IT for financial services

The Security Interviews: Why you need to protect abandoned digital assets

The war in Ukraine and subsequent boycott of Russia resulted in a swathe of digital infrastructure being abandoned, becoming a potential vulnerability for many organisations, says Cyberpion’s Ran Nahmias Continue Reading

By

• Peter Ray Allison

Russia could become the world’s largest market for illegal IT

Russia could become the biggest market for illegal IT equipment as companies try to get round sanctions imposed on the country Continue Reading

By

• Computer Weekly correspondent

Buy ‘plug-n-play’ malware for the price of a pint of beer

Three-quarters of malwares and almost 90% of exploits retail on the dark web for about £8.40 or less, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

(ISC)² expands entry-level cyber programme after UK success

Flush with success from a UK certification programme, reaching 100k in the UK, (ISC)² now wants to provide free security certification to a million people worldwide Continue Reading

By

• Alex Scroxton, Security Editor

Transatlantic PET contest open for entries

A joint UK-US innovation prize challenge for developers of privacy-enhancing technologies has opened for entries Continue Reading

By

• Alex Scroxton, Security Editor

Cato aims to bust cyber myths as it extends network protections

Cato Networks is beefing up its platform’s security features with ransomware and data loss protections, and the firm’s security strategy lead Etay Maor is using the occasion – and his unique access to billions of data points from the firm’s network – to explode some cyber myths Continue Reading

By

• Alex Scroxton, Security Editor

Starling Bank withdraws application for licence in Ireland

App-based bank decides against completing its application for a banking licence in Ireland after concluding it did not offer enough value Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

European IT services see bumper quarter, but signs of slowing emerge

Spending on IT and BPO services in Europe saw significant growth in the past quarter, but there are signs of a slowdown Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK fintech outperforms global sector

Investment in UK fintech continues to increase, outpacing a flat global sector, according to Innovate Finance Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Tracking the rise of homeworking across the UK

In this week’s Computer Weekly, new figures show that homeworking has more than doubled in the UK due to the pandemic – we look at the regional differences. The pressure is growing on cyber security teams – we analyse the expert advice on how to avoid staff burnout and lost talent. And we examine the important role that tech startups play in the rapid growth of Amazon Web Services. Read the issue now. Continue Reading

US cyber agency CISA to open London office

The US Cybersecurity and Infrastructure Security Agency has chosen London to host its first office outside America Continue Reading

By

• Alex Scroxton, Security Editor

Data and tech platforms helping finance regulator spot problems earlier

The UK financial services regulator is increasingly using data platforms to proactively regulate the finance sector Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Is time running out for legacy payments technology used by banks?

 Continue Reading

Log4Shell on its way to becoming ‘endemic’

US government report concludes that, like Covid, Log4Shell will be with us for a long time to come Continue Reading

By

• Alex Scroxton, Security Editor

Global IT services market shows signs of slowing

Spending on IT and business process services could be set to reduce over the coming months as the latest ISG figures show early signs of decline Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

ICO wants to ‘empower people through information’

Information Commissioner’s Office sets out commitment to safeguard the information rights of the most vulnerable people in UK society Continue Reading

By

• Alex Scroxton, Security Editor

ING pilot project tests payments from phone to phone

Dutch bank is testing an app that enables users to make peer-to-peer payments directly from smartphone to smartphone when they are close together Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Slippery phish wriggles around MFA protections, says Microsoft

Microsoft’s threat researchers share details of a phishing campaign that hit 10,000 organisations, against which standard multifactor authentication provides little defence Continue Reading

By

• Alex Scroxton, Security Editor

July Patch Tuesday brings more than 80 fixes, one zero-day

While some admins can put their feet up and let Windows Autopatch do the hard work of updating their Microsoft estates, for the rest of us, the Patch Tuesday bandwagon keeps on keeping on Continue Reading

By

• Alex Scroxton, Security Editor

Goldman Sachs hires Google incubator founder

Bank recruits co-founder of Google’s incubator as it continues to transform its business through digital technology Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

MaliBot Android malware spreading fast, says Check Point

The MaliBot malware is becoming a persistent and widespread problem, and Android users should be on their guard, says Check Point Continue Reading

By

• Alex Scroxton, Security Editor

Is time running out for legacy payments technology used by banks?

