IT security

Cyber espionage campaign targets Ukraine separatists

Security researchers discover a surveillance operation against separatists in Eastern Ukraine using spear phishing attacks to spread previously unknown malware Continue Reading

By

• Warwick Ashford, Senior analyst

Police set for better engagement with UK tech firms

The policing lead for digital investigation and intelligence says new structures will improve engagement and collaboration between the UK tech industry and police forces Continue Reading

By

• Warwick Ashford, Senior analyst

Countdown begins to new EU data protection rules

In this week’s Computer Weekly, with the new EU data protection rules ready to become law, firms now have just two years to prepare for the stringent regulations – we assess the challenges. Manufacturing giant Rolls-Royce talks about why it moved its HR systems to the cloud and the lessons it learned. And we look back at 50 years of technology innovation in storage. Read the issue now. Continue Reading

Public cloud uptake rises, but Europe still lags behind the US

Okta research finds the most popular cloud applications in all regions are mail, sales and marketing, social media and document storage Continue Reading

By

• Cliff Saran, Managing Editor

Time to shift information security focus away from prevention, says Swiss bank CISO

Organisations need a new approach which recognises security is “breakable”, according to Michael Meli Continue Reading

By

• Warwick Ashford, Senior analyst

10 key facts businesses need to note about the GDPR

With less than two years before the new EU data protection rules come into force, there are key areas businesses need to focus on to ensure they will be compliant Continue Reading

By

• Warwick Ashford, Senior analyst

Swift reports another Bangladesh central bank-style cyber attack

Global financial messaging organisation Swift warns of a highly adaptive cyber criminal campaign targeting banks with user credentials to submit transfer requests Continue Reading

By

• Warwick Ashford, Senior analyst

IAM central to Deutsche Bank’s digital transformation

Deutsche Bank is using a centralised identity and access management (IAM) system and an application program interface (API) architecture for digital transformation Continue Reading

By

• Warwick Ashford, Senior analyst

UK court rejects demands for Lauri Love to hand over encryption keys

Court rules against an attempt by the National Crime Agency to force activist Lauri Love to disclose encryption keys by bypassing the Regulation of Investigatory Powers Act Continue Reading

By

• Julia Gregory and Bill Goodwin

Australian health sector an easy target for cyber criminals, says IBM

A push to encourage greater adoption of electronic health records has raised the spectre of online record theft Continue Reading

By

• Beverley Head

Ransomware emerges as a top cyber threat to business

Security researchers at Kasperky Lab and FireEye confirm that the upward trend of ransomware is continuing and has emerged as a top threat to business Continue Reading

By

• Warwick Ashford, Senior analyst

D-Day for GDPR is 25 May 2018

The European Parliament’s official publication of the General Data Protection Regulation means it will become enforceable on 25 May 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

Gov.uk Verify misses April go-live target

The Government Digital Service didn’t meet its target of taking identity assurance service Verify out of beta by the end of April, but is “nearly there”, according to programme director Janet Hughes Continue Reading

By

• Lis Evenstad

Cyber security in Belgium will gain prominence after terror attacks

Belgium’s physical security has been branded inadequate, so how does the country’s cyber security measure up? Continue Reading

By

• Stef Gyssels

Payment card industry issues data security standard update

PCI DSS version 3.2 introduces six new requirements for compliance, some additional guidance and a raft of clarifications Continue Reading

By

• Warwick Ashford, Senior analyst

Technology moving too fast for governments to keep up, says former Darpa chief

Former US defence technology chief supports encryption and privacy, despite intelligence services’ fears Continue Reading

By

• Jennifer Baker

IPv6 alone will not secure IoT, warns GE CISO

It is important for all users of the internet of things to understand what they are getting into with IPv6, and to be aware of the risks and myths, says GE CISO Hanns Proenen Continue Reading

By

• Warwick Ashford, Senior analyst

Business failing to learn lessons of past cyber attacks, report shows

Organisations are still failing to address basic security issues and well-known attack methods, Verizon’s latest Data Breach Investigations Report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

GCHQ told analysts to assume surveillance 'bulk data' is legal

Documents obtained by charity Privacy International reveal insights into GCHQ’s collection of sensitive bulk data, as lawyers question the impact of surveillance on legal privilege, fair trials and protection of whistleblowers Continue Reading

By

• Alex Scroxton and Bill Goodwin

The hunters who prey on cyber criminals

In this week’s Computer Weekly, we talk to the hunters – a new breed of security expert that proactively hunts down cyber attackers before they can strike. We visit Silicon Valley to meet some of the up-and-coming startups in data analytics and business intelligence. And we hear from IT leaders about the people, process and cultural aspects of managing digital transformation. Read the issue now. Continue Reading

