Privacy and data protection

UK data exchanges with EU can continue after adequacy decision - but for how long?

For now European businesses can continue to send data to the UK without additional safeguards and paperwork. How long will it last? Continue Reading

By

• Ben Rapp

Cops seize criminal VPN used by ransomware gangs

A coordinated sting has ended the operations of the DoubleVPN service, the owners of which are accused of harbouring cyber criminal activity Continue Reading

By

• Alex Scroxton, Security Editor

EU recognises UK data protection adequacy but warns against divergence

The European Commission has granted the UK data adequacy, allowing data sharing between the EU and the UK, but warns it may yet be revoked Continue Reading

By

• Bill Goodwin, Computer Weekly

Banking tech fraud: How to trace and recover your money

Even when stolen assets are sent offshore, the special powers of the English civil court system mean all may not be lost Continue Reading

By

• Nathan Capone and Stephen Cartwright

Is the UK government planning to rewrite GDPR?

In this week’s Computer Weekly, a government taskforce on post-Brexit regulations has recommended changes to GDPR in the UK – we examine the implications. The NHS has launched a new data strategy - we look at what it means for your medical records. And we ask how to avoid the performance problems that affect private cloud. Read the issue now. Continue Reading

Video game industry under relentless cyber attacks

Web application attacks against the global video game industry grew by 340% in 2020 as more people turn to gaming during pandemic lockdowns Continue Reading

By

• Aaron Tan, TechTarget

UK’s FCA bans crypto exchange Binance as crackdown spreads

Ban on Binance Markets comes amid a wider global crackdown on the largely unregulated global market for cryptocurrencies and related assets. Continue Reading

By

• Alex Scroxton, Security Editor

public key

In cryptography, a public key is a large numerical value that is used to encrypt data. Continue Reading

By

• TechTarget Contributor

HMRC-branded phishing scams surge despite protections

The number of HMRC-branded phishing scams surged 87% in the past 12 months, according to latest revealed figures Continue Reading

By

• Alex Scroxton, Security Editor

How CIOs can help their organisations accelerate digital transformation

Companies need to win the trust of their customers to gather the data they need to transform their businesses Continue Reading

By

• Dan Higgins, EY

Lazada rolls out public bug bounty programme

Regional e-commerce giant Lazada is looking to uncover more vulnerabilities that could compromise data security in a public bug bounty programme that offers up to $10,000 per bounty Continue Reading

By

• Aaron Tan, TechTarget

end-to-end encryption (E2EE)

End-to-end encryption (E2EE) is a method of secure communication that prevents third parties from accessing data while it's transferred from one end system or device to another. Continue Reading

By

• Ben Lutkevich, Site Editor
• Madelyn Bacon, TechTarget

NCSC CEO: UK-Ireland collaboration crucial to stop cyber threats

Speaking at a conference in Dublin, NCSC Lindy Cameron is highlighting the importance of continued collaboration between the UK and Ireland to protect shared interests and counter security threats Continue Reading

By

• Alex Scroxton, Security Editor

Anglesey schools offline after cyber attack

Isle of Anglesey County Council is investigating a cyber attack that has forced it to shut down systems at all five secondary schools on the island Continue Reading

By

• Alex Scroxton, Security Editor

CMA to probe Amazon and Google over fake reviews

The CMA has opened an investigation into Amazon and Google over possible breaches of consumer protection law Continue Reading

By

• Alex Scroxton, Security Editor

Google hands third-party cookies a stay of execution

Google’s proposed Privacy Sandbox initiative – which will see third-party cookies phased out in the Chrome web browser – has been pushed back to 2023 Continue Reading

By

• Alex Scroxton, Security Editor

Stalkerware apps becoming normalised among young people

Data in a new report appears to show that dangerous stalkerware apps are becoming normalised in younger age groups Continue Reading

