IT for small and medium-sized enterprises (SME)

UK ranks third in OECD Digital Government Index

The UK has dropped from overall second to third place in the international digital government survey, but fails to feature in the top 10 countries when it comes to having a data-driven public sector Continue Reading

By

• Lis Evenstad

Bugcrowd sees surge in vulnerability submissions, led by public sector

Crowdsourced vulnerability disclosure and bug bounty platform Bugcrowd says it saw a 151% uptick in submissions related to government and public sector organisations in 2023 Continue Reading

By

• Alex Scroxton, Security Editor

WebKit vulnerability sparks Apple’s first major security update of 2024

A zero-day in the open source WebKit browser engine that powers Safari has sparked Apple’s first major patch roll-out of the new year Continue Reading

By

• Alex Scroxton, Security Editor

AI will heighten global ransomware threat, says NCSC

The benefits of artificial intelligence to cyber criminals being well-known, the NCSC now assesses it’s likely AI will soon be widely used to enhance ransomware attacks Continue Reading

By

• Alex Scroxton, Security Editor

Treat cyber risk like financial or legal issue, says UK government

UK government and NCSC launch proposed code of practice on cyber security governance to help directors and business leaders toughen their defences Continue Reading

By

• Alex Scroxton, Security Editor

Leak of 26 billion records may prove to be ‘mother of all breaches’

The discovery of a dataset comprising 26 billion stolen records may prove to be record-breaking in both its size and the danger it poses to ordinary people Continue Reading

By

• Alex Scroxton, Security Editor

Biometric revolution in IAM: The future of authentication

The IAM landscape is experiencing profound change thanks to the advent of biometrics. Learn about the latest advantages and key benefits of biometrics in identity Continue Reading

By

• Isla Sibanda

The human toll of ransomware: how IT pros suffer during incidents

Any ransomware attack causes significant challenges for a business or organisation going through such incident. But ransomware attacks also have tremendous impact on the staff – especially IT teams – working on mitigating the attack’s effect Continue Reading

By

• Pia Hüsch, Jamie MacColl and Gareth Mott

Cisco fixes high-impact flaw in unified comms platform

Cisco unified comms customers are urged to patch a critical vulnerability in Unity Connection, a messaging and voicemail product Continue Reading

By

• Alex Scroxton, Security Editor

Windows Kerberos, Hyper-V vulns among January Patch Tuesday bugs

Microsoft starts 2024 right with another slimline Patch Tuesday drop, but there are some critical vulns to be alert to, including a number of man-in-the-middle attack vectors Continue Reading

By

• Alex Scroxton, Security Editor

Babuk Tortilla ransomware decryptor made available

A joint effort between Cisco Talos, Avast and the Dutch police will bring relief to many victims of a variant of the Babuk ransomware known as Tortilla Continue Reading

By

• Alex Scroxton, Security Editor

Fujitsu gets stay of execution as MPs support exoneration of wrongfully convicted subpostmasters

Fujitsu will have to wait until the end of the Post Office Horizon scandal public inquiry to hear how MPs will punish it Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Artificial intelligence to the front in Sweden’s National Technology Strategy

Sweden focuses in on artificial intelligence in its latest far-reaching national IT strategy Continue Reading

By

• Gerard O'Dwyer

Decoding zero trust in endpoint security: A practical guide for CISOs

The exponential increase in endpoints has vastly expanded the average organisation’s attack surface – address this by applying zero-trust best practice to endpoints Continue Reading

By

• Isla Sibanda

Top 10 cyber crime stories of 2023

Ransomware gangs dominated the cyber criminal underworld in 2023, a year that will prove notable for significant evolutionary trends in their tactics Continue Reading

By

• Alex Scroxton, Security Editor

Beyond the office walls: Safeguarding remote workers from attack

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Paul Lewis, Nominet

Zero-trust principles: Your gateway to securing remote workers

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Michael Healey, Turnkey Consulting

Evolving best practice: What next for securing remote work?

