Hackers and cybercrime prevention

Security Think Tank: Cyber metrics need to be meaningful

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Paddy Francis

Clearer North Korean link to global infrastructure malware campaign

Researchers have uncovered clearer links between a North Korean hacking group and a cyber espionage campaign targeting government, defence, nuclear, energy and financial organisations around the world Continue Reading

By

• Warwick Ashford, Senior analyst

IT Priorities 2019: APAC keeping pace with digital transformation

Digital transformation is well underway among APAC enterprises which are looking to spend more on refreshing their IT infrastructure and technologies that improve employee productivity Continue Reading

By

• Aaron Tan, TechTarget

Using simulated disaster management to tackle the security skills gap

With the increasing need for cyber security professionals, organisations are turning to new ways to address the skills gap facing the security sector Continue Reading

By

• Peter Ray Allison

Teen becomes first millionaire through HackerOne bug bounties

A self-taught teen hacker from Argentina has become the first bug bounty hacker to become a millionaire by hacking to create a safer internet Continue Reading

By

• Warwick Ashford, Senior analyst

Supplier consolidation tops infosec goals for 2019

Supplier consolidation, collaboration between networking and security teams, and security awareness are the top priorities for information security professionals trying to prepare for the unknown, annual benchmark study shows Continue Reading

By

• Warwick Ashford, Senior analyst

London cyber security innovation centre issues open invitation

Government-backed cyber security innovation centre is calling for innovators to address key challenges facing the cyber security industry, offering a year of bespoke support to scale quickly Continue Reading

By

• Warwick Ashford, Senior analyst

Sextortion accounts for one in 10 spear-phishing emails

Email sextortion scams have increased in frequency and scope in the past four months, as well as evolving to bypass spam filters and trick recipients into reading the messages, research shows Continue Reading

By

• Warwick Ashford, Senior analyst

Icann calls for community collaboration to protect the internet

The domain name system watchdog Icann has reaffirmed its commitment to engage in collaborative efforts to ensure the security, stability and resiliency of the internet’s global identifier systems Continue Reading

By

• Warwick Ashford, Senior analyst

Chinese cyber attack group Bronze Union targeting weapons tech

Weapons technology is among the latest targets of a highly adaptable cyber espionage group that uses a wide range of publicly available and custom attack tools, presenting a challenge to network defenders Continue Reading

By

• Warwick Ashford, Senior analyst

Most UK consumers say Facebook should be regulated

Nearly three-quarters of UK consumers feel the social platform is damaging people’s mental health, survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security is battling to keep pace with cloud adoption

Cloud-based business initiatives are accelerating more rapidly than security teams can secure them, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals earn $3bn a year exploiting social platforms

Businesses urged to respond to research findings that the ready availability of hacking tools, wildfire spread of malware and proliferation of cryptocurrency mining has seen a 300-fold increase in social media-enabled cyber crimes in two years Continue Reading

By

• Warwick Ashford, Senior analyst

EU gathers momentum in cyber security legislation and cooperation

The past two years have seen a step-change in the rate at which the European Union is putting legislation in place to support improved cyber security standards, collaboration and sharing of resources, says digital commissioner’s representative Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber power needs wider discussion, says GCHQ director

The topic of cyber power needs wider discussion, says GCHQ head in a speech about the opportunities of digital innovation such as 5G, as well as the accompanying complexity and risk, with particular mention of China and Huawei Continue Reading

By

• Warwick Ashford, Senior analyst

Android now Fido2 certified

Mobile operating system’s certification accelerates global migration beyond passwords, says Fido Alliance, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook planned to spy on Android phone users, internal emails reveal

Facebook planned to use its Android app to track the location of its customers and to allow advertisers to send political advertising and invites to dating sites to ‘single’ people, confidential documents show Continue Reading

By

• Bill Goodwin, Computer Weekly

BlackBerry acquires Cylance to cement security capability

BlackBerry moves forward with its plans to establish itself as an enterprise security firm, focusing on internet-connected endpoints Continue Reading

