IT security

The UK government data protection reforms - good for business, but are they good for you?

This is a guest post by Computer Weekly security editor Alex Scroxton, which features in the 21 September issue of the Computer Weekly digital magazine as its leader column. It is hard to sum up ... Continue Reading

By

• Bryan Glick, Editor in chief

European president outlines tech vision to drive Europe

President of the European Commission has set out plans for a stronger European economy, with less reliance on US and Chinese tech giants Continue Reading

By

• Cliff Saran, Managing Editor

Travel-themed phishing lures spiked this summer

As people begin to take holidays again after more than a year of restrictions and lockdowns, opportunist cyber criminals have taken note, according to new data from Palo Alto’s Unit 42 Continue Reading

By

• Alex Scroxton, Security Editor

Interview: Chancellor of the Exchequer Rishi Sunak on supporting the UK tech sector

Computer Weekly talked to Sunak at a Treasury event in front of an audience of tech sector leaders, investors and startups, to discuss how the government can support the digital economy Continue Reading

By

• Bryan Glick, Editor in chief

Kerberos

Kerberos is a protocol for authenticating service requests between trusted hosts across an untrusted network, such as the internet. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor
• Michael Cobb

Microsoft patches 66 vulnerabilities in September update

Another lighter-than-usual Patch Tuesday update includes important fixes for recently disclosed vulnerabilities, including a dangerous zero-day, and an update in the PrintNightmare saga Continue Reading

By

• Alex Scroxton, Security Editor

Australia and Singapore have higher incidences of insecure databases

Five-year longitudinal study by Imperva shows the proportion of databases with at least one known vulnerability in Australia and Singapore are among the world’s highest Continue Reading

By

• Aaron Tan, TechTarget

Mass health tracker data breach has UK impact

The leak of a database of 61 million users of health-tracking devices includes records on individuals located in the UK Continue Reading

By

• Alex Scroxton, Security Editor

Cost of ransomware attack in financial sector exceeds $2m

Mid-sized financial services organisations worldwide spend an average of over $2m recovering from ransomware attacks Continue Reading

By

• Alex Scroxton, Security Editor

Apple patches ForcedEntry vulnerability used by spyware firm NSO

Apple patches ForcedEntry vulnerability that was used to target political activists with spyware Continue Reading

By

• Alex Scroxton, Security Editor

BT advances hollow core fibre research with world’s first trial of quantum-secure comms

Incumbent UK telco announces latest innovations in hollow core fibre by conducting trial of ultra-secure network communications using commercial equipment over a 6km long Lumenisity CoreSmart cable Continue Reading

By

• Joe O’Halloran, Computer Weekly

Is 3D printing about to hit the mainstream?

In this week’s Computer Weekly, we find out about the emerging consumer services using 3D printing and ask if the technology is about to go mainstream. Our latest buyer’s guide looks at the importance of sustainable datacentres. And we analyse the risks of increasing contactless card spending limits and whether tech could help. Read the issue now. Continue Reading

Smishing attacks up sevenfold in six months

Scam text messages are reaching pandemic proportions, thanks in part to the pandemic Continue Reading

By

• Alex Scroxton, Security Editor

Olympus likely victim of BlackMatter ransomware

Key IT systems remain shut off at Olympus, five days after what seems to have been a BlackMatter ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

promiscuous mode

In computer networking, promiscuous mode is a mode of operation, as well as a security, monitoring and administration technique. Continue Reading

By

• Rahul Awati

deep packet inspection (DPI)

Deep packet inspection (DPI) is an advanced method of examining and managing network traffic. Continue Reading

By

• Rahul Awati
• Jessica Scarpati

UK government’s new digital identity system to cost up to £400m

Cabinet Office is seeking £300m-£400m in funding to build its replacement for the failed Gov.uk Verify system, which itself cost over £220m Continue Reading

By

• Bryan Glick, Editor in chief

UK GDPR faces changes under planned reforms

DCMS is launching a major consultation on proposed changes to the UK’s data protection regime, under which several key elements of the GDPR are likely to change Continue Reading

By

• Alex Scroxton, Security Editor

Latest Microsoft zero-day being actively exploited

New Microsoft zero-day CVE-2021-40444 affects multiple versions of Windows and is probably being exploited through convincing phishing attacks Continue Reading

By

• Alex Scroxton, Security Editor

CW Europe: Dutch researchers build security software to mimic human immune system

