IT security

HMRC deactivates record number of fake websites

HM Revenue & Customs has removed more than 20,000 malicious websites in the past year, but warns people to stay alert to the threat from online fraudsters Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore’s Fullerton Health gears up for the cloud

Private healthcare service provider Fullerton Health is moving business applications to Microsoft’s cloud services before rolling out data analytics and artificial intelligence to enhance operations and patient care Continue Reading

By

• Aaron Tan, TechTarget

Australian government grappling with digital transformation woes

Digital transformation in Australia’s public sector has been beset by soaring rhetoric and vague aspirations by government, a new report reveals Continue Reading

By

• Beverley Head

Cyber security – why you’re doing it all wrong

Most organisations can list the IT security tools and controls they have, so why do most of them still get the security basics wrong? Continue Reading

By

• Ed Tucker, Human Firewall

Millennial versus Mature – who's the real IT security risk?

Passwords have been the mainstay for securing applications, devices and the data they hold, pretty much ever since IT was invented. It’s an approach that has always had weaknesses though, mostly ... Continue Reading

By

• Tony Lock, Freeform Dynamics

UK government cyber security standard welcomed

The information security community has welcomed the publication of the government’s minimum cyber security standard, which could be used by any organisation to improve its cyber defences Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR exposes breach reporting flaws

In the month since the GDPR compliance deadline, it has become clear that many organisations are not well prepared for personal data breach notifications, says PwC’s data protection lead Continue Reading

By

• Warwick Ashford, Senior analyst

IT On A Budget? Still Plenty Of Investment Money Around...

IT is often two-faced and never more so than when it comes to the financial health of the industry. Speak to one set and they'll tell you how tight it is, scrapping for every penny of profit, and ... Continue Reading

By

• Steve Broadhead, Broadband Testing

NHS Digital signs three-year cyber security partnership with IBM

Partnership with IBM aims to bolster cyber security responses and defences, including expanding NHS Digital’s Cyber Security and Operations Centre Continue Reading

By

• Lis Evenstad

UK biometrics strategy criticised for lack of content

The long-awaited government biometrics strategy falls short of the mark, say critics, failing to provide a detailed and coherent strategy or governance framework Continue Reading

By

• Warwick Ashford, Senior analyst

British Muslim considers appeal after court rules repeated terrorism stops are legal

Muzaffar Abdullah, a 37-year-old gas engineer who has been stopped and questioned by police at airports at least 10 times, is considering an appeal after being found guilty of wilful obstruction for refusing to answer questions under controversial terrorism legislation. He received a conditional discharge. Continue Reading

By

• Bill Goodwin, Computer Weekly

First Lorca cohort to focus on security orchestration

The first companies to benefit from the new London cyber innovation centre will focus on cyber security orchestration and automation Continue Reading

By

• Warwick Ashford, Senior analyst

Ticketmaster warns of third-party data breach

Ticketmaster has warned of a potential data breach through malware found in a third-party customer support service, underlining the importance of supply chain security Continue Reading

By

• Warwick Ashford, Senior analyst

University of Melbourne claims quantum computing breakthrough

Australian scientists have simulated the power of quantum computing on classical computers to solve a mathematical problem, paving the way for future breakthroughs in the nascent field Continue Reading

By

• Aaron Tan, TechTarget

Lorca will help drive UK cyber exports, says ex-GCHQ boss

New London cyber security innovation centre will help to boost exports of UK cyber security expertise, says former GCHQ director Continue Reading

By

• Warwick Ashford, Senior analyst

Brexit a greater risk to UK financial system than cyber attack

While Brexit is seen as the biggest risk to the stability of the UK financial system, cyber attack is the most difficult risk to manage for over half of firms Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government must challenge popular smart city misconceptions

A report by the All Party Parliamentary Group on Smart Cities says many people feel alienated by the concept, and calls on the government to challenge some popular misconceptions Continue Reading

By

• Alex Scroxton, Security Editor

Cyber criminals 'infect and collect' in cryptojacking surge

Illicit cryptocurrency mining offers cyber criminals lower risk, higher efficacy and greater ease of making money, adding passive exploitation to ransomware extortion, data breach theft and fraud, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

AI and other tech key to post-Brexit success, says Matt Hancock

Digital secretary Matt Hancock highlights the importance of emerging technologies to the future of the UK at the opening of London’s cyber security innovation centre Continue Reading

