IT security

NotPetya offers industry-wide lessons, says Maersk’s tech chief

There are several key industry-wide lessons to be learned from the NotPetya attack in 2017, according to the information chief at one of the companies most heavily impacted Continue Reading

By

• Warwick Ashford, Senior analyst

Threat vs trust: the overlooked power of words

Words have power – in particular, your choice of words modifies how your readers or listeners react to what you write or say. Politicians do this sort of thing all the time, swapping one word or ... Continue Reading

By

• Bryan Betts, Freeform Dynamics

Misconfigured container services are a security risk

Researchers at Palo Alto Networks have released details of the scale of misconfigured and exposed container services putting organisations at risk of cyber attack Continue Reading

By

• Warwick Ashford, Senior analyst

Apple tackles iPad-to-Mac app portability

Xcode framework enables app developers to use one set of source code to target either iPadOS or MacOS Continue Reading

By

• Cliff Saran, Managing Editor

How ASEAN firms are using AI to combat cyber threats

Artificial intelligence tools are becoming a vital part of the security arsenal for organisations and cyber criminals alike Continue Reading

By

• Ai Lei Tao

Weak cyber security top challenge, says NCSC chief Ciaran Martin

UK cyber security agency NCSC is focusing on practical support and making the internet and technology safer to use, but says the area that needs most attention is improving basic cyber security in firms, says agency chief Continue Reading

By

• Warwick Ashford, Senior analyst

TNMOC showcases role of Wren Colossus operators in D-Day

Colossus was used to decypher German Lorenz encrypted messages, one of which appears to have given the Allies the green light Continue Reading

By

• Cliff Saran, Managing Editor

Firms face targeted bespoke cyber attacks, dark web study reveals

Academic study exposes prolific availability and demand for tailored malware, network access and corporate espionage services, which suggests many firms’ cyber defences are below standard Continue Reading

By

• Warwick Ashford, Senior analyst

Legacy IT systems a significant security challenge

Information security professionals need to work closely with the business to identify critical legacy IT systems to ensure security risks are managed effectively, CISO tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Digital transformation an opportunity for security

Digital transformation is an opportunity not only for the business to up its game, but also for security teams to engage with and win over the business, CISO tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Is GDPR worth the cost?

Regulations have costs, which are meant to be recouped by the expected benefits. But who decides whether this is a good deal? Ultimately, it’s you Continue Reading

By

• Tim Worstall, Adam Smith Institute

Joining the dots to deliver effective cyber security

In too many organisations, cyber security is dislocated and siloed. Security chiefs need to take a more joined-up approach, but that is likely to mean a rethink of how the security team operates Continue Reading

By

• Ed Tucker, Human Firewall

London could be world cyber risk leader, says ex-Lloyd’s chief

Collaboration across the cyber insurance, technology and security organisations in London could make the capital a leading world centre on these topics, says former Lloyd’s of London boss Continue Reading

By

• Warwick Ashford, Senior analyst

Making threat intelligence greater than the sum of its parts

Organisations can become more secure if they join up their varied sources of intelligence about business threats, and avoid losing valuable information within individual silos Continue Reading

By

• Elliott Rose & Matthew Arnold

DNS – a security opportunity not to be overlooked, says Nominet

Domain name system data is the best-kept secret for eliminating network cyber threats, Nominet tells Infosecurity Europe attendees Continue Reading

By

• Warwick Ashford, Senior analyst

Nearly two-thirds of businesses hit by credential abuse

Most businesses admit to breaches relating to abuse of user credentials, according to a report that highlights cyber hygiene failings in the UK and the importance of greater visibility and integration to cyber defence capability Continue Reading

By

• Warwick Ashford, Senior analyst

Big tech chiefs boycott parliamentarians investigating citizens’ privacy

An International Grand Committee on Big Data, Privacy and Democracy considers whether failure to protect citizens’ privacy constitutes grounds for anti-trust regulation against Facebook and other big tech companies Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Businesses investing blindly in cyber security

Businesses need to find out what their real cyber risks and weaknesses are before investing in new technologies, says ethical hacker Continue Reading

