Hackers and cybercrime prevention

Microsoft Word document and zero-day attacks on the rise

Macro-less Microsoft Word document attacks and zero-day malware are on the rise, according to data from WatchGuard Continue Reading

By

• Warwick Ashford, Senior analyst

Majority of firms fear mobile workers have been hacked

More than half of organisations fear that their mobile workers have been hacked and most are concerned that a growing mobile workforce means increased cyber security risk, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

UK organisations urged to develop cyber security skills

Managed cloud computing firm Rackspace is calling on UK organisations to do more to develop cyber security skills in the light of research into expertise in cloud security Continue Reading

By

• Warwick Ashford, Senior analyst

Most top UK firms fail to disclose cyber risk testing details

Most of the largest UK companies do not reveal their testing of cyber protection plans and do not share security updates with the board regularly, a Deloitte report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Police arrest €1bn cyber heist mastermind

Police have arrested a key member of the Carbanak gang believed to be responsible for more than 100 cyber heists worldwide Continue Reading

By

• Warwick Ashford, Senior analyst

Blockchain not ready for cross-border bank payments

The use of blockchain in certain parts of the financial services industry is limited at present due to the additional IT work required around its use Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK government publishes export strategy for UK cyber security

The government has published a guide for UK cyber security firms on how it plans to support their efforts to find and secure opportunities to export their products and services Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware publicity heightened awareness but other threats remain, experts say

Due to several high profile attacks over the past year, ransomware is now well known across organisations, but there are other threats to be aware of, say cyber security experts Continue Reading

By

• Zach Emmanuel, Computer Weekly

Dutch SMEs’ cyber security is insufficient

Nowhere in the Netherlands is digitisation as big as it is in small and medium-sized enterprises, but the sector still has a lot to do in terms of cyber security Continue Reading

By

• Kim Loohuis

Cloud key to cyber defence, says Palo Alto Networks

Organisations need to make sense of security intelligence and act on it faster to get ahead of attackers, and cloud-based security is one way of making that possible, according to Palo Alto Networks Continue Reading

By

• Warwick Ashford, Senior analyst

Private sector over-investing against nation-state attacks

The creator of a routing technique that protects the domain name system says the money spent on guarding against nation-state actors could have been better used for other purposes Continue Reading

By

• Aaron Tan, TechTarget

Application layer DDoS attacks increasing, Imperva data shows

Distributed denial of service attacks targeting applications almost doubled in the last three months of 2017, according to Imperva Incapsula data Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses lack cyber security confidence after majority were breached in past year

Most businesses were hit by a data breach in the past year, yet less than half are confident they would detect a breach, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

MoD to focus on SMEs to raise supply chain cyber security

The Ministry of Defence continues to develop a joint initiative with industry aimed at raising the security posture throughout the UK’s defence supply chain, with increasing focus on SMEs Continue Reading

By

• Warwick Ashford, Senior analyst

SD-WAN still too complex, survey shows

Despite SD-WAN adoption, WAN complexity remains a major challenge, a survey has revealed, driving firms to managed services, mainly because of security concerns Continue Reading

By

• Warwick Ashford, Senior analyst

Popular culture key to giving cyber security much-needed boost

The cyber security industry should turn to popular culture to raise awareness of the cyber threat to businesses and consumers and attract new blood to the field, says McMafia author Continue Reading

By

• Warwick Ashford, Senior analyst

Think tank reports lifts lid on police cyber crime training

UK think tank Parliament Street has lifted the lid on spending by police forces on training staff to deal with cyber crime and recommended greater collaboration in this regard Continue Reading

By

• Warwick Ashford, Senior analyst

Where neuroscience meets technology

In this week’s Computer Weekly, we find out how computer scientists are using data, cloud and virtual reality to understand the brain and improve mental wellbeing. We analyse newly published government documents detailing the early problems with the Universal Credit IT project. And we look at how emerging artificial intelligence techniques can help improve cyber security. Read the issue now. Continue Reading

Firms need to move from DevOps to DevSecOps, says expert

In the face of competition, organisations are turning to DevOps to improve efficiency and accelerate innovation, but this is creating new security risks, an industry expert warns Continue Reading