The company bringing Google-like processing to core banking for banks has added the same proposition in payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Microsoft Windows Autopatch now generally available

Microsoft customers with Windows Enterprise E3 and E5 licences can now take full advantage of its new automated patching service Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft VBA macro block will return

Microsoft provides more details about its sudden decision to rollback a landmark security policy, and reassures users it is a temporary measure Continue Reading

By

• Alex Scroxton, Security Editor

Cyber insurance: An effective use of your scant security budget?

The ISF’s Paul Watts asks if cyber insurance is a must-have item, an expensive luxury, or the emperor’s new clothes Continue Reading

By

• Paul Watts, Information Security Forum

Stop telling clients to pay ransomware gangs, solicitors told

The NCSC and the ICO are calling on solicitors to help tackle the rising number of ransomware payments being made, and to stop giving erroneous advice to victims Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft appears to reverse VBA macro-blocking

Microsoft quietly reverses VBA macro-blocking across its Office portfolio in a move that has left security experts puzzled Continue Reading

By

• Alex Scroxton, Security Editor

Lots to consider when buying cyber insurance, so do your homework

When considering implementing a cyber insurance policy, due diligence should be your watchword, says Paddy Francis of Airbus CyberSecurity Continue Reading

By

• Paddy Francis

MI5, FBI chiefs warn of Chinese cyber espionage threat

In a joint appearance in London, MI5 director general Ken McCallum and FBI director Chris Wray warn of the growing threat posed by the Chinese government to UK and US interests Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Cyber insurance – A nice safety blanket, but don’t count on it

In the second instalment of this month’s Security Think Tank, Mike Gillespie argues that cyber insurance should be thought of like car insurance – you don’t start driving recklessly because you’re covered Continue Reading

By

• Mike Gillespie

Prepare for long-term cyber threat from Ukraine war, says NCSC

The NCSC has published refreshed guidance on cyber preparedness as the war on Ukraine continues, urging organisations to pay attention to the state of their security teams Continue Reading

By

• Alex Scroxton, Security Editor

NCSC CEO: Why we should run towards crises to elevate cyber security

National Cyber Security Centre CEO Lindy Cameron, the 2022 Computer Weekly UKtech50 Most Influential Person in UK IT, reflects on a career immersed in crisis management, and how she is using this to elevate cyber security standards across the country Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Now is the time to think about cyber insurance

Many IT leaders shy away from cyber insurance, but new, innovative developments in the market can help organisations take an approach that suits their needs Continue Reading

By

• Carl Nightingale

New cyber extortion op appears to have hit AMD

Semiconductor specialist AMD has confirmed it is investigating reports that a ‘bad actor’ has stolen hundreds of gigabytes of its data Continue Reading

By

• Alex Scroxton, Security Editor

Executive interview: Chris Conradi, chief digital officer, FSN Capital

Chris Conradi is taking his learnings at Google into the private equity industry at Norway’s FSN Capital Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Brexit a net negative for UK cyber, say CISOs

Six years on from the UK’s Brexit vote, the majority of security professionals say leaving the EU has raised concerns over their ability to keep their organisations safe Continue Reading

By

• Alex Scroxton, Security Editor

LockBit ransomware gang launches bug bounty programme

A bug bounty programme is among a number of features LockBit’s developers have added to ‘version 3.0’ of the ransomware Continue Reading

By

• Alex Scroxton, Security Editor

Black Basta ransomware crew aiming for ‘big leagues’

Emergent Black Basta ransomware gang has hit more than 50 countries since bursting onto the scene earlier this year, says Cybereason Continue Reading

By

• Alex Scroxton, Security Editor

US cyber agency in fresh warning over Log4Shell risk to VMware

Many VMware Horizon and UAG servers remain defenceless against Log4Shell, and organisations continue to fall victim to the vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

Assessment and knowledge: Your key tools to secure suppliers

There is no silver bullet that will resolve all the issues arising from today’s interconnected businesses and complex supply chains, but there are some key tools at your disposal Continue Reading

By

• Andrew Morris, Turnkey Consulting

What will the Data Reform Bill mean for UK businesses operating in the EU?

