IT management

November Patch Tuesday heralds five new MS zero-days

Microsoft pushes fixes for five new zero-days in its latest monthly update Continue Reading

By

• Alex Scroxton, Security Editor

US government reinforces ICBC hack link to Citrix Bleed

US Treasury adds weight to reports that a ransomware gang gained access to the systems of Chinese bank ICBC by exploiting a critical Citrix flaw Continue Reading

By

• Alex Scroxton, Security Editor

DPU 101: What are DPUs, what do they do, and who supplies them?

We look at data processing units, the latest in a line of hardware offload devices that emerged in the era of composable infrastructure. They come as hardware and even in the cloud Continue Reading

By

• Antony Adshead, Storage Editor

Million Brits could lose access to bank branch if closure rate continues

Even people in urban constituencies could lose access to a local bank branch, according to research Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Engineers slash RPO/RTO as they swap tape for Rubrik backup

Frankham Group ditches archaic tape backup and deploys Rubrik backup appliances and remote disaster recovery facility. Meanwhile, the engineering group assesses a move to the cloud Continue Reading

By

• Antony Adshead, Storage Editor

AMD survey finds AI hardware lacking in many IT departments

Global survey finds that IT leaders are finding it hard to keep up with the pace of change in AI Continue Reading

By

• Cliff Saran, Managing Editor

Fast-acting cyber gangs increasingly disabling telemetry logs

Sophos guidance for security practitioners and defenders highlights a growing trend for threat actors to disable or wipe telemetry logs to cover their tracks Continue Reading

By

• Alex Scroxton, Security Editor

Francis Maude calls for GDS and CDDO to merge

Review into the civil service by the former Cabinet Office minister says the two organisations should become one entity to avoid sending mixed signals around accountability and leadership Continue Reading

By

• Lis Evenstad

Are firms using mergers and acquisitions to inherit talent?

Getting the right tech skills is proving increasingly difficult for businesses, so some are resorting to combining companies to find the industry’s existing talent – but what are the pros and cons? Continue Reading

By

• Cath Everett

What’s the smart way of moving forward with artificial intelligence?

Don’t try to use AI to solve everything at once – be clear about what specific use cases you want Continue Reading

By

• George Lynch, NashTech

The UK AI Safety Summit – what did it achieve?

In this week’s Computer Weekly, we look back at the UK government’s AI Safety Summit and assess what it achieved – and what it didn’t. Our latest buyer’s guide examines the future of business software and modernising legacy applications. And we find out how the UK Product Security and Telecommunications Infrastructure Act aims to protect your smart devices. Read the issue now. Continue Reading

workflow

Workflow is the series of activities that are necessary to complete a task. Continue Reading

By

• Cameron Hashemi-Pour, Site Editor
• Mary K. Pratt

Australia’s public cloud spending to hit A$23bn in 2024

Spending on public cloud services in Australia will reach 50% of the total addressable market for the first time in 2024, according to Gartner Continue Reading

By

• Aaron Tan, TechTarget

Rogue state-aligned actors are most critical cyber threat to UK

The prospect of rogue nation-state-aligned attackers bringing down the UK’s critical infrastructure is keeping the NCSC up at night Continue Reading

By

• Alex Scroxton, Security Editor

Why digital leaders should build their personal branding

Prioritising the development of personal branding can help your organisation attract talented people Continue Reading

By

• Francine Beleyi , Nucleus of Change

Lloyds Bank warns over rising threat of crypto scams

Report by Lloyds Banking Group finds there has been a 23% increase in cryptocurrency scams in 2023 compared with last year, targeting mostly younger investors Continue Reading

By

• Scarlet Charles

Victims’ legal action over 2015 Carphone Warehouse breach moves forward

A class action against Currys Retail over the 2015 data breach of Carphone Warehouse customers has been granted permission to move forward in the courts Continue Reading

By

• Alex Scroxton, Security Editor

Shawbrook Bank slashes mortgage processing time through low code

Specialist business lending and savings bank is using Pegasystems’ low-code platform to rewrite and automate the customer journey Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Gartner: Modernising legacy applications for cloud-native success

Tips for moving existing enterprise applications to a cloud-native architecture Continue Reading