By

• Warwick Ashford, Senior analyst

Wigan data breaches underline need to share threat intelligence

Ongoing data breaches experienced by local authorities underline the need for greater sharing of threat intelligence, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

How AI will underpin cyber security in the next few years

Cyber security risks are growing in complexity and volume, but artificial intelligence techniques can help businesses track and fight them in real time Continue Reading

Network security in the digital transformation era

Network security has always been a core focus for CISOs and IT security managers, but in an era of digital transformation, we examine if network security strategies are keeping up with new and emerging cyber threats Continue Reading

By

• Nicholas Fearn

Russia compromised core router in US energy attacks

Russian cyber attackers used a compromised core router in a series of attacks on the US energy sector, security researchers have revealed as the UK energy sector is placed on alert Continue Reading

By

• Warwick Ashford, Senior analyst

Network security in the age of the internet of things

Wireless devices and smart technologies are increasingly being brought into the workplace, and pose a growing risk to company data Continue Reading

By

• Peter Ray Allison

IT contractors not a risk despite Snowden leaks, GCHQ tells court

The government argues in the Investigatory Powers Tribunal that contractors with systems administration rights to computers holding GCHQ’s most sensitive intelligence pose no more of a security risk than the agency’s employees Continue Reading

By

• Bill Goodwin, Computer Weekly

SD-WAN needs software-defined security

Digital transformation is driving organisations to move to the cloud, which requires a new architecture that embraces cloud technology, but that in turn requires a new way of thinking about network security to ensure data is protected Continue Reading

By

• Klaus Gheri, Barracuda

Cyber criminals using complex financial system, study shows

Cyber criminals are using a combination of new cryptocurrencies, gaming currencies and micro-payments to launder up to $200bn in ill-gotten gains, research has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Defence industry urges government to relax controls on crypto exports

Trade body representing defence, aerospace and security companies calls on government to make it easier to export “non-contentious” cryptography to secure organisations against cyber crime Continue Reading

By

• Gamil Jassin

US blames Russia for cyber attacks on energy firms

The US has blamed Russia for a series of attacks on energy sector firms, underlining the need to ensure critical infrastructure IT systems are up to date and secure Continue Reading

By

• Warwick Ashford, Senior analyst

Australian firms need to move faster in the digital age

Just over a tenth of IT professionals in Australia say their companies can roll out a new product in less than three months, despite operating in fast-moving markets with digitally savvy customers Continue Reading

By

• Jessica McGreal, Contino

Navigating ASEAN’s patchy cyber security landscape

Cyber resilience remains low across Southeast Asia, a regional economic powerhouse that is increasingly susceptible to cyber threats as its digital economy grows. Continue Reading

CW ASEAN: Time to boost cyber defences

With a relatively young and tech-savvy population, ASEAN has been at the forefront of technology adoption. Yet, this has exposed its people and businesses to more cyber threats, including the massive data leak in Malaysia in 2017. In this month’s issue of CW ASEAN, we take a closer look at ASEAN’s patchy cyber security landscape, including varying levels of cyber resilience across the region, cyber security strategies adopted by different countries, as well as efforts to improve cyber capabilities and foster greater collaboration in the common fight against cyber threats. Download the issue now. Continue Reading

How the biggest cyber security disasters could have been avoided

The headline-grabbing breaches that hit Accenture and Equifax in 2017 could have been averted had basic cyber hygiene been in place. Continue Reading

CW ANZ: Report data break-ins – it’s the law

Cyber security is an increasingly global endeavour, with threat actors who know no boundaries unleashing attacks from nearly anywhere in the world. In this month’s issue of CW ANZ, we look at how Australia’s mandatory data breach notification law underscores recent efforts to lift its cyber security game, both locally and internationally. Download the issue now. Continue Reading

Security Think Tank: Fileless malware not totally undetectable

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Greg Temm

DocuTrac medical software is a breach risk, warns Rapid7

Security researchers have issued a security warning about medical billing and documentation software they say puts patients at risk of data breach Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Awareness is a good starting point to counter fileless malware

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Ed Moyle, Drake Software

Researchers accused of irresponsible disclosure of AMD chip flaws

Israel-based researchers have been accused of irresponsible disclosure for going public with more than a dozen security flaws discovered in AMD processors Continue Reading

