Hackers and cybercrime prevention

Lauri Love would face ‘medieval’ conditions in US prison if extradited over hacking charges

Engineering student Lauri Love should be tried in the UK, court hears, as new evidence is presented on the “medieval” conditions in US jails for people with medical problems Continue Reading

By

• Bill Goodwin & Julia Gregory

Businesses need to balance user experience, privacy and security

Balancing user experience, privacy and security for the connected consumer is a key challenge for online businesses, according to KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Fintech is increasing operational risk to banks

European Banking Association report reveals fear of greater operational risk because of increased take-up of fintech in financial services sector Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Lauri Love: how reformed hackers halted the WannaCry virus

Lauri Love presents a compelling story of the WannaCry malware that nearly brought down the NHS, and the behind the scenes work of former hackers, and security researchers that helped to prevent lives being lost. Love is facing extradition to the US after allegedly taking part in a hacking protest over the death of internet pioneer Aaron Swartz, who faced jail for using a hidden computer to downloading academic journals at MIT. Continue Reading

By

• Bill Goodwin, Computer Weekly

UK sale of surveillance equipment to Macedonia raises questions over export licence policy

The UK approved an export licence for the sale of surveillance equipment to Macedonia – while the country was engaged in an illegal surveillance programme against its citizens. A senior minister was consulted on the decision Continue Reading

By

• Tena Prelec

My brother Lauri Love should have the right to a trial in the UK

Lauri Love should face trial over hacking allegations in a British Court, rather than be extradited to the US, where his extraordinary skills will be lost to society, says his younger sister Continue Reading

By

• Natasha Love

Uber recognises need for consumer trust after breach cover up

New Uber leadership has recognised the importance of consumer trust and that they never should have attempted to cover up a 2016 data breach that affected millions of customers and drivers Continue Reading

By

• Warwick Ashford, Senior analyst

UK cyber defenders set to build on existing capability

UK national cyber attack response and investigation is a well-defined and rehearsed process, but the responsible agencies say they are building more capability and closing the gaps Continue Reading

By

• Warwick Ashford, Senior analyst

Europe not ready for imminent cyber strikes, say infosec professionals

Information security leaders in Europe believe a major breach of critical infrastructure is coming and that data breaches in their own organisations are imminent – yet most are not ready Continue Reading

By

• Warwick Ashford, Senior analyst

CW ANZ: On cyber alert

Achieving any form of computer security is an uphill task, costing Australian companies time and money with no prospect of a reprieve any time soon. In this month’s CW ANZ, read about the state of cyber security in Australia, Telstra’s efforts to help enterprises improve their cyber security posture, and how Australian organisations can keep up with the demands of cyber security. Also, find out why unsanctioned cloud apps continue to be a major bugbear among security chiefs in Australia. Continue Reading

CW ASEAN: How managed security services help to reduce cyber risk

The growing complexity and volume of cyber threats has led to rising demand for managed security services that provide the capabilities and technological know-how to combat cyber threats. In this month’s issue of CW ASEAN, read more about the pros and cons of using managed security services and considerations you should be aware of. Also, find out what organizations can do to put the odds in their favor when combating cyber threats. Continue Reading

How the biggest cyber security disasters could have been avoided

The headline-grabbing breaches that hit Accenture and Equifax in 2017 could have been averted had basic cyber hygiene been in place Continue Reading

By

• Jessica McGreal, Contino

Why UK police are learning cyber forensics

The need for the UK police force to conduct forensic investigations on computers is nothing new, but a rapid escalation of cyber crime has demanded a different approach Continue Reading

By

• Alex Bennett, Firebrand Training

Muslim hactivists hack “unhackable” IS news site

A Muslim hacktivist group has hacked into Islamic State’s news site and published thousands of subscribers’ details just hours after the site claimed it was impenetrable Continue Reading

By

• Warwick Ashford, Senior analyst

WikiLeaks publishes code and analysis of CIA hacking tool

Security experts are questioning the wisdom of WikiLeaks releasing more source code for US intelligence agency hacking tools Continue Reading

