IT for small and medium-sized enterprises (SME)

Full-fibre within reach of 2.5 million homes and businesses

Access to full-fibre broadband is approaching 10% of properties in the UK Continue Reading

By

• Alex Scroxton, Security Editor

Smart meter roll-out delayed to 2024

The government has been forced to put the planned completion date for its Smart Meter Programme back from the end of next year to 2024 Continue Reading

By

• Alex Scroxton, Security Editor

The five software testing techniques every software developer should know about

Five simple testing techniques that will help developers test their software systematically, thoroughly and quickly Continue Reading

By

• Brian Hambling

Ecuador citizens’ data breach holds lessons for enterprises

What caused the mass breach of Ecuadorian citizens’ data, and what can businesses learn from it? Continue Reading

By

• Alex Scroxton, Security Editor

Ditch hoodies and hackers to encourage diverse security recruitment

The cyber security industry needs to address a systemic image problem if it is to succeed in recruiting more diverse teams Continue Reading

By

• Alex Scroxton, Security Editor

When AIs go to war: Autonomous cyber weapons ‘inevitable’

CISOs must start thinking about how to engage with intelligent, adaptive, non-human attackers, says Trend Micro’s Rik Ferguson Continue Reading

By

• Alex Scroxton, Security Editor

Industry opposition to no-deal Brexit hardens, says TechUK

A survey of TechUK members has found that 71% believe a no-deal Brexit at the end of October will negatively affect them in spite of their preparations Continue Reading

By

• Alex Scroxton, Security Editor

The right way to get on with building UK tech success is to get a Brexit deal now

The UK technology sector does not want a no-deal Brexit, and recognises the damage it would cause. If we're leaving the EU, the Prime Minister needs to get a deal Continue Reading

By

• Julian David, TechUK

Mirai descendants dominate IoT threat environment

Attacks leveraging compromised IoT devices are growing in size, scale and frequency, report security experts at F-Secure and Trend Micro, with Mirai-related botnets a major source of trouble Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: The case for blockchain-based identity

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Richard Hunt, Turnkey Consulting

Social engineering a factor in virtually all cyber attacks, report claims

Almost every single cyber attack will, at some stage, require a human to be tricked into doing something, according to research by Proofpoint Continue Reading

By

• Alex Scroxton, Security Editor

Loyal Dutch IT professionals not being rewarded enough, survey shows

Companies warned they could lose loyal IT staff because salary rises do not match those on offer from rival employers Continue Reading

By

• Kim Loohuis

Security Think Tank: Too soon to dismiss blockchain in cyber security

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Maxine Holt, Omdia

Security Think Tank: Use blockchain for integrity and immutability checks

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Eoin Keary

Latest Facebook security lapse exposes millions to account hijack

18 million UK users are among the more than 400 million at risk of account hijacking after phone numbers linked to their Facebook accounts were found in an open online database Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Blockchain is not for everyone, so look carefully before you leap

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Paddy Francis

Check Point warns of Android phishing attacks

Researchers at Check Point have identified a security flaw in Android-based smartphones that exposes vulnerable users to phishing attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Blockchain utility depends on business type and cost

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Petra Wenham

Businesses need to keep investing in tech and hope to avoid a no-deal Brexit

A no-deal Brexit could have serious consequences for the UK tech sector and skills base, making it more difficult to recruit technology specialists and hire freelancers Continue Reading

By

• Albert Ellis, Harvey Nash Group

TrickBot Trojan switches to stealthy Ostap downloader

Operators of the TrickBot banking Trojan have switched to a new downloader to evade detection and analysis for a high-volume malicious spam campaign targeting business, researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals tap into web social engineering toolkit 

Security researchers have discovered a web social engineering toolkit that enables cyber criminals to create fake update notification campaigns  Continue Reading

By

• Warwick Ashford, Senior analyst

CISOs think cloud safer, but security fears remain

The majority of information security leaders think cloud is now safer than on-premise, but security fears remain, with recently breached and highly regulated organisations most concerned, poll reveals Continue Reading

By

• Warwick Ashford, Senior analyst

At least 47,000 servers vulnerable to remote attack

All organisations using Supermicro servers are being urged to update firmware to block remote attacks exploiting vulnerabilities in baseboard management controllers Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Risk mitigation is key to blockchain becoming mainstream

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Mike Yeomans, Information Security Forum

Nearly £1m of EU funding to boost tech skills in UK SMEs

An initiative led by the Department for Work and Pensions will focus on enhancing skills in rural locations to unleash competitiveness in areas such as agritech and biorenewables Continue Reading

By

• Angelica Mari

Security Think Tank: Blockchain – balance risk and opportunity for smart security