By

• Warwick Ashford, Senior analyst

Nato supports collaboration on cyber security

Nato supports collaboration and cooperation on cyber security as an organisation founded on the principle of collective defence, says representative Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses urged to prepare for extortion campaigns

C-level executives, lawyers and doctors are the top extortion targets of cyber criminals, a report by researchers tracking thousands of sextortion attempts reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Cloud backup helps ASL Airlines evade ransomware and keep its business flying, says CIO

ASL Airlines took home the Best of Show prize at the Best of VMworld 2018 Awards after detailing how adopting a robust and resilient disaster recovery strategy is helping it evade ransomware threats Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

UK committed to working with EU cyber security partners

NCSC CEO uses cyber security conference in Brussels to set out his agency’s position on Brexit, 5G security, Huawei, market incentives and international cooperation on active cyber defence Continue Reading

By

• Warwick Ashford, Senior analyst

Cooperation a key theme of Brussels cyber security symposium

Fostering trust-based cooperation of like-minded cyber security stakeholders to create new strategies, policies and standards emerged as a key theme at a cyber security conference in Brussels Continue Reading

By

• Warwick Ashford, Senior analyst

Toyota Australia under cyber attack

The company has confirmed the attempted attack that took out its email system, forcing employees to turn to other forms of communication to continue working Continue Reading

By

• Aaron Tan, TechTarget

Breaking the chains: How FUD is holding the cyber sector hostage

The cyber security industry must move past fear tactics and get back to the basics of good cyber security practice Continue Reading

By

• Tom Kranz, Cyber Lab

Huawei faces battle to win Nordic trust

Nordic countries are investigating the spying allegations made against Chinese networking supplier Huiawei Continue Reading

By

• Gerard O'Dwyer

Activist Lauri Love’s computer ‘contained hacked data’, says judge

Lauri Love, who has been accused of hacking into US government computer systems, has lost a legal action against the NCA for the return of his computers and storage device Continue Reading

By

• Bill Goodwin, Computer Weekly

No More Ransom releases GandCrab decryption tool

Another free decryption tool is available that allows anyone infected with the latest versions of the GandCrab ransomware to regain control of their files and avoid paying the fee Continue Reading

By

• Warwick Ashford, Senior analyst

IT Priorities 2019: Cyber security and risk management among top priorities for 2019

This year’s Computer Weekly/TechTarget IT Priorities research shows that cyber security and risk management are among the top investment priorities Continue Reading

By

• Warwick Ashford, Senior analyst

Healthcare providers should press on with digital transformation

Healthcare providers should continue digitisation efforts with security in mind amid looming cyber threats, says a top T-Systems executive Continue Reading

By

• Aaron Tan, TechTarget

Finding security in the cloud

When choosing a cloud security provider, enterprises will need to consider the level of data privacy and data security risk involved Continue Reading

By

• Krishna Balakrishnan

Collaborative security approaches underpin container success

Containers are helping organisations to accelerate age-old software development approaches, but success is underpinned by a constant and team-wide attention to security Continue Reading

By

• Nicholas Fearn

CISOs under increasing pressure, study shows

Cyber security professionals are under growing pressure from workloads and budget deficits, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

(ISC)² invests in professional development of security workforce

Security industry association sets up Professional Development Institute to extend training offerings beyond certification Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: UTM a key part of a well-rounded security strategy

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Mary-Jo de Leeuw, (ISC)2

Telegram bot gets users hooked

Popular social media service provides a rich set of features for cyber criminals, RSA warns Continue Reading

By

• Cliff Saran, Managing Editor

Dutch developer offers businesses nuclear security option for communications

Startup that created the secure platform for communication between world leaders at the 2014 Nuclear Security Summit in the Netherlands seeks to revolutionise business mail Continue Reading