Following the government’s response to the Data Reform Bill consultation, Peter Galdies of DQM GRC looks at what might lie ahead for UK organisations working in the European Union Continue Reading

By

• Peter Galdies

FCA seeks more tech expertise in fight against fraud

UK financial services regulator wants technology professionals to join its team fighting online fraud Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Supply chain security demands systematic approach

Supply chain security measures need to be systematic and assessed so as to minimise the complexity and cost to the business Continue Reading

By

• Paddy Francis

NatWest files under whistleblower’s bed contain live customer data

Former Royal Bank of Scotland worker wants bank to take back customer files and provide an ‘adequate receipt’ Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CIO interview: Simon Liste, chief information technology officer, Pension Protection Fund

While aspects of the PPF’s three-year digital transformation plan were delayed by the pandemic, the organisation is now pressing ahead with widespread improvements to IT Continue Reading

By

• Mark Samuels

Security Think Tank: Balanced approach can detangle supply chain complexity

Achieving an appropriate balance between people, processes and technology can help to detangle the complexities of the supply chain and create better security practices Continue Reading

By

• Francesca Williamson, Information Security Forum

Government won’t regulate on professional cyber standards

The government has elected not to proceed with regulatory intervention to embed standards and pathways across the cyber profession Continue Reading

By

• Alex Scroxton, Security Editor

CNI leaders’ attitude to ransomware lackadaisical at best

A survey of security decision-makers in sectors regarded as critical national infrastructure reveals a disappointing attitude to ransomware threats Continue Reading

By

• Alex Scroxton, Security Editor

New coalition lifts Finland’s 6G status

Finland is laying the foundations for future European leadership in 6G research and development Continue Reading

By

• Gerard O'Dwyer

Supply chain security goes deep – forget this at your peril

It may have hit the headlines as an IT issue, but supply chain security goes far deeper into an organisation than just technology Continue Reading

By

• Mike Gillespie

British businesses to recognise Google skills certificates

Google training programmes are being made available to more people in the UK as part of an initiative from the supplier and major UK businesses Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Fintech firm chooses Salesforce software to support growth

Revolut is to use Saleasforce software to support sales and marketing as part of its expansion plans Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government responds to Data Reform Bill consultation

Westminster claims its new data laws will boost British benefits, protect consumers, and seize the ‘benefits’ of Brexit Continue Reading

By

• Alex Scroxton, Security Editor

Consider governance, coordination and risk to secure supply chain

A recent ISACA study found myriad factors that give good reason to be concerned about supply chain security. Cyber adviser Brian Fletcher recommends three areas to zero in on Continue Reading

By

• Brian Fletcher

Office 365 loophole may give ransomware an easy shot at your files

Researchers at Proofpoint have discovered potentially dangerous Microsoft Office 365 functionality that they believe may give ransomware a clear shot at files stored on SharePoint and OneDrive Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Best practices for boosting supply chain security

In a highly connected world, managing the supply chain landscape requires an adaptation of the ‘traditional’ approach to managing cyber risk Continue Reading

By

• Carl Nightingale

Interpol arrests thousands in global cyber fraud crackdown

A two-month operation saw law enforcement agencies in 76 countries crack down on organised cyber fraud Continue Reading

By

• Alex Scroxton, Security Editor

Patch Tuesday dogged by concerns over Microsoft vulnerability response

The last Patch Tuesday in its current form is overshadowed by persistent concerns about how Microsoft deals with vulnerability disclosure Continue Reading

By

• Alex Scroxton, Security Editor

Virgin Money slashes loan application time through fintech

Business loan application process at Virgin Money cut from days to minutes through fintech platform Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Basic steps to secure your supply chain

