IT security

The Security Interviews: How the BSI protects the IoT from itself

David Mudd of the BSI reveals how a pragmatic and realistic approach to security vulnerabilities underpins its internet of things kitemark, helping give users the confidence to buy smart devices safely Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Cyber criminals target laid-off workers

Malicious actors are targeting workers laid-off or furloughed during the coronavirus pandemic Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Four steps to container security best practice

Adopting containers promises great organisational efficiency advantages, but the fast-evolving technology can be problematic for security teams. What do CISOs need to know to safeguard containers? Continue Reading

By

• Alan Taberham and Niall Quinn

Why trust is the new currency

Businesses need to engender trust with customers amid the complexity of digital transactions involving multiple third parties, even as consumers are not fully cognizant of the importance of data privacy Continue Reading

By

• Simon Piff

Malaysian minister backtracks on spectrum allocation decision

Amid reports of a surreptitious decision to allocate spectrum to five Malaysian operators, the communications minister rescinds his own order, calling for a more transparent review of the allocation process Continue Reading

By

• Edwin Yapp

Sodinokibi data auctions highlight changing criminal tactics

The operators of the Sodinokibi ransomware strain are auctioning off swathes of stolen data in an apparent bid to raise cash. What is motivating this new tactic? Continue Reading

By

• Alex Scroxton, Security Editor

Security procurement framework goes live for NHS and public sector

Cyber Security Services Framework, developed by NHS Shared Business Services, has formally launched Continue Reading

By

• Alex Scroxton, Security Editor

Infosec 2020: Covid-19 an opportunity to change security thinking

The annual Infosecurity Europe is being held virtually this year, and speakers at an online panel session have been considering the impact of the pandemic on security awareness Continue Reading

By

• Alex Scroxton, Security Editor

Aston Martin swaps out legacy antivirus for AI-driven service

Luxury car manufacturer says the advent of artificial intelligence-powered services will revolutionise its security posture Continue Reading

By

• Alex Scroxton, Security Editor

Keeping IT operations running for remote workers

Measuring employee experience and enabling self-service are some of the ways businesses can manage and empower a remote workforce Continue Reading

By

• Paul Mah

A view from the SOC: Maintaining security capabilities during the pandemic

What are the challenges of maintaining security event and incident detection capabilities in these challenging times? Continue Reading

By

• Tom Hawcutt

VMware vulnerability leaves private clouds open to takeover

Ethical hackers from Citadelo uncovered a vulnerability in VMware Cloud Director that left private cloud owners open to takeover Continue Reading

By

• Alex Scroxton, Security Editor

NIS security regulations proving effective, but more work to do

The UK’s NIS cyber security and risk regulations are proving somewhat effective, according to a government report Continue Reading

By

• Alex Scroxton, Security Editor

What are the security priorities for the post-coronavirus world?

The Covid-19 pandemic is forcing massive change across the business world and things may never go back to normal. What does security look like in this new world, and what will buyers be prioritising? Continue Reading

What will be the IT security priorities of the post-coronavirus world?

In this week’s Computer Weekly, with the working world after the pandemic set to be very different, we assess the IT security priorities for the ‘new normal’. Facial recognition firms are racing to identify people wearing face masks. And how did Europe’s telecoms networks cope with the switch to remote working? Read the issue now. Continue Reading

Privacy campaigners call for radical changes to contact-tracing app

Liberty, Privacy International and the Open Rights Group join calls for the government to either put in place better data protection policies or abandon its Covid-19 contact-tracing app altogether Continue Reading

By

• Alex Scroxton, Security Editor

WikiLeaks founder Julian Assange misses court hearing due to respiratory problems

The WikiLeaks founder is expected to call 21 witnesses during a three-week extradition hearing in September Continue Reading

By

• Bill Goodwin, Computer Weekly

The impact of spycraft on how we secure our data

The history of cyber security owes much to the world of espionage, as a recent, pre-lockdown Science Museum exhibition showed Continue Reading

By

• Mark Hughes

How managed threat hunting helps bust malicious insiders

Managed threat hunting services can help take some of the pressure off security operations centres and help ensure potential breaches don’t escalate into something far worse. We explore one such case with a happy ending Continue Reading

By

• Alex Scroxton, Security Editor

Government launches IoT security funding round

A £400,000 funding pot is on offer for innovators to design schemes that boost internet-of-things security Continue Reading

By

• Alex Scroxton, Security Editor

Test and Trace has not passed data protection impact assessment

Public Health England failed to complete the required impact assessment before launching the Covid-19 Test and Trace programme Continue Reading