By

• Alex Scroxton, Security Editor

City of York picks Barracuda Networks for data protection

York Council needed to refresh its backup service to bring new security protections after it went ‘all-in’ on Microsoft Office 365 Continue Reading

By

• Alex Scroxton, Security Editor

UK councils reported over 700 data breaches to ICO in 2020

Data disclosed under the Freedom of Information Act reveals an estimated 700 data breaches were reported to the Information Commissioner’s Office by local councils last year Continue Reading

By

• Alex Scroxton, Security Editor

Openness can protect Dutch companies against ransomware

Dutch businesses that suffer ransomware attacks need to be more open about it, if this growing problem is to be brought under control Continue Reading

By

• Kim Loohuis

European ‘chat control’ plans in the name of ‘child safety’ threaten end-to-end encryption

Proposals by European Commission to search for illegal material could mean the end of private messaging and emails Continue Reading

By

• Patrick Breyer

NSPCC, IWF help under-18s scrub their nude photos from the web

Report Remove tool is designed to be used by under-18s to report nude images or videos of themselves that have appeared online Continue Reading

By

• Alex Scroxton, Security Editor

A new three-year plan for digital government

In this week’s Computer Weekly, the new CEO of the Gov-ernment Digital Service, Tom Read, explains his three-year strategy for improving online public services. EU attempts to regulate AI are under fire – we examine the issues. And we find out how Bupa is turning to the cloud to deliver per-sonalised healthcare. Read the issue now. Continue Reading

Parliamentary devices left in taxis, buses, trains and pubs

Nearly 100 devices belonging to parliamentary staffers, including MPs and peers, were lost or stolen over the course of 2019 and 2020 Continue Reading

By

• Alex Scroxton, Security Editor

NHS App reaches six million users, thanks to Covid vaccine feature

More than two million new users have downloaded the NHS App since it was updated in May to include Covid-19 vaccination status Continue Reading

By

• Alex Scroxton, Security Editor

ICO issues guidance on facial recognition in public spaces

Information commissioner’s concern over the problematic use of facial recognition in public spaces has prompted her to publish official guidance on its deployment, while civil society calls for an outright ban Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Lorca Ignite programme targets breakout cyber talent

Six of the most successful companies to have come through Lorca’s existing accelerators are being inducted into an intensive programme Continue Reading

By

• Alex Scroxton, Security Editor

Carnival Cruises hit by fourth cyber incident in a year

Latest data breach at Covid-hit cruise line comes hot on the heels of two recent ransomware attacks and a spring 2020 breach Continue Reading

By

• Alex Scroxton, Security Editor

Cyber crooks target Amazon Prime users ahead of retail bonanza

A surge in malicious domain registrations ahead of Amazon Prime Day indicates cyber criminals have set their sights on exploiting vulnerable shoppers Continue Reading

By

• Alex Scroxton, Security Editor

NHS Test and Trace picks Risk Ledger to secure supply chain

Risk Ledger’s technology promises ‘unparalleled’ visibility into NHS Test and Trace’s supply chain Continue Reading

By

• Alex Scroxton, Security Editor

Privacy pro salaries rise throughout pandemic, but at a cost

Data from the IAPP’s latest salary survey reveals some insight into how the pandemic impacted the privacy profession Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: How to build a government model to ‘hack for good’

Kyle Hanslovan started Huntress to give back after a career in the intelligence sector. After US authorities took action to help people hit by the Microsoft Exchange attacks, we discussed how governments can ‘hack for good’ Continue Reading

By

• Alex Scroxton, Security Editor

How healthcare organisations are tapping data analytics

Healthcare providers are harnessing data analytics to improve clinical and operational outcomes even as they continue to face challenges in data aggregation and data protection Continue Reading

By

• Aaron Tan, TechTarget

G7 commits to action on ransomware, digital privacy

The G7 urges Russia to do more to hold criminal ransomware gangs operating from within its borders to account as it commits to more action on the issue Continue Reading

