IT for government and public sector

Stop telling clients to pay ransomware gangs, solicitors told

The NCSC and the ICO are calling on solicitors to help tackle the rising number of ransomware payments being made, and to stop giving erroneous advice to victims Continue Reading

By

• Alex Scroxton, Security Editor

Accountability in algorithmic injustice

Computer Weekly looks at the growing number of injustices involving algorithms and automated decision-making, and what can be done to hold governments and companies accountable for the failures of computer systems they deploy Continue Reading

By

• Andrew Kersley

Microsoft appears to reverse VBA macro-blocking

Microsoft quietly reverses VBA macro-blocking across its Office portfolio in a move that has left security experts puzzled Continue Reading

By

• Alex Scroxton, Security Editor

Lots to consider when buying cyber insurance, so do your homework

When considering implementing a cyber insurance policy, due diligence should be your watchword, says Paddy Francis of Airbus CyberSecurity Continue Reading

By

• Paddy Francis

UK government does not yet understand threat of technology to foreign policy

Select committee chair warns government that the threat posed to global security by malign actors influencing tech standards is no ‘dystopian fantasy’ Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

MI5, FBI chiefs warn of Chinese cyber espionage threat

In a joint appearance in London, MI5 director general Ken McCallum and FBI director Chris Wray warn of the growing threat posed by the Chinese government to UK and US interests Continue Reading

By

• Alex Scroxton, Security Editor

UK signs ‘in principle’ data adequacy agreement with South Korea

Bilateral adequacy agreement will allow businesses to conduct cross-border data transfers with minimal restrictions Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Cyber insurance – A nice safety blanket, but don’t count on it

In the second instalment of this month’s Security Think Tank, Mike Gillespie argues that cyber insurance should be thought of like car insurance – you don’t start driving recklessly because you’re covered Continue Reading

By

• Mike Gillespie

Tech companies face pressure over end-to-end encryption in Online Safety Bill

An amendment to the Online Safety Bill, currently going through Parliament, will put pressure on tech companies over end-to-end encrypted messaging services Continue Reading

By

• Bill Goodwin, Computer Weekly

ESET: Lazarus APT hit aero, defence sector with fake job ads

ESET researchers present new findings into a series of cyber attacks on the aerospace and defence sectors by North Korea’s Lazarus crime syndicate Continue Reading

By

• Alex Scroxton, Security Editor

Legacy UK customs system stops accepting registration requests

HMRC closes new applications to legacy customs system as its shutdown nears Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Prepare for long-term cyber threat from Ukraine war, says NCSC

The NCSC has published refreshed guidance on cyber preparedness as the war on Ukraine continues, urging organisations to pay attention to the state of their security teams Continue Reading

By

• Alex Scroxton, Security Editor

NCSC CEO: Why we should run towards crises to elevate cyber security

National Cyber Security Centre CEO Lindy Cameron, the 2022 Computer Weekly UKtech50 Most Influential Person in UK IT, reflects on a career immersed in crisis management, and how she is using this to elevate cyber security standards across the country Continue Reading

By

• Alex Scroxton, Security Editor

How to get the right level of cyber insurance

In this week’s Computer Weekly, we look at how the market for cyber insurance is evolving and how to avoid buying the wrong level of cover. We find out what role hydrogen technologies could play in reducing datacentre carbon emissions. And we hear how a 125-year-old bicycle maker is embracing digital innovation. Read the issue now. Continue Reading

MPs call for ban on Chinese surveillance camera technology

Nearly 70 MPs have called on the government to ban Chinese camera technology that is widely used by UK government agencies despite links to human rights abuses in China Continue Reading

By

• Bill Goodwin, Computer Weekly

Government rejects Lords police tech inquiry recommendations

The government has largely rejected the findings and recommendations of a House of Lords inquiry into police tech, which called for an overhaul of how police deploy artificial intelligence and algorithmic technologies Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Assange appeals against Priti Patel’s extradition order

WikiLeaks founder is expected to raise concerns over the political nature of his prosecution, the likelihood of him receiving a fair trial, and the risk of a coercive plea bargain Continue Reading

By

• Bill Goodwin, Computer Weekly

Security Think Tank: Now is the time to think about cyber insurance

Many IT leaders shy away from cyber insurance, but new, innovative developments in the market can help organisations take an approach that suits their needs Continue Reading

