IT operations management and IT support

NHS partners with libraries to help people access NHS App

The scheme, which will launch in October, will train librarians to support people to download and use the NHS App and NHS.uk Continue Reading

By

• Lis Evenstad

AI innovation key to UK business, but obstacles threaten progress

AI is seen by IT leaders as essential, but it requires innovation, skills and infrastructure – all of which are under pressure from day-to-day firefighting, energy costs and cyber threats Continue Reading

By

• Antony Adshead, Storage Editor

New Qilin tactics a ‘bonus multiplier’ for ransomware chaos

Sophos X-Ops caught the Qilin ransomware gang stealing credentials stored by victims' employees in Google Chrome, heralding further cyber attacks and breaches down the line. Continue Reading

By

• Alex Scroxton, Security Editor

Tech sector layoffs mount amid AI investment frenzy

Technology firms globally are cutting their workforces as they look to increase spending on and investment in artificial intelligence Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Post Office Horizon IT scandal inquiry: Three years of shocking revelations

Over two years of shocking revelations from the Post Office Horizon scandal inquiry Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office Horizon crash disconnected branches from datacentre

The Post Office has apologised to subpostmasters affected by a major IT outage, which stopped them from doing business Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Popular Microsoft apps for Mac at risk of code injection attacks

Researchers at Cisco Talos turn up evidence suggesting that Microsoft apps running on the Apple macOS operating system are not as secure as they seem Continue Reading

By

• Alex Scroxton, Security Editor

How might the UK's cyber landscape change under Labour?

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Dhairya Mehta and Cate Pye

Keeping control of SaaS costs

The ease with which someone with a corporate credit card can buy a SaaS product can lead to runaway costs and data leakage risks Continue Reading

By

• Cliff Saran, Managing Editor

New Relic CEO on APAC growth and future of observability

New Relic CEO Ashan Willy talks up growth trajectory in APAC, the company’s long-term vision, and how going private has enabled it to make strategic investments Continue Reading

By

• Aaron Tan, TechTarget

Thousands of NetSuite customers accidentally exposing their data

Misconfigured permissions across live websites are leaving thousands of NetSuite users open to having their valuable customer data stolen, researchers say Continue Reading

By

• Alex Scroxton, Security Editor

With the right tools and strategy, public cloud should be safe to use

Despite the complexity and evolving nature of threats, with the right strategy, tools, and constant vigilance, businesses can safely and securely leverage public cloud services Continue Reading

By

• Jason Lau

'Black swans' take flight: the legal ramifications of the CrowdStrike incident  

A ‘guinea pig’ approach to testing software could lead to class actions against technology companies Continue Reading

By

• Hermès Marangos

August Patch Tuesday proves busy with six zero-days to fix

Microsoft patches six actively exploited zero-days among over 100 issues during its regular monthly update Continue Reading

By

• Alex Scroxton, Security Editor

NIST debuts three quantum-safe encryption algorithms

NIST has launched the first three quantum-resistant encryption algorithms, and as the threat of quantum-enabled cyber attacks grows greater, organisations are encouraged to adopt them as soon as they can Continue Reading

By

• Alex Scroxton, Security Editor

Labour's first cyber priority must be the NHS

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Adam Button

Deep dive into quantum-resistant cryptography for email security

Quantum computers have the potential to crack many of the encryption methods we currently rely on to keep our digital communications safe. Quantum-resistant cryptography may be the answer Continue Reading

By

• Isla Sibanda

How UK firms can get ready for the implementation of NIS2

Many British companies will need to adhere to NIS2’s cyber security risk management and reporting requirements if they want to continue operating in the EU market and avoid huge fines Continue Reading

By

• Nicholas Fearn

The Security Interviews: Google’s take on confidential computing

We speak to Google’s Nelly Porter about the company’s approach to keeping data as safe as possible on Google Cloud Continue Reading

By

• Cliff Saran, Managing Editor

Royal ransomware crew puts on a BlackSuit in rebrand

The Royal ransomware gang is back, with a new name and refreshed capabilities, including an apparently unique ‘partial encryption’ gambit, according to CISA Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft and CrowdStrike hit back at Delta’s legal threats

Microsoft and CrowdStrike have rejected claims by Delta Air Lines that it was left high and dry amid thousands of flight cancellations during July’s software outage, accusing the airline of ignoring their offers of help and running out-of-date IT systems Continue Reading

