IT security

NHS extends trials of digital identity system

The NHS in England is working with external organisations in new pilots to test its secure online login system for healthcare Continue Reading

By

• Bryan Glick, Editor in chief

Security Think Tank: Approach UTM with caution

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Simon McCalla, Nominet

Detail of Dutch reaction to Russian cyber attack made public deliberately

 Continue Reading

CW Benelux: Google helps Dutch schools to teach computer skills

A programme in the Netherlands to help primary schools provide computational thinking and programming, developed with financial support from Google, is well on schedule. Also read about four Russians’ attempted hack into the networks of the Organisation for the Prohibition of Chemical Weapons in The Hague, and how Dutch delivery company PostNL is making savings by using robotic technology to automate administrative tasks. Continue Reading

Security Think Tank: UTM attractive to SMEs, but beware potential pitfalls

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Maxine Holt, Omdia

Data breaches in Australia show no sign of abating

Australia’s privacy watchdog recorded over 800 cases of data breaches, nearly one year into the country’s mandatory data breach notification regime Continue Reading

By

• Beverley Head

Huawei: We are not spying on the UK

Huawei’s Ryan Ding tells the British government that the company has never, and will never, use its technology to assist the Chinese intelligence services Continue Reading

By

• Alex Scroxton, Security Editor

What is CIO best practice when it comes to cloud security?

As businesses increasingly adopt cloud-first strategies, how can they ensure their security is up to scratch? Computer Weekly asks the experts Continue Reading

By

• Mark Samuels

Security Think Tank: Focus UTM capabilities on security and business needs

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Tech sector tells government that digital identity policy is 'urgently required'

The UK tech sector has urged the government to publish policy to support the creation of a “fully functioning” digital identity market, to boost the digital economy Continue Reading

By

• Bryan Glick, Editor in chief

Civil liberties groups to challenge bulk surveillance and intelligence sharing in Strasbourg

Coalition of campaigning groups wins the right to challenge the UK’s use of bulk surveillance powers, which allows suspicionless surveillance of the population and sharing of intercepted data with overseas intelligence agencies, in European Court of Human Rights Continue Reading

By

• Bill Goodwin, Computer Weekly

Cambridge launches urban data IoT project

The city of Cambridge will use Telensa IoT sensors and a Microsoft Azure platform to better manage its urban data assets Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Many routes to UTM to boost security capabilities

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Petra Wenham

Security Think Tank: Arguments for and against unified threat management

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Mike Gillespie

Massive uptick in cyber attacks targeting Student Loans Company

Cyber criminals used a range of techniques, as well as malware, malicious emails and calls, in attempts to access confidential financial data belonging to students, in massive uptick in attacks in the past year Continue Reading

By

• Warwick Ashford, Senior analyst

Met Police deploys live facial recognition technology for ninth time

Police say technology is helping to prevent and detect crime by identifying wanted criminals, but privacy groups have voiced their opposition Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Orange acquires UK’s SecureData

The Orange telecommunications group is to acquire UK cyber security firm SecureData to strengthen its leadership position in Europe in this sector Continue Reading

By

• Warwick Ashford, Senior analyst

Innocent people arrested following surveillance blunders, IPCO reveals

Interception of communications commissioner Adrian Fulford warns of “grave” repercussions for people wrongly identified as suspects due to errors made when government bodies access email, phone and telephone data Continue Reading

By

• Bill Goodwin, Computer Weekly

ICO to audit Leave.EU and Eldon Insurance

UK privacy watchdog will audit the data protection practices at Leave.EU and Eldon Insurance and has confirmed fines for both companies for unlawful marketing messages Continue Reading

By

• Warwick Ashford, Senior analyst

New stolen credentials cache puts spotlight on authentication

The discovery of billions more stolen usernames and passwords in Collections #2 to #5 have prompted fresh calls for the implementation of better authentication methods across industry Continue Reading

By

• Warwick Ashford, Senior analyst

Cisco Live Europe: Intent-based networking meets the IoT head-on

Networking and communications technology supplier Cisco plans to bring intent-based networking techniques to bear on the internet of things Continue Reading