In this issue of CW Europe, find out how researchers in the Netherlands are attempting to help IT systems fight certain cyber attacks in a similar way to the human immune system works. One of the team at Dutch research institute TNO was originally an immunologist, and saw parallels with the human immune system in the field of cyber security. Also in this issue, find out about the so-called “Klarna academy” in Stockholm, which has created the next set of Nordic fintech entrepreneurs. Continue Reading

Law enforcement: Question the tech sector's motives

Perhaps there are application areas where law enforcement technology should not be used, one of the witnesses at a recent Justice and Home Affairs Committee meeting warned. Experts from the US, New ... Continue Reading

By

• Cliff Saran, Managing Editor

Dutch researchers build security software to mimic human immune system

 Continue Reading

REvil reappearance may herald new ransom campaigns

The re-emergence of the infamous REvil ransomware gang is a likely sign that more high-profile attacks will unfold over the coming weeks Continue Reading

By

• Alex Scroxton, Security Editor

Covid positive for security market, but still a source of stress

CIISec’s latest “State of the profession report” highlights both positives and challenges for cyber pros arising from the past two years Continue Reading

By

• Alex Scroxton, Security Editor

Marriages Are Back On The Agenda – Even In IT

Ah – the return of “normality” in the UK – i.e., people are still getting ill but the government admits it doesn’t care any longer, other than by increasing taxes… But enough of the ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Stolen credit card data worth about £13 on dark web, PayPal worth more

The average price of a stolen credit card on a dark web marketplace comes in at around $17.40, or £12.60, according to new data – but the real money for cyber criminals is in hacked PayPal accounts Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Optimising privacy, post-GDPR

Airbus CyberSecurity CTO Paddy Francis explores the impact of regulation on data protection, and how it has changed how one goes about optimising data privacy in the enterprise Continue Reading

By

• Paddy Francis

Bridging the gender gap in cyber security

Some professional groups and companies in Asia are working hard to improve awareness of the cyber security profession and mentoring talented women in a bid to bridge the gender gap Continue Reading

By

• Aaron Tan, TechTarget

Procuring law enforcement tech needs greater scrutiny

Tech firms are playing a high-stakes game to drive adoption of artificial intelligence and surveillance technology in law enforcement Continue Reading

By

• Cliff Saran, Managing Editor

OT security in APAC remains work in progress

Two operational technology security experts shed light on the state of OT security in the region, and what’s being done to address skills, competency and organisational challenges Continue Reading

By

• Aaron Tan, TechTarget

ICO in bid to end cookie pop-ups

Outgoing information commissioner Elizabeth Denham will call on her equivalents across the G7 group of countries to collaborate on an overhaul of cookie consent pop-ups Continue Reading

By

• Alex Scroxton, Security Editor

Banking anti-fraud scheme blocks 65% more fraud

Scheme designed to protect vulnerable people against banking fraud has been expanded to include online scams Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: A response to planned data protection changes

The ISF’s Emma Bickerstaffe assesses how organisations might respond to proposed changes to the UK’s data protection regime Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Highways England delivers a digital roadmap

In this week’s Computer Weekly, we talk to the CDIO of Highways England about her digital services and asset management plans. We explore SIEM and SOAR security tools. And we find out how McLaren Racing is using data analytics to build its cars more efficiently. Read the issue now. Continue Reading

Are proposed data protection changes a threat to UK citizens’ privacy?

Though changes are as-yet undefined pending an upcoming consultation, concerns are already being expressed over the government’s plan to liberalise data protection laws in the service of innovation and growth Continue Reading

The rise of the chief risk officer

The impact of the Covid-19 pandemic has seen chief risk officers take their rightful place in the boardroom Continue Reading

By

• Chris Lorigan

UK’s new data protection strategy risks costing business more than it gains

The apparent business benefits of pursuing data adequacy agreements around the world may not be as enticing as they at first appear Continue Reading

By

• Ben Rapp

How NZ schools are tapping managed network services

Using managed network services has freed up time and resources for New Zealand school teachers and alleviated the pressure and challenges of maintaining technology infrastructure Continue Reading

By

• Aaron Tan, TechTarget

How do SOAR and SIEM services fare in a rapidly changing cyber threat landscape?

Given that cyber risks are rapidly growing in sophistication and number, we look at whether SIEM and SOAR security tools are still effective Continue Reading

By

• Nicholas Fearn

Berlin court reverses ban on use of EncroChat evidence in criminal trials

Berlin Superior Court allows use of EncroChat evidence in criminal trials but lawyers say the question will ultimately need to be decided by the German Supreme Court Continue Reading

By

• Bill Goodwin, Computer Weekly

Mandiant, Sophos detail dangerous ProxyShell attacks

Threat researchers and incident responders continue to track threat activity around the dangerous ProxyShell Microsoft Exchange vulnerabilities, including impactful ransomware hits Continue Reading

By

• Alex Scroxton, Security Editor

China accused of cyber attacks on Norwegian IT systems

China-based cyber attackers have been blamed for multiple assaults on IT systems in Norway Continue Reading

By

• Gerard O'Dwyer

How high can the contactless card limit go without two-factor authentication?