By

• Alex Scroxton, Security Editor

Cyber security adoption is vital to Scotland’s space race

Scotland has a golden opportunity to capitalise on space technology to make itself a global leader, but to maximise its potential in the new space race, more attention must be paid to cyber security risk Continue Reading

By

• David Ferguson

2024 seeing more CVEs than ever before, but few are weaponised

The number of disclosed CVEs soared by 30% in the first seven-and-a-half months of the year, but a tiny fraction of these have been exploited by threat actors, a reminder of the importance of focused security strategies Continue Reading

By

• Alex Scroxton, Security Editor

Chinese cyber attack sparks alert over six-year-old MS vuln

After a proof-of-concept for a six-year-old Microsoft vulnerability emerged in a Chinese APT attack chain, defenders should be on the look-out for exploitation of CVE-2018-0824 Continue Reading

By

• Alex Scroxton, Security Editor

Cyber lessons, and priorities for the UK's new government

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Ameet Jugnauth and Mark Pearce

Post Office scandal: Phases 5 and 6 had islands of conscientiousness in great depths of neglect

Computer Weekly rounds up the latest phase of the Post Office Horizon scandal public inquiry after a marathon 16 weeks of questions Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Labour should focus on talent to improve UK's cyber posture

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Elliott Wilkes

Is it time to refresh the UK's cyber strategy?

With Labour returning to 10 Downing Street after 14 years, the Computer Weekly Security Think Tank panellists share advice and wish lists for the new government Continue Reading

By

• Jon Carpenter

When critical cyber response becomes second nature

When alerts and headlines blare out warnings of critical vulnerabilities in widely-used software, the cyber security community needs to adopt a more decisive and clear-cut approach, says Huntress' Chris Henderson Continue Reading

By

• Chris Henderson, Huntress

Campaigners call for evidence to reform UK cyber laws

The CyberUp Campaign for reform of the 1990 Computer Misuse Act launches an industry survey inviting cyber experts to share their views on how the outdated law hinders legitimate work Continue Reading

By

• Alex Scroxton, Security Editor

Norway’s datacentre builders focus on energy efficiency

Datacentre developers in Norway are shifting their focus to energy efficiency, with expected increases in taxation for those who fall short Continue Reading

By

• Gerard O'Dwyer

Breach costs soar as record ransomware payment made

IBM publishes data on the spiralling costs of cyber attacks and data breaches, while researchers identify what appears to be the largest ransomware payment ever made Continue Reading

By

• Alex Scroxton, Security Editor

CISO mentoring – who to turn to when the worst happens

Those who get the role of a CISO may have overcome some professional hurdles, but are they ready to face what comes as part of the job? And who do they ask for advice? We look at the mentoring dilemma Continue Reading

By

• Dan Raywood

Core British Library services to return for new academic year

The British Library’s recovery from a devastating ransomware attack that laid waste to its IT systems continues - with hopes that some of its most popular services will be running again in September Continue Reading

By

• Alex Scroxton, Security Editor

CrowdStrike update chaos explained: What you need to know

A botched software update at cyber security firm CrowdStrike has caused IT chaos around the world. Learn more about the global CrowdStrike update outage as it develops Continue Reading

By

• Alex Scroxton, Security Editor

CrowdStrike says most Falcon sensors now up and running

The vast majority of CrowdStrike Falcon sensors affected by a coding error have now been recovered, with a final resolution expected this week Continue Reading

By

• Alex Scroxton, Security Editor

Cloud security challenges not just technological

The Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading

By

• Temi Akinlade

T-Mobile, KKR form fibre joint venture to acquire Metronet

US 4G LTE and 5G network teams with global investment firm to take control of ISP, serving more than 300 communities across 17 states with multi-gigabit products to businesses Continue Reading

By

• Joe O’Halloran, Computer Weekly

Fortune 500 stands to lose $5bn plus from CrowdStrike incident

The largest global organisations hit by the CrowdStrike-Microsoft incident on 19 July will likely be out of pocket to the tune of billions of dollars Continue Reading

By

• Alex Scroxton, Security Editor

CrowdStrike blames outage on content configuration update

CrowdStrike publishes the preliminary findings of what will be a lengthy investigation into the root causes of the failed 19 July update that caused Windows computers to crash all over the world Continue Reading

By

• Alex Scroxton, Security Editor

Mimecast to buy insider threat specialist Code42

Mimecast is to buy fellow human-centred risk experts Code42 for an undisclosed sum to take advantage of its insider threat and data loss protection specialisms Continue Reading

By

• Alex Scroxton, Security Editor

Post Office ‘acted the victim’ and civil servants ‘abandoned their principles’, says former minister

Former government minister tells inquiry the Post Office always played the victim of subpostmasters that it considered either ‘incompetent’ or ‘criminal’ Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Why did CrowdStrike cause the Windows Blue Screen?

