Network security management

Sodinokibi emerging as a diverse, multi-vector threat to businesses

McAfee shares insight into the Sodinokibi ransomware campaign gleaned from its network of honeypots Continue Reading

By

• Alex Scroxton, Security Editor

Amazon consumer devices vulnerable to two-year-old exploit

Millions of older Amazon Echo and Kindle devices are still susceptible to a Wi-Fi vulnerability that was first disclosed in 2017 Continue Reading

By

• Alex Scroxton, Security Editor

BEIS launches multimillion-pound security investment package

Government is making available more than £50m to support a range of new cyber security initiatives and collaborations, including the latest phase of its Digital Security by Design programme Continue Reading

By

• Alex Scroxton, Security Editor

Private equity swoops on Sophos

British cyber security star picked up by technology sector investors for $3.9bn Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Applying AI to Lego, and security

Ann Johnson, Microsoft corporate vice-president of cyber security, is on a mission to prove that artificial intelligence holds great promise for the security sector, and she has the analogies to back it up Continue Reading

By

• Alex Scroxton, Security Editor

Data management strategies are evolving – so must enterprises

A growing number of data-driven initiatives, alongside heightened demand for security in governance, data management and compliance, has led to the rise of a more holistic approach – integrated risk management Continue Reading

By

• Peter Ray Allison

IBM, McAfee among founders of open source security alliance

A group of cyber security suppliers have come together to form the Open Cybersecurity Alliance Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Get basic security policy right, and the rest will follow

Paying attention to basic aspects of cyber security such as policy and permission will give you a sold base to build from Continue Reading

By

• Petra Wenham

IT contractor charged over cyber attack on property valuation firm

Australian police charge 49-year-old man with stealing and posting more than 170,000 data records belonging to ASX-listed Landmark White on the dark web Continue Reading

By

• Beverley Head

LogRhythm touts unlimited data plan for SIEM systems

SIEM supplier introduces three-year, term-based pricing plan that lets enterprises ingest as much data as they want without breaking the bank Continue Reading

By

• Aaron Tan, TechTarget

Attackers breached supplier systems to steal Airbus secrets

Airbus has been the subject of at least four major cyber attacks in the past 12 months, with contractors and suppliers targeted through their VPNs Continue Reading

By

• Alex Scroxton, Security Editor

Latest Lorca cyber security challenge has IoT focus

Government-backed cyber security innovation centre Lorca has issued new challenges around connectivity for its next intake of scaleups Continue Reading

By

• Alex Scroxton, Security Editor

Universities tempting targets for cyber criminals, warns NCSC

As hundreds of thousands of students prepare for the new academic year, universities have been warned that they are at high risk of cyber attack Continue Reading

By

• Alex Scroxton, Security Editor

Ensign InfoSecurity opens global headquarters in Singapore

The Singapore-based cyber security firm’s new headquarters will also be home to a new security operations centre that will be supported by Singapore-centric threat intelligence Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: The case for blockchain-based identity

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Richard Hunt, Turnkey Consulting

How Zuellig Pharma is fighting fake drugs with blockchain

The Asia-Pacific pharmaceutical giant is using a blockchain platform from SAP to help consumers identify the provenance of medicine Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Too soon to dismiss blockchain in cyber security

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Maxine Holt, Omdia

Security Think Tank: Use blockchain for integrity and immutability checks

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Eoin Keary

Security Think Tank: Blockchain is not for everyone, so look carefully before you leap

What are the best and most effective ways information security professionals can use blockchain technology? Continue Reading

By

• Paddy Francis

At least 47,000 servers vulnerable to remote attack

All organisations using Supermicro servers are being urged to update firmware to block remote attacks exploiting vulnerabilities in baseboard management controllers Continue Reading

By

• Warwick Ashford, Senior analyst

UK organisations join quantum comms pilot

Four UK companies are taking part in a pilot project to build the most secure communication infrastructure in Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Finland’s security agencies collaborate after cyber attacks