By

• Warwick Ashford, Senior analyst

CW Benelux: Young wayward hackers could help fill Dutch IT skills gap

In this issue, read how an initiative in Rotterdam is helping young people get into the IT sector by targeting those overlooked by traditional methods. Also find out how Amsterdam’s Schiphol airport is utilising open source software to create and use a multi-cloud platform with an open API, and how the Netherlands’ Rabobank has moved from tape libraries and robotic arms to a platform-based storage and retrieval system. Continue Reading

Businesses unprepared for cyber attacks, warn cyber professionals

Businesses are nowhere near prepared enough for a cyber attack, according to a poll of information and security professionals Continue Reading

By

• Warwick Ashford, Senior analyst

Dmarc email validation – we're doing it all wrong

Dmarc is a hugely important way to reduce email fraud – just ask HMRC – but it also makes email marketing campaigns far more effective Continue Reading

By

• Ed Tucker, Human Firewall

Personal data of 46.2 million Malaysia mobile subscribers leaked

The massive data breach is yet another example of a ‘low and slow’ attack that stays dormant inside networks for years, without anyone noticing Continue Reading

By

• Aaron Tan, TechTarget

Cyber security professionals urged to embrace AI and automation

IBM security intelligence head says professionals should embrace artificial intelligence and automation to ensure they do not become obsolete Continue Reading

By

• Warwick Ashford, Senior analyst

Deloitte sponsorship helps progress of Bletchley cyber school

Sponsorship will provide hundreds of places on online Qufaro CyberEPQ course Continue Reading

By

• Cliff Saran, Managing Editor

NAO calls on NHS to ‘get its act together’ after WannaCry attack

The NHS could have prevented the WannaCry cyber attack had it followed basic IT security best practice, according to National Audit Office boss Continue Reading

By

• Lis Evenstad

IOActive warns of security flaws in maritime communication system

Researcher discovers critical security flaws in an Inmarsat maritime communication system, highlighting the cyber risks facing the shipping industry Continue Reading

By

• Warwick Ashford, Senior analyst

Kaspersky Lab explains how NSA data was uploaded

Malware detection triggered an upload of data from a National Security Agency contractor’s home computer, Kaspersky Lab says an internal investigation has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

A history of hacking and hackers

A security professional’s view on criminal hacking has shifted away from the traditional stereotype of the hacker, towards a much more diverse cross-section of wider society Continue Reading

By

• Danny Moules

Bad Rabbit malware raises fears of third global ransomware attack

A ransomware attack that has commonalities with WannaCry NotPeya is reportedly hitting organisations in Russia, Ukraine, Turkey, Bulgaria and Germany Continue Reading

By

• Warwick Ashford, Senior analyst

Nearly 200 arrested for airline ticketing fraud

Police have arrested nearly 200 people for airline ticketing fraud in an international operation involving public and private sector organisations Continue Reading

By

• Warwick Ashford, Senior analyst

Where will artificial intelligence take us?

In this week’s Computer Weekly, artificial intelligence (AI) enthusiasts and sceptics debate the opportunities and risks of the much-hyped technology – we listen in to the House of Lords investigation. Our latest buyer’s guide examines the benefits and challenges of cloud-native applications. And we look at the best practice in defending email systems from cyber attacks. Read the issue now. Continue Reading

IT security hindering productivity and innovation, survey shows

IT security is hindering productivity and innovation across enterprises, research has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Infoblox partners with McAfee to combine web and DNS security

Infoblox is to collaborate with McAfee to combine web and DNS security to deliver unified protection Continue Reading

By

• Warwick Ashford, Senior analyst

McAfee forges ahead with analytics, deep learning and AI

McAfee is forging ahead with its innovation efforts in advanced analytics, deep learning and artificial intelligence Continue Reading

By

• Warwick Ashford, Senior analyst

Focus needs to shift to breach impact, says McAfee researcher

Breach investigations commonly focus on the attackers and their motives, but a security researcher believes there needs to be more emphasis on business impact Continue Reading

By

• Warwick Ashford, Senior analyst

RSA’s Middle East cyber security conference gains its own identity

RSA Abu Dhabi conference focuses on region’s cyber security needs as digital technology deployments expand Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CW500: How the NHS WannaCry cyber attack unfolded

NHS Digital’s head of security talks about the security landscape in the NHS and why it led to extra challenges when the WannaCry cyber attack hit the NHS in May 2017 Continue Reading

By

• Lis Evenstad

Encryption flaw leaves every Wi-Fi network in the world wide open

A Belgian researcher has uncovered a major weakness in the WPA2 Wi-Fi security protocol that is thought to leave every Wi-Fi network in the world open to attack Continue Reading

By

• Alex Scroxton, Security Editor

Pizza Hut data breach shows need for board control

The poor handling of the data breach by fast food chain Pizza Hut shows that company boards need to take control, a London-based law firm advises Continue Reading

By

• Warwick Ashford, Senior analyst

SMEs more vulnerable than ever to cyber attacks, survey shows

The biggest cyber threat to UK and US small businesses is employees’ weak passwords, as the frequency, intensity and cost of cyber attacks continue to rise, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

CW500: A perfect storm – the cyber attack that hit Parliament

The former director of the Parliamentary Digital Service shares details and lessons learned from the cyber attack that hit UK parliament in June and explains why it was a “good experience” Continue Reading

By

• Lis Evenstad

Dutch government agreement increasingly focuses on IT security

The coalition government in the Netherlands has agreed its plan for the next four years, with IT security prominent Continue Reading

By

• Tijs Hofmans

Global cyber security collaboration initiative launched in Krakow

Cyber security ecosystems around the world have launched an initiative aimed at strengthening collaboration between regional ecosystems Continue Reading

By

• Warwick Ashford, Senior analyst

How Australia is tackling cyber crime

Telcos such as Telstra and industry associations in Australia are chipping in to help enterprises that are being targeted by cyber criminals with phishing and social engineering exploits Continue Reading

By

• Beverley Head

Yahoo breach affected 3 billion accounts

Yahoo’s personal data breach affected three billion user accounts, the company’s new owners have revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security industry key to solving skills gap

In the face of a growing shortage of cyber security skills around the world, the security industry itself needs to do more to attract people Continue Reading

By

• Warwick Ashford, Senior analyst

Where the device hits the network – a mobile device management update

As business becomes increasingly mobile, we look at the latest trends in mobile device management to give businesses the edge Continue Reading

By

• Rene Millman

WannaCry an example of pseudo-ransomware, says McAfee

The global WannaCry and NotPetya attacks were both examples of pseudo-ransomware, according to McAfee researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Global hacker botnet tops 6 million hijacked devices

A year after the first Mirai botnet attacks, the global botnet has grown, with many countries and cities unwittingly hosting large number of bot-infected devices Continue Reading

By

• Warwick Ashford, Senior analyst

Mac OS passwords at risk of theft, researcher warns

Some Apple Mac users are at risk of password theft due to a zero-day vulnerability discovered in some versions of the operating system Continue Reading

By

• Warwick Ashford, Senior analyst

NotPetya attack cost up to £15m, says UK ad agency WPP

Advertising giant was one of many companies hit in June 2017 by malware distributed through Ukrainian accounting software Continue Reading

By

• Warwick Ashford, Senior analyst

Malware hidden in CCleaner targeted tech firms

Major tech firms were targeted by malware hidden in Avast’s Piriform CCleaner software, researchers have found, leading to speculation that it may have been state-sponsored espionage attack Continue Reading

By

• Warwick Ashford, Senior analyst

Nation-state actors responsible for most cyber attacks

Companies of all sizes may find themselves faced with highly capable state-sponsored cyber attacks, but steps can be taken to shore up defences Continue Reading

By

• Ai Lei Tao

Most UK councils hit by cyber attacks

A study has revealed that most UK local authorities have suffered cyber attacks in the past year, showing local government is a key target for cyber criminals and that legacy software is a top security concern Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber crime a significant risk to individuals and organisations

Cyber crime is still a significant risk to individuals and organisations, a report claims, with the top threats including business email compromise, ransomware, and banking and mobile malware Continue Reading