By

• Kim Loohuis

Security Think Tank: No tech will ever counter-balance poorly implemented processes

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

APAC healthcare providers losing $23m to cyber attacks

Healthcare organisations in the Asia-Pacific region could lose an average of $23.3m to cyber attacks, including losses from productivity and customer churn, a study finds Continue Reading

By

• Aaron Tan, TechTarget

Lauri Love takes legal action against NCA for return of seized computers

Lauri Love, a former engineering student who won a battle with the US Department of Justice against extradition to the US to face hacking charges, is suing the UK's intelligence agency, the NCA, for the return of his seized computers Continue Reading

By

• Bill Goodwin, Computer Weekly

Security Think Tank: Know strengths and weaknesses of UTM systems

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Simon Persin, Turnkey Consulting

A guide to choosing cloud-based security services

Cloud-based security services can help organisations with a growing cloud footprint to reduce cost and address the manpower crunch in cyber security Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Approach UTM with caution

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Simon McCalla, Nominet

Detail of Dutch reaction to Russian cyber attack made public deliberately

 Continue Reading

CW Benelux: Google helps Dutch schools to teach computer skills

A programme in the Netherlands to help primary schools provide computational thinking and programming, developed with financial support from Google, is well on schedule. Also read about four Russians’ attempted hack into the networks of the Organisation for the Prohibition of Chemical Weapons in The Hague, and how Dutch delivery company PostNL is making savings by using robotic technology to automate administrative tasks. Continue Reading

Security Think Tank: UTM attractive to SMEs, but beware potential pitfalls

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Maxine Holt, Omdia

Data breaches in Australia show no sign of abating

Australia’s privacy watchdog recorded over 800 cases of data breaches, nearly one year into the country’s mandatory data breach notification regime Continue Reading

By

• Beverley Head

Security Think Tank: Focus UTM capabilities on security and business needs

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Security Think Tank: Many routes to UTM to boost security capabilities

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Petra Wenham

Security Think Tank: Arguments for and against unified threat management

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Mike Gillespie

Massive uptick in cyber attacks targeting Student Loans Company

Cyber criminals used a range of techniques, as well as malware, malicious emails and calls, in attempts to access confidential financial data belonging to students, in massive uptick in attacks in the past year Continue Reading

By

• Warwick Ashford, Senior analyst

Orange acquires UK’s SecureData

The Orange telecommunications group is to acquire UK cyber security firm SecureData to strengthen its leadership position in Europe in this sector Continue Reading

By

• Warwick Ashford, Senior analyst

Innocent people arrested following surveillance blunders, IPCO reveals

Interception of communications commissioner Adrian Fulford warns of “grave” repercussions for people wrongly identified as suspects due to errors made when government bodies access email, phone and telephone data Continue Reading

By

• Bill Goodwin, Computer Weekly

New stolen credentials cache puts spotlight on authentication

The discovery of billions more stolen usernames and passwords in Collections #2 to #5 have prompted fresh calls for the implementation of better authentication methods across industry Continue Reading

By

• Warwick Ashford, Senior analyst

YouTuber impersonation scam not new, say researchers

Scam that tricked users into clicking on phishing links has affected tens of thousands of victims and has been active for several years, say security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Unconfigured IoT is a security risk, warns researcher

Internet of things researcher says unconfigured internet-connected devices are a largely unrecognised cyber security risk to businesses and consumers, and welcomes the increased likelihood of UK IoT legislation Continue Reading

By

• Warwick Ashford, Senior analyst

How traffic scrubbing can guard against DDoS attacks

Although most scrubbing services can help fend off distributed denial of service attacks, a more comprehensive mitigation strategy is required to remain unscathed Continue Reading

By

• Ai Lei Tao

UK police target hundreds of DDoS attackers

National Crime Agency is investigating hundreds of suspected users of a distributed denial of service-for-hire site that was taken down by an international law enforcement operation Continue Reading

