IT security

Podcast: The Computer Weekly Downtime Upload – Episode 7

In this week’s episode of The Computer Weekly Downtime Upload podcast, the team talks cyber attacks against the NHS, the everywoman in Tech Forum, 5G connected cows, and covers off the latest round of revelations about Facebook’s data processing procedures Continue Reading

By

• Computer Weekly Staff

Despite failings, exec appetite for secure collaboration growing

Top business decision makers are more reckless than ever with company data, but the appetite for secure collaboration tools is growing, survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Is it true you can't manage what you don't measure?

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

Making unified threat management a key security tool

As data protection becomes critical to businesses, we look at how unified threat management can be a useful tool, providing it is selected and deployed correctly according to business needs Continue Reading

By

• Warwick Ashford, Senior analyst

NatWest launches biometric card pilot

NatWest Bank is set to trial biometrics-based cards with 200 customers to verify contactless payment transactions over £30 Continue Reading

By

• Angelica Mari

Security Think Tank: Key considerations for determining cyber risk

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Petra Wenham

Citrix breach once again highlights password weaknesses

A reported breach of Citrix, which has potentially exposed data at hundreds of thousands of customer organisations, has once again highlighted the need for an alternative to passwords and the importance of supply chain security Continue Reading

By

• Warwick Ashford, Senior analyst

ICO data raises doubts over UK firms’ ability to manage breaches

Most ICO data breach reports late and incomplete prior to full GDPR implementation, FoI request data reveals, raising doubts about breach prevention, detection and response capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

VMware firewall strategy to focus on 'known good' behavior

VMware is taking a different approach to firewalls by focusing on 'known good' behavior to better police east-west traffic within enterprise environments. Continue Reading

By

• Rob Wright, Senior News Director

Growing awareness of mobile security risk

There is a growing awareness of mobile security risk among members of the information security community, but most admit accessing corporate data from personal devices or public Wi-Fi Continue Reading

By

• Warwick Ashford, Senior analyst

Equifax defends against scathing Senate report

Equifax chief says firm did take cyber security seriously in a response to a scathing Senate report on the credit rating agency’s 2017 data breach, which experts say highlights failings around open source software Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Five elements of a key cyber risk indicator

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Mary-Jo de Leeuw, (ISC)2

Facebook’s objections to court concerns over privacy more about ‘optics’ than facts

Facebook’s challenge to a High Court ruling that raises serious concerns about data transfers between Europe and the US is more about appearance than facts, lawyers for the Irish Data Protection Commission told Dublin's Supreme Court Continue Reading

CW Europe: Robots deliver savings for Dutch postal service

In this issue we look at how Dutch delivery company PostNL is reaping huge efficiency savings by using robotic technology to automate time-consuming administrative tasks, Facebook’s opposition to the referral of questions about the legality of data transfers between Europe and the US to the European Court of Justice, and how Oslo is thriving from a unique combination of business agility, a cultural receptiveness to technology, and a social desire to do good. Read the issue now. Continue Reading

Vodafone defends its use of Huawei as 5G trials go live

As Vodafone begins trials of a live 5G service in Bristol, Cardiff and Liverpool, the operator’s CTO and general counsel have defended their use of Huawei equipment in Vodafone’s network and challenged its detractors to produce evidence of spying Continue Reading

By

• Alex Scroxton, Security Editor

How aid workers are using encrypted communications to stay safe in conflict zones

Often operating in volatile conflict zones, aid workers are frequently turning to encrypted communication services to protect each other Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

ICO head still in top three of DataIQ data leader list

The UK’s information commissioner remains in the top three data leaders after claiming top spot in 2018 in the DataIQ 100 list of most influential data leaders, but GDPR is not the only focus in the industry Continue Reading

By

• Warwick Ashford, Senior analyst

Machine identities for sale on dark web, business warned

Academics and security professionals are warning businesses that certificates used to establish trust and privacy on the internet are being weaponised and sold to cyber criminals bundled with other services Continue Reading

By

• Warwick Ashford, Senior analyst

US government ban unconstitutional, says Huawei

Huawei’s lawsuit accuses Washington of violating the US Constitution by banning it from government contracts Continue Reading

By

• Alex Scroxton, Security Editor

Zuckerberg commits to Facebook becoming privacy-focused

After a storm of controversy and criticism over the way Facebook fails to protect users’ privacy, the company’s chief says he plans to transform it into a privacy-focused platform Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber espionage group behind SingHealth attack