The ‘blue screen of death’ signals a catastrophic Windows failure, which is exactly what many people faced on 19 July 2024 – but why did it happen? Continue Reading

By

• Cliff Saran, Managing Editor

NCA cracks digitalstress DDoS-for-hire operation

The UK authorities have taken down a major component of the multinational DDoS cyber attack-for-hire ecosystem, hacking into the digitalstress.su service and exfiltrating data on its users, who now face arrest Continue Reading

By

• Alex Scroxton, Security Editor

NCSC: Beware of criminal CrowdStrike opportunists

Financially motivated cyber criminals are already conducting opportunistic attacks on organisations that leverage the CrowdStrike incident, and more targeted attacks are sure to follow Continue Reading

By

• Alex Scroxton, Security Editor

CrowdStrike chaos shows risks of concentrated ‘big IT’

The concentration of so much mission-critical technology in the hands of a few large suppliers makes incidents like the Microsoft-CrowdStrike outage all the more dangerous Continue Reading

By

• Alex Scroxton, Security Editor

CrowdStrike update snafu affected 8.5 million Windows devices

About 8.5 million devices globally were hit by the botched CrowdStrike update, with a significant number now back online and operational Continue Reading

By

• Aaron Tan, TechTarget

What happens when the IT infrastructure is too big to fail?

Today’s global outage of Microsoft is rapidly sending shockwaves across all sectors, demonstrating the risk of having a single point of failure Continue Reading

By

• Owen Sayers, Secon Solutions

CrowdStrike security update fails Windows PCs globally

An update to the security firm’s Falcon service has led to many Windows users being unable to work this morning. Microsoft 365 is also affected Continue Reading

By

• Cliff Saran, Managing Editor

UK Cyber Bill teases mandatory ransomware reporting

In the Cyber Security and Resilience Bill introduced in the King's Speech, the UK's new government pledges to give regulators more teeth to ensure compliance with security best practice and to mandate incident reporting Continue Reading

By

• Alex Scroxton, Security Editor

Hackney Council reprimanded over 2020 ransomware attack

The London Borough of Hackney has been reprimanded by the ICO over a series of failures that led to a devastating cyber attack, but at the same time, the regulator praised the local authority for its response and commitment to making improvements Continue Reading

By

• Alex Scroxton, Security Editor

Fujitsu analyst gave witness statements when more qualified colleagues refused

Fujitsu employee provided witness statements to courts in cases against subpostmasters despite not understanding the evidence, after qualified IT experts refused Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Legal, tax and audit professionals look forward to AI efficiency promise

Hundreds of hours a year could be saved through the use of AI in the legal, tax, and risk and compliance fields Continue Reading

By

• Cliff Saran, Managing Editor

Finnish tech sector opposes government’s immigration reforms

The tech sector in Finland fears talent shortage as government introduces stricter immigration policy Continue Reading

By

• Gerard O'Dwyer

NHS Trusts cancelled over 6,000 appointments after Qilin cyber attack

The two NHS Trusts most heavily impacted by the Qilin ransomware attack on pathology services provider Synnovis have cancelled over 6,000 appointments and procedures in the past five weeks Continue Reading

By

• Alex Scroxton, Security Editor

DACH education ‘ready for AI’ as parents call for next phase of innovation

A rallying cry for digital intervention in the sector across the DACH region could set the tone for a continental shift towards more dynamic and intuitive learning in the years to come Continue Reading

By

• Matthew Staff

AT&T loses ‘nearly all’ phone records in Snowflake breach

Hackers have stolen records of virtually every call made by AT&T's customers during a six-month period in 2022, after compromising the US telco's Snowflake data environment Continue Reading

By

• Alex Scroxton, Security Editor

Dutch research firm TNO pictures the SOC of the future

In only a few years, security operations centres will have a different design and layout, and far fewer will remain Continue Reading

By

• Kim Loohius

Civil servant was lone voice on Post Office board to query legal plan that blew taxpayers' cash

Government representative felt he was 'in a minority of one' on the Post Office board of directors in questioning the handling of a High Court battle with subpostmasters that cost £100m Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Setting the high bar in digital transformation