By

• Alex Scroxton, Security Editor

Steps to improve an application environment and fix flaws

Eliminating application security flaws from an enterprise's server can be a complex task. Learn steps to take in order to improve application security with expert Kevin Beaver. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

How to accelerate digital identity in the UK

Trusted online relationships are essential to the digital economy, but the UK is lagging behind. What needs to be done? Continue Reading

By

• David Black, ID Crowd

Airbus investigates personnel data breach

Intruders were detected in the information systems of manufacturer’s commercial aircraft business, highlighting the need for a new approach to data protection Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook profit up despite privacy failings

Social media giant reports profit gains for the last quarter and the past year, despite a string of privacy blunders that came to light in 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber insurance uptake growing, but not all firms convinced

The adoption of cyber insurance is expected to grow, but one in three companies still are not sold on the benefits, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

YouTuber impersonation scam not new, say researchers

Scam that tricked users into clicking on phishing links has affected tens of thousands of victims and has been active for several years, say security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Unconfigured IoT is a security risk, warns researcher

Internet of things researcher says unconfigured internet-connected devices are a largely unrecognised cyber security risk to businesses and consumers, and welcomes the increased likelihood of UK IoT legislation Continue Reading

By

• Warwick Ashford, Senior analyst

How traffic scrubbing can guard against DDoS attacks

Although most scrubbing services can help fend off distributed denial of service attacks, a more comprehensive mitigation strategy is required to remain unscathed Continue Reading

By

• Ai Lei Tao

No-deal Brexit would undermine digital economy, BCS warns

Skills, funding and the free flow of data are all at risk, says the chartered institute for IT Continue Reading

By

• Cliff Saran, Managing Editor

How a Windows antimalware tool helps endpoint security

The Windows Defender Antivirus program was updated to include sandbox network security. Learn why this is so important and why security professionals have been asking for it. Continue Reading

By

• Nick Lewis

How To Save IT From Drowning In Its Own Self-Containerised World (and other stories)

Anyone out there right now could be more than excused for thinking we're drowning in security start-ups; too many "me too" vendors trying to resolve the same perceived problems - niche or broad. ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Global cyber attack could cost up to $193bn, study shows

A coordinated global cyber attack could have an economic impact of up to $193bn, an insurance industry-backed report claims Continue Reading

By

• Warwick Ashford, Senior analyst

UK police target hundreds of DDoS attackers

National Crime Agency is investigating hundreds of suspected users of a distributed denial of service-for-hire site that was taken down by an international law enforcement operation Continue Reading

By

• Warwick Ashford, Senior analyst

New tech putting sensitive data at risk, report confirms

Deployments of new technologies are putting sensitive corporate data at risk because organisations are struggling to secure these new IT environments, a report confirms Continue Reading

By

• Warwick Ashford, Senior analyst

Personal records of HIV-positive individuals in Singapore leaked online

The personal information of 14,200 people with the human immunodeficiency virus was leaked by an American who lived in Singapore Continue Reading

By

• Aaron Tan, TechTarget

Security alert for vulnerabilities in Siemens PLCs

Industries that use Siemens Simatic controllers to automate manufacturing processes have been urged to update software without delay Continue Reading

By

• Warwick Ashford, Senior analyst

Data protection practices still poor, survey shows

Despite concerns over privacy and data protection and a greater understanding of best security practices, individuals and businesses are still falling short, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Minister urges UK firms to prepare for no-deal Brexit

On International Data Protection Day, the UK’s digital minister has added her voice to calls by the data protection watchdog for UK firms to prepare for a no-deal Brexit Continue Reading

By

• Warwick Ashford, Senior analyst

Government to pump £70m into ‘designing out’ cyber threats

Industrial Strategy Challenge Fund cash to be used for designing and developing more secure hardware in a bid to eradicate cyber threats Continue Reading

By

• Lis Evenstad

DCMS funding fuels cyber diversity drive

The Department for Digital, Culture, Media and Sport is investing in four new projects to drive the number of diverse candidates considered for cyber careers Continue Reading

By

• Clare McDonald, Business Editor

UK cyber security agency investigates DNS hijacking

NCSC is probing the large-scale DNS hijacking campaign that has reportedly affected government and commercial organisations worldwide, and has issued defence advice Continue Reading

By

• Warwick Ashford, Senior analyst

Brexit and data protection: What’s next?