National Bureau of Investigations and National Cyber Security Centre aim to increase expertise and capability to defend Finland’s critical IT infrastructure Continue Reading

By

• Gerard O'Dwyer

Kaspersky eyes enterprise business, opens APAC transparency hub

The security firm wants to engage with enterprises and use its newly launched Malaysian Transparency Centre to burnish its credentials Continue Reading

By

• Edwin Yapp

Healthcare faces triple cyber threat, says FireEye

Criminal and nation-state cyber attackers are increasingly targeting the healthcare industry to steal data, carry out espionage and cause disruption, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Silence APT group eyes APAC banks

Russian-speaking advanced persistent threat group has set its sights on banks in the region, customising its arsenal for targeted attacks Continue Reading

By

• Aaron Tan, TechTarget

Huawei to US: Ban violates free market principles

Huawei has hit back at the US government’s latest moves to restrict its activities Continue Reading

By

• Alex Scroxton, Security Editor

US extends temporary stay on Huawei ban

American network operators given extra wiggle room to wean themselves off Huawei’s hardware Continue Reading

By

• Alex Scroxton, Security Editor

How EDR is moving beyond the endpoint

An emerging breed of detection and response offerings is going beyond endpoints to collect and decipher telemetry data from across the enterprise Continue Reading

By

• Aaron Tan, TechTarget

Passwordless enterprise already possible, says RSA

The passwordless enterprise is getting easier to attain as the security industry gears up to support a passwordless future, says RSA’s identity chief Continue Reading

By

• Warwick Ashford, Senior analyst

New approach to risk management needed, says Gartner

Most third-party risks are discovered after the initial due diligence period, Gartner study shows, highlighting the need for a new approach to risk management and the importance of effective access controls Continue Reading

By

• Warwick Ashford, Senior analyst

Cisco frozen out of China as Trump’s trade war rages on

Cisco CEO Chuck Robbins reveals the firm is being edged out of the Chinese market Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Data architecture and security must evolve in parallel

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Deshini Newman, (ISC)²

DCMS funding aims to increase diversity in cyber sector

A funding round has been announced as part of the Cyber Skills Immediate Impact Fund (CSIIF) with aims of encouraging more diverse talent into the UK’s cyber security sector Continue Reading

By

• Clare McDonald, Business Editor

Digital domain identified as major security threat by Norway’s intelligence service

Norway's intelligence services has revealed the extent of the threat posed to the country by cyber attacks Continue Reading

By

• Gerard O'Dwyer

Norman evasive cryptominer conquers networks

Cryptomining malware designed to evade detection is capable of invading every device in targeted companies, researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Data architects should be key allies of infosec pros

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Eoin Keary

How tech experts could earn millions as whistleblowers

In this week’s Computer Weekly, a tech expert is set to earn millions after successfully blowing the whistle on vulnerabilities in Cisco’s video surveillance software. Our latest buyer’s guide examines the issues around big data architecture. And we look at how the end of Windows 7 could spark a new era for desktop productivity. Read the issue now. Continue Reading

Phishing top security threat to business

A new Telefónica security service for business shows that phishing is the most-blocked threat and smaller businesses are a popular attack target in the first two months of deployment Continue Reading

By

• Warwick Ashford, Senior analyst

NCC Group warns of security risks of leading printers

Researchers uncover more than 35 vulnerabilities in six leading enterprise printers, many of which could allow access to corporate networks, underlining the need to counter security risks of embedded systems Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Security is a business, not an IT function

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Mike Gillespie

Security Think Tank: Dialogue between data architects and security leads is essential

How can infosec pros and data architects work together to support business goals and achieve a good level of cyber security? Continue Reading

By

• Paddy Francis

African bank foils suspected North Korean cyber attack

An African bank is among the financial institutions to be targeted by North Korea’s multi-billion dollar cyber theft campaign to support its weapons programmes Continue Reading

By

• Warwick Ashford, Senior analyst

DDoS on the rise, warns Kaspersky

Security researchers at Kaspersky are among those warning business that, more than ever, mitigation of distributed denial of service attacks needs to be a key element of cyber defence strategies Continue Reading

By

• Warwick Ashford, Senior analyst

Developing innovative security analytics approaches in the digital age

With security threats growing in scale and complexity, security analytics provide a way for IT teams to stay one step ahead of cyber attackers. The challenge is to ensure this technology continues to be effective in the face of new security challenges Continue Reading

By

• Nicholas Fearn

Cisco pays $8.6m after whistleblower discloses security flaws in video surveillance system

James Glenn, a video surveillance expert working for a Cisco reseller in Denmark, alerted Cisco to security faults and stands to gain a share of a multimillion-dollar settlement with the US government Continue Reading

By

• Bill Goodwin, Computer Weekly

Huawei ‘galvanised’ by Trump ban

Huawei has found itself caught in the crossfire of the US president’s trade war with China, but chairman Liang Hua says the firm is rising to the challenge Continue Reading

By

• Alex Scroxton, Security Editor

Cyber kill chain is outdated, says Carbon Black

The chief cyber security officer of Carbon Black calls for a new cognitive paradigm to fend off cyber adversaries that are now attacking in cycles Continue Reading

By

• Aaron Tan, TechTarget

Network teams spend more time than ever on network security issues

The workloads of network teams have evolved from their original objectives because of network security threats. Yet teams are still expected to maintain their initial goals. Continue Reading

By

• Michaela Goss, Senior Site Editor

Government delays final decision on Huawei

Culture secretary says he cannot yet make specific decisions about Huawei’s involvement in the UK’s telecoms and mobile networks due to a lack of clarity from the US, effectively green-lighting its use Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft talks up benefits and pitfalls of machine learning in security

Software giant Microsoft uses machine learning models to detect emerging threats while keeping an eye on potential bias in security data points that could derail its analysis Continue Reading

By

• Aaron Tan, TechTarget

US fines Equifax $700m over 2017 breach

Global settlement with US authorities follows systems breach that saw more than 140 million customer records stolen Continue Reading

By

• Alex Scroxton, Security Editor

HID weighs in the glacial move towards digital ID

There are still concerns over data integrity, security and privacy of digital identities, but the convenience of the technology outweighs the risks, says a HID expert Continue Reading

By

• Aaron Tan, TechTarget

CW ANZ: Trend Watch – Security

With regulations pushing data protection up the business agenda, we look at how Australia’s Notifiable Data Breaches scheme has been received and consider why a survey that found Australian firms are experiencing fewer cyber breach incidents appears to conflict with anecdotal evidence that suggests the opposite. Continue Reading

The 5 network security basics you need to know

In this compilation, learn what network security is, as well as how it differs from cybersecurity, common -- and potentially confusing -- technologies, threats and more. Continue Reading

By

• Michaela Goss, Senior Site Editor

UK launches 5G security inquiry

The Joint Committee on the National Security Strategy is to probe the UK government’s approach to telecoms technology as a national security issue Continue Reading

By

• Alex Scroxton, Security Editor

No technical grounds to ban Huawei, DCMS told

Science and Technology Committee tells Department for Digital, Culture, Media and Sport that there are no technical grounds for it to exclude Huawei Continue Reading

By

• Alex Scroxton, Security Editor

APAC IoT adoption improves amid challenges

More enterprises across the region are using the internet of things to track fleet vehicles and improve operations, but technology integration and security concerns are still holding back widespread adoption Continue Reading

By

• Edwin Yapp

Securing your mobile estate – best practice for CIOs

The prevalence of mobile devices in every part of daily life is shaping how enterprises make choices about software and network infrastructure, but how do businesses go about securing these vast new endpoint estates? Continue Reading

By

• Christian Annesley

Security and privacy key to smart buildings and cities

Security and privacy capabilities are essential for stakeholders if they are to realise the benefits of smart buildings and cities, says expert whitepaper Continue Reading

