IT for small and medium-sized enterprises (SME)

Firms face targeted bespoke cyber attacks, dark web study reveals

Academic study exposes prolific availability and demand for tailored malware, network access and corporate espionage services, which suggests many firms’ cyber defences are below standard Continue Reading

By

• Warwick Ashford, Senior analyst

Half of CFOs frustrated by complex accounting systems

Chief financial officers need to upgrade to easier-to-use accounting systems, but are strapped for time and lack the resources to make the right choices, according to survey Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Legacy IT systems a significant security challenge

Information security professionals need to work closely with the business to identify critical legacy IT systems to ensure security risks are managed effectively, CISO tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Digital transformation an opportunity for security

Digital transformation is an opportunity not only for the business to up its game, but also for security teams to engage with and win over the business, CISO tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

London could be world cyber risk leader, says ex-Lloyd’s chief

Collaboration across the cyber insurance, technology and security organisations in London could make the capital a leading world centre on these topics, says former Lloyd’s of London boss Continue Reading

By

• Warwick Ashford, Senior analyst

DNS – a security opportunity not to be overlooked, says Nominet

Domain name system data is the best-kept secret for eliminating network cyber threats, Nominet tells Infosecurity Europe attendees Continue Reading

By

• Warwick Ashford, Senior analyst

Nearly two-thirds of businesses hit by credential abuse

Most businesses admit to breaches relating to abuse of user credentials, according to a report that highlights cyber hygiene failings in the UK and the importance of greater visibility and integration to cyber defence capability Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber crime widely under-reported, Isaca study shows

Cyber crime, which is the top cyber threat to business, remains widely under-reported, and only a third of organisations are confident in their ability to detect and respond to threats, a study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Business leaders failing to address cyber threats

Businesses are failing to address growing cyber threats as business leaders admit to knowledge gaps, a lack of resources and confusion about who is responsible for data breaches, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

A lack of skills and ownership are top challenges to OT security

A lack of skills, visibility and clarity on which business function is responsible for securing operational technology are the biggest challenges to managing the risk, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

2.3 billion business and consumer data files exposed online

In the year since the GDPR compliance deadline, the number of data files exposed online without adequate protection is up more than 50% due to misconfigured security controls, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Hackers targeting UK universities a threat to national security

Poorly defended UK university research that is mainly commissioned by government is a top target for hackers, putting national security at risk, a study reveals, underlining the need for better cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

Turla APT group beefs up cyber attack tool

An advanced persistent threat cyber espionage group has improved its tools to attack diplomatic targets, making their activities more difficult to detect and block Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber weapons readily available to criminals, researchers warn

Security researchers have discovered an attack campaign infrastructure designed to scan, brute-force and infect tens of thousands of MS-SQL and PHPMyAdmin servers Continue Reading

By

• Warwick Ashford, Senior analyst

ICO to shortlist Sandbox applicants

Privacy watchdog’s Sandbox service aims to help develop innovative and beneficial products and services that are privacy compliant Continue Reading

By

• Warwick Ashford, Senior analyst

Perfect storm for data science in security

After nearly 20 years of research, the perfect storm of computing technologies is finally enabling data science to realise its potential to make valuable contributions to improving cyber security capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Just over half of UK firms don’t have a cyber resilience plan

Many UK firms still lack cyber resilience and data protection capabilities covering email a year after the implementation of the GDPR aimed at improving personal data protection Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR: Are we there yet?

