IT operations management and IT support

The right tech choices for hybrid workers

Various studies give a mixed reaction to businesses returning to office work, but what is apparent is that support for remote working will continue Continue Reading

By

• Joe O’Halloran, Computer Weekly

Colonial Pipeline paid $5m ransom, reports say

Colonial Pipeline may have paid a significant ransom within hours of being attacked, it has emerged, but it’s unlikely the story ends here Continue Reading

By

• Alex Scroxton, Security Editor

Mars expands Microsoft strategy to drive business agenda

Mars plans to drive new data insights and AI across its supply chains to optimise production and lower its carbon footprint Continue Reading

By

• Cliff Saran, Managing Editor

CISOs weathered the pandemic well, but at personal cost

Over 80% of CISOs think their existing security capabilities stayed strong during the worst of the Covid-19 pandemic, but now face stress and burnout on an unheard-of scale Continue Reading

By

• Alex Scroxton, Security Editor

UK government publishes Online Safety Bill draft

Bill builds on previous commitments by the government, which has added new measures to uphold democracy and freedom of speech while making tech giants more accountable Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Inside DarkSide: Researchers share intel on break-out cyber gang

Security researchers swap information on the newly famous DarkSide ransomware gang, the group that doesn’t appear to understand what ‘being a criminal’ actually means Continue Reading

By

• Alex Scroxton, Security Editor

CyberUK 2021: NCSC encourages startups to invest in cyber

National Cyber Security Centre is launching bespoke cyber security guidance aimed at the UK’s valuable startup community Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft fixes four critical bugs on lighter Patch Tuesday

Four critical RCE vulnerabilities put users of various Microsoft products at risk, and should be patched right away Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Why helpful bots could hurt vaccine roll-outs

Earlier this year, spikes in traffic to websites containing information about Covid-19 vaccines were attributed by Imperva to automated bots scraping data. Why is that a problem? Continue Reading

By

• Alex Scroxton, Security Editor

UK Plc invited to sign up for Early Warning of cyber incidents

The launch of the Early Warning incident notification service is among the enhancements being made by the NCSC to its service packages Continue Reading

By

• Alex Scroxton, Security Editor

NCSC cyber guidance targets cloud and home working

The NCSC’s refreshed cyber security guidance for larger organisations places particular emphasis on cloud, home working and ransomware Continue Reading

By

• Alex Scroxton, Security Editor

SolarWinds CEO calls for collective action against state attacks

SolarWinds CEO tells NCSC’s CyberUK conference he is exploring the possibility of collaborating with other companies on collective cyber action against attacks backed by nation states Continue Reading

By

• Alex Scroxton, Security Editor

Colonial Pipeline ransomware attack has grave consequences

The ramifications of a major ransomware attack against a US fuel pipeline operator could spread far and wide Continue Reading

By

• Alex Scroxton, Security Editor

Miscarriages of justice are the potent tip of Post Office scandal

The miscarriages of justice involving subpostmasters are the most disturbing element of the Post Office Horizon scandal – but it goes much deeper Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

How do I get my users to pay attention to security training?

As cyber security risks grow daily, businesses must educate staff about these through cyber awareness training. But how can they ensure this is taken seriously by employees? Continue Reading

By

• Nicholas Fearn

Reddit enlists HackerOne to run public bug bounty programme

Online community platform is opening up its HackerOne bug bounty programme to any ethical hacker who cares to have a look under the bonnet Continue Reading

By

• Alex Scroxton, Security Editor

Minister promises ‘fair and speedy’ compensation for 555 subpostmasters who defeated Post Office

Government says it wants to ensure a fair pay-out for the 555 subpostmasters who defeated the Post Office in a legal battle but were then excluded from the resulting compensation scheme Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Helping staff to work in a hybrid mode

A recent survey of 50 of the UK’s biggest firms conducted by the BBC, has reported that 24 have no plans to have staff return to their offices. Many workers do not feel compelled to return to the ... Continue Reading

By

• Cliff Saran, Managing Editor

Dysfunctional cyber, network teams disrupt digital transformation

Despite shared goals, combative and dysfunctional relationships within specialist tech teams are putting digital transformation projects at risk, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Sophos: How timely intervention stopped a ProxyLogon attack