When it comes to supply chain security, there are some core things you should be doing – but remember, the devil is in the detail Continue Reading

By

• Petra Wenham

MS Azure Synapse vulnerability fixed after six-month slog

Microsoft patched a critical Azure Synapse vulnerability twice, but each time the researcher who discovered it was able to bypass it with ease, leading to a lengthy saga Continue Reading

By

• Alex Scroxton, Security Editor

Spanish bank and Microsoft create innovation lab

CaixaBank and Microsoft partner in artificial intelligence and metaverse innovation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Deutsche Bank relocates Russia-based tech staff to Berlin

German bank offers employees in Russian technology centres the opportunity to move to the German capital Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

HSBC to give thousands of staff fintech training

Thousands of HSBC staff will receive training in fintech technologies through a course developed with Saïd Business School Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK, US prepare to launch PET project

A transatlantic prize challenge to accelerate development of privacy-enhancing technologies is set to begin Continue Reading

By

• Alex Scroxton, Security Editor

Tech startups raise more than £12bn in 2022 to date

The £12.4bn in venture capital raised is more than was raised in the whole of 2020, putting the UK ahead of every country other than the US Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Don’t trust the weakest link? Don’t trust any link

Your security model shouldn’t fall apart just because a part of your business, or a partner, has weak security. This is why information-centric security is a must Continue Reading

By

• Tim Holman, 2-sec

Snake Keylogger climbing malware charts, says Check Point

Cyber criminals behind Snake Keylogger campaigns have been switching up their tactics in the past few weeks, say researchers Continue Reading

By

• Alex Scroxton, Security Editor

ProxyLogon, ProxyShell may have driven increase in dwell times

The median network intruder dwell time was up 36% to 15 days last year, thanks to massive exploitation of the ProxyLogon and ProxyShell vulnerabilities by IABs, according to new Sophos data Continue Reading

By

• Alex Scroxton, Security Editor

P27 advance could replace multiple national clearing systems in Nordics

Nordic payments project promises to make payments to other countries as easy as sending a text message Continue Reading

By

• Gerard O'Dwyer

UAE residents think 3D printing will have the most positive impact on society

People in the UAE believe next-generation technologies such as 3D printing and artificial intelligence will become widespread in the country Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Strong internal foundations are key to withstanding external threats

The modern-day abundance of platforms, apps and IT tools presents malicious actors with a web of interconnection that is easily exploited to move rapidly through the network to compromise critical assets. Security teams need to understand these attack pathways better in order to fight back Continue Reading

By

• Steve Forbes

NatWest replacing multiple customer service systems

NatWest Bank puts customer service tools on a single platform using Microsoft Dynamics 365 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Executive interview: Miles Hillier, NatWest

Retail bank’s digital channel development head talks about building a multi-channel customer experience Continue Reading

By

• Cliff Saran, Managing Editor

Global business insurer saves 50,000 hours through RPA

QBE started its robotic process automation journey in 2017 and has already saved 50,000 hours, enabling staff to focus on customer care Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Two-thirds of UK organisations defrauded since start of pandemic

Nearly two out of three UK companies say they have experienced some form of fraud or economic crime in the past two years, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Dutch companies struggle to fill tech jobs

There are plenty of IT job vacancies in the Netherlands, but a shortage of IT professionals Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Ransomware volumes grew faster than ever in 2021

Verizon’s annual DBIR assessment of the security landscape highlights an unprecedented boom in ransomware volumes, to the surprise of nobody Continue Reading

By

• Alex Scroxton, Security Editor

JPMorgan’s UK digital retail bank reaches half-million customer mark

Chase Bank in the UK has already reached the half-million customer mark, but expects a profit to be some years away Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Fintech unicorn Klarna to cut 10% of staff amid global shocks

Fintech unicorn to slash jobs in reaction to global economic shocks signalling challenges in the financial technology sector Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Applying international law to cyber will be a tall order