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Scott Burman

ALPHV/BlackCat operation down, but maybe not out

Multinational law enforcement has targeted the operations of the notorious ALPHV/BlackCat cyber extortion gang, but the group’s members appear to remain defiant Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Testing to improve remote worker security

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Rowland Johnson

Security Think Tank: Anytime, anywhere access is achievable

Remote working has enabled people to work from almost anywhere but has piled pressure on cyber pros. Three years after Covid, how are best practices evolving and what can we expect going forward? Continue Reading

By

• Tim Holman, 2-sec

Microsoft’s Christmas present for cyber teams: no zero-days

Barely 30 vulnerabilities, and no zero-days, have been fixed in the final Patch Tuesday drop of 2023 Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Mark McClain, SailPoint Technologies

SailPoint founder and CEO Mark McClain reflects on how the concept of identity has evolved over the past 20 years, and points to rapid evolution still to come Continue Reading

By

• Alex Scroxton, Security Editor

India's Hexaware creates hundreds of jobs in UK

Hexaware opens IT services operation in Birmingham, with a plan to recruit 250 people in the region by 2025 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Over half of SME cyber incidents now ‘malware-free’

The age of malware-driven cyber attacks may have peaked, at least when it comes to incidents affecting small and medium sized enterprises Continue Reading

By

• Alex Scroxton, Security Editor

Engineers slash RPO/RTO as they swap tape for Rubrik backup

Frankham Group ditches archaic tape backup and deploys Rubrik backup appliances and remote disaster recovery facility. Meanwhile, the engineering group assesses a move to the cloud Continue Reading

By

• Antony Adshead, Storage Editor

Netherlands starts building its own AI language model

Dutch government allocates €13.5m to develop an open artificial intelligence language model according to national values and guidelines. Continue Reading

By

• Kim Loohuis

UK science minister announces quantum tech funding and collaboration plans

Science minister George Freeman announces £14m in funding for quantum technology projects as government signs collaboration agreements with Australia and the Netherlands Continue Reading

By

• Lis Evenstad

Pension changes set to boost UK tech

UK technology and science startups could benefit from changes to UK pension funds Continue Reading

By

• Cliff Saran, Managing Editor

Darktrace CEO Poppy Gustafsson on her AI Safety Summit goals

As the AI Safety Summit at Bletchley Park takes place, Computer Weekly caught up with Darktrace CEO Poppy Gustafsson to find out what one of the UK’s most prominent AI advocates wants from proceedings Continue Reading

By

• Alex Scroxton, Security Editor

Suzy Lamplugh Trust treads path to improved cyber resilience

Personal safety charity enlists the support of the London Cyber Resilience Centre to improve staff awareness and strengthen its overall cyber resilience Continue Reading

By

• Alex Scroxton, Security Editor

Five Eyes chiefs warn of Chinese spying campaign to steal high-tech secrets

Intelligence chiefs warn high-tech companies and universities they may be the target of attempts by the Chinese Communist Party to steal technology secrets Continue Reading

By

• Bill Goodwin, Computer Weekly

AI vs software outsourcing: An opportunity or a threat?

While artificial intelligence offers unprecedented opportunities for growth, efficiency and automation, it also raises pertinent questions about the future of software outsourcing Continue Reading

By

• Maxim Ivanov

Manchester police data breach a classic supply chain incident

The developing data breach at Greater Manchester Police follows a cyber attack on the systems of a key supplier of ID services to the force Continue Reading

By

• Alex Scroxton, Security Editor

Patch Tuesday: Microsoft fixes zero-days in Word and Streaming Service

September 2023 brings a light Patch Tuesday, with two zero-days and five critical vulnerabilities listed in the latest release Continue Reading

By

• Alex Scroxton, Security Editor

European enterprises to spend more on generative IT to close gap on US

European organisations are upping their spending on generative AI innovation, but face challenges recruiting the right people to support this Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Interview: Ashish Gupta, head of EMEA, HCLTech

It’s not just enterprises that changed their operating models during and after Covid, but also the suppliers that took them on the journey, HCLTech Europe’s head explains Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ethical perspectives on ChatGPT

In the final of three essays, Marc Steen uses ChatGPT as a case study for how to use different ethical perspectives, and practical steps people can take to start incorporating ethics into their projects Continue Reading

By

• Marc Steen, TNO

CIO perceptions of vendor AI marketing

With all the recent press coverage, it's not surprising to see IT vendors clamouring to message around their AI creds. In a survey by Freeform Dynamics and the CIO WaterCooler, a bunch of IT ... Continue Reading

By

• Dale Vile, Freeform Dynamics

Cyber attacks in 2023 develop quicker as average dwell times plummet

The median attacker dwell time shrunk from 10 to eight days in the first seven months of 2023, and in the case of ransomware attacks it is down to just five days Continue Reading