By

• Alex Scroxton, Security Editor

Europe’s proposed AI regulation falls short on protecting rights

The European Commission’s proposal for artificial intelligence regulation focuses on creating a risk-based, market-led approach replete with self-assessments, transparency procedures and technical standards, but critics warn it falls short of being able to protect people’s fundamental rights and mitigating the technology’s worst abuses Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

FBI planned a sting against An0m cryptophone users over drinks with Australian investigators

Australian Federal Police and the FBI came up with the idea over drinks: build a cryptophone network with a built-in backdoor and sell it to crime gangs around the world Continue Reading

By

• Bill Goodwin, Computer Weekly

CMA secures commitments from Google on future of cookies

The Competition and Markets Authority is opening a consultation on commitments offered to it by Google to ensure its Privacy Sandbox proposals do not harm digital advertising markets Continue Reading

By

• Alex Scroxton, Security Editor

Australia names ‘strategic’ datacentre operators

Australia’s Digital Transformation Agency certifies Macquarie Telecom, Canberra Data Centres and Australian Data Centres as strategic operators for hosting government data Continue Reading

By

• Aaron Tan, TechTarget

How the pandemic changed backup

The Covid-19 pandemic forced big changes in how people work – we look at impacts on backup, including increased reliance on the cloud, plus security and compliance vulnerabilities and ransomware Continue Reading

By

• Stephen Pritchard

FBI arrests distributors accused of selling An0m encrypted phones to crime groups

Working with overseas law enforcement, the FBI has arrested eight people and named a further 13 accused of distributing An0m phones to organised crime groups Continue Reading

By

• Bill Goodwin, Computer Weekly

NHS Digital delays data collection plans until September

NHS Digital has postponed its proposed collection of GP data for two months, to allow more time for the public to understand the process and opt out if wanted Continue Reading

By

• Alex Scroxton, Security Editor

National data guardian calls for dialogue on NHS Digital GP plans

The UK’s national data guardian says it is important the public has clarity on how their confidential medical information will be used and kept secure under NHS data-sharing plans Continue Reading

By

• Alex Scroxton, Security Editor

The rise and rise of supply chain attacks

Supply chain attacks in Asia-Pacific and elsewhere have intensified as cyber threat actors look to exploit the weakest links in business and digital supply chains Continue Reading

By

• Aaron Tan, TechTarget

NGOs file complaints against Clearview AI in five countries

Privacy and human rights organisations have asked data protection regulators in the UK, France, Austria, Italy and Greece to investigate controversial facial recognition company Clearview AI Continue Reading

Police raids around world after investigators crack An0m cryptophone app in major hacking operation

Police in 16 countries carried out raids on after Australian Police and the FBI cracked an encrypted An0M communications network used by crime groups Continue Reading

By

• Bill Goodwin, Computer Weekly

Security Think Tank: What must a secure print strategy take into account?

Though rarely discussed in a cyber context, the prevalence of connected printers and MFPs poses security risks both technological and physical. What does a print security strategy need to take into account? Continue Reading

By

• Josh Foote

EU privacy chief investigates use of US cloud services

Use of Amazon and Microsoft’s cloud services by public sector bodies in the European Union is being scrutinised by the bloc’s privacy watchdog Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

NCSC updates schools ransomware guidance amid surge

The National Cyber Security Centre says it is dealing with a renewed surge of ransomware attacks targeting schools, colleges and universities Continue Reading

By

• Alex Scroxton, Security Editor

Campaigners plan legal action over NHS data sharing

Privacy coalition aims to force NHS Digital to push back its plans to scrape medical information on millions of patients into a central database Continue Reading

By

• Alex Scroxton, Security Editor

NHS Digital’s GP data-scraping plan must be publicised and delayed

The UK government must launch a national awareness campaign and delay this month’s planned GP data slurp, say privacy consultants Ben Rapp and Sara Newman Continue Reading

