IT security

Most firms have software security vulnerability

Most firms have a software vulnerability that can be exploited by cyber attackers, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

What the ICO's Facebook fine teaches us

Legal expert Alexander Egerton considers whether the ICO’s planned £500,000 fine for Facebook is the precursor of a spate of increased fines across the board, or if it shows the ICO’s stance has not changed and will continue to target certain activities Continue Reading

By

• Alexander Egerton, Seddons

MPs call for inquiry into smart meter roll-out

Government urged to conduct a review of the roll-out of smart meters for electricity and gas, and to intervene to tackle a number of failures Continue Reading

By

• Alex Scroxton, Security Editor

Singapore public healthcare sector limits internet use

Healthcare workers who require internet access will have to use separate internet workstations following an unprecedented attack on Singapore’s public healthcare system Continue Reading

By

• Aaron Tan, TechTarget

Zero trust security model boosts business confidence

Organisations that combine the zero trust security model with next-gen access are more confident about meeting access control challenges, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security: A work in progress

Piers Wilson, director of the Institute of Information Security Professionals, reflects on the findings of the latest IISP industry survey and suggests there is still more work to do Continue Reading

By

• Piers Wilson, IISP

Huge Singapore data breach shows need for new approach

A major data breach in Singapore underlines the need for a new approach to protecting critical data and applications, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR drives down UK insider threat

The insider threat in European countries is falling post-General Data Protection Regulation, but continues to rise in the US, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC report underlines cyber threat for legal firms

Legal firms are a top target for cyber attackers, the latest report from the National Cyber Security Centre shows, emphasising the need for comprehensive cyber defence capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Uptick in UK privacy awareness, says ICO

The UK’s privacy watchdog, the Information Commissioner’s Office, reports increased public awareness of privacy and information rights issues Continue Reading

By

• Warwick Ashford, Senior analyst

UK alerted to potential cyber risks of Huawei equipment

A report has raised concerns about the shortcomings of Huawei engineering processes, which it says could put UK telecommunications networks at risk Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals use fake domains to scam businesses

UK police are warning businesses that cyber criminals are using fake domains to scam businesses out of hundreds of thousands of pounds Continue Reading

By

• Warwick Ashford, Senior analyst

CNI sector lacks cyber security skills, government warned

The UK’s critical national infrastructure sector is being negatively impacted by the lack of cyber security skills, a report warns Continue Reading

By

• Warwick Ashford, Senior analyst

Collaborative alliance to advance UK’s cyber security profession

Leading UK organisations in cyber security have united to develop a national professional body in the field Continue Reading

By

• Warwick Ashford, Senior analyst

How Splunk is ‘splunking’ data for APAC enterprises

Splunk’s regional vice-president talks up the company’s business strategy and how its customers are using big data analytics in security and IT operations Continue Reading

By

• Aaron Tan, TechTarget

Uber appoints first privacy and data protection chiefs

Uber is getting its privacy and data protection house in order in the wake of damaging data breaches and in anticipation of the company’s planned stock market launch in 2019 Continue Reading

By

• Warwick Ashford, Senior analyst

CW ASEAN: Defend against disruption

The security of industrial control systems (ICS) has come under the spotlight with several high-profile incidents affecting power plants and other critical infrastructure in recent years. What are the threats to these systems in ASEAN, and what is the common approach to securing ICS systems? In this month’s issue of CW ASEAN, we take a closer look at how ICS operators are improving the visibility of ICS environments without jeopardizing operations, addressing security vulnerabilities and enhancing cooperation between IT and operational technology teams. Read the issue now. Continue Reading

NHS on the hunt for chief data officer

The NHS CDO will report directly to NHS Digital CEO Sarah Wilkinson, get paid up to £176,750 and be responsible for a budget of around £57m Continue Reading

By

• Lis Evenstad

Retail cyber security spending ineffective as breaches rise

Cyber attacks on the retail sector are increasing, and although most retailers plan to increase cyber security spending, planned investments are unlikely to be effective, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Deloitte launches EMEA-wide initiative to close cyber security gender gap

Professional services organisation Deloitte expands its UK efforts to encourage more women into cyber security to cover the EMEA area Continue Reading