The spending limit for contactless cards has reached an eyebrow-raising triple-digit figure – £100 – raising questions about the need for user authentication Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

WhatsApp fined €225m over GDPR breaches

Irish data protection watchdog has issued one of the largest GDPR fines to date against Facebook-owned WhatsApp Continue Reading

By

• Alex Scroxton, Security Editor

Finance firms faced up to £760,000 costs per DNS attack during pandemic

Financial services firms have been the focus of attacks by cyber criminals during the Covid-19 crisis Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Protecting children in the digital playground

The ICO’s Age Appropriate Design Code ushers in a new set of standards that advance children’s rights in the digital age Continue Reading

By

• Rachel O’Connell

Twitter tests auto-block feature for accounts at risk of abuse

Latest Twitter feature automatically blocks abusive users, and is intended to help victims regain control of their experience on the platform Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Managing data securely throughout its lifecycle

Managing data in a secure manner is key to ensuring its integrity and therefore its value to the organisation, as well as reducing risk from breaches and misinformation Continue Reading

By

• Andrew Morris, Turnkey Consulting

Experts warn on Office 365 phishing attacks

Newly observed campaign is particularly dangerous because it appears to neutralise one of the most widely known anti-phishing techniques Continue Reading

By

• Alex Scroxton, Security Editor

Remote workers routinely bypassed security tools during pandemic

New data from Palo Alto Networks reveals that over 25% of UK security leaders saw their employees circumventing or switching off security measures at the height of the pandemic Continue Reading

By

• Alex Scroxton, Security Editor

Making a mark in cyber security

Claudean Zheng’s knack for hacking landed her a career in cyber security, one that has been dotted by stints in both public and private sectors Continue Reading

By

• Aaron Tan, TechTarget

GovTech launches vulnerability rewards programme

Vulnerability rewards programme will offer rewards ranging from $250 to $5,000 to white hat hackers who find vulnerabilities in critical government systems Continue Reading

By

• Aaron Tan, TechTarget

logic bomb

A logic bomb is a string of malicious code that is inserted intentionally into a program to harm a network when certain conditions are met. Continue Reading

By

• Rahul Awati
• Laura Fitzgibbons

Electronic Code Book (ECB)

Electronic Code Book (ECB) is a simple mode of operation with a block cipher that's mostly used with symmetric key encryption. Continue Reading

By

• Rahul Awati

Supply chain cyber security is only as strong as the weakest link

A spate of high-profile cyber attacks has highlighted the criticality of supply chain security and put new pressures on security leaders. How can we ensure that cyber security remains robust down the full length of supply chains? Continue Reading

By

• Martin Smith, SASIG

How the cyber security market is evolving

The cyber security market has gained even greater importance in the post-Covid era and continues to grow and evolve. But what factors are driving trends in that market and what should your organisation consider when making cyber security investments? Continue Reading

By

• Warwick Ashford, Senior analyst

Are proposed data protection changes a threat to UK citizens’ privacy?

Though changes are as-yet undefined pending an upcoming consultation, concerns are already being expressed over the government’s plan to liberalise data protection laws in the service of innovation and growth Continue Reading

By

• Alex Scroxton, Security Editor

stateful inspection

Stateful inspection, also known as dynamic packet filtering, is a firewall technology that monitors the state of active connections and uses this information to determine which network packets to allow through the firewall. Continue Reading

By

• Robert Sheldon

Tech giants commit to Biden's cyber security action plan

Some of the world’s most prominent tech giants have made a series of commitments to enhance the US’ national cyber security posture following a high-profile meeting with president Biden Continue Reading

By

• Alex Scroxton, Security Editor

Government unveils post-Brexit data flow proposals

The government will pursue data partnerships with countries including Australia, South Korea and the US as part of a post-Brexit data regime that may also see substantial changes to the UK’s data protection law Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Steps to a solid data privacy practice

Petra Wenham of the BCS shares her expertise on building, or rebuilding, a solid business data privacy practice in a post-Covid-19 world Continue Reading

