IT security

UN identifies tech companies working in Occupied Palestinian Territories

United Nations Human Rights Office report names a number of technology companies that could be involved in violating human rights Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

SentinelOne makes security platform free to support remote workers

Endpoint protection platform service will be made free until 16 May 2020 to help protect remote workers during the Covid-19 coronavirus crisis Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: To tackle Covid-19, be prepared, flexible and resilient

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Dan Norman

Inside the SOC: the nerve centre of security operations

Security operations centres are the bedrock of any cyber defence strategy, but operating one is increasingly challenging, with mounting workloads and a shortage of skilled personnel. Continue Reading

UK makes its case for post-Brexit data adequacy decision

Government sets out an explanatory framework as it seeks adequacy decisions from the European Commission to maintain the free flow of personal data between the European Union, the UK and Gibraltar Continue Reading

By

• Alex Scroxton, Security Editor

How NHS Digital is helping support the coronavirus crisis

In this week’s Computer Weekly, we talk to NHS Digital about how technology is supporting the health service’s response to the coronavirus crisis. We examine the challenges of running a successful security operations centre. And we look at the emerging datacentre architecture based on composable infrastructure. Read the issue now. Continue Reading

Covid-19: Three technology areas that CIOs must address

CIOs will need to consider the IT measures that will be needed to support their organisations as the government ramps up its response to the coronavirus Continue Reading

By

• Cliff Saran, Managing Editor

HR response to COVID-19 can lower or boost employee experience

As HR leaders are being tasked with difficult decisions amid the coronavirus pandemic, the employee experience depends on those decisions. Here's how to get them right. Continue Reading

By

• Pam Baker

How to prevent a coronavirus panic buying bullwhip effect

Widespread coronavirus panic buying is likely to cause a bullwhip effect in some areas -- such as toilet paper. Here's how suppliers can work to minimize the negative supply chain effects. Continue Reading

By

• George Lawton

NCSC issues coronavirus cyber security alert

The UK’s National Cyber Security Centre has issued a public alert and fresh guidance as more cyber criminals get wise to the lucrative potential of Covid-19 Continue Reading

By

• Alex Scroxton, Security Editor

Equality watchdog calls on police to stop using facial recognition

Equalities and Human Rights Commission says use of automatic facial recognition and predictive algorithms by police is discriminatory, stifles freedom of expression and lacks a proper legislative framework Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Coronavirus-linked hacks likely as Czech hospital comes under attack

The world of cyber security is on high alert to heightened vulnerabilities as the spread of the Covid-19 coronavirus changes daily life across Europe Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: A guide to security best practice for pandemics

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Petra Wenham

UK’s security sector failing on most diversity measures

A DCMS report on the state of the UK’s cyber security workforce highlights a huge lack of diversity and a substantial skills gap Continue Reading

By

• Alex Scroxton, Security Editor

Turla’s use of Iranian infrastructure probably opportunistic

Turla, the Kremlin-linked APT group that last year hijacked an Iranian group’s infrastructure, was likely to have been operating opportunistically, according to researchers Continue Reading

By

• Alex Scroxton, Security Editor

Security pros just want to be loved, report finds

Being valued by the business for their role in keeping the organisation safe and upholding ethical standards is a primary motivator for CISOs and other security professionals Continue Reading

By

• Alex Scroxton, Security Editor

Failings in open source disclosure put users at risk

As more projects rely on open source components, IT departments need to keep on top of critical vulnerabilities to ensure they are secure Continue Reading

By

• Cliff Saran, Managing Editor

Cookie-stealing trojans found lurking on Android phones

Kaspersky discovers two new Android malware modifications that could give hackers control of their victims’ social media accounts Continue Reading

By

• Alex Scroxton, Security Editor

CW Europe: Experts examine Dutch government’s IT problems

Technology experts discuss the challenges and potential solutions to the Netherlands government’s IT problems. Also read how Russia’s VTB and Rostelecom are creating a platform to utilise big data technology, and how Spain’s CaixaBank is using AI to help its staff training. Continue Reading

Security Think Tank: Coronavirus crisis helps put security in context

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Maxine Holt, Omdia

APAC remains hotbed for digital transformation

Nearly half of organisations in the Asia-Pacific region see digital transformation as their top priority, followed by cloud infrastructure deployment and artificial intelligence, survey finds Continue Reading

By

• Aaron Tan, TechTarget

Cross-regulator taskforce on digital economy announced in 2020 Budget

UK regulators will join forces to look at how the potential regulation of the digital platforms and advertising markets would work Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security pros test positive for Covid-19 after RSA Conference