By

• Alex Scroxton, Security Editor

How Sega Europe slashed incident response times using cloud SIEM

Gaming company’s SOC radically improves its operational efficiency with Sumo Logic’s cloud SIEM service Continue Reading

By

• Alex Scroxton, Security Editor

Singapore’s contact-tracing app tops privacy study

Singapore’s TraceTogether is least intrusive in terms of privacy communications compared with similar apps in the region, study finds Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: CISO stress – moving from recognition to action

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security professionals manage their increased workload, safeguard their mental well-being and avoid burnout? Continue Reading

By

• Cath Goulding, Nominet

Public Health England to keep contact-tracing data for 20 years

PHE will retain the data it collects via the NHS Test and Trace programme for 20 years Continue Reading

By

• Alex Scroxton, Security Editor

How Zoom is keeping pace with demand for conferencing tools

Magnus Falk, CIO advisor at Zoom, offers insights on how the company is scaling up its resources to meet the growing usage of its service Continue Reading

By

• Aaron Tan, TechTarget

TSB Bank digitises banking forms in response to coronavirus lockdown

As part of its 2022 digital strategy, TSB has begun rolling out electronic forms designed in Adobe XD and processed using Adobe Sign Continue Reading

By

• Cliff Saran, Managing Editor

IoT buyers eye private network deployments for added security

Fully private, segregated networks for IoT deployments are becoming increasingly attractive to many organisations, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Australia is painting a big red cyber target on its critical infrastructure

Australia’s critical infrastructure is particularly vulnerable to cyber attacks right now because of years of under-investment in cyber security and ageing legacy systems Continue Reading

By

• Carlo Minassian

Revealed: Surveillance camera network that covered Dominic Cummings’ lockdown travel

A network of automatic number plate recognition and local authority traffic cameras could help police track Downing Street chief of staff Dominic Cummings’ journeys to Durham and Barnard Castle during the Covid-19 lockdown Continue Reading

By

• Duncan Campbell , 2QQ Ltd, Sussex University

GDPR at two: How far we’ve come, how far we still have to go

Marking two years of the General Data Protection Regulation, industry voices weigh in on the state of data protection and privacy, consider what has changed, and what still needs to change Continue Reading

By

• Alex Scroxton, Security Editor

Enterprise clouds hammered by cyber attacks during pandemic

Remote workers logging onto enterprise cloud service accounts are an easy access point for attackers, says McAfee Continue Reading

By

• Alex Scroxton, Security Editor

PropertyGuru touts 3D virtual viewings with StoryTeller

Southeast Asian property portal PropertyGuru rolls out new capability in its FastKey platform that lets developers showcase properties to prospective buyers through 3D visualisation Continue Reading

By

• Aaron Tan, TechTarget

Fears contact-tracing app will open the floodgates for cyber criminals

Study of UK consumers reveals worries over an uptick in cyber crime and a lack of trust in government Continue Reading

By

• Alex Scroxton, Security Editor

Max Schrems accuses Ireland of ‘Kafkaesque’ delay in Facebook GDPR investigation

Privacy campaigner Max Schrems has urged the European Commission to intervene after the Irish Data Protection Commission allegedly used ‘Kafkaesque’ tactics to delay investigations into Facebook’s compliance with GDPR Continue Reading

By

• Bill Goodwin, Computer Weekly

StrandHogg mobile vulnerability has evil twin

Variant of the dangerous StrandHogg vulnerability affecting Android phones could allow hackers to access almost all apps on a target device Continue Reading

By

• Alex Scroxton, Security Editor

Android security vulnerabilities differ by country, say researchers

Manufacturers of Android devices including Huawei, Samsung and Xiaomi shipped devices with different levels of security in different regions, leaving their users exposed to attack Continue Reading

By

• Alex Scroxton, Security Editor

Can Lady Gaga and Madonna get people to take security seriously?

What does it take to get people to pay attention to cyber security? A celebrity law firm hack may hold some answers. Continue Reading

The Security Interviews: Temper tantrums ahead as GDPR enters its terrible twos?

On the General Data Protection Regulation’s second birthday, Tim Hickman, a data protection lawyer and partner at White & Case LLP, discusses the regulation’s teething troubles and assesses how best to maintain optimum compliance Continue Reading

By

• Alex Scroxton, Security Editor

Can Lady Gaga and Madonna get people to take IT security seriously?