By

• Eklove Mohan

Breached? Don't panic… if you created a robust IR plan

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Paul Lewis, Nominet

UN disarmament body calls for global action on autonomous weapons

UN draft resolution highlighting the dangers of autonomous weapons passes with overwhelming majority Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

How the Online Safety Act will impact businesses beyond Big Tech 

The Online Safety Act will impact an estimated 100,000 online services in the UK and overseas Continue Reading

By

• Ria Moody, Linklaters

Ransomware attack on major Chinese lender disrupts financial markets

The financial services arm of one of the world’s largest banks was taken offline by a supposed LockBit ransomware attack, causing problems for US markets Continue Reading

By

• Alex Scroxton, Security Editor

How to manage the cultural and operational impact of AI

Organisations will need to address workplace fears of potential job losses, manage change and improve their talent mix to drive success in AI adoption Continue Reading

By

• Pieter den Hamer

Revealed: How Russia’s Sandworm ramped up attacks on Ukraine’s critical infrastructure

New Mandiant intelligence reveals how the APT known as Sandworm has been evolving its playbook, twisting legitimate executables known as LoLBins into malicious tools as it seeks to disrupt daily life in Ukraine Continue Reading

By

• Alex Scroxton, Security Editor

CIOs are working on an AI revolution

It is surprising how much focus there was on artificial intelligence at the Gartner Symposium in Barcelona. Generative AI is at the top of the Gartner hype cycle and CIOs are keen to understand and ... Continue Reading

By

• Cliff Saran, Managing Editor

Ex-Coca-Cola VPs debut ChatGPT-like AI tool to help enterprises solve their sustainability woes

The Ubuntoo AI tool is already in use within several Fortune 500 companies to help these firms hone their sustainability strategies Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Visa launches artificial intelligence advisory service

Visa is giving its customers the opportunity to tap into its global network of AI experts through its AI Advisory Practice. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The best IR plans are well-revised and deeply familiar

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Elliott Wilkes

Suspected ransomware attack hits Scottish council

Systems at Comhairle nan Eilean Siar were downed on 7 November in a suspected ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Gartner’s CIO agenda: A Computer Weekly Downtime Upload podcast

We speak to Gartner’s Tina Nunno at the analyst firm’s annual conference in Barcelona about IT management challenges Continue Reading

By

• Cliff Saran, Managing Editor

UK government does not see need for specific AI legislation

The UK government does not currently see the need for new artificial intelligence legislation, as many regulators are already dealing effectively with AI-related harms Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

The Security Interviews: Why cyber needs to integrate better

Cyber security is an intensely technical field, but we shouldn’t ignore the soft skills of communication and collaboration. Wipro’s Tony Buffomante explains why a robust security posture is dependent on a security team engaging with the wider organisation Continue Reading

By

• Peter Ray Allison

Why IT governance is a coding issue

Two new pieces of research point to benefits of policy as code Continue Reading

By

• Cliff Saran, Managing Editor

How Village Roadshow modernised ITSM with cloud

Australian theme park and cinema operator reduced ITSM costs by 60% to improve problem resolution and other outcomes from use of Freshworks' cloud-based ITSM service Continue Reading

By

• Stephen Withers

Conflict of interest concerns raised over CMA's use of AWS UK public sector discount scheme

Less than a month after the CMA confirmed it would be investigating the competitive impact of AWS preferential pricing deals on the UK cloud market, data reveals the CMA is benefiting from cut-price Amazon cloud services Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Heineken lets the data flow

In this month’s CW EMEA ezine, we find out about Heineken’s mission to make the most out of the data it holds through an enterprise-wide data ecosystem. We also look at how the UK has turned its back on the German government-funded Gaia-X data platform, why cyber experts are urging the EU to rethink vulnerability disclosure plans, and how the IT industry is responding to the software developer skills shortfall. Read the issue now. Continue Reading

ITIL V3

ITIL V3 is the third version of the Information Technology Infrastructure Library (ITIL), a globally recognized collection of best practices for managing IT and for implementing IT service management (ITSM) practices. Continue Reading

By

• Rahul Awati

Former Post Office manager has no memory of preparing witness statement in legal dispute

Evidence of computer problems was omitted from the witness statement of a former Post Office manager in a legal battle with a subpostmaster blamed for unexplained accounting shortfalls Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Data-sharing management gap highlights cyber risk, says report