PA Consulting assesses how a no-deal Brexit would affect the flow of data from the UK into and out of Europe Continue Reading

By

• Annelie van Milink

Vodafone suspends use of Huawei hardware

Vodafone’s UK CEO has said the operator will ‘pause’ its use of Huawei hardware for the foreseeable future Continue Reading

By

• Alex Scroxton, Security Editor

Budding UK cyber strategists gear up for national competition 

Teams of UK university students are preparing to compete for the second time in analysing the threat of a simulated cyber attack to develop policies and strategies Continue Reading

By

• Warwick Ashford, Senior analyst

ICO adds to guidance on ‘no-deal’ Brexit

The UK’s privacy watchdog has been advising UK firms to prepare for a no-deal Brexit and has added some guidance for SMEs Continue Reading

By

• Warwick Ashford, Senior analyst

Former EU data protection tsar joins ICO

Former EU data protection supervisor joins the UK’s privacy watchdog as non-executive director, strengthening its commitment to international work Continue Reading

By

• Warwick Ashford, Senior analyst

A cloud compliance checklist for the GDPR age

The cloud is supposed to make things simpler, but when it comes to compliance, things can get complex. Here is a look at the essential elements of a cloud compliance strategy Continue Reading

By

• Stephen Pritchard

Chinese government grants BT new powers

Enhanced operating licences improve telco’s ability to work with customers in China Continue Reading

By

• Alex Scroxton, Security Editor

Singapore’s growing cyber security influence in ASEAN

At a recent event marking the launch of Trend Micro’s regional headquarters in Singapore this week, the company’s executives cited Singapore’s vision and influence over ASEAN in cyber security ... Continue Reading

By

• Aaron Tan, TechTarget

Poor practices expose 24 million financial records

Failure to maintain appropriate security controls has again led to the exposure of millions of sensitive data records, this time from the banking world Continue Reading

By

• Warwick Ashford, Senior analyst

IoT application vulnerabilities leave devices open to attack

Barracuda Networks calls for internet of things devices to be subject to regular security review after researchers detail the application vulnerabilities of an internet-connected security camera Continue Reading

By

• Warwick Ashford, Senior analyst

Crime stats show switch in focus by cyber criminals

The latest crime statistics suggest that cyber criminals are turning their attention to organisations and social engineering attacks as they become more sophisticated Continue Reading

By

• Warwick Ashford, Senior analyst

How to prepare for the UK’s uncertain Brexit terms

Analyst firm Gartner looks at the main business continuity plans that need to be in place Continue Reading

By

• Peter Aykens

Thales eSecurity spins out nCipher

After just over a decade, Thales eSecurity has announced that it has spun out HSM specialist nCipher, the UK-based encryption firm it acquired for $100m in 2008 Continue Reading

By

• Warwick Ashford, Senior analyst

Business failing to see strategic value of cyber security

UK businesses are failing to get value out of cyber security because they fail to see its strategic importance and often have a negative attitude towards security professionals, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

AWS now accredited to run protected workloads in Australia

Accreditation from the Australian Cyber Security Centre will enable organisations to store and process sensitive data in the Amazon Web Services Sydney region Continue Reading

By

• Aaron Tan, TechTarget

Facebook’s objections to court concerns over privacy more about ‘optics’ than facts

Facebook’s challenge to a High Court ruling that raises serious concerns about data transfers between Europe and the US is more about appearance than facts, lawyers for the Irish Data Protection Commission told Dublin's Supreme Court Continue Reading

By

• Bill Goodwin, Computer Weekly

MPs challenge Huawei over spying allegations

The chair of the cross-bench Science and Technology Committee has written to Huawei seeking answers over its activities in the UK Continue Reading