By

• Warwick Ashford, Senior analyst

Government aligns data laws with GDPR

The UK government announces details of its data protection law that will align with the EU’s GDPR Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CW Europe: The Macedonian surveillance scandal that brought down a government

In this issue, we look at evidence that Macedonia may have been running covert internet surveillance using sophisticated software supplied by a western technology company. We also look at how politics is changing IT buying habits in France, with French CIOs looking at alternatives to storing data with US-based suppliers as a result of one of President Trump’s executive orders. Download the issue now. Continue Reading

Government wants to remain in EU cyber security club after Brexit

The UK government wants to maintain deep links with the European Union’s cyber security working groups following Britain’s exit from the bloc in 2019 Continue Reading

By

• Alex Scroxton, Security Editor

Millions of customer records compromised in Equifax breach

Major security breach unfolded over a two-month period, and is thought to have affected 143 million customers in the US, as well as an undisclosed number of Britons and Canadians Continue Reading

By

• Alex Scroxton, Security Editor

People with non-IT backgrounds could help fill cyber security skills gap

Organisations should look to fill cyber security roles with people who are curious and have work experience rather than focusing solely on graduates Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Content delivery innovation improves user experience for e-tailer

WorldStores Group, the owner of a number of online home and lifestyle retail brands, has transformed its customer experience with enhanced content delivery capabilities from Instart Logic Continue Reading

By

• Alex Scroxton, Security Editor

Instagram fixes API blamed for celebrity data leaks

Instagram says it has fixed the API responsible for enabling hackers to access some personal details of high-profile users of the service Continue Reading

By

• Warwick Ashford, Senior analyst

Researcher finds over 711 million compromised email accounts

A security researcher has discovered a spambot using more than 711 million compromised email accounts to spread data-stealing malware Continue Reading

By

• Warwick Ashford, Senior analyst

Security professionals name top causes of breaches

Security professionals have named the top reasons for successful cyber attacks, which are affecting more than half of organisations Continue Reading

By

• Warwick Ashford, Senior analyst

Industrial robots a security risk, warns IOActive

Some of the most popular industrial and domestic robot brands have various vulnerabilities that could by exploited by cyber attackers, a research paper warns Continue Reading

By

• Warwick Ashford, Senior analyst

How banking technology has changed since the crash

In this week’s Computer Weekly, 10 years after the financial crash, we examine how banking technology has changed as a result of the economic crisis. We look at how GDPR, the EU’s new data protection laws, will affect your data storage strategies. And we ask if the cryptocurrency boom will remain a niche pursuit or whether the underlying technologies can bring benefits for enterprise IT. Read the issue now. Continue Reading

NotPetya highlights cyber risk in shipping industry

Malware attack has shown that the shipping industry is vulnerable to cyber attacks, with Danish shipping giant Maersk reporting potential cost of up to $300m Continue Reading

By

• Warwick Ashford, Senior analyst

School leavers urged to look at cyber security apprenticeships

Cyber security apprenticeships are a good alternative to ‘clearing’ and debts, according to security certification body, Crest Continue Reading

By

• Warwick Ashford, Senior analyst

UK rail passengers don’t trust on-board Wi-Fi

YouGov survey commissioned by Cobham Wireless finds UK commuters are increasingly frustrated with connectivity standards on the rail network Continue Reading

By

• Alex Scroxton, Security Editor

Developers lack skills needed for secure DevOps, survey shows

The growing demand for developers with security skills is outpacing supply, but a survey reveals that a lack of formal security education and training by employers is contributing to the growing skills gap Continue Reading

By

• Warwick Ashford, Senior analyst

NotPetya attack cost up to $300m, says Maersk

Danish shipping line Maersk estimates that the NotPetya cyber attack in June cost the company up to $300m Continue Reading

By

• Warwick Ashford, Senior analyst

Hackers hit Holyrood with Westminster-style brute-force attack

The Scottish parliament has been hit by a cyber attack similar to the one that struck Westminster in June Continue Reading

By

• Warwick Ashford, Senior analyst

Leaked SMB exploits make malware powerful, warns Cylance

Four key exploits at the heart of hacking tools leaked by the Shadow Brokers have given malware authors a lot of power, say security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Malicious email spikes in Q2, reports Proofpoint

Malicious email campaigns saw a spike in volume and increased variety in the second quarter of 2017, a cyber security report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Russian cyber espionage group targeting hotel Wi-Fi

A Russian cyber espionage group is targeting hotel Wi-Fi networks to carry out malware infections and potentially steal credentials, researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

China tests hack-proof quantum satellite communications

China has tested a prototype communication system that uses the principles of quantum mechanics to make it impossible for hackers to access Continue Reading

By

• Warwick Ashford, Senior analyst

New TalkTalk fine takes total for poor data protection to £500,000

Information Commissioner’s Office fines TalkTalk for putting up to 21,000 customers’ details at risk of exposure prior to September 2014 Continue Reading

By

• Warwick Ashford, Senior analyst

IT pros urged to support ‘WannaCry hero’ Marcus Hutchins

Computer experts fear chilling effect on security research over US arrest of Marcus Hutchins who halted the spread of the WannaCry ransomware Continue Reading

By

• Bill Goodwin and Julia Gregory

CW Benelux: IoT Tech Day showcases innovation

Read about this year’s IoT Tech Day in Utrecht, Netherlands, which featured hobby projects such as light-sensing curtains that automatically open and close, but also showed that the IoT is growing up to encompass more serious applications. Also read about the lessons to be learned from the ‘Petya’ ransomware attack that has hit 60 countries, and find out how Dutch railway stations are monitoring the movement of travellers to reduce people jams. Continue Reading

WannaCry hero due in court on malware charges

The Briton who played a key role in halting the global WannaCry ransomware attacks is due in court in the US to face charges in connection with the Kronos banking Trojan Continue Reading

By

• Warwick Ashford, Senior analyst

NIS Directive plans show UK is serious about tackling cyber threats

UK government plans to implement the EU’s Network and Information Systems (NIS) Directive have been welcomed for assuring its commitment to cyber defence post-Brexit Continue Reading

By

• Warwick Ashford, Senior analyst

Gaming apps ‘main source’ of mobile phishing attacks, research shows

Analysis of 100,000 corporate devices shows more than a quarter of traffic going to phishing domains was from gaming apps Continue Reading

By

• Zach Emmanuel, Computer Weekly

Cyber criminals make it difficult to follow the money

Following the money is a classic technique used by law enforcement to link criminals to crimes by tracing associated financial exchanges, but that may not be easy in the case of the WannaCry attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Ransom DDoS attacks on the rise

The use of distributed denial of service (DDoS) attacks to extort money from organisations is on the rise, warns security firm Kaspersky Lab Continue Reading

By

• Warwick Ashford, Senior analyst

The fields of Athenry – how Apple’s datacentre plans are causing turmoil in a small Irish town

In this week’s Computer Weekly, we look into Apple’s controversial plans to build a huge datacentre in a small town in the west of Ireland, and hear the local arguments it has caused. We find out how the Met Office is managing the vast quantities of data it uses for weather forecasting. And we examine Google plans to bring artificial intelligence tools to the job recruitment market. Read the issue now. Continue Reading

CIA hacking tools for Mac OS and Linux exposed by WikiLeaks

WikiLeaks has exposed hacking tools targeting the Mac and Linux operating systems in the latest of its series of leaks allegedly from the US Central Intelligence Agency Continue Reading

By

• Warwick Ashford, Senior analyst

Radiation detection devices open to cyber attack, researcher finds

A security researcher has discovered numerous security flaws in multiple devices that are used to detect radiation in critical facilities Continue Reading

By

• Warwick Ashford, Senior analyst

Adobe to kill off Flash Player by end of 2020

Adobe has announced it is to stop updating and distributing Flash Player in just over three years’ time Continue Reading

By

• Warwick Ashford, Senior analyst

North Korean web users enjoy Amazon, Facebook and YouTube, report claims

Threat intelligence specialist Recorded Future claims that the North Korean elite are as plugged in to the worldwide web as any western citizen Continue Reading

