to enable passwordless sign-in

Windows 10 users will soon be able to sign in to devices without using a password to encourage the use of two-factor authentication methods to improve security Continue Reading

By

• Warwick Ashford, Senior analyst

Attacks against AI systems are a growing concern

European research group says attacks against AI systems are already occurring, difficult to identify, and could be far more common than currently understood Continue Reading

By

• Warwick Ashford, Senior analyst

RiskIQ uncovers new Magecart campaign

A fresh Magecart campaign is breaching websites on a massive scale using indiscriminate attacks exploiting misconfigured Amazon S3 buckets, say researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Align compliance objectives with business goals

What strategies can information security professionals use to shift focus from GDPR fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Maxine Holt, Omdia

Agent Smith mobile malware hits millions of devices

New mobile malware that exploits Android vulnerabilities has infected millions of devices, security researchers have discovered Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Changing the GDPR focus to business benefit

What strategies can information security professionals use to shift focus from General Data Protection Regulation fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Paddy Francis

Demand for ICO help escalates in GDPR's first year

The past year has seen increased demand across all support services offered by the UK’s privacy watchdog as new data protection laws went into force Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Benefits of GDPR compliance

What strategies can information security professionals use to shift focus from General Data Protection Regulation fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Petra Wenham

Nearly half of firms fear cloud apps make them insecure

Survey shows more than one-third of global companies appoint a CISO in the face of data breaches, and the UK is giving CISOs more power despite making fewer appointments Continue Reading

By

• Warwick Ashford, Senior analyst

TfL launches wireless device tracking to gather Tube data

Transport for London aims to use passenger movement data to make using the London Underground a more pleasant experience Continue Reading

By

• Alex Scroxton, Security Editor

British Airways facing £183m GDPR fine

British Airways is to appeal against a record fine for infringement of data protection rules for a breach of customer data in 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

IISP gains Royal Charter status

The UK finally has its first national professional body for cyber security that will be responsible for setting the standards for skills and knowledge in the industry to reduce the skills gap and increase diversity Continue Reading

By

• Warwick Ashford, Senior analyst

St John Ambulance praised for response to ransomware attack

Charity’s response to ransomware attack demonstrates that it is possible to ensure minimal disruption if properly prepared Continue Reading

By

• Warwick Ashford, Senior analyst

Security and privacy key to smart buildings and cities

Security and privacy capabilities are essential for stakeholders if they are to realise the benefits of smart buildings and cities, says expert whitepaper Continue Reading

By

• Warwick Ashford, Senior analyst

FireEye ties Microsoft Outlook exploit to Iranian hackers

US Cyber Command has issued a warning that a patched Microsoft Outlook vulnerability is being exploited by unnamed threat actors, and recommended immediate patching Continue Reading

By

• Warwick Ashford, Senior analyst

Email still top security vulnerability, survey shows

Email is still the top security vulnerability, a survey shows, but security researchers caution that switching to instant messaging is not necessarily a solution in the longer term Continue Reading

By

• Warwick Ashford, Senior analyst

APAC experts weigh in on cyber security trends

The onslaught of cyber attacks being reported each day has been a wake-up call, but experts say businesses need to be mindful of the limitations of certain security measures Continue Reading

By

• Aaron Tan, TechTarget

Sodin ransomware exploiting Windows zero-day, Kaspersky warns

Security researchers are warning that a recently discovered type of ransomware is now exploiting a zero-day Windows vulnerability, and does not require user interaction to trigger an infection Continue Reading

By

• Warwick Ashford, Senior analyst

Top VPNs secretly owned by Chinese firms

Nearly a third of top VPNs are secretly owned by Chinese companies, while other owners are based in countries with weak or no privacy laws, potentially putting users at risk, security researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

Sweden’s Protective Security Act targets cyber risks

IT suppliers must comply with tighter cyber security requirements, but are being offered help from government agencies Continue Reading

By

• Gerard O'Dwyer

Orvibo data leak puts security spotlight on IoT back end

The security of devices that make up the internet of things (IoT) is a top concern for many in the industry, but leaks from an IoT database highlights the importance of back-end security too Continue Reading

