IT for retail and logistics

Black market for software security flaws reaches new highs

The black market in previously undiscovered vulnerabilities in commercial software is so established that the average flaw sells for up to $160,000 Continue Reading

By

• Warwick Ashford, Senior analyst

Yahoo wants Fisa objections revealed

Yahoo is the latest company implicated in the Prism internet surveillance programme to call for more transparency around its involvement Continue Reading

By

• Warwick Ashford, Senior analyst

Protecting against modern password cracking

This article in our Royal Holloway Security Thesis series explains just how insecure passwords are and offers advice on alternative methods of security. Continue Reading

Smart cards: security risks

This article in our Royal Holloway Information Security Thesis series assess the new features introduced in Java Card 3 Connected Edition smart card specification and their associated security risks. Continue Reading

Security visualisation

This article in our Royal Holloway Information Security Thesis series shows how to generate a visual representation of a dataset and use visualisation in the evaluation of known security vulnerabilities. Continue Reading

Microsoft notches up over 3,000 copyright cases

In its battle against piracy, Microsoft says it has settled 3,265 copyright cases in the past year and warns of links to malware distribution Continue Reading

By

• Warwick Ashford, Senior analyst

Will cloud services follow the evolution of the banking industry?

Cloud service providers say security will become the very reason companies choose cloud services in future Continue Reading

UK takes cyber threats to infrastructure seriously

The UK is taking seriously potential cyber threats to critical national infrastructure, according to GCHQ head Iain Lobban Continue Reading

By

• Warwick Ashford, Senior analyst

Tougher EU penalties for cyber crime not enough, say security experts

The European Parliament has adopted a draft directive to toughen up EU penalties for cyber crime, but security experts say this is not enough on its own Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Prism unlikely to change much

Does the data collected by Prism put the US Government at risk from other state or non-state sponsored activists? Continue Reading

By

• Petra Wenham

UK joins EU demands for Google to rewrite privacy policy

The UK’s privacy watchdog has joined data protection authorities in France, Spain, Germany and Italy in demanding changes to Google’s privacy policy Continue Reading

By

• Warwick Ashford, Senior analyst

NSA Prism scandal could hit US cloud providers, says EC vice-president

EC vice-president Neelie Kroes says US cloud services providers could lose business because of fears over US Prism surveillance programme Continue Reading

By

• Warwick Ashford, Senior analyst

Azure powers Eurozone network to combat counterfeit drugs

Microsoft Azure will be used to power a cloud platform designment to combat counterfeit pharmaceutical product in the EU Continue Reading

FBI warns of increased spear phishing attacks

The FBI has issued a warning about an increase in spear-phishing attacks targeting multiple industry sectors Continue Reading

By

• Warwick Ashford, Senior analyst

CIO interview: Pete Marsden, CIO, Asos.com

As online fashion retailer Asos.com continues to expand, its IT strategy is focused on new international locations and keeping up with web retail Continue Reading

By

• Angelica Mari

Security Think Tank: Prism – Sitting duck or elaborate honeypot?

Does the data collected by Prism put the US Government at risk from other state or non-state sponsored activists? Continue Reading

By

• Robert Newby

Senior MPs flout EU cookie law

Two years after the EU cookie regulation and UK law came into force, not all UK websites are compliant, including the sites of 13 senior MPs Continue Reading

By

• Warwick Ashford, Senior analyst

Stuxnet leak investigation leads to project originator

The US government investigation into Stuxnet leak of classified information leads to retired general in the Marines, James Cartwright Continue Reading

By

• Warwick Ashford, Senior analyst

CIO interview: Paul Clarke, director of technology, Ocado

Paul Clarke is responsible for the technology strategy at online grocer Ocado, where IT is used in every aspect of the business Continue Reading

Biffa uses software-as-a-service for self-service and automation

Waste management firm Biffa deploys IT service management software-as-a-service (SaaS) to increase user self-service and automation Continue Reading

