IT for retail and logistics

The nature of the CISO role will be in flux in 2023

As cyber risk outpaces organisational defences, and cyber attacks and breaches cause more and more damage, the nature of the CISO role is entering a state of flux, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Embrace prioritisation, people, imperfections

Security and IT professionals should try to make peace with their imperfections in 2023, says Nominet CISO Paul Lewis Continue Reading

By

• Paul Lewis, Nominet

Iranian APT seen exploiting GitHub repository as C2 mechanism

A subgroup of the Iran-linked Cobalt Mirage APT group has been caught taking advantage of the GitHub open source project as a means to operate its latest custom malware Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: 2022 changed how we thought about resilience

Increasing cyber resilience is at the heart of the people-processes-technology triangle, and 2022 saw shifts in all three of these aspects, says PA Consulting’s Sharon Shochat Continue Reading

By

• Sharon Shochat

Consumers to get new protections against dodgy apps

Government’s new code of practice will impose new privacy and security measures on app store operators and developers Continue Reading

By

• Alex Scroxton, Security Editor

Apple to tap third party for physical security keys

Apple is launching a number of new security protections, including the addition of third-party-provided hardware security keys Continue Reading

By

• Alex Scroxton, Security Editor

Finnish researchers lay the groundwork for flying drones

 Continue Reading

Google, MS, Oracle vulnerabilities make November ’22 a big month for patching

Vulnerabilities affecting the likes of Google, Microsoft and Oracle proved particularly troublesome in November Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: As cyber pros, we need to articulate our needs better

There is always a lot to learn about security, but one of the most important lessons may not relate to technology at all, says Petra Wenham Continue Reading

By

• Petra Wenham

Post Office scandal – “cock-up or cook-up”?

The second phase of the Post Office Horizon IT scandal raised more questions over who did what, when and where, with shocking revelations at every turn Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Don’t become an unwitting tool in Russia’s cyber war

Researchers have turned up evidence that enterprise networks are being co-opted by Russian threat actors to launch attacks against targets in Ukraine. How can you avoid becoming an unwitting tool in a state-backed attack? Continue Reading

By

• Alex Scroxton, Security Editor

Post Office boosted its ‘coffers’ as Horizon system threw up unexplained shortfalls, inquiry told

The Post Office was ‘keen’ to make subpostmasters cover unexplained accounting shortfall as its business struggled, public inquiry hears Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ransomware: Is there hope beyond the overhyped?

Up-and-coming cyber concepts attack surface management and security mesh architectures seem to hold some promise in tackling ransomware, but they are a little way off maturity Continue Reading

By

• Paul Lewis, Nominet

Subpostmaster federation deliberately kept public in dark over computer problems

The federation representing subpostmasters deliberately suppressed information about computer errors that could have saved its members from devastating life-changing events Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Latest LockBit ransomware versions have wormable capabilities

Sophos researchers have reverse-engineered the Lockbit 3.0 ransomware, shedding new light on its evolving capabilities and firming up links with BlackMatter Continue Reading

By

• Alex Scroxton, Security Editor

Think technology, process, human risk to manage ransomware

Effective ransomware handling boils down to three core areas – technology, process and human risk Continue Reading

By

• Andrew Morris, Turnkey Consulting

How gamifying cyber training can improve your defences

Security training is the cornerstone of any cyber defence strategy. With ever-escalating online threats, it is now more important than ever that this training is an engaging experience Continue Reading

By

• Peter Ray Allison

How to stop data retention from killing the planet

In this week’s Computer Weekly, there’s a hidden environmental cost to the vast volumes of data being generated – we examine what can be done to address it. We talk to the CISO of consumer reviews site Trustpilot, about building trust in IT security. And we look at what IT leaders can do if they inherit a toxic team environment. Read the issue now. Continue Reading

Data management, backup becoming the CISO's responsibility

More and more CISOs are taking on responsibility for wider data management strategies, and this trend looks set to grow next year Continue Reading

By

• Alex Scroxton, Security Editor

Fujitsu put pressure on UK government to sign off troubled Horizon project, public inquiry hears

Telegram from British Embassy in Tokyo to UK government reveals pressure on ministers to sign off controversial contract Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

XR and the real world: Feedback loops and spillovers

As the metaverse develops, the realism of advanced extended reality applications could allow users to take experiences, interests and strategies with them into the real world – creating spillovers from virtual to real worlds Continue Reading

