IT security

Draft Covid-19 contact tracing legislation proposes formal oversight

Human Rights Committee chair Harriet Harman has outlined a proposed bill to guarantee the security and privacy of data generated by the UK’s Covid-19 contact tracing app Continue Reading

By

• Alex Scroxton, Security Editor

MPs take part in first live test of remote voting during Covid-19 debate

MPs will use phones and computers to vote from their homes in a House of Commons debate today in the biggest change in parliamentary procedure for 150 years Continue Reading

By

• Bill Goodwin, Computer Weekly

Details released of second UK contact-tracing app development

Contractual documents show Zuhlke Engineering receiving an official start date of 6 May to supply a managed delivery team to support and run proximity mobile application and services for the UK Continue Reading

By

• Joe O’Halloran, Computer Weekly

Pay the ransom and double your recovery costs, report warns

Paying cyber criminals a ransom to recover your data adds over half a million dollars to the cost of organisational recovery, says Sophos Continue Reading

By

• Alex Scroxton, Security Editor

Police failing to consult public on new technologies

A freedom of information campaign has revealed that UK police are largely failing to consult the public on their use of new technologies, with the potential to undermine the principle of policing by consent Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Create healthy habits to avoid burnout

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security professionals manage their increased workload, safeguard their mental well-being and avoid burnout? Continue Reading

By

• Dan Norman

APAC firms still coming to grips with data protection

More governments in Asia are implementing data protection regimes, but challenges such as checkbox compliance and the lack of effective staff training remain Continue Reading

By

• Aaron Tan, TechTarget

Maze ransomware attack will cost Cognizant at least $50m to $70m

Cognizant’s clients cut off the IT supplier’s access to their networks to contain a Maze ransomware attack – effectively putting projects on hold Continue Reading

By

• Bill Goodwin, Computer Weekly

How Australian firms can plug data protection gaps

Australian organisations can address data protection challenges by creating roles such as a data governance lead, classifying data and improving employee awareness of cyber hygiene Continue Reading

By

• Stephen Withers

Banks failing to protect customers from coronavirus fraud

Just 13 of the 64 banks accredited for the government’s Coronavirus Business Interruption Loan Scheme have implemented Dmarc protection Continue Reading

By

• Alex Scroxton, Security Editor

Will the NHS’s Covid-19 contact-tracing app work?

In this week’s Computer Weekly, we get the expert reaction to find out if the NHS contact-tracing app will work. Staying close to clients is crucial through lockdown – we look at the importance of customer experience management. And imagine implementing a digital transformation plan in two weeks – one CIO explains how he did it. Read the issue now. Continue Reading

Four in 10 Australians will share GPS data for alerting

Amid the Covid-19 pandemic, 40% of Australians are likely to share GPS data with the government to facilitate alerting, new study finds Continue Reading

By

• Aaron Tan, TechTarget

DWP takes centre stage in future of Gov.uk Verify

The Government Digital Service (GDS) has published its first blog post on Gov.uk Verify since July 2019. Given the dearth of communications about the troubled digital identity system, it tells a ... Continue Reading

By

• Bryan Glick, Editor in chief

Pitney Bowes hit by Maze in second ransomware attack in a year

Shipping services firm falls victim to Maze ransomware just seven months after a previous major attack Continue Reading

By

• Alex Scroxton, Security Editor

What are the security priorities for the post-coronavirus world?

The Covid-19 pandemic is forcing massive change across the business world and things may never go back to normal. What does security look like in this new world, and what will buyers be prioritising? Continue Reading

By

• Alex Scroxton, Security Editor

Micro Focus sees growth in mainframe migration business

Lifting and shifting Cobol code from mainframes to public cloud has been a growth driver for Micro Focus in the Asia-Pacific region, even as the software supplier continues to diversify its business Continue Reading

By

• Aaron Tan, TechTarget

Zoom buys secure messaging service Keybase

Unified comms platform Zoom says the acquisition of Keybase will finally let it bring end-to-end encryption to the table Continue Reading

By

• Alex Scroxton, Security Editor

Privacy International to Palantir: We are watching you

Privacy International expresses a qualified welcome for Palantir’s responses to questions about its data integration role in the NHS Covid-19 data store, but continues to raise concerns Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

Storage 101: Replication vs backup, and synchronous vs asynchronous

Storage 101: Can replication replace backup? What are the pros and cons of synchronous and asynchronous backup? What’s the best way to mix backup and replication? Continue Reading

By

• Antony Adshead, Storage Editor

HM Treasury tells GDS: No further online services can use Gov.uk Verify

The recent 18-month reprieve for Verify came with strict conditions – the digital identity scheme must not be added to any more services, and existing users must find alternatives Continue Reading