Roel Louwhoff, Standard Chartered’s chief transformation, technology and operations officer, outlines what it takes for the company to become a client-focused, data-driven bank Continue Reading

By

• Aaron Tan, TechTarget

Hyper-V zero-day stands out on a busy Patch Tuesday

Microsoft has fixed almost 140 vulnerabilities in its latest monthly update, with a Hyper-V zero-day singled out for urgent attention Continue Reading

By

• Alex Scroxton, Security Editor

Chinese spies target vulnerable home office kit to run cyber attacks

China’s APT40 is ramping up targeting of victims using vulnerable small and home office networking kit as command and control infrastructure, according to an international alert Continue Reading

By

• Alex Scroxton, Security Editor

Synnovis attack highlights degraded, outdated state of NHS IT

More cyber attacks against the health service are likely, and will succeed if something isn’t done to address the increasingly elderly NHS IT estate, experts are warning Continue Reading

By

• Alex Scroxton, Security Editor

Sir Alan Bates welcomes MP’s elevation to House of Lords

Former Labour MP has moved to the House of Lords where he will continue campaigning for justice for victims of the Horizon scandal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NCA’s Operation Morpheus targets illicit Cobalt Strike use

International law enforcement operation targets cyber criminals using the Cobalt Strike penetration testing framework for dodgy purposes Continue Reading

By

• Alex Scroxton, Security Editor

Cyber Essentials at 10: Success or failure?

The Cyber Essentials scheme passed its 10th anniversary in June 2024. CyberSmart's Adam Pilton reflects on progress and argues that more needs to be done to raise security awareness among Britain's small business community Continue Reading

By

• Adam Pilton

Security Think Tank: Securing today's ubiquitous cloud environment

The Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage Continue Reading

By

• Kashil JagmohanSingh

Nordic banks pursue AI in battle with digital competitors

Traditional Nordic banks are raising their investments in artificial intelligence to help them retain market share in increasingly populated sector Continue Reading

By

• Gerard O'Dwyer

Kyndryl eyes mainframe workloads in ASEAN

Kyndryl and AWS open centre of excellence in Malaysia to help ASEAN enterprises modernise and migrate their mainframe workloads to the cloud Continue Reading

By

• Aaron Tan, TechTarget

How FWD is driving its digital strategy

FWD’s group chief technology and operations officer talks up how the pan-Asian insurer is driving change faster and putting technology at the heart of its services Continue Reading

By

• Aaron Tan, TechTarget

Former Fujitsu engineer says Post Office ‘trapped’ him into giving incomplete evidence

Gareth Jenkins turned his fire on the Post Office on the final day of his marathon evidence session at the Post Office public inquiry Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Experts shocked by ‘extraordinary’ claim made by Post Office IT expert witness

A former Fujitsu engineer made an ‘unbelievable’ claim about evidence he gave in witness statements when acting as an expert witness during Post Office prosecutions of subpostmasters Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Gulf Edge to operate Google Distributed Cloud in Thailand

The Gulf Energy subsidiary will offer Google’s sovereign cloud service in Thailand with a focus on air-gapped configurations Continue Reading

By

• Aaron Tan, TechTarget

Ignorance of ‘legal niceties’ from Post Office expert IT witness saw innocent people jailed

IT expert used by Post Office to give evidence supporting prosecutions of subpostmasters did not understand legal duties he was bound to Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Police Scotland did not consult ICO about high-risk cloud system

Police Scotland chose not to formally consult with the data regulator about the risks identified with a cloud-based digital evidence sharing system, while the regulator itself did not follow up for nearly three months Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Numbers prove former subpostmaster federation boss’s ignorance over Post Office scandal

George Thomson is ignoring the numbers when he downplays subpostmaster prosecutions based on Horizon data Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Sellafield pleads guilty to criminal charges over cyber security

Nuclear Decommissioning Authority-backed organisation Sellafield Ltd pleads guilty to criminal charges brought over significant cyber security failings that could have compromised sensitive nuclear information Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

AI and outsourcing: What’s the future for relationships and contracts? (Part two)

In the second part of this two-part series, two technology lawyers offer guidance on what the integration of artificial intelligence in IT outsourcing and business process outsourcing will mean for customers and providers in outsourcing relationships and contracts Continue Reading

By

• Marl Lewis and Simon Bollans

Metropolitan Police could investigate one of its own staff in Post Office probe

Former Post Office investigator deleted references to software errors in a witness statement from Fujitsu’s Gareth Jenkins during the wrongful prosecution of a subpostmaster Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

