IT for retail and logistics

Microsoft and Google go into battle for enterprise AI

In this week’s Computer Weekly, as developments in generative AI accelerate, Microsoft and Google have each unveiled their plans around enterprise applications. Nobody doubts the importance of digital transformation – but experts say it won’t work without cultural change as well. And we examine the emerging practice of FinOps as part of cloud automation projects. Read the issue now. Continue Reading

Post Office executive told to report false bill of health on controversial software

A 2010 Post Office internal review of the Horizon software was designed to ignore the system’s problems to reassure stakeholders amid questioning of its reliability Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Online sales suffer as consumers hit shops for bargains

While overall shopping figures saw year-on-year growth in April 2023, online sales took a hit as shoppers look for cheaper goods in stores Continue Reading

By

• Clare McDonald, Business Editor

Post Office lawyer bragged how team ‘destroyed attack on the Horizon system’ and put woman in prison

A senior Post Office lawyer appeared gleeful in email about how his team helped prosecute a subpostmaster who was sent to prison Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Fujitsu staff had ‘unrestricted and unauditable’ remote access to Post Office branch systems

Fujitsu engineers could make changes to Post Office branch accounts without anyone knowing Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UKtech50 2023: Vote for the most influential person in UK technology

Our judges have selected the top 50 leaders from a shortlist of more than 300 people – now it’s your chance to tell us who you think is the most influential person in UK technology Continue Reading

By

• Lis Evenstad

UKtech50 2023: The longlist of the UK’s influential tech leaders

Each year, Computer Weekly launches a search for the most influential people in UK IT, asking the tech community who it thinks should be in the top 50 – here is the longlist of everyone nominated for 2023 Continue Reading

By

• Lis Evenstad

Government anti-fraud strategy targets the tech behind the scams

The UK government’s anti-fraud strategy proposes to make it much harder for criminals to target their victims by cracking down on the exploitation of technology Continue Reading

By

• Alex Scroxton, Security Editor

Researchers see surge in scam websites linked to coronation

Scammers and fraudsters continue to take advantage of large public events, with the coronation of King Charles III no exception Continue Reading

By

• Alex Scroxton, Security Editor

More Post Office software-related convictions overturned takes total to 86

A total of 86 former subpostmasters wrongly prosecuted for financial crimes after computer errors showed phantom losses have had convictions overturned Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office paid IBM millions when it ended proposed contract to replace Horizon

The Post Office ended a proposed contract with IBM to replace its controversial Horizon system after work had already started Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Online makes up 25% of retail sales three months in row

The percentage of all retail sales made online remains steady at around a quarter this year, though cost of living is affecting customer behaviour Continue Reading

By

• Clare McDonald, Business Editor

Finland and Estonia deepen cross-border digital partnerships

Finland and Estonia, two global tech pioneers, are increasingly sharing their expertise Continue Reading

By

• Gerard O'Dwyer

IT Priorities 2023: Budget optimism among EMEA IT leaders

IT leaders across the EMEA region are optimistic that their budgets will increase over the coming year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Reduced spending on cloud services weighs European IT services market down

Reduced spending on cloud services in the EMEA region meant a year-on-year drop in total IT and BPO services spend Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Why IAM systems are crucial for securing multicloud architecture

As business tools evolve into cloud-based services, organisations are finding themselves becoming ever more reliant on the cloud, but how can data be secured across so many different platforms? Continue Reading

By

• Peter Ray Allison

Thousands at risk from critical RCE bug in legacy MS service

Thousands of organisations worldwide are at risk from three vulnerabilities – one critical – in a legacy Microsoft service that they may not be aware they are running Continue Reading

By

• Alex Scroxton, Security Editor

The CIO challenges brought by e-commerce in Kuwait

E-commerce is growing fast in Kuwait, resulting in new challenges for CIOs in the retail sector Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

April Patch Tuesday fixes zero-day used to deliver ransomware

A zero-day in the Microsoft Common Log File System that has been abused by the operator of the Nokoyawa ransomware is among 97 vulnerabilities fixed in April’s Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

Gartner: Rebalance cyber investment towards human-centric elements

Security decision-makers need to reprioritise their investment outlooks towards people, rather than technology, according to the latest market forecast from Gartner Continue Reading

By

• Alex Scroxton, Security Editor

UKtech50 2023: Help us find the most influential people in UK IT

Computer Weekly’s annual search for the 50 most influential people in UK IT is back – let us know who you would like to nominate for this year’s list Continue Reading