By

• Warwick Ashford, Senior analyst

New tech putting sensitive data at risk, report confirms

Deployments of new technologies are putting sensitive corporate data at risk because organisations are struggling to secure these new IT environments, a report confirms Continue Reading

By

• Warwick Ashford, Senior analyst

Personal records of HIV-positive individuals in Singapore leaked online

The personal information of 14,200 people with the human immunodeficiency virus was leaked by an American who lived in Singapore Continue Reading

By

• Aaron Tan, TechTarget

Security alert for vulnerabilities in Siemens PLCs

Industries that use Siemens Simatic controllers to automate manufacturing processes have been urged to update software without delay Continue Reading

By

• Warwick Ashford, Senior analyst

Data protection practices still poor, survey shows

Despite concerns over privacy and data protection and a greater understanding of best security practices, individuals and businesses are still falling short, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Government to pump £70m into ‘designing out’ cyber threats

Industrial Strategy Challenge Fund cash to be used for designing and developing more secure hardware in a bid to eradicate cyber threats Continue Reading

By

• Lis Evenstad

DCMS funding fuels cyber diversity drive

The Department for Digital, Culture, Media and Sport is investing in four new projects to drive the number of diverse candidates considered for cyber careers Continue Reading

By

• Clare McDonald, Business Editor

UK cyber security agency investigates DNS hijacking

NCSC is probing the large-scale DNS hijacking campaign that has reportedly affected government and commercial organisations worldwide, and has issued defence advice Continue Reading

By

• Warwick Ashford, Senior analyst

Vodafone suspends use of Huawei hardware

Vodafone’s UK CEO has said the operator will ‘pause’ its use of Huawei hardware for the foreseeable future Continue Reading

By

• Alex Scroxton, Security Editor

Budding UK cyber strategists gear up for national competition 

Teams of UK university students are preparing to compete for the second time in analysing the threat of a simulated cyber attack to develop policies and strategies Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore’s growing cyber security influence in ASEAN

At a recent event marking the launch of Trend Micro’s regional headquarters in Singapore this week, the company’s executives cited Singapore’s vision and influence over ASEAN in cyber security ... Continue Reading

By

• Aaron Tan, TechTarget

Poor practices expose 24 million financial records

Failure to maintain appropriate security controls has again led to the exposure of millions of sensitive data records, this time from the banking world Continue Reading

By

• Warwick Ashford, Senior analyst

IoT application vulnerabilities leave devices open to attack

Barracuda Networks calls for internet of things devices to be subject to regular security review after researchers detail the application vulnerabilities of an internet-connected security camera Continue Reading

By

• Warwick Ashford, Senior analyst

Crime stats show switch in focus by cyber criminals

The latest crime statistics suggest that cyber criminals are turning their attention to organisations and social engineering attacks as they become more sophisticated Continue Reading

By

• Warwick Ashford, Senior analyst

Business failing to see strategic value of cyber security

UK businesses are failing to get value out of cyber security because they fail to see its strategic importance and often have a negative attitude towards security professionals, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

MPs challenge Huawei over spying allegations

The chair of the cross-bench Science and Technology Committee has written to Huawei seeking answers over its activities in the UK Continue Reading

By

• Alex Scroxton, Security Editor

Time to deploy strong authentication, says Fido

The time has come for organisations to deploy cryptographically backed strong authentication, according to the Fido Alliance, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

US issues emergency directive to halt DNS hijacking

US government agencies have been given 10 days to complete a four-step action plan to stop DNS hijacking attacks Continue Reading

By

• Warwick Ashford, Senior analyst

IBM mobile cyber range starts European tour in London

IBM’s mobile cyber range is kicking of a tour in London to raise awareness around the need for tried and tested cyber attack responses among organisations in Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Young Dutch cyber criminals get re-education rather than jail time

Young hackers in the Netherlands are being rehabilitated through punishments that educate rather than incarcerate Continue Reading