By

• Bryan Glick, Editor in chief

SilverTerrier cyber crime group targets Covid-19 key workers

Organisations on the front line in the fight against coronavirus are under attack from Nigeria’s SilverTerrier criminal gang Continue Reading

By

• Alex Scroxton, Security Editor

6 ways to address COVID-19 food supply chain disruptions

The food supply chain may be broken, but there are initial steps companies must take in the near term. Learn how to bring order to the chaos COVID-19 has brought. Continue Reading

By

• George Lawton

Contact-tracing app fails to protect privacy and human rights

Reassurances over the security and human rights implications of NHSX’s approach to developing its Covid-19 contact-tracing app are insufficient, says the cross-bench Human Rights Committee Continue Reading

By

• Alex Scroxton, Security Editor

Facebook announces oversight board members

New board will rule on freedom of expression issues and make policy recommendations to social media giant. Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

FBI search warrants reveal Trump aide’s messages to WikiLeaks founder Julian Assange

FBI search warrants reveal Trump campaigner Roger Stone sent private messages to WikiLeaks founder Julian Assange after the site published thousands of documents that damaged Hillary Clinton’s election campaign Continue Reading

By

• Bill Goodwin, Computer Weekly

Next round of Zoom updates targets consumer security

Casual consumer users of Zoom will get additional protections in an update to be released over the long weekend Continue Reading

By

• Alex Scroxton, Security Editor

NCSC Covid-19 scam reporting service sees more than 160,000 reports

The general public has taken to the NCSC’s scam reporting service like ducks to water, with thousands of suspicious emails reported to it in just two weeks Continue Reading

By

• Alex Scroxton, Security Editor

CW Benelux: IT budgets up in the air as Covid-19 disrupts business

Computer Weekly's annual IT priorities survey, which was carried out before the arrival of Covid-19 disrupted business plans, found that more than half of the IT leaders in the Benelux region expected budgets to be higher this year than last, and digital transformation would be the main recipient of budget increases. Also find out in this issue why fintechs are attracted to the Netherlands, and how Estonia emerged from Soviet rule to become a digital nation. Continue Reading

Criminal justice system is failing cyber crime victims

Victims of cyber crime face barriers to reporting, receiving support and achieving justice, says a Home Office-backed study Continue Reading

By

• Alex Scroxton, Security Editor

Re-purposing data and questionable effectiveness could undermine trust in NHS contact-tracing app

Experts call for greater clarity over how contact-tracing data will be used, while discussing the limitations of the coronavirus app Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

HMRC tackles almost 300 coronavirus phishing websites

Of 292 websites removed since lockdown began on 23 March, 237 were proactively identified by HMRC and 55 were flagged by the public Continue Reading

By

• Alex Scroxton, Security Editor

End-users failing to protect themselves online

Remote workers and stuck-at-home consumers are taking silly risks with their security during the coronavirus pandemic, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Security teams are key workers and need support

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security pros manage their increased workload, safeguard their mental wellbeing, and avoid burnout? Continue Reading

By

• Petra Wenham

Contact tracing: The privacy vs protection debate

The Covid-19 pandemic has necessitated extreme measures not seen in peacetime for over 100 years. Contact-tracing apps are being developed as a tool for managing the pandemic, but are they a step too far? Continue Reading

By

• Peter Ray Allison

Coronavirus: NCSC issues urgent alert for healthcare sector

UK National Cyber Security Centre and US Cybersecurity and Infrastructure Security Agency say they are seeing large-scale campaigns targeting healthcare bodies and medical research organisations Continue Reading

By

• Alex Scroxton, Security Editor

Homeworking - the new norm - is there any other option...

In the last blog, I touched on the lasting effects of the COVID-19 pandemic; the obvious fallout here is the massive increase in home/remote working, something I’ve been practicing since 1989 – ... Continue Reading

By

• Steve Broadhead, Broadband Testing

GoDaddy owns up to October 2019 data breach

Web hosting services provider has suffered yet another security incident, confirming that an unauthorised individual accessed hosting accounts Continue Reading

By

• Alex Scroxton, Security Editor

SD-WAN; One Way To Partly Consolidate The Complex Puzzle That Is Contemporary IT

I was recently sent an article by my PR mate Hannah from one of their clients, Versa – a company I’ve met up with and they talk a lot of common sense, far more than their er, so-called president… ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Security Think Tank: Caring for the IT security caretakers

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security professionals manage their increased workload, safeguard their mental well-being and avoid burnout? Continue Reading