By

• Clare McDonald, Business Editor

Cyber security top priority for aircraft makers, says Airbus

There is a high level of collaboration in the aircraft industry on cyber security, but not all other industries are at the same level, according to an industry veteran at multinational aerospace and defence firm Airbus Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore to bolster threat intelligence sharing in financial sector

Singapore’s Cyber Security Agency has partnered the Financial Services Information Sharing and Analysis Centre to glean cyber threat intelligence for the country’s financial industry Continue Reading

By

• Aaron Tan, TechTarget

Spectre variant gives buffer overflow a new twist

New variants of the Spectre microprocessor bugs use buffer overflow-style attacks to run malicious code Continue Reading

By

• Cliff Saran, Managing Editor

Most airports not protected from cyber threats

The chairman of the Israel Airports Authority paints a dismal picture of the state of cyber security in aviation, and offers advice on what can be done to avert the next disaster. Continue Reading

How Australia is keeping pace with ICS threats

Besides bridging the security gap between IT and operational technology teams, Australia is driving efforts to bolster the security of IoT devices Continue Reading

CW ANZ: Fix the weak links

Recent reports have suggested that cyber threats are increasingly aimed at critical information infrastructure such as power grids, water treatment plants and transportation networks. While the scale of the problem that Australian industry faces is hard to quantify, no one disputes the threat is real. In this edition of CW ANZ, we look at how Australia is securing its industrial control systems and how it is bridging the security gap between IT and OT teams. Read the issue now. Continue Reading

An insider’s look into the dark web

A principal research scientist at Sophos offers a glimpse into the abysses of the dark web in a bid to uncover what cyber crooks are up to Continue Reading

By

• Aaron Tan, TechTarget

Cryptominers plateau while backdoors shoot up

Illicit cryptocurrency mining appears to be slowing down, but backdoors increased rapidly in the second quarter of the year, a report warns Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber resilience key to securing industrial control systems

Operators of industrial control systems can build greater cyber resilience by getting IT and operational technology teams to work more closely together and improving the visibility of their infrastructure, among other security measures. Continue Reading

Most airports not protected from cyber threats

The chairman of the Israel Airports Authority paints a dismal picture of the state of cyber security in aviation, and offers advice on what can be done to avert the next disaster. Continue Reading

APAC organisations could lose $1.75tn from cyber attacks

A study by Frost and Sullivan has found that losses from cyber security incidents could account for 7% of the region’s GDP in 2017 Continue Reading

A third of organisations do not have a security expert, survey shows

Around a third of organisations are vulnerable to cyber attacks due to a lack of dedicated in-house cyber security experts, finds Gartner survey Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Mobile devices lost in London underline security risk

The security risk of lost mobile devices is underlined by the fact that almost 26,000 mobile phones and computing devices were lost in London in the past year alone Continue Reading

By

• Warwick Ashford, Senior analyst

Application and device security under the spotlight

The security of internet-connected devices and associated applications has become a significant concern, prompting suggestions legislation may be required, while the UK government’s recent Secure by Design review suggests several solutions, including legislative measures. Continue Reading

Disaster recovery as a service: what you need to know 

Technological advances make disaster recovery as a service possible, but Computer Weekly investigates whether it is practical option for all businesses Continue Reading

By

• Rene Millman

ITPS expands datacentre to support Azure Stack and HPC

Datacentre company ITPS expands its County Durham facility to meet client needs for high performance computing and security Continue Reading

By

• Cliff Saran, Managing Editor

Russian cyber attacks show need for international rules

Russian cyber attacks aimed at influencing foreign elections highlight the need for the international community to agree on rules of conduct and punitive consequences Continue Reading

By

• Warwick Ashford, Senior analyst

New industry network to bolster data protection in ASEAN

The Data Protection Excellence network will assist organisations and individuals new to data protection laws by providing hands-on training and professional certification courses Continue Reading

By

• Aaron Tan, TechTarget

Injecting evidence into the On-line Child Safety Debate

1 in 10 of those who video chat with strangers have been asked to change or undress on camera … we need open and honest debate, not obfuscation and claims that these are technical matters, too ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Endpoint security tool fueled OpenText's Guidance Software acquisition

Endpoint security was the primary draw for OpenText's Guidance Software acquisition. But plans to improve e-discovery and data forensics with Magellan AI are part of the roadmap. Continue Reading

