Identity and access management products

Four in five UK businesses seek new security suppliers

Decision-makers are ready to buy new security technology, but suppliers must pay close attention to how they present themselves Continue Reading

By

• Alex Scroxton, Security Editor

Cyber criminals forging Covid-19 vaccine certificates

Vaccine passports and certificates are gaining mainstream traction, which means cyber criminals are also on the bandwagon Continue Reading

By

• Alex Scroxton, Security Editor

Employees must be given the right to disconnect

As enterprises increasingly turn to workplace monitoring technologies and more of the workforce moves to remote or hybrid working, unions are campaigning for workers’ ‘right to disconnect’ and not engage in digitally enabled work after hours Continue Reading

By

• Andrew Pakes, Prospect Union

Unionised drivers call on Microsoft to suspend Uber’s Face API licences

Unionised private hire drivers in the UK are calling for Microsoft to suspend Uber’s licences to use its Face API technology after claims the ride-hailing firm’s ID-checking system has led to drivers losing their jobs and having licences revoked Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Back to square one – ground-up CNI protection

In the light of increasing cyber attacks on critical national infrastructure, what are the immediate risks to industrial control systems and other operational technology, and what steps can be taken to address them? Continue Reading

By

• Matthias Reinwarth, KuppingerCole

Vaccine passports cannot put basic rights at risk, warns BCS

BCS warns of challenges to come as the government presses on with its plans for Covid-19 vaccine passports Continue Reading

By

• Alex Scroxton, Security Editor

Government calls for input into Covid-19 vaccine passports

Evidence gathering exercise will inform the development of the UK’s proposed Covid-19 vaccine passport scheme Continue Reading

By

• Alex Scroxton, Security Editor

CW Innovation Awards: Fighting fake Covid-19 vaccines with blockchain

A blockchain-based system developed by Singapore-based Zuellig Pharma can help governments and healthcare providers weed out fake vaccines and manage vaccine distribution and administration Continue Reading

By

• Aaron Tan, TechTarget

Attack on surveillance cameras a warning over security, ethics

The attack on a video surveillance startup by a hacktivist group raises questions not just over cyber security, but the use and extent of surveillance technology Continue Reading

By

• Alex Scroxton, Security Editor

Significant jump in number of hackers reporting vulnerabilities to companies

Since the onset of the Covid-19 pandemic, the number of hackers reporting security vulnerabilities and bugs to enterprises has increased by nearly two-thirds Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Okta picks up Auth0 for $6.5bn

Multibillion-dollar acquisition a vote of confidence in future of identity and access management services Continue Reading

UK contactless payment limit more than doubled

UK increases the amount that can be spent in one go using a contactless payments card to £100 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

On digital identity, the government gets it wrong again

The latest government proposals to regulate the digital identity sector continue to misunderstand how such a market works – a more API-based approach is needed to deliver the clear benefits of online ID Continue Reading

By

• Jon Nash, Demos

NCSC Cyber Action Plan emphasises SME security

NCSC self-assessment tool launched to help sole traders and micro-businesses tackle their cyber security challenges Continue Reading

By

• Alex Scroxton, Security Editor

Industry concerns over government digital identity plans risk a confusing outcome for users

A flurry of recent activity suggests the government is ramping up its plans for the long-awaited demise of Gov.uk Verify, its failed attempt to produce a digital identity system for online public ... Continue Reading

By

• Bryan Glick, Editor in chief

City of Helsinki adopts MyData principles to improve digital services

Principles on the use of personal data for the benefit of society will guide Finnish capital’s ambitious digital plans Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

2020 a record year for cyber, thanks to Covid

The UK’s cyber industry now employs close to 50,000 people and contributes billions to the economy Continue Reading

By

• Alex Scroxton, Security Editor

Fingerprints will help payment cards retain relevance

Biometric payment cards using fingerprint technology could add billions to global banking revenues, says UBS Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Vaccine passports highlight social impact of systems design

Vaccine or immunity passports are an opportunity to advance the design of trustworthy digital systems, but much more work still needs to be done Continue Reading

By

• Carsten Maple

Post Office to offer digital ID services to customers

Post Office partnership with Yoti is intended to expand customer choice as to how people prove their identity when accessing services Continue Reading

By

• Alex Scroxton, Security Editor

Government to impose new digital identity system across all Gov.uk services

Cabinet Office minister Michael Gove writes to Whitehall departments mandating the use of a new digital identity system that will allow citizens to be tracked across the Gov.uk website Continue Reading

By

• Bryan Glick, Editor in chief

Government launches digital identity trust framework

The government’s draft framework, which aims to set out rules for the use of digital identities, will be tested with industries, services, users and organisations ahead of a final version being published Continue Reading

By

• Lis Evenstad

CW Benelux: Is reluctance to report cyber crimes in the Netherlands helping the criminals get away?

