IT security

New cyber incident classification to boost UK response

A new cyber attack categorisation system has been unveiled to improve UK response to incidents Continue Reading

By

• Warwick Ashford, Senior analyst

Government to set up £13.5m cyber security centre

Located at the 2012 Olympic Park, the London Cyber Innovation Centre could create up to 2,000 jobs in cyber security Continue Reading

By

• Alex Scroxton, Security Editor

Diversity key to more effective cyber security, says NCSC

Diversity in defence teams is key to improved cyber security, according to the UK’s National Cyber Security Centre (NCSC) Continue Reading

By

• Warwick Ashford, Senior analyst

GCHQ to set up shop in Manchester

UK intelligence, security and cyber agency GCHQ is expanding its network of UK sites to north west England Continue Reading

By

• Warwick Ashford, Senior analyst

NSA calls for cyber security community collaboration

A US National Security Agency (NSA) representative has called for cyber security community collaboration at the National Cyber Security Centre’s conference in Manchester Continue Reading

By

• Warwick Ashford, Senior analyst

UK to launch crackdown on dark web

The UK is to enhance its specialist law enforcement response to crack down on criminals operating on the dark web Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile phishing a growing threat, warns report

Phishing on mobile devices is a growing threat to business as attacks move beyond email to text messages and apps Continue Reading

By

• Warwick Ashford, Senior analyst

ThreatQuotient ups the ante for dealing with security incidents

As cybercrime becomes ever more widespread and the actors involved diversify, targeted organisations must become more sophisticated and timely in their ability to detect and respond. Continue Reading

By

• Bob Tarzey

Podcast: Storage compliance for GDPR data subject requests

The General Data Protection Regulation is upon us. Mathieu Gorge, CEO of Vigitrust, talks you through the key areas needed for compliance in storage of data subjects’ data and how to find it quickly on request Continue Reading

By

• Antony Adshead, Storage Editor

Cyber criminals earn up to $2m a year, study shows

Academic study reveals just how lucrative cyber crime can be, with top-level cyber criminals out-earning government leaders and university graduates Continue Reading

By

• Warwick Ashford, Senior analyst

Technology is a lifesaver for NHS Blood and Transplant

In this week’s Computer Weekly, we talk to the CDO of the NHS’s blood and transplant agency about how digital transformation is proving to be a real lifesaver. Our latest buyer’s guide examines the state of public cloud. And we find out how Ireland is expecting a Brexit dividend to boost its tech sector when the UK leaves the EU. Read the issue now. Continue Reading

Ransomware top cyber threat, DBIR shows

Ransomware remains the top cyber security threat to organisations, humans continue to be significant weakness and HR departments are a top target, according to the latest Verizon Data breach investigations report Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber threat to UK business greater than ever, report reveals

The cyber threat to UK business is “bigger than ever” and the best way to defend against it is collaboration between government, law enforcement and business, a report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security of big data fashions a whole new look with GDPR

As data managers scramble to protect their precious lakes of washed and unwashed data from the evils of hacking, malware, ransomware and botnets, there comes a privacy regulation of European Union origin that could change the way many U.S. companies protect their data from inside and outside forces. For some U.S. companies doing business in Europe and preparing for compliance, the EU's General Data Protection Regulation could be a well-intended enforcer of better data governance practices. But for businesses forced to change their old data protection habits, GDPR can be a four-letter word.

The April issue of Business Information opens with our editor's note and historical insights into the fundamental differences in attitude between the U.S. and Europe when it comes to protecting the data privacy of customers. As data breaches mount, however, the U.S. government -- willing or not -- may have to take steps beyond current regulations to ensure companies increase their security of big data.

Along those lines, our cover story examines some GDPR rules that can directly impact U.S. companies doing business overseas and, in the process, their data governance and ethics procedures. With the noted lack of maturity in data governance and security tools, we see in another feature how IT teams are addressing data security issues upfront in do-it-yourself ways when deploying big data systems.

Also in this issue, a GDPR compliance expert advises data managers on the best ways to prepare for a regulation that puts more control of information in the hands of users, the internet of things and edge computing could be compromising the security of big data and surveys show that companies place data protection among the top reasons for escalating their security spending.