By

• Don Fluckinger, Senior News Writer

Matching disaster recovery to cyber threats

While it is important to take steps to prevent cyber attacks, they can still happen. That is why disaster recovery practices are equally critical Continue Reading

By

• Nicholas Fearn

Hackers increasingly targeting cloud infrastructure

Cloud infrastructure is a growing target for cyber attackers because of available computing resources, as well as the repositories of valuable data, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Brexit proposal calls for standards alignment and data sharing

Although the government’s Brexit whitepaper focuses on curbing immigration, collaboration on cyber crime, data sharing and services are among the bargaining chips Continue Reading

By

• Cliff Saran, Managing Editor

Security Think Tank: A good password policy alone is not enough

In light of the fact that complex passwords are not as strong as most people think and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Bruce Beam , (ISC)²

Cyber attackers cashing in on ‘hidden’ attack surface

Cyber attackers are cashing in on organisations’ lack of visibility into all online interactions that can involve multiple third parties, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

CW Middle East: Can Saudi Arabia build the Silicon Valley of the Middle East?

In April this year, Saudi Arabia’s crown prince Mohammed Bin Salman visited Silicon Valley in the US to meet tech giants such as Apple and Amazon in its efforts to fast-forward the kingdom’s technology capabilities. Read about its lofty ambitions. Also in this issue, read how demand for skilled IT professionals is increasing rapidly in the Middle East, which is facing a talent crunch. Meanwhile, Gulf Cooperation Council smart city initiatives are gathering momentum. Continue Reading

An exciting time to be in cyber security innovation

Cyber security innovation has received a £1.35m shot in the arm from the UK government with the opening of a new innovation centre in London. Computer Weekly looks at why now is a good time to be working and innovating in this industry Continue Reading

By

• Warwick Ashford, Senior analyst

Cloudian adds Storage Made Easy file-sync-and-share compliance

Object storage maker adds file-sync-and-share with compliance filters from Storage Made Easy to restrict movement of potentially sensitive data between endpoints and datacentres Continue Reading

By

• Antony Adshead, Storage Editor

White-hat hackers find record number of vulnerabilities

White-hat hackers are finding more vulnerabilities than ever before, with crowdsourced security testing continuing to gain popularity, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Cracking the code – what makes a good password?

In light of the fact complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Ramsés Gallego, Isaca

UK firms too confident about cyber security

Three-quarters of UK companies say their cyber protection is above average, and nearly half think they are a “top performer” despite the growth in data breaches Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook could face ICO fine of up to £500,000

Facebook could face the maximum fine provided by the UK’s previous data protection laws for lack of transparency and security issues relating to the harvesting of data, the UK’s privacy watchdog has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Hidden costs of data breaches difficult to manage, study finds

The full cost of “mega breaches” can be up to £264m, with the average UK data breach costing £2.69m, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Lords urge Brexit negotiators to reach agreement on security

Time is running out for the UK and EU to agree on a future security relationship and if negotiators fail to find common ground, all stakeholders stand to lose, warns a Lords’ committee Continue Reading

By

• Warwick Ashford, Senior analyst

Corporate networks vulnerable to insider attacks, report finds

Researchers found that 100% of corporate networks tested in 2017 were vulnerable to insider attacks, with Wi-Fi networks and employees among the top areas of weakness Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber crime: why business should report it as soon as possible

Cyber crime is affecting a growing number of businesses, yet few are reporting it. Computer Weekly lifts the veil on cyber crime reporting, looking at the who, what, when, where, how and why Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Some basic password guidelines

In light of the fact that complex passwords are not as strong as most people think and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Petra Wenham

Tackling the digital identity problem

In this week’s Computer Weekly, as UK government attempts to create a digital identity standard flounder, we examine progress on establishing the online ID system the digital economy needs. Barclays Bank talks about its move to DevOps and public cloud with Amazon Web Services. And we find out how using AI and chatbots could help improve IT service management. Read the issue now. Continue Reading

As prime minister unveils Brexit plans, TechUK calls for deal on services

The UK tech industry wants a Brexit deal open to services, mirroring the EU trade agreement with Canada Continue Reading

By

• Cliff Saran, Managing Editor

Collaborative taskforce launches security intelligence network

BAE Systems, Vodafone, cyber security incubator CyLon and other partners have joined forces in unveiling a manifesto for safeguarding society in the digital age Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Passwords alone are not good enough