By

• Lis Evenstad

Security Think Tank: Adopt a coherent framework for ID first security

With IAM central to enabling appropriate access to cloud-based services, identity first security is becoming a key trend for IAM in the cloud. Continue Reading

By

• Andrew Peel

Controversial Fujitsu contract with Post Office extended after technical challenges moving to cloud

The Post Office has extended a contract with Fujitsu after being unable to resolve technical issues related to migrating its IT to the cloud Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CCRC says ‘door open’ for more reviews of subpostmaster convictions

The Criminal Cases Review Commission (CCRC) has told former Post Office workers the door is still open for them to come forward if they were prosecuted for financial crimes based on evidence from Horizon software Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Quick-acting Rorschach ransomware appears out of nowhere

Emergent Rorschach ransomware strain is highly advanced and quite unusual in its capabilities, warn researchers, who say they have been unable to link it to any other known strains Continue Reading

By

• Alex Scroxton, Security Editor

The Folio Society turns over new leaf with NetSuite

Well known for its illustrated, hardback editions of books, The Folio Society has brought its finance systems up to date, in part to aid international growth, with Oracle NetSuite Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

Threat researchers dissect anatomy of a Royal ransomware attack

Trellix researchers share the inside track on a Royal ransomware attack that hit one of its customers in late 2022 Continue Reading

By

• Alex Scroxton, Security Editor

Accenture and Microsoft take Unilever on 18-month 'cloud-only' enterprise journey

Consumer goods giant Unilever has turned to Accenture and Microsoft to support its push to shutter its datacentres and become a ‘cloud-only’ enterprise Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Over 90% of organisations find threat hunting a challenge

Understaffed security teams and high levels of background noise are making basic security operations tasks a chore for defenders, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Generative AI central to Accenture’s tech vision

Generative AI will play a central role over the next 10 years as the digital and physical world become more and more integrated Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

OSC&R supply chain security framework goes live on Github

The OSC&R framework for understanding and evaluating threats to supply chain security has made its debut on Github to allow anybody to contribute to the framework Continue Reading

By

• Alex Scroxton, Security Editor

NCSC issues revised security Board Toolkit for business leaders

National Cyber Security Centre calls on CEOs and senior business leaders to take a more hands-on approach to cyber resilience with the launch of revised board-level tools Continue Reading

By

• Alex Scroxton, Security Editor

Apple security updates fix 33 iPhone vulnerabilities

A larger-than-usual update to Apple’s mobile operating system fixes more than 30 distinct vulnerabilities, including two serious issues that may potentially affect device kernels Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware attacks up 45% in February, LockBit responsible

NCC Group says it observed a surge in ransomware attacks in February, with LockBit, BlackCat and BianLian all highly active Continue Reading

By

• Alex Scroxton, Security Editor

JP Morgan pilots palm and face-recognition technology in US

JP Morgan is testing out its biometric payment technology in selected retailer stores and at the upcoming Formula 1 Grand Prix in Miami Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

National Crime Agency sting operation infiltrates cyber crime market

The UK National Crime Agency has tricked thousands of potential cyber criminals into registering with a fake website pretending to offer tools for creating DDoS attacks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

US bakery pilots Amazon tech for palm payments

Amazon's palm-scanning authentication technology is being used by US bakery and café chain to boost use of its loyalty programme Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ferrari rejects ransom demand after cyber attack

Italian carmaker Ferrari says it will refuse to pay a ransom after an unspecified threat actor broke into its IT systems and stole customer data Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware gangs harass victims to ‘bypass’ backups

Analysis reveals how cyber criminal gangs are turning to extensive, targeted harassment campaigns to force victims to pay up, even if their backups are in good order Continue Reading

By

• Alex Scroxton, Security Editor

Government should invest in maritime tech, say MPs

Report from the Transport Committee calls for investment in technology for the maritime sector, and wants the government to make it easier to scale-up innovation Continue Reading

By

• Lis Evenstad

BBC cracks down on TikTok after review

The BBC is asking staff not to install TikTok on corporate-owned devices without a justified business purpose, although its use will still be allowed to share media content with its audiences Continue Reading

By

• Alex Scroxton, Security Editor

UK TikTok ban gives us all cause to consider social media security

The UK government’s ban on TikTok should give all organisations cause to look into what information social media platforms are collecting on us, and what they are using it for Continue Reading