A full year since the General Data Protection Regulation was implemented, there has not been the severe punitive action expected by many and personal data breaches continue to happen, leaving many wondering if any progress has been made Continue Reading

By

• Warwick Ashford, Senior analyst

Effect of GDPR yet to be felt, says law firm Hogan Lovells

Despite the fact that the GDPR has been in full effect for a year, the true effect of the regulation is yet to be felt and organisations should ensure they keep their eye on the ball, says leading privacy law firm Continue Reading

By

• Warwick Ashford, Senior analyst

Ofcom makes new proposals to liberalise access Openreach’s ducts and poles

The telecoms regulator is proposing new regulations on accessing Openreach’s infrastructure that it hopes will incentives others to roll out ultrafast networks quicker Continue Reading

By

• Alex Scroxton, Security Editor

No real change a year into GDPR, says privacy expert

A year after the GDPR compliance deadline, many organisations still have a lot of work to do to make real changes and shift focus away from fines to business value and gain, says PwC’s GDPR and data protection lead Continue Reading

By

• Warwick Ashford, Senior analyst

V.Pharma swaps Data Domain for Quantum and cuts backup costs

Belgian pharmacy’s Data Domains had reached end-of-life and it wanted to remain in-budget. Quantum DXi worked out a lot cheaper and easy to manage, with good support Continue Reading

By

• Yann Serra, LeMagIT

TalkTalk admits new failings in 2015 data breach notification

TalkTalk’s failure to notify all those affected by its 2015 data breach highlights the importance of data visibility so that breach notifications are fast and accurate – a key requirement of the GDPR Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Effective IT segregation must involve the business

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• RV Raghu, ISACA

UC Expo 2019: Experts talk up future tech in unified communications

Automation and AI are increasingly prevalent in unified comms, but do enterprises really need it? Continue Reading

By

• Rene Millman

Security Think Tank: In-app segregation more intelligent and permissive

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Simon Persin, Turnkey Consulting

Cyber security scholarships on offer in Belfast

Queen’s University Belfast is backing the cyber security sector with funding for master of science scholarships Continue Reading

By

• Warwick Ashford, Senior analyst

DCMS shakes up BDUK with new rural full-fibre scheme

The Rural Gigabit Connectivity programme will run for two years, trialling a new model for full-fibre broadband delivery – meanwhile, BDUK is getting a new name Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: IT asset separation is a risk-based decision

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Deshini Newman, (ISC)²

GDPR an opportunity to improve data systems and processes

A year after the official implementation of the GDPR, it is important to highlight the positive opportunities that compliance provides and the insights breach reports are providing, say Deloitte consultants Continue Reading

By

• Warwick Ashford, Senior analyst

ICO to support GDPR certification schemes

The UK data protection watchdog is accepting enquiries from organisations considering developing GDPR certification schemes, which the ICO says could help recipients achieve competitive advantage Continue Reading

By

• Warwick Ashford, Senior analyst

École Hôtelière de Lausanne puts Amelia the robot at its core

When Switzerland-based hospitality school EHL began to automate processes, it was met with staff inertia, but that all changed after its benefits became clear Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Challenges of segregation

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Mike Gillespie

Identity custodians needed in digital era

Digital identity systems will fail if they do not take humans into account, warns identity innovator, suggesting that a ‘digital guardian’ could help overcome most of these challenges Continue Reading

By

• Warwick Ashford, Senior analyst

GozNym bust underlines cyber crime threat

A criminal network using GozNym malware has been shut down in an international law enforcement operation, but others are still operating, underlining the need for vigilance, warns a security expert Continue Reading

By

• Warwick Ashford, Senior analyst

Vulnerability assessment done. Now what?

Vulnerability assessment establishes the current state of an organisation’s cyber security, but to meet industry best practices, companies should go beyond that to achieve continuous improvement Continue Reading

By

• Sam Bocetta

Fujitsu sets out to restore trust in technology

Trust in technology, how to recapture it, and how to ensure AI doesn’t overstep its bounds were the big messages on the opening day of Fujitsu Forum in Tokyo Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft working to support decentralised identity

Microsoft is among the big tech players aiming to help enable personalisation of products and services without putting privacy at risk Continue Reading

By

• Warwick Ashford, Senior analyst

Implement multifactor authentication, urges expert panel

Multifactor authentication should be a top priority for organisations to defend users from cyber attacks, coupled with zero-trust architecture and artificial intelligence-based technologies, says expert panel Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Understanding tech is key to effective data segregation