By

• Petra Wenham

NZ privacy lead John Edwards named new information commissioner

DCMS has named John Edwards, currently New Zealand privacy commissioner, to succeed Elizabeth Denham as UK information commissioner Continue Reading

By

• Alex Scroxton, Security Editor

How women can succeed in cyber security

A cyber security professional at Australia’s IAG shares her career journey and insights on how women can succeed in the field Continue Reading

By

• Stephen Withers

Calling the cops for ransomware attacks doesn’t help, say cyber pros

A new study for the #Ransomaware campaign reveals some insight into why so few victims report ransomware attacks Continue Reading

By

• Alex Scroxton, Security Editor

UK loses £1.3bn to fraud and cyber crime so far this year

New figures from the National Fraud Intelligence Bureau show a threefold spike in reported financial losses to fraud and cyber crime in the first six months of 2021 Continue Reading

By

• Alex Scroxton, Security Editor

13 million malware attacks on Linux seen in wild

Cryptominers, web shells and ransomware are the most common varieties of malwares targeting Linux systems, thanks to its prevalence as the backbone of most public cloud services Continue Reading

By

• Alex Scroxton, Security Editor

Half of MS Exchange servers at risk in ProxyShell debacle

Up to 50% of MS Exchange users in the UK are exposed to three vulnerabilities that are now being actively exploited Continue Reading

By

• Alex Scroxton, Security Editor

The ransomware debate – to pay or not to pay?

The debate around banning ransomware payments is highly nuanced, and we must take care to avoid overt victim-blaming, in favour of an open and honest approach, says SASIG’s Martin Smith Continue Reading

By

• Martin Smith, SASIG

Over a million opt out of NHS data-sharing

Failure to communicate benefits of data-sharing proposals and privacy concerns are prompting large numbers of people to opt out of a proposed NHS Digital scheme Continue Reading

By

• Alex Scroxton, Security Editor

How datacentre power growth is leaving Dublin in distress

In this week’s Computer Weekly, we look at the challenges faced by Dublin’s datacentre sector, as growth leaves the city’s electricity infrastructure creaking. We ask whether recent initiatives to close the UK’s digital skills gaps are working. And we examine the latest injustice to hit the Post Office Horizon scandal. Read the issue now. Continue Reading

Campaign groups claim police have bypassed Parliament with plans for live facial-recognition tech

Civil society groups call for Parliament to scrutinise the use of live facial-recognition cameras Continue Reading

By

• Bill Goodwin, Computer Weekly

More data breaches in Australia arising from ransomware

The number of data breaches in Australia arising out of ransomware attacks grew by 24% during the first half of 2021, according to OAIC’s latest data breach report Continue Reading

By

• Aaron Tan, TechTarget

Building back better "right to work" checks

There is barely a week left to cement the improvements made over the past year and turn potential disaster into triumph by adopting the recommendations of the Better Hiring Institute for a smooth ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Considerations when deciding on a new SIEM or SOAR tool

A successful deployment of any security tool very much depends on the maturity of security processes in the organisation Continue Reading

By

• Cliff Saran, Managing Editor

Flexxon and Lenovo tie up on AI-infused SSDs

Singapore-based Flexxon teams up with Lenovo to make its solid-state drive that uses artificial intelligence to fend off cyber threats available on ThinkPad-based laptops Continue Reading

By

• Aaron Tan, TechTarget

ILOVEYOU virus

The ILOVEYOU virus comes in an email with 'ILOVEYOU' in the subject line and contains an attachment that, when opened, results in the message being re-sent to everyone in the recipient's Microsoft Outlook address book. Continue Reading

By

• Rahul Awati

certificate revocation list (CRL)

A certificate revocation list (CRL) is a list of digital certificates that have been revoked by the issuing Certificate Authority (CA) before their actual or assigned expiration date. Continue Reading

By

• Rahul Awati
• Michael Cobb

Swedish IT industry braced for China’s response to Huawei 5G ban

Swedish IT and communications equipment suppliers fear economic backlash from China following Huawei ban Continue Reading

By

• Gerard O'Dwyer

How the pandemic transformed IAG’s Hangar 51 accelerator

Businesses of all shapes and sizes have had to take a different approach during the pandemic – Dupsy Abiola, head of global innovation at IAG, explains how IAG transformed its Hangar 51 accelerator during the coronavirus outbreak Continue Reading

By

• Clare McDonald, Business Editor

Security Think Tank: Data privacy not in isolation, but on a spectrum

The gap between data privacy and data governance is narrowing, and security leaders need to be aware of the implications, says KuppingerCole’s Anne Bailey Continue Reading