By

• Ben Rapp and Sara Newman

Updated standard contractual clauses will provide ‘legal certainty’ for transfer of data

Organisations have 18 months to update data transfer agreements, known as standard contractual clauses, or SCCs, to continue sharing data outside the European Union Continue Reading

By

• Bill Goodwin, Computer Weekly

Security Think Tank: Printers can’t be an ‘add-on’ in your cyber strategy

Though rarely discussed in a cyber context, the prevalence of connected printers and MFPs does pose security risks both technological and physical. What does a print security strategy need to take into account? Continue Reading

By

• Michael Howard and Kimberlee Ann Brannock, ISACA

BCS: Lack of communication over NHS GPDPR ‘astonishing’

The Chartered Institute for IT has warned that millions of people are not being properly informed of NHS Digital plans to harvest their data Continue Reading

By

• Alex Scroxton, Security Editor

Secrecy around EncroChat cryptophone hack breaches French constitution, court hears

French lawyers claim that investigators are unlawfully withholding details of a cryptophone hacking operation in a case that could impact UK prosecutions Continue Reading

By

• Bill Goodwin, Computer Weekly

Government action on ransomware epidemic gathers pace

The US government steps up action against ransomware operators, while the UK’s NCSC publishes guidance on preparing to deal with a ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Norway’s auditor general lifts lid on energy industry’s cyber security risks

Auditor General’s Office questions the security posture of Norway’s energy industry Continue Reading

By

• Gerard O'Dwyer

Tories fined over email data protection breaches

The Conservative Party broke the law by failing to properly keep records of who had unsubscribed from its mailing list Continue Reading

By

• Alex Scroxton, Security Editor

FireEye sold to private equity, Mandiant regains independence

FireEye has agreed to sell its products business and name to a private equity consortium, while Mandiant will spin out as an independent threat intel business Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Steps to a coherent print security strategy

Though rarely discussed in a cyber context, the prevalence of connected printers and MFPs poses security risks both technological and physical. What does a print security strategy need to take into account? Continue Reading

By

• Paddy Francis

What the Telecommunications (Security) Bill means for UK industry

The Telecommunications (Security) Bill is intended to reinforce the security of the UK telecommunications infrastructure, but what are the implications for industry? Continue Reading

By

• Peter Ray Allison

Security Think Tank: Printer risks go deep into IT history

Though rarely discussed in a cyber context, the prevalence of connected printers and MFPs does pose security risks both technological and physical. What does a print security strategy need to take into account? Continue Reading

By

• Mike Lloyd, RedSeal

Exagrid pays $2.6m to Conti ransomware attackers

Backup appliance specialist hit by Conti ransomware in May with cyber criminals downloading employee and customer data, confidential contracts and source code Continue Reading

By

• Valéry Rieß-Marchive, Rédacteur en chef
• Antony Adshead, Storage Editor

Privacy experts concerned over NHS data collection plans

Security and data privacy experts warn NHS Digital that its data collection plans could increase risk and cause a public backlash Continue Reading

By

• Alex Scroxton, Security Editor

Industry reflects on three years of GDPR

Looking back on 12 tumultuous months, we assess how GDPR has weathered the effects of the Covid-19 pandemic and Brexit, and consider what the coming year may hold for data protection Continue Reading

Loss of 150,000 police records made worse by management failures

The loss of 150,000 records from a number of national policing systems was caused by a human coding error, but made worse by process and management failures Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

NGOs file complaints against Clearview AI in five countries

Privacy and human rights organisations have asked data protection regulators in the UK, France, Austria, Italy and Greece to investigate controversial facial recognition company Clearview AI Continue Reading

By

• Bill Goodwin, Computer Weekly

More data stolen in January 2021 than in all of 2017, says report

The volume of data being stolen through breaches is growing steadily and shows no sign of slowing, according to a report from Imperva Continue Reading