By

• Warwick Ashford, Senior analyst

Global IoT security standard remains elusive

Despite the lack of a global internet of things security standard, existing security frameworks are on the same page in areas such as device upgradability and data stewardship Continue Reading

By

• Aaron Tan, TechTarget

British Muslim challenges use of intelligence databases for repeated police stops

Muzaffar Abdullah is challenging police use of intelligence databases to repeatedly stop and question Muslims, after being arrested for refusing to answer questions under Schedule 7 of the Terrorism Act 2000. His lawyers say he had been stopped at least 10 times before and the police should have known he had no connection to terrorism Continue Reading

By

• Bill Goodwin, Computer Weekly

High-Tech Bridge bets on machine learning capabilities

Machine learning has a great potential to drive the automation of some security tasks to free up information security professionals to do more strategic work, says High-Tech Bridge founder Continue Reading

By

• Warwick Ashford, Senior analyst

How studying the black hat community can help enterprises

White hat hackers often assimilate themselves into the black hat community to track the latest threats. Discover how this behavior actually benefits the enterprise with David Geer. Continue Reading

By

• David Geer, Geer Communications

Digital transformation is just business change

Don't always start with the technology if you're driving transformation, but always start with the business Continue Reading

By

• Ed Tucker, Human Firewall

Hospitality industry under siege from botnets

The hospitality industry, including hotels, airlines and cruise lines, is the biggest target for cyber criminal botnet attacks that abuse credentials and overwhelm online systems, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Norway’s National Security Agency warns IT industry about security obligations

IT service providers serving organisations in Norway have received a timely reminder about their security obligations. Continue Reading

By

• Gerard O'Dwyer

London cyber innovation centre opens

The government-funded London cyber innovation centre is set to open today and welcome the first cyber security businesses as a study reveals that a quarter of UK firms lack the right security technology Continue Reading

By

• Warwick Ashford, Senior analyst

UK privacy groups join call on EU to halt comms data collection

UK-based privacy groups have joined calls for a halt to the collection of communications data by European Union member states Continue Reading

By

• Warwick Ashford, Senior analyst

Most infosec pros would trust hacker-tested products

Information security professionals are more likely to trust a product or company tested by hackers and most would respond to security reports from this community, a survey has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Apple rejects claim of iPhone brute force hack

Apple has rejected claims by a security researcher that he was able to bypass the iPhone defences against brute force passcode hacks Continue Reading

By

• Warwick Ashford, Senior analyst

UK cyber skills in demand, says Dorset firm C3IA Solutions

UK cyber security skills are in demand and there is a bright future in exporting them, according to Dorset-based firm C3IA Solutions Continue Reading

By

• Warwick Ashford, Senior analyst

Public scrutiny of IT failures is fundamental to IT success

MPs on the Treasury select committee have been doing everyone in IT a favour lately. Thanks to pressure from their investigations, we’ve had near-unprecedented access to the real stories of what ... Continue Reading

By

• Bryan Glick, Editor in chief

Firms look to automation for cloud security

In the face of increasingly sophisticated and nation-state-sponsored cyber attacks, organisations are looking to managed security services and automation for security in the cloud and on-premise Continue Reading

By

• Warwick Ashford, Senior analyst

IBM early findings on disastrous TSB core banking system migration released

Report released by Treasury Committee criticises lack of rigour in preparation for core banking system migration, but TSB says report’s content is out of date Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Infosec pros expect increase in nation state cyber attacks

Most information security professionals expect a rise in nation state cyber attacks, with more than two-thirds preparing to defend against them Continue Reading

By

• Warwick Ashford, Senior analyst

CDO interview: Andrei Belevtsev, Gazprom Neft

Russian oil giant will harness the latest technologies right across its business, says chief digital officer Continue Reading

By

• Vladimir Kozlov

Government sponsors diversity cyber academy

The UK government has awarded a grant for the establishment of a cyber academy to promote neurodiversity in the industry Continue Reading

By

• Warwick Ashford, Senior analyst

Younger employees 'main culprits' for security breaches

UK senior decision makers believe younger workers are the biggest risk to cyber security, but are doing little to support them and reduce that risk, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Palo Alto Networks opens cyber range in Australia

The first of its kind in Asia-Pacific, the cyber range training facility will let Australian IT and security teams hone their skills through cyber security exercises Continue Reading

By

• Aaron Tan, TechTarget

CW ANZ: Object storage hits a sweet spot

Enterprises in Australia are only getting started on object storage, which does away with the traditional file directories, making it easier to access and move data in a heterogeneous IT environment. In this issue of CW ANZ, we look at how Australian companies are dipping their toes into object storage, the challenges they are facing and the state of the market. Read the issue now. Continue Reading