Many in the security community have voiced their support for the UK government’s ambitions to work towards agreement with other countries on the application of international law to cyber space, but not without some reservations Continue Reading

By

• Alex Scroxton, Security Editor

Government will legislate to protect access to cash amid digital revolution

The government is giving the Financial Conduct Authority more powers to force banks to ensure cash withdrawal and deposit services are within easy reach of customers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Relentless branch closures at Lloyds Bank continue as digital banking takes hold

UK bank branches are being shuttered in large numbers as consumers choose online banking, with Lloyds Banking Group announcing more closures Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: To follow a path, you need a good map

The modern-day abundance of platforms, apps and IT tools presents malicious actors with a web of interconnection that is easily exploited to move rapidly through the network to compromise critical assets. Security teams need to understand these attack pathways better in order to fight back Continue Reading

By

• Petra Wenham

Mastercard biometric programme will allow payment authentication by smile

Mastercard is inviting banks and merchants to join a programme to set standards for biometric payments technology Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

(ISC)² to train 100,000 cyber pros in UK

Security association (ISC)² unveils ambitious UK training programme Continue Reading

By

• Alex Scroxton, Security Editor

SWIFT FIN message

SWIFT FIN is a message type (MT) that transmits financial information from one financial institution to another. Continue Reading

By

• Robert Sheldon

Santander has so far moved 80% of IT infrastructure to cloud

Spanish banking giant Santander continues its journey into the cloud as it strives to be cloud native Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

App-based Starling Bank doubles its Cardiff workforce

Digital bank is recruiting nearly 500 people, including data scientists and engineers, to its Cardiff operation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CyberUK 22: Five Eyes focuses on MSP security

The western intelligence community has set out practical steps IT service providers and their customers can take to protect themselves Continue Reading

By

• Alex Scroxton, Security Editor

Cyber accreditation body Crest forges new training partnerships

Crest says partnerships with Hack The Box and Immersive Labs will enhance its members’ defensive and offensive security skills Continue Reading

By

• Alex Scroxton, Security Editor

Nationwide stops thousands more attempted frauds with Strong Customer Authentication

Nationwide Building Society is blocking an additional 2000 attempted online shopping frauds a month through extra checks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Microsoft fixes three zero-days on May Patch Tuesday

It’s the second-to-last Patch Tuesday as we know it, and Microsoft has fixed a total of 75 bugs, including three zero-days Continue Reading

By

• Alex Scroxton, Security Editor

CyberUK 22: Cyber leaders affirm UK’s whole-of-society strategy

On the opening day of CyberUK 2022, GCHQ director Jeremy Fleming and NCSC CEO Lindy Cameron have spoken of their commitment to the government’s ambition for a whole-of-society cyber strategy Continue Reading

By

• Alex Scroxton, Security Editor

CyberUK 22: NCSC refreshes cloud security guidance

The National Cyber Security Centre is revising its cloud guidance as increasing uptake of potentially vulnerable cloud services puts more organisations at risk of compromise Continue Reading

By

• Alex Scroxton, Security Editor

European retailers see embedded finance as a revenue builder

Retailers and e-commerce businesses are working with tech suppliers to embed financial products and services in their customer offerings Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ransomware recovery costs dwarf actual ransoms

The cost of recovering from a ransomware attack far outweighs the ransoms now being demanded by cyber criminals, according to recent data Continue Reading

By

• Alex Scroxton, Security Editor

Manufacturer sues JPMorgan after cyber criminals stole $272m

Manufacturer files lawsuit alleging that US bank failed to inform it of suspicious transaction activity Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Log4Shell, ProxyLogon, ProxyShell among most exploited bugs of 2021

These 15 CVEs were the most commonly exploited last year, and if you haven’t mitigated against them, now is the time Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware victims paying out when they don’t need to

Sophos’s annual State of Ransomware report shows dramatic increases in the impact of ransomware attacks, but also finds many organisations are paying ransoms when they don’t need to Continue Reading

By

• Alex Scroxton, Security Editor