Employees’ use of personal devices puts firms at risk of malware infection, says report

Downloaders care about their own security while grabbing pirated content, not that of their employers Continue Reading

By

• Warwick Ashford, Senior analyst

Israeli volunteers ready their cyber defences as Anonymous affiliates attack

Every April, Israel braces itself for an onslaught from pro-Palestinian hackers, but the occupants of a small conference room in Tel Aviv stand in their way Continue Reading

By

• Niv Lilien

BBC turns micro:bit computers into IoT devices

The BBC and Nominet demonstrate a new use case for the micro:bit computer and hope to turn Britain’s schoolchildren into internet of things pioneers Continue Reading

By

• Alex Scroxton, Security Editor

NCA attempts 'back door' access to obtain activist Lauri Love’s passwords

Court told that use of civil proceedings to force disclosure of alleged hacker Lauri Love's passwords is disproportionate and would breach human rights law Continue Reading

By

• Bill Goodwin, Computer Weekly

How IT in a portacabin supports £1bn London Bridge station overhaul

In this week’s Computer Weekly, we find out how a temporary IT set-up based in a portacabin is supporting the UK’s largest critical infrastructure project – the £1bn redevelopment of London Bridge train station. Our latest buyer’s guide looks at converged infrastructure products. And we analyse research showing data protection topping the list of UK security priorities. Read the issue now. Continue Reading

QA launches cyber attack defence training facility in London

Training firm QA launches a cyber attack simulation facility in London to enable organisations to test and learn cyber defence skills Continue Reading

By

• Warwick Ashford, Senior analyst

Activist Lauri Love faces order to disclose encryption keys

The UK’s National Crime Agency takes an unusual legal step to force a former university student accused of hacking to disclose encryption keys Continue Reading

By

• Bill Goodwin, Computer Weekly

IT specialist sentenced for stealing NHS computer equipment

A former NHS IT worker is convicted of stealing hospital computer equipment from Doncaster and Bassetlaw Hospitals NHS Foundation trust and selling them on eBay Continue Reading

By

• Lis Evenstad

Panama Papers revealed by graph database visualisation software

The 11.5 million files leaked from Panama-based law firm Mossack Fonseca are being interrogated by journalists using a combination of Neo4j’s graph database and data visualisation software Linkurious Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

'Citizens will be stripped naked' by Turkey’s data law

Turkey's data protection law, introduced in March 2016, will make Turkey a near total surveillance state, yet the EU, apparently more concerned about securing Turkey's help in controlling immigration, is turning a blind eye Continue Reading

By

• Craig Shaw & Zeynep Sentek

UK campaign launched against location data security risks

UK consumers are unwittingly signing up to be location tracked and this data is being used and sold on for commercial benefit, warns privacy campaign Continue Reading

By

• Warwick Ashford, Senior analyst

DDoS attacks on universities normally performed by “disgruntled” students or employees

The majority of distributed denial of service attacks on universities are made by students or employees, says the head of infrastructure services at the University of London Continue Reading

By

• Clare McDonald, Business Editor

Adwind at centre of cyber attack on Singapore bank

Kaspersky Lab has revealed that the Adwind malware-as-a-service platform was at the centre of an attack on a Singapore bank Continue Reading

By

• Zafar Anjum

CW@50: Fertile British breeding grounds for information security innovation

Computer Weekly is marking its 50th anniversary this year with a series of articles celebrating 50 years of British technology innovation. In this article, we look at the evolution of information security threats and some of the British innovation to counter those threats Continue Reading

By

• Warwick Ashford, Senior analyst

Security should be driven by business, says Corvid’s Andrew Nanson

Information security should be business-driven and investments assessed for their effectiveness and business value, according to Corvid CTO Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals use Microsoft PowerShell in ransomware attacks

A newly discovered family of ransomware, dubbed PowerWare, uses Microsoft PowerShell to target organisations through macro-enabled documents Continue Reading

By

• Warwick Ashford, Senior analyst

Hunters: a rare but essential breed of enterprise cyber defenders

They wait, they watch, they search the outer reaches of networks and the darkest corners of the web, setting traps, crafting tools, collecting evidence and going in pursuit: they are the hunters Continue Reading

By

• Warwick Ashford, Senior analyst

Apple vows to raise security as FBI breaks into iPhone

Apple says it will help law enforcement with investigations, but will increase the security of its products after the FBI broke into an iPhone Continue Reading

Government warned of smart meter security threat back in 2012

The government was warned four years ago that its plans for a nationwide smart meter roll-out represented a “potentially significant” security and privacy threat, Computer Weekly has learned Continue Reading