Encrypting enterprises miss out on cloud benefits

Enterprises sending encrypted data to the cloud are missing out on some of the greatest benefits of cloud computing, says Thales e-Security Continue Reading

By

• Warwick Ashford, Senior analyst

Identity management key to browser-based IT strategy

A cloud-based identity management system is key to enabling a browser-based IT strategy at online recruitment firm Reed.co.uk Continue Reading

By

• Warwick Ashford, Senior analyst

Most firms underestimate volume of malware, study shows

Most companies greatly underestimate the number of malicious programs appearing daily, a global survey of more than 2,000 IT professionals has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

UK businesses failing to secure virtual environments, study finds

Most UK businesses are failing to secure data in virtual environments, a survey of IT decision makers has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Government launches cyber awareness campaign

UK government debuts the first stage of a £4m cyber awareness campaign as part of the National Cyber Security Programme Continue Reading

By

• Warwick Ashford, Senior analyst

UK links to US internet surveillance remain unclear

The government insists that UK spy agencies operate within the law, but questions remain Continue Reading

By

• Warwick Ashford, Senior analyst

PM urged to criminalise internet rape porn

Campaigners are calling for the criminalisation of possessing internet pornography depicting rape Continue Reading

By

• Warwick Ashford, Senior analyst

Human error causes most data breaches, Ponemon study finds

Human errors and system problems caused two-thirds of data breaches in 2012, according to a study from Symantec and the Ponemon Institute Continue Reading

By

• Warwick Ashford, Senior analyst

CIO interview: Steve Monaghan, IT & e-commerce director, Waterstones

After a year of turmoil caused by migration away from HMV, the IT team at Waterstones is finally finding room to think about strategy Continue Reading

Stratfor hacker pleads guilty

US hacktivist Jeremy Hammond pleads guilty to accessing computers of law enforcement agencies and government contractors illegally Continue Reading

By

• Warwick Ashford, Senior analyst

Syrian hackers deface Sky Android apps

Syrian hackers have defaced several of Sky’s Android apps, forcing the broadcaster to remove them temporarily from the Google Play store Continue Reading

By

• Warwick Ashford, Senior analyst

Tesco uses big data to cut cooling costs by up to €20m

Tesco is aiming to save over €20m a year by using sophisticated analytical technology to ensure its chillers work at optimum temperature Continue Reading

By

• Bill Goodwin, Computer Weekly

Privileged accounts key to most APT attacks, says Cyber-Ark

The theft, misuse and exploitation of privileged accounts is becoming an increasingly key tactic in advanced persistent threat attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Most IT environments immature, Microsoft reveals

Most business IT environments are immature, analysis of data from Microsoft’s Cloud Security Readiness Tool has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft declares conformance with ISO 27034-1

Microsoft has declared conformance with ISO 27034-1, the first part of an international standard for secure software development Continue Reading

By

• Warwick Ashford, Senior analyst

Adobe moves to cloud-based subscription model

Adobe has announced that it is to introduce a cloud-based subscription model for popular applications, including Photoshop Continue Reading

By

• Warwick Ashford, Senior analyst

Symantec helps NHS trust cut security costs by a quarter

The Royal Liverpool and Broadgreen University Hospitals NHS Trust cut security costs by 25% in its partnership with security supplier Symantec Continue Reading

By

• Warwick Ashford, Senior analyst

Windows 8 passes 100 million in sales

Microsoft says Windows 8 OS has sold more than 100 million copies, roughly matching Windows 7 in the six months after launch Continue Reading

By

• Warwick Ashford, Senior analyst

Netherlands considers hacking powers for police

The Netherlands government considers legislation to give police powers to hack into computers, install spyware and read emails Continue Reading

By

• Warwick Ashford, Senior analyst

What’s to be done about data breach discovery?

