IT operations management and IT support

Security Think Tank: Ransomware and CISOs’ balancing act

Ransomware has the potential to cause irreversible business damage, so CISOs should consider not only protection but also response and recovery Continue Reading

By

• Arina Palchik and Charles Moorey

legacy system (legacy application)

A legacy system is any outdated computing system, hardware or software that is still in use. Legacy systems include computer hardware, software applications, file formats and programming languages. Continue Reading

By

• Nick Barney, Technology Writer
• Margaret Rouse
• Emily Mell, Former Site Editor

Microsoft pledges $100m in new IT support for Ukraine

Microsoft will continue to offer free-of-charge technology support to Ukraine for the foreseeable future Continue Reading

By

• Alex Scroxton, Security Editor

Automated threats biggest source of cyber risk for retailers

Threat actors targeting retailers during the coming holiday season are increasingly turning to automated forms of cyber attack, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Business workflows: A Computer Weekly Downtime Upload podcast

How ServiceNow is being used to drive business processes across IT and other business areas Continue Reading

By

• Cliff Saran, Managing Editor

intellectual property core (IP core)

An intellectual property core (IP core) is a functional block of logic or data used to make a field-programmable gate array (FPGA) or application-specific integrated circuit for a product. Continue Reading

By

• Rahul Awati

Security Think Tank: Know your networks, know your suppliers

To combat the ransomware scourge, we must work harder to monitor and learn from the increasingly complex threat environment, keep a closer eye on supply chains, and share our insights Continue Reading

By

• Rob Dartnall, SecAlliance

Game of ‘hardball’ in Horizon negotiations left subpostmasters exposed to tragedy

‘Hardball’ negotiations between the government, the Post Office and ICL meant subpostmasters were ignored and thrown into a tragedy that could have been averted Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

A third of UK cyber leaders want to quit, report says

Nearly a third of UK security leaders are considering leaving their current role, and more than half are struggling to keep on top of their workload Continue Reading

By

• Alex Scroxton, Security Editor

NCSC looks back on year of ‘profound change’ for cyber

The NCSC ramped up its support for UK plc in the past 12 months, but it was events beyond the UK’s borders that proved the most impactful Continue Reading

By

• Alex Scroxton, Security Editor

How Elastic is going beyond enterprise search

Elastic has been doubling down on the security and observability capabilities of its open-source platform, going beyond its roots in enterprise search Continue Reading

By

• Aaron Tan, TechTarget

Prepare today for potentially high-impact OpenSSL bug

OpenSSL trailed a critical vulnerability patch last week, which will be only the second such flaw ever found in the open source encryption project. Unfortunately, the first was Heartbleed Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Container security: why so different?

Done well, container security can be a model for securing the enterprise, and businesses that focus their teams on solving it can help accelerate positive change in other areas Continue Reading

By

• Bernard Brantley

Post Office warned of Horizon software-induced ‘tragedy’ in 1999

Problems experienced during live trials of the Post Office Horizon system predicted the ‘tragedy’ that unfolded Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Will the OCSF create an open and collaborative cyber industry?

The Open Cybersecurity Schema Framework promises to transform security data analysis and collection, but there are challenges around adoption Continue Reading

By

• Nicholas Fearn

Horizon system EPOSS code writers lacked basic programming skills, public inquiry hears

Horizon system code writers lacked basic programming skills, according to the task force set up to investigate reported problems with the controversial software Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

New minister asked to pause Fujitsu government contracts

Parliamentarians keep focus on Fujitsu’s role in the Post Office Horizon scandal with demand for pause on government contracts to the supplier Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

When technology lets you sleep easy

Indian mattress supplier Duroflex has taken a leaf out of mattress design in its technology implementation to double its growth in an industry dominated by unorganised players Continue Reading

By

• Pratima Harigunani

One in five tech workers subject to workplace surveillance

Digital surveillance is now a common feature of the UK’s post-pandemic economy, says Prospect Union, adding to growing calls for workers to be given a greater say over how technologies are deployed in the workplace Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Government speeds up NHS Digital and NHS England merger

NHS bodies will now merge in early January 2023, aiming to create a single statutory body for NHS data and technology Continue Reading

By

• Lis Evenstad

Ukrainian and UK IT sectors to deepen collaboration, partnerships

BCS, the Chartered Institute for IT, and the IT Ukraine Association have signed an MoU to deepen collaboration between the UK and Ukrainian IT sectors, and champion new partnerships and growth opportunities Continue Reading

By

• Alex Scroxton, Security Editor

What do the US’s new software security rules mean for UK organisations?