Two employees of security firm Exabeam have been diagnosed with the Covid-19 coronavirus after attending RSA Conference 2020 Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft locks down new vulnerability with EternalBlue echoes

Microsoft has moved to get ahead of a serious remote code execution vulnerability in Microsoft Server Message Block 3.1.1, which was accidentally disclosed then missed in its March Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft fixes 26 critical vulnerabilities in another heavy Patch Tuesday

March’s Patch Tuesday is another big one for Microsoft, addressing 115 vulnerabilities, 26 of them critical Continue Reading

By

• Alex Scroxton, Security Editor

ANZ firms ill-prepared to deal with tech issues

More than two in five businesses in Australia and New Zealand are hearing from customers about major technology issues, affecting productivity and staff morale, new study finds Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: ID-driven security helps safeguard the workforce

In our globalised world, high-profile events such as Covid-19 have huge business impacts and some of these impacts may be felt by CISOs. What responsibilities do security pros have in such circumstances, and what steps can they take to shore up their defences? Continue Reading

By

• Jason Lau, Crypto.com

Schoolgirl security experts prepare to do battle

The finals of the CyberFirst Girls contest will take place on 16 March as the culmination of the NCSC’s annual competition to unearth future security talent Continue Reading

By

• Alex Scroxton, Security Editor

Hacking community targeted by cyber criminals in new trojan campaign

Cybereason’s Nocturnus threat research team has uncovered a cyber criminal campaign that weaponises popular hacking tools Continue Reading

By

• Alex Scroxton, Security Editor

VAT software supplier exposed data of millions

Eight million sales records belonging to UK and EU consumers left exposed due to misconfigured server Continue Reading

By

• Alex Scroxton, Security Editor

Police IT system failure creates significant backlogs

Independent review of IT system failure that left Greater Manchester Police working with pen and paper finds combination of technical shortcomings, operational procedures and staff training responsible for massive backlogs Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Podcast: The Computer Weekly Downtime Upload – Episode 50

In this week’s episode of the Computer Weekly Downtime Upload podcast, Clare McDonald, Caroline Donnelly, and Brian McKenna are joined by CW production editor Claire Cormack to discuss the Everywoman in Tech Forum, the vulnerability to hacking of smart cameras and baby monitors, and the utility of the traditional annual performance review Continue Reading

By

• Clare McDonald, Business Editor
• Caroline Donnelly, Senior Editor, UK
• Brian McKenna, Senior Analyst, Business Applications

Security Think Tank: Covid-19 highlights need for embedded security

In our globalised world, high-profile events such as Covid-19 have huge business impacts and some of these impacts may be felt by CISOs. What responsibilities do security pros have in such circumstances, and what steps can they take to shore up their defences? Continue Reading

By

• Tom Wootton, PA Consulting

More questions raised about Gov.uk Verify as digital identity chief quits

Lisa Barrett, director of digital identity at GDS and head of the troubled Verify programme, is leaving government as funding questions remain ahead of Budget Continue Reading

By

• Bryan Glick, Editor in chief

Is technology innovation broken?

In this week’s Computer Weekly, despite its reputation for fresh thinking the tech sector is stuck in old ways that prevent true innovation – an expert explains why. Our buyer’s guide examines how networking is affected by the growth of cloud-native applications. And we look at the key tech-related compliance issues for SMEs. Read the issue now. Continue Reading

Inside Oracle’s cloud strategy

Oracle may be late to the cloud infrastructure and platform game, but it believes it has what it takes to carve out a bigger slice of the Asia-Pacific’s cloud market Continue Reading

By

• Aaron Tan, TechTarget

Bill Gates backs Crest fintech security scheme for Africa and Asia

UK-based cyber security accreditation and certification non-profit Crest has been awarded a $1.4m grant from the Bill and Melinda Gates Foundation to expand cyber security capacity for fintechs in Africa and Asia Continue Reading

By

• Alex Scroxton, Security Editor

DCMS to oversee coronavirus disinformation unit

A cross-departmental counter-disinformation unit will seek to protect and secure UK citizens from disinformation, scams and cyber security threats related to the Covid-19 outbreak Continue Reading

By

• Alex Scroxton, Security Editor

MI5 slammed by watchdog for failing to delete intercepted phone and internet data

The Investigatory Powers Commissioner (IPCO) has criticised MI5 for failing to report serious errors in the way it handles intercepted phone and internet data Continue Reading

By

• Bill Goodwin, Computer Weekly

Virgin Media confirms 'misconfigured database' left personal data of 900,000 people exposed