By

• Warwick Ashford, Senior analyst

Perfect storm for data science in security

After nearly 20 years of research, the perfect storm of computing technologies is finally enabling data science to realise its potential to make valuable contributions to improving cyber security capabilities Continue Reading

The UK manufacturing sector needs a digital upgrade

In this week’s Computer Weekly, the UK manufacturing sector is lagging behind on digital technology – we examine the challenges for the industry in becoming a global leader. Our buyer’s guide looks at enterprise social media and collaboration tools. And we find out how data science is helping to boost cyber security strategies. Read the issue now. Continue Reading

Singapore to beef up police tech capabilities

Singapore government singles out biometrics, data analytics and digital forensics as promising areas to boost crime-fighting efforts Continue Reading

By

• Aaron Tan, TechTarget

Few UK firms are cyber insured despite financial losses

More than one-fifth of UK firms have been impacted financially by cyber attacks, yet potentially more than three-quarters of companies polled have never been insured for cyber-related losses Continue Reading

By

• Warwick Ashford, Senior analyst

Symantec gearing up for future cyber security

Symantec is focusing on enabling businesses to secure data in the cloud after a string of acquisitions, but it also has its eye on the future, which will be all about empowering people, says CTO Hugh Thompson Continue Reading

By

• Warwick Ashford, Senior analyst

Huge jump in cyber incidents reported by finance sector

The number of cyber incidents reported by financial services firms increased nearly 12-fold in 2018 from 2017, mainly due to third-party failures, highlighting several key areas that need improvement Continue Reading

By

• Warwick Ashford, Senior analyst

TIN coalition calls for industry action against cyber fraud

An industry group aimed at improving cyber security by tackling enduring challenges has called for collaboration in the fight against cyber fraud Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber crime reporting crucial, say UK police

UK police are gearing up to make it easier for business to report cyber crime, saying that under-reporting continues to be a challenge Continue Reading

By

• Warwick Ashford, Senior analyst

Dutch bank and researchers begin defence against quantum computing’s dark side

ABN Amro is working with QuTech to ensure that banks can protect data against quantum computers in the future Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Fido Alliance announces new standards

Fido Alliance announces new identity verification and IoT initiatives to expand the reach and impact of Fido authentication, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

Commercial interests put customer security at risk, survey shows

Firms are bypassing security to push products and services into the market, increasing security risks for the organisation and its customers, a poll of information security professionals shows Continue Reading

By

• Warwick Ashford, Senior analyst

Wider threat campaign behind Wipro breach

A sophisticated, far-ranging threat campaign was behind the breach at Indian IT services firm Wipro in April, which was not an isolated incident, RiskIQ report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Six arrested over €24m cryptocurrency theft

Police have arrested six people in the UK and the Netherlands in connection with the theft of cryptocurrency worth €24m Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore government forms digital industry office

New office will help local tech firms grow their regional footprint and build new capabilities in order to thrive in APAC’s booming digital economy Continue Reading

By

• Aaron Tan, TechTarget

How facial recognition technology threatens basic privacy rights

As adoption of facial recognition systems continues to grow worldwide, there is increasing concern that this technology could undermine fundamental privacy rights and how it can be kept in check Continue Reading

By

• Nicholas Fearn

UK cyber security progress stalled, says report

UK firms rank cyber attacks as a top business issue, but are stalling in cyber security best practice, lagging behind top performers in India Continue Reading

By

• Warwick Ashford, Senior analyst

APT attack on telcos highlights need for comprehensive defence

A global cyber attack against multiple telecommunications firms underlines need for comprehensive approach to cyber defence, say researchers and industry commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Airbus opens cyber innovation hub in Wales

Newport hub will focus on industrial control systems, artificial intelligence and data analytics Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attackers using wider range of threats

Businesses need to ensure they are able to defend against a wide range of threats in the face of increased malicious Office documents, Mac malware and web application exploits, report shows Continue Reading

By

• Warwick Ashford, Senior analyst

UK firms downloading vulnerable open source software

Vulnerable open source software components are posing a security threat to UK firms, according to a report that also shows how best practice, including automation, can reduce the risk Continue Reading