By

• Alex Scroxton, Security Editor

Time to deploy strong authentication, says Fido

The time has come for organisations to deploy cryptographically backed strong authentication, according to the Fido Alliance, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

US issues emergency directive to halt DNS hijacking

US government agencies have been given 10 days to complete a four-step action plan to stop DNS hijacking attacks Continue Reading

By

• Warwick Ashford, Senior analyst

IBM mobile cyber range starts European tour in London

IBM’s mobile cyber range is kicking of a tour in London to raise awareness around the need for tried and tested cyber attack responses among organisations in Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Young Dutch cyber criminals get re-education rather than jail time

Young hackers in the Netherlands are being rehabilitated through punishments that educate rather than incarcerate Continue Reading

By

• Tijs Hofmans

Ransomware in decline, report confirms

The trend of cryptomining replacing ransomware as the most popular money-generating activity by cyber attackers appears to be confirmed by malware stats for the past year Continue Reading

By

• Warwick Ashford, Senior analyst

London cyber innovation centre expands global ties

London innovation centre Plexal has announced international partnerships aimed at boosting global cyber security cooperation Continue Reading

By

• Warwick Ashford, Senior analyst

Davos 2019: Why data sharing is key to AI in Industry 4.0

Machines can learn from humans, but no one does the same job in the same way, so it makes sense to identify best practices Continue Reading

By

• Cliff Saran, Managing Editor

It’s complicated: How enterprises are approaching IAM challenges

Identity and access management challenges are evolving with digital transformation. Computer Weekly explores some of the ways organisations are ensuring the right people gain the right access to the right resources Continue Reading

Moving beyond network boundaries

In this week’s Computer Weekly, we look at how businesses are adapting to the challenges of perimeterless network security. We examine how digital transformation is bringing increased complications for identity and access management (IAM). And we ask if public cloud providers are becoming a threat to the funding model for open source software. Read the issue now. Continue Reading

Facebook: US government does not engage in mass and indiscriminate surveillance

Social media giant challenges a ruling by Dublin’s High Court over a judgment that it says made ‘extraordinary and incorrect’ findings about the US legal system Continue Reading

By

• Bill Goodwin, Computer Weekly

€50m GDPR fine for Google is a wake-up call for tech giants

The French data protection authority has fined Google €50m for contravening EU data protection laws, which has been hailed as a warning for tech giants and other data handling firms Continue Reading

By

• Warwick Ashford, Senior analyst

Name and shame firms with poor cyber security, government told

The government should name and shame companies whose cyber security measures fail to protect consumers’ data and firms should implement Active Cyber Defence, an academic report urges Continue Reading

By

• Warwick Ashford, Senior analyst

Podcast: How to get ready for the California Consumer Privacy Act

If you have any customers in California, you need to know about that state’s equivalent to GDPR. Mathieu Gorge of Vigitrust talks through what you need to achieve compliance Continue Reading

By

• Antony Adshead, Storage Editor

Public procurement key to cyber security

Using public procurement as a means of boosting cyber security is the top recommendation for 2019, according to a report based on expert views Continue Reading

By

• Warwick Ashford, Senior analyst

Home Office vetoes privacy campaigner from senior post in surveillance watchdog

The Home Office refuses academic and privacy campaigner, Eric King, security clearance for a senior role at the intelligence services watchdog, despite high-level backing from officials Continue Reading

By

• Bill Goodwin, Computer Weekly

Break free from traditional network security

Highly connected businesses put pressure on traditional network security. We look at how corporate networks are breaking out of their boundaries Continue Reading

By

• Cliff Saran, Managing Editor

Five issues for SMEs to consider when adopting encryption

Encryption is still considered difficult to deploy and use as a data protection method, especially by small businesses, but considering five key factors can make adoption easier, says Becrypt Continue Reading