A cyber espionage group dubbed Whitefly has been identified as the perpetrators behind Singapore’s largest data breach to date Continue Reading

By

• Aaron Tan, TechTarget

5G one of several security challenges to CNI

5G technology is among the key security challenges facing critical national infrastructure and all other business organisations, according to the Information Security Forum Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Aim for business intelligence-driven system of risk indicators

What should be the key cyber security risk indicator for any business? Continue Reading

NAO hammers another nail into Gov.uk Verify

It’s not commonly known outside Whitehall that by the time the National Audit Office (NAO) – Parliament’s independent spending watchdog – publishes a report, it will have been through several ... Continue Reading

By

• Bryan Glick, Editor in chief

US doubles down on Huawei fears as Chinese prepare to sue

US secretary of state Mike Pompeo has reinforced his attacks on Huawei as the firm apparently prepares to sue the US government over its federal-level ban Continue Reading

By

• Alex Scroxton, Security Editor

The rise of DevSecOps

The increasing complexity of security threats is leading enterprises to DevSecOps approaches, so that all of the business is involved in security operations Continue Reading

IT Priorities 2019: What projects are IT professionals spending their budgets on?

The Computer Weekly/TechTarget IT Priorities 2019 survey finds that cloud maturity, security and automation are among the hot areas for spending Continue Reading

By

• Cliff Saran, Managing Editor

Security Think Tank: Invest in proactive approach to security and digital risk

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Maxine Holt, Omdia

Singapore can now certify security products based on Common Criteria

The city-state is has attained the status of a Certificate Authorising Nation, enabling it to evaluate and certify security products under the Common Criteria standard Continue Reading

By

• Aaron Tan, TechTarget

GDS cut expected benefits of troubled Gov.uk Verify system by 75%

In a highly critical report, the National Audit Office says it is 'difficult to conclude' that past decisions to continue with the flagship digital identity system have been justified Continue Reading

By

• Bryan Glick, Editor in chief

Cyber awareness of UK boards found wanting

Boards of many of the UK’s biggest firms must do more to be cyber aware, according to a government report. Continue Reading

By

• Warwick Ashford, Senior analyst

RSA Security bets on digital risk management

RSA Security chief predicts that managing digital risk is set to become increasingly important to organisations as they complete their journeys to digital transformation Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Cyber metrics need to be meaningful

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Paddy Francis

Clearer North Korean link to global infrastructure malware campaign

Researchers have uncovered clearer links between a North Korean hacking group and a cyber espionage campaign targeting government, defence, nuclear, energy and financial organisations around the world Continue Reading

By

• Warwick Ashford, Senior analyst

IT Priorities 2019: APAC keeping pace with digital transformation

Digital transformation is well underway among APAC enterprises which are looking to spend more on refreshing their IT infrastructure and technologies that improve employee productivity Continue Reading

By

• Aaron Tan, TechTarget

Facebook asked George Osborne to influence EU data protection law

Facebook COO Sheryl Sandberg invited one of the chancellor’s children to Facebook’s office as part of a intensive lobbying programme to influence European data protection legislation Continue Reading

By

• Bill Goodwin, Duncan Campbell & Sebastian Klovig Skelton

Facebook facing 10 GDPR investigations in Ireland

Ireland’s Data Protection Commission has revealed it has 10 active probes into Facebook, Instagram and WhatsApp, as well as Apple, LinkedIn and Twitter, on its books Continue Reading

By

• Alex Scroxton, Security Editor

GDPR: Irish Data Protection Commission may show where the WWW is heading

The Irish Data Protection Commission's (DPC) annual report makes interesting reading, given that the World Wide Web is celebrating its 30th birthday this month. People regularly give away vast ... Continue Reading

By

• Cliff Saran, Managing Editor

Using simulated disaster management to tackle the security skills gap

With the increasing need for cyber security professionals, organisations are turning to new ways to address the skills gap facing the security sector Continue Reading

By

• Peter Ray Allison

What are the CDN options for enterprises?