CIO interview: Mike Young, Centrica

We speak to the CIO whose CEO recently met with the head of Microsoft to talk about strategy Continue Reading

By

• Cliff Saran, Managing Editor

More APAC consumer goods firms expected to adopt blockchain

The adoption of blockchain technology is likely to increase in the consumer goods industry as more businesses use the technology to address fraud and improve supply chain management Continue Reading

By

• Kimberly Chua

Dutch organisations must unite to fight DDoS attacks

Experts in the Netherlands call on Dutch corporations and institutions to work together to help prevent distributed denial of service attacks Continue Reading

By

• Tijs Hofmans

Most small businesses fail to act after a cyber attack  

Nearly half of small businesses have suffered at least one cyber attack in the past year, yet most fail to take action afterwards, citing lack of budget at the biggest challenge Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore remains hotbed for cyber threats

Singapore was a victim of advanced persistent threats, phishing and website defacements in 2017, according to the latest threat landscape report by the Cyber Security Agency Continue Reading

By

• Aaron Tan, TechTarget

Surface web used in private data sales

The surface web plays an integral role in the selling of personal information, a report on identify fraud has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

How white hat hackers can tell you more than threat intelligence

White hat hackers can play a key role in assessing threats lurking on the dark web. Discover what traditional threat intelligence isn't telling you and how white hats can help. Continue Reading

By

• David Geer, Geer Communications

MPs see risk to critical infrastructure as top threat

A majority of MPs are concerned about the cyber threat to critical national infrastructure, a survey has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Australian healthcare services most hit by data breaches

Nearly a quarter of data breaches reported under Australia’s new mandatory data breach regime took place in the healthcare sector. Continue Reading

Singapore firms unprepared for GDPR

An EY study reveals that only 10% of organisations in Singapore are ready to comply with the Europe’s new data protection regime. Continue Reading

Microsoft becomes devoted to open source developers

In this week’s Computer Weekly, after Microsoft’s recent acquisition of GitHub, we examine the software giant’s tools for embracing open source developers. Secretary of state for digital, culture, media and sport Matt Hancock talks about growing the UK digital economy and supporting the tech sector. And we look at SAP’s next steps for its “intelligent enterprise” strategy. Read the issue now. Continue Reading

Singapore faced cyber attacks during Trump-Kim summit

Russian attackers allegedly scanned IP phones in the city-state for vulnerabilities, although it was unclear what they were after or whether they were successful Continue Reading

By

• Aaron Tan, TechTarget

Your PC is rooted and jailbroken: deal with it!

One of the defining characteristics of the modern digital workplace is a Windows PC on every desk and a smartphone in every pocket. The ability to centrally discover, provision, deploy, update, and ... Continue Reading

By

• Richard Edwards, Freeform Dynamics

European Parliament heads for showdown with US over Privacy Shield

By Kevin Cahill The Justice Committee of the European Parliament has set the scene for a major showdown with the US over data transfers between the EU and the US by setting a Sept 1st deadline for ... Continue Reading

By

• Bill Goodwin, Computer Weekly

The next moves by DCMS on data and digital identity must lay foundations for UK's digital economy

Matt Hancock, the secretary of state for digital, culture, media and sport (DCMS), is not everyone’s cup of tea – especially when that cup is Matt Hancock branded. But regardless of whether you’re ... Continue Reading

By

• Bryan Glick, Editor in chief

Encryption is under attack, says Venafi CEO Jeff Hudson

Encryption is one of the fundamental principles on which the internet is built, but this vital technology is under threat from criminals and ill-advised government policies, says Venafi CEO Jeff Hudson Continue Reading

By

• Peter Ray Allison

AI is key to keeping IBM compliant with GDPR

Artificial intelligence is vital for keeping IBM compliant with the principles of the General Data Protection Regulation, which, in turn, provides opportunities for business, says the company’s data protection officer Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attack warnings highlight need to be prepared

Fresh warnings about the vulnerability of national infrastructure to cyber attacks show the need for securing and monitoring associated control systems connected to the internet Continue Reading

By

• Warwick Ashford, Senior analyst

CW Europe: Lufthansa’s HR IT project takes off

Lufthansa says it is confident of landing a company-wide HR IT project after having to go back to the drawing board. Also in this issue, read about the ComputerWeekly/TechTarget IT Priorities survey’s findings that many European technology leaders are expecting to increase IT spending through 2018, and how a major report has reassured Swedish society that artificial intelligence will be a positive force for change despite fears of job losses. Continue Reading

