IT for leisure and hospitality industry

AI will heighten global ransomware threat, says NCSC

The benefits of artificial intelligence to cyber criminals being well-known, the NCSC now assesses it’s likely AI will soon be widely used to enhance ransomware attacks Continue Reading

By

• Alex Scroxton, Security Editor

Treat cyber risk like financial or legal issue, says UK government

UK government and NCSC launch proposed code of practice on cyber security governance to help directors and business leaders toughen their defences Continue Reading

By

• Alex Scroxton, Security Editor

Leak of 26 billion records may prove to be ‘mother of all breaches’

The discovery of a dataset comprising 26 billion stolen records may prove to be record-breaking in both its size and the danger it poses to ordinary people Continue Reading

By

• Alex Scroxton, Security Editor

Biometric revolution in IAM: The future of authentication

The IAM landscape is experiencing profound change thanks to the advent of biometrics. Learn about the latest advantages and key benefits of biometrics in identity Continue Reading

By

• Isla Sibanda

The human toll of ransomware: how IT pros suffer during incidents

Any ransomware attack causes significant challenges for a business or organisation going through such incident. But ransomware attacks also have tremendous impact on the staff – especially IT teams – working on mitigating the attack’s effect Continue Reading

By

• Pia Hüsch, Jamie MacColl and Gareth Mott

Cisco fixes high-impact flaw in unified comms platform

Cisco unified comms customers are urged to patch a critical vulnerability in Unity Connection, a messaging and voicemail product Continue Reading

By

• Alex Scroxton, Security Editor

Windows Kerberos, Hyper-V vulns among January Patch Tuesday bugs

Microsoft starts 2024 right with another slimline Patch Tuesday drop, but there are some critical vulns to be alert to, including a number of man-in-the-middle attack vectors Continue Reading

By

• Alex Scroxton, Security Editor

Babuk Tortilla ransomware decryptor made available

A joint effort between Cisco Talos, Avast and the Dutch police will bring relief to many victims of a variant of the Babuk ransomware known as Tortilla Continue Reading

By

• Alex Scroxton, Security Editor

Artificial intelligence to the front in Sweden’s National Technology Strategy

Sweden focuses in on artificial intelligence in its latest far-reaching national IT strategy Continue Reading

By

• Gerard O'Dwyer

Decoding zero trust in endpoint security: A practical guide for CISOs

The exponential increase in endpoints has vastly expanded the average organisation’s attack surface – address this by applying zero-trust best practice to endpoints Continue Reading

By

• Isla Sibanda

Top 10 cyber crime stories of 2023

Ransomware gangs dominated the cyber criminal underworld in 2023, a year that will prove notable for significant evolutionary trends in their tactics Continue Reading

By

• Alex Scroxton, Security Editor

Beyond the office walls: Safeguarding remote workers from attack

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Paul Lewis, Nominet

Zero-trust principles: Your gateway to securing remote workers

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Michael Healey, Turnkey Consulting

Evolving best practice: What next for securing remote work?

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Scott Burman

ALPHV/BlackCat operation down, but maybe not out

Multinational law enforcement has targeted the operations of the notorious ALPHV/BlackCat cyber extortion gang, but the group’s members appear to remain defiant Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Testing to improve remote worker security

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Rowland Johnson

Security Think Tank: Anytime, anywhere access is achievable

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Tim Holman, 2-sec

Microsoft’s Christmas present for cyber teams: no zero-days

Barely 30 vulnerabilities, and no zero-days, have been fixed in the final Patch Tuesday drop of 2023 Continue Reading

By

• Alex Scroxton, Security Editor

Atos selected for UEFA Euro 2024 IT contract

IT services company Atos will deliver on-site and remote IT services for next year’s international football event in Germany Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Report reveals sorry state of cyber security at UK football clubs

Football clubs up and down the country are putting staff, players and fans alike at risk through outdated attitudes to cyber security, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Mark McClain, SailPoint Technologies

SailPoint founder and CEO Mark McClain reflects on how the concept of identity has evolved over the past 20 years, and points to rapid evolution still to come Continue Reading

By

• Alex Scroxton, Security Editor

Government’s Online Fraud Charter welcomed

The government has corralled 11 of the largest tech platforms in the world to commit to its Online Fraud Charter, designed to tackle online scams, fake adverts, and more Continue Reading

