IT for financial services

Iranian APT caught acting as access broker for ransomware crews

Members of Iran-backed Pioneer Kitten APT appear to be trying to supplement their pay packets by helping Russian-speaking ransomware gangs to access their victims in exchange for a cut of the profits Continue Reading

By

• Alex Scroxton, Security Editor

Cyber law reform should be top of Labour's policy list

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Craig Watt

A coherent Labour cyber strategy depends on consistency

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Aled Lloyd Owen

Global cyber spend to rise 15% in 2025, pushed along by AI

Security spending will increase at pace in 2025, with artificial intelligence, cloud and consultancy services all pushing outlay to new highs, according to Gartner Continue Reading

By

• Alex Scroxton, Security Editor

Updating taxation: Can AI and data analysis help with HMRC’s human resources problem?

HMRC resources are currently thinly spread in the aftermath of Covid and Brexit. Could automating systems using generative AI help HMRC’s digital transformation? Continue Reading

By

• Peter Ray Allison

Extending zero-trust principles to endpoints

By combining zero-trust principles with other security strategies and continuously monitoring and improving their security posture, organisations can effectively mitigate risks and protect their resources, says Gartner's Nikul Patel Continue Reading

By

• Nikul Patel

The US courts may have thrown a wrench into cyber regulation

A recent decision by the US Supreme Court to overrule the longstanding Chevron Deference has serious implications for global cyber security regulation Continue Reading

By

• Brian Arnold

Public education on security must be a top priority for Labour

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Petra Wenham

New Qilin tactics a ‘bonus multiplier’ for ransomware chaos

Sophos X-Ops caught the Qilin ransomware gang stealing credentials stored by victims' employees in Google Chrome, heralding further cyber attacks and breaches down the line. Continue Reading

By

• Alex Scroxton, Security Editor

Women in data: Claire Thompson, chief data officer, L&G

The insurer’s data chief discusses using data for better insights, building data capabilities through apprenticeships, and the value of diversity in data leadership Continue Reading

By

• Mark Samuels

Wells Fargo bank turns to AI to help families settle estates after a death

Wells Fargo bank is winning customers after using business automation software and artificial intelligence to help people manage the estates of relatives following a bereavement Continue Reading

By

• Bill Goodwin, Computer Weekly

ICO launches privacy notice tool for SMEs

ICO tool designed to make it easier for small businesses and sole traders operating online to create bespoke data privacy notices for compliance purposes Continue Reading

By

• Alex Scroxton, Security Editor

Phishing links becoming bigger threat than email attachments

Phishing techniques are evolving away from malicious email attachments, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

How might the UK's cyber landscape change under Labour?

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Dhairya Mehta and Cate Pye

Google's cookie conundrum: What comes next?

Google's revised approach to third-party cookies shouldn't come as a surprise, and may also be welcome Continue Reading

By

• Christian Ward

With the right tools and strategy, public cloud should be safe to use

Despite the complexity and evolving nature of threats, with the right strategy, tools, and constant vigilance, businesses can safely and securely leverage public cloud services Continue Reading

By

• Jason Lau

August Patch Tuesday proves busy with six zero-days to fix

Microsoft patches six actively exploited zero-days among over 100 issues during its regular monthly update Continue Reading

By

• Alex Scroxton, Security Editor

NIST debuts three quantum-safe encryption algorithms

NIST has launched the first three quantum-resistant encryption algorithms, and as the threat of quantum-enabled cyber attacks grows greater, organisations are encouraged to adopt them as soon as they can Continue Reading

By

• Alex Scroxton, Security Editor

Deep dive into quantum-resistant cryptography for email security

Quantum computers have the potential to crack many of the encryption methods we currently rely on to keep our digital communications safe. Quantum-resistant cryptography may be the answer Continue Reading

By

• Isla Sibanda

How UK firms can get ready for the implementation of NIS2

Many British companies will need to adhere to NIS2’s cyber security risk management and reporting requirements if they want to continue operating in the EU market and avoid huge fines Continue Reading

By

• Nicholas Fearn

Royal ransomware crew puts on a BlackSuit in rebrand

The Royal ransomware gang is back, with a new name and refreshed capabilities, including an apparently unique ‘partial encryption’ gambit, according to CISA Continue Reading

By

• Alex Scroxton, Security Editor

5 ESG benefits for businesses

ESG programs help businesses attract investors, build customer loyalty, improve financial performance, make operations sustainable and gain a competitive edge. Continue Reading

