Identity and access management products

Australia needs to get digital identity right

A top Ping Identity executive urges Australia to put more focus on digital identity management following the government’s efforts to lay the groundwork for an open banking regime Continue Reading

By

• Beverley Head

Publicly accessible biometric database highlights key failings

The discovery of a publicly accessible database of biometric information highlights failings by the supplier, the need for supply chain security, and the challenges of using biometric data Continue Reading

DCMS funding aims to increase diversity in cyber sector

A funding round has been announced as part of the Cyber Skills Immediate Impact Fund (CSIIF) with aims of encouraging more diverse talent into the UK’s cyber security sector Continue Reading

By

• Clare McDonald, Business Editor

GDPR faces growing pains across Europe

The General Data Protection Regulation is over a year old now, but it faces challenges across Europe where compliance has taken place at different speeds Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Digital domain identified as major security threat by Norway’s intelligence service

Norway's intelligence services has revealed the extent of the threat posed to the country by cyber attacks Continue Reading

By

• Gerard O'Dwyer

UK finance regulator gives extra time for companies to meet payment security rules

Financial Conduct Authority gives companies under its watch an extra 18 months to meet an EU payments security standard Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Why Gov.uk Verify faces a critical few months - again

Gov.uk Verify – the government’s flagship digital identity system – faces a critical few months ahead. Again. As the clock ticks down towards the end of March 2020, when further public investment ... Continue Reading

By

• Bryan Glick, Editor in chief

Leaked Sephora databases peddled on dark web

Cyber security firm finds two databases likely to be related to the Sephora data breach that affected online customers in Southeast Asia, Australia and New Zealand Continue Reading

By

• Aaron Tan, TechTarget

Cyber kill chain is outdated, says Carbon Black

The chief cyber security officer of Carbon Black calls for a new cognitive paradigm to fend off cyber adversaries that are now attacking in cycles Continue Reading

By

• Aaron Tan, TechTarget

F-Secure talks up threat-hunting to stay ahead of cyber attacks in APAC

Cyber security firm calls for organisations to double up on threat-hunting now that nearly all attack and reconnaissance traffic is automated Continue Reading

By

• Avanti Kumar

Most SMEs severely underestimate cyber security vulnerabilities

Small businesses are the primary target for cyber attacks, yet most are unprepared and do not think they will be targeted, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Government launches digital identity consultation and new pilot scheme

DCMS is seeking views on the role of the government and private sector in developing digital identities, while a small-scale trial will open up passport data for companies to prove online IDs Continue Reading

By

• Bryan Glick, Editor in chief

How IT pros are building resilience against email security threats

For most people, emails are an easy and harmless way to communicate in the workplace, but they could also be a security disaster waiting to happen Continue Reading

By

• Nicholas Fearn

HID weighs in the glacial move towards digital ID

There are still concerns over data integrity, security and privacy of digital identities, but the convenience of the technology outweighs the risks, says a HID expert Continue Reading

By

• Aaron Tan, TechTarget

CW ASEAN: Trend Watch – Security

Artificial intelligence tools are becoming a vital part of the security arsenal for organizations and cyber criminals alike. In this handbook, Computer Weekly looks at how ASEAN firms are using AI to combat cyber threats and experts discuss the latest smart cyber security tools. Continue Reading

UN resolution ignores special rapporteur’s call for halt to spyware sales

UN’s Human Rights Council adopts resolution to explore the impact of new and emerging digital technologies on human rights, but the text ignores a damning report by the council’s own expert on freedom of expression Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

UK boards ignoring £30bn cyber risk

Despite the danger posed by cyber attacks to mid-sized companies, boards are not prepared to manage the risk and firms are over-confident in their cyber capabilities, report finds Continue Reading

By

• Warwick Ashford, Senior analyst

Windows 10 to enable passwordless sign-in

Windows 10 users will soon be able to sign in to devices without using a password to encourage the use of two-factor authentication methods to improve security Continue Reading

By

• Warwick Ashford, Senior analyst

We shouldn't need to debate online identity again, but it's right that we do

The latest select committee report by MPs into the progress of digital government in the UK has resurrected a question that has reared its head on several occasions in the past – do we need a ... Continue Reading