The White House announced recently that all software supplied to the US government and its agencies needs to be secure, so what does this mean for the UK and EU security sectors? Continue Reading

By

• Peter Ray Allison

The Security Interviews: Why now for ZTNA 2.0?

With organisations facing escalating online threats, security teams need to improve their defences using zero-trust network access to preserve the integrity of their systems. Palo Alto Networks’ Simon Crocker shares his views on zero-trust network access Continue Reading

By

• Peter Ray Allison

Cyber professional shortfall hits 3.4 million

Shortage of cyber security professionals continues to grow and shows no signs of abating, says report Continue Reading

By

• Alex Scroxton, Security Editor

Treat cyber crime as a ‘strategic threat’, UK businesses told

The government’s new National Cyber Advisory Board aims to help elevate cyber discussion and spur action in the business community Continue Reading

By

• Alex Scroxton, Security Editor

Apache vulnerability a risk, but not as widespread as Log4Shell

A newly disclosed Apache Commons Text vulnerability may put many at risk, but does not appear to be as impactful or widespread as Log4Shell Continue Reading

By

• Alex Scroxton, Security Editor

Virtually all vulnerable open source downloads are avoidable

Some 96% of known vulnerable open source downloads could have been avoided altogether, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Subpostmaster federation failed its members when they needed it most

A dereliction of duty saw subpostmaster federation ignore its members when IT problems hit and allowed the Post Office destroy their lives Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Global IT and business services spending slows amid economic fears

Spending on IT and business services is declining amid economic fears, with the possibility of a further fall on the horizon Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Office 365 email encryption flaw could pose risk to user privacy

A vulnerability in Microsoft Office 365 Message Encryption could leave the contents of emails dangerously exposed, but with no fix coming it’s up to users to decide how at risk they are Continue Reading

By

• Alex Scroxton, Security Editor

Unsung Heroes Awards celebrate diversity in cyber community

The seventh annual Security Serious Unsung Heroes Awards recognise those trying to improve diversity and mental health in cyber for the first time Continue Reading

By

• Alex Scroxton, Security Editor

Perpetrators of subpostmaster suffering in Horizon scandal must face public inquiry

Victims demand that the perpetrators of the Post Office Horizon IT scandal face the public inquiry Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Gartner: Remote work, zero trust, cloud still driving cyber spend

Security leaders are eager to spend on categories including remote and hybrid cyber offerings, zero-trust network access, and cloud Continue Reading

By

• Alex Scroxton, Security Editor

Finance regulator cracks down on use of messaging apps

The Financial Conduct Authority is taking a closer look at how staff at banks are using WhatsApp in work Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NCSC urges organisations to secure supply chains

NCSC’s latest guidance package centres supply chain security, helping medium to large organisations assess and mitigate cyber risks from suppliers Continue Reading

By

• Alex Scroxton, Security Editor

Santander and Google offer tech to help businesses smooth move to cloud

Dual Run service from Google will be built on top of Santander technology known as Gravity Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Microsoft fixes lone zero-day on October Patch Tuesday

Microsoft patched a solitary zero-day vulnerability in its latest monthly drop, but fixes for two others disclosed in the past few weeks are nowhere to be seen Continue Reading

By

• Alex Scroxton, Security Editor

Post Office scandal inquiry restarts with call for a pause amid disclosure controversy

The statutory public inquiry into the Post Office Horizon scandal has begun phase two with a request for an adjournment amid allegations that the Post Office is failing to meet its obligation to disclose all relevant documents Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Currency markets causing choppy waters for UK outsourcing

Anthony Drake, director at tech advisory ISG, explains how the UK government’s botched mini-Budget announcement raised the cost of IT outsourcing Continue Reading

By

• Anthony Drake

Ukraine and EU explore deeper cyber collaboration

A Ukrainian delegation has met with officials from the EU’s ENISA cyber agency to explore deeper cooperation on cyber security issues Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Design security in to reap container benefits