By

• Bryan Glick, Editor in chief

Businesses urged to update Apple software to dodge zero-day attacks

Security experts are urging Apple Mac, iPhone and iPad users to update their operating systems to avoid data-stealing attacks that exploit a new zero-day vulnerability Continue Reading

By

• Warwick Ashford, Senior analyst

Canadian Elizabeth Denham set for the UK's next information commissioner

Canadian privacy commissioner Elizabeth Denham is to become the UK's next information commissioner as government pushes ahead with the snoopers' charter Continue Reading

By

• Warwick Ashford, Senior analyst

US hospital claims to have fought off a ransomware attack

A hospital in Kentucky claims to have regained control of its IT systems five days after cyber criminals hit it with a ransomware attack Continue Reading

By

• Warwick Ashford, Senior analyst

How to manage IT access for external users

Identity and access management has extended from being solely an internal IT management process to focus on external business engagement too Continue Reading

By

• Bob Tarzey

Gov.uk Verify not secure enough for NHS, says HSCIC

The government’s Verify identity verification platform isn’t secure enough for the NHS, so Liverpool Clinical Commissioning Group and HSCIC are working to add extra levels of security Continue Reading

By

• Lis Evenstad

Britain to pay billions for monster internet surveillance network

New questions raised about Britain’s snoopers’ charter after Denmark abandons its own UK-style surveillance programme for a second time Continue Reading

By

• Duncan Campbell , 2QQ Ltd, Sussex University

National Cyber Security Centre to be UK authority on information security

The UK’s National Cyber Security Centre (NCSC) is to be the UK's one-stop authority on infosec, based in London and led by GCHQ's Ciaran Martin Continue Reading

By

• Warwick Ashford, Senior analyst

Australian girls believe online harassment is endemic

There are clear signals that online threats against women and attempts to invade their privacy are becoming societal norms in Australia Continue Reading

By

• Beverley Head

Most students say cyber security is a growing threat

Some 70% of higher education students say they are aware that cyber crime and attacks are a threat, but less than half think security is their responsibility Continue Reading

By

• Clare McDonald, Business Editor

Robots at your service

In this week’s Computer Weekly, we find out how financial services firms are investing in artificial intelligence to create robo-advisors to help customers with financial advice online. We ask if virtual reality is ready for mainstream business adoption or is still just an over-hyped technology. And we examine the key steps needed to successfully build smart cities using internet of things and networking technologies. Read the issue now. Continue Reading

IAM is the future for managing data security

Why identity and access management is taking centre stage in companies’ access policies Continue Reading

By

• Andras Cser and Merritt Maxim

Royal Mail becomes eighth accredited Gov.uk Verify provider

The Royal Mail is the latest provider to be accredited to support the government’s Gov.uk Verify identity assurance service Continue Reading

By

• Lis Evenstad

$1bn cyber bank heist thwarted by spelling error

Cyber thieves made 30 requests for the New York Federal Reserve to transfer nearly $1bn from the Bangladesh central bank’s account, but a typo and the volume of requests alerted banking officials Continue Reading

By

• Warwick Ashford, Senior analyst

Lack of security knowledge limiting business initiatives, survey shows

Security concerns are limiting the adoption of cloud and mobility throughout organisations, according to the first Dell Data Security Survey Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Many breaches down to poor access controls

In the modern business environment, what are the most common access control mistakes – and how best are these corrected? Continue Reading

By

• Paul Yung

Building datacentres under the sea

In this week’s Computer Weekly, we look at Microsoft’s trial of an underwater datacentre and assess the technology and environmental implications of running cloud services under the sea. As PC suppliers build new products around Windows 10, we ask if the desktop PC is set to be reinvented. And with ransomware on the rise, we examine the threat of cyber extortion. Read the issue now. Continue Reading

The problem with passwords: how to make it easier for employees to stay secure

An organisation’s IT security can be compromised if staff do not follow a strict policy of using strong passwords to access internal systems Continue Reading

By

• Jeremy Bergsman, CEB

RSAC16: Cyber criminals are hiding in plain sight, says RSA report

Cyber criminals are using social media as a communication and sales channel, not just for reconnaissance and phishing, an RSA study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Top five access control mistakes

In the modern business environment, what are the most common access control mistakes and what is the best way to correct them? Continue Reading

By

• Tim Holman, 2-sec

CSA outlines CIOs’ top 12 cloud security concerns

Cloud Security Alliance’s research team uncovers the “dirty dozen” off-premise threats Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