By

• Warwick Ashford, Senior analyst

Prepare for no-deal Brexit, says ICO

The UK data protection authority is urging businesses to prepare for a no-deal Brexit to ensure there is no interruption in data flows from Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Breach of nearly 2.7 billion records underlines password flaws

Potentially the biggest personal data breach to date from thousands of sources, some possibly breached as far back as 2008, illustrates the deeply flawed nature of password-based authentication, say industry commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Threat intelligence boosts security training

Security professionals in training can now benefit from real-time threat intelligence data, thanks to a partnership between Digital Shadows and Immersive Labs Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Cloud tech helps to protect advanced networks

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Greg Temm

CenturyLink opens Singapore SOC amid security services boom

US telco’s second Asia-Pacific security operations centre in Singapore is one of eight globally as it bids to carve a slice of the security services market Continue Reading

By

• Aaron Tan, TechTarget

New Zealand faces more state-sponsored attacks

Nearly four in 10 cyber security incidents recorded by the National Cyber Security Centre were the work of state-sponsored threat actors Continue Reading

By

• Aaron Tan, TechTarget

Dutch pharma firm Centrient switches out MPLS for Cato SD-WAN

Centrient Pharmaceuticals, a Netherlands-based drug company, has switched out its global MPLS service in favour of a high-performance software-defined WAN from Cato Networks Continue Reading

By

• Alex Scroxton, Security Editor

Researchers discover new Magecart group

Security researchers have uncovered a sub-group of the Magecart hacking group, highlighting the wider risks of web-based supply chain attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Davos: World leaders need to grasp future technological risks

Technological advancement is both a benefit and risk to society, but often the risks are not identified until they are exploited Continue Reading

By

• Cliff Saran, Managing Editor

Facebook’s high-stakes privacy gamble goes to Dublin court

A high-wire gamble with billions in compensation at stake for European internet users – part of a complex case between Facebook and the Irish information commissioner – hides challenge to the unlawfulness of US state internet surveillance Continue Reading

By

• Kevin Cahill

Security Think Tank: Walk before you run

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

Millions of industrial remote controllers open to attack

Millions of industrial remote controllers are open to cyber attack because of vulnerabilities in the radio frequency technology used, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

The rise of DevSecOps

The increasing complexity of security threats facing enterprises is leading to DevSecOps approaches, which combine operations and development with security, so that all business units are involved in security operations Continue Reading

By

• Finbarr Toesland

New CISO is dead serious about security

Our new CISO has just issued a warning across the company. He's going to blame staff for any blunders. And he's going to make sure they NEVER do it again... Continue Reading

By

• Cliff Saran, Managing Editor

Businesses fail to apply encryption technology effectively

Most businesses are not applying common encryption tools effectively to contain the fallout and costs of data breaches, research shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Apply different techniques to safeguard against rogue code

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Ramsés Gallego, Isaca

Less than half of firms able to detect IoT breaches, study shows

UK firms have one of the lowest internet-of-things device breach detection capabilities in Europe, a study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

SingHealth and IT supplier fined S$1m for data breach

Singapore’s data protection commission considered the fact that both SingHealth and its IT supplier fell prey to sophisticated threat actors, among other factors, when meting out the fine Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Combine SDN, containerisation and encryption to halt rogue code

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Mary-Jo de Leeuw, (ISC)2

Why CIOs need to reshape desktop IT for Windows 7 end of support

With a year to go before Windows 7 reaches end of life, IT departments have more than just the operating system upgrade to consider Continue Reading

By

• Cliff Saran, Managing Editor

Top UK hacker-for-hire jailed

Notorious British hacker-for-hire jailed for cyber attacks on a Liberian telco after an international criminal justice operation Continue Reading

By

• Warwick Ashford, Senior analyst

Security without borders

Perimeterless security offers a way to secure each point of connectivity and every device, rather than relying on perimeter protection Continue Reading

By

• Stuart Burns

AI application overlooked in cyber security research

Despite the proliferation of cyber security products and services claiming to be driven by artificial intelligence, the application of the technology is being overlooked by research, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: How to use SDN, containers and encryption – and some warnings

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Petra Wenham