Telco provider Virgin Media confirms 'data incident' that left personal details of 900,000 people exposed, but denies its systems were hacked or that it suffered a data breach Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

CIO interview: Sarah Wilkinson, NHS Digital

NHS Digital has been racing to ensure the systems and protocols are in place to prepare the health service for the coronavirus. We speak to its CEO about the preparations Continue Reading

By

• Cliff Saran, Managing Editor

Podcast: ‘The human element’ in compliance at RSA 2020

We review RSA 2020 and discuss the human element in compliance, plus network and data management, trust, Covid-19 and its implications for organisations, and GDPR and CCPA Continue Reading

By

• Antony Adshead, Storage Editor

Boots and Tesco loyalty card schemes plagued by security issues

High-street retailers deal with fraudulent attempts to access the accounts of thousands of customers Continue Reading

By

• Angelica Mari

Huawei: MPs air concerns over security risks in code and managed contracts

The risk Huawei poses to the UK's 5G network roll out was raised during a recent Westminster Hall debate Continue Reading

By

• Cliff Saran, Managing Editor

Biometrics ethics group takes evidence on public-private use of facial recognition

Collaboration between police forces and private entities on facial recognition technology comes under scrutiny by the Home Office’s Biometrics and Forensics Ethics Group Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Cathay Pacific hit with £500,000 data protection fine from ICO over 2018 breach

Airline receives maximum financial penalty under Data Protection Act for data breach that led to nine million customers having their personal data accessed by hackers Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Australian government pulls plug on cloud certification programme

The Australian Signals Directorate is closing its cloud services certification programme to allow for more home-grown suppliers Continue Reading

By

• Aaron Tan, TechTarget

5G security is a concern for most companies

A study has found that decision-makers fear that 5G technology will make organisations more vulnerable to cyber attacks and will raise security-related costs Continue Reading

By

• Angelica Mari

Cabinet Office gives more non-answers on the future of Gov.uk Verify

The remarkable levels of secrecy and avoidance of scrutiny around the Gov.uk Verify digital identity scheme continue – and if anything, seem to have reached new levels of absurdity. Last week, ... Continue Reading

By

• Bryan Glick, Editor in chief

F-Secure reports a steep rise in hacking attempts

An increase in distributed denial of service attacks pushes up the volume of identified rogue internet traffic to almost three billion Continue Reading

By

• Cliff Saran, Managing Editor

Horangi and Tokio Marine team up on cyber security services

Singapore-based Horangi will provide penetration testing, among other cyber security services, to Tokio Marine Insurance Singapore’s cyber risk insurance clients Continue Reading

By

• Aaron Tan, TechTarget

Don’t forget to consider GDPR when using artificial intelligence in the workplace

While references to artificial intelligence in the workplace may conjure up images of future-gazing movies, the use of AI and people analytics by employers is already present at all stages of the employment lifecycle Continue Reading

By

• Charlotte Allery, Coffin Mew

NCSC issues smart camera security guidance to protect consumers from unauthorised snoops

Government’s latest push to safeguard users of in-home connected devices sees National Cyber Security Centre issue guidance to help consumers tighten up security of smart cameras and baby monitors Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Tech readiness for coronavirus

As more cases of the coronavirus are found in the UK, businesses are going to have to face the very real prospect that encouraging people to go into the office, raises the risk of the virus ... Continue Reading

By

• Cliff Saran, Managing Editor

What will points-based immigration mean for IT recruitment?

In this week’s Computer Weekly, we look at the government’s new points-based immigration rules and assess the implications for the tech sector. IR35 tax rules change in April – we find out how IT contractors need to prepare. And we examine whether the rise of cloud is really displacing the datacentre. Read the issue now. Continue Reading

Singapore among world’s top sources of online threats

Singapore remained a hotspot for originating cyber attacks in 2019, with 11 million attacks launched from servers in the city-state Continue Reading

By

• Aaron Tan, TechTarget

Why ‘no breach’ is bad news for your compliance

You might think it’s a good thing if your organisation has a clean record when it comes to data breaches, but this is not necessarily the case Continue Reading

By

• Byron Shirley

How to find the right zero trust strategy

Large tech companies and the US Federal Government have adopted zero trust as their next-generation security model Continue Reading

The Security Interviews: Inside the world of bug bounties

You may not make a million as a bug bounty hunter, but you might help remove some of the stigma that persists around cyber security, says HackerOne’s Shlomie Liberow Continue Reading