By

• Alex Scroxton, Security Editor

UK retailer The Very Group embarks on GenAI push with AWS

The Very Group's collaboration with AWS is geared towards improving the customer experience through personalisation Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

India's Hexaware creates hundreds of jobs in UK

Hexaware opens IT services operation in Birmingham, with a plan to recruit 250 people in the region by 2025 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Iconic Singapore hotel caught up in major data breach

The Marina Bay Sands resort in Singapore uncovered a data breach of its guest loyalty programme last month Continue Reading

By

• Alex Scroxton, Security Editor

Netherlands starts building its own AI language model

Dutch government allocates €13.5m to develop an open artificial intelligence language model according to national values and guidelines. Continue Reading

By

• Kim Loohuis

Darktrace CEO Poppy Gustafsson on her AI Safety Summit goals

As the AI Safety Summit at Bletchley Park takes place, Computer Weekly caught up with Darktrace CEO Poppy Gustafsson to find out what one of the UK’s most prominent AI advocates wants from proceedings Continue Reading

By

• Alex Scroxton, Security Editor

Brewing data insights at Heineken

In this week’s Computer Weekly, we find out how brewing giant Heineken is building a data ecosystem to share insights and tap into AI capabilities. The UK is conducting a formal investigation into AWS and Microsoft’s cloud dominance – what will it mean for users? And we examine how generative AI could be used to improve customer experience. Read the issue now. Continue Reading

Ryder Cup testbed to feature tech firsts in Rome

This year’s Ryder Cup will test out technology to improve how fans digitally consume the event while reducing the workload on IT teams Continue Reading

Ryder Cup testbed tees up tech firsts in Rome

Michael Cole, CTO of the European Tour Group, explains how this year’s Ryder Cup golf competition introduced technology to improve fans’ digital experience of the event while reducing the workload on IT teams. Continue Reading

AI vs software outsourcing: An opportunity or a threat?

While artificial intelligence offers unprecedented opportunities for growth, efficiency and automation, it also raises pertinent questions about the future of software outsourcing Continue Reading

By

• Maxim Ivanov

Researchers offer free threat briefings on Vegas casino hackers

Permiso, a cloud detection and response startup, is making its threat intel team available to speak on Scattered Spider, the group behind recent cyber attacks on MGM Resorts and Caesars Entertainment Continue Reading

By

• Alex Scroxton, Security Editor

Okta confirms link to cyber attacks on Las Vegas casinos

Okta CISO David Bradbury confirms widespread speculation about the high-profile cyber attacks on two Las Vegas casino operators, revealing that the threat actors responsible had indeed abused its services as they earlier claimed Continue Reading

By

• Alex Scroxton, Security Editor

Securing Eurovision’s online voting system against cyber attacks

In this week’s Computer Weekly, we discover how Once.net and Cloudfare defended the 2023 Eurovision Song Contest against cyber attacks. Our buyer’s guide continues to look at integrating software-as-a-service applications, with the governance of SaaS connectivity to the fore. Also, HCLTech’s Ashish Gupta relates how the company has embraced a new, pandemic-influenced, remote working model. And we find out how retail tech leaders influence their boards on transformation projects. Read the issue now. Continue Reading

Las Vegas mainstay Caesars Palace likely paid off ransomware crew

Caesars Entertainment, owner of the lavish Roman Empire-themed Caesars Palace casino in Las Vegas, has revealed it also suffered a ransomware attack, and appears to have paid off its hackers Continue Reading

By

• Alex Scroxton, Security Editor

BlackCat on the hook for cyber attack that crippled Vegas casinos

The ALPHV/BlackCat ransomware operation claimed responsibility for an attack that forced MGM Resorts to shut down systems at some of Las Vegas’ most popular gambling venues Continue Reading

By

• Alex Scroxton, Security Editor

Patch Tuesday: Microsoft fixes zero-days in Word and Streaming Service

September 2023 brings a light Patch Tuesday, with two zero-days and five critical vulnerabilities listed in the latest release Continue Reading

By

• Alex Scroxton, Security Editor

US casino giant MGM Resorts battles 36-hour outage after cyber attack

Multiple systems at US hotel and casino operator MGM went down in the wake of the incident on 10 September, crippling several of Las Vegas’ most prominent casinos Continue Reading

By

• Alex Scroxton, Security Editor

European enterprises to spend more on generative IT to close gap on US

European organisations are upping their spending on generative AI innovation, but face challenges recruiting the right people to support this Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Interview: Ashish Gupta, head of EMEA, HCLTech