In this week’s Computer Weekly, after hackers threatened to release data from a US law firm’s celebrity clients, will people finally take cyber security seriously? Designing software for older users makes systems better for all – we examine how. And the IT chief at TSB explains how the bank recovered from its 2018 IT disaster. Read the issue now. Continue Reading

Coronavirus: Australia calls for stronger defences amid cyber attacks

The Australian Cyber Security Centre offers guidance for critical infrastructure operators to guard against cyber attacks which have already hit the healthcare sector Continue Reading

By

• Aaron Tan, TechTarget

EasyJet to be sued over customer data breach

If successful, airline’s potential liability for the loss of millions of customer records could be as high as £18bn Continue Reading

By

• Alex Scroxton, Security Editor

How effective security training goes deeper than ‘awareness’

Cyber criminals are constantly developing their techniques and strategies, so security training needs to do the same Continue Reading

By

• Adenike Cosgrove

Covid-19 will leave organisations exposed to higher cyber risks

Hacking attacks and phishing emails could become the new norm, according to research by the World Economic Forum Continue Reading

By

• Bill Goodwin, Computer Weekly

Identification and access management: some possible futures

Learn about how we might be using our heartbeats, brainwaves and eye movements to unlock our mobiles in the future Continue Reading

By

• Francois Lasnier

Hancock to Harman: No contact-tracing privacy law

Health secretary claims existing data protection law is good enough to guarantee the security of contact-tracing data Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: How MyIX is keeping Malaysians connected

Malaysia’s MyIX internet exchange has been classed as critical national infrastructure, with member telcos adding more capacity to meet the surge in demand for internet services Continue Reading

By

• Avanti Kumar

Top 5 VPN myths and misconceptions for IT organizations

Although VPN technology has its challenges, various misconceptions exist that can muddle IT teams' understandings of VPNs. Here are five common VPN misconceptions debunked. Continue Reading

By

• Michaela Goss, Senior Site Editor

NCSC discloses multiple vulnerabilities in contact-tracing app

National Cyber Security Centre has received mountains of feedback on the security of the government’s Covid-19 contact-tracing app, and has now taken the step of making multiple disclosures Continue Reading

By

• Alex Scroxton, Security Editor

Serco exposes contact tracers’ data in email error

Error saw almost 300 coronavirus contact tracers’ email addresses made visible to other recipients of the message Continue Reading

By

• Alex Scroxton, Security Editor

Personal devices putting Singapore employers at risk

More than half of Singapore respondents to a CrowdStrike-commissioned survey believe their devices are only somewhat secure against advanced cyber threats Continue Reading

By

• Aaron Tan, TechTarget

Responsible Cyber acquires Secucial in S$7m deal

Singapore startup Responsible Cyber plans to bolster its Immune platform with access control management capabilities, and sets out to expand its global footprint Continue Reading

By

• Aaron Tan, TechTarget

Microsoft Build 2020: Focus on protecting data for AI development

Microsoft Build is always a vital event for developers across the IT industry. This year, Microsoft has expanded its AI emphasis Continue Reading

By

• Nicholas McQuire

Supply chain recovery post-COVID-19: Risk, disruption and tech

The coronavirus pandemic exposed the fragility of global supply chains and leaders must turn their attention to boosting resiliency. Here's how to start. Continue Reading

By

• Eric Kimberling, Third Stage Consulting Group

Cancelled NCSC CyberUK event gets green light for 2021

The NCSC’s popular CyberUK event has been rescheduled to next year, and will again take place in Newport in south Wales Continue Reading

By

• Alex Scroxton, Security Editor

GDPR wholly inappropriate to govern contact-tracing data

Human Rights Committee Chair Harriet Harman says current data protection law is not up to the job of governing the data collected by the Covid-19 contact-tracing app Continue Reading

By

• Alex Scroxton, Security Editor

Doubts mount over effectiveness of UK contact-tracing app

Studies from BCS and Anomali reveal that a significant proportion of the UK population is not prepared to download the Covid-19 contact-tracing app Continue Reading

By

• Joe O’Halloran, Computer Weekly

Nine million EasyJet customer details lost in data breach

Cyber attack on EasyJet’s systems originated from a highly sophisticated source, says the airline Continue Reading

By

• Alex Scroxton, Security Editor

Sodinokibi cyber criminals plot to ‘auction’ Madonna data

The cyber criminal gang behind a recent attack on a New York law firm is planning to auction off its client data, one person at a time Continue Reading

By

• Alex Scroxton, Security Editor

Blue tooth, not privacy, is the problem with NHSX

He would never enable Bluetooth on a mobile phone because of its inherent security problems. It is unclear how many of these have been fixed with the latest releases. But some are unlikely to be ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Huawei: US using technological strengths to ‘crush’ companies outside its own borders