By

• Paddy Francis

Building security and privacy into contact-tracing apps

Governance and data decentralisation are among measures that organisations can take to allay security and privacy concerns over contact-tracing apps, according to RSA Continue Reading

By

• Aaron Tan, TechTarget

Revealed: The man behind the first major computer virus pandemic

After 20 years of silence, Onel de Guzman has admitted unleashing the “Love Bug”, the computer virus that caused havoc by infecting 45 million machines around the world Continue Reading

Xen Orchestra latest victim of Salt cryptojackers

More victims of cyber criminals exploiting two critical Salt vulnerabilities are coming forward Continue Reading

By

• Alex Scroxton, Security Editor

NHSX contact-tracing app needs legislative oversight

Legal experts have told Parliament’s Human Rights Committee that legislation is desirable to ensure public trust in the data security of the Covid-19 coronavirus contact-tracing app Continue Reading

By

• Alex Scroxton, Security Editor

Assange extradition hearing to take place in September following coronavirus lockdown

An extradition hearing against WikiLeaks founder Julian Assange has been delayed by four months, after defence and prosecution lawyers said the Covid-19 lockdown would make it impractical to hold a fair hearing in May Continue Reading

By

• Bill Goodwin, Computer Weekly

Blogging platform Ghost hacked through Salt vulnerability

Publishing service’s network was taken over by illicit cryptominers after failing to patch a critical vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: How to get cyber accountability on the board agenda

We look at how boards should carry out strategic and operational risk profile assessments and plan for compliance on an ongoing basis to avoid fines and damage to the business Continue Reading

By

• Antony Adshead, Storage Editor

Four risks to data privacy and governance amid Covid-19

EY privacy experts assess some of the novel risks to data privacy, protection and governance during the Covid-19 coronavirus pandemic Continue Reading

By

• Pragasen Morgan and Paul Smith

Security Think Tank: CISOs must adapt to fight Covid-19 burnout

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security pros manage their increased workload, safeguard their mental wellbeing, and avoid burnout? Continue Reading

By

• Jason Yakencheck, Isaca

IT Priorities 2020: Compliance and risk are top security concerns

When it comes to security, buyers are prioritising solutions and services that address compliance issues, risk management and data protection, according to the Computer Weekly/TechTarget IT Priorities 2020 study Continue Reading

By

• Alex Scroxton, Security Editor

Research institutes warn of necessity for UK contact-tracing app to link to testing

BCS and Cass Business School call for proposed UK contact-tracing app not to be launched without alignment to testing and warns that without this link, NHS will not be able to “big data” its way out of “no data” situation Continue Reading

By

• Joe O’Halloran, Computer Weekly

NCSC tackles unconscious bias in security terminology

The terms whitelisting and blacklisting are out at the UK’s National Cyber Security Centre Continue Reading

By

• Alex Scroxton, Security Editor

Treasury gives Gov.uk Verify 18-month reprieve due to coronavirus

The government's troubled digital identity system was due to end funding in April 2020 but surge in use due to Universal Credit applications has brought a temporary reprieve Continue Reading

By

• Bryan Glick, Editor in chief

Why you should think before you Zoom

Feel free to use Zoom during the coronavirus lockdown, but think before you discuss anything confidential Continue Reading

By

• Dai Davis, Percy Crow Davis & Co

Security Think Tank: How to manage security team well-being

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security professionals manage their increased workload, safeguard their mental well-being and avoid burnout? Continue Reading

By

• Chris Goslin, Daniel Edwards, Caroline von Koenig

Cyber security skills courses go online during pandemic

The government is turning to online learning to find the next generation of cyber security talent Continue Reading

By

• Alex Scroxton, Security Editor

Critical SaltStack vulnerability affects thousands of datacentres

Critical vulnerabilities in the Salt remote task and configuration framework enable hackers to take control of cloud servers and must be patched right away Continue Reading

By

• Alex Scroxton, Security Editor

Mobile banking customers at risk from new EventBot trojan

Customers of Barclays, HSBC, Santander and many other banks should be alert to a dangerous new trojan Continue Reading

By

• Alex Scroxton, Security Editor

Covid-19 is driving need for zero trust security

This is a guest post by Michael Warnock, Australian head of growth for SecureAuth Cyber attackers are turning their attention to identity, raising the security stakes for Australian companies ... Continue Reading

By

• Aaron Tan, TechTarget

IMDA to issue 5G spectrum to Singtel and StarHub-M1 venture

Singapore’s telco regulator will award 5G spectrum to major operators whose proposals have exceeded its requirements in some cases Continue Reading