By

• Warwick Ashford, Senior analyst

Implementing IoT – overcoming barriers to commercial adoption

Tim Wright from the Institute of Telecoms Professionals reports from a recent seminar exploring questions around the barriers to commercial, at-scale adoption of the internet of things, and how to overcome them Continue Reading

By

• Tim Wright, Institute of Telecommunications Professionals

APAC experts weigh in on cyber security trends

The onslaught of cyber attacks being reported each day has been a wake-up call, but experts say businesses need to be mindful of the limitations of certain security measures Continue Reading

By

• Aaron Tan, TechTarget

Cloudflare outage: Firm blames global website outage on routine software update gone rogue

Content delivery provider traces outage back to failings that occurred during a routine update to its web application firewall service Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

A glossary of 10 essential network security terms

This network security glossary covers both old and new key terms -- such as zero trust networks and microsegmentation -- that can bolster anyone's security vocabulary. Continue Reading

By

• Michaela Goss, Senior Site Editor

Sweden’s Protective Security Act targets cyber risks

IT suppliers must comply with tighter cyber security requirements, but are being offered help from government agencies Continue Reading

By

• Gerard O'Dwyer

Podcast: The Computer Weekly Downtime Upload – Episode 22

In this week’s episode of the Computer Weekly Downtime Upload podcast, Brian McKenna, Caroline Donnelly and Clare McDonald talk about digital transformation in the NHS, Sky’s efforts to get more women working in tech and how big businesses could be risking extinction by ignoring IT Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Huge jump in cyber incidents reported by finance sector

The number of cyber incidents reported by financial services firms increased nearly 12-fold in 2018 from 2017, mainly due to third-party failures, highlighting several key areas that need improvement Continue Reading

By

• Warwick Ashford, Senior analyst

How to get the basics of mobile device management right the first time

When adopting mobile device management, there are often fears around implementation and whether or not the strategy is even required Continue Reading

By

• Rene Millman

Dutch bank and researchers begin defence against quantum computing’s dark side

ABN Amro is working with QuTech to ensure that banks can protect data against quantum computers in the future Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

APT attack on telcos highlights need for comprehensive defence

A global cyber attack against multiple telecommunications firms underlines need for comprehensive approach to cyber defence, say researchers and industry commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Enterprises challenged with security basics

Visibility, security tool overload and manual reporting are cited as top concerns by UK security leaders, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Converged security takes centre stage at IFSEC

The importance and benefits of combining physical and cyber security was underlined in the opening session of the 2019 IFSEC security conference Continue Reading

By

• Warwick Ashford, Senior analyst

Asco breaks silence on ransomware attack

A week after reportedly being hit by a ransomware attack, Belgium-based mechanical equipment manufacturer Asco has finally provided some details Continue Reading

Inside F5’s cyber security playbook

F5 Networks' CISO talks up measures that the application delivery and security specialist is employing to fend off cyber attackers that come knocking on its doors Continue Reading

By

• Aaron Tan, TechTarget

Innovation drives Nominet to cyber security

Embracing an innovation strategy for a mature organisation led domain name registry Nominet to found a cyber security business based on its core expertise, its CEO tells London Tech Week Continue Reading

By

• Warwick Ashford, Senior analyst

CW Europe: Why are Dutch companies slow to take advantage of the IoT?

Many organisations in the Netherlands are missing out on the benefits of the internet of things because they lack awareness of its potential. Also read why construction of Apple's first non-US datacentre has halted in Denmark, and why some scientists have raised questions about the effects of 5G mobile phone radiation on public health. Continue Reading

AI-enabled cyber attacks a reality soon, warns Mikko Hypponen

Technology continues to shape human conflict and artificial intelligence will be no exception, so business needs to up its ability to detect attacks and respond, says security expert Continue Reading

By

• Warwick Ashford, Senior analyst

Cisco shows off AI-driven network analysis at customer event

New tools to help IT departments better understand network behaviour and predict potential problems were among a series of announcements made on the opening day of Cisco Live in the US Continue Reading