By

• Anne Bailey

Pub apps harvesting swathes of customer data unnecessarily

Some pub and restaurant chain apps demand data such as gender and marital status, raising eyebrows among privacy campaigners Continue Reading

By

• Alex Scroxton, Security Editor

IT leaders fear ‘trickle-down’ of nation-state cyber attacks

Three-quarters of IT decision-makers are concerned that the tactics, techniques and procedures used by nation-state attackers could be used against them Continue Reading

By

• Alex Scroxton, Security Editor

How Australia’s Octopus Deploy is simplifying DevOps

Brisbane-based startup Octopus Deploy recently secured $172.5m in venture funding to advance its goal of simplifying software deployments for DevOps teams Continue Reading

By

• Aaron Tan, TechTarget

MoD seeks security tech to harden military systems

The Defence and Security Accelerator has launched a programme to root out technology that will reduce the military’s exposure to cyber attacks Continue Reading

By

• Alex Scroxton, Security Editor

Global VPN downloads soar in first half of 2021

Song remains the same with VPNs as repressive regimes’ continued regulatory demands and remote working see virtual private network usage rocket over the first six months of the year Continue Reading

By

• Joe O’Halloran, Computer Weekly

Security Think Tank: Data privacy and ethics in a post-Covid world

The radical change caused by the pandemic requires new approaches to data privacy practice, says PA Consulting’s Daniel Gordon Continue Reading

By

• Daniel Gordon

Educational publisher Pearson fined for data breach cover-up

Securities and Exchange Commission says publisher misled its investors over the extent of a 2018 data breach Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Building privacy-preserving apps and platforms

ISACA’s Gaurav Deep Singh Johar explores how to embed privacy practices into digital platform architecture Continue Reading

By

• Gaurav Deep Singh Johar

How to choose between SIEM and SOAR

In this week’s Computer Weekly, our buyer’s guide examines the use of SIEM and SOAR to improve IT security, and asks which you should use, and when? We look at what you need to know about NVMe over Fabrics, the emerging storage networking technology. And we find out how Oracle customers are introducing its Fusion Cloud suite. Read the issue now. Continue Reading

When is SIEM the right choice over SOAR?

Better instrumentation leads to better IT security but monitoring can quickly overload IT teams. Automation can help, but it may not always be needed Continue Reading

ICO consults public on personal data in employment practices

The ICO has launched a public consultation on employers’ use of personal data to help it provide practical guidance for both businesses and workers Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Nearly half of retailers hit by ransomware in 2020

In the face of increasingly prevalent and sophisticated ransomware attacks, retail organisations need to develop alternative ways of restoring lost or encrypted data, as paying the ransom does not guarantee its return in almost a third of cases Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

When is SIEM the right choice over SOAR?

Better instrumentation leads to better IT security but monitoring can quickly overload IT teams. Automation can help, but it may not always be needed Continue Reading

By

• Cliff Saran, Managing Editor

UN special rapporteurs call for surveillance tech moratorium

In the wake of revelations about NSO Groups Pegasus spyware, a number of special rapporteurs from the United Nations are re-igniting calls for a global moratorium on the sale and transfer of surveillance technologies Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Cyber Runway programme supports new security businesses

The Cyber Runway programme is a government-backed scheme to support entrepreneurs, startups and scaleups in launching and growing new security businesses Continue Reading

By

• Alex Scroxton, Security Editor

The DDoS Battle

In the many years I’ve been testing and analysing the security side of IT, one evident point is that the classic forms of attack: identifying common vulnerabilities and Distributed Denial of ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Hospitals see cyber security investment as a low priority

Almost half of hospitals have experienced an IT shutdown as a result of a cyber attack in the past six months, but just over one in 10 hospital executives see cyber security investment as a high priority Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

ICO consults on new international data transfer agreement

Information Commissioner’s Office to consult on its draft international data transfer agreement and guidance, which will replace standard contractual clauses to protect personal data during overseas transfers Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

CW Benelux: Netherlands sees increase in the number of women opting for an ICT career

The IT skills gap in the Netherlands could be about to narrow as more women take up jobs in the sector. Figures from last year revealed that the number of female ICT professionals grew by 6.5%, while the number of male ICT professionals increased by only 1.7%. Read more about it in this issue. Also find out why more openness about ransomware attacks in the Dutch business community could be the first step to defeating a growing problem. Continue Reading

LGA goes live with Digital Pathfinders Programme

Programme offers £20,000 in funding to councils that come up with ‘pioneering solutions’ for cyber security, digital inclusion and connectivity Continue Reading

By

• Lis Evenstad