By

• Aaron Tan, TechTarget

Coronavirus: GCHQ gets access to NHS data to beef up security

Health secretary gave GCHQ emergency powers to obtain information relating to the security of its networks and IT systems at the beginning of April, it has emerged Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Call for extension to European payment security standard deadline

Payment processors across Europe want more time to meet the SCA payment security standard Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NHSX on track for May launch of Covid-19 contact-tracing app but challenges remain

Leading UK scientific experts assure MPs that much-anticipated application will be ready for launch in May but concede that challenges exist on achieving meaningful uptake Continue Reading

By

• Joe O’Halloran, Computer Weekly

Under the spotlight, video apps rush to strengthen security

Most popular videoconferencing applications now meet Mozilla’s minimum security standards, with fierce competition and public pressure driving rapid improvement Continue Reading

By

• Alex Scroxton, Security Editor

Almost half of security pros being redeployed during pandemic

Close to half of cyber security professionals say they have been taken off some or all of their security duties to focus attention elsewhere during the Covid-19 coronavirus pandemic Continue Reading

By

• Alex Scroxton, Security Editor

Black Rose Lucy ransomware now posing as FBI porn warning

A new strain of Russian-developed ransomware impersonates US federal law enforcement to force payment, says Check Point Continue Reading

By

• Alex Scroxton, Security Editor

When IT met Covid: The World Changed

This the first plague where predictions of its likely local impact reached rulers/politicians/journalists before their subjects/voters/readers starting falling ill and/or dying in large numbers ... ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Julian Assange extradition hearing postponed amid coronavirus lockdown

Julian Assange’s lawyers say they have been unable to communicate or share legal documents with the WikiLeaks founder to enable them to prepare a defence in time for a planned extradition hearing in May Continue Reading

By

• Bill Goodwin, Computer Weekly

Microsoft patches .gif file vulnerability in Teams

Vulnerability could have enabled cyber criminals to use a malicious .gif file to scrape user data and take over Teams accounts Continue Reading

By

• Alex Scroxton, Security Editor

UK tech companies launch online safety body

Online Safety Tech Industry Association unites 14 technology companies to drive conversation and policy around online safeguarding Continue Reading

By

• Alex Scroxton, Security Editor

How Vonage is riding the e-commerce wave in Asia

The surge in online sales across Asia has boosted demand for cloud-based communications services as more e-commerce players look to integrate text messaging, voice and video into customer engagement platforms Continue Reading

By

• Aaron Tan, TechTarget

Australia’s CovidSafe app debuts, source codes to follow

Australia’s contact tracing app has been downloaded more than 1.1 million times, even as privacy concerns linger on Continue Reading

By

• Stephen Withers

Coronavirus: Dutch Covid-19 tracking app stirs national debate

Privacy concerns raised over mobile app to help track and control the spread of coronavirus in the Netherlands Continue Reading

By

• Kim Loohuos

The Security Interviews: Can AV go from dodgy scareware to cyber hero?

Alun Baker, CEO of Clario, is on a mission to rehabilitate the image of consumer security products and take the fear out of selling antivirus. We find out how things are changing Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware-stricken Travelex up for sale

Travelex’s parent Finablr is washing its hands of the ransomware-stricken forex provider as it struggles with the twin shocks of the Covid-19 pandemic and a developing fraud scandal Continue Reading

By

• Alex Scroxton, Security Editor

Technology has brought us together, but can it lead us out of lockdown?

The government needs to tell us more about the NHSX contact tracing app - choices made now around privacy and transparency will affect all our lives as we aim to ease lockdown, says the shadow digital minister Continue Reading

By

• Chi Onwurah, Labour

Public authorities set to receive expanded surveillance powers

UK government wants to extend the number of public authorities able to obtain communications data using mass surveillance Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

iOS zero-day leaves iPhone users dangerously exposed

Researchers identify dangerous vulnerabilities in Apple’s iOS operating system that allow remote code execution on target devices Continue Reading

By

• Alex Scroxton, Security Editor

Zoom to roll out fresh cyber security updates

New features include support for advanced AES 256-bit encryption Continue Reading

By

• Alex Scroxton, Security Editor

A carrot-and-stick approach to fixing cyber security complacency

With a majority of IT decision-makers holding the opinion that their employers are complacent when it comes to data protection, we look at what needs to be fixed, and how to fix it Continue Reading

By

• Matthew Staff

NCSC overwhelmed by response to coronavirus campaign

The UK’s NCSC has taken down more than 80 malicious web campaigns and received 5,000 reports of suspicious emails within 24 hours of launching reporting service Continue Reading