By

• Bryan Glick, Editor in chief

Nearly half of firms fear cloud apps make them insecure

Survey shows more than one-third of global companies appoint a CISO in the face of data breaches, and the UK is giving CISOs more power despite making fewer appointments Continue Reading

By

• Warwick Ashford, Senior analyst

APAC experts weigh in on cyber security trends

The onslaught of cyber attacks being reported each day has been a wake-up call, but experts say businesses need to be mindful of the limitations of certain security measures Continue Reading

By

• Aaron Tan, TechTarget

UK consumers still concerned about personal data security

Most UK consumers are still concerned about the security of their personal data, indicating that organisations need to do more to gain consumer trust, such as implementing biometric controls Continue Reading

By

• Warwick Ashford, Senior analyst

Sweden’s Protective Security Act targets cyber risks

IT suppliers must comply with tighter cyber security requirements, but are being offered help from government agencies Continue Reading

By

• Gerard O'Dwyer

Podcast: The Computer Weekly Downtime Upload – Episode 22

In this week’s episode of the Computer Weekly Downtime Upload podcast, Brian McKenna, Caroline Donnelly and Clare McDonald talk about digital transformation in the NHS, Sky’s efforts to get more women working in tech and how big businesses could be risking extinction by ignoring IT Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Singapore to beef up police tech capabilities

Singapore government singles out biometrics, data analytics and digital forensics as promising areas to boost crime-fighting efforts Continue Reading

By

• Aaron Tan, TechTarget

Facebook’s privacy game – how Zuckerberg backtracked on promises to protect personal data

Facebook promised its users privacy then quietly abandoned its promises in pursuit of profits. Now it faces antitrust regulation Continue Reading

By

• Bill Goodwin and Sebastian Klovig Skelton

Dutch bank and researchers begin defence against quantum computing’s dark side

ABN Amro is working with QuTech to ensure that banks can protect data against quantum computers in the future Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

DWP looks to extend digital identity capabilities

Department for Work and Pensions wants to reduce reliance on existing identity assurance methods such as Gov.UK Verify and face-to-face Continue Reading

By

• Bryan Glick, Editor in chief

Fido Alliance announces new standards

Fido Alliance announces new identity verification and IoT initiatives to expand the reach and impact of Fido authentication, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

Saudi banks trial blockchain-based identity technology at ATMs

Biometric and blockchain technologies are being used in tandem to provide ID verification at Saudi Arabian cash machines Continue Reading

By

• Alicia Buller

Online porn age-verification checks delayed for six months

Changes to force UK internet users to prove their age to access adult content are postponed for a third time because of failure to notify the European Commission of key policy details Continue Reading

By

• Angelica Mari

Facebook officially unveils cryptocurrency plans

Facebook has released details about its Libra cryptocurrency, but questions still remain over how, and if, it will work Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

UK to host world’s first surveillance camera day

The UK is to host the world’s first surveillance camera day to raise awareness about surveillance cameras and generate a debate about how they are used Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore faced fewer cyber threats in 2018

Despite the fall in the number of common cyber threats last year, Singapore will continue to face advanced persistent threats, CSA warns Continue Reading

By

• Aaron Tan, TechTarget

Inside F5’s cyber security playbook

F5 Networks' CISO talks up measures that the application delivery and security specialist is employing to fend off cyber attackers that come knocking on its doors Continue Reading

By

• Aaron Tan, TechTarget

Facebook London hiring spree focuses on tackling online harms

Facebook is hiring for 500 tech jobs in the capital in the next six months, with a particular focus on seeking out and clamping down on malicious content and fake accounts, and curbing other harmful behaviour on its platforms Continue Reading

By

• Alex Scroxton, Security Editor

Government increases efforts to drive Verify uptake

Renewed push to create a ubiquitous digital identity market will include a consultation with the private sector and the creation of a dedicated unit Continue Reading

By

• Angelica Mari

Large firms look to zero-trust security to reduce cyber risk

In the face of increasing cyber breach risk as organisations move to hybrid multi-cloud IT environments, just over half of large firms in Europe are planning a zero-trust approach to security Continue Reading

By

• Warwick Ashford, Senior analyst

‘A breath of fresh air’ for Gov.uk Verify?