Provided container security basics are built into your development and runtime environment from the start, containerised services and applications can provide rapid – and secure – achievement of business objectives Continue Reading

By

• Mairi MacLeod and Farrukh Ahmad

SMEs in Europe ready to invest in real-time payment capabilities

Small and medium-sized enterprises are losing business because of the time it takes to receive payments, with many considering API-based services to address the problem Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

JPMorgan’s UK digital bank app outage locks customers out

App-based Chase Bank suffered tech outage that left customers unable to access its services Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Three ways that APIs can fail

It’s all very well having an API strategy, but software teams need to be ready for when things start going wrong Continue Reading

By

• Stephen Feloney

How to protect against SMS mobile security weakness

The simple messaging service provides two-factor authentication in banking and e-commerce, but what happens if your SIM card is stolen? Continue Reading

By

• Junade Ali

Five startups to join NCSC for Startups initiative

The NCSC has invited five startups to join its NCSC for Startups programme to help the government with pressing cyber challenges facing the UK Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

KPMG: IT chiefs vote for innovation, but are they forgetting tech debt?

New study from KPMG shows businesses are keen to adopt new technologies to drive improvements to customer experience Continue Reading

By

• Cliff Saran, Managing Editor

AIOps for storage: Potential huge benefits, but lots of lock-in

Applying artificial intelligence and machine learning to storage can help to predict bottlenecks, diagnose I/O issues and recommend upgrades, but suppliers’ products are largely limited to their own hardware Continue Reading

By

• Stephen Pritchard

Security Think Tank: Three steps to a solid DevSecOps strategy

Read about how buyers can manage third-party risk when procuring applications, how to secure the software development process, and even how to affect cultural change among developers not used to thinking cyber first Continue Reading

By

• Cate Pye and Farrukh Ahmad

Most hackers exfiltrate data within five hours of gaining access

Insights from more than 300 sanctioned adversaries, otherwise known as ‘ethical’ hackers, reveal that around two-thirds are able to collect and exfiltrate data within just five hours of gaining access Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

More than 30 startups to join Plexal’s Cyber Runway accelerator

Now in its second year, the Cyber Runway accelerator has been designed to support firms at various stages of growth, as well as help the cyber security sector to improve on its diversity, inclusion and regional representation Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

It’s time for engineering teams to own DevSecOps

It may seem counterintuitive, but maybe organisations should consider delegating responsibility for DevSecOps to engineering teams, not security teams, argues Elastic’s Mandy Andress Continue Reading

By

• Mandy Andress, Elastic

non-uniform memory access (NUMA)

Non-uniform memory access, or NUMA, is a method of configuring a cluster of microprocessors in a multiprocessing system so they can share memory locally. Continue Reading

By

• Rahul Awati

Tech Nation announces 13 startups for 11th Future Fifty cohort

Thirteen high-growth startups set to join Tech Nation’s 11th annual Future Fifty programme to help them scale further Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Nordic private equity firms pursue cyber security acquisitions

Increasing interest in the security sector from Nordic private equity firms is a reflection of growing threats and increasing enterprise security budgets Continue Reading

By

• Gerard O'Dwyer

Inside SolarWinds’ observability playbook

SolarWinds’ CEO Sudhakar Ramakrishna talks up the company’s observability playbook and offers a glimpse into its technology roadmap Continue Reading

By

• Aaron Tan, TechTarget

American Express recruiting thousands of tech professionals

Amex will add 5,000 IT professionals to its workforce in 2022 as digital products and services become the staple of the finance sector Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

15-year-old Python bug present in 350,000 open source projects

A Python tarfile vulnerability first disclosed in 2007 still persists to this day, according to analysis from Trellix Continue Reading

By

• Alex Scroxton, Security Editor

India ramps up on AI amid talent and scalability challenges

Indian organisations are speeding up deployments of AI across multiple sectors, but legacy systems, siloed data and a shortage of AI-specific talent will stand in the way of greater adoption Continue Reading

By

• Harigunani P

How Mondelez is driving change with tech

From empowering citizen developers to deploying drones to monitor the health of cocoa trees, Mondelez has been firing on all cylinders to disrupt the old ways of doing things Continue Reading

By

• Aaron Tan, TechTarget

Barnet Council awards Capita contract extension

Barnet Council has awarded Capita a contract extension as part of its transition away from a large contract with the supplier Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Six new vulnerabilities added to CISA catalogue