By

• Carl Nightingale

ICO to cut back on fines for public sector data breaches

Information commissioner John Edwards sets out a revised approach to how the ICO handles data breaches in the public sector, saying fining victims risks punishing the public twice over Continue Reading

By

• Alex Scroxton, Security Editor

Subpostmaster campaigning forces government to set up compensation scheme and make interim payments

Subpostmaster campaign group is a step closer to achieving what it was originally set up to do as government launches compensation scheme for its members who did not receive fair payouts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Independent scrutiny brought into compensation negotiations for wrongly prosecuted subpostmasters

Former Supreme Court judge will offer his view on the valuation of compensation for wrongly convicted subpostmasters Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government sets NHS digital transformation plan

The government expects to save billions of pounds and improve patient outcomes through digital transformation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Urgent need for new laws to govern biometrics, legal review finds

Independent review says new framework is needed to clear up legal and ethical concerns over the use of biometric data and technologies, which can impact privacy, freedom of expression and other human rights Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

New cyber extortion op appears to have hit AMD

Semiconductor specialist AMD has confirmed it is investigating reports that a ‘bad actor’ has stolen hundreds of gigabytes of its data Continue Reading

By

• Alex Scroxton, Security Editor

CEA-Leti and the Silicon Valleys of Grenoble, France

At the intersection of three valleys in the French Alps lies the city of Grenoble, a hotbed of microelectronics, where much of the innovation is fuelled by CEA-Leti Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Digital Poverty Alliance unveils evidence review

Evidence review into the state of digital poverty in the UK sets out policy principles and recommendations, which will be used as the basis for a national action plan to eliminate the issue Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Russia-aligned hacktivists behind Lithuania DDoS attack

Killnet hacktivist collective targeted Lithuania with distributed denial of service attacks after its government angered the Kremlin Continue Reading

By

• Alex Scroxton, Security Editor

Brexit a net negative for UK cyber, say CISOs

Six years on from the UK’s Brexit vote, the majority of security professionals say leaving the EU has raised concerns over their ability to keep their organisations safe Continue Reading

By

• Alex Scroxton, Security Editor

LockBit ransomware gang launches bug bounty programme

A bug bounty programme is among a number of features LockBit’s developers have added to ‘version 3.0’ of the ransomware Continue Reading

By

• Alex Scroxton, Security Editor

The cyber security impact of Operation Russia by Anonymous

The campaign against the Russian government by Anonymous surprised many with the depth and scale of the cyber attacks. What can we learn from this online war? Continue Reading

By

• Peter Ray Allison

Black Basta ransomware crew aiming for ‘big leagues’

Emergent Black Basta ransomware gang has hit more than 50 countries since bursting onto the scene earlier this year, says Cybereason Continue Reading

By

• Alex Scroxton, Security Editor

US cyber agency in fresh warning over Log4Shell risk to VMware

Many VMware Horizon and UAG servers remain defenceless against Log4Shell, and organisations continue to fall victim to the vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

Assessment and knowledge: Your key tools to secure suppliers

There is no silver bullet that will resolve all the issues arising from today’s interconnected businesses and complex supply chains, but there are some key tools at your disposal Continue Reading

By

• Andrew Morris, Turnkey Consulting

Finding the balance between innovation and data security in healthcare

As the government launches its data strategy for health and social care, a fine line must be trodden between innovating through privacy-enhancing technologies, and retaining data security for patients Continue Reading

By

• Kevin Curran, IEEE

What will the Data Reform Bill mean for UK businesses operating in the EU?

Following the government’s response to the Data Reform Bill consultation, Peter Galdies of DQM GRC looks at what might lie ahead for UK organisations working in the European Union Continue Reading

By

• Peter Galdies

Ukraine cyber agency enlists Radware to protect government networks

Ukraine’s State Service of Special Communications and Information Protection is using Radware cloud DDoS protection and web application firewall services to protect the government from persistent Russian attacks Continue Reading

By

• Alex Scroxton, Security Editor

Non-European tech giants could be subject to EU-backed anti-greenwashing directive

EU-backed push to tighten up the sustainability reporting processes for companies that do business in Europe gathers pace Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Germany – let’s stop debating data retention and start finding solutions

Germany has the opportunity to set the democratic precedent for ending the collection and retention of everybody’s call details record and metadata in the EU. It is time find real and effective solutions to crime Continue Reading

By

• Patrick Breyer

Security Think Tank: Supply chain security demands systematic approach

Supply chain security measures need to be systematic and assessed so as to minimise the complexity and cost to the business Continue Reading