Three months ago, the Government Digital Service (GDS) appointed the first ever director of digital identity, Lisa Barrett – tasked with taking on the troubled Gov.uk Verify programme. Barrett ... Continue Reading

By

• Bryan Glick, Editor in chief

How ASEAN firms are using AI to combat cyber threats

Artificial intelligence tools are becoming a vital part of the security arsenal for organisations and cyber criminals alike Continue Reading

By

• Ai Lei Tao

Nearly two-thirds of businesses hit by credential abuse

Most businesses admit to breaches relating to abuse of user credentials, according to a report that highlights cyber hygiene failings in the UK and the importance of greater visibility and integration to cyber defence capability Continue Reading

By

• Warwick Ashford, Senior analyst

Deterministic data-based AI key for security

AI-based cyber security systems have enormous potential, but under specific conditions that are essential for success, AI expert tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Data governance: The importance of getting it right

With ever-increasing storage capacity, organisations are needing to take more control of their file management systems with thorough data governance policies. Otherwise, they run the risk of project data being exposed Continue Reading

By

• Peter Ray Allison

2.3 billion business and consumer data files exposed online

In the year since the GDPR compliance deadline, the number of data files exposed online without adequate protection is up more than 50% due to misconfigured security controls, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

What the UK can learn from the Nordics when it comes to digital ID

The UK and other countries can learn from the Nordic region when it comes to digital identity Continue Reading

By

• John Erik Setsaas

Planned UK age verification checks risky for internet users

Proposed controversial online age verification checks could increase the risk of identity theft and other cyber crimes, warn security experts, who advise parents to set technological boundaries and ensure their families are aware of risks Continue Reading

By

• Warwick Ashford, Senior analyst

Self-sovereign ID key to data privacy

Coupling self-sovereign identity with insights from research on consumer identity management may be the key to personalising products and services without putting people at risk, says industry analyst Continue Reading

By

• Warwick Ashford, Senior analyst

Implement multifactor authentication, urges expert panel

Multifactor authentication should be a top priority for organisations to defend users from cyber attacks, coupled with zero-trust architecture and artificial intelligence-based technologies, says expert panel Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Understanding tech is key to effective data segregation

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Petra Wenham

Digital business is connected business, says KuppingerCole

Businesses need to unlock data, rethink identity and access management, and capitalise on artificial intelligence in the digital era, says KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Electronic ID in the Nordics – a model for other countries?

Use of electronic identity schemes in Sweden, Norway, Finland and Denmark is far ahead of other countries – but why? Continue Reading

By

• Alex Cruickshank

Security Think Tank: How to realise the benefits of security zoning

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Paddy Francis

Security Think Tank: Benefits and challenges of security segmentation

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Maxine Holt, Omdia

Key lessons from an ethical hacker

Understanding hacker techniques and processes is the best way to defend against cyber attacks, and focusing on business risks is the best way to get security budget, according to an ethical hacker Continue Reading

By

• Warwick Ashford, Senior analyst

Dutch businesses not yet implementing NIS Directive

Little urgency to comply with the Network and Information Systems Security Act, which seeks to protect the Netherlands’ vital infrastructure and digital services from cyber attack Continue Reading

By

• Kim Loohuis

Gov.uk Verify is the Theresa May of digital government

Gov.uk Verify is the Theresa May of digital government. The embattled Prime Minister faces calls to quit from all around – her own Conservative MPs, grassroots Tory activists, the right-wing press ... Continue Reading

By

• Bryan Glick, Editor in chief

Gov.uk Verify has 'failed users' and its leaders lack accountability, say MPs

Public Accounts Committee slams government's flagship digital identity service after a ‘catalogue of problems’ Continue Reading

By

• Bryan Glick, Editor in chief

Privileged access management moving to cloud

Survey shows nearly half of information security professionals are either planning to move privileged access management to the cloud or are exploring the possibility Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore rolls out blockchain platform for verifying educational certificates

Employers in the city-state can now use the OpenCerts platform to verify the qualifications of employees and new hires Continue Reading

By

• Aaron Tan, TechTarget

GDPR cases drive bigger budgets for Nordic regulators

High-profile General Data Protection Regulation cases in Finland and Sweden have increased the workload for regulators, which are to receive an increase in funding Continue Reading

By

• Gerard O'Dwyer

European Union to create central biometrics database

New rules will see the introduction of a repository of personal data from hundreds of millions of citizens to support law enforcement across member states Continue Reading