By

• Alex Scroxton, Security Editor

Data breaches in Australia showing no signs of abating

Compromised login credentials and human error were the most common causes of data breaches reported under Australia’s notifiable data breach regime from July to December 2019 Continue Reading

By

• Aaron Tan, TechTarget

NCSC makes ransomware attack guidance more accessible

Following a swathe of high-profile ransomware attacks, the UK’s National Cyber Security Centre has made changes to its guidance, emphasising the importance of offline backups Continue Reading

By

• Alex Scroxton, Security Editor

WikiLeaks founder Assange is well enough to participate in extradition proceedings, says judge

A judge dismissed claims that Julian Assange’s vulnerable psychological state would prevent him from taking part in his extradition hearing to face espionage and computer misuse charges in the US Continue Reading

By

• Greg Wilford

Gove warns EU that UK sovereignty is non-negotiable on eve of trade deal talks

The UK and the EU have published their divergent mandates for trade talks due to start on Monday 2 March 2020, and digital may emerge as a long-term terrain of dispute Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

Clearview hack fuels debate over facial recognition

Customers of Clearview AI, a controversial startup that scrapes and sells billions of photos of people from social media to police forces, have found themselves at the centre of a major data breach Continue Reading

By

• Alex Scroxton, Security Editor

Oxbotica on board with Cisco to drive autonomous vehicle data challenge

Connected car technology firm hits pedal with Cisco to solve data challenges of future autonomous vehicles Continue Reading

By

• Joe O’Halloran, Computer Weekly

Redcar & Cleveland Council confirms ransomware attack

Local authority’s systems are still offline nearly three weeks after being attacked Continue Reading

By

• Alex Scroxton, Security Editor

CW Nordics: Swedes lose faith in social media as data security fears increase

Swedish citizens are becoming more concerned about the activities of social media companies and are reducing their online interaction with them as a result. Also read about new mobility-as-a-service projects gaining traction across Denmark, Finland, Norway and Sweden, and why the Finnish government has committed resources to a cyber security project aimed at local authorities. Continue Reading

Kr00k vulnerability compromises billions of Wi-Fi devices

Billions of Wi-Fi chips used in IoT devices, laptops, smartphones and tablets are vulnerable to a serious vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

IT Priorities 2020: ASEAN firms on the frontline of digital transformation

Southeast Asian companies plan to spend more on infrastructure and cyber security, but the growth in IT budgets appears to be slowing down Continue Reading

By

• Aaron Tan, TechTarget

Fake CDNs obscuring credit card fraudsters

Fake content delivery networks and ngrok servers are being pressed into service to obscure credit card skimming activities Continue Reading

By

• Alex Scroxton, Security Editor

Cloud Snooper firewall bypass may be work of nation state

Cloud Snooper deploys a combination of specialised techniques to sneak past enterprise firewalls, warns Sophos Continue Reading

By

• Alex Scroxton, Security Editor

Finnish government supports local authorities in cyber security initiative

 Continue Reading

WikiLeaks founder Julian Assange cannot be legally extradited for ‘political offences’, say lawyers

Lawyers for WikiLeaks founder Julian Assange argue that he has been charged with political offences and cannot be legally extradited to the US under the US-UK extradition treaty Continue Reading

By

• Greg Wilford

FCA data breach could happen to anybody, but easy to avoid

Minor data breach at the Financial Conduct Authority was the result of simple human error, and highlights the need for organisations to consider a wide range of potential threats Continue Reading

By

• Alex Scroxton, Security Editor

Met Police chief backs legislative framework for police tech

Met Police commissioner has called for legislative framework to govern police use of new technologies, while defending the decision to use live facial recognition technology operationally without it Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

How tech suppliers are easing barriers to hybrid cloud adoption

The tech industry has risen to the challenge of helping enterprises ease their transition to hybrid cloud, but issues remain Continue Reading

By

• Aaron Tan, TechTarget

Julian Assange phoned White House to warn of risk to lives

Julian Assange phoned the White House to warn officials that unredacted cables published on the web posed a risk to lives, a court heard yesterday Continue Reading

By

• Bill Goodwin, Computer Weekly

Is the EU better equipped than the US to supervise the use of facial recognition?

