Hackers and cybercrime prevention

Heartbleed bug linked to US hospital group hack

A security firm has linked the Community Health Systems data breach to the Heartbleed bug Continue Reading

By

• Warwick Ashford, Senior analyst

21% of manufacturers hit by intellectual property theft

More than one in five manufacturing firms reported a loss of intellectual property in a cyber attack in the past year, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

USB-connected devices present cyber vulnerabilities

Connecting devices to computers using a USB port could lead to security breaches, say Berlin-based researchers Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

Cyber Security Challenge UK takes on the internet of things

The latest level of the Cyber Security Challenge will involve participants hacking devices connected to the internet of things Continue Reading

By

• Clare McDonald, Business Editor

Paddy Power hit by data breach in 2010

Gambling firm Paddy Power owns up to 2010 data breach after recovering a compromised dataset in Canada Continue Reading

By

• Alex Scroxton, Security Editor

Tackle IAM with a risk-based approach, says KPMG

A risk-based approach is the best way to tackle identity and access management, says KPMG Continue Reading

By

• Warwick Ashford, Senior analyst

Hacker and UFO hunter Gary McKinnon launches SEO business

Hacker Gary McKinnon has set up a search engine optimisation business after winning a 10-year battle against extradition to the US Continue Reading

Six cyber criminals charged in $1m Stubhub fraud

The US has charged six members of an international cyber crime gang that defrauded Stubhub of $1m Continue Reading

By

• Warwick Ashford, Senior analyst

Hackers abuse Bitly API in novel attack, reports Websense

A cyber attack targeting MSNBC highlights cybercriminals’ abuse of the public’s trust in news sites, says Websense Security Labs Continue Reading

By

• Warwick Ashford, Senior analyst

Info sharing key to cyber defence, says financial services firm

Threat information sharing is key to success in combating cyber attacks, says the Depository Trust and Clearing Corporation Continue Reading

By

• Warwick Ashford, Senior analyst

UK leads international partnership to fight financial malware

The UK National Crime Agency is leading international collaboration between law enforcement and the private sector to fight bank theft malware Continue Reading

By

• Warwick Ashford, Senior analyst

Why using voice biometrics is a good idea

Banks and other organisations are turning to voice biometrics, but why do they believe the technology is good idea? Continue Reading

By

• Warwick Ashford, Senior analyst

Smart light bulbs get security update

Smart light bulb maker LIFX has issued a firmware update after security researchers exposed a security weakness Continue Reading

By

• Warwick Ashford, Senior analyst

Barclays passes government’s ‘internet-born threat’ test

Barclays Bank has been awarded the government’s cyber security certificate for digital banking services after independent tests of services such as Pingit Continue Reading

Industrial control systems increasingly under attack, says Kaspersky

Targeted attacks on industrial control systems take place on a regular and increasing basis, says Kaspersky Lab Continue Reading

By

• Warwick Ashford, Senior analyst

Domino’s breach underlines value of personal data, say experts

The latest cyber breach to hit a high-profile brand underlines the high value of personal data, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

Technology key to secure document future, says UK Home Office

Physical security is just as important as digital security in documents such as passports, says UK Home Office Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft admits running out of IP addresses for Azure

Microsoft has assured US Azure customers data remains in the US, despite running out of US-registered IP addresses at times Continue Reading

By

• Warwick Ashford, Senior analyst

The case for a European cloud market

In this week’s Computer Weekly, the European Commission wants to create a digital single market in Europe based on industry standard clouds – but is the plan realistic? Network encryption promises to solve many IT security threats – we examine the benefits. And our latest buyer’s guide looks at business process management. Read the issue now. Continue Reading

IT departments unprepared for internet of things

Only 41% of IT professionals are working on projects to prepare their business for the internet of things Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Turing Test 2014 marks historic milestone in artificial intelligence

A computer program has made history by passing the artificial intelligence test set by computer science pioneer Alan Turing Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber threats hiding in plain sight, says Palo Alto Networks