By

• Warwick Ashford, Senior analyst

Deterministic data-based AI key for security

AI-based cyber security systems have enormous potential, but under specific conditions that are essential for success, AI expert tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

CIO interview: Gary Foote, CIO, Rich Energy Haas F1

When he was offered the opportunity to set up the technology for a new Formula One team from scratch, CIO Gary Foote couldn’t wait to get on the starting line Continue Reading

By

• Mark Samuels

Cyber crime widely under-reported, Isaca study shows

Cyber crime, which is the top cyber threat to business, remains widely under-reported, and only a third of organisations are confident in their ability to detect and respond to threats, a study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Beware of security blind spots in encrypted traffic

The growth of encrypted traffic has put the spotlight on intrusion prevention systems that help to surface cyber attacks conducted under the cloak of network encryption Continue Reading

By

• Aaron Tan, TechTarget

Australia’s Notifiable Data Breaches scheme drives compliance but issues remain

Australia’s data breach notification rules have largely been complied with, but some quarters are calling for more clarity on the reporting threshold and tougher action against errant firms Continue Reading

By

• Beverley Head

Business leaders failing to address cyber threats

Businesses are failing to address growing cyber threats as business leaders admit to knowledge gaps, a lack of resources and confusion about who is responsible for data breaches, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Passing the baton on Cybersecurity Skills

This year will be the first time I visit Infosec with no agenda. Or to be more precise I will have a Community Safety rather than a Cybersecurity Skills Agenda. This has caused me to take a cool ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Data governance: The importance of getting it right

With ever-increasing storage capacity, organisations are needing to take more control of their file management systems with thorough data governance policies. Otherwise, they run the risk of project data being exposed Continue Reading

By

• Peter Ray Allison

Facebook loses bid to halt European court decision on EU-US data sharing

Irish Supreme Court dismisses attempt by Facebook to prevent the European Court of Justice considering the validity of US-EU data transfers, after Austrian lawyer Max Schrems argued that they put the privacy of EU citizens at risk Continue Reading

By

• Bill Goodwin, Computer Weekly

GCHQ urged to abandon plans to access encrypted chats

Tech companies and security and policy experts are calling for more dialogue with GCHQ on encryption, urging it to ditch its proposal for eavesdropping on encrypted chats Continue Reading

By

• Warwick Ashford, Senior analyst

A lack of skills and ownership are top challenges to OT security

A lack of skills, visibility and clarity on which business function is responsible for securing operational technology are the biggest challenges to managing the risk, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

2.3 billion business and consumer data files exposed online

In the year since the GDPR compliance deadline, the number of data files exposed online without adequate protection is up more than 50% due to misconfigured security controls, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Salesforce completes Pardot fix after 12 days’ disruption

Plug was pulled on 17 May after a data script went wrong. Most users have had full access since 18 May, but 10 services remained down Continue Reading

By

• Cliff Saran, Managing Editor

Hackers targeting UK universities a threat to national security

Poorly defended UK university research that is mainly commissioned by government is a top target for hackers, putting national security at risk, a study reveals, underlining the need for better cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

Turla APT group beefs up cyber attack tool

An advanced persistent threat cyber espionage group has improved its tools to attack diplomatic targets, making their activities more difficult to detect and block Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber weapons readily available to criminals, researchers warn

Security researchers have discovered an attack campaign infrastructure designed to scan, brute-force and infect tens of thousands of MS-SQL and PHPMyAdmin servers Continue Reading

By

• Warwick Ashford, Senior analyst

IT in the Tory Candidates' Manifestos

I added a comment on Dominic Rabb's inclusion of degree apprenticeships in his call for Fairness and Choice to my recent blog on the IfA apprenticeship review.  In his opening campaign letter Rory ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

ICO to shortlist Sandbox applicants

Privacy watchdog’s Sandbox service aims to help develop innovative and beneficial products and services that are privacy compliant Continue Reading

By

• Warwick Ashford, Senior analyst

Perfect storm for data science in security

After nearly 20 years of research, the perfect storm of computing technologies is finally enabling data science to realise its potential to make valuable contributions to improving cyber security capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Many search engine users unaware of personal data collection

Many users of online search engines are still unaware that data is being collected about them for personalised advertising, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Dutch IT security firm dumps corporate structure

Boss of Netherlands-based Computest turns to self-management model to make company more nimble Continue Reading

By

• Kin Loohuis

Australian firms coming to grips with AI ethics

Australian businesses are warming up to AI, but just two in five have standards and guidelines for AI ethics, a study finds Continue Reading

By

• Aaron Tan, TechTarget

Just over half of UK firms don’t have a cyber resilience plan

Many UK firms still lack cyber resilience and data protection capabilities covering email a year after the implementation of the GDPR aimed at improving personal data protection Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR: Are we there yet?

A full year since the General Data Protection Regulation was implemented, there has not been the severe punitive action expected by many and personal data breaches continue to happen, leaving many wondering if any progress has been made Continue Reading

By

• Warwick Ashford, Senior analyst

Effect of GDPR yet to be felt, says law firm Hogan Lovells

Despite the fact that the GDPR has been in full effect for a year, the true effect of the regulation is yet to be felt and organisations should ensure they keep their eye on the ball, says leading privacy law firm Continue Reading

By

• Warwick Ashford, Senior analyst

No real change a year into GDPR, says privacy expert

A year after the GDPR compliance deadline, many organisations still have a lot of work to do to make real changes and shift focus away from fines to business value and gain, says PwC’s GDPR and data protection lead Continue Reading

By

• Warwick Ashford, Senior analyst

SurveyMonkey opens Dublin datacentre region to court data-security conscious enterprises in Europe

Online survey software provider SurveyMonkey is on a Europe-wide enterprise charm offensive, and is focusing on winning over CIOs with the offer to locally host their data within its European datacentre region Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Arm China seeks solutions to US export controls with Huawei

Chip design firm in communication with Huawei-owned semiconductor firm HiSilicon following US move to halt exports of US technology to Chinese tech giant Continue Reading

By

• Aaron Tan, TechTarget

IBM’s investment in automation pays off in GDPR’s first year

The first year of the EU’s General Data Protection Regulation has demonstrated the value of IBM’s investment in machine learning-based automation and the importance of having the right strategy and systems in place, according to the firm’s data protection officer Continue Reading

By

• Warwick Ashford, Senior analyst

Lapse in LinkedIn security certificate update

A lapse in the update of LinkedIn’s security certificate has once again underlined the importance of keeping track to avoid disruptions and phishing attacks, and how even big players are failing to get it right Continue Reading

By

• Warwick Ashford, Senior analyst

CW Nordics: Nordea links up with IBM to meet fintech challenge

IBM’s €473m managed services contract with Nordea reflects an increasing trend among Nordic banks to outsource more of their IT to help meet the challenge of fintechs. Also read how a shortage of women in the boardroom is a problem in the Nordics but the tech sector points to a more promising future, and find out why the Norwegian government has launched a regulatory sandbox for the fintech sector. Continue Reading

Police shut down Bestmixer bitcoin laundering service

The Bestmixer cryptocurrency laundering service has been shut down by Dutch anti-fraud police with support from Europol after a tip off by cyber security researchers at McAfee, significantly disrupting cyber criminal money flows Continue Reading

By

• Warwick Ashford, Senior analyst

TalkTalk admits new failings in 2015 data breach notification

TalkTalk’s failure to notify all those affected by its 2015 data breach highlights the importance of data visibility so that breach notifications are fast and accurate – a key requirement of the GDPR Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore proposes data portability provisions

The Personal Data Protection Commission is seeking public feedback on proposed provisions that will let consumers move their personal data across organisations Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Effective IT segregation must involve the business

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• RV Raghu, ISACA

What the UK can learn from the Nordics when it comes to digital ID

The UK and other countries can learn from the Nordic region when it comes to digital identity Continue Reading

By

• John Erik Setsaas

US grants Huawei stay of execution

US Commerce Department temporarily restores Huawei’s ability to maintain its existing networks and smartphone user base Continue Reading

By

• Alex Scroxton, Security Editor

Dutch lecturer researches the person behind the cyber criminal

Dutch academic is trying to get inside the mind of cyber criminals by understanding what makes them tick Continue Reading

By

• Kim Loohuis

Planned UK age verification checks risky for internet users

Proposed controversial online age verification checks could increase the risk of identity theft and other cyber crimes, warn security experts, who advise parents to set technological boundaries and ensure their families are aware of risks Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: In-app segregation more intelligent and permissive

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Simon Persin, Turnkey Consulting

Cyber security scholarships on offer in Belfast

Queen’s University Belfast is backing the cyber security sector with funding for master of science scholarships Continue Reading

By

• Warwick Ashford, Senior analyst

Podcast: The Computer Weekly Downtime Upload – Episode 16

In this week’s episode of the Computer Weekly Downtime Upload, Clare McDonald and Brian McKenna are joined by prolific Downtime author Ryan Priest to discuss retail sustainability, internet influencers and the tech battle between China and the US Continue Reading

By

• Clare McDonald, Business Editor

Security Think Tank: IT asset separation is a risk-based decision

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Deshini Newman, (ISC)²

Danske Bank launches initiative to help SME customers with cyber security

Danske Bank launches initiative to support the cyber security efforts of its SME customers Continue Reading

By

• Gerard O'Dwyer

GDPR an opportunity to improve data systems and processes

A year after the official implementation of the GDPR, it is important to highlight the positive opportunities that compliance provides and the insights breach reports are providing, say Deloitte consultants Continue Reading

By

• Warwick Ashford, Senior analyst

Google cuts off Huawei from Android ecosystem

Google decision follows an executive order signed by President Trump, but Huawei insists US businesses and consumers will be the real losers Continue Reading

By

• Alex Scroxton, Security Editor

ICO to support GDPR certification schemes

The UK data protection watchdog is accepting enquiries from organisations considering developing GDPR certification schemes, which the ICO says could help recipients achieve competitive advantage Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Challenges of segregation

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Mike Gillespie

Identity custodians needed in digital era

Digital identity systems will fail if they do not take humans into account, warns identity innovator, suggesting that a ‘digital guardian’ could help overcome most of these challenges Continue Reading

By

• Warwick Ashford, Senior analyst

GozNym bust underlines cyber crime threat

A criminal network using GozNym malware has been shut down in an international law enforcement operation, but others are still operating, underlining the need for vigilance, warns a security expert Continue Reading

By

• Warwick Ashford, Senior analyst

Vulnerability assessment done. Now what?

Vulnerability assessment establishes the current state of an organisation’s cyber security, but to meet industry best practices, companies should go beyond that to achieve continuous improvement Continue Reading

By

• Sam Bocetta

Trump bans ‘adversary’ tech from US telecoms in blow at Huawei

US president announced ban on telecoms equipment from designated “adversary” states, including China Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

Are there any positives from the first year of GDPR?

A year has passed since the new EU data protection law came into force. What have we learned in that time that can help organisations deliver benefits from the regulation? Continue Reading

By

• Elle Todd, Reed Smith

Norwegian industry and state must combine to counter cyber threats

Norway has been targeted by two large ransomware attacks in recent months – and public and private organisations must react in a coordinated way Continue Reading

By

• Gerard O'Dwyer

Self-sovereign ID key to data privacy

Coupling self-sovereign identity with insights from research on consumer identity management may be the key to personalising products and services without putting people at risk, says industry analyst Continue Reading

By

• Warwick Ashford, Senior analyst

Fujitsu sets out to restore trust in technology

Trust in technology, how to recapture it, and how to ensure AI doesn’t overstep its bounds were the big messages on the opening day of Fujitsu Forum in Tokyo Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Proper segregation is more important than ever

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Facebook engaged in ‘calculated’ campaign to eliminate competition, claims businessman

A US businessman is seeking damages from Facebook after accusing the social media company of unfairly blocking “humorous” Facebook pages which generated hundreds of thousands of dollars in advertising revenue Continue Reading

By

• Bill Goodwin and Sebastian Klovig Skelton

Microsoft working to support decentralised identity

Microsoft is among the big tech players aiming to help enable personalisation of products and services without putting privacy at risk Continue Reading

By

• Warwick Ashford, Senior analyst

Implement multifactor authentication, urges expert panel

Multifactor authentication should be a top priority for organisations to defend users from cyber attacks, coupled with zero-trust architecture and artificial intelligence-based technologies, says expert panel Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Understanding tech is key to effective data segregation

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Petra Wenham

APAC firms on the back foot in cyber security

Most Asia-Pacific organisations did not consider cyber security until after their digital transformation projects had begun, new survey finds Continue Reading

By

• Aaron Tan, TechTarget

Digital business is connected business, says KuppingerCole

Businesses need to unlock data, rethink identity and access management, and capitalise on artificial intelligence in the digital era, says KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Electronic ID in the Nordics – a model for other countries?

Use of electronic identity schemes in Sweden, Norway, Finland and Denmark is far ahead of other countries – but why? Continue Reading

By

• Alex Cruickshank

Spyware targets WhatsApp users

Social media platform issues update after it discovered a flaw being exploited by commercial spyware Continue Reading

By

• Cliff Saran, Managing Editor

Security Think Tank: How to realise the benefits of security zoning

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Paddy Francis

National Crime Agency calls for additional funding to tackle 21st century crime

Organised criminal gangs represent the biggest cyber threat to the UK, and law enforcement has identified rogue servers hosted in the UK Continue Reading

By

• Cliff Saran, Managing Editor

Security standard for surveillance cameras set for launch

A long-overdue cyber security standard for the manufacturer of surveillance cameras is on track for an official launch in June Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Benefits and challenges of security segmentation

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Maxine Holt, Omdia

Debugging bug bounty programmes

Bug bounty programmes have recently become a popular method of vulnerability management, but poor programme management can lead to development teams becoming overwhelmed and bugs being missed Continue Reading

By

• Peter Ray Allison

Security Think Tank: Surviving the existential cyber punch, part 3

How should businesses plan to survive a potential cyber attack extinction event? Continue Reading

By

• Gregory Touhill, ISACA

Key lessons from an ethical hacker

Understanding hacker techniques and processes is the best way to defend against cyber attacks, and focusing on business risks is the best way to get security budget, according to an ethical hacker Continue Reading

By

• Warwick Ashford, Senior analyst

Dutch businesses not yet implementing NIS Directive

Little urgency to comply with the Network and Information Systems Security Act, which seeks to protect the Netherlands’ vital infrastructure and digital services from cyber attack Continue Reading

By

• Kim Loohuis

Facebook co-founder: ‘It is time to break up Facebook’

Co-founder of Facebook, Chris Hughes, has published an op-ed in The New York Times calling for Facebook to be broken up, as it faces investigations from the US Federal Trade Commission Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor
• Bill Goodwin, Computer Weekly

Northern Ireland generating cyber security knowledge and jobs

Northern Ireland is establishing itself as an international hub of cyber security research and innovation, providing growing employment opportunities Continue Reading

By

• Warwick Ashford, Senior analyst

Some Australian firms still in the dark about cyber security

A report suggesting Australian firms are experiencing fewer cyber incidents has left its co-author perplexed with the findings Continue Reading

By

• Beverley Head

Dutch developer offers businesses nuclear security option for communications

 Continue Reading

Young Dutch cyber criminals get re-education rather than jail time

 Continue Reading

Gov.uk Verify is the Theresa May of digital government

Gov.uk Verify is the Theresa May of digital government. The embattled Prime Minister faces calls to quit from all around – her own Conservative MPs, grassroots Tory activists, the right-wing press ... Continue Reading

By

• Bryan Glick, Editor in chief

Gov.uk Verify has 'failed users' and its leaders lack accountability, say MPs

Public Accounts Committee slams government's flagship digital identity service after a ‘catalogue of problems’ Continue Reading

By

• Bryan Glick, Editor in chief

Time to start thinking about AI regulation, says KuppingerCole

Organisations and individuals should think about regulating artificial intelligence to avoid sleepwalking into a future regulated by these technologies, says analyst Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals targeting C-suite, DBIR shows

Executives and cloud-based services are gaining popularity as targets for cyber criminals, according to the latest data breach investigations report Continue Reading

By

• Warwick Ashford, Senior analyst