We look at how content delivery networks can give your organisation’s web presence a literal edge Continue Reading

By

• Rene Millman

Teen becomes first millionaire through HackerOne bug bounties

A self-taught teen hacker from Argentina has become the first bug bounty hacker to become a millionaire by hacking to create a safer internet Continue Reading

By

• Warwick Ashford, Senior analyst

Supplier consolidation tops infosec goals for 2019

Supplier consolidation, collaboration between networking and security teams, and security awareness are the top priorities for information security professionals trying to prepare for the unknown, annual benchmark study shows Continue Reading

By

• Warwick Ashford, Senior analyst

London cyber security innovation centre issues open invitation

Government-backed cyber security innovation centre is calling for innovators to address key challenges facing the cyber security industry, offering a year of bespoke support to scale quickly Continue Reading

By

• Warwick Ashford, Senior analyst

Sextortion accounts for one in 10 spear-phishing emails

Email sextortion scams have increased in frequency and scope in the past four months, as well as evolving to bypass spam filters and trick recipients into reading the messages, research shows Continue Reading

By

• Warwick Ashford, Senior analyst

Icann calls for community collaboration to protect the internet

The domain name system watchdog Icann has reaffirmed its commitment to engage in collaborative efforts to ensure the security, stability and resiliency of the internet’s global identifier systems Continue Reading

By

• Warwick Ashford, Senior analyst

Chinese cyber attack group Bronze Union targeting weapons tech

Weapons technology is among the latest targets of a highly adaptable cyber espionage group that uses a wide range of publicly available and custom attack tools, presenting a challenge to network defenders Continue Reading

By

• Warwick Ashford, Senior analyst

How CIOs can earn respect from business peers

CIOs recognise that standing out means being more like a business manager than a technology guru Continue Reading

By

• Cliff Saran, Managing Editor

Most UK consumers say Facebook should be regulated

Nearly three-quarters of UK consumers feel the social platform is damaging people’s mental health, survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Wearable technology in the workplace and data protection law

Wearable technology is slowly creeping into the workplace to monitor staff performance and health, but do employers understand the legal implications? We assess the data protection implications Continue Reading

By

• Charlotte Allery, Coffin Mew

Security is battling to keep pace with cloud adoption

Cloud-based business initiatives are accelerating more rapidly than security teams can secure them, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Researchers identify 4G and 5G network protocol flaw

Attackers could identify the network cell a user’s device is located in and potentially steal its IMSI number Continue Reading

By

• Cliff Saran, Managing Editor

Cyber criminals earn $3bn a year exploiting social platforms

Businesses urged to respond to research findings that the ready availability of hacking tools, wildfire spread of malware and proliferation of cryptocurrency mining has seen a 300-fold increase in social media-enabled cyber crimes in two years Continue Reading

By

• Warwick Ashford, Senior analyst

EU gathers momentum in cyber security legislation and cooperation

The past two years have seen a step-change in the rate at which the European Union is putting legislation in place to support improved cyber security standards, collaboration and sharing of resources, says digital commissioner’s representative Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber power needs wider discussion, says GCHQ director

The topic of cyber power needs wider discussion, says GCHQ head in a speech about the opportunities of digital innovation such as 5G, as well as the accompanying complexity and risk, with particular mention of China and Huawei Continue Reading

By

• Warwick Ashford, Senior analyst

Android now Fido2 certified

Mobile operating system’s certification accelerates global migration beyond passwords, says Fido Alliance, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook planned to spy on Android phone users, internal emails reveal

Facebook planned to use its Android app to track the location of its customers and to allow advertisers to send political advertising and invites to dating sites to ‘single’ people, confidential documents show Continue Reading

By

• Bill Goodwin, Computer Weekly

US may cut off countries that use Huawei in 5G networks

US secretary of state Mike Pompeo has said America may scale back or cut military and diplomatic ties with countries that use Huawei equipment in national 5G networks Continue Reading

By

• Alex Scroxton, Security Editor

BlackBerry acquires Cylance to cement security capability

BlackBerry moves forward with its plans to establish itself as an enterprise security firm, focusing on internet-connected endpoints Continue Reading

By

• Warwick Ashford, Senior analyst

Thales to sell nCipher to Entrust Datacard

Thales eSecurity has announced that it is to sell HSM specialist nCipher, the UK-based encryption firm it acquired in 2008, after spinning it out as a separate business Continue Reading

By

• Warwick Ashford, Senior analyst

Nato supports collaboration on cyber security

Nato supports collaboration and cooperation on cyber security as an organisation founded on the principle of collective defence, says representative Continue Reading

By

• Warwick Ashford, Senior analyst

IT Priorities 2019: Security concerns top agenda for network buyers again

The ability to gain visibility into what is happening on enterprise networks has once again topped the agenda for network managers and buyers, according to the latest Computer Weekly/TechTarget IT Priorities survey Continue Reading