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• RV Raghu, ISACA

CISOs turn to AI, detection, response and education

Information security leaders are looking to artificial intelligence, better detection and response capabilities and user education in the face of cyber threats, but need more budget, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

How to mitigate IoT security risks to tap business benefits

Security concerns are preventing many businesses from adopting IoT-based technologies, but with a bit of planning, the business benefits can be realised by mitigating the risk Continue Reading

By

• Warwick Ashford, Senior analyst

Social media and enterprise apps pose big security risks

The lack of security policies in many business applications is putting enterprise data at risk and social media apps are the biggest source of malware, a poll of IT professionals reveals Continue Reading

By

• Warwick Ashford, Security Editor

UK gets first millionaire ethical hacker

Six months after the first millionaire ethical hacker was announced, five more have been recognised, including a Briton, who have collectively discovered nearly 5,000 vulnerabilities Continue Reading

By

• Warwick Ashford, Senior analyst

UK firms getting on top of IT downtime costs

Despite data breach headlines, UK firms are generally improving in their data protection, business continuity, cyber preparedness and understanding of downtime costs, study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Targeted cyber attacks, including ransomware, on the rise

Governments and healthcare institutions are prime targets of ransomware operators, a report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Mitigating social engineering attacks with MFA

The growing frequency of social engineering attacks highlights the increasing need for organisations to take steps to mitigate the effects of phishing Continue Reading

By

• Peter Ray Allison

Most UK firms ignore security in tech investments

Less than a quarter of UK firms prioritise security when investing in new technology, despite the threat of cyber attacks and data protection regulations, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware has evolved into a serious enterprise threat

Ransomware has seen a resurgence since the start of 2019, with cyber criminals changing code and tactics to target enterprises and local authorities for higher ransom payments, McAfee researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

Employees, MSPs and developers top third-party risks

Employees, managed service providers and developers are the top sources of third-party risks in terms of data security, a survey reveals, highlighting the value of workplace monitoring Continue Reading

By

• Warwick Ashford, Senior analyst

IR35 reforms: HMRC defends off-payroll rules guidance against "woeful" IPSE jibes

HMRC promises there are more preparatory materials in the pipeline to help the private sector prepare for the April 2020 IR35 rules, after IPSE brands its current guidance "woeful" Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

How to bolster IAM strategies using automation

Identity and access management processes and technologies play an important role in security strategies, but organisations and IT professionals need to ensure these strategies are robust enough to deal with new threats Continue Reading

By

• Nicholas Fearn

Majority of organisations struggling with cloud security

The majority of organisations find securing the cloud difficult and more than a quarter feel the shared security responsibility model is unclear, according to a survey of information security professionals Continue Reading

By

• Warwick Ashford, Senior analyst

Security pros reiterate warning against encryption backdoors

The majority of security professionals believe countries with government-mandated encryption backdoors are more susceptible to nation-state cyber attacks Continue Reading

By

• Warwick Ashford, Senior analyst

A helping hand from the Nordics in the eye of the GDPR storm

Nordic IT companies are well suited to supporting enterprises in their data protection projects, even though openness is more natural to them Continue Reading

By

• Matthew Staff

Cyber attackers exploiting poor cloud security

More than a third of organisations report a cyber attack on the cloud environment due to a lack of basic cloud security hygiene Continue Reading

By

• Warwick Ashford, Senior analyst

Security concerns blocking UK digital transformation

The majority of UK firms are holding off adopting new, more efficient and cost effective technology because they are failing to see cyber security as a driver of strategic value, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Human error a big risk to ICS cyber security, study shows

Despite the rise in automation, industrial processes are at risk due to human error, a report on industrial cyber security reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Buyers think SD-WAN is too expensive and complicated

Building and maintaining an SD-WAN is perceived as a complicated endeavour, and the industry’s messages are not getting through, says a new report Continue Reading

By

• Alex Scroxton, Security Editor

Even fintech startups battling to meet cyber security challenges

A study shows that most fintech startups, like most banks, are failing to address vulnerabilities in the web and mobile applications, underlining the scale of the challenge Continue Reading

By

• Warwick Ashford, Senior analyst

UK financial account takeovers up, report warns

Commercial cyber criminal services are helping to drive up the number of account takeovers, a fraud report for the first half of the year shows Continue Reading

By

• Warwick Ashford, Senior analyst

Q2 shows ransomware proliferation, Kaspersky warns

Ransomware modifications have more than doubled in the past year, the number of ransomware families has grown, and the number of attempted infections is up nearly 50% Continue Reading

By

• Warwick Ashford, Senior analyst

Passwordless enterprise already possible, says RSA

The passwordless enterprise is getting easier to attain as the security industry gears up to support a passwordless future, says RSA’s identity chief Continue Reading