Cyber attackers exploit commonly used business applications to bypass security controls, research shows Continue Reading

By

• Warwick Ashford, Senior analyst

UK shoe retailer Office hit by data breach

Data breach at UK shoe retailer Office prompts calls for online firms to beef up security around customer details Continue Reading

Android Outlook app has privacy issues, warn researchers

Microsoft’s Outlook.com app for Android is exposing users' data, warn security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

eBay under fire over handling of data breach

eBay is coming under increasing criticism over its handling of the data breach that exposed millions of user records Continue Reading

By

• Warwick Ashford, Senior analyst

eBay reveals major security breach and urges users to change passwords

eBay has revealed it was hit by a major cyber attack earlier this year, and is urging users to change their site passwords. Continue Reading

US cyber criminal jailed for 20 years

US authorities have jailed a cyber criminal for 20 years, for trading in stolen credit cards and identities Continue Reading

By

• Warwick Ashford, Senior analyst

Internet of things security is relevant to business, says researcher

Internet of things is relevant to enterprise information security professionals, says researcher Continue Reading

By

• Warwick Ashford, Senior analyst

Minnesota passes mobile kill switch law to stop theft

Minnesota has become the first US state to introduce legislation aimed at reducing the theft of smartphones Continue Reading

By

• Warwick Ashford, Senior analyst

Orange data breach underlines need for encryption, say experts

The theft of 1.3 million customer records from Orange, France underlines the need for encryption, say experts Continue Reading

By

• Warwick Ashford, Senior analyst

Internet privacy could thwart data security, warns expert

Steps to improve online privacy could thwart data security, warns security expert Hugh Thompson Continue Reading

By

• Warwick Ashford, Senior analyst

Infosec 2014: Threat knowledge is key to cyber security, say experts

Business should improve awareness of cyber risks to stay ahead of criminals, say experts Continue Reading

By

• Warwick Ashford, Senior analyst

UK and Ireland cyber attacks up 300% in 2013, says FireEye

UK and Ireland enterprises were hit by an average of more than 70 new infections a day in 2013, a report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber threat detection paramount, says SANS fellow

Cyber threat prevention is ideal, but detection is a must, says Eric Cole, SANS Institute fellow Continue Reading

By

• Warwick Ashford, Senior analyst

Heartbleed prompts tech firms to pledge open-source support

Top tech firms have joined forces to support open-source software to help prevent future bugs like Heartbleed Continue Reading

By

• Warwick Ashford, Senior analyst

Adapting to life after Heartbleed

In this week’s Computer Weekly, we investigate the most significant flaw in recent history to impact the internet. The Heartbleed bug in OpenSSL leaves millions of internet servers vulnerable to attack. Hackers have already exploited Heartbleed to steal passwords from the Mumsnet parenting site. What can websites do to foil future attacks? Continue Reading

Datacentre lessons learnt from Heartbleed bug

The Heartbleed bug, an OpenSSL flaw affecting millions of websites, has some lessons for datacentre providers and operators Continue Reading

By

• Archana Venkatraman, Datacentre Editor

Microsoft halts Windows 8.1 update for businesses due to bug

Microsoft has suspended the Windows 8.1 update for business users because of a bug. Continue Reading

By

• Warwick Ashford, Senior analyst

TCG releases TPM 2 specification for improved security

The Trusted Computing Group has published an updated specification for the Trusted Platform Module Continue Reading

By

• Warwick Ashford, Senior analyst

Government signs £5.5m Microsoft deal to extend Windows XP support

The government has signed a deal with Microsoft to support Windows XP across the UK public sector for 12 months after 8 April deadline Continue Reading

By

• Bryan Glick, Editor in chief

Security an unnecessary expense, say one in six techies

One in six IT professionals see security as an unnecessary expense, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Target data breach: Why UK business needs to pay attention

Late last year, US retailer Target was hit by one of the biggest data breaches in the industry's history. So what happened and why is it relevant to UK businesses? Continue Reading