Organisations are struggling to secure their use of communications tools to share data with third-party partners and suppliers, and in the process are exposing themselves to heightened levels of risk, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

AI Summit not the place for human rights, says French finance minister

Despite commitments at the UK’s AI Safety Summit to respect and protect human rights, the French finance minister said it was not the right forum to discuss signatories' human rights records Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

UK emphasises EU split by kicking digital trade scheme into long grass

Former Gaia-X CEO talks exclusively to Computer Weekly about UK inertia on cross-border data tech Continue Reading

The plan for the inevitable cyber attack: Get the gist of NIST

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Theodore Wiggins, Airbus Protect

Iconic Singapore hotel caught up in major data breach

The Marina Bay Sands resort in Singapore uncovered a data breach of its guest loyalty programme last month Continue Reading

By

• Alex Scroxton, Security Editor

SAP touts Business Technology Platform as foundation for S/4Hana migrations

SAP claims its Business Technology Platform can help customers ease their transition to S/4Hana and lay the foundation for artificial intelligence initiatives Continue Reading

By

• Aaron Tan, TechTarget

King’s Speech misses the mark on cyber law reform, says campaign

A group of activists who want to reform the UK’s computer misuse laws to protect bona fide cyber pros from prosecution have been left disappointed by a lack of legislative progress Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: ISC2’s Clar Rosso on cyber diversity and policy

Computer Weekly catches up with ISC2 CEO Clar Rosso to talk about diversifying the cyber workforce and supporting cyber pros as they keep up with growing compliance and security policy demands Continue Reading

By

• Alex Scroxton, Security Editor

How to modernize legacy applications

For many organizations, system upgrades mean investing time, money and resources. Discover how to modernize legacy applications with these critical tips. Continue Reading

By

• Mary K. Pratt

Post Office disclosure failures delay Horizon scandal inquiry again

Many of the 300,000 emails unearthed could be relevant to evidence from future and past witnesses in the Post Office scandal inquiry Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Gartner Symposium: More about AI

The keynote presentation on the second day of the Barcelona conference examined whether artificial intelligence should be more intelligent than humans Continue Reading

By

• Cliff Saran, Managing Editor

Researchers ‘break’ rule designed to guard against Barracuda vulnerability

Vectra AI researchers found that a Suricata rule designed to detect exploitation of a dangerous Barracuda Email Security Gateway flaw was not entirely effective Continue Reading

By

• Alex Scroxton, Security Editor

VMware consolidates AI push at Explore in Barcelona

VMware’s vision is of ‘cloud smart’ enterprises that run on-premise, in multiclouds and in the ‘edge cloud’, with secure and compliant generative AI fuelling efficient business processes Continue Reading

By

• Antony Adshead, Storage Editor

Interview: Paul Scully, minister for technology and the digital economy, DSIT

The technology minister speaks to Computer Weekly about the government’s semiconductor strategy, how to solve the digital skills challenge in the UK and moving towards the country’s net-zero target Continue Reading

By

• Lis Evenstad

Enhancing security: The crucial role of incident response plans

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Chris McGowan

Unesco unveils seven-point anti-disinformation plan

United Nations body outlines seven proposals for civil society, governments, regulators and tech platforms to adopt to combat the source of disinformation Continue Reading

By

• Alex Scroxton, Security Editor

AI Safety Summit review

Computer Weekly takes stock of the UK government’s AI Safety Summit and the differing perspectives around its success Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

How ExxonMobil is leading with data

In this week’s Computer Weekly, we talk to the leader of ExxonMobil’s data organisation, about the energy giant’s strategy to establish enterprise-wide principles for the use of data. As the UK’s Online Safety Act comes into force, we examine the tech sector’s concerns over the laws around end-to-end encryption. And we look at the software tools available to HR teams to help improve staff retention. Read the issue now. Continue Reading

Gartner Symposium: It’s all about AI

CEOs want CIOs to take the lead when it comes to AI business initiatives. IT leaders need a clear plan of what they want to do with AI Continue Reading

By

• Cliff Saran, Managing Editor

IR plans: The difference between disaster and recovery

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Becky Gelder, Turnkey Consulting

NatWest taps IBM skills for generative AI

NatWest and IBM are developing generative AI capabilities to expand the capabilities of the bank’s virtual customer assistant Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Netherlands starts building its own AI language model