According to an academic study in the Netherlands, only one in seven Dutch people report a cyber crime to the police when it happens - feeling it is better to sort the problem out themselves because they don’t think the police will do anything. This is storing up trouble as cyber crime is an increasing problem in the country. Also in this issue, read why Dutch bank ABN Amro is selling its head office. Continue Reading

Sim-swapping crooks targeted celebrities, influencers

Eight arrests have been made in England and Scotland in connection with a series of Sim-swapping attacks targeting high-profile victims Continue Reading

By

• Alex Scroxton, Security Editor

‘Batman Begins’ cyber attack is a warning to CNI providers

A thwarted cyber attack in a Florida town that could have resulted in the poisoning of the water supply is a timely reminder of the vulnerability of critical services Continue Reading

By

• Alex Scroxton, Security Editor

Too few UK organisations offering cyber training for remote work

Nearly a year into the pandemic, a study reveals a concerning tendency for organisations not to bother offering security training for remote workers Continue Reading

By

• Alex Scroxton, Security Editor

Data of thousands of Dutch citizens leaked from government Covid-19 systems

Weak access controls and outdated systems blamed for leaking of the personal details of thousands of Dutch citizens tested for Covid-19 Continue Reading

By

• Kim Loohuis

Sweden to establish national cyber security centre

Sweden becomes latest Nordic state to establish a national cyber security centre as the threat landscape grows Continue Reading

By

• Gerard O'Dwyer

Picking the right IAM tools is based on more than today’s needs

 Continue Reading

CISOs invisible to their organisations, says BT report

Ignorance of cyber issues is leading to misplaced confidence in security in many organisations, as CISOs struggle to make themselves seen and heard Continue Reading

By

• Alex Scroxton, Security Editor

The ransomware routine: pages from the Secret IR Insider’s diary

The Secret Incident Response Insider shares behind-the-scenes stories of what really happens after organisations are hit by cyber attacks – and shows how they could have been avoided Continue Reading

By

• The Secret IR Insider, Check Point

Saudi IT spending to hit $11bn in 2021

Saudi Arabian organisations will spend about $11bn on IT this year, with emerging technologies high on shopping lists Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government Gateway at 20 – looking back at the UK’s most successful digital identity system

Not all legacy IT systems in government cause problems – one has been at the heart of many of the most important online public services for 20 years Continue Reading

By

• Jerry Fishenden and Alan Mather

How can healthcare organisations fight increased cyber crime in 2021?

As the Covid-19 pandemic enters what may be its most dangerous phase, we explore how healthcare organisations can ward off cyber threats while preserving their ability to deliver critical care Continue Reading

By

• Nicholas Fearn

Should I be worried about MFA-bypassing pass-the-cookie attacks?

Malicious actors bypassed multi-factor authentication using so-called pass-the-cookie attacks, but how worrying is this and what is the risk to organisations? Continue Reading

By

• Alex Scroxton, Security Editor

Malwarebytes also hit by SolarWinds attackers

The nation state group that attacked SolarWinds in December got inside Malwarebytes by exploiting privileged access to its Microsoft Office 365 tenant, the firm reveals Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: In 2021, enable, empower and entrust your users

After a year of unprecedented disruption thanks to Covid-19, it looks like remote working is set to remain with us for now, which means security strategies will change in 2021. What will this change look like, and what tools and services will be selling like hot cakes? Continue Reading

By

• Mike Gillespie

MAS offers guidance on mitigating supply chain threats

Monetary Authority of Singapore revises its technology risk management guidelines to help the financial sector guard against supply chain attacks Continue Reading

By

• Aaron Tan, TechTarget

Australians lost A$176m to scams in 2020

Investment scams topped the list of scams, which grew by 23.1% in 2020 as criminals exploited human psychology using social engineering Continue Reading

By

• Aaron Tan, TechTarget

Coalition proposes secure standard model for Covid-19 passports

Vaccination Credential Initiative is working to ensure that people vaccinated against Covid-19 can access their records in a secure, verifiable and privacy-preserving way Continue Reading