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Petra Wenham

Security Think Tank: How to realise the benefits of security zoning

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Paddy Francis

Security standard for surveillance cameras set for launch

A long-overdue cyber security standard for the manufacturer of surveillance cameras is on track for an official launch in June Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Benefits and challenges of security segmentation

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Maxine Holt, Omdia

Debugging bug bounty programmes

Bug bounty programmes have recently become a popular method of vulnerability management, but poor programme management can lead to development teams becoming overwhelmed and bugs being missed Continue Reading

By

• Peter Ray Allison

Security Think Tank: Surviving the existential cyber punch, part 3

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Gregory Touhill, ISACA

Key lessons from an ethical hacker

Understanding hacker techniques and processes is the best way to defend against cyber attacks, and focusing on business risks is the best way to get security budget, according to an ethical hacker Continue Reading

By

• Warwick Ashford, Senior analyst

Dutch businesses not yet implementing NIS Directive

Little urgency to comply with the Network and Information Systems Security Act, which seeks to protect the Netherlands’ vital infrastructure and digital services from cyber attack Continue Reading

By

• Kim Loohuis

Northern Ireland generating cyber security knowledge and jobs

Northern Ireland is establishing itself as an international hub of cyber security research and innovation, providing growing employment opportunities Continue Reading

By

• Warwick Ashford, Senior analyst

Time to start thinking about AI regulation, says KuppingerCole

Organisations and individuals should think about regulating artificial intelligence to avoid sleepwalking into a future regulated by these technologies, says analyst Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals targeting C-suite, DBIR shows

Executives and cloud-based services are gaining popularity as targets for cyber criminals, according to the latest data breach investigations report Continue Reading

By

• Warwick Ashford, Senior analyst

Greater Manchester invites bidders for public sector broadband

£32m tender request will enable ultrafast full-fibre connectivity to more than 1,300 public sector sites in Greater Manchester Continue Reading

By

• Alex Scroxton, Security Editor

Zero trust: A 21st century security model

Traditional corporate security models date back to a time when there were fewer, lower-level threats, but a zero trust model is better suited to the 21st century, according to the originator of the idea Continue Reading

By

• Warwick Ashford, Senior analyst

Norsk Hydro urges caution as it counts cost of cyber attack

Norwegian aluminium giant Norsk Hydro is urging partners to be cautious in the wake of a damaging ransomware attack in March as financial impact estimates come in above initial estimates Continue Reading

By

• Warwick Ashford, Senior analyst

Firms urged to embrace positive security trends to win cyber war

Modern cyber security challenges overshadow the information security successes of the past, but several positive trends are emerging as defenders come to grips with new threats, says Deloitte Continue Reading

By

• Warwick Ashford, Senior analyst

Microservices introduce hidden security complexity, analyst warns

Microservice architecture – an approach to application development in which applications are built as a suite of modular services – simplifies development but complicates security, says KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses unprepared for cyber breaches

Study shows many organisations lack IT security and operations basics, including visibility across their IT operations Continue Reading

By

• Warwick Ashford, Senior analyst

BSA releases framework for secure software

Software industry advocacy group releases framework to facilitate flexible and comprehensive software security assessments Continue Reading

By

• Warwick Ashford, Senior analyst

Get more proactive on cyber security, says ex Europol chief

Business needs to get more proactive, collaborative, resilient and analytical to manage cyber risks posed by cyber criminals down to acceptable levels, says former Europol chief Continue Reading

By

• Warwick Ashford, Senior analyst

UK gears up for new laws on IoT security

The UK plans to introduce measures to require that basic cyber security features are built into internet-connected devices Continue Reading

By

• Warwick Ashford, Senior analyst

HPE to launch Cloud Volumes in UK and Ireland

HPE Cloud Volumes will offer enterprise-class block storage for use with AWS and Azure compute plus a replication store for backup and disaster recovery from the end of May Continue Reading