A recent incident at an undisclosed customer sheds new light on how malicious actors exploit unpatched Microsoft Exchange servers Continue Reading

By

• Alex Scroxton, Security Editor

Delivering international talent to Helsinki’s tech ecosystem

Finland’s capital is the envy of the world as a tech hub, but it still faces challenges in attracting skills in a highly competitive global market Continue Reading

By

• Matthew Staff

Post Office dishonesty in Horizon scandal is reason enough for statutory public inquiry

Subpostmasters, MPs and the public call for a full statutory judge-led public inquiry into the Post Office Horizon scandal, following another damning court judgment Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Half of organisations breached via a third party in 12 months

New report highlights the risks of outsourcing key business processes without paying due care and attention to your service provider’s security Continue Reading

By

• Alex Scroxton, Security Editor

Infosys to create 1,000 tech jobs in UK

Infosys joins TCS in announcing the creation of UK IT jobs as India and the UK negotiate a future trading relationship Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office CEO either knew what was going on in Horizon scandal, or was ‘asleep at the wheel’

Post Office IT scandal CEO has no excuse for her inaction in preventing the biggest miscarriage of justice in UK history, says Criminal Cases Review Commission chairperson Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Navigating the sticky issue of monitoring employee productivity

With employees having shifted en masse to remote working during the pandemic, we explore how enterprises have maintained the productivity of their dispersed workforce Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

End of support for Build 1909 leaves some Windows open to attack

Biannual Windows updates free IT staff from major updates, but some people prefer older builds of Windows, which leaves a gaping security hole Continue Reading

By

• Cliff Saran, Managing Editor

Impact of low chip supply spreads

Covid-19, shifts in consumer purchasing, sanctions and a drought in Taiwan have come together as a perfect storm to squeeze the supply of semiconductors Continue Reading

By

• Cliff Saran, Managing Editor

Recruiters can’t afford to hold out for cyber ‘unicorns’

The perfect security candidate is hard to find, so hiring policy needs to be more pragmatic Continue Reading

By

• Alex Scroxton, Security Editor

Total cost of ransomware attack heading towards $2m

Sophos’ latest study finds that ransomware attacks are proving increasingly disruptive to their victims’ finances Continue Reading

By

• Alex Scroxton, Security Editor

Another 38 subpostmasters submit appeals against convictions

The biggest miscarriage of justice in UK history is set to get bigger as more subpostmasters take their cases to the Court of Appeal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office scandal CEO steps down from roles after massive miscarriage of justice is laid bare

Former Post Office CEO Paula Vennells has left roles in the church, Morrisons and Dunelm after postmasters’ convictions were overturned in the Court of Appeal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office scandal victims have criminal convictions overturned in Court of Appeal

Subpostmasters have their criminal convictions overturned after a judge rules that the Post Office prosecuted them without investigating computer errors Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Researchers shed more light on APT29 activity during SolarWinds attack

RiskIQ’s Atlas threat intel team uncovers new patterns and threat infrastructure used in the SolarWind’s attacks Continue Reading

By

• Alex Scroxton, Security Editor

Automation, zero-trust, API-based security priorities for EMEA CISOs

Report by FireMon sheds light on buyer behaviour across the EMEA region Continue Reading

By

• Alex Scroxton, Security Editor

ToxicEye malware exploits Telegram messaging service

The Telegram instant messaging service is being used by malicious actors to manage a remote access trojan called ToxicEye Continue Reading

By

• Alex Scroxton, Security Editor

NCSC offers teachers free cyber security training

The NCSC’s latest security training offer builds on a package of measures designed to protect schools from cyber attack Continue Reading

By

• Alex Scroxton, Security Editor

SonicWall Email Security zero-days need urgent patch

Users of SonicWall Email Security are advised to patch immediately, but the supplier is being criticised for the pace of its response Continue Reading

By

• Alex Scroxton, Security Editor

Time is running out to probe networks for Emotet

Security teams will lose an unprecedented opportunity to gain valuable intelligence to enhance their defences when Emotet is finally ‘executed’ in a few days’ time Continue Reading

By

• Alex Scroxton, Security Editor

Chinese APT exploits critical CVE in Pulse Secure VPN

A newly disclosed vulnerability in Pulse Secure’s VPN is being exploited by a Chinese advanced persistent threat group – assume compromise and mitigate today Continue Reading