RSAC16: RSA’s Amit Yoran comes out in support of strong encryption

A policy of weakened encryption would harm US economic interests and undermine those trying to defend digital environments, according to RSA president Amit Yoran Continue Reading

By

• Warwick Ashford, Senior analyst

RSAC16: US works on data access agreement with UK

The US is negotiating with the UK to establish a new framework that will permit UK authorities to access electronic communications directly from US companies Continue Reading

By

• Warwick Ashford, Senior analyst

Protecting the UK from cyber attacks

In this week’s Computer Weekly, we talk to the National Crime Agency’s top cyber cop, Sarah Goodall, about how the police are tackling IT security threats against the country through global collaborations. We ask CIOs for their tips on building an IT strategy for the digital age. And we review the big six storage suppliers’ plans for all-flash arrays. Read the issue now. Continue Reading

Majority of Britons support government surveillance for national security

A survey reveals that a majority of UK citizens support government surveillance for national security as Apple attempts to rally public support in its row with the FBI over encryption Continue Reading

By

• Warwick Ashford, Senior analyst

Nissan acts on Leaf car app security flaw after researcher goes public

Nissan suspends its electric car app after a researcher went public about a security flaw that could enable attackers to take control of heating systems Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber crime is fastest growing economic crime, says PwC report

More than half of UK organisations say they expect to be the victim of cyber crime in the next two years, suggesting it will become the UK’s largest economic crime, says a PwC report Continue Reading

By

• Warwick Ashford, Senior analyst

Surviving broadband failure

In this week’s Computer Weekly, after the recent BT broadband outage, we examine the options to keep your communications in place in the event of a failure, to ensure business continuity. We look at the prospects for the OpenStack open source cloud platform in the enterprise. And we see how Ireland is making progress on delivering a digital health service. Read the issue now. Continue Reading

Social engineering confirmed as top information security threat

Cyber attackers shifted away from automated exploits in 2015 and instead tricked people into doing the dirty work, Proofpoint researchers found Continue Reading

By

• Warwick Ashford, Senior analyst

HSBC launches biometric security for mobile banking in the UK

Bank claims UK’s largest planned roll-out of voice biometric security technology, with more than 15 million customers in line for voice and fingerprint authentication services Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile innovation shifts to smartphone services

As smartphone sales continue to stagnate, suppliers are looking to innovate in more novel ways Continue Reading

By

• Alex Scroxton, Security Editor

CW Europe: February 2016

In Europe cloud is restricted and hybrid setups make use of local compute and storage. Continue Reading

Judge orders Apple to unlock San Bernardino gunman’s iPhone

A US judge has ordered Apple to help the FBI bypass the auto-erase function on the San Bernardino gunman's iPhone to find the passcode and access data, but the company says it will contest the order Continue Reading

By

• Warwick Ashford, Senior analyst

EU managers need to up cyber security collaboration, study finds

There is still much work to be done in the area of collaboration and sharing responsibility when it comes to preventing data breaches, a study has found Continue Reading

By

• Warwick Ashford, Senior analyst

How AstraZeneca saved $350m by insourcing IT

In this week’s Computer Weekly, we talk to pharmaceutical giant AstraZeneca to find out why it brought its outsourced IT back in-house, and how it saved $350m per year as a result. As the data protection debate rages around Europe, we ask if the new EU/US Privacy Shield agreement will protect citizens’ data. And we examine the relative merits of datacentre colocation and the cloud. Read the issue now. Continue Reading

Interview: Cabinet Office minister Matt Hancock on digital government

The government’s minister for digital reform talks about creating a Digital Leadership Academy, learning valuable lessons, and his love for open data Continue Reading

By

• Lis Evenstad

US IT professionals overconfident in cyber attack detection, study finds

Most US IT professionals are confident in key security controls to detect cyber attacks – but unsure how long it would take automated tools to discover a breach Continue Reading

By

• Warwick Ashford, Senior analyst

Social engineering is top hacking method, survey shows

Social engineering tops the list of popular hacking methods, underlining the need for continuous monitoring, according to security firm Balabit Continue Reading

By

• Warwick Ashford, Senior analyst

TechUK calls on government to take reports on spy laws seriously

Government must address the fundamental concerns raised by expert witnesses, MPs and Lords about the draft Investigatory Powers Bill, says TechUK Continue Reading

By

• Warwick Ashford, Senior analyst

Gov.uk Verify identity system targets 50 government services for April go-live

Government identity assurance system is set to move from beta to live in April, three years after its original target date Continue Reading