By

• Alex Scroxton, Security Editor

Big data means big risk, Swedish Transport Agency leak shows

The Swedish Transport Agency exposed sensitive information by transferring its databases to a third party cloud provider without following data protection procedures Continue Reading

By

• Warwick Ashford, Senior analyst

Retail data breaches still high as GDPR deadline looms

As the EU’s General Data Protection Regulation compliance deadline approaches, retail data breaches remain unacceptably high, a data threat report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

CW ANZ: Cyber security plan bears fruit

Australia’s Cyber Security Strategy, aimed at protecting citizens, companies and critical infrastructure, has made significant headway over the past year, but the jury is still out on its long-term impact. In this month’s CW ANZ, we take a look at the progress of Australia’s national cyber security blueprint and what else needs to be done to better protect Australia’s interests in the global cyber security landscape. Also, read about what the Australian government is doing to better guard public sector IT systems against cyber attacks. Continue Reading

CW ASEAN: Stay alert to threats

With cyber threats intensifying in recent years, from the global outbreak of ransomware to intrusions of university networks to access government data, the role of threat intelligence in anticipating and mitigating threats has become more important than ever. In this month’s CW ASEAN, learn how organizations can make the most out of threat data feeds in an intelligence-driven security strategy. Also, find out how companies can navigate the ominous cyber threat landscape by investing in cyber security technology and processes. Continue Reading

Airbus helps secure critical infrastructure

In this week's ezine, Computer Weekly explores how to secure industrial control systems, which have often lagged behind the leading edge of IT security and pose serious risks to critical national infrastructure. Airbus believes that despite the vulnerabilities of individual components, industrial control systems as a whole are quite resilient. We also speak to the head of technology at Centrica about how the utility company is becoming a specialist provider of data lake integration tools, and we explore the 802.11ac Wave 2 standard. Continue Reading

IBM claims breakthrough in mainframe encryption

IBM says its new mainframe ushers in a new era of data protection in response to a call to action from chief information security officers and security experts worldwide Continue Reading

By

• Warwick Ashford, Senior analyst

Defence minister opens £3m cyber security centre in Gloucester

UK minister for defence procurement has opened Lockheed Martin’s job-creating cyber security centre aimed at boosting UK cyber defence capability and skills Continue Reading

By

• Warwick Ashford, Senior analyst

NHS urged to spend extra cyber defence funds wisely

The NHS has been urged to invest wisely in cyber defences after the government announced plans to increase data security funding by millions of pounds in response to the Caldicott review Continue Reading

By

• Warwick Ashford, Senior analyst

Australia to push ahead with decryption plans

The Australian government remains undaunted in requiring tech firms to provide access to encrypted communications in law enforcement efforts Continue Reading

By

• Beverley Head

Encryption keys too predictable, warn security researchers

Encryption keys are not as random as most people think, which means encrypting data is often not as secure as it could be, according to security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

CW Middle East: How women can fill the tech skills gap

The growth of the IT sector continues to drive both innovation and employment in the Gulf, but women – as with all industries in the region – are under-represented in technology by significant margins, and could help to fill the tech skills gap. Also in this issue, read about growing threats in Saudi Arabia’s cyber sector, and how Dubai is becoming a world leader in smart city developments. Continue Reading

Verizon denies data loss but admits potentially huge breach

Verizon has responded to reports of millions of customer records being exposed to the internet by saying no data was accessed by malicious third parties, but the incident raises thorny issues Continue Reading

By

• Warwick Ashford, Senior analyst

What Singapore can learn from Israel’s cyber security playbook

A former Unit 8200 captain from the Israel Defense Forces shares what Singapore can learn from Israel’s approach to cyber security Continue Reading

By

• Aaron Tan, TechTarget

Kaspersky researcher in Asia develops cyber forensics tool

The open source tool lets cyber forensics investigators access infected machines remotely to collect malware artefacts without compromising system integrity Continue Reading

By

• Aaron Tan, TechTarget