The time from first contact by cyber attackers to the victim learning of it is still measured in months and years, not hours and days Continue Reading

By

• Warwick Ashford, Senior analyst

Schuh takes first steps to in-store Wi-Fi

Shoe retailer Schuh signs a contract with The Cloud to offer free Wi-Fi to customers Continue Reading

Infosec 2013: Cyber crime challenges law enforcement

Cyber crime is forcing police and law enforcement agencies to re-think basic skills needed, according to experts at Infosecurity Europe 2013 Continue Reading

By

• Warwick Ashford, Senior analyst

Lib Dems will block Snoopers’ Charter, says Nick Clegg

The draft Communications Data Bill will not go ahead while the Lib Dems are in government, says deputy prime minister Nick Clegg Continue Reading

By

• Warwick Ashford, Senior analyst

Herding Geese: The Retail Supply Chain

Steven Keifer draws on the pioneering work of US retailer, Walmart, to explain the essentials of EDI in the retail supply chain. Continue Reading

Infosec 2013: University research challenges reliability of IPS

Research shows intrusion prevention systems (IPS) are not as effective at detecting malicious activity as some might think Continue Reading

By

• Warwick Ashford, Senior analyst

Security spend misaligned with threats, says security veteran

Security budget allocations have remained the same for the past 15 years, but threats have changed, says Shlomo Kramer, chief executive at security firm Imperva Continue Reading

US jails LulzSec hacker Cody Kretsinger

The US has jailed a member of hacktivist group LulzSec for a year for his role in breaching computer systems at Sony Pictures Entertainment in 2011 Continue Reading

By

• Warwick Ashford, Senior analyst

Conficker makes way for web-based attacks, says Microsoft

Web attacks emerge as top threat as businesses finally begin to win the battle against Conficker and other worms, says Microsoft Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft reports strong quarterly results for all divisions

Microsoft reported profit of $6bn for the past quarter, up 17% from a year ago, despite a mixed response to Windows 8 and a decline in PC sales Continue Reading

By

• Warwick Ashford, Senior analyst

How to create a good information security policy

Information security policies provide vital support to security professionals, yet few organisations take the time to create decent policies Continue Reading

By

• Andi Scott

Anonymous hacks North Korean websites for a second time

Members of the Anonymous hacktivist collective claim to have again hacked several prominent North Korean websites Continue Reading

Google reaches deal with EU competition authorities

Google has reportedly reached a deal with European Union (EU) competition authorities over concerns about its business practices Continue Reading

By

• Warwick Ashford, Senior analyst

Google has another go at allaying EU competition concerns

Google has submitted a fresh set of proposals to address European concerns about its business practices and avoid punitive action Continue Reading

By

• Warwick Ashford, Senior analyst

Bots and web apps among top threats to data security, says Check Point

Bots, viruses, breaches and attacks are a constant and real threat to the information security of organisations Continue Reading

By

• Warwick Ashford, Senior analyst

Porn websites pose malware risk, says researcher

Browsing popular pornography internet sites pose a growing risk of malware infection, according to a security researcher Continue Reading

By

• Warwick Ashford, Senior analyst

South Korea accuses North Korea of launching cyber attacks

South Korea blames North Korea for the cyber attacks that shut down thousands of computers at broadcasters and banks two weeks ago Continue Reading

By

• Warwick Ashford, Senior analyst

Case Study: 192business switches to tokenisation to speed up business processes

Online payment card verification firm 192business uses tokenisation to speed up its processes and protect credit card details from fraud Continue Reading

US Army practises poor data security on mobile devices

Pentagon inspector general finds smartphones and tablets the US Army buys are not configured to protect sensitive data and allow remote wipe Continue Reading

By

• Warwick Ashford, Senior analyst

Anonymous threatens to declare cyber war on North Korea

Anonymous hacktivist collective has threatened North Korea with cyber war if leader Kim Jong-un does not resign and install free democracy Continue Reading

Google closer to action from European privacy regulators

Google is another step closer to action by privacy regulators across Europe for failing to change the way it manages user data Continue Reading

By

• Warwick Ashford, Senior analyst

UK government sets up cyber security fusion cell

A cyber security “fusion cell” for cross-sector threat data sharing aims to put government, industry and information security analysts side-by-side Continue Reading