Chinese tech giant hits back at White House decision to extend technology ban and says it will ultimately be self-harming Continue Reading

By

• Joe O’Halloran, Computer Weekly

GitLab makes foray into Southeast Asia

GitLab expands in Southeast Asia with a Singapore presence to shore up its growing footprint across the Asia-Pacific region Continue Reading

By

• Aaron Tan, TechTarget

Vast majority of cyber attacks are easy to stop, says Verizon

Almost 90% of data breaches are motivated by the prospect of financial gain, but cyber criminals have clearly defined breach pathways, giving the good guys an advantage if they care to use it Continue Reading

By

• Alex Scroxton, Security Editor

Contact tracing: The privacy vs protection debate

The Covid-19 pandemic has necessitated extreme measures not seen in peacetime for over 100 years. Contact-tracing apps are being developed as a tool for managing the pandemic, but are they a step too far? Continue Reading

DevOps improve code quality, but security must happen sooner

GitLab survey finds developers are adopting DevOps to improve code quality, but more needs to be done on secure coding Continue Reading

By

• Cliff Saran, Managing Editor

Malaysia’s data protection practices still have some way to go

Some Malaysian firms are not using data protection tools to the fullest potential, while others only think about data protection after a breach Continue Reading

By

• Edwin Yapp

Why a pandemic-specific BCP matters

Many organisations still do not have scenario-specific business continuity plans, which are helpful when the situation requires a customised response, such as a pandemic, according to Forrester Continue Reading

By

• Aaron Tan, TechTarget

Protecting Data or “Saving Lives; Saving Livelihoods”: Which comes first in a post Covid World?

Almost every nation except for those which already had them as a legacy of SARS (e.g. Singapore, South Korea and Taiwan) has had to move fast to produce computer systems that will help support a ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Should COVID-19 halt your ERP implementation? 12 questions

The COVID-19 pandemic is casting doubt on whether ERP and enterprise business applications projects should move forward. Here's help on deciding. Continue Reading

By

• Eric St-Jean

Questions raised after UK’s electrical grid shrugs off cyber attack

Attack on Elexon was resolved within hours with no impact on the national electricity supply, but it could have been much worse Continue Reading

By

• Alex Scroxton, Security Editor

Law firm hackers threaten to release dirt on Trump

A new ransom demand of $42m has been made against New York law firm Grubman, Shire, Meiselas and Sacks, and it may be the largest ever, say security experts Continue Reading

By

• Alex Scroxton, Security Editor

Harman seeks to bring private member’s bill over contact tracing

Chair of Human Rights Committee aims to put the proposed Contact Tracing (Data Protection) Bill 2020 before parliament as a private member’s bill if necessary Continue Reading

By

• Alex Scroxton, Security Editor

Australian firms soldier on amid Covid-19 outbreak

From the largest financial institutions to small companies, Aussie firms have been dialling up their use of technology tools to keep their businesses humming during the coronavirus pandemic. Continue Reading

How APAC firms are coping with the Covid-19 outbreak

The air of change looms large in companies operating in the Asia-Pacific region, with some doing better than others in keeping the lights on amid the coronavirus pandemic. Continue Reading

Venafi buys cloud protection service Jetstack

Jetstack specialises in open source machine identity protection software for Kubernetes and cloud native ecosystems Continue Reading

By

• Alex Scroxton, Security Editor

China targeting Covid-19 researchers through IT suppliers, claims US

The US CISA says it is seeing targeting and attempted network compromise of Covid-19 research centres by China Continue Reading

By

• Alex Scroxton, Security Editor

UK’s contact-tracing app targeted by scammers

Even though it is only operational on the Isle of Wight as a beta test, the UK government’s coronavirus contact-tracing app has already attracted the attention of cyber criminals Continue Reading

By

• Alex Scroxton, Security Editor

SK Telecom brings quantum security to the masses

The South Korean telco is readying the world’s first 5G smartphone equipped with a quantum random number generator chipset Continue Reading

By

• Aaron Tan, TechTarget

Surveillance capitalism in the age of Covid-19

Could the Covid-19 coronavirus pandemic further consolidate surveillance capitalist practices and enterprises? Author Shoshana Zuboff warns Computer Weekly it is possible Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Report reveals inadequate cyber security at Schiphol Airport

A report has revealed problems with critical security systems in Amsterdam’s Schiphol Airport Continue Reading

By

• Kim Loohuis

Podcast: UK SME planning and compliance for ‘the new normal’