By

• Alex Scroxton, Security Editor

Select a customer IAM architecture to boost business, security

Not all customer IAM platforms are created equal. Will a security-focused or marketing-focused CIAM architecture best meet your organization's needs? Read on for help deciding. Continue Reading

By

• Mike Chapple, University of Notre Dame

APAC firms grapple with cyber security amid pandemic

Some aspects of cyber security have taken a backseat as companies across the Asia-Pacific region rush to shore up their infrastructure to cope with the demands of remote work Continue Reading

By

• Aaron Tan, TechTarget

Three-quarters of finance firms report more potentially criminal activity in their networks

Fears of failing to comply with strict regulations grow as financial services firms identify more suspicious financial activity on their networks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Palo Alto Networks opens Australia cloud location

The cyber security company’s Australia cloud location will address data localisation requirements amid growing adoption of cloud-based security services Continue Reading

By

• Aaron Tan, TechTarget

Mimecast latest security firm to be compromised

Users of a specific Mimecast certificate used to authenticate services to Microsoft Office 365 may be at risk of compromise in an attack that may relate to the ongoing SolarWinds incident Continue Reading

By

• Alex Scroxton, Security Editor

Early stage UK security startups face funding crisis

Overall cyber security funding since the advent of the pandemic is well up, but investment is dominated by safe, later-stage firms while those raising capital for the first time fall away Continue Reading

By

• Alex Scroxton, Security Editor

Can AI ever match the power of the brain?

In this week’s Computer Weekly, artificial intelligence is still no match for the brain – we talk to Intel’s neuromorphic computing lab to see how researchers are trying to address that. Our buyer’s guide examines identity and access management. And we find out why datacentres are becoming a new target for financial investors. Read the issue now. Continue Reading

How to tackle the IAM challenges of multinational companies

The rapidly changing business, regulatory and IT environment makes identity and access management a tough nut to crack for large multinationals. Continue Reading

Picking the right IAM tools is based on more than today’s needs

With remote working now normal, it is important to take proactive steps in managing credentials across platforms that can be subject to multiple data protection regulations. IAM services can streamline this process, but care must be taken to ensure the correct one is chosen Continue Reading

By

• Peter Ray Allison

Which? online banking investigation reveals ‘worrying gaps’ in security

Consumer rights organisation has ranked the security of UK online current account providers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Scammers impersonating the ACSC on the prowl

The Australian Cyber Security Centre warns of scammers who are using its name to gain control of personal computers and trick users into revealing personal information Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Cyber effectiveness, efficiency key in 2021

After a year of unprecedented disruption thanks to Covid-19, it looks like remote working is set to remain with us for now, which means security strategies will change in 2021. What will this change look like, and what tools and services will be selling like hot cakes? Continue Reading

By

• Simon Persin, Turnkey Consulting

WikiLeaks founder Julian Assange cannot be extradited to face charges in US, court rules

Court rules it would be oppressive to send Julian Assange to the US to face trial after finding he is at high risk of suicide. US government says it will appeal Continue Reading

By

• Bill Goodwin, Computer Weekly

Journalists’ FOI bids stayed as court reconsiders freedom of information rights of people outside UK

Tribunal questions whether people without a British passport or Britons living overseas are eligible to use the UK’s Freedom of Information Act Continue Reading

By

• Bill Goodwin, Computer Weekly

Security Long Reads: Cyber insiders reveal what’s to come in 2021

In this long read, we gather together the thoughts of cyber security insiders from across the industry to get their take on what will happen in 2021 Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 cyber crime stories of 2020

Here are Computer Weekly’s top 10 cyber crime stories of 2020 Continue Reading

By

• Alex Scroxton, Security Editor

How to manage non-human identities

Identity management has traditionally focused on human identities, but non-human identities are proliferating and must not be overlooked. Businesses can reduce risk by managing both types of identity in the same way using a services-based approach Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 cyber security stories of 2020

Here are Computer Weekly’s 10 top cyber security stories of 2020 Continue Reading

By

• Alex Scroxton, Security Editor

Finnish government tables laws to protect data from cyber criminals

Government is strengthening its legal framework to protect data from hackers in the wake of a massive breach at a psychotherapy centre Continue Reading

By

• Gerard O'Dwyer

Danske Bank fights money laundering with AI

Danske Bank is using artificial intelligence to help it prevent a repeat of the huge money laundering scandal that hit one of its operations in Estonia Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Cyber crime victims in the Netherlands not reporting offences