By

• Warwick Ashford, Senior analyst

Employees ignore security rules, say infosec pros

Most information security professionals believe corporate employees wilfully ignore security rules, survey at RSA Conference 2013 reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Malware in counterfeit software to cost business $114bn in 2013

Dealing with malware in counterfeit software will cost global enterprises an estimated $114bn in 2013, says research firm IDC Continue Reading

By

• Warwick Ashford, Senior analyst

Six security issues to tackle before encrypting cloud data

Concern about security and privacy is likely to drive adoption of cloud encryption, but there are six security issues businesses should tackle Continue Reading

By

• Warwick Ashford, Senior analyst

CIO interview: Darrell Stein, IT director, Marks & Spencer

As M&S develops its multi-channel capability, Darrell Stein and his team are delivering projects focused on innovation and profitability Continue Reading

By

• Angelica Mari

John Lewis drops virtual mirror project as part of ‘fail fast at innovation' strategy

John Lewis has canned its virtual mirror project as part of the company’s approach to ‘failing fast at innovation’ Continue Reading

By

• Kathleen Hall, TechTarget

US authorities investigate hack of Michelle Obama and other high-profile people

US authorities are investigating hackers who allegedly stole financial information belonging to US first lady Michelle Obama Continue Reading

By

• Warwick Ashford, Senior analyst

Majestic Wine swaps Microsoft for Intershop in ecommerce refresh

Majestic Wine is revamping its website with an InterShop 7 ecommerce engine, which replaces a legacy Microsoft Commerce Server system. Continue Reading

Phishing emails sent in pairs to lend authenticity, says training company

Phishing emails are now being deployed in pairs to create the illusion of authenticity, says security awareness training company PhishMe Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft releases four critical security updates

Microsoft is to release four “critical” patches in its monthly Patch Tuesday security update, according to the advance notice. Continue Reading

By

• Warwick Ashford, Senior analyst

KFC brings free Wi-Fi to customers

KFC teams with The Cloud to give customers free internet connectivity. Continue Reading

By

• Jennifer Scott, TechTarget

What is RSA's build, buy, partner strategy?

Computer Weekly takes a closer look at RSA's build, buy, partner strategy Continue Reading

By

• Warwick Ashford, Senior analyst

How to tackle big data from a security point of view

Before leaping into big data, companies must be clear what they are trying to achieve, otherwise their investment will be wasted Continue Reading

By

• Peter Wood, First Base Technologies LLP

RSA 2013: Obama cyber order will have significant effect, says DoHS

President Barack Obama’s executive order on cybersecurity is a “very big deal” says Mark Weatherford, deputy under-secretary for cybersecurity at the US Department of Homeland Security (DoHS). Continue Reading

By

• Warwick Ashford, Senior analyst

Music companies critical of Google’s anti-piracy efforts

Music companies have accused Google of failing to fulfil a pledge not to give prominent rankings in search results to websites offering illegal music downloads. Continue Reading

By

• Warwick Ashford, Senior analyst

Bad outsourcing decisions cause 63% of data breaches

Bad outsourcing decisions nearly two-thirds of data breaches investigated by security firm Trustwave in the past year Continue Reading

By

• Warwick Ashford, Senior analyst

How to find the most vulnerable systems on your internal network

Most corporate networks share common vulnerabilities, but many could be mitigated with education in “hacker thinking” for technical staff Continue Reading

By

• Peter Wood, First Base Technologies LLP

Social media: A security challenge and opportunity

Generation Y workers are posing increasing security challenges to their employers as they share data unreservedly Continue Reading

By

• Warwick Ashford, Senior analyst

EU cyber strategy aimed at boosting preparedness and cooperation

The European cyber security strategy addresses insufficient national preparedness and boosting co-operation in the region, says the EC Continue Reading

By

• Warwick Ashford, Senior analyst

Business avoids cloud over fear of government snooping

Almost half of IT professionals are deterred from keeping sensitive data in the cloud because of fear of government intervention and possible legal action, a survey has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Twitter strengthens login security after hacker attack

Days after a hacking attack, it has emerged that Twitter plans to strengthen its login security with two-factor authentication Continue Reading

By

• Warwick Ashford, Senior analyst

Interview: John Harris, vice-president of global enterprise architecture, Aimia

Aimia, the organisation behind retail loyalty programme Nectar, is overhauling its IT to make the most of customer data Continue Reading

By

• Angelica Mari

Why has NAC, like DLP, failed to take off?