By

• Alex Scroxton, Security Editor

Innovative UK SMEs spend half of turnover on tech

UK SMEs are increasing spending on technology, with dedicated IT teams set up to enable them to keep pace with tech change Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Alternative perspectives: relational and virtue ethics in tech

In the second of three essays, Marc Steen explores the benefits of grounding ethical considerations in an understanding of social and power dynamics, and how relational and virtue ethics can help Continue Reading

By

• Marc Steen, TNO

Ethics as a process of reflection and deliberation

In the first of three essays, Marc Steen outlines a three-step process for how organisations can practically integrate ethics into their IT projects and how different ethical perspectives can inform tech development Continue Reading

By

• Marc Steen, TNO

Plexal takes on new cohort for cyber security leadership scheme

Six more cyber security startup founders have been selected to take part in Plexal’s latest Cyber Runway Ignite programme, which is designed to help them develop their leadership skills Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Mayor of London announces startup funding

Seven technology startups working on the Mayor of London’s Poverty Prevention Challenge will receive up to £50,000 each to further develop their proposals, designed to help alleviate the cost-of-living crisis for the capital’s most vulnerable Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

EU formally grants data adequacy to US

The European Commission has formally granted the US data adequacy, allowing companies and organisations to freely transfer personal data across the Atlantic via the EU-US Data Privacy Framework. But privacy activist Max Schrems has already committed to legally challenging the decision Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Scotland’s Techscaler programme joins forces with CivTech

The partnership between the scaler programme and the innovation accelerator means CivTech alumni companies will be offered Techscaler membership and gain access to its technology hubs, education initiatives and support Continue Reading

By

• Lis Evenstad

GDPR tax reclaim scheme preys on fears of SMEs

IT suppliers are a target of companies offering a tax reclaim scheme that preys on small businesses’ fears around General Data Protection Regulation compliance Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

SMB (small and medium-sized business or small and midsize business)

SMB is an abbreviation for a small and medium-sized business, sometimes called a small and midsize business. Continue Reading

By

• Katie Terrell Hanna

Dutch government puts up €123m to address shortage of ICT workers

Financial injection aimed at improving cooperation between vocational education and business in the Netherlands, and making the tech professions more attractive Continue Reading

By

• Kim Loohuis

CDEI publishes portfolio of AI assurance techniques

The UK’s Centre for Data Ethics and Innovation has published a variety of case studies to show how different assurance techniques can build and maintain trust in artificial intelligence systems Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Government and industry figures meet to discuss AI regulation

Tech industry figures are broadly supportive of the need for artificial intelligence to be regulated, but despite growing consensus, there is still disagreement over what effective AI regulation looks like Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

UKtech50 2023: The most influential people in UK technology

Computer Weekly has announced the 13th annual UKtech50 – our definitive list of the movers and shakers in the UK tech sector Continue Reading

By

• Lis Evenstad

UKtech50 2023 winner: Michelle Donelan/Chloe Smith, secretary of state, DSIT

Computer Weekly looks at the achievements and successes of the Department for Science, Innovation and Technology, as its secretary of state is recognised as the most influential person in UK technology for 2023 Continue Reading

By

• Lis Evenstad

Google launches hacker-backed SME security training scheme

Citing research that shows almost half of SMEs are struggling to recruit cyber security specialists, Google is launching a programme designed to upskill more people to fill thousands of vacant roles Continue Reading

By

• Alex Scroxton, Security Editor

TechUK publishes ‘UK tech plan’ for next government

Technology businesses are calling on UK politicians to devise a ‘comprehensive, forward-thinking strategy’ to realise the benefits of technology ahead of the next general election Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Two-thirds of all 2022 breaches resulted from spear phishing

Research by Barracuda Networks has found that, despite the low volume of spear-phishing attempts, the attacks are highly successful and have major consequences Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Plexal launches Cyber Runway 3.0 accelerator programme

The latest iteration of Plexal’s government-backed cyber security startup accelerator will run four work streams to boost startups at various stages of maturity and growth Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

UKtech50 2023: Vote for the most influential person in UK technology

Our judges have selected the top 50 leaders from a shortlist of more than 300 people – now it’s your chance to tell us who you think is the most influential person in UK technology Continue Reading

By

• Lis Evenstad

UKtech50 2023: The longlist of the UK’s influential tech leaders

Each year, Computer Weekly launches a search for the most influential people in UK IT, asking the tech community who it thinks should be in the top 50 – here is the longlist of everyone nominated for 2023 Continue Reading