Dutch victims of online crime rarely report it to the police and when they do, they are often dissatisfied Continue Reading

By

• Kim Loohuis

How security will be different after Covid-19

In this week’s Computer Weekly, the world of cyber security will probably never return to its pre-pandemic state – we look ahead. The combination of remote working and streaming video is putting extra strain on networks. And we look at how digital transformation is changing the way contact centres are run. Read the issue now. Continue Reading

FireEye identifies flaw in networking monitoring software as US agencies attacked

Cyber security company says investigations have revealed security breach occurred because of a flaw in a network monitoring software Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Surge in Covid-19 vaccine phishing scams reported

Check Point and KnowBe4 share details of a growing number of phishing campaigns using the prospect of a Covid-19 vaccine as a lure Continue Reading

By

• Alex Scroxton, Security Editor

Post-pandemic approaches to IAM for cloud security

Cloud technology may have saved businesses from catastrophe during the pandemic, but it has also introduced additional challenges around identity and access management. Here’s why IAM policies are crucial in the new normal Continue Reading

By

• Nicholas Fearn

French regulators fine Google and Amazon over cookie policies

Google and Amazon rapped over their use of advertising cookies by the French data protection authorities Continue Reading

By

• Alex Scroxton, Security Editor

There’s no going back to pre-pandemic security approaches

The cyber security world will probably never return to its pre-pandemic state, and different approaches to security will come to the fore in 2021 Continue Reading

By

• Alex Scroxton, Security Editor

Russian state actors exploiting VMware bug to hijack data, users warned

Russian APT groups are actively exploiting a vulnerability in VMware products to access protected data, according to latest warnings Continue Reading

By

• Alex Scroxton, Security Editor

Where next for Windows?

In this week’s Computer Weekly, Windows is still the most-used operating system in enterprises – we look at where Microsoft aims to take it next. We examine some of the key questions for CIOs for their 2021 IT strategy. And we analyse the best practice in preventing distributed denial of service (DDoS) attacks. Read the issue now. Continue Reading

Cyber Aware campaign to help safeguard Christmas shoppers

New government campaign sets out to raise awareness of online shopping fraud in the run-up to Christmas Continue Reading

By

• Alex Scroxton, Security Editor

Singapore government remains ‘juicy target’ for cyber attackers

The government is baking security into the design and implementation of its IT systems and looking to increase bug bounties to fend off cyber threats Continue Reading

By

• Aaron Tan, TechTarget

DHL, Amazon and FedEx are most phished delivery services

DHL has emerged as the most imitated delivery brand in Europe, accounting for 77% of the total volume of phishing emails received in November 2020 Continue Reading

By

• Alex Scroxton, Security Editor

IT Priorities: APAC enterprises readying recovery budget

Enterprises in Asia-Pacific are investing in cloud and other key technologies to not only survive but thrive in the post-pandemic world Continue Reading

By

• Aaron Tan, TechTarget

How to modernise identity governance and administration

Modernising identity governance and administration (IGA) capabilities is essential for organisations to manage identities effectively to ensure they remain competitive, compliant and secure Continue Reading

By

• Warwick Ashford, Senior analyst

How Grab is using technology to improve trust and safety

Southeast Asian unicorn Grab is tapping artificial intelligence and other technologies to keep its users safe and cyber criminals at bay Continue Reading

By

• Aaron Tan, TechTarget

The authentication arms race continues

This week we are heading back to 2006, when we reported on that sadly-perennial favourite: IT access security, and more specifically, Managing Access Securely. As our contribution to the bit of fun ... Continue Reading

By

• Bryan Betts, Freeform Dynamics

APAC plagued by APT, ransomware attacks

The Asia-Pacific region was a primary target of advanced persistent threat groups, mostly from China, Iran, North Korea and Russia, that carried out 34 campaigns between June 2019 to June 2020 Continue Reading

By

• Aaron Tan, TechTarget

What next for digital identity in the UK? Industry welcomes latest DCMS plan

After months – some would say years – of frustration and delay, tech suppliers have largely welcomed the latest government initiative to establish a digital identity ecosystem in the UK. The ... Continue Reading

By

• Bryan Glick, Editor in chief

Finnish finance giant pilots fingerprint payments

OP Financial introduces biometric security technology to enable higher-value payments to be made safely using contactless cards Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

MPs subjected to over 22 million malicious email attacks in 2020

Members of Parliament are targeted by millions of spam and phishing emails every month, according to a Freedom of Information disclosure Continue Reading