By

• Paddy Francis

Why the world needs tech standards for UN Sustainable Development Goals

Chaesub Lee from the ITU argues that the world needs technology standards to address the UN’s Sustainable Development Goals Continue Reading

By

• Chaesub Lee, ITU Telecommunication Standardisation Bureau

Security Think Tank: Balanced approach can detangle supply chain complexity

Achieving an appropriate balance between people, processes and technology can help to detangle the complexities of the supply chain and create better security practices Continue Reading

By

• Francesca Williamson, Information Security Forum

Government won’t regulate on professional cyber standards

The government has elected not to proceed with regulatory intervention to embed standards and pathways across the cyber profession Continue Reading

By

• Alex Scroxton, Security Editor

Post Office IT investigator to be released from confidentiality obligations for inquiry

Forensic accounting firm that ‘knows where the bodies are buried’ will be released from confidentiality obligations by the Post Office to give evidence to public inquiry Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CNI leaders’ attitude to ransomware lackadaisical at best

A survey of security decision-makers in sectors regarded as critical national infrastructure reveals a disappointing attitude to ransomware threats Continue Reading

By

• Alex Scroxton, Security Editor

CIO interview: Mark Bramwell, CIO, Saïd Business School

After seven years in the job, there are still fresh challenges for the IT leader, including a second digital strategy to deliver Continue Reading

By

• Mark Samuels

New coalition lifts Finland’s 6G status

Finland is laying the foundations for future European leadership in 6G research and development Continue Reading

By

• Gerard O'Dwyer

Supply chain security goes deep – forget this at your peril

It may have hit the headlines as an IT issue, but supply chain security goes far deeper into an organisation than just technology Continue Reading

By

• Mike Gillespie

Dreams come true – how data and communication saved a failing company

In this week’s Computer Weekly, the former CEO of bed retailer Dreams explains how digital, data and communication helped turn round a failing company. The UK government has a new digital strategy – but it all seems rather familiar. And we talk to the tech firms trialling a four-day working week. Read the issue now. Continue Reading

Minister says compensation offer to 555 subpostmasters close

Government minister says an announcement on subpostmaster compensation could be made within weeks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

British businesses to recognise Google skills certificates

Google training programmes are being made available to more people in the UK as part of an initiative from the supplier and major UK businesses Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government responds to Data Reform Bill consultation

Westminster claims its new data laws will boost British benefits, protect consumers, and seize the ‘benefits’ of Brexit Continue Reading

By

• Alex Scroxton, Security Editor

Consider governance, coordination and risk to secure supply chain

A recent ISACA study found myriad factors that give good reason to be concerned about supply chain security. Cyber adviser Brian Fletcher recommends three areas to zero in on Continue Reading

By

• Brian Fletcher

MoD sets out strategy to develop military AI with private sector

The UK Ministry of Defence has outlined its intention to work closely with the private sector to develop and deploy a range of artificial intelligence-powered technologies, committing to ‘lawful and ethical AI use’ Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Loan charge MPs want contractor adviser community to participate in latest call for evidence

Loan Charge and Taxpayer Fairness All-Party Parliamentary Group seeks input from accountants, lawyers and tax advisers who work with contractors in-scope of the loan charge policy Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Office 365 loophole may give ransomware an easy shot at your files

Researchers at Proofpoint have discovered potentially dangerous Microsoft Office 365 functionality that they believe may give ransomware a clear shot at files stored on SharePoint and OneDrive Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Best practices for boosting supply chain security

In a highly connected world, managing the supply chain landscape requires an adaptation of the ‘traditional’ approach to managing cyber risk Continue Reading

By

• Carl Nightingale

Is digital ID still the missing link for the UK’s digital economy?

While progress has been made, the government’s proposed digital ID trust framework needs more work – and the tech industry wants to have more input Continue Reading

By

• Julian David, TechUK

Patch Tuesday dogged by concerns over Microsoft vulnerability response

The last Patch Tuesday in its current form is overshadowed by persistent concerns about how Microsoft deals with vulnerability disclosure Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Basic steps to secure your supply chain

When it comes to supply chain security, there are some core things you should be doing – but remember, the devil is in the detail Continue Reading

By

• Petra Wenham

MS Azure Synapse vulnerability fixed after six-month slog

Microsoft patched a critical Azure Synapse vulnerability twice, but each time the researcher who discovered it was able to bypass it with ease, leading to a lengthy saga Continue Reading