By

• Antony Adshead, Storage Editor

Cyber criminals increase use of fileless attacks

Fileless attacks are increasingly popular with cyber criminals, while Russia and China top the league of nation state data exfiltrators, threat data shows Continue Reading

By

• Warwick Ashford, Senior analyst

Most businesses vulnerable to supply chain cyber attacks

UK firms trail the leaders US and Germany in knowing the most about their partners’ cyber security practices, but most companies globally are in the dark about this growing source of vulnerabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Nearly half of UK IT pros report serious data breaches

Integration of security systems and employee training recognised as key ways to reduce the growing severity of data breaches Continue Reading

By

• Warwick Ashford, Senior analyst

Does the UK government want to support tech SMEs in 'Global Britain' or not?

The reluctance of the government to commit to continued support for UK tech SMEs overseas is baffling Continue Reading

By

• Julian David, TechUK

Privacy and data protection an opportunity, says entrepreneur

Organisations should see data protection and privacy compliance as an opportunity to build trust with customers, according to startup One.Thing.Less Continue Reading

By

• Warwick Ashford, Senior analyst

Fix the basics first, then worry about AI, advise experts

The freedom of the internet is at risk, with the cyber arms race and the industrialisation of hacking are set to continue as attackers move up the value chain to target trust mechanisms, threat experts predict Continue Reading

By

• Warwick Ashford, Senior analyst

Ofcom must rethink rural broadband USO, says Lords report

There are still serious concerns about whether or not the 10Mbps broadband USO is fit for purpose, and Ofcom needs to take account of them, according to The House of Lords Select Committee for the Rural Economy Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Surviving the existential cyber punch part 2

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Gregory Touhill, ISACA

UK up for cyber challenge but work to be done, says minister

Lidington says National Cyber Security Strategy has “revolutionised the UK’s fight against cyber threats” Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC and ICO pledge to support data breach victims

The UK’s cyber security agency and privacy watchdog have agreed to work together to improve support for data breach victims and enhance cyber guidance Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC looks to industry to scale Active Cyber Defence

The national cyber security agency is calling on wider government organisations as well as industry to help scale automated cyber attack blocking systems country-wide Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile phones and health: is 5G being rolled out too fast?

European countries are rolling out 5G mobile communications at breakneck speed as they seek to gain a competitive edge over the US and Asia. But some scientists have raised questions about the effects of 5G mobile phone radiation on public health and are calling for a precautionary approach Continue Reading

By

• Crina Boros
• Investigate Europe
• Bill Goodwin, Computer Weekly

NCSC to scale up intelligence sharing, says GCHQ director

The GCHQ director has outlined the agency’s cyber security mission in the third decade of the internet age at CyberUK, promising to scale up the sharing of declassified cyber intelligence with industry Continue Reading

By

• Warwick Ashford, Senior analyst

Casual collaboration comms pose security risk, survey shows

UK employees have a worryingly casual attitude to workplace communications, underling the need for employers to take steps to counter related cyber attack vulnerabilities Continue Reading

By

• Warwick Ashford, Senior analyst

WannaCry hero pleads guilty, urges others to stay on ‘good side’

Briton hailed as WannaCry hero finally pleads guilty to charges of writing and distributing malware, but urges security researchers to stay away from the “dark side” Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC urges better online security practices

UK cyber security agency is urging citizens to improve online safety and password security after research reveals most-hacked passwords and a survey exposes gaps in online security Continue Reading

By

• Warwick Ashford, Senior analyst

20 firms join Tech Nation’s cyber security scale-up programme

Tech Nation scale-up programme is designed to boost the UK’s cyber sector, accelerate the growth of its top companies and build a robust, cross-industry network Continue Reading