By

• Lee Munson

Pirated software malware to cost business $491bn in 2014, study shows

Malware deliberately loaded into pirated or counterfeit software is expected cost enterprises $491bn in 2014 Continue Reading

By

• Warwick Ashford, Senior analyst

Firms urged to take tough action on Unix-based cyber attack

Security researchers have urged businesses to take action on a cyber criminal campaign that has seized control of 25,000+ Unix servers worldwide Continue Reading

By

• Warwick Ashford, Senior analyst

The Cyber Security Challenge UK 2014

The Cyber Security Challenge UK is a series of events designed to test the ability of thousands of amateur applicants who have skills in the cyber security space. Continue Reading

By

• Clare McDonald, Business Editor

SMEs believes they are immune to cyber attack

Most SMEs believe they are not at real risk of cyber attack, a survey has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Hacktivism: good or evil?

IT lawyer Dai Davis looks at the rise of hacktivism and its impact on business and international politics Continue Reading

By

• Dai Davis, Percy Crow Davis & Co

More than 162,000 WordPress sites used in DDoS attack

Security researchers have uncovered a DDoS attack that used more than 162,000 legitimate and unwitting WordPress websites Continue Reading

By

• Warwick Ashford, Senior analyst

Making data flow freely

In this week’s Computer Weekly, our latest buyer’s guide looks at open data and how it can improve public services – and even help prevent a repeat of the recent floods. We report from Cloud Expo on the reasons why public cloud is yet to be embraced by enterprise IT. And we look at the key issues for buying HR software in 2014. Read the issue now. Continue Reading

Dark web key enabler for cyber criminals, say McAfee researchers

The dark web is a key conduit for the malware industry to refine and distribute its products and services, say security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Legal briefing: The Draft EU General Data Protection Regulation

This report from law firm Morrison & Foerster, sets out some of the most important changes for private sector organisations in the draft EU Data Protection Regulation. Continue Reading

Microsoft takes aim at passwords

Microsoft says it is determined to solve the problem of ineffective authentication that relies on usernames and passwords Continue Reading

By

• Warwick Ashford, Senior analyst

Employee mobiles expose firms to attack, says Webroot

Employees mobile devices expose companies to malicious applications and attacks, according to the latest mobile threat report from Webroot Continue Reading

By

• Warwick Ashford, Senior analyst

UK firms see 1,000+ internal data breaches a day, study finds

Internal threats are not a high priority for UK firms despite more than 1,000 internal data breaches a day Continue Reading

By

• Warwick Ashford, Senior analyst

NHS England puts patient database on hold

NHS England is to delay by six months the roll-out of its controversial Care.data scheme for sharing patient records through a central database Continue Reading

By

• Warwick Ashford, Senior analyst

Cut Microsoft admin rights to mitigate 92% of threats, study shows

Removing Microsoft admin rights from employees mitigates 92% of critical vulnerabilities reported in 2013 Continue Reading

By

• Warwick Ashford, Senior analyst

UK among targets of 'Mask' advanced cyber espionage campaign

The UK has been hit more than 100 times in an advanced global cyber espionage campaign that has gone undetected for more than five years Continue Reading

By

• Warwick Ashford, Senior analyst

UK critical infrastructure at risk of cyber attack, says IET report

UK critical national infrastructure is at risk of cyber attack, says a report by consultancy Atkins for the Institution of Engineering and Technology (IET) Continue Reading

Bank of England publishes Waking Shark II cyber security exercise results

Bank of England publishes the results of its Waking Shark II security exercise, which tested financial institutions' contingency plans for cyber attack Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

NHS site malicious redirects are a warning to developers

A coding error that redirected NHS website visitors to malicious content should be a warning to developers, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

Hackers access Yahoo Mail with stolen passwords

Yahoo has revealed that hackers have tried to access some Yahoo Mail accounts with stolen passwords Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security quest strong in UK, says Isaca