ICO police cloud guidance released under FOI

Long-awaited guidance from the UK data regulator on police cloud deployments highlights some potential data transfer mechanisms it thinks can clear up ongoing legal issues, but tells forces it’s up to them to decide if the measures would work Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Post Office Horizon system investigators were blocked and threatened as they witnessed cover-up

Independent investigators who put Post Office and its Horizon system under spotlight faced aggression as they witnessed cover-up Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Microsoft admits no guarantee of sovereignty for UK policing data

Documents show Microsoft’s lawyers admitted to Scottish policing bodies that the company cannot guarantee sensitive law enforcement data will remain in the UK, despite long-standing public claims to the contrary Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Benelux specialised venture capital fund finds global deep tech investments

A venture capital fund in Belgium partners with tech research organisation in its search for investments Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Artificial intelligence to make Olympic Games more inclusive

The International Olympic Committee is working with Intel to use AI at the Paris Olympic and Paralympic Games Continue Reading

By

• Kim Loohuis

Cloud security: Finding the right provider to protect your data

This month, the Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading

By

• Stephen McDermid

Autonomous weapons systems defy rigid attempts at arms control

In an ever more dangerous world, the technology is outpacing diplomacy and holds clear strategic value. Retaining human control over its use will require embracing imperfect solutions Continue Reading

By

• Kyle Hiebert, Computer Weekly

AI and outsourcing: What’s the future? (Part one)

Artificial intelligence is a hot topic in the outsourcing industry, with some predicting that it will revolutionise IT outsourcing and business process outsourcing, while others warn of its potential dangers and challenges Continue Reading

By

• Mark Lewis and Simon Bollans

Once ridiculed Post Office scandal campaigner Alan Bates receives knighthood

Campaigner for justice, once labelled a ‘nutter’ and a ‘thief’, knighted for his work to expose the Post Office scandal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office scandal victims in Scotland have convictions quashed

Scotland follows England, Wales and Northern Ireland in exonerating wrongfully convicted subpostmasters en masse Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Black Basta ransomware crew may be exploiting Microsoft zero-day

A Microsoft vulnerability that was addressed without fanfare in March may in fact have been exploited as a zero-day by the notorious Black Basta ransomware gang, threat hunters warn Continue Reading

By

• Alex Scroxton, Security Editor

Data leakage in the cloud – can data truly be safe in the cloud?

This month, the Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading

By

• Scott Swalling

Q&A: Adalbjorn Thorolfsson on IT project management in Iceland

With a small, but very sophisticated population, Iceland has unique ways of keeping up with the rest of the world in the IT sector. Adalbjorn Thorolfsson, president of the Icelandic Project Management Association, describes some lessons for the rest of the world Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

How to ensure public cloud services are used safely and securely

This month, the Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading

By

• Beji Jacob

True cloud security requires in-depth understanding

This month, the Computer Weekly Security Think Tank considers how CISOs and security practitioners should ensure that the business can make use of public cloud services safely and securely and avoid accidental or deliberate data leakage. Continue Reading

By

• Elliott Wilkes

More than 160 Snowflake customers hit in targeted data theft spree

Mandiant reports that more than 160 Snowflake customers have been hit in a broad data theft and extortion campaign targeting organisations that have failed to pay proper attention to securing valuable credentials Continue Reading

By

• Alex Scroxton, Security Editor

Cobol knowledge crisis threatens Dutch financial systems

Expertise in complex Cobol systems, critical to major financial institutions, is dwindling in The Netherlands, resulting in retired professionals returning work Continue Reading

By

• Kim Loohuis

NHS blood stocks running low after ransomware attack

The NHS is appealing for people with O Positive and O Negative blood types to come forward to donate as hospitals in London struggle to keep critical services running after ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Post Office Capture software training deficit echoes systemic Horizon problems

Post Office branch managers have told Computer Weekly they had no training on how to use Capture software, which pre-dated Horizon Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Driving customer experience through cloud and AI

Autodesk’s global CIO Prakash Kota explains how the company is modernising its IT infrastructure and adopting cloud and AI to drive customer experience Continue Reading

By

• Aaron Tan, TechTarget

Bitdefender makes MDR services free to NHS bodies hit by Qilin

Bitdefender offers NHS bodies affected by a major cyber incident free access to its product suite, as the health service continues to deal with the impact of the Qilin ransomware attack on partner Synnovis Continue Reading

By

• Alex Scroxton, Security Editor