CISA adds six new vulnerabilities to its most-wanted list, including one that dates back to 2010 Continue Reading

By

• Alex Scroxton, Security Editor

Energy crisis IT impact: Computer Weekly Downtime Upload podcast

In this special edition of the Computer Weekly Downtime Upload podcast, Gartner analyst Tiny Haynes discusses datacentre energy management. Continue Reading

By

• Cliff Saran, Managing Editor

SAP maintenance fee increase: What you need to know

SAP has written to its customers informing them of a price increase on annual maintenance fees. What are your options? Continue Reading

By

• Cliff Saran, Managing Editor

Nominations closing soon for annual cyber awards

Nominations for the annual Security Serious Unsung Heroes Awards closes 16 September Continue Reading

By

• Alex Scroxton, Security Editor

Organisations failing to account for digital trust

The vast majority of businesses are well aware of the importance of digital trust, yet very few have a dedicated staff role responsible for it, report finds Continue Reading

By

• Alex Scroxton, Security Editor

Full-stack observability top priority for IT teams

Annual forecast reveals observability – the ability to see everything in the tech stack that could affect customer experience – has become a board-level imperative, but only a quarter of organisations have achieved it Continue Reading

By

• Joe O’Halloran, Computer Weekly

FormBook knocks Emotet off top of malware chart

FormBook emerged as the most widely seen malware in August, according to Check Point’s latest data Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft patches 64 vulnerabilities on September Patch Tuesday

Microsoft drops fixes for five critical vulnerabilities and one zero-day in its latest monthly update Continue Reading

By

• Alex Scroxton, Security Editor

Cloud compromise a doddle for threat actors as victims attest

Two separate studies into the state of public cloud security reveal insight into the ease with which threat actors can compromise vast numbers of targets, and some of the challenges security teams are facing in the cloud Continue Reading

By

• Alex Scroxton, Security Editor

JP Morgan acquires fintech for payments modernisation

JP Morgan acquires cloud-native payments technology as it modernises its IT infrastructure Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Blancco works with charity to provide IT for African schools

Blancco is providing data sanitisation and erasure software to The Turing Trust so that old IT equipment can be securely reused by school children in Sub-Saharan Africa, instead of adding to world’s growing e-waste problem Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Mistakenly transferred $504m to be returned to Citigroup

Judge rules that creditors should return $504m that was accidentally transferred to them by Citigroup Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CISOs should spend on critical apps, cloud, zero-trust, in 2023

Faced with a global recession next year, security buyers should try to direct investment towards technology that protects customer-facing and revenue-generating workloads, say analysts Continue Reading

By

• Alex Scroxton, Security Editor

RPA’s day has come – the intelligent evolution of a productivity bot

By trying to emulate humans for tasks such as data entry, robotic process automation has found a niche home in many an enterprise back office Continue Reading

By

• Marc Ambasna-Jones

Third of IT decision-makers rely on gut feel when choosing network operator

Study from customer experience technology provider shows lack of transparency is cited as the most consistent quality failure of network providers Continue Reading

By

• Joe O’Halloran, Computer Weekly

Interview: Keeping an IT business going during the Russian invasion

After heading home and discovering that his country had been invaded, Konstantin Klyagin was forced to make life-changing family and business decisions Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CW Europe: Why Russia could become the world’s biggest market for illegal IT

Faced with international sanctions and the departure of many global IT suppliers from Russia, companies there are seeking alternative, and sometimes illegal, routes to access IT products. Also read how new requirements are driving scientists and engineers in Europe back to the lab to start developing 6G technology. Continue Reading

Chinese APT using PlugX malware on espionage targets

China’s Bronze President APT is once again targeting government officials of interest to its paymasters, this time using forged diplomatic correspondence, according to the Secureworks Counter Threat Unit Continue Reading

By

• Alex Scroxton, Security Editor

The changing role of CIO in Sweden

New technologies and evolving business models are changing the missions of IT leaders around the world – and in most cases, the result is slightly different from one country to another Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

August ’22 a bumper month for high-impact vulnerabilities

Bugs in products from Apple, Google, Microsoft and VMware dominated the threat landscape in August, says Recorded Future Continue Reading