By

• Alex Scroxton, Security Editor

Government data talk to the fore at London Tech Week

Data figured prominently in the unfolding of the government’s digital strategy at the start of London Tech Week, with privacy-enhancing technologies and anonymous health data sharing notable Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

A breathless week for digital government and government digital

If you have worked in the tech or digital world for less than five years, the past week must have been very exciting for you. First, you would have read about the new digital government strategy ... Continue Reading

By

• Bryan Glick, Editor in chief

Government recommits to UK’s cyber future in Digital Strategy

New strategy leans heavily on cyber security but stops short of announcing any initiatives that have not already been launched or heavily trailed Continue Reading

By

• Alex Scroxton, Security Editor

New UK digital strategy aims to secure future growth for £150bn digital economy

Government publishes plan that brings together existing and new initiatives intended to expand the digital sector and help to establish the UK as a ‘superpower’ in science and tech Continue Reading

By

• Bryan Glick, Editor in chief

New warning over tech suppliers in thrall to hostile governments

Ukraine war could lead to shakeup of dual-use tech exports, says former UK intelligence officer Continue Reading

By

• Joe Fay

Health data strategy to exorcise ghosts of GPDPR

Government publishes a revised data in health strategy, with an emphasis firmly on preserving the integrity and privacy of patients’ confidential information Continue Reading

By

• Alex Scroxton, Security Editor

London Mayor pledges £500,000 for city’s data economy

At the start of London Tech Week 2022, the Mayor of London is announcing £500,000 in funding for the city’s data economy, in the form of the Data for London platform Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

What’s new about the new digital government strategy?

There’s a new plan for improving the UK’s digital public services – and we’ve heard a lot of it before. But among all the hyperbole, there is a welcome realism in the latest approach to transforming government Continue Reading

By

• Bryan Glick, Editor in chief

ICO fails to disclose majority of reprimands issued under GDPR

London law firm Mishcon de Reya forces disclosure of reprimands issued to organisations by the Information Commissioner’s Office for contraventions of UK data protection law Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Don’t trust the weakest link? Don’t trust any link

Your security model shouldn’t fall apart just because a part of your business, or a partner, has weak security. This is why information-centric security is a must Continue Reading

By

• Tim Holman, 2-sec

Snake Keylogger climbing malware charts, says Check Point

Cyber criminals behind Snake Keylogger campaigns have been switching up their tactics in the past few weeks, say researchers Continue Reading

By

• Alex Scroxton, Security Editor

Researchers find eight CVEs in single building access system

A series of eight vulnerabilities in Carrier LenelS2 building access panels could enable malicious actors to obtain physical access to their targets Continue Reading

By

• Alex Scroxton, Security Editor

Government wrong to pass the buck on computer evidence reform

IT expert James Christie tells Computer Weekly why he is disappointed that the government has no plans to change the rules on the use of computer evidence in court Continue Reading

By

• James Christie

UK government promises £1bn savings from latest digital strategy

Three-year roadmap aims to transform online public services, targeting 50 top services for improvement – but contains much that has been previously promised in the past Continue Reading

By

• Bryan Glick, Editor in chief

More wrongful convictions quashed in Post Office IT scandal

Two more Post Office Horizon scandal victims have had their wrongful convictions overturned Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

SolarWinds CEO offers to commit staffers to government cyber agencies

A new proposal from SolarWinds’ outspoken CEO, Sudhakar Ramakrishna, could see software companies commit key staff to work with government cyber agencies to improve cooperation and incident response Continue Reading

By

• Alex Scroxton, Security Editor

Trade body calls for public-private sector collab on digital ID

TechUK has published a report outlining 10 key recommendations it believes are urgently needed to enable the rapid creation of an effectively regulated digital identity marketplace Continue Reading

By

• Alex Scroxton, Security Editor

Move with the times – in defence of WhatsApp in government

Former minister and current member of the House of Lords argues that the UK government needs to move with the times and embrace new communications tools such as WhatsApp Continue Reading

By

• James Bethell

Naivety of computer evidence leaves door ajar for more miscarriages of justice

Barrister Paul Marshall explains why the government’s lack of action on reforming the legal rules around computer evidence, which presume it is correct, mean the Post Office Horizon scandal could be the tip of a miscarriages of justice iceberg Continue Reading