By

• Kinza Yasar, Technical Writer

2024 seeing more CVEs than ever before, but few are weaponised

The number of disclosed CVEs soared by 30% in the first seven-and-a-half months of the year, but a tiny fraction of these have been exploited by threat actors, a reminder of the importance of focused security strategies Continue Reading

By

• Alex Scroxton, Security Editor

Chinese cyber attack sparks alert over six-year-old MS vuln

After a proof-of-concept for a six-year-old Microsoft vulnerability emerged in a Chinese APT attack chain, defenders should be on the look-out for exploitation of CVE-2018-0824 Continue Reading

By

• Alex Scroxton, Security Editor

World’s largest companies at near-universal risk of supply chain breach

Data from SecurityScorecard once again focuses on the interconnected nature of business supply chains and the risk posed to operational resilience by unexpected IT problems and cyber threats Continue Reading

By

• Alex Scroxton, Security Editor

Cyber lessons, and priorities for the UK's new government

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Ameet Jugnauth and Mark Pearce

CrowdStrike shareholders sue, alleging false security claims

A US pension fund is lining up a lawsuit against CrowdStrike, claiming the cyber company lied about the integrity of its systems, leading to failings that caused a worldwide IT outage Continue Reading

By

• Alex Scroxton, Security Editor

Is it time to refresh the UK's cyber strategy?

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Jon Carpenter

Banks, telcos call for more data sharing to fight fraud

A Which?-led coalition of banks and telecoms operators is calling on the UK's new government to take the lead on enabling data sharing to help fight digital fraud Continue Reading

By

• Alex Scroxton, Security Editor

When critical cyber response becomes second nature

When alerts and headlines blare out warnings of critical vulnerabilities in widely-used software, the cyber security community needs to adopt a more decisive and clear-cut approach, says Huntress' Chris Henderson Continue Reading

By

• Chris Henderson, Huntress

CISO mentoring – who to turn to when the worst happens

Those who get the role of a CISO may have overcome some professional hurdles, but are they ready to face what comes as part of the job? And who do they ask for advice? We look at the mentoring dilemma Continue Reading

By

• Dan Raywood

CrowdStrike update chaos explained: What you need to know

A botched software update at cyber security firm CrowdStrike has caused IT chaos around the world. Learn more about the global CrowdStrike update outage as it develops Continue Reading

By

• Alex Scroxton, Security Editor

Scam CrowdStrike domains growing in volume

Hundreds of malicious domains exploiting CrowdStrike’s branding are appearing all over the web in the wake of the 19 July outage. Experts from Akamai share some noteworthy examples, along with guidance on how to avoid getting caught out Continue Reading

By

• Alex Scroxton, Security Editor

CrowdStrike says most Falcon sensors now up and running

The vast majority of CrowdStrike Falcon sensors affected by a coding error have now been recovered, with a final resolution expected this week Continue Reading

By

• Alex Scroxton, Security Editor

WTO digital trade agreement aims to modernise global commerce

A digital trade deal negotiated over five years at the World Trade Organization has been signed by 91 countries, laying the groundwork for a new global digital trade regime Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Mastering data privacy in the age of AI

AI continues to revolutionise how organisations operate, using vast amounts of personal data to make smart, informed decisions. However, this incredible potential comes with concerns about data privacy. DQM GRC's Mark James explores the issues. Continue Reading

By

• Mark James

Cyber crisis? How good PR can save your brand

Cyber attacks and data breaches can happen to anybody and often bring reputational damage and a loss of customer trust. How organisations publicly respond to such incidents can make or break them, and the importance of a good PR strategy cannot be underestimated Continue Reading

By

• Ed Coram-James

Cloud security challenges not just technological

The Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading

By

• Temi Akinlade

Fortune 500 stands to lose $5bn plus from CrowdStrike incident

The largest global organisations hit by the CrowdStrike-Microsoft incident on 19 July will likely be out of pocket to the tune of billions of dollars Continue Reading

By

• Alex Scroxton, Security Editor

CrowdStrike blames outage on content configuration update

CrowdStrike publishes the preliminary findings of what will be a lengthy investigation into the root causes of the failed 19 July update that caused Windows computers to crash all over the world Continue Reading

By

• Alex Scroxton, Security Editor

Mimecast to buy insider threat specialist Code42

Mimecast is to buy fellow human-centred risk experts Code42 for an undisclosed sum to take advantage of its insider threat and data loss protection specialisms Continue Reading

By

• Alex Scroxton, Security Editor

Chrome cookies reprieved amid Google Privacy Sandbox changes

Google abruptly changes tack on third-party cookies in its Chrome web browser, cancelling plans to deprecate them in favour of an unspecified ‘new experience’ for users Continue Reading