By

• Alex Scroxton, Security Editor

Codecov supply chain attack has echoes of SolarWinds

Supply chain attack on code auditing service may have compromised the likes of HPE and IBM Continue Reading

By

• Alex Scroxton, Security Editor

Banco Santander moving more than 200 servers to cloud per day

Banco Santander has migrated about 60% of its IT infrastructure to the cloud and is reaping the benefits Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Transatlantic relationship strengthens Sweden’s startup sustainability

Nordic startup network is taking lessons from Canada in getting women into the IT industry Continue Reading

By

• Matthew Staff

Google and Siemens combine forces to address AI at the industrial edge

The partnership shows how the public cloud giants are branching out into specialist application areas to different industry sectors Continue Reading

By

• Cliff Saran, Managing Editor

The Secret IR Insider’s Diary – from Sunburst to DarkSide

From dealing with SolarWinds fallout to ransomware attacks, it’s been a busy few weeks for the Secret IR Insider, but they've picked up some new tricks along the way Continue Reading

By

• The Secret IR Insider, Check Point

Post Office’s full and final settlement with Horizon scandal victims in plain English

The legal settlement with subpostmaster victims of the Horizon scandal that the government and the Post Office say is “full and final” is anything but Continue Reading

By

• Alan Bates

Only government standing in the way of fair compensation for subpostmasters

The UK government is the only block to fair compensation for subpostmasters who were wrongly punished for accounting shortfalls Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

University of Hertfordshire is latest academic cyber attack victim

Multiple systems are offline at the University of Hertfordshire following a cyber attack Continue Reading

By

• Alex Scroxton, Security Editor

How Windows patching leaves security exposed

Four years on since it devastated IT systems across the NHS, WannaCry remains a threat to organisations around the world Continue Reading

By

• Cliff Saran, Managing Editor

FBI accesses ProxyLogon target servers to disrupt cyber criminals

US Justice Department reveals successful court-authorised effort to clamp down on ProxyLogon exploitation Continue Reading

By

• Alex Scroxton, Security Editor

Europe provides growth for TCS despite year floored by pandemic

Tata Consultancy Services grows its continental European business despite economic slowdown brought by Covid-19 restrictions Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

MP told to ditch official email over hacking fears

MP Tom Tugendhat claims the intelligence services advised him to switch to the Gmail service due to concerns his parliamentary email could be hacked Continue Reading

By

• Alex Scroxton, Security Editor

Hyperbat accelerates industry 4.0 with 5G virtual 3D engineering model

Vehicle battery manufacturer uses the latest 5G-enabled technology to speed up the manufacturing process for hybrid and electric vehicle production in the UK Continue Reading

By

• Joe O’Halloran, Computer Weekly

End of the road for Post Office IT system that destroyed lives

The Post Office has revealed the end to its controversial Horizon IT system which, through its errors and the Post Office's denial of them, caused huge suffering for hundreds of subpostmasters Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Millions of devices at risk from NAME:WRECK DNS bugs

Newly disclosed set of nine DNS vulnerabilities puts over 100 million consumer, enterprise and industrial IoT devices at risk Continue Reading

By

• Alex Scroxton, Security Editor

Vaccine passports and travel plans race up Covid threat charts

With lockdown restrictions easing in the UK, cyber criminals are tailoring their phishing lures to new areas of interest Continue Reading

By

• Alex Scroxton, Security Editor

Why some jobseekers have turned to cyber crime during the pandemic

Research shows that many people have been seeking cyber crime-related work on the dark web, but why? Continue Reading

By

• Nicholas Fearn

What has a year of home working meant for the DPO?