We look at how UK SMEs face a “new normal” following the coronavirus lockdowns and how they can plan for compliance with more remote working and a new data landscape Continue Reading

By

• Antony Adshead, Storage Editor

Security Think Tank: Burnt out CISOs are a huge cyber risk

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security pros manage their increased workload, safeguard their mental wellbeing, and avoid burnout? Continue Reading

By

• Cavan Arrowsmith, Turnkey Consulting

Nation state APT groups prefer old, unpatched vulnerabilities

The Cybersecurity and Infrastructure Security Agency and the FBI have published details of the most commonly exploited vulnerabilities of recent years, and there are some “classics” on the list Continue Reading

By

• Alex Scroxton, Security Editor

Can Lady Gaga and Madonna get people to take security seriously?

What does it take to get people to pay attention to cyber security? A celebrity law firm hack may hold some answers Continue Reading

By

• Alex Scroxton, Security Editor

British public largely distrustful of technology companies, says report

High levels of distrust in the motivations of technology companies and a lack of meaningful influence over their behaviour has left the British public feeling digitally disempowered, says Doteveryone report Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Microsoft fixes 16 critical vulnerabilities on Patch Tuesday

The trend towards mammoth Patch Tuesdays continues as Microsoft fixes 111 vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

European comms bodies set up standards group, call for vigilance on contact-tracing apps

New ETSI group will develop standardisation framework for secure smartphone-based proximity tracing systems, helping to break Covid-19 transmission chains Continue Reading

By

• Joe O’Halloran, Computer Weekly

Draft Covid-19 contact tracing legislation proposes formal oversight

Human Rights Committee chair Harriet Harman has outlined a proposed bill to guarantee the security and privacy of data generated by the UK’s Covid-19 contact tracing app Continue Reading

By

• Alex Scroxton, Security Editor

MPs take part in first live test of remote voting during Covid-19 debate

MPs will use phones and computers to vote from their homes in a House of Commons debate today in the biggest change in parliamentary procedure for 150 years Continue Reading

By

• Bill Goodwin, Computer Weekly

Details released of second UK contact-tracing app development

Contractual documents show Zuhlke Engineering receiving an official start date of 6 May to supply a managed delivery team to support and run proximity mobile application and services for the UK Continue Reading

By

• Joe O’Halloran, Computer Weekly

Pay the ransom and double your recovery costs, report warns

Paying cyber criminals a ransom to recover your data adds over half a million dollars to the cost of organisational recovery, says Sophos Continue Reading

By

• Alex Scroxton, Security Editor

Police failing to consult public on new technologies

A freedom of information campaign has revealed that UK police are largely failing to consult the public on their use of new technologies, with the potential to undermine the principle of policing by consent Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Create healthy habits to avoid burnout

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security professionals manage their increased workload, safeguard their mental well-being and avoid burnout? Continue Reading

By

• Dan Norman

APAC firms still coming to grips with data protection

More governments in Asia are implementing data protection regimes, but challenges such as checkbox compliance and the lack of effective staff training remain Continue Reading

By

• Aaron Tan, TechTarget

Maze ransomware attack will cost Cognizant at least $50m to $70m

Cognizant’s clients cut off the IT supplier’s access to their networks to contain a Maze ransomware attack – effectively putting projects on hold Continue Reading

By

• Bill Goodwin, Computer Weekly

How Australian firms can plug data protection gaps

Australian organisations can address data protection challenges by creating roles such as a data governance lead, classifying data and improving employee awareness of cyber hygiene Continue Reading

By

• Stephen Withers

Banks failing to protect customers from coronavirus fraud

Just 13 of the 64 banks accredited for the government’s Coronavirus Business Interruption Loan Scheme have implemented Dmarc protection Continue Reading

By

• Alex Scroxton, Security Editor

Will the NHS’s Covid-19 contact-tracing app work?

In this week’s Computer Weekly, we get the expert reaction to find out if the NHS contact-tracing app will work. Staying close to clients is crucial through lockdown – we look at the importance of customer experience management. And imagine implementing a digital transformation plan in two weeks – one CIO explains how he did it. Read the issue now. Continue Reading

Four in 10 Australians will share GPS data for alerting

Amid the Covid-19 pandemic, 40% of Australians are likely to share GPS data with the government to facilitate alerting, new study finds Continue Reading

By

• Aaron Tan, TechTarget

DWP takes centre stage in future of Gov.uk Verify

The Government Digital Service (GDS) has published its first blog post on Gov.uk Verify since July 2019. Given the dearth of communications about the troubled digital identity system, it tells a ... Continue Reading

By

• Bryan Glick, Editor in chief