It’s not just enterprises that changed their operating models during and after Covid, but also the suppliers that took them on the journey, HCLTech Europe’s head explains Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ryder Cup testbed to feature tech firsts in Rome

This year’s Ryder Cup will test out technology to improve how fans digitally consume the event while reducing the workload on IT teams Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Top-performing CISOs reserve time for professional development

Survey of chief information security officers conducted by Gartner sheds light on habits shared by the top-performing members of the profession Continue Reading

By

• Alex Scroxton, Security Editor

Cyber attacks in 2023 develop quicker as average dwell times plummet

The median attacker dwell time shrunk from 10 to eight days in the first seven months of 2023, and in the case of ransomware attacks it is down to just five days Continue Reading

By

• Alex Scroxton, Security Editor

Post Office inquiry must examine rule on IT evidence if miscarriages of justice are to be avoided

 Continue Reading

Post Office inquiry must examine rule on IT evidence if miscarriages of justice are to be avoided

Public inquiry must examine role of court rules around use of computer evidence that enabled Post Office to prosecute innocent people Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

GDPR tax reclaim scheme preys on fears of SMEs

IT suppliers are a target of companies offering a tax reclaim scheme that preys on small businesses’ fears around General Data Protection Regulation compliance Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Dutch government puts up €123m to address shortage of ICT workers

Financial injection aimed at improving cooperation between vocational education and business in the Netherlands, and making the tech professions more attractive Continue Reading

By

• Kim Loohuis

UKtech50 2023: The most influential people in UK technology

Computer Weekly has announced the 13th annual UKtech50 – our definitive list of the movers and shakers in the UK tech sector Continue Reading

By

• Lis Evenstad

UKtech50 2023 winner: Michelle Donelan/Chloe Smith, secretary of state, DSIT

Computer Weekly looks at the achievements and successes of the Department for Science, Innovation and Technology, as its secretary of state is recognised as the most influential person in UK technology for 2023 Continue Reading

By

• Lis Evenstad

Government to test rural broadband options with £7m fund

Government to fund tests of technologies that could be issued to improve internet connectivity for rural communities Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UKtech50 2023: Vote for the most influential person in UK technology

Our judges have selected the top 50 leaders from a shortlist of more than 300 people – now it’s your chance to tell us who you think is the most influential person in UK technology Continue Reading

By

• Lis Evenstad

UKtech50 2023: The longlist of the UK’s influential tech leaders

Each year, Computer Weekly launches a search for the most influential people in UK IT, asking the tech community who it thinks should be in the top 50 – here is the longlist of everyone nominated for 2023 Continue Reading

By

• Lis Evenstad

IT Priorities 2023: Budget optimism among EMEA IT leaders

IT leaders across the EMEA region are optimistic that their budgets will increase over the coming year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Reduced spending on cloud services weighs European IT services market down

Reduced spending on cloud services in the EMEA region meant a year-on-year drop in total IT and BPO services spend Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Why IAM systems are crucial for securing multicloud architecture

As business tools evolve into cloud-based services, organisations are finding themselves becoming ever more reliant on the cloud, but how can data be secured across so many different platforms? Continue Reading

By

• Peter Ray Allison

Restaurants hit by IT problems after BlackCat attack on supplier NCR

Ransomware attack on systems of payments giant causing service outages for restaurants around the world Continue Reading

By

• Alex Scroxton, Security Editor

Thousands at risk from critical RCE bug in legacy MS service

Thousands of organisations worldwide are at risk from three vulnerabilities – one critical – in a legacy Microsoft service that they may not be aware they are running Continue Reading

By

• Alex Scroxton, Security Editor

April Patch Tuesday fixes zero-day used to deliver ransomware

A zero-day in the Microsoft Common Log File System that has been abused by the operator of the Nokoyawa ransomware is among 97 vulnerabilities fixed in April’s Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

Gartner: Rebalance cyber investment towards human-centric elements

Security decision-makers need to reprioritise their investment outlooks towards people, rather than technology, according to the latest market forecast from Gartner Continue Reading

By

• Alex Scroxton, Security Editor

KFC, Pizza Hut data stolen in January ransomware attack

Yum!, the parent organisation behind KFC and Pizza Hut in the UK, has disclosed that employee data was accessed and exfiltrated in a January 2023 ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