Byron Shirley of The Compliance Space explores how the role of the data protection officer has changed in the past 12 months Continue Reading

By

• Byron Shirley, The Compliance Space

Global demand for IT and business services highest ever for first quarter

Global demand for IT and business services began the year strongly, with a record first quarter Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Cring ransomware hits ICS through two-year-old bug

A long-disclosed vulnerability in Fortinet’s Fortigate VPN servers is being exploited to distribute Cring ransomware Continue Reading

By

• Alex Scroxton, Security Editor

Five ways that disaster recovery changes in a pandemic

 Continue Reading

Post Office Horizon contract extension is part of project to bring Fujitsu work in-house

The Post Office is to move work done by Fujitsu in-house when its outsourcing contract ends, and is already recruiting IT experts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Future working models at big banks begin to fall into place

Banks traditionally lead the way in technology adoption, but what can businesses take from their post-Covid-19 remote-working strategies? Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office gives controversial Fujitsu contract another year

The Post Office's controversial contract with Fujitsu has been extended another year to help the organisation manage its exit Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Demands for changes to ‘barmy’ rules on digital evidence have government’s ear

The government is listening to calls for changes in how digital evidence is considered in court, as Post Office IT scandal spells out current rule's inadequacy Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Commerzbank picks Google for cloud migration

German bank expands its work with Google Cloud and plans to move 85% of applications to its platform Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NHS is apparently closing security skills gap

By the end of 2020, there were more than twice as many in-house security professionals at NHS trusts as there were two years before Continue Reading

By

• Alex Scroxton, Security Editor

Strong company culture the basis of a successful hybrid work environment

Study highlights how post-Covid working dynamics increase importance of communicative leadership with an inclusive organisational culture most important once logistics and technology are addressed Continue Reading

By

• Joe O’Halloran, Computer Weekly

Ransomware attack on London schools highlights warnings

Ransomware attack on Harris Federation comes just days after a fresh NCSC alert for the education sector Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: How to secure an F1 team in a pandemic

A multi-year digital transformation programme paid off for F1 team Williams Racing when the 2020 season was abruptly postponed thanks to Covid-19. Learn how the team’s CIO has been supporting remote working and protecting data Continue Reading

By

• Alex Scroxton, Security Editor

How Gulf SMEs are building digital resilience amid the pandemic

SMEs in the Gulf region have accelerated their digital transformations during the Covid-19 pandemic Continue Reading

By

• Alicia Buller

UK courts face evidence ‘black hole’ over police EncroChat mass hacking

French investigators have refused to disclose how they downloaded millions of messages from a supposedly secure cryptophone network used by organised criminals – leaving UK courts to grapple with a forensic ‘black hole’ of evidence Continue Reading

By

• Bill Goodwin, Computer Weekly
• Sebastian Klovig Skelton, Data & ethics editor

Preparing for enterprise-class containerisation

As more workloads are deployed in containers, IT teams will need to assess how to manage container sprawl, reduce cloud bills and support databases Continue Reading

By

• Adrian Bridgwater
• Cliff Saran, Managing Editor

CW Innovation Awards: Sime Darby ups ante in service management

Sime Darby Industrial’s inService Suite has returned more than 100,000 hours to the company in a digitisation initiative that has improved efficiency and customer engagement Continue Reading

By

• Edwin Yapp

Retailer FatFace pays $2m ransom to Conti cyber criminals

Retailer FatFace paid out a $2m ransom to restore its data following a January 2021 cyber attack by the Conti ransomware syndicate Continue Reading

By

• Alex Scroxton, Security Editor
• Valéry Rieß-Marchive, Rédacteur en chef

Remote working burn-out a factor in security risk

After a year of working from the kitchen table, stress and burn-out are increasing, giving rise to more security risks – and Millennials seem to be particularly affected Continue Reading

By

• Alex Scroxton, Security Editor

Cyber security complacency puts UK at risk, says NCSC head

National Cyber Security Centre CEO Lindy Cameron, in her maiden speech in the role, warns of challenges ahead for the UK and sets out the future agenda for cyber Continue Reading

By

• Alex Scroxton, Security Editor

Warning: AWS IAM behaves differently to directory services

IT admins use group policies to manage user access via Active Directory, but AWS takes a subtly different approach, which can be exploited Continue Reading

By

• Cliff Saran, Managing Editor

Four in five UK businesses seek new security suppliers

Decision-makers are ready to buy new security technology, but suppliers must pay close attention to how they present themselves Continue Reading

By

• Alex Scroxton, Security Editor

Government faces judicial review into plans for Post Office Horizon inquiry

Subpostmasters that suffered great hardship at the hands of the Post Office are applying for a judicial review of a government inquiry into the scandal, which they see as a "whitewash" Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The 3-2-1 backup rule: Has cloud made it obsolete?