By

• Martin Schwirn, Computer Weekly

Your staff are the frontline in your ransomware fight

As part of a solid cyber defence plan, the CISO must make sure that the frontline within the organisation is prepared for an attack, says Theodore Wiggins of Airbus Protect Continue Reading

By

• Theodore Wiggins, Airbus Protect

South Korea data adequacy pact brings £15m Brexit bonus

UK government finalises a data adequacy agreement with South Korea, saying it will unlock a post-Brexit business bonus of just under £15m Continue Reading

By

• Alex Scroxton, Security Editor

How Photobox keeps site reliability in the picture

Photobox’s site reliability head discusses how the photo book and personalised gifts site manages a complex microservices architecture Continue Reading

By

• Cliff Saran, Managing Editor

Ducktail spins new tales to hijack Facebook Business accounts

The increasingly active Ducktail cyber crime operation is refining its operations, seeking new methods to compromise its victims’ Facebook Business accounts Continue Reading

By

• Alex Scroxton, Security Editor

Killnet DDoS hacktivists target Royal Family and others

Russia-aligned hacktivists targeted multiple UK websites, including those of the Royal Family, in a new campaign of DDoS attacks Continue Reading

By

• Alex Scroxton, Security Editor

C-suite mystified by cyber security jargon

Malware, supply chain attack, zero-day, IoC, TTP and Mitre ATT&CK are just some of the everyday terms that security pros use that risk making the world of cyber incomprehensible to outsiders Continue Reading

By

• Alex Scroxton, Security Editor

Is Elon Musk’s Twitter safe, and should you stop using it?

With a litany of security and compliance issues exposed and in many cases caused by Elon Musk’s takeover of social media platform Twitter, some may be asking if it’s still safe or appropriate to use Continue Reading

By

• Alex Scroxton, Security Editor

Post Office scandal inquiry’s expert IT witness ‘troubled’ by his findings

Controversial Post Office Horizon system lacked the integrity required to trust accounting data and contained ‘joke’ coding akin to an ‘overly engineered mousetrap’, inquiry told Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Brexit deregulation will make UK next Silicon Valley, vows Hunt

Chancellor vows to revolutionise how the IT industry is regulated to spur competition, investment and innovation in a technological ‘Big Bang’ Continue Reading

By

• Alex Scroxton, Security Editor

Another Log4Shell warning after Iranian attack on US government

The breach of a US federal body by an Iranian threat actor exploiting the Adobe Log4j Log4Shell vulnerability has prompted a fresh flurry of patching Continue Reading

By

• Alex Scroxton, Security Editor

Team working on controversial Post Office Horizon EPOSS software was the ‘joke of the building’

Former members of the ICL team developing software for the Post Office Horizon EPOSS system were unqualified and engaged in poor software development practices, public inquiry told Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Global network fragmentation a source of increasing risk

Risk consultancy’s report says the weaponisation of cyber space and geopolitical clashes herald a breakdown of global networks into distinct regional or national architectures Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Ransomware defences: An extended to-do list

Strategies to extend ransomware protection beyond backups and intrusion detection must centre dark web monitoring, among other things Continue Reading

By

• Alex Holden

Post Office changed view of Horizon problems before roll-out, because of a ‘sunk cost fallacy’

Insider tells public inquiry that the Post Office continued to roll out the controversial Horizon system despite a ‘considerable’ number of errors, because it was too committed Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

APP fraud volumes expected to double by 2026, says report

Losses to authorised push payment fraud in the UK are expected to climb to over $1.5bn in the next four years. Meanwhile, the NAO accuses the Home Office of lagging on progress to tackle the issue Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Let’s be transparent about ransomware

Greater transparency regarding ransomware attacks, including details about attack methods used and what kinds of assets were compromised, would likely help the community prevent future attacks Continue Reading

By

• John Tolbert, KuppingerCole

Online scam victims lose an average of £1,000 each

New data from the National Fraud Intelligence Bureau shows victims of online fraud lose an average of £1,000 per person Continue Reading

By

• Alex Scroxton, Security Editor

Cyber insurance: The good, the bad and the ugly

Most cyber insurance contracts are innately flawed because they exclude losses arising from state-backed cyber attacks, and this will make proper attribution even more important in the future, says Cisco Talos’ Martin Lee Continue Reading

By

• Martin Lee

Volume of self-reported breaches to ICO jumps 30%

The number of self-reported breaches to the UK’s Information Commissioner’s Office soared by nearly 30% in the 12 months to 30 June 2022 Continue Reading

By

• Alex Scroxton, Security Editor

An encouraging new conversation around sustainable IT, says Nordic CIO

What started as a whisper a decade ago has become distinctly audible chatter among IT leaders sharing best practices on how to protect the environment Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Security Think Tank: To stop ransomware, preparation is the best medicine

You can’t ‘stop’ ransomware, but you can do a lot to keep yourself from becoming ensnared when it strikes Continue Reading

By

• Paul Watts, Information Security Forum

Microsoft serves smorgasbord of six zero-days

November’s Patch Tuesday fixes significantly fewer vulnerabilities of late, but includes six actively-exploited zero-days, three of them of critical severity Continue Reading

By

• Alex Scroxton, Security Editor

Fujitsu expert witness in subpostmaster trial ‘manoeuvred’ into role, public inquiry told

A former Fujitsu technology expert who defended the Horizon system’s robustness in court was unhappy after being ‘manoeuvred’ into acting as an expert witness, public inquiry hears Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Anti-ransomware strategies should be as easy as ABC

When developing and implementing ransomware protection strategies, the importance of paying thorough attention to security measures you might consider elementary cannot be understated Continue Reading

By

• Petra Wenham

Six subpostmaster convictions referred for appeal in Scotland

Six former subpostmasters in Scotland will have appeals against criminal convictions heard after being referred by Scotland’s Criminal Cases Review Commission Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

To fight ransomware, we must treat digital infrastructure as critical

Ransomware defence is failing because we don’t view our digital infrastructure in the same way as our physical infrastructure, argues Elastic’s Mandy Andress Continue Reading

By

• Mandy Andress, Elastic

Microsoft: Nation-state cyber attacks became increasingly destructive in 2022

The willingness of nation-state actors to conduct destructive cyber attacks is a source of grave concern, as Microsoft’s latest annual Digital Defence Report lays bare Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Ransomware and CISOs’ balancing act

Ransomware has the potential to cause irreversible business damage, so CISOs should consider not only protection but also response and recovery Continue Reading

By

• Arina Palchik and Charles Moorey

Microsoft pledges $100m in new IT support for Ukraine

Microsoft will continue to offer free-of-charge technology support to Ukraine for the foreseeable future Continue Reading

By

• Alex Scroxton, Security Editor

Confirmation bias led Post Office to prosecute subpostmasters without investigation, inquiry told

Former Post Office tech leader tells public inquiry that confirmation bias led to hundreds of subpostmasters being prosecuted for financial crimes without proper investigation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Automated threats biggest source of cyber risk for retailers

Threat actors targeting retailers during the coming holiday season are increasingly turning to automated forms of cyber attack, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Retail’s robotics reboot

Walmart and Amazon are among the retailers acquiring warehouse robotics firms, during a period of significant innovation in this space Continue Reading

By

• Ben Sillitoe

Security Think Tank: Know your networks, know your suppliers

To combat the ransomware scourge, we must work harder to monitor and learn from the increasingly complex threat environment, keep a closer eye on supply chains, and share our insights Continue Reading

By

• Rob Dartnall, SecAlliance

Game of ‘hardball’ in Horizon negotiations left subpostmasters exposed to tragedy

‘Hardball’ negotiations between the government, the Post Office and ICL meant subpostmasters were ignored and thrown into a tragedy that could have been averted Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

A third of UK cyber leaders want to quit, report says

Nearly a third of UK security leaders are considering leaving their current role, and more than half are struggling to keep on top of their workload Continue Reading

By

• Alex Scroxton, Security Editor

Subpostmasters federation failed its members when they needed it most in Post Office scandal

A dereliction of duty saw the National Federation of Subpostmasters ignore its members when IT problems hit and allowed the Post Office to destroy their lives. Continue Reading

Prepare today for potentially high-impact OpenSSL bug

OpenSSL trailed a critical vulnerability patch last week, which will be only the second such flaw ever found in the open source encryption project. Unfortunately, the first was Heartbleed Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Container security: why so different?

Done well, container security can be a model for securing the enterprise, and businesses that focus their teams on solving it can help accelerate positive change in other areas Continue Reading

By

• Bernard Brantley

Post Office warned of Horizon software-induced ‘tragedy’ in 1999

Problems experienced during live trials of the Post Office Horizon system predicted the ‘tragedy’ that unfolded Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

How has container security changed since 2020, and have we taken it too far?

While containers are now one of the most popular ways to deploy applications, it is fair to say that the adoption and implementation of security best practice to govern their use has not kept up Continue Reading

By

• Rob Tyler, Turnkey Consulting

Horizon system EPOSS code writers lacked basic programming skills, public inquiry hears

Horizon system code writers lacked basic programming skills, according to the task force set up to investigate reported problems with the controversial software Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

LinkedIn adds new features to safeguard user privacy, security

Social media platform is adding a number of features and systems designed to protect legitimate users from inauthentic profiles and activity Continue Reading

By

• Alex Scroxton, Security Editor

Reported Horizon errors should have been ‘show-stopper’, public inquiry told

Subpostmasters should have been given the benefit of the doubt over unexplained losses, but were hounded to pay money back, with lives ruined and innocent people prosecuted Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Finnish researchers lay the groundwork for flying drones

A large, sparsely populated country, Finland is preparing for a future where it could rely on flying drone technology Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

New minister asked to pause Fujitsu government contracts

Parliamentarians keep focus on Fujitsu’s role in the Post Office Horizon scandal with demand for pause on government contracts to the supplier Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Apple patches new iPhone zero-day

Apple’s latest patch fixes yet another zero-day, as security issues keep surfacing in its mobile products Continue Reading

By

• Alex Scroxton, Security Editor

Sainsbury’s outsources for cloud-first benefits

Retailer signs multi-year IT services contract with Tata Consultancy Services to support move to cloud-first strategy Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Digital-first businesses more willing to accept some fraud

Companies founded in the past 20 years appear more willing to accept higher levels of fraudulent activity during the customer onboarding process, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Half of staff might quit after a cyber attack, report says

Findings from a survey of CISOs, IT leaders and staffers reveal how experiencing a cyber incident may take a larger-than-thought toll on employee retention Continue Reading

By

• Alex Scroxton, Security Editor

Ukrainian and UK IT sectors to deepen collaboration, partnerships

BCS, the Chartered Institute for IT, and the IT Ukraine Association have signed an MoU to deepen collaboration between the UK and Ukrainian IT sectors, and champion new partnerships and growth opportunities Continue Reading

By

• Alex Scroxton, Security Editor

Cyber professional shortfall hits 3.4 million

Shortage of cyber security professionals continues to grow and shows no signs of abating, says report Continue Reading

By

• Alex Scroxton, Security Editor

Treat cyber crime as a ‘strategic threat’, UK businesses told

The government’s new National Cyber Advisory Board aims to help elevate cyber discussion and spur action in the business community Continue Reading

By

• Alex Scroxton, Security Editor

Government introduces Electronic Trade Documents Bill

Digital trade documents will be legally recognised as part of plans to reduce paper documents and speed up processing times Continue Reading

By

• Lis Evenstad

Subpostmaster federation failed its members when they needed it most

A dereliction of duty saw subpostmaster federation ignore its members when IT problems hit and allowed the Post Office destroy their lives Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Mapping the rise in checkout-free shopping

There has been a boom in the number of checkout-free stores globally, but will that growth continue and which retailers are interested? Continue Reading

barcode reader

A barcode reader, also called a price scanner or point-of-sale (POS) scanner, is a hand-held or stationary input device used to capture and read information contained in a barcode. Continue Reading

By

• Katie Terrell Hanna

Office 365 email encryption flaw could pose risk to user privacy

A vulnerability in Microsoft Office 365 Message Encryption could leave the contents of emails dangerously exposed, but with no fix coming it’s up to users to decide how at risk they are Continue Reading

By

• Alex Scroxton, Security Editor

Fujitsu to finally face blame for its part in Post Office Horizon scandal

Fujitsu’s part in causing the extreme suffering of subpostmasters will be made clear as the IT supplier begins giving evidence at a statutory inquiry Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Dutch influence standards for post-quantum cryptography

Cryptology group at Dutch research institute is involved in the two primary algorithms of the next NIST portfolio comprising four new standards Continue Reading

By

• Kim Loohuis

Perpetrators of subpostmaster suffering in Horizon scandal must face public inquiry

Victims demand that the perpetrators of the Post Office Horizon IT scandal face the public inquiry Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NCSC urges organisations to secure supply chains

NCSC’s latest guidance package centres supply chain security, helping medium to large organisations assess and mitigate cyber risks from suppliers Continue Reading

By

• Alex Scroxton, Security Editor

Post Office scandal inquiry restarts with call for a pause amid disclosure controversy

The statutory public inquiry into the Post Office Horizon scandal has begun phase two with a request for an adjournment amid allegations that the Post Office is failing to meet its obligation to disclose all relevant documents Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Online marketplace momentum ushers in new era for retailers

Superdrug is the latest in a growing list of retailers to launch its own online marketplace, joining B&Q, Boots and others in driving a new era for UK retail Continue Reading

By

• Ben Sillitoe

Morrisons joins the fast-growing retail media movement

More retailers are becoming publishers as they realise the potential of their online assets, helping to fuel a new fast-growth segment of digital marketing – and Morrisons is no exception Continue Reading

By

• Ben Sillitoe

Tech Nation and PwC launch joint climate tech accelerator

The Net Zero X programme by Tech Nation and PwC will help climate tech companies to overcome common growth challenges and scale faster Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Putting APIs to work

In this week’s Computer Weekly, our latest buyer’s guide looks at application programming interfaces (APIs) and how they can connect internal and external business processes. We examine the challenges and opportunities of using AI in healthcare. And we find out how retailers are turning to specialist apps to reduce food waste. Read the issue now. Continue Reading

Security regulation cuts online payment fraud at 73% of retailers

New online payments security standard, Strong Customer Authentication (SCA), sees immediate fall in fraudulent payments to retailers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Interview: Rachel Hilliam, chair, Alliance for Data Science Professionals

Rachel Hilliam talks about the origins, mission and future plans for the Alliance for Data Science Professionals Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

How the pandemic accelerated tech adoption in hospitality

The pandemic led to technology adoption across several sectors, with hospitality being no exception Continue Reading

By

• Glynn Davis

Dr Martens goes feetfirst into cloud-to-cloud backup

Iconic bootmaker laces up for a strategy to move all applications to the cloud, beginning with cloud-to-cloud backup for Microsoft 365 apps plus on-site VMware operations Continue Reading

By

• Antony Adshead, Storage Editor

NCSC publishes cyber guidance for retailers

The NCSC has published tailored advice to support online retailers, hospitality providers and utility services in protecting themselves and their customers from cyber crime Continue Reading

By

• Alex Scroxton, Security Editor

Dutch student team aims to enable uninterrupted drone cargo delivery

Dutch student team aims to make the world of flying more sustainable by creating a global network of autonomously flying cargo drones that can have their batteries swapped mid-air Continue Reading

By

• Kim Loohuis

A gold medal performance for networking

In this week’s Computer Weekly, we find out how the IT team behind the 2022 Commonwealth Games in Birmingham delivered a winning performance. We also look at how the centuries-old London insurance market is going digital, thanks to Lloyd’s of London. And we find out how low-cost high street stores succumbed to the inevitable and are going online. Read the issue now. Continue Reading

Organisations failing to account for digital trust

The vast majority of businesses are well aware of the importance of digital trust, yet very few have a dedicated staff role responsible for it, report finds Continue Reading

By

• Alex Scroxton, Security Editor

Ex-CISA head Krebs: Disrupt ransomware support networks to win the war

Speaking at an event hosted by data protection specialist Rubrik, former CISA director Chris Krebs calls for the security community to work collectively to kick out the supports from under ransomware gangs Continue Reading

By

• Alex Scroxton, Security Editor

US to see huge increase in embedded finance transactions

Retailers and other non-financial businesses are increasingly offering their customers financial services, such as credit and payment options Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CISOs should spend on critical apps, cloud, zero-trust, in 2023

Faced with a global recession next year, security buyers should try to direct investment towards technology that protects customer-facing and revenue-generating workloads, say analysts Continue Reading

By

• Alex Scroxton, Security Editor

Out with the old at Asda

In this week’s Computer Weekly, we talk to Asda’s CIO, Carl Dawson, about the supermarket’s cloud-oriented renovation of its technology stack. We narrate the security woes at Twitter. And we examine best practices for data backup. Read the issue now. Continue Reading

It’s all systems go for Asda as takeover brings in brand new e-commerce platform

As the IT handover from Walmart looms, Asda CIO Carl Dawson tells Clare McDonald how the business is renewing all of its technology, putting the retailer in the rare position of being able to start from scratch. Continue Reading