By

• Alex Scroxton, Security Editor

Businesses urged to prepare for extortion campaigns

C-level executives, lawyers and doctors are the top extortion targets of cyber criminals, a report by researchers tracking thousands of sextortion attempts reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Cloud backup helps ASL Airlines evade ransomware and keep its business flying, says CIO

ASL Airlines took home the Best of Show prize at the Best of VMworld 2018 Awards after detailing how adopting a robust and resilient disaster recovery strategy is helping it evade ransomware threats Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

UK committed to working with EU cyber security partners

NCSC CEO uses cyber security conference in Brussels to set out his agency’s position on Brexit, 5G security, Huawei, market incentives and international cooperation on active cyber defence Continue Reading

By

• Warwick Ashford, Senior analyst

CW Nordics: Sweden to test e-krona and plans cashless society

Sweden’s vision of a cashless society has gained traction after the Riksbank (central bank) rolled out plans to test a digital currency, the e-krona. Also read how the Nordic region’s longer-established companies are playing a forceful role to advance digital transformation, and how Finland’s IT sector has rebounded strongly after Microsoft’s takeover of Nokia’s mobile phones and smart devices business units in 2014. Continue Reading

Cooperation a key theme of Brussels cyber security symposium

Fostering trust-based cooperation of like-minded cyber security stakeholders to create new strategies, policies and standards emerged as a key theme at a cyber security conference in Brussels Continue Reading

By

• Warwick Ashford, Senior analyst

Toyota Australia under cyber attack

The company has confirmed the attempted attack that took out its email system, forcing employees to turn to other forms of communication to continue working Continue Reading

By

• Aaron Tan, TechTarget

Breaking the chains: How FUD is holding the cyber sector hostage

The cyber security industry must move past fear tactics and get back to the basics of good cyber security practice Continue Reading

By

• Tom Kranz, Cyber Lab

MWC 2019: Huawei claims massive lead on 5G readiness

At a pre-Mobile World Congress event in London, Huawei’s Ryan Ding shared details of the firm’s rapidly expanding 5G mobile portfolio, and laid into his competitors Continue Reading

By

• Alex Scroxton, Security Editor

Huawei faces battle to win Nordic trust

Nordic countries are investigating the spying allegations made against Chinese networking supplier Huiawei Continue Reading

By

• Gerard O'Dwyer

UK naïve to think China won’t try to exploit Huawei

A think-tank report has branded the UK government naïve at best, irresponsible at worst, over its use of Chinese networking equipment in critical national infrastructure Continue Reading

By

• Alex Scroxton, Security Editor

Cybersecurity needs both psychologists and field marshals

Many cybersecurity professionals like military analogies. Indeed, some security pros are ex-military. But after a recent security exercise involving IBM’s new lorry-mounted SOC (security operations ... Continue Reading

By

• Bryan Betts, Freeform Dynamics

Activist Lauri Love’s computer ‘contained hacked data’, says judge

Lauri Love, who has been accused of hacking into US government computer systems, has lost a legal action against the NCA for the return of his computers and storage device Continue Reading

By

• Bill Goodwin, Computer Weekly

Putting print security on the C-Level agenda

Data breaches are rarely out of the headlines and compliance pressure, such as the introduction of GDPR, means security remains high on the corporate agenda. Cyber threats and data breaches are no ... Continue Reading

By

• Louella Fernandes, Quocirca

No More Ransom releases GandCrab decryption tool

Another free decryption tool is available that allows anyone infected with the latest versions of the GandCrab ransomware to regain control of their files and avoid paying the fee Continue Reading

By

• Warwick Ashford, Senior analyst

IT Priorities 2019: Cyber security and risk management among top priorities for 2019

This year’s Computer Weekly/TechTarget IT Priorities research shows that cyber security and risk management are among the top investment priorities Continue Reading

By

• Warwick Ashford, Senior analyst

Huawei’s Ren Zhengfei: US won’t crush us

Huawei CEO Ren Zhengfei has taken a more combative stance in the ongoing row over the firm’s alleged links to the Chinese intelligence services Continue Reading

By

• Alex Scroxton, Security Editor

Healthcare providers should press on with digital transformation

Healthcare providers should continue digitisation efforts with security in mind amid looming cyber threats, says a top T-Systems executive Continue Reading

By

• Aaron Tan, TechTarget

Finding security in the cloud

When choosing a cloud security provider, enterprises will need to consider the level of data privacy and data security risk involved Continue Reading

By

• Krishna Balakrishnan

When is it best to stick with paper?