By

• Lis Evenstad

IT Priorities 2023: Budget optimism among EMEA IT leaders

IT leaders across the EMEA region are optimistic that their budgets will increase over the coming year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CyberUK 23: NCSC launches Cyber Advisor service for SMEs

The UK’s NCSC has launched an industry assurance scheme designed to address the needs of SMEs, and is calling for potential advisors to step up and help out Continue Reading

By

• Alex Scroxton, Security Editor

Reduced spending on cloud services weighs European IT services market down

Reduced spending on cloud services in the EMEA region meant a year-on-year drop in total IT and BPO services spend Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

April Patch Tuesday fixes zero-day used to deliver ransomware

A zero-day in the Microsoft Common Log File System that has been abused by the operator of the Nokoyawa ransomware is among 97 vulnerabilities fixed in April’s Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

UKtech50 2023: Help us find the most influential people in UK IT

Computer Weekly’s annual search for the 50 most influential people in UK IT is back – let us know who you would like to nominate for this year’s list Continue Reading

By

• Lis Evenstad

Quick-acting Rorschach ransomware appears out of nowhere

Emergent Rorschach ransomware strain is highly advanced and quite unusual in its capabilities, warn researchers, who say they have been unable to link it to any other known strains Continue Reading

By

• Alex Scroxton, Security Editor

Developers say Apple and Google are running app store monopolies

Coalition for App Fairness and its members speak to Computer Weekly about alleged anti-competitive practices of Apple and Google in their respective app stores, and call for urgent regulatory action to level the playing field Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Threat researchers dissect anatomy of a Royal ransomware attack

Trellix researchers share the inside track on a Royal ransomware attack that hit one of its customers in late 2022 Continue Reading

By

• Alex Scroxton, Security Editor

Generative AI central to Accenture’s tech vision

Generative AI will play a central role over the next 10 years as the digital and physical world become more and more integrated Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Apple security updates fix 33 iPhone vulnerabilities

A larger-than-usual update to Apple’s mobile operating system fixes more than 30 distinct vulnerabilities, including two serious issues that may potentially affect device kernels Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware attacks up 45% in February, LockBit responsible

NCC Group says it observed a surge in ransomware attacks in February, with LockBit, BlackCat and BianLian all highly active Continue Reading

By

• Alex Scroxton, Security Editor

National Crime Agency sting operation infiltrates cyber crime market

The UK National Crime Agency has tricked thousands of potential cyber criminals into registering with a fake website pretending to offer tools for creating DDoS attacks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Tech Nation says UK needs roadmap to help tech sector reach $4tn

In its final report published before shutting for good in April, Tech Nation has outlined success of the UK’s tech sector to date, and explores at a high level what needs to be done to ensure massive future growth Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Ransomware gangs harass victims to ‘bypass’ backups

Analysis reveals how cyber criminal gangs are turning to extensive, targeted harassment campaigns to force victims to pay up, even if their backups are in good order Continue Reading

By

• Alex Scroxton, Security Editor

NCSC launches cyber check-up tools for SMEs

The NCSC has launched two new security services aimed at SMEs that lack the resources to address cyber issues, and may underestimate their vulnerability to attack Continue Reading

By

• Alex Scroxton, Security Editor

BBC cracks down on TikTok after review

The BBC is asking staff not to install TikTok on corporate-owned devices without a justified business purpose, although its use will still be allowed to share media content with its audiences Continue Reading

By

• Alex Scroxton, Security Editor

UK TikTok ban gives us all cause to consider social media security

The UK government’s ban on TikTok should give all organisations cause to look into what information social media platforms are collecting on us, and what they are using it for Continue Reading

By

• Alex Scroxton, Security Editor

BEC attacks doubled in 2022, outstripping ransomware

Massive growth in the volume of Business Email Compromise or BEC attacks was linked to a surge in successful phishing campaigns, according to data from Secureworks Continue Reading

By

• Alex Scroxton, Security Editor

Budget 2023: startups extra funding via R&D relief and pensions

UK government aims to promote increased investment in research and development-intensive startups through tax relief measures, relaxed pension rules, and new investment zones Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Mandiant: Dangerous MS Outlook zero-day widely used against Ukraine

A zero-day vulnerability in Microsoft Outlook that was fixed in the March Patch Tuesday update has likely been actively exploited by Russian actors for a year or more, and its use will now spread rapidly Continue Reading

By

• Alex Scroxton, Security Editor

Chinese Silkloader cyber attack tool falls into Russian hands

A loader tool used by Chinese cyber criminals seems to have been enthusiastically taken up in recent weeks by Russian ransomware operators Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft patches Outlook zero-day for March Patch Tuesday

A highly dangerous privilege escalation bug in Outlook is among 80 different vulnerabilities patched in Microsoft’s March Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

As Covid fades away, what’s the future of remote work in Europe?