In the light of the fact that complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Inside one of the world’s largest bug bounty programmes

Trend Micro’s Zero Day Initiative may be the top external supplier of software bug reporting for Microsoft and Adobe, but that does not mean it purchases every type of bug Continue Reading

By

• Aaron Tan, TechTarget

Infosec community welcomes bank sector focus on cyber resilience

The information security community has welcomed regulators’ call on the banking industry to demonstrate their capability to respond to cyber attacks because it highlights the importance of cyber resilience for all businesses Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Firms need to support good password practices

In the light of the fact that complex passwords are not as strong as most people think and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Mike Gillespie

ICO Grants Programme launches second round of funding

The ICO is inviting a second round of applications for funding to promote and support independent, innovative research and solutions focused on privacy and data protection Continue Reading

By

• Warwick Ashford, Senior analyst

European Parliament calls for suspension of Privacy Shield

The Privacy Shield framework that replaced the Safe Harbour agreement for personal data transfers between the EU and the US is under increased pressure due to alleged non-compliance by US firms Continue Reading

By

• Warwick Ashford, Senior analyst

How changes in retail law could affect customer experience

New payments regulations could increase the amount of times customers will need to use two-factor authentication to make a purchase, potentially putting a strain on customer experience, according to MasterCard Continue Reading

By

• Clare McDonald, Business Editor

Security Think Tank: How to create good passwords and add security layers

In light of the fact complex passwords are not as strong as most people think and most password strategies inevitably lead to people following them blindly, what actually makes a good password - and when is a password alone not enough? Continue Reading

By

• Simon Persin, Turnkey Consulting

Beware blockchain security blindspots, warns RSA

Companies need to ensure that rushed blockchain and other new technology projects are not introducing security vulnerabilities by gaining granular visibility of network activity, according to RSA Security Continue Reading

By

• Warwick Ashford, Senior analyst

Australian startups team up to keep wind turbines humming

Using acoustic sensors and nanosatellite connectivity, two Australian startups hope to identify potential turbine problems before they occur to secure the country’s wind energy Continue Reading

By

• Beverley Head

Security Think Tank: Complex passwords provide a false sense of security

In the light of the fact that complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Tim Holman, 2-sec

Israel accuses Hamas of using spy apps to target soldiers

Israel has accused Hamas of using apps to hijack soldiers’ phones to spy on them, and UK defence secretary demonstrates how effective that could be Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore company turns to blockchain to improve food security

SMC Nutrition is using a blockchain distributed ledger developed by a Singapore-based company to gain visibility across its supply chain and ensure food security Continue Reading

By

• Kimberly Chua

Exiting EU committee cattle-prods government on 'data adequacy'

House of Commons Select Committee for Exiting the European Union urges the government to start the process to secure a “Data Adequacy Decision” from the EU pronto Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

Security Think Tank: Use pass phrases and 2FA to beef up access control

In light of the fact complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password – and when is a password alone not enough? Continue Reading

By

• Paddy Francis

NHS data breach caused details of 150,000 patients to be shared

The NHS has inadvertently shared the confidential data of 150,000 patients over a three-year period due to a coding error in one of the most common GP IT systems Continue Reading

By

• Lis Evenstad

Feds expand Facebook data sharing probe

The US federal probe into Facebook’s data sharing practices is expanding and MEPs are considering new measures as the firm reveals it granted extended access to 61 companies and admits to another data sharing software bug Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Put more layers around passwords to up security

In light of the fact that complex passwords are not as strong as most people think and most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Maxine Holt, Omdia

Linux targeted by illicit cryptocurrency miners

Cryptojacking is increasingly being used by cyber criminals to raise funds, Watchguard report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Bolloré Group partners with Alibaba for cloud and co-development

French transportation conglomerate will use Alibaba cloud, and Alibaba will look at using Bolloré's battery technology in its datacentres Continue Reading

By

• Cliff Saran, Managing Editor

HMRC deactivates record number of fake websites

HM Revenue & Customs has removed more than 20,000 malicious websites in the past year, but warns people to stay alert to the threat from online fraudsters Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore’s Fullerton Health gears up for the cloud

Private healthcare service provider Fullerton Health is moving business applications to Microsoft’s cloud services before rolling out data analytics and artificial intelligence to enhance operations and patient care Continue Reading

By

• Aaron Tan, TechTarget

Australian government grappling with digital transformation woes

Digital transformation in Australia’s public sector has been beset by soaring rhetoric and vague aspirations by government, a new report reveals Continue Reading

By

• Beverley Head

Cyber security – why you’re doing it all wrong

Most organisations can list the IT security tools and controls they have, so why do most of them still get the security basics wrong? Continue Reading

By

• Ed Tucker, Human Firewall

Millennial versus Mature – who's the real IT security risk?