By

• Warwick Ashford, Senior analyst

New approach to risk management needed, says Gartner

Most third-party risks are discovered after the initial due diligence period, Gartner study shows, highlighting the need for a new approach to risk management and the importance of effective access controls Continue Reading

By

• Warwick Ashford, Senior analyst

ICO to probe facial recognition at King’s Cross

UK privacy watchdog is to investigate whether the use of live facial recognition technology at King’s Cross complies with data protection laws Continue Reading

By

• Warwick Ashford, Senior analyst

2019 set to be another record year for data breaches

The number of data breach incidents continues to rise and looks set to reach another record this year, with the business sector first in the firing line, according to a mid-year breach report Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Data architecture and security must evolve in parallel

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Deshini Newman, (ISC)²

Publicly accessible biometric database highlights key failings

The discovery of a publicly accessible database of biometric information highlights failings by the supplier, the need for supply chain security, and the challenges of using biometric data Continue Reading

Cyber criminal collaboration intensifies

The level of cooperation between high-profile cyber threat groups has shifted up a gear, enabling a higher level of automation and making attribution more difficult, research shows Continue Reading

By

• Warwick Ashford, Senior analyst

Norman evasive cryptominer conquers networks

Cryptomining malware designed to evade detection is capable of invading every device in targeted companies, researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Data architects should be key allies of infosec pros

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Eoin Keary

What 5G applications will transform your business?

The UK’s mobile network operators have started work on their 5G roll-outs, but what applications are most likely to gain enterprise traction for the new standard? Continue Reading

By

• Rene Millman

Breach cost $53m in Q2, says Desjardins

Credit union cooperative Desjardins reveals that a data breach in June cost the company $53m in the second quarter, but that could be just the start, warn industry commentators Continue Reading

By

• Warwick Ashford, Senior analyst

UK businesses still overlooking human element in security

Most UK businesses are still failing to address the human element in cyber security as part of an integrated approach, exposing themselves unnecessarily to cyber criminal attacks, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Phishing top security threat to business

A new Telefónica security service for business shows that phishing is the most-blocked threat and smaller businesses are a popular attack target in the first two months of deployment Continue Reading

By

• Warwick Ashford, Senior analyst

Digital transformation driving security rethink

Organisations are focusing on internet of things and cloud in developing cyber defence systems, study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Balancing data accessibility with security controls

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Simon Persin, Turnkey Consulting

McAfee warns of serious security flaw in building controller

Security researchers have demonstrated how simple flaws in building controllers could allow malicious actors to manipulate control systems with devastating effect, highlighting the importance of operational technology security Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Communication, processes and tech: A new beginning for security

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Ramsés Gallego, Isaca

NCC Group warns of security risks of leading printers

Researchers uncover more than 35 vulnerabilities in six leading enterprise printers, many of which could allow access to corporate networks, underlining the need to counter security risks of embedded systems Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware a continued threat to business, report warns

Businesses are increasingly becoming the most popular targets for ransomware, which remains a top cyber threat around the world, especially in the US, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals hijacking legitimate website comms

Criminals are exploiting firms’ use of online feedback methods to distribute spam and phishing emails, security researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Security is a business, not an IT function

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Mike Gillespie

Security Think Tank: Dialogue between data architects and security leads is essential

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Paddy Francis

Shared files in the cloud are a top ransomware target

Vectra 2019 Spotlight report shows recent ransomware attacks cast a wider net to ensnare cloud, datacentre and enterprise infrastructures Continue Reading

By

• Warwick Ashford, Senior analyst

FireEye identifies dual nature Chinese cyber threat group

Security researchers have identified a China-based cyber threat group engaged in state-spored espionage in parallel with cyber criminal activities targeting multiple industries worldwide Continue Reading

By

• Warwick Ashford, Senior analyst

Most UK firms lack confidence in disaster recovery

Only a third of UK firms are confident in their ability to recover from cyber attacks and other disasters, with business continuity still relatively low on the agenda, a study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Close interdisciplinary ties are key to security integration

How can infosec professionals and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Petra Wenham

DDoS on the rise, warns Kaspersky

Security researchers at Kaspersky are among those warning business that, more than ever, mitigation of distributed denial of service attacks needs to be a key element of cyber defence strategies Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: CIA at heart of infosec-data architect partnership

How can infosec professionals and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Maxine Holt, Omdia

Most UK university applicants at risk of email fraud

The majority of hundreds of thousands of applicants to UK universities are at risk of email fraud before and after A-level results day, due to a failure to implement full Dmarc protection, a study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Developing innovative security analytics approaches in the digital age

With security threats growing in scale and complexity, security analytics provide a way for IT teams to stay one step ahead of cyber attackers. The challenge is to ensure this technology continues to be effective in the face of new security challenges Continue Reading