By

• Angelica Mari

UK government to introduce online porn age checks

World-first regulations will see age verification introduced in July and enforced by the British Board of Film Classification. Non-compliant sites risk withdrawal of payment services or being blocked Continue Reading

By

• Angelica Mari

Singtel and NUS claim quantum breakthrough

Researchers from Singtel and the National University of Singapore have succeeded in coordinating the paths of photons across a fibre network to drive wider adoption of quantum key distribution Continue Reading

By

• Aaron Tan, TechTarget

NatWest eases business payments with biometric authentication on mobile

NatWest is making it easier and safer for businesses to make payments of any size via a mobile app using biometric authentication technology Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

How Palo Alto Networks fends off its cyber adversaries

Palo Alto Networks CIO Naveen Zutshi talks up the company’s approach in keeping threat actors at bay Continue Reading

By

• Aaron Tan, TechTarget

Enhanced Wi-Fi cuts costs to maximise efficiency at Dorset school

The need for cost-effective, manageable wireless infrastructure without additional annual licence fees drove Lytchett Minster School’s decision to upgrade its on-site network with TP-Link Continue Reading

By

• Alex Scroxton, Security Editor

Black Hat Asia 2019: Get ready for the cyber arms race

The arms race is now squarely in the cyber realm as defence teams and threat actors arm themselves with AI tools Continue Reading

By

• Ai Lei Tao

Singapore government to review data security in public sector

A high-level committee comprising ministers and private sector security experts will review data security practices and recommend measures to better protect citizens’ data Continue Reading

By

• Aaron Tan, TechTarget

Web inventor wants a web built on solid data principles

Tim Berners-Lee has urged app developers to be courteous to users’ data privacy, saying users should own their own data and apps need to interoperate Continue Reading

By

• Cliff Saran, Managing Editor

IT complexity raises concerns of certificate-related outages

Company executives are concerned that increased IT complexity will result in more security certificate-related outages, with nearly two-thirds of organisations affected in the past year Continue Reading

By

• Warwick Ashford, Senior analyst

MPs hear more revelations about Gov.uk Verify as troubled project gets a new leader

Hello and good luck, to Lisa Barrett  - the newly appointed director of digital identity at the Government Digital Service (GDS). She's taken on what many people outside GDS see as something of a ... Continue Reading

By

• Bryan Glick, Editor in chief

IT Priorities 2019: ANZ organisations focus on fundamentals

Organisations in Australia and New Zealand will spend more on modernising legacy applications and breaking down data silos this year Continue Reading

By

• Aaron Tan, TechTarget

How aid workers are using encrypted communications to stay safe in conflict zones

Often operating in volatile conflict zones, aid workers are frequently turning to encrypted communication services to protect each other Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Cyber espionage group behind SingHealth attack

A cyber espionage group dubbed Whitefly has been identified as the perpetrators behind Singapore’s largest data breach to date Continue Reading

By

• Aaron Tan, TechTarget

NAO hammers another nail into Gov.uk Verify

It’s not commonly known outside Whitehall that by the time the National Audit Office (NAO) – Parliament’s independent spending watchdog – publishes a report, it will have been through several ... Continue Reading

By

• Bryan Glick, Editor in chief

Singapore can now certify security products based on Common Criteria

The city-state is has attained the status of a Certificate Authorising Nation, enabling it to evaluate and certify security products under the Common Criteria standard Continue Reading

By

• Aaron Tan, TechTarget

GDS cut expected benefits of troubled Gov.uk Verify system by 75%

In a highly critical report, the National Audit Office says it is 'difficult to conclude' that past decisions to continue with the flagship digital identity system have been justified Continue Reading

By

• Bryan Glick, Editor in chief

Android now Fido2 certified

Mobile operating system’s certification accelerates global migration beyond passwords, says Fido Alliance, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

Finding security in the cloud

When choosing a cloud security provider, enterprises will need to consider the level of data privacy and data security risk involved Continue Reading

By

• Krishna Balakrishnan

CaixaBank customers can use their faces to withdraw money at ATMs

Spanish bank begins roll-out of ATMs equipped with facial recognition technology, but customers can still use card and PIN Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