Dutch government allocates €13.5m to develop an open artificial intelligence language model according to national values and guidelines. Continue Reading

By

• Kim Loohuis

Shadow IT use at Okta behind series of damaging breaches

Okta now believes the initial access vector in a series of damaging breaches was one of its own employees who used a corporate device to sign into their personal Google account Continue Reading

By

• Alex Scroxton, Security Editor

How Trellix’s CISO keeps threat actors at bay

Trellix’s chief information security officer, Harold Rivas, outlines how the company mitigates security threats through containment and by helping security analysts to respond faster to cyber incidents Continue Reading

By

• Aaron Tan, TechTarget

UK science minister announces quantum tech funding and collaboration plans

Science minister George Freeman announces £14m in funding for quantum technology projects as government signs collaboration agreements with Australia and the Netherlands Continue Reading

By

• Lis Evenstad

Designing software for efficient IT operations

Rapid development and deployment of applications is not enough to achieve digitisation – IT operations needs to be re-engineered too Continue Reading

By

• Joe Fay

Executive interview: Sergio Gago, Moody’s

Why should companies invest in quantum computing? We speak to Sergio Gago, managing director for artificial intelligence, machine learning and quantum at Moody’s Continue Reading

By

• Cliff Saran, Managing Editor

How to solve the computer evidence problem

The Law Commission is in disgrace for its historic misrepresentations of IT experts when pushing a change to the law on the use of computer evidence through Parliament. Continue Reading

By

• Alistair Kelman

Incident response planning requires constant testing

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Jack Chapman

Bristol and Cambridge to host 2024 AI supercomputers

Dell and HPE are working on supercomputers with the two universities as part of the government’s artificial intelligence funding drive Continue Reading

By

• Cliff Saran, Managing Editor

Admins told to take action over F5 Big-IP platform flaws

Two vulnerabilities in the widely used F5 Networks Big-IP platform are now being exploited in the wild Continue Reading

By

• Alex Scroxton, Security Editor

CDDO publishes digital roadmap update

The CDDO envisions that by 2025, digital services will exceed public expectations, civil servants will be equipped for a digital future, and government efficiency and security will be enhanced Continue Reading

By

• Lis Evenstad

Pension changes set to boost UK tech

UK technology and science startups could benefit from changes to UK pension funds Continue Reading

By

• Cliff Saran, Managing Editor

UK workers exhibit poor security behaviours, report reveals

Report by KnowBe4 has found that four in five UK workers do not make security-conscious choices, whether in-office, remote or hybrid working Continue Reading

By

• Scarlet Charles

Use existing structures to build your incident response plan

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Sam Lascelles

How the UK crime agency repurposed Amazon cloud platform to analyse EncroChat cryptophone data

UK crime agency repurposed AWS-based analytics platform to triage EncroChat data and identify threats to life in messages sent on encrypted phone network Continue Reading

By

• Bill Goodwin, Computer Weekly
• Sebastian Klovig Skelton, Data & ethics editor

Law Commission misrepresented experts when it changed rule on computer evidence

The Law Commission repeatedly quoted vague, arm-waving, un-evidenced comments by judges who offered no insight into anything beyond their own technical ignorance. The law change made miscarriages of justice inevitable. Continue Reading

By

• James Christie

EU digital ID reforms should be ‘actively resisted’, say experts

Over 300 cyber security experts have called for the EU to rethink its proposals for eIDAS digital identity reforms, saying some of the provisions risk damaging user privacy and security Continue Reading

By

• Alex Scroxton, Security Editor

cross-functional team

A cross-functional team is a workgroup made up of employees from different functional areas within an organization who collaborate to reach a stated objective. Continue Reading

By

• Mary K. Pratt

The promise of quantum-powered AI

The application of quantum computing to AI has the potential to disrupt a diverse array of industries. Learn why that potential is so promising and how it could affect companies. Continue Reading

By

• George Lawton

AI Summit: 28 governments and EU agree to safe AI development

In a joint communique at the UK government’s AI Safety Summit, all participating governments agreed to deepen their cooperation around the risks associated with artificial intelligence Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Banking should start testing out quantum ideas

The finance sector should not ignore quantum computing, even though the technology is not yet ready Continue Reading

By

• Cliff Saran, Managing Editor

Incident response planning is vulnerable to legacy thinking

What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership? Continue Reading

By

• Mike Gillespie

The cause of the Post Office Horizon scandal? The Law Commission? Judges? Lawyers?