By

• Nicholas Fearn

Lack of resources top challenge to IT security

A lack of resources is the top challenge to information security professionals, followed by a lack of experience and skills, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Industrial control system cyber security risk high, report warns

The industrial control system cyber risk to global oil and gas companies is high and rising, as new attack groups continue to enter the arena Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR taken more seriously after first fines

Security professionals believe the first big fines under the General Data Protection Regulation will get organisations to take the new rules more seriously, but will not necessarily change policies or practices Continue Reading

By

• Warwick Ashford, Senior analyst

Scottish tax holiday tempts Openreach

Openreach has announced 36 new locations in line for its expanding full-fibre broadband network build, with Scotland a particular focus after the announcement of additional rates relief Continue Reading

By

• Alex Scroxton, Security Editor

Middle East businesses welcome Amazon Web Services region launch

Bahrain AWS region, with three datacentres, links Middle East to AWS's global network and will help to accelerate digital transformation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Mobiles top target of nation state surveillance

Nation states are targeting individual mobile users for intelligence gathering and disruption of rivals as security on mobile devices lags behind traditional computing, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

ICO selects first innovation Sandbox participants

UK privacy watchdog has chosen the first firms to take part in its Sandbox programme aimed at developing innovative and beneficial products and services that are privacy compliant Continue Reading

By

• Warwick Ashford, Senior analyst

Email security as important as ever, report shows

Cyber security professionals need to keep up to date with email-borne threats because they continue to evolve and have a major impact on business, research reveals Continue Reading

By

• Warwick Ashford, Senior analyst

86 million reasons to support No More Ransom

Anti-ransomware cross-industry initiative says it has prevented more than £86m in ransom payments as it marks its third anniversary, which coincides with a resurgence in ransomware in many parts of the world Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile banking malware surges in 2019

Mobile banking malware surged in the first half of the year, email scams geared up and attacks on cloud increased, while illicit cryptocurrency miners declined, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Most SMEs severely underestimate cyber security vulnerabilities

Small businesses are the primary target for cyber attacks, yet most are unprepared and do not think they will be targeted, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Why investment is needed in the cyber insurance market

The number of cyber insurance policies on offer is beginning to grow, but insurers still have a long way to go to develop policies that address market concerns Continue Reading

By

• Michael Aminzade, 6point6

Internet crime costs global economy £2.3m a minute

Cyber crime cost the global economy £2.3m every minute in 2018, reveals a report aimed at defining the scale of cyber attacks taking place over the internet Continue Reading

By

• Warwick Ashford, Senior analyst

Global malware down but ransomware up, with UK hard hit

Despite a global decrease in the volume of malware in the past year, ransomware is surging once again, and the UK is one of the worst-hit countries, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Phishing attack highlights cyber security need at universities

UK university cyber security is once again under the spotlight after Lancaster University reveals that it has been targeted by a phishing attack used to send fake invoices Continue Reading

By

• Warwick Ashford, Senior analyst

Almost a third of European firms still not compliant with GDPR

Almost a third of European businesses admit they are still not compliant with the EU’s General Data Protection Regulation, but there are encouraging signs of increased maturity in data protection, with the new rules driving better, business-supporting practices Continue Reading

By

• Warwick Ashford, Senior analyst

Norsk Hydro cyber attack could cost up to $75m

March 2019 ransomware attack could cost Norwegian aluminium giant up to $75m in the first half of the year, according to latest estimates Continue Reading

By

• Warwick Ashford, Senior analyst

Data breach costs on the rise, IBM study shows

Data breach costs have risen in the past decade, and the financial impact can be felt for years. Breaches posing a growing risk for small businesses, a study shows, underlining the importance of incident response Continue Reading

By

• Warwick Ashford, Senior analyst

Openreach to slash wholesale fibre prices from September

Wholesale price cuts of almost 40% will help Openreach’s CSP customers grow their full-fibre customer bases, and generate a better return on their investment Continue Reading

By

• Alex Scroxton, Security Editor

Big tech firms back UK cyber security initiative

Big technology firms have pledged their support for UK investment in an initiative to “design out” of new tech the most damaging cyber security threats Continue Reading

By

• Warwick Ashford, Senior analyst

Latest ICO fine highlights privacy due diligence

A week after issuing the first serious GDPR fines, the ICO has further underlined the importance of data stewardship and due diligence regarding privacy practices Continue Reading

By

• Warwick Ashford, Senior analyst

Second CyberThreat Summit announced by NCSC and SANS Institute

CyberThreat 2019 aims to bring together a more diverse set of technical professionals in cyber security from the private and public sectors in the UK and abroad to encourage collaboration Continue Reading

By

• Warwick Ashford, Senior analyst