By

• Alex Scroxton, Security Editor

Millions of pounds lost to crypto fraud on social media

More than £63m has been lost nationally by victims of investment fraud via a social media platform, says Action Fraud Continue Reading

By

• Alex Scroxton, Security Editor

GCHQ bulk interception programme breached privacy rights, Strasbourg court rules

European Court of Human Rights finds that the UK’s bulk surveillance programme breached citizens’ privacy rights Continue Reading

By

• Bill Goodwin, Computer Weekly

CyberSprinters game gives kids a head start, says NCSC

An online game for primary schools, clubs and youth organisations will teach children aged seven to 11 the fundamentals of staying safe online Continue Reading

By

• Alex Scroxton, Security Editor

Threat of group GDPR legal action haunts CISOs

The vast majority of security leaders questioned for a new report say they are concerned about the possibility of group legal settlements against them following a serious data breach Continue Reading

By

• Alex Scroxton, Security Editor

Industry reflects on three years of GDPR

Looking back on 12 tumultuous months, we assess how GDPR has weathered the effects of the Covid-19 pandemic and Brexit, and consider what the coming year may hold for data protection Continue Reading

By

• Alex Scroxton, Security Editor

Air India is latest victim of Sita hack

Data on millions of people who flew with Air India between 2011 and 2021 appears to have been compromised in the recent Sita supply chain attack Continue Reading

By

• Alex Scroxton, Security Editor

Dutch researchers build security software to mimic human immune system

Software could help IT systems develop immunity to some cyber attacks in a similar way to how the body fights infection Continue Reading

By

• Kim Loohuis

MEPs urge European Commission to revise UK adequacy decisions

Members of the European Parliament are calling for the European Commission to ensure EU citizens have greater privacy rights Continue Reading

By

• Bill Goodwin, Computer Weekly

CyberUK, bees and datacentres, Red Cross digital mapping – Computer Weekly Downtime Upload podcast

In this episode of the Computer Weekly Downtime Upload podcast, Caroline Donnelly and Brian McKenna are joined by Alex Scroxton, security editor, to discuss CyberUK, bees and datacentres, and the British Red Cross’ use of digital mapping to combat Covid-19 Continue Reading

By

• Alex Scroxton, Security Editor
• Caroline Donnelly, Senior Editor, UK
• Brian McKenna, Senior Analyst, Business Applications

Lack of developer attention to cloud security prompts alerts

The personal data of over 100 million Android users may have been put at risk through a variety of cloud service misconfigurations Continue Reading

By

• Alex Scroxton, Security Editor

Pandemic tech use heightens consumer privacy fears

Report on consumer attitudes to privacy finds evidence of a “heightened sense of fear” as digital footprints expand inexorably Continue Reading

By

• Alex Scroxton, Security Editor

HP taps micro virtual machines in endpoint security

HP’s Wolf Security technology stack uses an endpoint security controller to run computing tasks in micro virtual machines so that any potential malware can be isolated and contained Continue Reading

By

• Aaron Tan, TechTarget

UK government publishes framework on automated decision-making

The framework focuses on making the use of algorithms and automated decision-making systems within the public sector more ethical, transparent and accountable Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Reports of stolen Irish health service data being leaked online

Leaking of deeply confidential and personal information on patient healthcare marks a new low for the criminal Conti gang Continue Reading

By

• Alex Scroxton, Security Editor

Barclays first bank to publish online scam refund details

All banks must be transparent about the proportion of victims of authorised push payment fraud they refund, says consumer rights organisation Which? Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Flexxon bakes AI into SSDs to fight unknown threats

Singapore-based Flexxon has developed a solid-state drive that uses artificial intelligence to fend off malware and other unknown threats Continue Reading

By

• Aaron Tan, TechTarget

Microsoft EU Data Boundary dubbed ‘smoke and mirrors’

