IT for financial services

Security Think Tank: Supply chain security demands systematic approach

Supply chain security measures need to be systematic and assessed so as to minimise the complexity and cost to the business Continue Reading

By

• Paddy Francis

NatWest files under whistleblower’s bed contain live customer data

Former Royal Bank of Scotland worker wants bank to take back customer files and provide an ‘adequate receipt’ Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CIO interview: Simon Liste, chief information technology officer, Pension Protection Fund

While aspects of the PPF’s three-year digital transformation plan were delayed by the pandemic, the organisation is now pressing ahead with widespread improvements to IT Continue Reading

By

• Mark Samuels

Security Think Tank: Balanced approach can detangle supply chain complexity

Achieving an appropriate balance between people, processes and technology can help to detangle the complexities of the supply chain and create better security practices Continue Reading

By

• Francesca Williamson, Information Security Forum

Government won’t regulate on professional cyber standards

The government has elected not to proceed with regulatory intervention to embed standards and pathways across the cyber profession Continue Reading

By

• Alex Scroxton, Security Editor

CNI leaders’ attitude to ransomware lackadaisical at best

A survey of security decision-makers in sectors regarded as critical national infrastructure reveals a disappointing attitude to ransomware threats Continue Reading

By

• Alex Scroxton, Security Editor

New coalition lifts Finland’s 6G status

Finland is laying the foundations for future European leadership in 6G research and development Continue Reading

By

• Gerard O'Dwyer

Supply chain security goes deep – forget this at your peril

It may have hit the headlines as an IT issue, but supply chain security goes far deeper into an organisation than just technology Continue Reading

By

• Mike Gillespie

British businesses to recognise Google skills certificates

Google training programmes are being made available to more people in the UK as part of an initiative from the supplier and major UK businesses Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Fintech firm chooses Salesforce software to support growth

Revolut is to use Saleasforce software to support sales and marketing as part of its expansion plans Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government responds to Data Reform Bill consultation

Westminster claims its new data laws will boost British benefits, protect consumers, and seize the ‘benefits’ of Brexit Continue Reading

By

• Alex Scroxton, Security Editor

Consider governance, coordination and risk to secure supply chain

A recent ISACA study found myriad factors that give good reason to be concerned about supply chain security. Cyber adviser Brian Fletcher recommends three areas to zero in on Continue Reading

By

• Brian Fletcher

Office 365 loophole may give ransomware an easy shot at your files

Researchers at Proofpoint have discovered potentially dangerous Microsoft Office 365 functionality that they believe may give ransomware a clear shot at files stored on SharePoint and OneDrive Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Best practices for boosting supply chain security

In a highly connected world, managing the supply chain landscape requires an adaptation of the ‘traditional’ approach to managing cyber risk Continue Reading

By

• Carl Nightingale

Interpol arrests thousands in global cyber fraud crackdown

A two-month operation saw law enforcement agencies in 76 countries crack down on organised cyber fraud Continue Reading

By

• Alex Scroxton, Security Editor

Patch Tuesday dogged by concerns over Microsoft vulnerability response

The last Patch Tuesday in its current form is overshadowed by persistent concerns about how Microsoft deals with vulnerability disclosure Continue Reading

By

• Alex Scroxton, Security Editor

Virgin Money slashes loan application time through fintech

Business loan application process at Virgin Money cut from days to minutes through fintech platform Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Basic steps to secure your supply chain

When it comes to supply chain security, there are some core things you should be doing – but remember, the devil is in the detail Continue Reading

By

• Petra Wenham

MS Azure Synapse vulnerability fixed after six-month slog

Microsoft patched a critical Azure Synapse vulnerability twice, but each time the researcher who discovered it was able to bypass it with ease, leading to a lengthy saga Continue Reading

By

• Alex Scroxton, Security Editor

Spanish bank and Microsoft create innovation lab

CaixaBank and Microsoft partner in artificial intelligence and metaverse innovation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Deutsche Bank relocates Russia-based tech staff to Berlin

German bank offers employees in Russian technology centres the opportunity to move to the German capital Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

HSBC to give thousands of staff fintech training

Thousands of HSBC staff will receive training in fintech technologies through a course developed with Saïd Business School Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK, US prepare to launch PET project

A transatlantic prize challenge to accelerate development of privacy-enhancing technologies is set to begin Continue Reading

By

• Alex Scroxton, Security Editor

Tech startups raise more than £12bn in 2022 to date

The £12.4bn in venture capital raised is more than was raised in the whole of 2020, putting the UK ahead of every country other than the US Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Don’t trust the weakest link? Don’t trust any link

Your security model shouldn’t fall apart just because a part of your business, or a partner, has weak security. This is why information-centric security is a must Continue Reading

By

• Tim Holman, 2-sec

Snake Keylogger climbing malware charts, says Check Point

Cyber criminals behind Snake Keylogger campaigns have been switching up their tactics in the past few weeks, say researchers Continue Reading

By

• Alex Scroxton, Security Editor

ProxyLogon, ProxyShell may have driven increase in dwell times

The median network intruder dwell time was up 36% to 15 days last year, thanks to massive exploitation of the ProxyLogon and ProxyShell vulnerabilities by IABs, according to new Sophos data Continue Reading

By

• Alex Scroxton, Security Editor

P27 advance could replace multiple national clearing systems in Nordics

Nordic payments project promises to make payments to other countries as easy as sending a text message Continue Reading

By

• Gerard O'Dwyer

UAE residents think 3D printing will have the most positive impact on society

People in the UAE believe next-generation technologies such as 3D printing and artificial intelligence will become widespread in the country Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Strong internal foundations are key to withstanding external threats

The modern-day abundance of platforms, apps and IT tools presents malicious actors with a web of interconnection that is easily exploited to move rapidly through the network to compromise critical assets. Security teams need to understand these attack pathways better in order to fight back Continue Reading

By

• Steve Forbes

NatWest replacing multiple customer service systems

NatWest Bank puts customer service tools on a single platform using Microsoft Dynamics 365 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Executive interview: Miles Hillier, NatWest

Retail bank’s digital channel development head talks about building a multi-channel customer experience Continue Reading

By

• Cliff Saran, Managing Editor

Global business insurer saves 50,000 hours through RPA

QBE started its robotic process automation journey in 2017 and has already saved 50,000 hours, enabling staff to focus on customer care Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Two-thirds of UK organisations defrauded since start of pandemic

Nearly two out of three UK companies say they have experienced some form of fraud or economic crime in the past two years, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Dutch companies struggle to fill tech jobs

There are plenty of IT job vacancies in the Netherlands, but a shortage of IT professionals Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Ransomware volumes grew faster than ever in 2021

Verizon’s annual DBIR assessment of the security landscape highlights an unprecedented boom in ransomware volumes, to the surprise of nobody Continue Reading

By

• Alex Scroxton, Security Editor

JPMorgan’s UK digital retail bank reaches half-million customer mark

Chase Bank in the UK has already reached the half-million customer mark, but expects a profit to be some years away Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Fintech unicorn Klarna to cut 10% of staff amid global shocks

Fintech unicorn to slash jobs in reaction to global economic shocks signalling challenges in the financial technology sector Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Applying international law to cyber will be a tall order

Many in the security community have voiced their support for the UK government’s ambitions to work towards agreement with other countries on the application of international law to cyber space, but not without some reservations Continue Reading

By

• Alex Scroxton, Security Editor

Government will legislate to protect access to cash amid digital revolution

The government is giving the Financial Conduct Authority more powers to force banks to ensure cash withdrawal and deposit services are within easy reach of customers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Relentless branch closures at Lloyds Bank continue as digital banking takes hold

UK bank branches are being shuttered in large numbers as consumers choose online banking, with Lloyds Banking Group announcing more closures Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: To follow a path, you need a good map

The modern-day abundance of platforms, apps and IT tools presents malicious actors with a web of interconnection that is easily exploited to move rapidly through the network to compromise critical assets. Security teams need to understand these attack pathways better in order to fight back Continue Reading

By

• Petra Wenham

Mastercard biometric programme will allow payment authentication by smile

Mastercard is inviting banks and merchants to join a programme to set standards for biometric payments technology Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

(ISC)² to train 100,000 cyber pros in UK

Security association (ISC)² unveils ambitious UK training programme Continue Reading

By

• Alex Scroxton, Security Editor

SWIFT FIN message

SWIFT FIN is a message type (MT) that transmits financial information from one financial institution to another. Continue Reading

By

• Robert Sheldon

Santander has so far moved 80% of IT infrastructure to cloud

Spanish banking giant Santander continues its journey into the cloud as it strives to be cloud native Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

App-based Starling Bank doubles its Cardiff workforce

Digital bank is recruiting nearly 500 people, including data scientists and engineers, to its Cardiff operation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CyberUK 22: Five Eyes focuses on MSP security

The western intelligence community has set out practical steps IT service providers and their customers can take to protect themselves Continue Reading

By

• Alex Scroxton, Security Editor

Cyber accreditation body Crest forges new training partnerships

Crest says partnerships with Hack The Box and Immersive Labs will enhance its members’ defensive and offensive security skills Continue Reading

By

• Alex Scroxton, Security Editor

Nationwide stops thousands more attempted frauds with Strong Customer Authentication

Nationwide Building Society is blocking an additional 2000 attempted online shopping frauds a month through extra checks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Microsoft fixes three zero-days on May Patch Tuesday

It’s the second-to-last Patch Tuesday as we know it, and Microsoft has fixed a total of 75 bugs, including three zero-days Continue Reading

By

• Alex Scroxton, Security Editor

CyberUK 22: Cyber leaders affirm UK’s whole-of-society strategy

On the opening day of CyberUK 2022, GCHQ director Jeremy Fleming and NCSC CEO Lindy Cameron have spoken of their commitment to the government’s ambition for a whole-of-society cyber strategy Continue Reading

By

• Alex Scroxton, Security Editor

CyberUK 22: NCSC refreshes cloud security guidance

The National Cyber Security Centre is revising its cloud guidance as increasing uptake of potentially vulnerable cloud services puts more organisations at risk of compromise Continue Reading

By

• Alex Scroxton, Security Editor

European retailers see embedded finance as a revenue builder

Retailers and e-commerce businesses are working with tech suppliers to embed financial products and services in their customer offerings Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ransomware recovery costs dwarf actual ransoms

The cost of recovering from a ransomware attack far outweighs the ransoms now being demanded by cyber criminals, according to recent data Continue Reading

By

• Alex Scroxton, Security Editor

Manufacturer sues JPMorgan after cyber criminals stole $272m

Manufacturer files lawsuit alleging that US bank failed to inform it of suspicious transaction activity Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Log4Shell, ProxyLogon, ProxyShell among most exploited bugs of 2021

These 15 CVEs were the most commonly exploited last year, and if you haven’t mitigated against them, now is the time Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware victims paying out when they don’t need to

Sophos’s annual State of Ransomware report shows dramatic increases in the impact of ransomware attacks, but also finds many organisations are paying ransoms when they don’t need to Continue Reading

By

• Alex Scroxton, Security Editor

Government digital ignorance puts Dutch economy at risk

In this interview, Michiel Steltman, managing director of Digital Infrastructure Netherlands, tells Computer Weekly why the Dutch digital economy is at risk due to a lack of knowledge and understanding at government level Continue Reading

By

• Kim Loohuis

BCS passes defiant Ukrainian tech industry message to its members

BCS, the Chartered Institute for IT, has passed on a message from Ukrainian IT suppliers that the country is open for, and in need of, business Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Emotet tests new tricks to thwart enhanced security