By

• Tijs Hofmans

Ransomware in decline, report confirms

The trend of cryptomining replacing ransomware as the most popular money-generating activity by cyber attackers appears to be confirmed by malware stats for the past year Continue Reading

By

• Warwick Ashford, Senior analyst

London cyber innovation centre expands global ties

London innovation centre Plexal has announced international partnerships aimed at boosting global cyber security cooperation Continue Reading

By

• Warwick Ashford, Senior analyst

Name and shame firms with poor cyber security, government told

The government should name and shame companies whose cyber security measures fail to protect consumers’ data and firms should implement Active Cyber Defence, an academic report urges Continue Reading

By

• Warwick Ashford, Senior analyst

Public procurement key to cyber security

Using public procurement as a means of boosting cyber security is the top recommendation for 2019, according to a report based on expert views Continue Reading

By

• Warwick Ashford, Senior analyst

Five issues for SMEs to consider when adopting encryption

Encryption is still considered difficult to deploy and use as a data protection method, especially by small businesses, but considering five key factors can make adoption easier, says Becrypt Continue Reading

By

• Warwick Ashford, Senior analyst

Breach of nearly 2.7 billion records underlines password flaws

Potentially the biggest personal data breach to date from thousands of sources, some possibly breached as far back as 2008, illustrates the deeply flawed nature of password-based authentication, say industry commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Threat intelligence boosts security training

Security professionals in training can now benefit from real-time threat intelligence data, thanks to a partnership between Digital Shadows and Immersive Labs Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Cloud tech helps to protect advanced networks

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Greg Temm

CenturyLink opens Singapore SOC amid security services boom

US telco’s second Asia-Pacific security operations centre in Singapore is one of eight globally as it bids to carve a slice of the security services market Continue Reading

By

• Aaron Tan, TechTarget

New Zealand faces more state-sponsored attacks

Nearly four in 10 cyber security incidents recorded by the National Cyber Security Centre were the work of state-sponsored threat actors Continue Reading

By

• Aaron Tan, TechTarget

Researchers discover new Magecart group

Security researchers have uncovered a sub-group of the Magecart hacking group, highlighting the wider risks of web-based supply chain attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Walk before you run

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

Millions of industrial remote controllers open to attack

Millions of industrial remote controllers are open to cyber attack because of vulnerabilities in the radio frequency technology used, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

The rise of DevSecOps

The increasing complexity of security threats facing enterprises is leading to DevSecOps approaches, which combine operations and development with security, so that all business units are involved in security operations Continue Reading

By

• Finbarr Toesland

Businesses fail to apply encryption technology effectively

Most businesses are not applying common encryption tools effectively to contain the fallout and costs of data breaches, research shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Apply different techniques to safeguard against rogue code

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Ramsés Gallego, Isaca

Less than half of firms able to detect IoT breaches, study shows

UK firms have one of the lowest internet-of-things device breach detection capabilities in Europe, a study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

SingHealth and IT supplier fined S$1m for data breach

Singapore’s data protection commission considered the fact that both SingHealth and its IT supplier fell prey to sophisticated threat actors, among other factors, when meting out the fine Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Combine SDN, containerisation and encryption to halt rogue code

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Mary-Jo de Leeuw, (ISC)2

Top UK hacker-for-hire jailed

Notorious British hacker-for-hire jailed for cyber attacks on a Liberian telco after an international criminal justice operation Continue Reading

By

• Warwick Ashford, Senior analyst

AI application overlooked in cyber security research

Despite the proliferation of cyber security products and services claiming to be driven by artificial intelligence, the application of the technology is being overlooked by research, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: How to use SDN, containers and encryption – and some warnings

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Petra Wenham

COI report offers stark reminder on cyber hygiene

The Singapore government’s Committee of Inquiry (COI) that looked into the unprecedented cyber attack on SingHealth’s IT systems released a public report this week, detailing security lapses ... Continue Reading

By

• Aaron Tan, TechTarget