In this week’s Computer Weekly, sometimes going digital is not necessarily the best thing to do – we weigh the pros and cons of paper versus technology. Our new buyer’s guide examines the challenges of asset management as you move IT infrastructure to the cloud. And we look at the growing role of software developers in the future of networking. Read the issue now. Continue Reading

Collaborative security approaches underpin container success

Containers are helping organisations to accelerate age-old software development approaches, but success is underpinned by a constant and team-wide attention to security Continue Reading

By

• Nicholas Fearn

NCSC signals UK may take softer line on Huawei

The UK’s National Cyber Security Centre suggests Huawei will be allowed to form core elements of the country’s 5G mobile network infrastructure after all Continue Reading

By

• Alex Scroxton, Security Editor

Fit for whose purpose? Submit your views on the Initial National Cybersecurity Skills Strategy

The meeting illustrated the difficulty of the task the DCMS team will have reconciling the need of MoD and GCHQ for patriotic cyberwarriors and the need of the rest of us for the skills to protect ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

CISOs under increasing pressure, study shows

Cyber security professionals are under growing pressure from workloads and budget deficits, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

CaixaBank customers can use their faces to withdraw money at ATMs

Spanish bank begins roll-out of ATMs equipped with facial recognition technology, but customers can still use card and PIN Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

(ISC)² invests in professional development of security workforce

Security industry association sets up Professional Development Institute to extend training offerings beyond certification Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: UTM a key part of a well-rounded security strategy

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Mary-Jo de Leeuw, (ISC)2

Australian government warns of blockchain gaps

Digital Transformation Agency dispels some myths around blockchain, calling for government agencies to be cautious about using the technology Continue Reading

By

• Aaron Tan, TechTarget

Scoop! Symantec Acquisition Makes Sense Of Software Defined Perimeter Security...

OK - so that's probably not the perfect headline to be announced by anyone who whistles through their teeth... Been having some interesting conversations recently around the idea of zero trust ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Telegram bot gets users hooked

Popular social media service provides a rich set of features for cyber criminals, RSA warns Continue Reading

By

• Cliff Saran, Managing Editor

The Met Office storms ahead on data analytics

In this week’s Computer Weekly, we find out how the Met Office takes 2TB of weather data every hour and turns it into useful business insight. We examine whether Amazon’s presence in the retail market is putting off other retailers from using its public cloud services. And we look at the new 802.11ax wireless networking standard and analyse the benefits for enterprise IT. Read the issue now. Continue Reading

Dutch developer offers businesses nuclear security option for communications

Startup that created the secure platform for communication between world leaders at the 2014 Nuclear Security Summit in the Netherlands seeks to revolutionise business mail Continue Reading

By

• Kim Loohuis

Security Think Tank: No tech will ever counter-balance poorly implemented processes

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

APAC healthcare providers losing $23m to cyber attacks

Healthcare organisations in the Asia-Pacific region could lose an average of $23.3m to cyber attacks, including losses from productivity and customer churn, a study finds Continue Reading

By

• Aaron Tan, TechTarget

What are the pros and cons of machine learning in network security?

The predictive nature of machine learning can benefit network security strategies. But it can also benefit those looking to break through secure network barriers. Continue Reading

By

• David Jacobs, The Jacobs Group

Lauri Love takes legal action against NCA for return of seized computers

Lauri Love, a former engineering student who won a battle with the US Department of Justice against extradition to the US to face hacking charges, is suing the UK's intelligence agency, the NCA, for the return of his seized computers Continue Reading

By

• Bill Goodwin, Computer Weekly

Security Think Tank: Know strengths and weaknesses of UTM systems

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Simon Persin, Turnkey Consulting

Australia’s defence department keeps old PCs out of landfills

Department has securely wiped data from used devices and kept 1,300 tonnes of e-waste out of landfills Continue Reading

By

• Beverley Head

Mumsnet denies 'thousands' affected by software glitch-induced data breach

Parenting advice site Mumsnet moves to clear up reports that thousands of users have been affected by its recent data breach Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

A guide to choosing cloud-based security services

Cloud-based security services can help organisations with a growing cloud footprint to reduce cost and address the manpower crunch in cyber security Continue Reading

By

• Aaron Tan, TechTarget