The operators of the Emotet botnet seem to be trying to find a way to get around recent changes made by Microsoft to better protect its users Continue Reading

By

• Alex Scroxton, Security Editor

Danish researcher explains zero-knowledge proofs and post-quantum encryption

A graduate from the University of Aarhus, a Danish researcher is now a leading player in some of the most important issues in cyber security Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Global digital wallet transactions set to soar

Payments using mobile phones are set to soar globally as suppliers expand the services available, according to research Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Finance regulator identifies challenger bank financial crime weaknesses

Financial Conduct Authority review finds challenger banks need to do more to prevent their platforms being used to commit financial crime, such as money laundering Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Tech to account for over half of regulatory compliance spending

By 2026, regtech will account for more than half of the money that businesses spend on compliance with regulations Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

One-third of scams that hit TSB are impersonation fraud

TSB reports an increase in fraudsters impersonating trusted organisations to trick consumers into making payments to them Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Nationwide Building Society streamlines payment dispute process through software

Building society has speeded up the resolution of customer disputes over Visa payments by using Pegasystems software Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Financial Ombudsman Service chooses TCS as digital transformation partner

Tata Consultancy Services will build and implement key systems as part the Financial Ombudsman Service’s digital transformation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

WatchGuard firewall users urged to patch Cyclops Blink vulnerability

The US authorities have seen fit to add the WatchGuard vulnerability used by Sandworm to build the Cyclops Blink botnet to its list of must-patch vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft patches two zero-days, 10 critical bugs

Patch Tuesday is here once again. This month, security teams must fix two privilege escalation zero-days in the Windows Common Log File System Driver and the Windows User Profile Service Continue Reading

By

• Alex Scroxton, Security Editor

Mastercard opens European tech hub in Dublin

Mastercard is doubling its technology workforce in Dublin through a new European tech hub in the Irish capital Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Banks should be able to integrate e-krona into existing systems, says Swedish regulator

Swedish financial services regulator says banks and service providers should be able to integrate a potential digital currency into existing systems Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

European IT and BPO outsourcing off to strong start

European IT and business process outsourcing services continue to increase rapidly, with cloud-based services now more than half of the total Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Triple-threat Borat malware no joke for victims

Unlike its namesake, the newly discovered Borat malware won’t raise a smile for IT security pros Continue Reading

By

• Alex Scroxton, Security Editor

Zopa bank profitable after just 21 months

The bank that emerged from peer-to-peer lending pioneer has hit its first profit after 21 months of operation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Saudi Arabian ICT sector hits $32.1bn after strong pandemic response

The Saudi Arabian IT and communications sector is recovering strongly from the Covid-19 pandemic Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Environmental campaigners halt Meta datacentre construction in the Netherlands

Datacentre being built to serve ‘metaverse’ worlds would consume nearly half as much energy as all other datacentres in the country Continue Reading

By

• Mark Ballard

Four moves to ‘checkmate’ critical assets thanks to lax cloud security

Malicious actors can compromise 94% of critical assets within four steps of the initial breach point, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Bank fraud prevention scheme blocked £60m in fraud last year

Scheme to catch fraudsters, including online scammers, before they commit their crimes has reported a significant increase in crimes prevented Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Why diversity in AI remains a challenge and how to fix it

With artificial intelligence set for a global economic explosion, its development must put diversity at its core to avoid discriminating systems Continue Reading

By

• Shawn Tan

Acquisition of UK fintech Azimo will address home-working challenges for enterprises

UK fintech acquired by Papaya Global is looking to improve cross-border employee payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Lax money laundering controls lands N26 with ban from Italian central bank

German digital bank N26 has had problems with anti-money laundering regulations in the past, and is now banned in Italy Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

One-third of UK firms suffer a cyber attack every week

New statistics from the annual DCMS Cyber security breaches survey reveal the extent and frequency with which UK organisations are being attacked by malicious actors Continue Reading