By

• Alex Scroxton, Security Editor

HM Land Registry drafts digital ID standards

The department’s draft identity-checking requirements aims to provide clarity for software developers creating solutions to be used for property lawyers Continue Reading

By

• Lis Evenstad

CW APAC: Expert advice on zero-trust security

Zero trust is a security model that eliminates the traditional perimeter and assumes that no user or device can be trusted until proven otherwise. In this handbook, Computer Weekly looks at how enterprises can take a zero-trust approach to securing their network, devices and workforce. Continue Reading

How Aarogya Setu is addressing scale and security challenges

India’s contact-tracing platform leverages microservices, encryption techniques and cloud-based visibility tools to address scale and security requirements Continue Reading

By

• Aaron Tan, TechTarget

Human error blamed in Welsh Covid-19 patient data leak

Public Health Wales accepts recommendations of independent probe into data breach that saw PII on 18,105 coronavirus patients leaked Continue Reading

By

• Alex Scroxton, Security Editor

DCMS opens talks with private sector on future of digital identity market

Department has met with suppliers to discuss plans for a trust framework to show ‘what good looks like’ as it ploughs ahead with digital identity plans Continue Reading

By

• Lis Evenstad

Tim Berners-Lee startup releases decentralisation tech to enterprises

Roll-out of Inrupt’s decentralised privacy technology to four large organisations is helping the startup to develop explicit use cases, which it hopes will prove the tech and lead to faster adoption Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

IT Priorities 2020: After Covid-19, security goes back to basics

This year’s transition to remote working highlighted big gaps in the fundamentals of security, as updated TechTarget/Computer Weekly data reveals Continue Reading

By

• Alex Scroxton, Security Editor

EU moves closer to encryption ban after Austria, France attacks

Draft resolution document setting up an EU-wide ban on end-to-end encryption is set to be waved through this week Continue Reading

By

• Alex Scroxton, Security Editor

Credential stuffing: When DDoS isn’t DDoS

Ten years ago, credential stuffing attacks posed a comparatively minor threat, but with an escalating number of data breaches, the threat posed has now increased. What are the solutions to this very human problem? Continue Reading

By

• Peter Ray Allison

Microsoft to support next generation of security startups

Tech giant lends its support to the NCSC Cyber Accelerator scheme, which is seeking its seventh cohort of startups Continue Reading

By

• Alex Scroxton, Security Editor

Consumer rights organisation warns of computer takeover scams

Consumers warned to be on guard against criminals pretending to be IT support staff to gain access to personal banking information Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Singapore government rolls out digital signature service

Individuals and businesses will soon be able to sign documents digitally using a new service on the Singapore government’s SingPass digital identity platform Continue Reading

By

• Aaron Tan, TechTarget

India and Japan report stronger concern over cyber threats

Security operations teams in the two Asian giants see the increased volume of cyber threats as their biggest challenge amid the Covid-19 pandemic Continue Reading

By

• Aaron Tan, TechTarget

CISOs more confident in identity practice after pandemic shock

Identity practice and management has become a critical element of cyber security strategies to support remote workers Continue Reading

By

• Alex Scroxton, Security Editor

ICO slashes Marriott breach fine to £18.4m

Reduced fine reflects both improvements made to hotel group’s cyber security and impact of coronavirus on the travel and hospitality sector Continue Reading

By

• Alex Scroxton, Security Editor

Zero-trust investment seen accelerating through pandemic

New analyst report details some of the main indicators for success in zero-trust implementation Continue Reading

By

• Alex Scroxton, Security Editor

Barracuda eyes Indochina markets

Barracuda is looking to expand its local presence and headcount in fast-growing emerging markets of Vietnam, Cambodia and Laos Continue Reading

By

• Aaron Tan, TechTarget

Calls for clarity over Amazon insider breach

Security experts call for more clarity from Amazon over an apparent leak of customer data Continue Reading

By

• Alex Scroxton, Security Editor

APAC CISOs warm up to zero trust

Security leaders in Asia-Pacific are adopting zero-trust security, but challenges stand in their way of reaping the full potential of the security model Continue Reading

By

• Aaron Tan, TechTarget

Policy Exchange calls on government to publish digital ID strategy

The lack of reliable digital ID services in the UK is limiting the country’s digital infrastructure potential, according to a report on digital identity, which also recommends the government to clarify the future of Gov.uk Verify Continue Reading

By

• Lis Evenstad