There is a strong interest in cyber security in the UK, says Rob Stroud, international president-elect for Isaca Continue Reading

By

• Warwick Ashford, Senior analyst

New Snapchat security measure easily by-passed, says researcher

A new Snapchat security measure to verify users are human is easily by-passed, says researcher Continue Reading

By

• Warwick Ashford, Senior analyst

US startup aims to turn tables on hackers

US startup Shape Security is turning the tables against hackers by using one of their own techniques against them Continue Reading

By

• Warwick Ashford, Senior analyst

CERT-UK to drive international cyber security collaboration

The UK’s new national computer emergency response team (CERT-UK) is set to drive international cyber security collaboration once it becomes operational Continue Reading

By

• Warwick Ashford, Senior analyst

Internet at risk of 'cybergeddon' says WEF

Internet is at risk of fragmenting amid concerns over spying and cyber crime, says World Economic Forum Continue Reading

By

• Bill Goodwin, Computer Weekly

NSA uses secret radio tech to spy on offline computers

The US National Security Agency (NSA) has the capacity to monitor, enter and alter data on computers even if the machines are not connected to the internet, it has emerged Continue Reading

By

• Warwick Ashford, Senior analyst

Top European IT initiative to support business in 2014?

Expanding IT to support business growth is one of the biggest areas of focus for IT departments in 2014, so what does this mean? Continue Reading

By

• Warwick Ashford, Senior analyst

Security considerations for UK enterprises

This Research Snapshot from Vanson Bourne looks at IT security spending trends, awareness of cyber-threats, and the factors perceived as the biggest security risks for organisations. Continue Reading

Security Think Tank: Information security strategy should support the business

How should Edward Snowden's revelations about the NSA and GCHQ influence future information security strategies in the UK? Continue Reading

By

• Adrian Davis, (ISC)²

Infosec Skills, BCS announce winners of Cyber Security Challenge

Stuart Pringle, Simon Robinson and Robert Wyllie have won over £2,000 of training and a place in the semi-final of the current UK Cyber Security Challenge Continue Reading

By

• Warwick Ashford, Senior analyst

Yahoo claims malicious ads under control

Yahoo says the situation is under control after its advertising network served up malware to thousands of visitors last week Continue Reading

By

• Warwick Ashford, Senior analyst

FireEye acquires Mandiant in $1bn deal

Security firm FireEye has bought Mandiant in a deal worth just over $1bn Continue Reading

By

• Warwick Ashford, Senior analyst

Research reveals widespread mobile app hacking

The top 100 paid Android apps and 56% of the top 100 paid Apple iOS apps have been hacked, research has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Thirteen plead guilty to Anonymous DDoS attack on Paypal

Thirteen people have pleaded guilty to taking part in DDoS attacks on eBay’s Paypal, organised by the Anonymous hacker group in 2010 Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware looks set to increase, warns Sophos

Cyber criminals are planning to produce new forms of ransomware on an unprecedented scale, according to IT security firm Sophos Continue Reading

By

• Warwick Ashford, Senior analyst

Automation key to balancing agility and security, says AlgoSec

Automated critical business application management enables a more agile business and enhances security, says security policy management firm AlgoSec Continue Reading

By

• Warwick Ashford, Senior analyst

Cybercrime and warfare: All that matters

Peter Warren and Michael Streeter assess the history, scale and importance of cyber crime in this chapter from their book, Cybercrime and warfare: All That Matters. Continue Reading

Proof-of-concept malware jumps air gap with sound card

Researchers demonstrate proof-of-concept malware exfiltrating data using high-frequency transmissions inaudible to humans Continue Reading

By

• Warwick Ashford, Senior analyst

UK proposes formal talks on cyber security with China

Prime minister David Cameron has called on China to be more open about cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

EU calls on US to rebuild trust in post-Snowden era

The EC has called on the US to provide guarantees to restore trust in the wake of spying revelations Continue Reading