By

• Warwick Ashford, Senior analyst

Most people think cryptocurrency will be accepted on buses by 2025

Cryptocurrency is a mystery to many people, yet 55% of respondents to a survey expect shops and buses to accept digital money in seven years’ time Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

APAC security chiefs expect imminent attack on critical systems

Nearly 70% of cyber security leaders in the APAC region believe a major attack affecting critical infrastructure across multiple countries will happen in the next two years, a survey reveals Continue Reading

By

• Aaron Tan, TechTarget

Government ‘unlawfully delegated’ bulk data powers to GCHQ, court hears

Privacy International urges Britain’s most secret court, the Investigatory Powers Tribunal, to rule that the government illegally collected surveillance data from internet and phone companies until at least September 2017 Continue Reading

By

• Bill Goodwin, Computer Weekly

Security Think Tank: Patch, scan and lock down to counter fileless malware

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Petra Wenham

Businesses need to take cryptojacking seriously

Organisations must pay attention to cyber criminals hijacking computing resources to mine cryptocurrencies, because nearly half are affected and the impact is greater than many realise Continue Reading

By

• Warwick Ashford, Senior analyst

Public sector organisations ill-prepared for GDPR

Public sector organisations in the UK need to do much more to comply with the General Data Protection Regulation rule on providing information to citizens about details held about them Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Slingshot router malware: a warning for businesses

A stealthy malware that has been used to carry out cyber espionage undetected for six years should raise a red flag to businesses, say security commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Human, procedural and technical response to fileless malware

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Mike Gillespie

Eight new cyber threats a second in Q4 2017, McAfee report reveals

There was an increase in cyber attacks on healthcare organisations, the use of fileless malware and cryptocurrency mining in the last three months of 2017, with eight new threats a second Continue Reading

By

• Warwick Ashford, Senior analyst

Fileless attacks surge as hackers exploit PowerShell scripts

Malicious scripting through Microsoft’s PowerShell IT admin tool is being used to take control of Windows machines and Apple Macs Continue Reading

By

• Cliff Saran, Managing Editor

UK leads global upward trend in SOC maturity

The UK is leading the way towards more efficient security operations centres, but many still continue to operate with serious gaps in security, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Cooperation and exercises key to cyber defence, says Nato centre

International cooperation and regular tabletop exercises are essential to ensure effective cyber defence, according to the Nato cyber defence centre Continue Reading

By

• Warwick Ashford, Senior analyst

Security researchers demonstrate ransomware attack on robots

Researchers have carried out a ransomware attack on robots to show that such attacks are possible and should be guarded against Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Use layered security and patch management to defeat fileless malware

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Maxine Holt, Omdia

Cryptojacking cyber criminals up their game

Cyber criminals hijacking computing resources to mine for cryptocurrencies are raising their efforts to bypass enterprise security controls, researchers have found Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Multi-layered security key to fileless malware defence

What should organisations do, at the very least, to ensure business computers are protected from fileless malware? Continue Reading

By

• Simon Persin, Turnkey Consulting

Mac malware more than doubled in 2017

Malware targeting Apple Mac computers more than doubled from 2016 to 2017, according to security firm Malwarebytes Continue Reading

By

• Warwick Ashford, Senior analyst

CW Europe: Germany’s Lemoncat takes catering to the cloud

Business catering startup Lemoncat has taken advantage of the affordable cost of living in Berlin and is shaking up the catering sector by harnessing the Amazon and Salesforce clouds. Also in this issue, read how Moscow’s government is taking advantage of high penetration of broadband and mobile internet to expand innovative services under the Russian capital’s smart city programme, and how organisations in the Netherlands still have much to do to comply with the General Data Protection Regulation. Continue Reading

UK cyber security certification pilot launched

UK businesses now have the opportunity to improve their cyber security and prove they have taken steps to protect data they hold, thanks to a police-backed certification scheme Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses warned not to ignore cryptojacking threat

Businesses should not ignore the threat of malware designed to carry out illicit cryptocurrency mining, warns NTT Security Continue Reading