By

• Alex Scroxton, Security Editor

Remote business continuity techniques to implement now

Managing business continuity and disaster recovery without employees on site can be a challenge for an organization that doesn't typically function remotely. Continue Reading

By

• Paul Kirvan

Coronavirus: Banking and mobile sectors collaborate to stop text scams

Initiative aims to protect 50 genuine brands and government organisations from being impersonated by cyber criminals Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Remote compliance assessments and how they are done

Remote working adds to IT compliance risks, but doesn’t remove the need to assess compliance. How are remote compliance assessments carried out and how can you prepare for them? Continue Reading

By

• Antony Adshead, Storage Editor

Coronavirus: Cyber criminals may be changing tactics

Cyber criminals “may soon shift to heavier exploitation of footholds established through phishing and other scams”, warns Cyber Threat Coalition Continue Reading

By

• Alex Scroxton, Security Editor

Amazon’s Whole Foods uses heat mapping to track unionisation efforts

Whole Foods is using mapping technology to predict where strikes or union activity will happen, but organisers can use similar tools for the inverse of bolstering their actions too Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Revealed: The man behind the first major computer virus pandemic

After 20 years of silence, Onel de Guzman has admitted unleashing the “Love Bug”, the computer virus that caused havoc by infecting 45 million machines around the world Continue Reading

By

• Geoff White

Coronavirus: HMRC job retention scheme targeted by cyber criminals

The UK government’s scheme to pay furloughed employees 80% of their wages is being targeted by cyber criminals Continue Reading

By

• Alex Scroxton, Security Editor

When data protection is not enough

Organisations should take a holistic approach to data protection and cyber security in what the CEO of Acronis deems a “cyber protection” strategy Continue Reading

By

• Aaron Tan, TechTarget

NCSC launches coronavirus cyber security campaign

The National Cyber Security Centre has launched a reporting service for scam emails as part of a campaign to help people protect themselves from cyber criminals exploiting the pandemic Continue Reading

By

• Alex Scroxton, Security Editor

IT services company Cognizant warns customers after ‘Maze’ ransomware attack

US IT services company Cognizant alerts customers after the Maze ransomware group launches a cyber attack Continue Reading

By

• Bill Goodwin, Computer Weekly

Zoom and WebEx users targeted by credential stealing attempts

Videoconferencing apps such as Zoom and Cisco’s WebEx are being targeted by cyber criminals trying to steal users’ personal data Continue Reading

By

• Alex Scroxton, Security Editor

Dutch organisations address business email compromise fraud

Public-private partnership in the Netherlands works to break the chains used by fraudsters to carry out BEC attacks Continue Reading

By

• Kim Loohuis

Australian workers are weakest link in fight against cyber attacks

About four in 10 employees are sharing inappropriate data across mobile devices and half of all security incidents in 2019 occurred through inappropriate IT use, new study finds Continue Reading

By

• Aaron Tan, TechTarget

A glossary of the VPN terminology you need to know

For organizations with remote workforces, VPNs can be an essential part of daily life. This VPN glossary explores the essential terms and phrases that constitute VPN services. Continue Reading

By

• Michaela Goss, Senior Site Editor

Supply chain transparency: Technology, partnership and progress

Compliance is mostly voluntary for suppliers, and brand owners don't have to disclose everything. Data collection is mostly manual. But cloud links help, and IoT holds promise. Continue Reading

By

• David Essex, Industry Editor

Coronavirus: How Nominet fights back against malicious domains

Domain name registry has thwarted hundreds of attempts to register malicious .uk domain names during the coronavirus pandemic Continue Reading

By

• Alex Scroxton, Security Editor

EU warns no compromise on privacy as NHS clashes with tech firms on contact tracing

EU and UK regulators express data privacy concerns days after Silicon Valley giants announce collaboration on contact-tracing apps to prevent the spread of the Covid-19 coronavirus Continue Reading

By

• Joe O’Halloran, Computer Weekly

Coronavirus: Security certification body puts exams online

Candidates for certification by the International Association of Privacy Professionals will now be able to sit their exams remotely Continue Reading

By

• Alex Scroxton, Security Editor

Computer Weekly/TechTarget UK IT priorities 2020

The annual Computer Weekly/TechTarget UK IT Priorities 2020 survey of 210 UK IT professionals looks at where IT budgets are being spent Continue Reading

By

• Cliff Saran, Managing Editor

Check Point sounds alarm over double extortion ransomware threat

Researchers say double extortion ransomware attacks are likely to increase in frequency, and warn organisations to be on guard Continue Reading

By

• Alex Scroxton, Security Editor