NCSC urges action after Dixons Carphone breach

The National Cyber Security Centre (NCSC) is urging UK business to improve data protection capabilities after Dixons Carphone revealed that millions of payment card and personal data records may have been compromised in a cyber breach Continue Reading

By

• Warwick Ashford, Senior analyst

Dixons Carphone admits 'falling short' on data protection

Dixons Carphone has warned that millions of credit card and personal data records may have been compromised in a cyber breach Continue Reading

By

• Warwick Ashford, Senior analyst

Application security programs: Establishing reasonable requirements

Creating security program requirements can be a challenging task, especially with application security. In this tip, Kevin Beaver shares several ways to create an effective program. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

Insurer Beazley meets global challenge to secure mobile workforce

Beazley has stolen a march on other London-market insurers by implementing a versatile global digital workspace with improved security Continue Reading

By

• Christian Annesley

Security Think Tank: GDPR requires unprecedented view of data flows

Why is it important to know where data flows, with whom it's shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Yves Le Roux, (ISC)2

Privacy Shield under threat by US non-compliance

The Privacy Shield framework that replaced the Safe Harbour agreement for personal data transfers between the EU and the US is under threat due to non-compliance by US firms Continue Reading

By

• Warwick Ashford, Senior analyst

Investigators close Nokia extortion probe without finding a motive or making an arrest

New details of €2m blackmail of Nokia in 2007 emerge as Finland’s NBI calls a halt to its investigation Continue Reading

By

• Gerard O'Dwyer

BT announces “unhackable” quantum-secured network

In the face of the threat that quantum computers could crack many of the encryption methods used to protect highly sensitive data, BT has developed a “quantum-secured” network Continue Reading

By

• Warwick Ashford, Senior analyst

Email-based cyber attacks gathering momentum

Email-based cyber attacks are gathering momentum and the cost of these attacks are rising, with several hidden costs, a survey of IT professionals in Europe, Middle East and Africa reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore career website hit by PageUp malware scare

A Singapore government career website was among others affected by a malware attack on an Australian recruitment technology supplier Continue Reading

By

• Aaron Tan, TechTarget

Industry must do more to open up cyber security profession

Talented and successful cyber security researcher and passionate advocate for the profession, James Lyne reveals that he fell into security more by accident than design, and says training and recruitment must change to find and develop talented individuals Continue Reading

By

• Warwick Ashford, Senior analyst

How Australia is keeping pace with ICS threats

Besides bridging the security gap between IT and operational technology teams, Australia is driving efforts to bolster the security of IoT devices Continue Reading

By

• Beverley Head

Security Think Tank: Data flow visibility is essential to security

Why is it important to know where data flows, with whom it is shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Elisabetta Zaccaria, Secure Chorus

Coinrail cyber heist highlights need for exchange security

A cyber heist at South Korea’s Coinrail has prompted fresh calls for industry regulations to drive better cyber security at cryptocurrency exchanges Continue Reading

By

• Warwick Ashford, Senior analyst

APAC remains a hotbed for software piracy

The Asia-Pacific region is still seeing the highest use of unlicensed software installations globally, making enterprises more susceptible to cyber attacks from malware Continue Reading

By

• Kimberly Chua

GDS loses digital identity policy to DCMS

The move follows DCMS taking over data policy from GDS and means Cabinet Office is no longer responsible for relations with private sector ID ecosystem Continue Reading

By

• Bryan Glick, Editor in chief

Parliamentary computers at risk after staff targeted by phone phishing

Police are investigating phone phishing attacks targeted against Parliament. Staff warned not to disclose details of their computers to fraudulent callers. Continue Reading

By

• Bill Goodwin, Computer Weekly

BYOD for mobile ‘a year away’ for Williams F1

Companies in the Williams Group – the Formula One racing operation Williams Grand Prix Engineering and its high-growth sister operation Williams Advanced Engineering – are investing with mobile security front-of-mind to enable more agile working practices within 12 months Continue Reading

By

• Christian Annesley

Security Think Tank: Focus on data protection, but do not rely on DLP alone

Why is it important to know where data flows, with whom it's shared and where it lives at rest – and what is the best way of achieving this? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

European Court hearing into EU-US data transfer system will not happen for at least 18 months