By

• Alex Scroxton, Security Editor

BEC attacks doubled in 2022, outstripping ransomware

Massive growth in the volume of Business Email Compromise or BEC attacks was linked to a surge in successful phishing campaigns, according to data from Secureworks Continue Reading

By

• Alex Scroxton, Security Editor

Mandiant: Dangerous MS Outlook zero-day widely used against Ukraine

A zero-day vulnerability in Microsoft Outlook that was fixed in the March Patch Tuesday update has likely been actively exploited by Russian actors for a year or more, and its use will now spread rapidly Continue Reading

By

• Alex Scroxton, Security Editor

Chinese Silkloader cyber attack tool falls into Russian hands

A loader tool used by Chinese cyber criminals seems to have been enthusiastically taken up in recent weeks by Russian ransomware operators Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft patches Outlook zero-day for March Patch Tuesday

A highly dangerous privilege escalation bug in Outlook is among 80 different vulnerabilities patched in Microsoft’s March Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

As Covid fades away, what’s the future of remote work in Europe?

Many IT leaders are still supporting some form of work from home, and a trend is beginning to take shape in Europe Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Subpostmaster demands names of Post Office executives who crushed him to suffocate truth

One Post Office scandal victim was deliberately destroyed by the Post Office to deter other subpostmasters from challenging the integrity of its core computer system Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

MI5 to oversee new National Protective Security Authority

The new National Protective Security Authority will address various national security threats including state-sponsored cyber espionage against UK targets Continue Reading

By

• Alex Scroxton, Security Editor

Face tech – recognising the retail opportunity

From age verification to catching criminals, how are retailers using facial recognition technology to push forward their businesses? Continue Reading

By

• Glynn Davis

UK government introduces revised data reform bill to Parliament

Designed in close collaboration with technology businesses, the UK government is re-introducing an updated version of its Data Protection and Digital Information Bill to Parliament, which civil society groups say upends key safeguards Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

IT worker evidence reveals a toxic Post Office IT helpdesk that discriminated against subpostmasters

IT worker tells public inquiry that the Post Office Horizon helpdesk was toxic, rudderless and racist Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

What can security teams learn from a year of cyber warfare?

With the passing of the first anniversary of Russia’s invasion of Ukraine, we reflect on the ongoing cyber war, and ask what security leaders can learn from the past 12 months Continue Reading

By

• Alex Scroxton, Security Editor

Top trends in tech, and retail’s early adopters

We identify the retail industry’s early adopters of what McKinsey deems the top tech trends. Continue Reading

WH Smith staff data accessed in cyber attack

The retailer has said that customer data has not been affected by the incident as it is held in different systems, and that investigations into the attack are ongoing Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Post Office ditched plan to replace Fujitsu with IBM in 2015 due to cost and project concerns

Post Office attempted to replace controversial Horizon system 10 years ago, but was put off by project’s scale and cost. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office’s most senior executives hushed up Horizon errors, public inquiry told

The Post Office messaging strategy was designed to reassure staff that the Horizon accounting system was robust after Computer Weekly first revealed problems in 2009 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Training can no longer be a compliance exercise

Historically, security training has tended to take a compliance-based focus, a ‘tick-box’ exercise using generic, off-the-shelf courses. This needs to change, says Hayley Watson of Turnkey Consulting. Continue Reading

By

• Hayley Watson, Turnkey Consulting

Cyber training in 2023 needs to drive measurable change

2023 will see more focus on security training programmes that not only provide employees with an understanding of the risks they face but more importantly drive measurable behavioural change, says PA Consulting’s Richard Allen Continue Reading

By

• Richard Allen

Royal Mail stands firm as LockBit leaks data and renews ransom demand

The LockBit ransomware gang has made good on its threat to leak data exfiltrated from Royal Mail’s systems, but the postal service is not entertaining the possibility of giving in Continue Reading

By

• Alex Scroxton, Security Editor

WithSecure proposes ‘undo’ button for ransomware

WithSecure’s Activity Monitor technology supposedly overcomes the shortcomings of sandbox test environments, and may be able to stop ransomware attacks from ever happening Continue Reading

By

• Alex Scroxton, Security Editor

Researchers find new bug ‘class’ in Apple devices

A group of vulnerabilities in Apple products that stem from the ForcedEntry exploit used by spyware firm NSO constitutes a whole new class of bug, say researchers at Trellix Continue Reading