UKtech50 2023: Help us find the most influential people in UK IT

Computer Weekly’s annual search for the 50 most influential people in UK IT is back – let us know who you would like to nominate for this year’s list Continue Reading

By

• Lis Evenstad

Security Think Tank: Adopt a coherent framework for ID first security

With IAM central to enabling appropriate access to cloud-based services, identity first security is becoming a key trend for IAM in the cloud. Continue Reading

By

• Andrew Peel

Quick-acting Rorschach ransomware appears out of nowhere

Emergent Rorschach ransomware strain is highly advanced and quite unusual in its capabilities, warn researchers, who say they have been unable to link it to any other known strains Continue Reading

By

• Alex Scroxton, Security Editor

CGI signs up to prison leaver employment initiative

IT supplier is working with training company specialised in helping prison leavers to find recruitment in the tech sector Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Threat researchers dissect anatomy of a Royal ransomware attack

Trellix researchers share the inside track on a Royal ransomware attack that hit one of its customers in late 2022 Continue Reading

By

• Alex Scroxton, Security Editor

Over 90% of organisations find threat hunting a challenge

Understaffed security teams and high levels of background noise are making basic security operations tasks a chore for defenders, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Generative AI central to Accenture’s tech vision

Generative AI will play a central role over the next 10 years as the digital and physical world become more and more integrated Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

OSC&R supply chain security framework goes live on Github

The OSC&R framework for understanding and evaluating threats to supply chain security has made its debut on Github to allow anybody to contribute to the framework Continue Reading

By

• Alex Scroxton, Security Editor

NCSC issues revised security Board Toolkit for business leaders

National Cyber Security Centre calls on CEOs and senior business leaders to take a more hands-on approach to cyber resilience with the launch of revised board-level tools Continue Reading

By

• Alex Scroxton, Security Editor

Apple security updates fix 33 iPhone vulnerabilities

A larger-than-usual update to Apple’s mobile operating system fixes more than 30 distinct vulnerabilities, including two serious issues that may potentially affect device kernels Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware attacks up 45% in February, LockBit responsible

NCC Group says it observed a surge in ransomware attacks in February, with LockBit, BlackCat and BianLian all highly active Continue Reading

By

• Alex Scroxton, Security Editor

JP Morgan pilots palm and face-recognition technology in US

JP Morgan is testing out its biometric payment technology in selected retailer stores and at the upcoming Formula 1 Grand Prix in Miami Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

National Crime Agency sting operation infiltrates cyber crime market

The UK National Crime Agency has tricked thousands of potential cyber criminals into registering with a fake website pretending to offer tools for creating DDoS attacks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

US bakery pilots Amazon tech for palm payments

Amazon's palm-scanning authentication technology is being used by US bakery and café chain to boost use of its loyalty programme Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ransomware gangs harass victims to ‘bypass’ backups

Analysis reveals how cyber criminal gangs are turning to extensive, targeted harassment campaigns to force victims to pay up, even if their backups are in good order Continue Reading

By

• Alex Scroxton, Security Editor

BBC cracks down on TikTok after review

The BBC is asking staff not to install TikTok on corporate-owned devices without a justified business purpose, although its use will still be allowed to share media content with its audiences Continue Reading

By

• Alex Scroxton, Security Editor

UK TikTok ban gives us all cause to consider social media security

The UK government’s ban on TikTok should give all organisations cause to look into what information social media platforms are collecting on us, and what they are using it for Continue Reading

By

• Alex Scroxton, Security Editor

BEC attacks doubled in 2022, outstripping ransomware

Massive growth in the volume of Business Email Compromise or BEC attacks was linked to a surge in successful phishing campaigns, according to data from Secureworks Continue Reading

By

• Alex Scroxton, Security Editor

Mandiant: Dangerous MS Outlook zero-day widely used against Ukraine

A zero-day vulnerability in Microsoft Outlook that was fixed in the March Patch Tuesday update has likely been actively exploited by Russian actors for a year or more, and its use will now spread rapidly Continue Reading

By

• Alex Scroxton, Security Editor

Chinese Silkloader cyber attack tool falls into Russian hands

A loader tool used by Chinese cyber criminals seems to have been enthusiastically taken up in recent weeks by Russian ransomware operators Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft patches Outlook zero-day for March Patch Tuesday

A highly dangerous privilege escalation bug in Outlook is among 80 different vulnerabilities patched in Microsoft’s March Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

As Covid fades away, what’s the future of remote work in Europe?

Many IT leaders are still supporting some form of work from home, and a trend is beginning to take shape in Europe Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

MI5 to oversee new National Protective Security Authority

The new National Protective Security Authority will address various national security threats including state-sponsored cyber espionage against UK targets Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Training can no longer be a compliance exercise

Historically, security training has tended to take a compliance-based focus, a ‘tick-box’ exercise using generic, off-the-shelf courses. This needs to change, says Hayley Watson of Turnkey Consulting. Continue Reading

By

• Hayley Watson, Turnkey Consulting

Cyber training in 2023 needs to drive measurable change

2023 will see more focus on security training programmes that not only provide employees with an understanding of the risks they face but more importantly drive measurable behavioural change, says PA Consulting’s Richard Allen Continue Reading

By

• Richard Allen

WithSecure proposes ‘undo’ button for ransomware

WithSecure’s Activity Monitor technology supposedly overcomes the shortcomings of sandbox test environments, and may be able to stop ransomware attacks from ever happening Continue Reading

By

• Alex Scroxton, Security Editor

Researchers find new bug ‘class’ in Apple devices

A group of vulnerabilities in Apple products that stem from the ForcedEntry exploit used by spyware firm NSO constitutes a whole new class of bug, say researchers at Trellix Continue Reading

By

• Alex Scroxton, Security Editor

Dutch cyber security professionals experience stress akin to soldiers in war zone, claims expert

Cyber attacks are taking a heavy toll on Dutch IT professionals, with over a third reporting that their mental health suffers as a result Continue Reading

By

• Kim Loohuis

Half of cyber leaders to switch jobs by 2025, citing stress

A substantial number of cyber security leaders are plotting their great escape, saying the industry is leaving them too stressed to go on, according to a study Continue Reading

By

• Alex Scroxton, Security Editor

Cyber security training: Insights for future professionals

Future cyber security professionals need soft skills as well as technical ones, says security educator Sudeep Subramanian Continue Reading

By

• Sudeep Subramanian

CIO interview: Hans van der Waal, director of global IT, Travelex

Travelex has weathered a storm that saw it sink into administration, before emerging to solidify its digital foundations for the future Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: New trends and drivers in cyber security training

Self-paced, interactive, bite-sized learning is becoming the optimum path for cyber security training in the workplace, says John Tolbert of KuppingerCole Continue Reading

By

• John Tolbert, KuppingerCole

Multi-purpose malwares can use more than 20 MITRE ATT&CK TTPs

Report warns of the development of increasingly sophisticated, multi-purpose malwares, and calls on defenders to play close attention to the MITRE ATT&CK framework to ward them off Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft fixes three zero-days in February update

February’s Patch Tuesday update contains fixes for three previously unpublicised zero-days in Microsoft Office, Windows Graphics Component and Windows Common Log File System Driver Continue Reading

By

• Alex Scroxton, Security Editor

Vidar, nJRAT re-emerge as prominent malware threats in January

Trojans and infostealers once again dominate the list of most commonly observed threats, according to Check Point’s latest telemetry Continue Reading

By

• Alex Scroxton, Security Editor

How to protect your business from fraud during a recession

This winter, the chilly winds of a global recession have fraudsters turning up the heat. PJ Rohall of SEON Fraud Fighters shares some guidance on how to bundle up against fraud Continue Reading

By

• PJ Rohall

KPMG launches metaverse and digital twin hub in Saudi Arabia

The Saudi Arabian government’s commitment to investing in metaverse technology has attracted a KPMG centre of excellence to its shores Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security buyers lack insight into threats, attackers, report finds

The majority of cyber security purchasing decisions are made without proper insight into the attackers organisations are facing, according to a Mandiant report Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Poor training is worse than no training at all

Bad security training is a betrayal of users, a security risk, and ultimately a waste of money, but there are some reasons to be optimistic about the future, say Mike Gillespie and Ellie Hurst of Advent IM Continue Reading

By

• Ellie Hurst, Advent IM
• Mike Gillespie

The Security Interviews: How to overcome data protection compliance challenges

Complying with the vast swathe of data protection legislation around the world is complex, especially for smaller organisations without the necessary expertise. Could the compliance process be simplified, and if so, how? Continue Reading

By

• Peter Ray Allison