Data protection experts claim Microsoft’s decision to create an EU Data Boundary is a tacit admission that it routinely transfers and processes the personal data of European citizens outside the bloc Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Government response to National Data Strategy consultation depicts data as ‘asset, not threat’

Government responds to consultation with a promise of delivery, putting an emphasis on data as an asset, not a threat, and finding respondents keen on levelling up Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

Irish High Court dismisses legal bid by Facebook over EU-US data transfers

Latest twist in long-running legal battle sees Facebook lose legal bid to prevent the Irish Data Protection Commissioner suspending its transfer of data about European citizens to the US Continue Reading

By

• Bill Goodwin, Computer Weekly

Australian budget lends support to digital economy

Australia’s A$1.2bn Digital Economy Strategy ticks most of the right boxes, but some industry experts say areas such as broadband infrastructure and artificial intelligence are still underfunded Continue Reading

By

• Stephen Withers

Conti ransomware syndicate behind attack on Irish health service

More details continue to emerge of the significant ransomware attack on Ireland’s HSE Continue Reading

By

• Alex Scroxton, Security Editor

Government seeks input on supply chain security

Amid concerns that too few companies are addressing vulnerabilities in their supply chain, DCMS is opening a consultation on new measures to enhance security Continue Reading

By

• Alex Scroxton, Security Editor

Dutch police used deep learning model to predict threats to life

Dutch police developed a deep learning model in their EncroChat investigation to predict which messages contain serious threats to life Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor
• Bill Goodwin, Computer Weekly

The shape of fraud and cyber crime: 10 things we learned from 2020

While a pandemic-driven increase in cyber crime and an exacerbation of existing fraud trends were, to a large extent, to be expected, the LexisNexis Risk solutions UK cybercrime report 2020 still contained a few surprises Continue Reading

By

• Neira Jones

Okta and Auth0 to expand APAC coverage

Okta’s acquisition of rival Auth0 will enable both companies to expand their footprint in the Asia-Pacific region as demand for identity management services soars amid the pandemic Continue Reading

By

• Aaron Tan, TechTarget

NHSX data strategy due in ‘a few weeks’

NHSX director of policy and strategy Simon Madden says the long-awaited strategy is expected to “trigger huge debates” on issues such as access, choice and transparency, and will be published in draft form shortly to allow for consultation Continue Reading

By

• Lis Evenstad

Publishing exploit code does more harm than good, says report

Disclosing exploit code before patches are available gives malicious actors a ‘massive’ head-start, says Kenna Security Continue Reading

By

• Alex Scroxton, Security Editor

CW Benelux: Netherlands university launches centre of expertise in applied AI

Amsterdam University of Applied Sciences has launched a centre of expertise in applied artificial intelligence, and students from all faculties of the university will learn how to apply AI in their field of study. Also in this issue, read why a training ‘roadmap’ is needed to get Netherlands police officers up to speed with tackling cyber crime. Continue Reading

Refuge launches tech safety site for domestic abuse victims

Created with the help of survivors, Refuge’s resource site offers guidance on protecting yourself from tech-enabled domestic abuse Continue Reading

By

• Alex Scroxton, Security Editor

Verizon DBIR underscores year of unprecedented cyber challenge

Verizon 2021 Data Breach Investigations Report draws predictable conclusions as the impact of the Covid-19 pandemic continues to be felt Continue Reading

By

• Alex Scroxton, Security Editor

UK government publishes Online Safety Bill draft

Bill builds on previous commitments by the government, which has added new measures to uphold democracy and freedom of speech while making tech giants more accountable Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Inside DarkSide: Researchers share intel on break-out cyber gang

Security researchers swap information on the newly famous DarkSide ransomware gang, the group that doesn’t appear to understand what ‘being a criminal’ actually means Continue Reading

By

• Alex Scroxton, Security Editor

UK to fund national cyber teams in Global South

Government will commit millions of pounds to supporting vulnerable countries in establishing cyber capacity Continue Reading

By

• Alex Scroxton, Security Editor