By

• Warwick Ashford, Senior analyst

Hospitality industry at highest risk of phishing

Benchmarking report shows average phish-prone percentage across all industries and sizes of organisations at 29.6% – up 2.6% since 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

UK takes world lead in surveillance camera security

Although the UK is sometimes referred to as “the most surveilled country” in the world, it has taken the lead in setting minimum security requirements for surveillance cameras. But how will this make a difference internationally? Continue Reading

By

• Warwick Ashford, Senior analyst

Nominations open for UK’s security unsung heroes

The Security Serious cyber awareness campaign has opened nominations for the fourth annual cyber security Unsung Heroes awards Continue Reading

By

• Warwick Ashford, Senior analyst

Parents don’t know enough about cyber careers

Research by the SANS Institute finds that while parents are aware of cyber security, they don’t know enough to encourage their children into cyber roles Continue Reading

By

• Clare McDonald, Business Editor

Small business not necessarily weakest security link

Small businesses may not be the weakest link in the supply chain after all, with a lack of skills and best practices being bigger factors, a study by (ISC)² reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Disaster planning: How to expect the unexpected

Focusing too much on specific disasters rather than considering an organisation’s data protection, network security and process requirements, can lead to unpredicted vulnerabilities Continue Reading

By

• Peter Ray Allison

Facebook officially unveils cryptocurrency plans

Facebook has released details about its Libra cryptocurrency, but questions still remain over how, and if, it will work Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Enterprises challenged with security basics

Visibility, security tool overload and manual reporting are cited as top concerns by UK security leaders, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

UK to launch security standard for surveillance cameras

The UK is launching the world’s first voluntary cyber security standard and compliance certification mark for the manufacturers of surveillance cameras Continue Reading

By

• Warwick Ashford, Senior analyst

Most mobile apps vulnerable to malware

iOS and Android apps equally vulnerable to being exploited remotely by malware, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

IoT Security Foundation publishes smart building whitepaper

The IoT Security Foundation has published a guide on security for smart buildings to highlight key issues and gather feedback to inform future guidance for industry stakeholders Continue Reading

By

• Warwick Ashford, Senior analyst

Converged security takes centre stage at IFSEC

The importance and benefits of combining physical and cyber security was underlined in the opening session of the 2019 IFSEC security conference Continue Reading

By

• Warwick Ashford, Senior analyst

Debugging bug bounty programmes

Bug bounty programmes have become popular, but poor programme management can lead to development teams becoming overwhelmed and bugs being missed. Continue Reading

Applying AI to road safety

In this week’s Computer Weekly, we visit a Tokyo project where artificial intelligence is helping to improve road safety by detecting potential subsidence. As bug bounty programmes become popular, we look at what’s involved and the pitfalls to avoid. And we discuss digital development in healthcare with NHS England. Read the issue now. Continue Reading

Singapore faced fewer cyber threats in 2018

Despite the fall in the number of common cyber threats last year, Singapore will continue to face advanced persistent threats, CSA warns Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Business needs to see infosec pros as trusted advisers

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• RV Raghu, ISACA

DevSecOps is key to uniting opposing forces

Unifying DevOps and security teams with the aid of automation will bring harmony and added business benefits, says systems engineer Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Top infosec task is getting on board agenda

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Petra Wenham

Asco breaks silence on ransomware attack

A week after reportedly being hit by a ransomware attack, Belgium-based mechanical equipment manufacturer Asco has finally provided some details Continue Reading

Inside F5’s cyber security playbook

F5 Networks' CISO talks up measures that the application delivery and security specialist is employing to fend off cyber attackers that come knocking on its doors Continue Reading

By

• Aaron Tan, TechTarget

Building a cyber-physical immune system

Shantanu Rane, researcher in cyber-physical systems security at the Palo Alto Research Center, explains how our own immune systems can inspire the design of modern cyber-physical systems Continue Reading

By

• Shantanu Rane, PARC

Security Think Tank: Infosec needs to avoid FUD and keep it real

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Ellie Hurst, Advent IM

Innovation drives Nominet to cyber security

Embracing an innovation strategy for a mature organisation led domain name registry Nominet to found a cyber security business based on its core expertise, its CEO tells London Tech Week Continue Reading