 Continue Reading

GDPR requirements put focus on data ethics, governance

The General Data Protection Regulation makes privacy paramount and reinforces the practice of good data governance. Will a new focus on data ethics be an important side effect? Continue Reading

By

• Jack Vaughan

U.S. data protection laws fall short in the age of big data

Data breaches and a history of data abuse led the EU to adopt GDPR, but it might take massive scale data security crises for the U.S. to legislate similar data protection laws. Continue Reading

By

• Bridget Botelho, Editorial Director, News

Security professionals admit patching is getting harder

Vulnerable systems need patching to avoid being attacked by security exploits, yet many businesses find it hard to apply patches quick enough Continue Reading

By

• Cliff Saran, Managing Editor

Who do you trust to censor social media?

Calls to censor Facebook and its rivals are growing – but society needs to consider carefully the motivations of those making such demands Continue Reading

By

• Tim Worstall, Adam Smith Institute

Security Think Tank: Cryptojacking can be costly

How can organisations best defend against cryptojacking? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

More than one in 10 employees fall for social engineering attacks

Employees download malicious files, click phishing links, correspond with hackers, and even share contact information for their colleagues, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook data scandal a game changer, says ICO

Facebook’s controversial data sharing with London-based data mining firm Cambridge Analytica is a game changer, according to the UK’s privacy watchdog Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Six tips for securing your organisation against cryptojacking

How can organisations best defend against cryptojacking? Continue Reading

By

• Adrian Davis, (ISC)²

IoT security cannot be an afterthought: it must be the foundation of design

As technologies for the internet of things mature, developers need to make security by design a fundamental part of their products Continue Reading

By

• Julian David, TechUK

Business increases use of encryption in the cloud

The use of encryption has seen double-digit growth in the past year due to a number of security-related drivers, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Why businesses must think like criminals to protect their data

Cyber criminals use three main methods of operation to steal commercial data. Understanding their mindset can help organisations put the right defences in place Continue Reading

By

• Andy Barratt, Coalfire

HSBC IT whistleblower faces extradition to Switzerland

Hervé Falciani, who stole data from thousands of private banking customers, is apprehended in Spain following the issuing of an international arrest warrant Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Facebook among 30 organisations under investigation by the ICO

Facebook is among 30 organisations under investigation by the UK’s privacy watchdog for misusing personal data for political and other purposes Continue Reading

By

• Warwick Ashford, Senior analyst

Retail sector top cyber attack target

The retail sector was the top cyber attack target in 2017, as cyber attacks evolved to become more organised and structured, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Business should note Facebook data sharing, say security advisers

Businesses that use Facebook and have employees that use it should take note that data is shared with potential cyber attackers, security advisers warn, as Facebook reveals the Cambridge Analytica data exploitation scandal may affect 87 million users Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Deal with cryptojacking to avoid security vulnerability

How can organisations best defend against cryptojacking? Continue Reading

By

• Paddy Francis

More than 1.5 billion business and consumer files exposed online

With just over a month to go before the GDPR compliance deadline, more than 1.5 billion data files are exposed online without adequate protections, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Only newer systems will get Intel firmware updates for Spectre chip flaw

Intel will not issue patches for legacy processors, so older systems and legacy embedded applications will remain vulnerable to Spectre exploits Continue Reading

By

• Cliff Saran, Managing Editor

Interview: GDPR will give Dutch privacy watchdog its teeth

The Netherlands’ privacy watchdog has not handed out fines so far because there has been no reason to, says the organisation’s chairman, Aleid Wolfsen Continue Reading

By

• Tijs Hofmans

Security Think Tank: User vigilance key to cryptojacking defence

How can organisations best defend against cryptojacking? Continue Reading

By

• Tim Holman, 2-sec

Ransomware puts pressure on incident response

Cyber attackers switched focus to ransomware attacks in 2017 putting pressure on incident response, while human error was responsible for two-thirds of compromised records, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Average attacker dwell time nearly six months for EMEA, study shows

Firms in Europe, the Middle East and Africa take nearly six months to detect cyber attacks on average, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

InfiniSync backup ‘bunker’ gives zero RPO for critical apps

Infinidat launches InfiniSync “black box” as off-site storage on-site, plus new Infinibox PB-scale array, cloud storage service Neutrix Cloud and InfiniGuard backup appliance Continue Reading

By

• Antony Adshead, Storage Editor

IT decision-makers trust Facebook less and are changing policies

As Facebook scrambles to contain the damage from the Cambridge Analytica data exploitation scandal, a survey reveals that a majority of IT decision-makers have lost trust in the social networking firm Continue Reading