By

• Alex Scroxton, Security Editor

NCSC: Beware of criminal CrowdStrike opportunists

Financially motivated cyber criminals are already conducting opportunistic attacks on organisations that leverage the CrowdStrike incident, and more targeted attacks are sure to follow Continue Reading

By

• Alex Scroxton, Security Editor

CrowdStrike chaos shows risks of concentrated ‘big IT’

The concentration of so much mission-critical technology in the hands of a few large suppliers makes incidents like the Microsoft-CrowdStrike outage all the more dangerous Continue Reading

By

• Alex Scroxton, Security Editor

DBS rolls out GenAI assistant for customer service teams

The CSO Assistant was built entirely in-house and uses a large language model tailored to local languages Continue Reading

By

• Aaron Tan, TechTarget

UK Cyber Bill teases mandatory ransomware reporting

In the Cyber Security and Resilience Bill introduced in the King's Speech, the UK's new government pledges to give regulators more teeth to ensure compliance with security best practice and to mandate incident reporting Continue Reading

By

• Alex Scroxton, Security Editor

Public awareness of ID security grows, but big obstacles remain

Consumers are improving their awareness of the issues around digital identity security, but there are still some big issues preventing many from doing better, according to an Okta report Continue Reading

By

• Alex Scroxton, Security Editor

Dutch research firm TNO pictures the SOC of the future

In only a few years, security operations centres will have a different design and layout, and far fewer will remain Continue Reading

By

• Kim Loohius

Week one of a new government and it’s time to talk tech

The new UK government is already making changes around technology delivery and its legislative agenda needs to focus on some important digital priorities, says Lord Chris Holmes Continue Reading

By

• Lord Chris Holmes, House of Lords

Setting the high bar in digital transformation

Roel Louwhoff, Standard Chartered’s chief transformation, technology and operations officer, outlines what it takes for the company to become a client-focused, data-driven bank Continue Reading

By

• Aaron Tan, TechTarget

Hyper-V zero-day stands out on a busy Patch Tuesday

Microsoft has fixed almost 140 vulnerabilities in its latest monthly update, with a Hyper-V zero-day singled out for urgent attention Continue Reading

By

• Alex Scroxton, Security Editor

Chinese spies target vulnerable home office kit to run cyber attacks

China’s APT40 is ramping up targeting of victims using vulnerable small and home office networking kit as command and control infrastructure, according to an international alert Continue Reading

By

• Alex Scroxton, Security Editor

Room to grow in UK for Tata Consultancy Services after half a century

Indian-headquartered IT giant has built a large UK footprint as part of its global network, a commitment which is helping it increase its business in the UK’s public sector Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NCA’s Operation Morpheus targets illicit Cobalt Strike use

International law enforcement operation targets cyber criminals using the Cobalt Strike penetration testing framework for dodgy purposes Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Securing today's ubiquitous cloud environment

The Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage Continue Reading

By

• Kashil JagmohanSingh

Nordic banks pursue AI in battle with digital competitors

Traditional Nordic banks are raising their investments in artificial intelligence to help them retain market share in increasingly populated sector Continue Reading

By

• Gerard O'Dwyer

UKtech50 2024: The most influential people in UK technology

Computer Weekly has announced the 14th annual UKtech50 – our definitive list of the movers and shakers in the UK tech sector Continue Reading

By

• Lis Evenstad

AI and outsourcing: What’s the future for relationships and contracts? (Part two)

In the second part of this two-part series, two technology lawyers offer guidance on what the integration of artificial intelligence in IT outsourcing and business process outsourcing will mean for customers and providers in outsourcing relationships and contracts Continue Reading

By

• Marl Lewis and Simon Bollans

Cloud security: Finding the right provider to protect your data

This month, the Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading

By

• Stephen McDermid

Black Basta ransomware crew may be exploiting Microsoft zero-day

A Microsoft vulnerability that was addressed without fanfare in March may in fact have been exploited as a zero-day by the notorious Black Basta ransomware gang, threat hunters warn Continue Reading

By

• Alex Scroxton, Security Editor

Data leakage in the cloud – can data truly be safe in the cloud?