By

• Alex Scroxton, Security Editor

Prince’s Trust teams with threat management specialist in skills push

Prince’s Trust hopes to address shortfall in cyber professionals and improve diversity in the industry Continue Reading

By

• Alex Scroxton, Security Editor

Hotel group IHG confirms cyber attack after two-day outage

IHG, the operator of hotel chains Crowne Plaza, Holiday Inn, Intercontinental and Kimpton, says it has been targeted by an unknown threat actor Continue Reading

By

• Alex Scroxton, Security Editor

Cyber threats to Europe’s grid: Utilities rethink strategy

The separation of operational and information technology at utilities across Europe is opening doors for cyber criminals Continue Reading

By

• Gordon Feller

Bus company Go-Ahead fighting off cyber attack

Go-Ahead Group, which operates bus companies around the UK, says it is in the process of dealing with a cyber attack that may cause disruption to services Continue Reading

By

• Alex Scroxton, Security Editor

How Okta is regaining customer trust after a cyber attack

In early 2022, cyber firm Okta was among several tech companies hit by the Lapsus$ gang. Vice-president of customer trust Ben King talks about how he has been working behind the scenes to rebuild confidence after the incident Continue Reading

By

• Alex Scroxton, Security Editor

Dutch government finally allowed to use public cloud

Public cloud is finally within reach for Dutch public services. Previously, the Dutch government was only allowed to use private clouds due to risks concerning privacy and security Continue Reading

By

• Kim Loohuis

Security Think Tank: Shift left, shift right. What about shift everywhere?

The concepts of shift left and shift right are highly effective in securing the development process, but for those who want to take things that step further there is shift everywhere Continue Reading

By

• Paul Holland, Information Security Forum

New (ISC)² cyber careers schemes go live

(ISC)² has opened up two new global cyber careers schemes to applicants to try to help organisations fill 2.7 million vacant roles worldwide Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Effective DevSecOps requires collaboration

Application security and effective DevSecOps can only be achieved through collaboration with the business – the ultimate goal is to make it safer to do business, which requires considering integrated risk management and identity and access management alongside cyber security and application security Continue Reading

By

• Andrew Morris, Turnkey Consulting

Singapore to expand 5G coverage to seaport

The maritime hub will be testing the use of 5G in a range of maritime operations, including remote pilotage of vessels and drone delivery of components to ships Continue Reading

By

• Aaron Tan, TechTarget

Norway has NOK200m plan to bolster cyber defences

Norway is investing heavily in its cyber defences amid heightened threat from Russia Continue Reading

By

• Gerard O'Dwyer

NHS staff fall further behind amid ransomware attack

While some NHS bodies are now recovering their services after the ransomware attack on a crucial software supplier, others are still being forced to rely on pen and paper, and some will be waiting months to recover Continue Reading

By

• Alex Scroxton, Security Editor

Four years into GDPR, Norway hopes for safer data transfer to US

Much of the data on the internet ends up on US servers at some point, and that is not always compatible with the General Data Protection Regulation, says Norwegian data protection authority Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

IAM house Okta confirms 0ktapus/Scatter Swine attack

Following last week’s disclosureby Group-IB researchers of a major phishing campaign, Okta has warned its customers to be on their guard Continue Reading

By

• Alex Scroxton, Security Editor

Confronting the unique challenges of hiring IT professionals in Saudi Arabia

As Saudi Arabia undergoes an economic transformation, new mandates are being implemented to help Saudi nationals keep up with global talent requirements Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

CIOs: Geopolitics impacts your IT strategy

Research from analyst Gartner illustrates how geopolitics is influencing IT strategies Continue Reading

By

• Cliff Saran, Managing Editor

Security pros fret about stress and promotion over cyber attacks

CIISec’s annual report on the state of the security profession reveals some home truths for security leaders Continue Reading

By

• Alex Scroxton, Security Editor

DevSecOps: Software developers lack sufficient security focus

GitLab survey shows developers want to produce high-quality code, but ‘shifting’ security left is hard to achieve Continue Reading

By

• Cliff Saran, Managing Editor

NCSC shares cyber guidance for large infrastructure builds

Balfour Beatty and McAlpine are among the large construction firms to have input into latest NCSC guidance for ensuring the security of major infrastructure projects Continue Reading

By

• Alex Scroxton, Security Editor