The appropriateness of the current law on the use of computer evidence in court is under the spotlight following Post Office scandal revelations Continue Reading

By

• Stephen Mason

Darktrace CEO Poppy Gustafsson on her AI Safety Summit goals

As the AI Safety Summit at Bletchley Park takes place, Computer Weekly caught up with Darktrace CEO Poppy Gustafsson to find out what one of the UK’s most prominent AI advocates wants from proceedings Continue Reading

By

• Alex Scroxton, Security Editor

The world's most advanced Arabic LLM is now available on open source

On 30 August 2023, Abu Dhabi-based Inception, a subsidiary of G42, announced the release of an Arabic large language model to open source Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

British Library falls victim to cyber attack

The British Library is experiencing a major IT outage following a cyber incident of an undisclosed nature Continue Reading

By

• Alex Scroxton, Security Editor

Biden’s AI plans focus on US workers’ protection

The US president has issued an Executive Order that sets out his administration’s strategy for AI safety and security Continue Reading

By

• Cliff Saran, Managing Editor

SEC sues SolarWinds, alleging serious security failures

SolarWinds and its CISO have been charged with fraud and internal control failures by the US authorities amid allegations of a series of cyber security failings leading up to the 2020 Sunburst attacks Continue Reading

By

• Alex Scroxton, Security Editor

Over a quarter of UK adults use buy now, pay later fintechs

Latest research from UK financial services regulator shows BNPL more likely to be used by people experiencing financial difficulty Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

How much is enough to support those who maintain open source?

Without the ongoing work of developers, open source projects would become stale and riddled with unfixed bugs and security issues. We look at the issues of funding and fairness Continue Reading

By

• Cliff Saran, Managing Editor

The implications of biased AI models on the financial services industry

The Bank of England has warned of the risk artificial intelligence models present in creating bias that could pose a threat to the UK’s financial services sector. How do those risks emerge and how they might be mitigated?   Continue Reading

By

• Jamie Rowlands

We mustn’t let the return to offices kill the growth of women in tech

How can tech employers continue to attract women to tech jobs as more companies require employees to work from the office? Continue Reading

By

•  Bev White and Lily Haake

UK government AI Summit already branded ‘missed opportunity’

The dominance of big tech firms, a focus on speculative risks over real-world harms, and the exclusion of affected workers, mean the AI Safety Summit is a wasted opportunity, say civil society groups Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Frontier AI Taskforce starts recruitment drive

The second progress report from the Frontier AI Taskforce reveals new hires plus vacancy posts for software and research engineers Continue Reading

By

• Cliff Saran, Managing Editor

Reported major cyberattacks are falling – but watch out for the massive threats posed by gen AI

 The number of reported major cyberattacks is falling. Are we just getting used to them? Continue Reading

By

• Jim Tiller

Greek data watchdog to rule on AI systems in refugee camps

A forthcoming decision on the compliance of surveillance and security systems in Greek refugee camps could set a precedent for how AI and biometric systems are deployed for ‘migration management’ in Europe Continue Reading

By

• Lydia Emmanouilidou

Tech firms cite risk to end-to-end encryption as Online Safety Bill gets royal assent

Tech firms continue to be concerned that the Online Safety Bill could undermine end-to-end encryption despite government reassurances Continue Reading

By

• Bill Goodwin, Computer Weekly

Domestic abuse charities surface fresh worries over NHS data sharing

With new NHS data access options coming into effect at the end of October, a group of campaigners including womens' charities and the BMA have warned that the revived GP-patient data sharing scheme risks putting vulnerable people at risk Continue Reading

By

• Alex Scroxton, Security Editor

‘Egregious’ to link passport data with facial recognition systems

The Scottish biometrics watchdog has spoken out against the UK policing minister’s plans to integrate passport data with police facial recognition systems Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Microsoft warns over growing threat from Octo Tempest gang

The English-speaking Octo Tempest extortion gang – which became an ALPHV/BlackCat affiliate recently – presents one of the most significant and rapidly growing threats to large organisations at this time, says Microsoft Continue Reading

By

• Alex Scroxton, Security Editor