By

• Warwick Ashford, Senior analyst

UK firms failing to make financial plans for cyber attacks

Most UK firms are failing to plan for the financial impact of cyber attacks, a survey by Lloyds Bank has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Use awareness, education and controls to halt cryptojacking

How can organisations best defend against cryptojacking? Continue Reading

By

• Maxine Holt, Omdia

Data breaches revealed at four US retail chains

The Easter weekend has seen another round of data breaches, further underlining that many companies are still failing to take the necessary steps to protect customer data Continue Reading

By

• Warwick Ashford, Senior analyst

Future of internet regulation is focus of Lords inquiry

Inquiry will seek evidence on whether or not the law is up to the job of regulating online platforms such as Facebook, and what improvements can be made Continue Reading

By

• Alex Scroxton, Security Editor

 Automation and gamification key to cyber security

The use of automation and gamification are key to winning the fight against cyber criminals in the face of the skills’ shortage, a study investigating challenges facing IT security teams reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Lawyers more influential than IT staff in cloud deployments

Traditionally considered risk-adverse, lawyers are twice as more influential than in-house technology staff about cloud, research finds Continue Reading

By

• Aaron Tan, TechTarget

Europol operation nabs another 20 cyber criminals

Police have arrested 20 cyber criminals in connection with a €1m fraud operation across Italy and Romania Continue Reading

By

• Warwick Ashford, Senior analyst

Business unaware of scale of cyber threat

Many businesses, especially board members, do not understand the scale of the cyber threat, but international efforts to combat cyber crime are being hampered by political barriers Continue Reading

By

• Warwick Ashford, Senior analyst

Cryptocurrency mining rampant in higher education

Higher education institutions are the biggest target for illicit cryptocurrency mining, data shows Continue Reading

By

• Warwick Ashford, Senior analyst

How the IT sector can help plug the cyber security skills gap

Businesses have a role to play in plugging the cyber security skills gap by engaging with future talent at a young age, providing more role models for under-represented groups, communicating the nature of the threat, and changing their approach to cyber security recruitment Continue Reading

By

• Frank Stajano, University of Cambridge

Most airports not protected from cyber threats

The chairman of the Israel Airports Authority paints a dismal picture of the state of cyber security in aviation, and offers advice on what can be done to avert the next disaster Continue Reading

By

• Aaron Tan, TechTarget

Consumer group calls for Zuckerberg to step down after data misuse

A social media firm's value is in the size of the network of users it can offer advertisers. But this model is now under the spotlight Continue Reading

By

• Cliff Saran, Managing Editor

Organisations can use GDPR ambiguity to contest fines in court, experts say

Businesses can use the vagueness of the regulation to argue against fines in court, say experts Continue Reading

By

• Zach Emmanuel, Computer Weekly

Majority of European firms unprepared for phishing attacks

Most cyber attacks can be traced back to a phishing email, but more than half of European firms are unprepared to deal with email-based attacks, research has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Home Office issues guidance on tech to prevent identity fraud

Advice highlights the benefits of using identity document validation to audit and share data on fraudulent documents Continue Reading

By

• Lis Evenstad

Facebook announces more privacy control updates

Social media giant updates privacy settings and tools in response to the unfolding controversy over Cambridge Analytica’s use of Facebook data for political campaigns Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft Word document and zero-day attacks on the rise

Macro-less Microsoft Word document attacks and zero-day malware are on the rise, according to data from WatchGuard Continue Reading

By

• Warwick Ashford, Senior analyst

AWS ups ante on cloud services for Australian government

Cloud supplier AWS says government agencies can now assess the prospect of running protected workloads, following an independent cloud security assessment Continue Reading

By

• Aaron Tan, TechTarget

Majority of firms fear mobile workers have been hacked

More than half of organisations fear that their mobile workers have been hacked and most are concerned that a growing mobile workforce means increased cyber security risk, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Fintech professional’s tech predictions: 2 - Smart meter breaches

Energy smart meters will increasingly be targets for cyber attacks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK organisations urged to develop cyber security skills

Managed cloud computing firm Rackspace is calling on UK organisations to do more to develop cyber security skills in the light of research into expertise in cloud security Continue Reading

By

• Warwick Ashford, Senior analyst

Most top UK firms fail to disclose cyber risk testing details

Most of the largest UK companies do not reveal their testing of cyber protection plans and do not share security updates with the board regularly, a Deloitte report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook could be hit with $2tn fine after FTC inquiry

Facebook could face huge fines as the result of a federal inquiry into the data exploitation scandal, further underlining the importance of personal data protection for all enterprises Continue Reading