By

• Bryan Glick, Editor in chief

How software protects people

In this week’s Computer Weekly, we find out how software is helping to maintain safety in high-risk sectors like oil & gas, aerospace and healthcare – and what lessons they hold for other organisations. We offer six tips from CIOs for innovation with data. And after the HSBC cyber attack, we examine the continuing threat to businesses from distributed denial of service (DDoS) attacks. Read the issue now. Continue Reading

Bulk data collection unnecessary for surveillance, says cyber expert

Opting for bulk data collection and other intrusive surveillance overlooks other means available that do not involve collateral damage to businesses and innocent people, says cyber expert Continue Reading

By

• Warwick Ashford, Senior analyst

Google’s Chrome to flag deceptive embedded content

Browser will warn of any embedded content such as ads that pretend to act like, and look and feel like, a trusted entity Continue Reading

By

• Warwick Ashford, Senior analyst

DDoS is most common cyber attack on financial institutions

January’s attack on HSBC is typical for the financial sector, but no business should consider itself unlikely to be targeted in this way, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

HSBC online services hit by DDoS attack

HSBC was hit by a distributed denial of service (DDoS) attack, which targeted its online personal banking services. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

ICO launches data privacy assessment tool for SMEs

The ICO has launched an online self-assessment tool to help SMEs to comply with data protection laws and improve data handling procedures Continue Reading

By

• Warwick Ashford, Senior analyst

Business urged to take action on data privacy

Security professionals use Data Protection Day to encourage businesses to do more to protect personal data Continue Reading

By

• Warwick Ashford, Senior analyst

Keep data safe or risk financial impact, ICO warns business

The knock-on effect of a data breach can be devastating for a company, warns information commissioner Christopher Graham Continue Reading

By

• Warwick Ashford, Senior analyst

New government plan to support cyber security startups

Government has announced a £250,000 programme to increase the rate of cyber security startup development in the UK Continue Reading

By

• Warwick Ashford, Senior analyst

Average DDoS attacks fatal to most businesses, report reveals

Criminal activity is top motivation for DDoS attacks as average attacks become strong enough to down most businesses, Arbor Networks report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Beyond India – the emerging outsourcing destinations

In this week’s Computer Weekly, we look at the growing number of offshore alternatives to the dominant outsourcing destination of India and assess their relative merits. We examine how to respond if your organisation is affected by a data breach. And we analyse how virtualisation technology can help improve your disaster recovery strategy. Read the issue now. Continue Reading

$54m cyber fraud hits aircraft supplier share price

Austrian aircraft industry supplier reports cyber fraud loss of $54m, way above the average cost of the worst breaches in the UK of up to $4.4m in 2015 Continue Reading

By

• Warwick Ashford, Senior analyst

CW Europe - January 2016

This month, CW Europe looks in-depth at an issue that is set to affect people across all 28 European Union member states – the abolition of mobile roaming charges, set for mid-2017. Continue Reading

Candy Crush maker King secures mobile access through cloud

Candy Crush maker King.com uses cloud-based Duo Security authentication for access to cloud services, customised apps and remote VPNs Continue Reading

By

• Warwick Ashford, Senior analyst

Most Android devices running outdated versions

Nearly a third of Android devices in enterprises today are running version 4.0 or older of the operating system, leaving them highly susceptible to vulnerabilities, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Is government surveillance going too far?

In this week’s Computer Weekly, as the UK prepares new laws on surveillance and data collection, we hear from security experts on the challenges of balancing privacy and security and their insider view on GHCQ and the NSA. We examine the growing threat of ransomware and how to tackle it. And we look at the implications of new EU data protection rules. Read the issue now. Continue Reading

Australian prime minister Malcolm Turnbull calls for free, open and secure internet

International norms of behaviour should prohibit states from conducting cyber intellectual property theft, says Australian prime minister Malcolm Turnbull Continue Reading

By

• Warwick Ashford, Senior analyst

Chinese university targeted by Islamic State hacktivist

Beijing’s Tsinghua University is the latest organisation to be attacked by hackers with a social or political agenda Continue Reading

By

• Warwick Ashford, Senior analyst

GMB takes concerns over British Airways IT outsourcing to MPs

Trade union fears that the expansion of IT outsourcing at BA is a risk to security and will see UK jobs disappear Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK not involved in mass surveillance, says Theresa May

Coffee shops and libraries could be the target of interception warrants, Theresa May tells MPs and peers Continue Reading

By

• Julia Gregory

Watchdog urges US nuclear agency to close cyber security gaps

An audit report has called on the US nuclear agency to revise its IT contracts to ensure better cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

Firms can monitor employees’ online chats, EU court rules

Human rights court says it is not unreasonable for employers to want to verify that staff are completing their professional tasks during working hours Continue Reading

By

• Warwick Ashford, Senior analyst