By Kevin Cahill The European Court of Justice may not have a hearing into crucial questions about the legality of the EU-US data transfer system for at least 18 months according to a spokesperson ... Continue Reading

By

• Bill Goodwin, Computer Weekly

Businesses must report cyber crime, panel urges

By reporting cyber crimes, private enterprise can help improve national and international cyber defences and bring criminals to justice, according to an expert panel Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security focus too much on tech, says Domino’s CISO

Many organisations are still focusing only on technology and compliance, which means their cyber defences are not as solid as they think, according to Domino’s Pizza chief information security officer Continue Reading

By

• Warwick Ashford, Senior analyst

IT spending reaches 10-year high as CIOs struggle with digital technology strategy

IT leaders have seen their budgets and headcounts rise for the first time in 10 years, but face challenges implementing their digital strategies Continue Reading

By

• Bill Goodwin, Computer Weekly

Nation state cyber attacks affect all, says former GCHQ boss

Cyber attacks by nation states used to be a small part of the problem for state authorities to address, but now all organisations are potential targets of nation state attacks, according to former GCHQ head Continue Reading

By

• Warwick Ashford, Senior analyst

Business not learning from past cyber security incidents

Businesses are still not getting the basics right and they are not learning from past security incidents, according to world-renowned security blogger and trainer Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Understand data for risk-based protection

Why is it important to know where data flows, with whom it is shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Simon Persin, Turnkey Consulting

GDPR and backup: A potential minefield easily avoided

The right to be forgotten will be impossible in backups and snapshots, but systems can be built that automate for compliance, says Andy Barratt of security consultancy Coalfire Continue Reading

By

• Antony Adshead, Storage Editor

We need to design for security and privacy, says Martha Lane Fox

The digital future is bright, but only if society works through a gear change in its relationship with technology, and demands products and services that are secure and private by design, says internet service pioneer Continue Reading

By

• Warwick Ashford, Senior analyst

Understanding is key to security awareness, says specialist

Only if people understand why cyber security matters will they change their behaviours as a result of awareness training, according to a human behaviour specialist and cyber security consultant Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Ignorance about data is tantamount to negligence

Why is it important to know where data flows, with whom it's shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Tim Holman, 2-sec

Cyber attacks not sophisticated, says Just Eat CISO

The chief information security officer of Just Eat has challenged the perception that all cyber attacks are sophisticated and that it is impossible to fill cyber security jobs Continue Reading

By

• Warwick Ashford, Senior analyst

Nexsan adds Assureon Cloud Transfer for hybrid cloud archiving

Nexsan archiving appliances add hybrid cloud capability to AWS and Azure cloud for unstructured data, targeting users that want to retain files on-site with cloud access Continue Reading

By

• Antony Adshead, Storage Editor

Divisive Devices And Conferencing Woes?

Like - I suspect - many people, I spend far too large a percentage of my one and only life on various 'net conferences, using a variety of platforms. Most of them are truly loathsome. So it was ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Boards not asking right security questions, says Dido Harding

Former TalkTalk CEO says boards are still not asking the right cyber security questions, do not understand that they should be making cyber risk decisions, and are not communicating with engineers Continue Reading

By

• Warwick Ashford, Senior analyst

Application security more important than ever

Applications have an increasingly crucial role in our lives, yet they are also a real security threat, with hackers always finding new ways to bypass security defences. Computer Weekly looks at how organisations are responding to the challenge Continue Reading

By

• Nicholas Fearn

Security Think Tank: Use data flow information to protect systems

Why is it important to know where data flows, with whom it's shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Paddy Francis

Technology key to new UK counter-terrorism strategy

Technologies such as machine learning and data analytics are key to the UK government’s updated counter-terrorism strategy Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR – like a lot of regulation – will mostly benefit the big incumbents

The law of unintended consequences applies to the new EU data protection laws, because the big players it seeks to regulate can better afford to comply Continue Reading

By

• Tim Worstall, Adam Smith Institute

One-third of firms would pay ransoms rather than invest in security

Report says businesses are still making the same mistakes, failing to make any progress in crucial areas such as cyber security awareness and preparedness Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Data governance is essential to data security

Why is it important to know where data flows, with whom it's shared and where it lives at rest – and what is the best way of achieving this? Continue Reading

By

• Raef Meeuwisse

Scotland to begin building identity platform prototype this autumn

Scottish government plans flexible approach to online identity providers as it aims to launch alpha phase of is online identity assurance programme in August 2018 Continue Reading

By

• Lis Evenstad