By

• Warwick Ashford, Senior analyst

European Parliament closes Wi-Fi after man-in-the-middle attack

A number of mailboxes have been compromised and users’ smartphones could be at risk following a man-in-the-middle attack on the European Parliament’s public Wi-Fi Continue Reading

By

• Jennifer Scott, TechTarget

NCA changed UK cyber crime fighting, says NCCU head

The NCA has changed the UK law enforcement landscape, says Andy Archibald, head of the NCA’s National Cyber Crime Unit Continue Reading

By

• Warwick Ashford, Senior analyst

Government lays out 2014 cyber security agenda

The UK government has reiterated its commitment to addressing cyber security and laid out some plans for 2014 at the Cyber Security Summit 2013 Continue Reading

By

• Warwick Ashford, Senior analyst

FTSE 350 firms complete cyber risk assessment

Most FTSE 350 companies put cyber risk on the board agenda, but many need to improve how they manage that risk Continue Reading

By

• Warwick Ashford, Senior analyst

CSA appoints Microsoft’s Adrienne Hall to board

The CSA has appointed Adrienne Hall, from Trustworthy Computing at Microsoft, to its board of directors Continue Reading

By

• Warwick Ashford, Senior analyst

Report highlights poor UK attitudes to mobile security

Businesses should note that many UK mobile users do not take security precautions and do not know how to guard against data theft Continue Reading

By

• Warwick Ashford, Senior analyst

Google and Microsoft to block searches for child porn

Google and Microsoft have announced measures to make it more difficult to find child abuse images online Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber collateral damage a concern for all, says Lancope

All organisations could be affected by cyber attack collateral damage, says network security firm Lancope Continue Reading

By

• Warwick Ashford, Senior analyst

Mass surveillance a bad idea, says Information Commissioner Christopher Graham

Information Commissioner Christopher Graham says issues of national security must not overshadow concerns of legitimate public interest Continue Reading

By

• Warwick Ashford, Senior analyst

Global profiles of the fraudster

Computers, rather than conmen, are set to be the future face of fraud, as criminals turn to robotics in an effort to avoid detection, this report from KPMG reveals. Continue Reading

UK intelligence heads defend mass surveillance operations

Heads of the UK’s intelligence services insist all they do in term of mass surveillance is strictly within the confines of UK law Continue Reading

By

• Warwick Ashford, Senior analyst

Intellect relaunches as TechUK and targets 500,000 new UK IT jobs

The UK’s technology trade association, formerly known as Intellect, has relaunched as TechUK, unveiling plans to create over 500,000 jobs by 2020 Continue Reading

By

• Bryan Glick, Editor in chief

Analysis: RSA says security needs to change, but what does that mean?

RSA executive chairman Art Coviello has issued a call to action to the security industry to improve technology and collaboration Continue Reading

Most businesses need to transform IT security, says RSA

No modern network or IT system can withstand the onslaught of a skilled adversary, given focus and time, says Amit Yoran, general manager of RSA Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attack shuts down Israeli toll road tunnel

A cyber attack has shut down a major link in Israel's national road network, experts claim Continue Reading

By

• Warwick Ashford, Senior analyst

Thales launches critical infrastructure cyber security lab

Thales has set up a cyber security lab dedicated to help improve the security of critical national infrastructure, government and business Continue Reading

By

• Warwick Ashford, Senior analyst

US publishes draft cyber security framework

The US has published a draft framework of voluntary cyber security standards aimed at reducing risks to critical national infrastructure Continue Reading

By

• Warwick Ashford, Senior analyst

Dexter payment card malware variant hits South Africa

The Dexter payment card skimming malware discovered last year has resurfaced in South Africa, resulting in millions of pounds lost to fraud Continue Reading

By

• Warwick Ashford, Senior analyst

Neustar to host first DDoS awareness day

Communications firm Neustar is to host the first international awareness day on distributed denial of service (DDoS) attacks Continue Reading

By

• Warwick Ashford, Senior analyst