By

• Warwick Ashford, Senior analyst

Case study: Berkshire NHS trust provides mental health support through social network

Berkshire NHS is using its Support Hope and Recovery Online Network to provide 24/7 support and advice to service users struggling with mental health issues Continue Reading

By

• Lis Evenstad

Police arrest €1bn cyber heist mastermind

Police have arrested a key member of the Carbanak gang believed to be responsible for more than 100 cyber heists worldwide Continue Reading

By

• Warwick Ashford, Senior analyst

ShopDirect set to use AI to detect fraud on phone calls

The online retailer has signed a contract to use voice authentication technology from Pindrop to tackle fraud and improve customer experience Continue Reading

By

• Cliff Saran, Managing Editor

Blockchain not ready for cross-border bank payments

The use of blockchain in certain parts of the financial services industry is limited at present due to the additional IT work required around its use Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK government publishes export strategy for UK cyber security

The government has published a guide for UK cyber security firms on how it plans to support their efforts to find and secure opportunities to export their products and services Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware publicity heightened awareness but other threats remain, experts say

Due to several high profile attacks over the past year, ransomware is now well known across organisations, but there are other threats to be aware of, say cyber security experts Continue Reading

By

• Zach Emmanuel, Computer Weekly

Dutch SMEs’ cyber security is insufficient

Nowhere in the Netherlands is digitisation as big as it is in small and medium-sized enterprises, but the sector still has a lot to do in terms of cyber security Continue Reading

By

• Kim Loohuis

Apple CEO calls for better privacy regulations

Apple’s CEO is calling for better data privacy regulations as Elon Musk joins Brian Acton in supporting the #DeleteFacebook campaign Continue Reading

By

• Warwick Ashford, Senior analyst

Information Security the next generation

The position of Chief Information Security Officer (CISO) has become well established in recent years, but where is it heading next? For many it is often perceived as an inward directed role more ... Continue Reading

By

• Rob Bamforth, Timefort

Cloud key to cyber defence, says Palo Alto Networks

Organisations need to make sense of security intelligence and act on it faster to get ahead of attackers, and cloud-based security is one way of making that possible, according to Palo Alto Networks Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook braces for new regulation for Cambridge Analytica deal

Facebook's COO has joined the social network’s CEO in apologising for betraying users’ trust by giving Cambridge Analytica unfettered access to personal data, saying the firm will work with regulators Continue Reading

By

• Warwick Ashford, Senior analyst

Private sector over-investing against nation-state attacks

The creator of a routing technique that protects the domain name system says the money spent on guarding against nation-state actors could have been better used for other purposes Continue Reading

By

• Aaron Tan, TechTarget

DR 101: The disaster recovery plan and disaster recovery strategy

We walk through the key steps and essential building blocks required to develop a disaster recovery strategy and how to write a disaster recovery plan Continue Reading

By

• Antony Adshead, Storage Editor

Privacy group calls for UK response to data exploitation

Policy-makers need to respond swiftly to the Cambridge Analytica and Facebook data exploitation scandal, according to privacy rights group Continue Reading

By

• Warwick Ashford, Senior analyst

Colt pioneers blockchain in telco voice wholesaling

Colt Technology Services and Hong Kong Telecom’s international unit PCCW Global teamed up to trial the use of blockchain in wholesale voice settlements Continue Reading

By

• Alex Scroxton, Security Editor

Pressure grows on government to clarify post-Brexit position on UK-EU data flows

TechUK says clear guidance is needed on whether the UK will need a data adequacy agreement in place during the 21-month Brexit transition period Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Application layer DDoS attacks increasing, Imperva data shows

Distributed denial of service attacks targeting applications almost doubled in the last three months of 2017, according to Imperva Incapsula data Continue Reading

By

• Warwick Ashford, Senior analyst

Legacy IT hampers digital strategy at banks and insurers

A highly regulated environment, a risk-averse culture and a reliance on core legacy technology are holding back banks and insurance companies from modernisation Continue Reading

By

• Cliff Saran, Managing Editor

Businesses lack cyber security confidence after majority were breached in past year

Most businesses were hit by a data breach in the past year, yet less than half are confident they would detect a breach, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

MoD to focus on SMEs to raise supply chain cyber security

The Ministry of Defence continues to develop a joint initiative with industry aimed at raising the security posture throughout the UK’s defence supply chain, with increasing focus on SMEs Continue Reading