By

• Warwick Ashford, Senior analyst

Only half of ransomware payments honoured

Only half of ransomware victims who pay ransoms to cyber criminals recover their data, a report reveals, pointing to a need for more effective strategies to deal with these attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses under pressure to allow easier access to cloud

Businesses are under pressure from employees to use consumer-focused authentication methods for cloud applications, but that could have both positive and negative security implications, warns Gemalto Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Aim to detect and contain fileless malware attacks quickly

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Paddy Francis

Cyber attacks up nearly 20% in 2017

Research by SonicWall shows there were 9.32 billion malware attacks globally last year, but ransomware attacks fell by 71% Continue Reading

By

• Zach Emmanuel, Computer Weekly

Cyber security is a team sport, says NCSC

The UK’s national cyber security agency aims to help organisations understand the need to act collaboratively and collectively against the cyber threat, urging them to raise the bar Continue Reading

By

• Warwick Ashford, Senior analyst

World Economic Forum creates fintech focus group for cyber security

WEF consortium of companies will focus on protecting financial technology firms from cyber threats Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government sets out tighter security measures for IoT devices

The government has announced plans to develop a new code of practice to improve the security of connected internet of things devices Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Social engineering at the heart of fileless malware attacks

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

EC to boost cyber security support and collaboration

The European Commission is focused on boosting cyber security support and collaboration throughout the European Union Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: How to tackle fileless malware attacks

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Adrian Davis, (ISC)²

Most healthcare organisations have been breached, report shows

 Less than a third of global healthcare organisations remain untouched, as data breaches rise across the industry, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber crime is a top threat to UK charities, says NCSC

Cyber crime poses the most serious threats to UK charities, the National Cyber Security Centre has warned Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber threat to industrial control systems highest yet

The cyber threat to industrial control systems has never been greater, according to a report analysing malicious activity aimed at such systems Continue Reading

By

• Warwick Ashford, Senior analyst

Equifax ups breach figure by a further 2.5 million

Credit rating agency Equifax has increased the number of US records believed to have been compromised in 2017 Continue Reading

By

• Warwick Ashford, Senior analyst

Memcached servers irresistible to DDoS attackers, expert warns

In the light of the biggest distributed denial of service attack to date against GitHub, organisations should ditch memcached servers or risk a blizzard of blistering attacks, says security researcher Continue Reading

By

• Warwick Ashford, Senior analyst

New privacy fears as IT challenges delay surveillance oversight body by a year

IT challenges have delayed government plans for an independent body to authorise requests to access the public’s internet and phone records by nearly a year, raising new legal and privacy concerns Continue Reading

By

• Bill Goodwin, Computer Weekly

Imaging systems biggest security risk in healthcare

Imaging systems have been identified as the biggest cyber security risk in the healthcare sector, a report on internet of things security has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Security fears delay roll-out of national e-voting system in Finland

Project enters problem-solving phase to identify advanced, effective and best practice solutions to develop a secure internet-based voting system Continue Reading

By

• Gerard O'Dwyer

Salary is not top way to attract cybersec pros, report reveals

Salary is not the highest priority for cyber security professionals, a report on hiring and retaining top cyber security talent shows Continue Reading

By

• Warwick Ashford, Senior analyst

Firms failing to learn from cyber attacks

Organisations are failing to learn from cyber attacks, and lax security practices are leaving organisations worldwide open to damaging cyber attacks, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Government must rewrite illegal sections of Snoopers’ Charter, court told

A court has been asked to give ministers until July 2018 to rewrite powers to require phone and internet companies to retain data on the population. The government acknowledges parts of surveillance regime are unlawful Continue Reading

By

• Bill Goodwin, Computer Weekly

Businesses urged to patch Oracle WebLogic flaw

Security researchers are again urging businesses to patch an Oracle WebLogic flaw that continues to be exploited by cyber criminals to mine cryptocurrencies Continue Reading

By

• Warwick Ashford, Senior analyst

Understanding the cyber threat key to UK defence, says NCSC

Understanding cyber threats is key to defending the UK and ensuring it is a safe place to do business, says the National Cyber Security Centre Continue Reading

By

• Warwick Ashford, Senior analyst

UK local councils under huge cyber attack pressure

Investigation underlines importance of security automation and employee awareness training Continue Reading