This month, the Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading

By

• Scott Swalling

Q&A: Adalbjorn Thorolfsson on IT project management in Iceland

With a small, but very sophisticated population, Iceland has unique ways of keeping up with the rest of the world in the IT sector. Adalbjorn Thorolfsson, president of the Icelandic Project Management Association, describes some lessons for the rest of the world Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Nordic innovators look to revive the zombie subscriber population

Zombie subscriptions where customers buy a service and forget about it are harming the subscription economy, but software is being developed to support the subscription economy Continue Reading

By

• Matthew Staff

How to ensure public cloud services are used safely and securely

This month, the Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading

By

• Beji Jacob

True cloud security requires in-depth understanding

This month, the Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading

By

• Elliott Wilkes

Pure Storage hit by Snowflake credential hackers

Pure Storage emerges as the latest victim of a fast-spreading breach of Snowflake customers targeting users with lax credential security measures in place Continue Reading

By

• Alex Scroxton, Security Editor

More than 160 Snowflake customers hit in targeted data theft spree

Mandiant reports that more than 160 Snowflake customers have been hit in a broad data theft and extortion campaign targeting organisations that have failed to pay proper attention to securing valuable credentials Continue Reading

By

• Alex Scroxton, Security Editor

Cobol knowledge crisis threatens Dutch financial systems

Expertise in complex Cobol systems, critical to major financial institutions, is dwindling in The Netherlands, resulting in retired professionals returning work Continue Reading

By

• Kim Loohuis

Rapid AI development poses supervisory challenges in the Netherlands

In the Netherlands, the financial regulator and the monetary authority are grappling with the pace of artificial intelligence development and its implications for the financial industry Continue Reading

By

• Kim Loohuis

Executive interview: Richard Wazacz, CEO, Travelex

The data-savvy chief executive is rebuilding Travelex as an omnichannel, digital business after the company foundered during the pandemic Continue Reading

By

• Mark Samuels

Security Think Tank: The cloud just got more complicated

This month, the Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading

By

• Rob Dartnall, SecAlliance

97 FTSE 100 firms exposed to supply chain breaches

Between March 2023 and March 2024, 97 out of 100 companies on the UK’s FTSE 100 list were put at risk of compromise following supply chain breaches at third-party suppliers Continue Reading

By

• Alex Scroxton, Security Editor

Major breaches allegedly caused by unsecured Snowflake accounts

Significant data breaches at Ticketmaster and Santander appear to have been orchestrated through careful targeting of the victims’ Snowflake cloud data management accounts Continue Reading

By

• Alex Scroxton, Security Editor

Uktech50 2024: The longlist of the UK’s influential tech leaders

UKtech50 received a record-breaking 434 nominations for the 2024 list. Unfortunately, there wasn’t space for everyone in the top 50, and as you can see for yourself in this year’s longlist, it was a difficult decision for the judges Continue Reading

By

• Lis Evenstad

FWD teams up with AWS on cloud

The pan-Asian insurer plans to host its core applications on AWS in a five-year agreement that comes on the heels of an earlier deal with Microsoft to tap Azure cloud and AI services Continue Reading

By

• Aaron Tan, TechTarget

Organisations value digital trust, but aren’t working at it

Three quarters of organisations believe digital trust is relevant to their businesses, yet clear gaps in strategies still seem to persist Continue Reading

By

• Alex Scroxton, Security Editor

Executive Interview: Why Dell wants to be your one-stop AI shop

At Dell Technologies World in Las Vegas, artificial intelligence was the talk of the town as Dell staked out an all-encompassing strategy ahead of an anticipated goldrush. Dell’s Nick Brackney explains why the tech giant believes it's onto a winner Continue Reading

By

• Alex Scroxton, Security Editor

UKtech50 2024: Vote for the most influential person in UK IT

Our judges have selected the top 50 leaders from a shortlist of more than 400 people – now it’s your chance to tell us who you think is the most influential person in UK technology Continue Reading

By

• Lis Evenstad

HMRC channel shift to digital ‘too aggressive’, says NAO

HMRC digital services have not had the anticipated effect on customer service it hoped for, NAO report reveals, as the auditor says the department needs to develop more realistic plans Continue Reading

By

• Lis Evenstad

Critical SharePoint, Qakbot-linked flaws focus of May Patch Tuesday

A critical SharePoint vulnerability warrants attention this month, but it is another flaw that seems to be linked to the infamous Qakbot malware that is drawing attention Continue Reading

By

• Alex Scroxton, Security Editor

CyberUK 24: UK insurance industry gets tough on ransomware

Three of the UK’s largest insurance associations have signed on to a new initiative spearheaded by the NCSC to try to bring down the number of ransomware payments being made Continue Reading

By

• Alex Scroxton, Security Editor

The UK may not have a choice on a ransomware payment ban

In the wake of renewed calls for lawmakers to consider enacting legal bans on ransomware payments, the Computer Weekly Security Think Tank weighs in to share their thoughts on how to tackle the scourge for good. Continue Reading