By

• Alex Scroxton, Security Editor

Recruitment risks: Avoiding the dangers of fraudulent candidates

Tech companies are seeing an increase in fraudulent job applications, with associated impacts on risk and cyber security. So how can organisations protect themselves from fraudulent applicants while ensuring they recruit the best talent? Continue Reading

By

• Peter Ray Allison

NCSC: Not necessarily wise to ditch Kaspersky

UK’s National Cyber Security Centre issues refreshed guidance on organisations’ usage of technology and services of Russian origin, but stops short of advising users to expunge all Russian products from their IT estates Continue Reading

By

• Alex Scroxton, Security Editor

Wave of Log4j-linked attacks targeting VMware Horizon

Sophos issues a new warning to organisations that have so far failed to patch their VMware Horizon servers against Log4Shell Continue Reading

By

• Alex Scroxton, Security Editor

FCA reports 52% jump in security incidents

The Financial Conduct Authority received 116 cyber incident reports in 2021, a fifth of them involving ransomware Continue Reading

By

• Alex Scroxton, Security Editor

IT professionals wary of government campaign to limit end-to-end encryption

Members of the Chartered Institute of IT, the professional body for technology professionals in the UK, warn against limiting end-to-end encryption Continue Reading

By

• Bill Goodwin, Computer Weekly

Most big businesses are taking up banking as a service

API-based banking services allow corporate customers to offer financial services without the need for heavy tech development or regulatory approval Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

GAAP (generally accepted accounting principles)

GAAP (generally accepted accounting principles) is a collection of commonly followed accounting rules and standards for financial reporting. Continue Reading

By

• Stephen J. Bigelow, Senior Technology Editor

CW Innovation Awards: How WLTH is disrupting traditional banking

The fintech company built its own technology stack that delivers data analytics and other capabilities as it seeks to win market share from traditional banks Continue Reading

By

• Edwin Yapp

Digital continues to deplete bank branch networks as Lloyds cuts 60 more

Lloyds Banking Group has stripped UK high streets of a further 60 branches as the take-up of digital banking continues Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Japan’s Mizuho partners Google to accelerate tech transformation after a year to forget

Following a year when it hit the tech headlines for the wrong reasons, Mizuho is on a mission to modernise IT in collaboration with Google Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Details of Conti ransomware affiliate released

Information about a new Conti affiliate has been released by eSentire and BreakPoint Lab after a joint investigation into the group’s indicators of compromise Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Competition watchdog contacts Barclays and Lloyds banks over API failures

Barclays and Lloyds banks have failed to meet some of the open banking rules, says competition watchdog Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Revised scope of UK security strategy reflects digitised society

The omission of the word ‘security’ from the title of the UK government’s new National Cyber Strategy is a telling one, reflecting our increasingly digitised society, say Maximillian Brook and Arunoshi Singh of the ISF Continue Reading

By

• Maximillian Brook & Arunoshi Singh

One year on from IR35 reforms – why IT skills are harder to find

In this week’s Computer Weekly, a year after IR35 tax reforms were introduced, we assess the impact on the UK’s IT talent pool – and it’s not looking good. We examine the rise of industry clouds, and how they are changing the market. And we find out how London councils plan to work together on data and innovation. Read the issue now. Continue Reading

UK Cyber Strategy a welcome injection of progress

The National Cyber Strategy should be seen as a welcome injection of both focus and investment in bettering cyber defence for everyone, says Turnkey Consulting senior consultant Louise Barber Continue Reading

By

• Louise Barber, Turnkey Consulting

Ukrainian cyber defences prove resilient

Thanks to a combination of prior experience and global support, Ukraine’s defences against cyber incidents are holding strong in the face of Russian attacks Continue Reading

By

• Alex Scroxton, Security Editor

National Cyber Strategy will enhance UK’s cyber power status

The UK punches above its weight when it comes to wielding cyber power around the world, but challenges to this status are clear. The National Cyber Strategy has a clear role to play in maintaining and enhancing this status, writes Paddy Francis of Airbus Cybersecurity Continue Reading

By

• Paddy Francis