Singapore firms unprepared for GDPR

An EY study reveals that only 10% of organisations in Singapore are ready to comply with Europe’s new data protection regime Continue Reading

By

• Aaron Tan, TechTarget

Cryptomining is top attack type, says Malwarebytes

Malicious cryptomining has been the top cyber criminal activity detected since September 2017, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Surveillance watchdog investigates security risks of GCHQ IT contractors

The investigatory powers commissioner is reviewing the security arrangements for IT contractors that have access to live computer systems at GCHQ holding highly sensitive records on the UK population Continue Reading

By

• Bill Goodwin, Computer Weekly

Cyber criminals catching up with nation state attacks

The trickle-down effect of advanced “military-grade” tools is seeing the gap between cyber criminal and nation state attack capabilities closing, outpacing many organisations’ defence capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

2018 could be year of mobile malware, says McAfee 

Security firm announces several mobile industry partnerships as its latest mobile threat report shows mobile malware is becoming increasingly popular with cyber attackers Continue Reading

By

• Warwick Ashford, Senior analyst

Is cyber security becoming a cost of doing business - to the detriment of our data?

Computer Weekly writes a lot about cyber security – it’s the easily most popular topic among our readers, and always rates as one of the top priorities in our annual survey of IT professionals. ... Continue Reading

By

• Bryan Glick, Editor in chief

Avast discovers Tempting Cedar Android spyware campaign

Security researchers have uncovered a three-year-old Android spyware campaign spread through social media and targeting people in the Middle East Continue Reading

By

• Warwick Ashford, Senior analyst

Unprotected Kubernetes consoles expose firms to cryptojacking

A number of big companies have been targeted by crytojacking attacks, where cyber criminals hijack computing power to mine cryptocurrencies, but some have unprotected Kubernetes consoles in common Continue Reading

By

• Warwick Ashford, Senior analyst

UK plans laws to protect company directors from ID theft

Legislation will make it easier for directors to remove their personal addresses from the company register Continue Reading

By

• Warwick Ashford, Senior analyst

Google calls out Microsoft for failing to fix reported flaw

Google’s Project Zero has gone public with a Windows 10 flaw that Microsoft claimed to have fixed in its February security update Continue Reading

By

• Warwick Ashford, Senior analyst

CW Nordics: Nordics CIOs’ priorities in 2018

A select group of CIOs and analysts in Denmark, Finland, Norway and Sweden give their views on the top IT priorities in 2018. As in 2017, digital transformation will continue to be a buzzword. Also read how Sweden is tightening up its cyber security defences as part of a wider national security strategy, and how Nordic banks cannot afford to slow their digital transformations as PSD2 comes into force. Continue Reading

Email attacks and incident detection top security challenges

Email inboxes are the weakest link in security perimeters, and companies struggle with detecting security incidents quickly and accurately, a report finds Continue Reading

By

• Warwick Ashford, Senior analyst

Hawaii missile alert: Why the wrong guy was fired

In January 2018, an employee at Hawaii’s emergency management agency sent out a false alarm of an imminent missile attack, and was subsequently fired – but perhaps poor system design is really to blame Continue Reading

By

• Jonny Corbett, Norman & Sons

UK organisations failing to take action against fraud

UK organisations are facing increasingly complex and costly incidents of fraud partly due to increasing cyber fraud, yet few are making use of the anti-fraud technologies available, a survey has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

People worried about data security in public sector, survey finds

Majority of people are concerned with the security of the data they share with public sector organisations, according to a report Continue Reading

By

• Lis Evenstad

Security leaders investing in automation and AI, study shows

Automation and artificial Intelligence are being used to defend against cyber threats, says report, but experts warn that these tools and technologies can be exploited by attackers Continue Reading

By

• Warwick Ashford, Senior analyst

Economic impact of cyber crime is significant and rising

Cyber attacks are becoming easier to carry out while defences remain inadequate, study shows Continue Reading

By

• Warwick Ashford, Senior analyst

AI a threat to cyber security, warns report

Artificial intelligence is being incorporated into a range of cyber security products, but the technology may also introduce new threats, a report warns Continue Reading

By

• Warwick Ashford, Senior analyst