By

• Ian Thornton-Trump

Finland develops quantum algorithms for the future

Finnish researchers are focusing on a small set of quantum algorithms they believe will have a global impact Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Cyber attack victims need to speak up, says ICO

The Information Commissioner’s Office is urging organisations to be transparent and learn from each other’s mistakes as it reveals most of the cyber attacks it responds to stem from the same core errors Continue Reading

By

• Alex Scroxton, Security Editor

Enhance identity controls before banning ransomware payments

In the wake of renewed calls for lawmakers to consider enacting legal bans on ransomware payments, the Computer Weekly Security Think Tank weighs in to share their thoughts on how to tackle the scourge for good. Continue Reading

By

• Stephen McDermid

Government plans to scan bank accounts of disabled people will lead to another scandal

The government is sleepwalking into another scandal as it pushes plans for ‘bank scanning’ algorithms to monitor bank accounts of disabled people Continue Reading

By

• Mikey Erhardt, campaigner at Disability Rights UK

What does the Data Protection and Digital Information Bill mean for UK industry?

The Data Protection and Digital Information Bill is the first shift in the UK’s data protection regime since leaving the EU, but what could it mean for UK industry? Continue Reading

By

• Peter Ray Allison

What is PCI DSS (Payment Card Industry Data Security Standard)?

The Payment Card Industry Data Security Standard (PCI DSS) is a widely accepted set of policies and procedures intended to optimize the security of credit, debit and cash card transactions and protect cardholders against misuse of their personal information. Continue Reading

By

• Nick Barney, Technology Writer

EMEA CISOs must address human factors behind cyber incidents

The 17th annual Verizon report on data breaches makes for sobering reading for security pros, urging them to do more to address the human factors involved in cyber incidents, and highlighting ongoing issues with zero-day patching Continue Reading

By

• Alex Scroxton, Security Editor

Better hygiene may mitigate the need to ban ransomware payments

In the wake of renewed calls for lawmakers to consider enacting legal bans on ransomware payments, the Computer Weekly Security Think Tank weighs in to share their thoughts on how to tackle the scourge for good. Continue Reading

By

• Becky Gelder, Turnkey Consulting

Secure coding benchmark to increase standards among developers

Developer security advocate Secure Code Warrior has launched what it claims is the industry’s first benchmark designed to quantify the security competence of its customers’ software developer teams Continue Reading

By

• Alex Scroxton, Security Editor

DWP anti-fraud measures will allow monitoring of bank accounts of landlords, carers and parents

Parliamentarians raise concerns that a proposed law to require banks to monitor the accounts of millions of people receiving state benefits could lead to those on welfare being denied accommodation or bank accounts Continue Reading

By

• Bill Goodwin, Computer Weekly

Ransomware payment bans need universal buy-in

In the wake of renewed calls for lawmakers to consider enacting legal bans on ransomware payments, the Computer Weekly Security Think Tank weighs in to share their thoughts on how to tackle the scourge for good. Continue Reading

By

• Jack Chapman

Security Think Tank: Maybe let's negotiate with terrorists

In the wake of renewed calls for lawmakers to consider enacting legal bans on ransomware payments, the Computer Weekly Security Think Tank weighs in to share their thoughts on how to tackle the scourge for good. Continue Reading

By

• Mark Cunningham Dickie

Security Think Tank: Cyber sector, you have failed this community

In the wake of renewed calls for lawmakers to consider enacting legal bans on ransomware payments, the Computer Weekly Security Think Tank weighs in to share their thoughts on how to tackle the scourge for good. Continue Reading

By

• Allan Liska

Five reasons why – and when – cloud storage is the answer

We look at when cloud storage can be the best choice, with considerations that include performance, scalability and agility, cost, management simplicity, and security and resilience Continue Reading

By

• Stephen Pritchard

Securing the edge: A new battleground in mobile network security

Edge computing is transforming approaches to mobile network infrastructure, but failure to secure it can expose networks and data to cyber threats. Learn more about the dangers and potential solutions Continue Reading

By

• Isla Sibanda

Austrian AI: from academia to commercial success and beyond

Austria has established itself as a European frontrunner when it comes to artificial intelligence exploration and, importantly, deployment Continue Reading

By

• Matthew Staff

IT leaders hiring CISOs aplenty, but don’t fully understand the role

Most businesses now have a CISO, but perceptions of what CISOs are supposed to do, and confusion over the value they offer, may be holding back harmonious relations, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

International police operation infiltrates LabHost phishing website used by thousands of criminals

The Metropolitan Police working with international police forces have shut down LabHost, a phishing-as-a-service website that has claimed 70,000 victims in the UK Continue Reading

By

• Bill Goodwin, Computer Weekly