Many IT leaders are still supporting some form of work from home, and a trend is beginning to take shape in Europe Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Technology minister Michelle Donelan defends data reforms

Secretary of state Michelle Donelan has defended the government’s new data reforms as providing certainty for businesses while simultaneously retaining high standards of data protection, but industry figures are having mixed reactions Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

UK government introduces revised data reform bill to Parliament

Designed in close collaboration with technology businesses, the UK government is re-introducing an updated version of its Data Protection and Digital Information Bill to Parliament, which civil society groups say upends key safeguards Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

White House unveils National Cybersecurity Strategy

The strategy will focus on ensuring closer collaboration on cyber security between government and industry, while giving software and other tech companies a bigger role in combatting threats due to their resources and expertise Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Training can no longer be a compliance exercise

Historically, security training has tended to take a compliance-based focus, a ‘tick-box’ exercise using generic, off-the-shelf courses. This needs to change, says Hayley Watson of Turnkey Consulting. Continue Reading

By

• Hayley Watson, Turnkey Consulting

Cyber training in 2023 needs to drive measurable change

2023 will see more focus on security training programmes that not only provide employees with an understanding of the risks they face but more importantly drive measurable behavioural change, says PA Consulting’s Richard Allen Continue Reading

By

• Richard Allen

WithSecure proposes ‘undo’ button for ransomware

WithSecure’s Activity Monitor technology supposedly overcomes the shortcomings of sandbox test environments, and may be able to stop ransomware attacks from ever happening Continue Reading

By

• Alex Scroxton, Security Editor

Santander SME platform harnesses Salesforce

Bank platform that helps UK small and medium-sized enterprises expand export opportunities is built on cloud technology from Salesforce Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK HSE to launch regulatory sandbox for industrial safety tech

The sandbox will see the regulator work with industry and tech startups to accelerate the development and adoption of a range of safety-related technologies, with a particular emphasis on data and analytics Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Researchers find new bug ‘class’ in Apple devices

A group of vulnerabilities in Apple products that stem from the ForcedEntry exploit used by spyware firm NSO constitutes a whole new class of bug, say researchers at Trellix Continue Reading

By

• Alex Scroxton, Security Editor

Dutch cyber security professionals experience stress akin to soldiers in war zone, claims expert

Cyber attacks are taking a heavy toll on Dutch IT professionals, with over a third reporting that their mental health suffers as a result Continue Reading

By

• Kim Loohuis

Half of cyber leaders to switch jobs by 2025, citing stress

A substantial number of cyber security leaders are plotting their great escape, saying the industry is leaving them too stressed to go on, according to a study Continue Reading

By

• Alex Scroxton, Security Editor

Cyber security training: Insights for future professionals

Future cyber security professionals need soft skills as well as technical ones, says security educator Sudeep Subramanian Continue Reading

By

• Sudeep Subramanian

Security Think Tank: New trends and drivers in cyber security training

Self-paced, interactive, bite-sized learning is becoming the optimum path for cyber security training in the workplace, says John Tolbert of KuppingerCole Continue Reading

By

• John Tolbert, KuppingerCole

Multi-purpose malwares can use more than 20 MITRE ATT&CK TTPs

Report warns of the development of increasingly sophisticated, multi-purpose malwares, and calls on defenders to play close attention to the MITRE ATT&CK framework to ward them off Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft fixes three zero-days in February update

February’s Patch Tuesday update contains fixes for three previously unpublicised zero-days in Microsoft Office, Windows Graphics Component and Windows Common Log File System Driver Continue Reading

By

• Alex Scroxton, Security Editor

Vidar, nJRAT re-emerge as prominent malware threats in January

Trojans and infostealers once again dominate the list of most commonly observed threats, according to Check Point’s latest telemetry Continue Reading

By

• Alex Scroxton, Security Editor

How to protect your business from fraud during a recession

This winter, the chilly winds of a global recession have fraudsters turning up the heat. PJ Rohall of SEON Fraud Fighters shares some guidance on how to bundle up against fraud Continue Reading

By

• PJ Rohall