By

• Warwick Ashford, Senior analyst

SD-WAN still too complex, survey shows

Despite SD-WAN adoption, WAN complexity remains a major challenge, a survey has revealed, driving firms to managed services, mainly because of security concerns Continue Reading

By

• Warwick Ashford, Senior analyst

Popular culture key to giving cyber security much-needed boost

The cyber security industry should turn to popular culture to raise awareness of the cyber threat to businesses and consumers and attract new blood to the field, says McMafia author Continue Reading

By

• Warwick Ashford, Senior analyst

WhatsApp co-founder calls time on Facebook

Brian Acton has called time on Facebook following reports of the firm’s dealings with data mining firm Cambridge Analytica linked to the EU referendum and Donald Trump’s US election campaign Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore government outlines its approach to IoT

Avoiding supplier lock-in, driving open standards and tapping modular platforms are part of the approach that the Singapore government has taken in implementing the internet of things in the city-state Continue Reading

By

• Aaron Tan, TechTarget

Think tank reports lifts lid on police cyber crime training

UK think tank Parliament Street has lifted the lid on spending by police forces on training staff to deal with cyber crime and recommended greater collaboration in this regard Continue Reading

By

• Warwick Ashford, Senior analyst

Where neuroscience meets technology

In this week’s Computer Weekly, we find out how computer scientists are using data, cloud and virtual reality to understand the brain and improve mental wellbeing. We analyse newly published government documents detailing the early problems with the Universal Credit IT project. And we look at how emerging artificial intelligence techniques can help improve cyber security. Read the issue now. Continue Reading

Firms need to move from DevOps to DevSecOps, says expert

In the face of competition, organisations are turning to DevOps to improve efficiency and accelerate innovation, but this is creating new security risks, an industry expert warns Continue Reading

By

• Warwick Ashford, Senior analyst

C-suite a cyber attack risk, say security chiefs

Those tasked with running organisations are the most likely group to expose them to a major cyber attack, a poll of UK information security executives shows Continue Reading

By

• Warwick Ashford, Senior analyst

Wigan data breaches underline need to share threat intelligence

Ongoing data breaches experienced by local authorities underline the need for greater sharing of threat intelligence, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

Heartbleed and Shellshock thriving in Docker community

DevOps has revolutionised IT, but security best practices are being skimmed over, which means old vulnerabilities are finding a new lease of life in Docker Continue Reading

By

• Cliff Saran, Managing Editor

How AI will underpin cyber security in the next few years

Cyber security risks are growing in complexity and volume, but artificial intelligence techniques can help businesses track and fight them in real time Continue Reading

Network security in the digital transformation era

Network security has always been a core focus for CISOs and IT security managers, but in an era of digital transformation, we examine if network security strategies are keeping up with new and emerging cyber threats Continue Reading

By

• Nicholas Fearn

Russia compromised core router in US energy attacks

Russian cyber attackers used a compromised core router in a series of attacks on the US energy sector, security researchers have revealed as the UK energy sector is placed on alert Continue Reading

By

• Warwick Ashford, Senior analyst

Network security in the age of the internet of things

Wireless devices and smart technologies are increasingly being brought into the workplace, and pose a growing risk to company data Continue Reading

By

• Peter Ray Allison

IT contractors not a risk despite Snowden leaks, GCHQ tells court

The government argues in the Investigatory Powers Tribunal that contractors with systems administration rights to computers holding GCHQ’s most sensitive intelligence pose no more of a security risk than the agency’s employees Continue Reading

By

• Bill Goodwin, Computer Weekly

SD-WAN needs software-defined security

Digital transformation is driving organisations to move to the cloud, which requires a new architecture that embraces cloud technology, but that in turn requires a new way of thinking about network security to ensure data is protected Continue Reading

By

• Klaus Gheri, Barracuda

Cyber criminals using complex financial system, study shows

Cyber criminals are using a combination of new cryptocurrencies, gaming currencies and micro-payments to launder up to $200bn in ill-gotten gains, research has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Defence industry urges government to relax controls on crypto exports

Trade body representing defence, aerospace and security companies calls on government to make it easier to export “non-contentious” cryptography to secure organisations against cyber crime Continue Reading

By

• Gamil Jassin

US blames Russia for cyber attacks on energy firms

The US has blamed Russia for a series of attacks on energy sector firms, underlining the need to ensure critical infrastructure IT systems are up to date and secure Continue Reading

By

• Warwick Ashford, Senior analyst