By

• Paul Marshall

ProxyLogon, ProxyShell may have driven increase in dwell times

The median network intruder dwell time was up 36% to 15 days last year, thanks to massive exploitation of the ProxyLogon and ProxyShell vulnerabilities by IABs, according to new Sophos data Continue Reading

By

• Alex Scroxton, Security Editor

Prison and Probation Service’s tagging ambition ‘outstripped its ability to deliver’

HM Prison and Probation Service’s programme to transform the tagging of offenders has failed to deliver after software platform was scrapped Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Russia looks towards import substitution in its IT sector

The exodus of Western IT companies from Russia and sanctions imposed on the country amid its military invasion of Ukraine are leading to shortages of IT and professionals in the sector Continue Reading

By

• Computer Weekly correspondent

CIO interview: Emma Frost, director of innovation, London Legacy Development Corporation

The former Olympic Park in London has become a hotbed – and a testbed – for data and technology innovation that could have a wider benefit for the urban environments in which we live Continue Reading

By

• Mark Samuels

How Police Scotland deployed mobile comms for integrated services

Technology is core to Police Scotland’s 10-year plan to transform policing, and since 2019 it has worked with Motorola to roll out mobile comms Continue Reading

By

• Cliff Saran, Managing Editor

How cryptocurrency is bringing humanitarian value to Ukraine

Web3 technology has great significance as a form of charitable giving, and in providing permanent records for the government Continue Reading

By

• Avivah Litan

ICO calls for police to end ‘excessive collection’ of personal data from rape and assault victims

The UK’s information commissioner, John Edwards, has called for prosecutors and police to end the excessive collection of personal data from victims of rape and serious sexual assault Continue Reading

By

• Bill Goodwin, Computer Weekly

UAE residents think 3D printing will have the most positive impact on society

People in the UAE believe next-generation technologies such as 3D printing and artificial intelligence will become widespread in the country Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Strong internal foundations are key to withstanding external threats

The modern-day abundance of platforms, apps and IT tools presents malicious actors with a web of interconnection that is easily exploited to move rapidly through the network to compromise critical assets. Security teams need to understand these attack pathways better in order to fight back Continue Reading

By

• Steve Forbes

Two-thirds of UK organisations defrauded since start of pandemic

Nearly two out of three UK companies say they have experienced some form of fraud or economic crime in the past two years, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Dutch companies struggle to fill tech jobs

There are plenty of IT job vacancies in the Netherlands, but a shortage of IT professionals Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Tech companies join UK four-day work week trial

Computer Weekly speaks with tech companies taking part in the UK’s upcoming four-day work week trial, which will measure the impact of shorter working weeks on productivity, wellbeing and the environment Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

The barristers that broke their backs to break the Post Office’s shield of lies

Computer Weekly spoke to the barristers at Henderson Chambers that fought the Post Office in the High Court to expose the widest miscarriage of justice in UK history Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

IR35 reforms: PAC report blames HMRC for ‘widespread non-compliance’ in public sector

The Public Accounts Committee has shared the findings of its report into the after-effects of the IR35 reforms coming into force in the public sector back in April 2017 Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

The birth of Estonia’s digital civil servant

 Continue Reading

ICO orders facial recognition firm Clearview AI to delete all data about UK residents

UK data watchdog fines facial recognition company Clearview AI £7.5m for multiple privacy breaches. The firm, which offers services to law enforcement, faces growing pressure from regulators and legal action around the world Continue Reading

By

• Bill Goodwin, Computer Weekly

Ransomware volumes grew faster than ever in 2021

Verizon’s annual DBIR assessment of the security landscape highlights an unprecedented boom in ransomware volumes, to the surprise of nobody Continue Reading

By

• Alex Scroxton, Security Editor

Government has no plans to review controversial court rules on computer evidence

Government accused of ‘passing the buck’ and ‘not knowing what it is talking about’ after stating it has no plans to review court rules on computer evidence Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Reimagining the cities of the future in Finland

New ideas around new space: Helsinki not only imagines, but can see, the cities of the future Continue Reading

By

• Matthew Staff

Applying international law to cyber will be a tall order

Many in the security community have voiced their support for the UK government’s ambitions to work towards agreement with other countries on the application of international law to cyber space, but not without some reservations Continue Reading

By

• Alex Scroxton, Security Editor

Defensive cyber attacks may be justified, says attorney general

Speaking ahead of a speech at the Chatham House think tank, the UK’s attorney general has suggested defensive cyber attacks against hostile countries may be legally justifiable Continue Reading

By

• Alex Scroxton, Security Editor