By

• Warwick Ashford, Senior analyst

UK firms need to address risky user habits

McAfee calls for companies to ramp up their security culture and improve the integration of technical security controls to minimise exposure from workers Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook London hiring spree focuses on tackling online harms

Facebook is hiring for 500 tech jobs in the capital in the next six months, with a particular focus on seeking out and clamping down on malicious content and fake accounts, and curbing other harmful behaviour on its platforms Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Security risk ratings key to security/business understanding

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Maxine Holt, Omdia

AI-enabled cyber attacks a reality soon, warns Mikko Hypponen

Technology continues to shape human conflict and artificial intelligence will be no exception, so business needs to up its ability to detect attacks and respond, says security expert Continue Reading

By

• Warwick Ashford, Senior analyst

Operational technology security improving, but attack surface continues to grow

Critical national infrastructure providers and others are improving cyber security capabilities around industrial control systems, but the cyber threat remains high and continues to evolve, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Focus on business impact and likelihood of cyber attacks

How can cyber security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Paddy Francis

Most code-signing processes insecure, study shows

The majority of organisations are failing to enforce security for code-signing processes, providing opportunities for cyber criminals, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Are schools delivering on digital skills?

In this week’s Computer Weekly, we look at the differing approaches to teaching computer science across the UK and assess the pros and cons of each. Our latest buyer’s guide examines the technologies and best practices of multicloud environments. And we find out what you get for your money when buying cyber insurance. Read the issue now. Continue Reading

MP brands Huawei exec a ‘moral vacuum’ as operators demand 5G clarity

Huawei chief security officer John Suffolk faces tough questions from parliament’s Science and Technology Select Committee over the firm’s links to the Chinese government Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Frame cyber security impacts in business contexts

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Simon Persin, Turnkey Consulting

Implementing Dmarc a top priority for UK

Basic email security should be a top priority for UK firms, followed by reducing third-party web exposure and monitoring data flows leaving the enterprise, a Rapid7 study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Infosec letter to the board

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Large firms look to zero-trust security to reduce cyber risk

In the face of increasing cyber breach risk as organisations move to hybrid multi-cloud IT environments, just over half of large firms in Europe are planning a zero-trust approach to security Continue Reading

By

• Warwick Ashford, Senior analyst

NotPetya offers industry-wide lessons, says Maersk’s tech chief

There are several key industry-wide lessons to be learned from the NotPetya attack in 2017, according to the information chief at one of the companies most heavily impacted Continue Reading

By

• Warwick Ashford, Senior analyst

Misconfigured container services are a security risk

Researchers at Palo Alto Networks have released details of the scale of misconfigured and exposed container services putting organisations at risk of cyber attack Continue Reading

By

• Warwick Ashford, Senior analyst

How ASEAN firms are using AI to combat cyber threats

Artificial intelligence tools are becoming a vital part of the security arsenal for organisations and cyber criminals alike Continue Reading

By

• Ai Lei Tao

Weak cyber security top challenge, says NCSC chief Ciaran Martin

UK cyber security agency NCSC is focusing on practical support and making the internet and technology safer to use, but says the area that needs most attention is improving basic cyber security in firms, says agency chief Continue Reading

By

• Warwick Ashford, Senior analyst

Firms face targeted bespoke cyber attacks, dark web study reveals

Academic study exposes prolific availability and demand for tailored malware, network access and corporate espionage services, which suggests many firms’ cyber defences are below standard Continue Reading

By

• Warwick Ashford, Senior analyst

Legacy IT systems a significant security challenge

Information security professionals need to work closely with the business to identify critical legacy IT systems to ensure security risks are managed effectively, CISO tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Digital transformation an opportunity for security

Digital transformation is an opportunity not only for the business to up its game, but also for security teams to engage with and win over the business, CISO tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Joining the dots to deliver effective cyber security

In too many organisations, cyber security is dislocated and siloed. Security chiefs need to take a more joined-up approach, but that is likely to mean a rethink of how the security team operates Continue Reading

By

• Ed Tucker, Human Firewall