Clearview AI can be an indispensable tool to reinforce national security, but there are many risks associated with the use of facial recognition technology that the EU might be better equipped to deal with than the US Continue Reading

By

• Mathilde Gérot, Signature Litigation

Google warns users not to mess with Huawei devices

Google tells users of Huawei devices to try to avoid bypassing controls preventing them from loading its apps Continue Reading

By

• Alex Scroxton, Security Editor

Sports retailer Decathlon left employee data exposed

More than 123 million records were accidentally exposed on an unsecured ElasticSearch server Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Gil Shwed’s 10-year vision for security

Check Point founder Gil Shwed discusses his new Infinity Next concept and how he plans to remodel the world of cyber security in the next 10 years Continue Reading

Mastercard creates 1,500 tech jobs in Ireland

New roles at tech hub in Dublin will include professionals with expertise in artificial intelligence, cyber security, blockchain and user experience Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Cloud data leaks compounded by lack of automation tools

Data leaks caused by misconfigured clouds are being compounded because security teams lack appropriate automation and integration tools, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Cyber criminals targeting UK motorists, warns DVLA

Cyber criminals are offering various services and tax refunds that purport to be from the DVLA Continue Reading

By

• Alex Scroxton, Security Editor

Using meteorological data to prepare for the worst

In this week’s Computer Weekly, after the storms that swept across the UK, we look at the technology behind Weather Source’s meteorological data service. Oracle and SAP are battling over customers to upgrade their ERP systems to the cloud. And we report from the world’s biggest retail tech show. Read the issue now. Continue Reading

McAfee buys Light Point to enhance web browser protection

Acquisition of Light Point Security will extend the capabilities of multiple McAfee products Continue Reading

By

• Alex Scroxton, Security Editor

Thai university to roll out data protection certification

Thailand’s National Institute of Development Administration is offering a certification programme to get organisations ready for the country’s data protection regime Continue Reading

By

• Aaron Tan, TechTarget

Assange extradition is a politically motivated ‘abuse of power’, court hears

US government’s attempt to extradite WikiLeaks founder Julian Assange to face espionage charges in the US is politically motivated and an abuse of process, court told Continue Reading

By

• Bill Goodwin, Computer Weekly

WikiLeaks founder Assange ‘put lives at risk’ by disclosing names in leaked documents, court hears

WikiLeaks founder Julian Assange ‘put lives of US informants at risk’ by publishing unredacted documents, lawyers for the US argued at the first day of a week-long extradition hearing Continue Reading

By

• Bill Goodwin, Computer Weekly

Open security group unveils common OpenDXL language

Open Cybersecurity Alliance announces the availability of OpenDXL Ontology, the first open source language for connecting disparate security tools through a common messaging framework Continue Reading

By

• Alex Scroxton, Security Editor

Trusty methods to keep out intruders

Today’s hyper-connected world means trust can no longer be taken for granted to keep networks secure – enter the zero-trust model Continue Reading

By

• Cliff Saran, Managing Editor

Cisco goes all-in on security integration with SecureX platform

CISOs are struggling to stitch together disparate cyber security products and services – Cisco believes its cloud-native SecureX platform will change their working lives for the better Continue Reading

By

• Alex Scroxton, Security Editor

Labour condemns Google data plans

Shadow digital minister Chi Onwurah challenges the government to stop Google’s plans to move UK user data out of the EU Continue Reading

By

• Alex Scroxton, Security Editor

Malicious apps still getting past Google controls

Check Point researchers have found multiple malware-infected apps in the Google Play store, including a clicker called Haken, which has been downloaded more than 50,000 times Continue Reading

By

• Alex Scroxton, Security Editor

F-Secure’s AI reads mean tweets to fight abuse and trolls

Researchers working on F-Secure’s Project Blackfin have developed a model for clustering tweets to help pinpoint abuse and harassment Continue Reading

By

• Alex Scroxton, Security Editor

The greatest contest ever – privacy versus security

Examining the technical, legal and ethical challenges around the privacy versus security debate Continue Reading

By

• Elliot Rose, PA Consulting

Addressing the IoT security challenge

We consider how best to address some of the critical security challenges around the internet of things Continue Reading

By

• Charaka Goonatilake, Panaseer

UK and US accuse Russian spooks of Georgia cyber attacks

Foreign secretary describes 2019 campaign of cyber attacks as reckless, brazen and unacceptable Continue Reading

By

• Alex Scroxton, Security Editor

Google plans to send Brits’ data to US after Brexit

Move puts British user data beyond the reach of the EU’s GDPR, makes it more accessible to UK and US law enforcement agencies, and has prompted anger Continue Reading

By

• Alex Scroxton, Security Editor

Facilities firm ISS World crippled by ransomware attack

An apparent ransomware attack has compromised some IT and email systems at Danish facilities firm ISS World Continue Reading

By

• Alex Scroxton, Security Editor