Passwords have been the mainstay for securing applications, devices and the data they hold, pretty much ever since IT was invented. It’s an approach that has always had weaknesses though, mostly ... Continue Reading

By

• Tony Lock, Freeform Dynamics

UK government cyber security standard welcomed

The information security community has welcomed the publication of the government’s minimum cyber security standard, which could be used by any organisation to improve its cyber defences Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR exposes breach reporting flaws

In the month since the GDPR compliance deadline, it has become clear that many organisations are not well prepared for personal data breach notifications, says PwC’s data protection lead Continue Reading

By

• Warwick Ashford, Senior analyst

IT On A Budget? Still Plenty Of Investment Money Around...

IT is often two-faced and never more so than when it comes to the financial health of the industry. Speak to one set and they'll tell you how tight it is, scrapping for every penny of profit, and ... Continue Reading

By

• Steve Broadhead, Broadband Testing

NHS Digital signs three-year cyber security partnership with IBM

Partnership with IBM aims to bolster cyber security responses and defences, including expanding NHS Digital’s Cyber Security and Operations Centre Continue Reading

By

• Lis Evenstad

UK biometrics strategy criticised for lack of content

The long-awaited government biometrics strategy falls short of the mark, say critics, failing to provide a detailed and coherent strategy or governance framework Continue Reading

By

• Warwick Ashford, Senior analyst

British Muslim considers appeal after court rules repeated terrorism stops are legal

Muzaffar Abdullah, a 37-year-old gas engineer who has been stopped and questioned by police at airports at least 10 times, is considering an appeal after being found guilty of wilful obstruction for refusing to answer questions under controversial terrorism legislation. He received a conditional discharge. Continue Reading

By

• Bill Goodwin, Computer Weekly

First Lorca cohort to focus on security orchestration

The first companies to benefit from the new London cyber innovation centre will focus on cyber security orchestration and automation Continue Reading

By

• Warwick Ashford, Senior analyst

Ticketmaster warns of third-party data breach

Ticketmaster has warned of a potential data breach through malware found in a third-party customer support service, underlining the importance of supply chain security Continue Reading

By

• Warwick Ashford, Senior analyst

University of Melbourne claims quantum computing breakthrough

Australian scientists have simulated the power of quantum computing on classical computers to solve a mathematical problem, paving the way for future breakthroughs in the nascent field Continue Reading

By

• Aaron Tan, TechTarget

Lorca will help drive UK cyber exports, says ex-GCHQ boss

New London cyber security innovation centre will help to boost exports of UK cyber security expertise, says former GCHQ director Continue Reading

By

• Warwick Ashford, Senior analyst

Brexit a greater risk to UK financial system than cyber attack

While Brexit is seen as the biggest risk to the stability of the UK financial system, cyber attack is the most difficult risk to manage for over half of firms Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government must challenge popular smart city misconceptions

A report by the All Party Parliamentary Group on Smart Cities says many people feel alienated by the concept, and calls on the government to challenge some popular misconceptions Continue Reading

By

• Alex Scroxton, Security Editor

Cyber criminals 'infect and collect' in cryptojacking surge

Illicit cryptocurrency mining offers cyber criminals lower risk, higher efficacy and greater ease of making money, adding passive exploitation to ransomware extortion, data breach theft and fraud, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

AI and other tech key to post-Brexit success, says Matt Hancock

Digital secretary Matt Hancock highlights the importance of emerging technologies to the future of the UK at the opening of London’s cyber security innovation centre Continue Reading

By

• Warwick Ashford, Senior analyst

Global IoT security standard remains elusive

Despite the lack of a global internet of things security standard, existing security frameworks are on the same page in areas such as device upgradability and data stewardship Continue Reading

By

• Aaron Tan, TechTarget