By

• Alex Scroxton, Security Editor

Dutch cyber security professionals experience stress akin to soldiers in war zone, claims expert

Cyber attacks are taking a heavy toll on Dutch IT professionals, with over a third reporting that their mental health suffers as a result Continue Reading

By

• Kim Loohuis

Half of cyber leaders to switch jobs by 2025, citing stress

A substantial number of cyber security leaders are plotting their great escape, saying the industry is leaving them too stressed to go on, according to a study Continue Reading

By

• Alex Scroxton, Security Editor

Royal Mail resumes full export service after cyber attack

Royal Mail resumes the last of its international services as it recovers from a ransomware attack, while the Post Office offers postmasters compensation for their lost business Continue Reading

By

• Alex Scroxton, Security Editor

Cyber security training: Insights for future professionals

Future cyber security professionals need soft skills as well as technical ones, says security educator Sudeep Subramanian Continue Reading

By

• Sudeep Subramanian

Online makes up a quarter of retail sales in January 2023

Online shopping makes up a quarter of all retail volumes in the first month of 2023, but retail is still rocky as the cost of living rises Continue Reading

By

• Clare McDonald, Business Editor

Security Think Tank: New trends and drivers in cyber security training

Self-paced, interactive, bite-sized learning is becoming the optimum path for cyber security training in the workplace, says John Tolbert of KuppingerCole Continue Reading

By

• John Tolbert, KuppingerCole

Multi-purpose malwares can use more than 20 MITRE ATT&CK TTPs

Report warns of the development of increasingly sophisticated, multi-purpose malwares, and calls on defenders to play close attention to the MITRE ATT&CK framework to ward them off Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft fixes three zero-days in February update

February’s Patch Tuesday update contains fixes for three previously unpublicised zero-days in Microsoft Office, Windows Graphics Component and Windows Common Log File System Driver Continue Reading

By

• Alex Scroxton, Security Editor

Royal Mail refused to pay £66m LockBit ransom demand, logs reveal

Leaked chat logs reveal Royal Mail has supposedly refused to pay a £66m ransom demand from the LockBit ransomware gang Continue Reading

By

• Alex Scroxton, Security Editor

Vidar, nJRAT re-emerge as prominent malware threats in January

Trojans and infostealers once again dominate the list of most commonly observed threats, according to Check Point’s latest telemetry Continue Reading

By

• Alex Scroxton, Security Editor

‘Buy now, pay later’ crackdown in the making

The finance regulator has proposed bringing ‘buy now, pay later’ providers within its regulatory remit Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

A passion for information

Barry Panayi, chief data and insight officer at John Lewis Partnership, explains why data science and analytics is an increasingly important function, covering its retail, grocery and financial services brands. Continue Reading

How to protect your business from fraud during a recession

This winter, the chilly winds of a global recession have fraudsters turning up the heat. PJ Rohall of SEON Fraud Fighters shares some guidance on how to bundle up against fraud Continue Reading

By

• PJ Rohall

KPMG launches metaverse and digital twin hub in Saudi Arabia

The Saudi Arabian government’s commitment to investing in metaverse technology has attracted a KPMG centre of excellence to its shores Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security buyers lack insight into threats, attackers, report finds

The majority of cyber security purchasing decisions are made without proper insight into the attackers organisations are facing, according to a Mandiant report Continue Reading

By

• Alex Scroxton, Security Editor

BNPL accounted for 12% of UK online spending in January

Buy now, pay later products from fintech providers accounted for 12% of the £8bn spent online in the UK in January, according to analysis Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Consumers want tech-driven clothing stores

As consumers increasingly visit stores as the pandemic subsides, NTT Data finds that technology in shops could persuade consumers to return to physical shopping Continue Reading

By

• Clare McDonald, Business Editor

Security Think Tank: Poor training is worse than no training at all

Bad security training is a betrayal of users, a security risk, and ultimately a waste of money, but there are some reasons to be optimistic about the future, say Mike Gillespie and Ellie Hurst of Advent IM Continue Reading

By

• Ellie Hurst, Advent IM
• Mike Gillespie

Augmented reality in retail: The second coming

H&M, Avon, Very and others’ usage of augmented reality in retail could mean we’re reaching tipping point for the technology in 2023 Continue Reading

By

• Ben Sillitoe

Rakuten targets big edge deployments with Symworld Cloud

Japanese giant Rakuten bought Kubernetes management platform Robin.io and put it in 50,000-plus telco antennas. Now it aims Symworld Cloud at enterprise edge deployments Continue Reading

By

• Yann Serra, LeMagIT
• Antony Adshead, Storage Editor

LockBit cartel finally claims Royal Mail ransomware attack

The LockBit ransomware gang claims it has stolen sensitive data from Royal Mail and will leak it later this week if its demands go unmet Continue Reading

By

• Alex Scroxton, Security Editor

Post Office branches struggling after Royal Mail cyber attack

Royal Mail has restored almost all of its international services to some extent, but remains unable to accept parcels bought over the counter in a Post Office branch Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: How to overcome data protection compliance challenges

Complying with the vast swathe of data protection legislation around the world is complex, especially for smaller organisations without the necessary expertise. Could the compliance process be simplified, and if so, how? Continue Reading

By

• Peter Ray Allison

Security Think Tank: In 2023, we need a new way to cultivate better habits

Regular, small adjustments to behaviour offer a better way to keep employees on track and cultivate a corporate culture of cyber awareness, writes Elastic’s Mandy Andress Continue Reading

By

• Mandy Andress, Elastic

Security Think Tank: Getting the training and development mix right

Rob Dartnall, CEO at SecAlliance and chair of Crest’s UK Council, describes the need for formal, varied and continuous development in the cyber security sector Continue Reading

By

• Rob Dartnall, SecAlliance

Arnold Clark customer data was stolen in Play ransomware attack

Arnold Clark confirms data leaked on dark web was stolen from its systems in ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Cloud security top risk to enterprises in 2023, says study

A PwC study finds senior executives expect cyber attacks on cloud services to increase significantly this year Continue Reading

By

• Alex Scroxton, Security Editor

Innovative Technology deploys age estimation tech in shops and pubs

A company involved in Home Office-led trials of biometric age estimation technologies has begun rolling out its hardware to UK shops and pubs so they can use its facial recognition algorithm to assure customers’ ages Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Malware variant can block contactless payments

Kaspersky warns that the latest variant of the Prilex malware can block contactless payments to force people to insert cards, enabling criminals to steal money Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK Cyber Council and ISACA launch audit, assurance programme

The UK Cyber Security Council has teamed up with ISACA to partner on a new audit and assurance programme for security pros Continue Reading

By

• Alex Scroxton, Security Editor

Royal Mail recovers more International Tracked services

Royal Mail is making further progress in recovering IT systems hit by a ransomware attack, and has re-enabled another tranche of international export services Continue Reading

By

• Alex Scroxton, Security Editor

How the cost-of-living crisis is affecting IT

In this week’s Computer Weekly, with major tech companies announcing thousands of job cuts, we examine what the cost-of-living crisis means for IT leaders and tech professionals. We analyse what you need to consider when reversing systems out of the cloud and back on-premise. And Very Group’s CIO talks about the post-pandemic challenges facing online retailers. Read the issue now. Continue Reading

Former Fujitsu staff under police investigation to face Post Office IT scandal inquiry

Two former Fujitsu IT professionals being investigated for potential perjury will face Post Office Horizon public inquiry in May Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Data of 10 million JD Sports customers accessed in cyber attack

Data on 10 million people who shopped online at JD Sports over a two-year period was accessed and potentially stolen in a cyber attack Continue Reading

By

• Alex Scroxton, Security Editor

Hive ransomware gang taken down after FBI hacks back

The FBI hacked into Hive’s servers, stole its decryption keys and then took down its servers in a major action that has successfully disrupted a prolific and dangerous ransomware operation Continue Reading

By

• Alex Scroxton, Security Editor

Royal Mail resumes some international parcel services from UK

Royal Mail has successfully stood up its International Tracked and Signed, and International Signed, services as it continues to recover from a ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Arnold Clark cyber attack claimed by Play ransomware gang

A cyber attack that struck car dealer Arnold Clark prior to Christmas has been claimed as the work of the Play ransomware cartel Continue Reading

By

• Alex Scroxton, Security Editor

Boards struggle to resolve cyber risk in digital supply chains

Accelerated digitisation of supply chains is introducing more cyber risk for which many organisations seem unprepared, according to the BSI’s annual report on supply chain risk Continue Reading

By

• Alex Scroxton, Security Editor