By

• Alex Scroxton, Security Editor

MP brands Huawei exec a ‘moral vacuum’ as operators demand 5G clarity

Huawei chief security officer John Suffolk faces tough questions from parliament’s Science and Technology Select Committee over the firm’s links to the Chinese government Continue Reading

By

• Alex Scroxton, Security Editor

Implementing Dmarc a top priority for UK

Basic email security should be a top priority for UK firms, followed by reducing third-party web exposure and monitoring data flows leaving the enterprise, a Rapid7 study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Large firms look to zero-trust security to reduce cyber risk

In the face of increasing cyber breach risk as organisations move to hybrid multi-cloud IT environments, just over half of large firms in Europe are planning a zero-trust approach to security Continue Reading

By

• Warwick Ashford, Senior analyst

NotPetya offers industry-wide lessons, says Maersk’s tech chief

There are several key industry-wide lessons to be learned from the NotPetya attack in 2017, according to the information chief at one of the companies most heavily impacted Continue Reading

By

• Warwick Ashford, Senior analyst

How ASEAN firms are using AI to combat cyber threats

Artificial intelligence tools are becoming a vital part of the security arsenal for organisations and cyber criminals alike Continue Reading

By

• Ai Lei Tao

Joining the dots to deliver effective cyber security

In too many organisations, cyber security is dislocated and siloed. Security chiefs need to take a more joined-up approach, but that is likely to mean a rethink of how the security team operates Continue Reading

By

• Ed Tucker, Human Firewall

DNS – a security opportunity not to be overlooked, says Nominet

Domain name system data is the best-kept secret for eliminating network cyber threats, Nominet tells Infosecurity Europe attendees Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses investing blindly in cyber security

Businesses need to find out what their real cyber risks and weaknesses are before investing in new technologies, says ethical hacker Continue Reading

By

• Warwick Ashford, Senior analyst

Beware of security blind spots in encrypted traffic

The growth of encrypted traffic has put the spotlight on intrusion prevention systems that help to surface cyber attacks conducted under the cloak of network encryption Continue Reading

By

• Aaron Tan, TechTarget

2.3 billion business and consumer data files exposed online

In the year since the GDPR compliance deadline, the number of data files exposed online without adequate protection is up more than 50% due to misconfigured security controls, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Turla APT group beefs up cyber attack tool

An advanced persistent threat cyber espionage group has improved its tools to attack diplomatic targets, making their activities more difficult to detect and block Continue Reading

By

• Warwick Ashford, Senior analyst

Lapse in LinkedIn security certificate update

A lapse in the update of LinkedIn’s security certificate has once again underlined the importance of keeping track to avoid disruptions and phishing attacks, and how even big players are failing to get it right Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Effective IT segregation must involve the business

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• RV Raghu, ISACA

US grants Huawei stay of execution

US Commerce Department temporarily restores Huawei’s ability to maintain its existing networks and smartphone user base Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: In-app segregation more intelligent and permissive

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Simon Persin, Turnkey Consulting

Security Think Tank: IT asset separation is a risk-based decision

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Deshini Newman, (ISC)²

Google cuts off Huawei from Android ecosystem

Google decision follows an executive order signed by President Trump, but Huawei insists US businesses and consumers will be the real losers Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Challenges of segregation

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Mike Gillespie

Vulnerability assessment done. Now what?

Vulnerability assessment establishes the current state of an organisation’s cyber security, but to meet industry best practices, companies should go beyond that to achieve continuous improvement Continue Reading

By

• Sam Bocetta

Trump bans ‘adversary’ tech from US telecoms in blow at Huawei

US president announced ban on telecoms equipment from designated “adversary” states, including China Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

Security Think Tank: Proper segregation is more important than ever

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

APAC firms on the back foot in cyber security

Most Asia-Pacific organisations did not consider cyber security until after their digital transformation projects had begun, new survey finds Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: How to realise the benefits of security zoning

What are the security benefits and challenges of segregating IT environments, and how best are these challenges overcome? Continue Reading

By

• Paddy Francis