Why are organisations not investing in systems that are designed to keep malicious actors out of their networks? Continue Reading

By

• Warwick Ashford, Senior analyst

Encryption is safe bet, says SafeNet

Encryption is the only thing that can give peace of mind to CIOs and CISOs, says Dave Hansen, president and CEO of security firm SafeNet Continue Reading

By

• Warwick Ashford, Senior analyst

ICO hits Sony with £250,000 data breach penalty

The Information Commissioner’s office (ICO) has fined Sony Computer Entertainment Europe £250,000 for breaching the Data Protection Act Continue Reading

Why has DLP never taken off?

Why is data loss prevention (DLP) technology not being adopted if it provides the very protection most businesses need? Continue Reading

By

• Warwick Ashford, Senior analyst

Oracle rushes out patches for Java zero days

Oracle has released two out-of-band security updates for the latest zero day vulnerabilities in Java Continue Reading

By

• Warwick Ashford, Senior analyst

Disable Java to protect from latest zero-day

Security researchers are warning of a zero-day vulnerability in all versions of Java, including the latest Java 7 update 10 Continue Reading

By

• Warwick Ashford, Senior analyst

Software piracy international in scope, says Fast

The scale of software piracy is both international in scope and military in its execution, says the Federation Against Software Theft (Fast) Continue Reading

By

• Warwick Ashford, Senior analyst

IT spending to rise in 2013

Find out what analysts are predicting for technology in Europe this year, including changes in budgets and how companies can reduce costs and improve sustainability. Continue Reading

Morrisons sees poor sales due to lack of online presence

Supermarket chain Morrisons posted “disappointing” sales over the Christmas break, due to the retailer’s lack of online presence. Continue Reading

By

• Kathleen Hall, TechTarget

Ernst & Young email keyword analysis identifies fraudsters

Fraud investigators have revealed the most common words used in email conversations by employees engaged in rogue trading and fraud Continue Reading

By

• Warwick Ashford, Senior analyst

Business priorities: what to protect, monitor and test

How information security professionals can prioritise what to protect, monitor and test in the light of current budget and resource constraints Continue Reading

Home Retail Group cuts call costs with SMS automation

Home Retail Group, whose brands include Argos, Homebase and Habitat has cut telephony costs by rolling out an automated text messaging service across its three call centres. Continue Reading

Autonomy CEO Mike Lynch co-operates in HP fraud probe

Former CEO and founder of Autonomy Mike Lynch says he will co-operate with a US investigation into fraud alleged by parent firm HP Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 cyber crime stories of 2012

Ten articles that illustrate some of the major trends in cyber crime in 2012 Continue Reading

By

• Warwick Ashford, Senior analyst

How to preserve forensic evidence in the golden hour after a breach

There is a golden hour at the outset where a clear head and good planning can make or break any subsequent forensic investigation Continue Reading

By

• Martin Roots, NIIP

Ghost Shell hacktivists publish over a million credentials

The Ghost Shell group, an offshoot of the Anonymous hacking collective has published the log-in details from 1.6 million accounts Continue Reading

By

• Warwick Ashford, Senior analyst

UK CIOs see EU regulation as key

A third of UK CIOs are more concerned with EU regulation, such as the data protection directive, than their own local laws, a study has revealed. Continue Reading

By

• Warwick Ashford, Senior analyst

UK government jobs website exploited by hackers

Hackers have been able to exploit security flaws in a new government jobs website to steal personal information about job applicants Continue Reading

By

• Warwick Ashford, Senior analyst