By

• Warwick Ashford, Senior analyst

State-sponsored hackers are hijacking DNS, researchers warn

A DNS-hijacking campaign targeting the Middle East and Africa may lead to actors more broadly attacking the global DNS system Continue Reading

By

• Warwick Ashford, Senior analyst

Middle East CIOs optimistic as budgets increase and digital transformations expand

Cyber security and risk management will see the biggest increase in spending, but digital transformation of businesses is a major driver of investment, survey shows Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Morrisons to launch fresh appeal against breach liability ruling

Supermarket chain Morrisons is to launch a second appeal against a High Court ruling that found it liable for a data leak by a former employee Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Surviving the existential cyber punch

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Gregory Touhill, ISACA

Energy industry needs to up cyber defences, warns report 

Cyber threat actors are advanced and persistent, but firms in the energy industry are using outdated systems and technology to save money, putting them at risk of cyber attacks, warns F-Secure report Continue Reading

By

• Warwick Ashford, Senior analyst

Zero trust is about more than products

The zero trust security model is more than just products and network segmentation, it’s an architectural design principle with identity at its core that needs to be applied enterprise-wide, says KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Seven steps to manage risk of catastrophic cyber attack

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Simon Persin, Turnkey Consulting

Automation will bring job security, say most IT security pros

Most security professionals believe that although automation can support humans, it will not result in a reduction in job opportunities, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC seeks new breed of cyber security startups

The UK intelligence community is seeking to promote a new breed of technology startup to help detect, respond to and facilitate rapid recoveries from cyber attacks on the UK Continue Reading

By

• Warwick Ashford, Senior analyst

Broadband upgrade improves response times for cave rescue team

The South and Mid Wales Cave Rescue Team has switched on a new ultrafast broadband connection to help its members react more quickly in life-threatening emergencies Continue Reading

By

• Alex Scroxton, Security Editor

How botnets pose a threat to the IoT ecosystem

While connected devices are transforming our personal and working lives in a multitude of ways, they are also a growing security risk – attackers are hijacking these devices and turning them into internet of things botnets Continue Reading

By

• Nicholas Fearn

Security Think Tank: Cyber attack survival not a matter of luck

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Paddy Francis

Bounty UK fined £400,000 for sharing personal data unlawfully

UK pregnancy and parenting club fined for “unprecedented” level of unauthorised sharing of personal data by operating as a data broking service Continue Reading

By

• Warwick Ashford, Senior analyst

Police local cyber crime units get multimillion pound boost

UK policing marks the completion of the local phase of a national cyber crime programme to complement regional and national response capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Aim for integrated resilience, continuity and recovery

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Mike Gillespie

Most organisations still lack incident response plans

Most companies lack incident response plans, others fail to test them and nearly half are not GDPR compliant, but some report improved security through automation, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

A quarter of phishing emails bypass Office 365 security

Cloud-based email is leaving enterprises vulnerable to phishing attacks capable of giving cyber criminals access to a wide range of critical data, warn security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Why cyber security needs to be prioritised at board level

Despite the rising number of headline-grabbing security breaches, many company executives are still not prioritising cyber security in the boardroom Continue Reading

By

• Tom Kranz, Cyber Lab

UK councils team up to boost cyber security

Three UK councils and data analysis firm Splunk have teamed up to improve cyber defence capabilities and maintain their security systems Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: BC/DR plan key to cyber attack survival

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Petra Wenham

GCHQ cyber courses for teens recognised by qualification board

The Scottish Qualifications Authority has accredited courses pioneered by GCHQ’s National Cyber Security Centre to teach teenagers about cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware getting more targeted, warns Flashpoint

Ransomware attacks are becoming more targeted and designed to infect different sized organisations in specific industries and regions, say security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR at a critical stage, says information commissioner

The ICO is calling on data protection officials to help kick off the next phase of the GDPR by embedding sound data governance at its annual conference, where another DPO was recognised for excellence Continue Reading

By

• Warwick Ashford, Senior analyst