The 3-2-1 backup rule was made for small-scale use in the pre-cloud era when tape still ruled. Is it relevant in the 2020s, or can we repurpose its fundamental principles? Continue Reading

By

• Antony Adshead, Storage Editor

Apparent drop in cyber incidents highlights underlying problems

UK organisations report fewer cyber security incidents, but the headline data masks more serious issues, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Post Office was told in 2013 that Fujitsu witness was unreliable in subpostmaster prosecutions

The Post Office was warned that a former Fujitsu employee had misled courts when giving evidence on its behalf Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK faces significant cyber talent shortfall

Cyber security sector is struggling to attract the talented workforce it needs Continue Reading

By

• Alex Scroxton, Security Editor

How to choose the right email security service for your organisation

With email security threats growing rapidly, businesses can quickly identify and block these by using a top email security service. Here’s how to select the right provider Continue Reading

By

• Nicholas Fearn

Employees must be given the right to disconnect

As enterprises increasingly turn to workplace monitoring technologies and more of the workforce moves to remote or hybrid working, unions are campaigning for workers’ ‘right to disconnect’ and not engage in digitally enabled work after hours Continue Reading

By

• Andrew Pakes, Prospect Union

NUHS taps RPA in Covid-19 swab tests

Singapore’s National University Health System deploys RPA bots to automate patient registration during Covid-19 swab tests as part of broader efforts to improve efficiency Continue Reading

By

• Aaron Tan, TechTarget

NCSC beefs up support for education sector after spate of attacks

Refreshed guidance from the NCSC recommends a defence-in-depth strategy as schools and universities face a renewed wave of cyber attacks Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Attacks on CNI – an evolving frontier in warfare

In the light of increasing cyber attacks on critical national infrastructure, what are the immediate risks to industrial control systems and other operational technology, and what steps can be taken to address them? Continue Reading

By

• Asaf Weisberg, ISACA board of directors

Post Office staff instructed to shred documents that undermined its claims Horizon was robust

Barrister advising the Post Office in 2013 stated that destroying documents would "amount to a conspiracy to pervert the course of justice" Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

$50m ransomware demand on Acer is highest ever

Record-breaking double-extortion cyber attack saw REvil gang exfiltrate financial data from Taiwan-based PC manufacturer Continue Reading

By

• Alex Scroxton, Security Editor

Unionised drivers call on Microsoft to suspend Uber’s Face API licences

Unionised private hire drivers in the UK are calling for Microsoft to suspend Uber’s licences to use its Face API technology after claims the ride-hailing firm’s ID-checking system has led to drivers losing their jobs and having licences revoked Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Back to square one – ground-up CNI protection

In the light of increasing cyber attacks on critical national infrastructure, what are the immediate risks to industrial control systems and other operational technology, and what steps can be taken to address them? Continue Reading

By

• Matthias Reinwarth, KuppingerCole

CIO interview: Juliette Atkinson, IT director, Bradford University

Bradford University’s IT director took a different route than most to get into IT leadership Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office IT scandal executive forced out of job at Football Association of Wales

Angela van den Bogerd has left her role at the Football Association of Wales, following criticism of her part in Post Office IT scandal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government to bail out Post Office which can’t afford to pay compensation to subpostmasters

The Post Office does not have enough money to pay compensation to the subpostmasters it wrongfully prosecuted Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Subpostmasters in Court of Appeal to end 20-year torment

Subpostmasters heading to Court of Appeal to clear their names in what is potentially the biggest miscarriage of justice in English legal history Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Take a realistic perspective on CNI cyber attacks

In light of increasing cyber attacks on critical national infrastructure, what are the immediate risks to industrial control systems and other operational technology, and what steps can be taken to address them? Continue Reading

By

• Andrew Morris, Turnkey Consulting

Capita restructures to simplify its business

Business services supplier creates two core units that focus on public sector and commercial enterprise customers and will sell off non-core assets Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: CNI operators must focus on core issues

In the light of increasing cyber attacks on critical national infrastructure, what are the immediate risks to industrial control systems and other operational technology, and what steps can be taken to address them? Continue Reading

By

• Petra Wenham