A guide to choosing cloud-based security services

Cloud-based security services can help organisations with a growing cloud footprint to reduce cost and address the manpower crunch in cyber security Continue Reading

By

• Aaron Tan, TechTarget

NHS extends trials of digital identity system

The NHS in England is working with external organisations in new pilots to test its secure online login system for healthcare Continue Reading

By

• Bryan Glick, Editor in chief

Tech sector tells government that digital identity policy is 'urgently required'

The UK tech sector has urged the government to publish policy to support the creation of a “fully functioning” digital identity market, to boost the digital economy Continue Reading

By

• Bryan Glick, Editor in chief

Met Police deploys live facial recognition technology for ninth time

Police say technology is helping to prevent and detect crime by identifying wanted criminals, but privacy groups have voiced their opposition Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Innocent people arrested following surveillance blunders, IPCO reveals

Interception of communications commissioner Adrian Fulford warns of “grave” repercussions for people wrongly identified as suspects due to errors made when government bodies access email, phone and telephone data Continue Reading

By

• Bill Goodwin, Computer Weekly

How to accelerate digital identity in the UK

Trusted online relationships are essential to the digital economy, but the UK is lagging behind. What needs to be done? Continue Reading

By

• David Black, ID Crowd

Personal records of HIV-positive individuals in Singapore leaked online

The personal information of 14,200 people with the human immunodeficiency virus was leaked by an American who lived in Singapore Continue Reading

By

• Aaron Tan, TechTarget

Poor practices expose 24 million financial records

Failure to maintain appropriate security controls has again led to the exposure of millions of sensitive data records, this time from the banking world Continue Reading

By

• Warwick Ashford, Senior analyst

It’s complicated: How enterprises are approaching IAM challenges

Identity and access management challenges are evolving with digital transformation. Computer Weekly explores some of the ways organisations are ensuring the right people gain the right access to the right resources Continue Reading

New CISO is dead serious about security

Our new CISO has just issued a warning across the company. He's going to blame staff for any blunders. And he's going to make sure they NEVER do it again... Continue Reading

By

• Cliff Saran, Managing Editor

SingHealth and IT supplier fined S$1m for data breach

Singapore’s data protection commission considered the fact that both SingHealth and its IT supplier fell prey to sophisticated threat actors, among other factors, when meting out the fine Continue Reading

By

• Aaron Tan, TechTarget

eIDAS and the EU’s mission to create a truly portable identity

It is important for businesses to work more actively with technology partners, regulators and governments to create more robust identity verification processes  Continue Reading

By

• Zac Cohen, Trulioo

UK contactless card fraud surges

Fraudsters stole £1.18m from contactless users in 2018, with the average theft size also increasing Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Singapore Airlines’ software glitch exposed customer data

More than 280 members of the Krisflyer frequent flyer programme had their personal information compromised by a one-off software bug Continue Reading

By

• Aaron Tan, TechTarget

Modern IT underlines need for zero-trust security

The increasing complexity of supply chains and interconnectivity of IT systems means the attack surface is widening and security has to evolve accordingly, warns British computer scientist Continue Reading

By

• Warwick Ashford, Senior analyst

How e-signatures fix broken digitisation

A big barrier to the end-to-end digitisation of business processes is that certain steps require paper – but DocuSign plans to fix this Continue Reading

By

• Cliff Saran, Managing Editor

Can we live without passwords?

Can you imagine a future in which we can be secure online without having to remember an unwieldly list of passwords? Solutions are emerging that could make passwords redundant, but there will be other security problems to resolve Continue Reading

By

• Bruno Halopeau & Adrien Ogee

Security Think Tank: Pay attention to attribute-based system access permissions

At the close of 2018, we asked CW Security Think Tank contributors to name one thing predicted for 2018 that did not happen, one thing that was not predicted and did happen and one thing that should happen in 2019, but probably will not Continue Reading

By

• Simon Persin, Turnkey Consulting

Security Think Tank: Strong 2FA should be a goal in 2019

At the close of 2018, we asked CW Security Think Tank contributors to name one thing predicted for 2018 that did not happen, one thing that was not predicted but did happen, and one thing that should happen in 2019 but probably will not Continue Reading

By

• Paddy Francis

Marriott data breach losses could be over half a billion dollars

Direct losses related to a huge data breach at US hotel group could reach $600m Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA