Privacy and data protection

IoT buyers eye private network deployments for added security

Fully private, segregated networks for IoT deployments are becoming increasingly attractive to many organisations, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Revealed: Surveillance camera network that covered Dominic Cummings’ lockdown travel

A network of automatic number plate recognition and local authority traffic cameras could help police track Downing Street chief of staff Dominic Cummings’ journeys to Durham and Barnard Castle during the Covid-19 lockdown Continue Reading

By

• Duncan Campbell , 2QQ Ltd, Sussex University

GDPR at two: How far we’ve come, how far we still have to go

Marking two years of the General Data Protection Regulation, industry voices weigh in on the state of data protection and privacy, consider what has changed, and what still needs to change Continue Reading

By

• Alex Scroxton, Security Editor

Enterprise clouds hammered by cyber attacks during pandemic

Remote workers logging onto enterprise cloud service accounts are an easy access point for attackers, says McAfee Continue Reading

By

• Alex Scroxton, Security Editor

PropertyGuru touts 3D virtual viewings with StoryTeller

Southeast Asian property portal PropertyGuru rolls out new capability in its FastKey platform that lets developers showcase properties to prospective buyers through 3D visualisation Continue Reading

By

• Aaron Tan, TechTarget

Fears contact-tracing app will open the floodgates for cyber criminals

Study of UK consumers reveals worries over an uptick in cyber crime and a lack of trust in government Continue Reading

By

• Alex Scroxton, Security Editor

Max Schrems accuses Ireland of ‘Kafkaesque’ delay in Facebook GDPR investigation

Privacy campaigner Max Schrems has urged the European Commission to intervene after the Irish Data Protection Commission allegedly used ‘Kafkaesque’ tactics to delay investigations into Facebook’s compliance with GDPR Continue Reading

By

• Bill Goodwin, Computer Weekly

StrandHogg mobile vulnerability has evil twin

Variant of the dangerous StrandHogg vulnerability affecting Android phones could allow hackers to access almost all apps on a target device Continue Reading

By

• Alex Scroxton, Security Editor

Android security vulnerabilities differ by country, say researchers

Manufacturers of Android devices including Huawei, Samsung and Xiaomi shipped devices with different levels of security in different regions, leaving their users exposed to attack Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Temper tantrums ahead as GDPR enters its terrible twos?

On the General Data Protection Regulation’s second birthday, Tim Hickman, a data protection lawyer and partner at White & Case LLP, discusses the regulation’s teething troubles and assesses how best to maintain optimum compliance Continue Reading

By

• Alex Scroxton, Security Editor

Can Lady Gaga and Madonna get people to take IT security seriously?

In this week’s Computer Weekly, after hackers threatened to release data from a US law firm’s celebrity clients, will people finally take cyber security seriously? Designing software for older users makes systems better for all – we examine how. And the IT chief at TSB explains how the bank recovered from its 2018 IT disaster. Read the issue now. Continue Reading

EasyJet to be sued over customer data breach

If successful, airline’s potential liability for the loss of millions of customer records could be as high as £18bn Continue Reading

By

• Alex Scroxton, Security Editor

How effective security training goes deeper than ‘awareness’

Cyber criminals are constantly developing their techniques and strategies, so security training needs to do the same Continue Reading

By

• Adenike Cosgrove

Covid-19 will leave organisations exposed to higher cyber risks

Hacking attacks and phishing emails could become the new norm, according to research by the World Economic Forum Continue Reading

By

• Bill Goodwin, Computer Weekly

Hancock to Harman: No contact-tracing privacy law

Health secretary claims existing data protection law is good enough to guarantee the security of contact-tracing data Continue Reading

By

• Alex Scroxton, Security Editor

NCSC discloses multiple vulnerabilities in contact-tracing app

National Cyber Security Centre has received mountains of feedback on the security of the government’s Covid-19 contact-tracing app, and has now taken the step of making multiple disclosures Continue Reading

By

• Alex Scroxton, Security Editor

Serco exposes contact tracers’ data in email error

Error saw almost 300 coronavirus contact tracers’ email addresses made visible to other recipients of the message Continue Reading

By

• Alex Scroxton, Security Editor

Personal devices putting Singapore employers at risk

More than half of Singapore respondents to a CrowdStrike-commissioned survey believe their devices are only somewhat secure against advanced cyber threats Continue Reading

By

• Aaron Tan, TechTarget

Responsible Cyber acquires Secucial in S$7m deal

Singapore startup Responsible Cyber plans to bolster its Immune platform with access control management capabilities, and sets out to expand its global footprint Continue Reading

By

• Aaron Tan, TechTarget

Microsoft Build 2020: Focus on protecting data for AI development

Microsoft Build is always a vital event for developers across the IT industry. This year, Microsoft has expanded its AI emphasis Continue Reading

By

• Nicholas McQuire

Cancelled NCSC CyberUK event gets green light for 2021

The NCSC’s popular CyberUK event has been rescheduled to next year, and will again take place in Newport in south Wales Continue Reading

By

• Alex Scroxton, Security Editor

GDPR wholly inappropriate to govern contact-tracing data

Human Rights Committee Chair Harriet Harman says current data protection law is not up to the job of governing the data collected by the Covid-19 contact-tracing app Continue Reading

By

• Alex Scroxton, Security Editor

Nine million EasyJet customer details lost in data breach

Cyber attack on EasyJet’s systems originated from a highly sophisticated source, says the airline Continue Reading

By

• Alex Scroxton, Security Editor

Sodinokibi cyber criminals plot to ‘auction’ Madonna data

The cyber criminal gang behind a recent attack on a New York law firm is planning to auction off its client data, one person at a time Continue Reading

By

• Alex Scroxton, Security Editor

Huawei: US using technological strengths to ‘crush’ companies outside its own borders

Chinese tech giant hits back at White House decision to extend technology ban and says it will ultimately be self-harming Continue Reading

By

• Joe O’Halloran, Computer Weekly

Contact tracing: The privacy vs protection debate

The Covid-19 pandemic has necessitated extreme measures not seen in peacetime for over 100 years. Contact-tracing apps are being developed as a tool for managing the pandemic, but are they a step too far? Continue Reading

Malaysia’s data protection practices still have some way to go

Some Malaysian firms are not using data protection tools to the fullest potential, while others only think about data protection after a breach Continue Reading

By

• Edwin Yapp

Law firm hackers threaten to release dirt on Trump

A new ransom demand of $42m has been made against New York law firm Grubman, Shire, Meiselas and Sacks, and it may be the largest ever, say security experts Continue Reading

By

• Alex Scroxton, Security Editor

Harman seeks to bring private member’s bill over contact tracing

Chair of Human Rights Committee aims to put the proposed Contact Tracing (Data Protection) Bill 2020 before parliament as a private member’s bill if necessary Continue Reading

By

• Alex Scroxton, Security Editor

China targeting Covid-19 researchers through IT suppliers, claims US

The US CISA says it is seeing targeting and attempted network compromise of Covid-19 research centres by China Continue Reading

By

• Alex Scroxton, Security Editor

UK’s contact-tracing app targeted by scammers

Even though it is only operational on the Isle of Wight as a beta test, the UK government’s coronavirus contact-tracing app has already attracted the attention of cyber criminals Continue Reading

By

• Alex Scroxton, Security Editor

SK Telecom brings quantum security to the masses

The South Korean telco is readying the world’s first 5G smartphone equipped with a quantum random number generator chipset Continue Reading

By

• Aaron Tan, TechTarget

Surveillance capitalism in the age of Covid-19

Could the Covid-19 coronavirus pandemic further consolidate surveillance capitalist practices and enterprises? Author Shoshana Zuboff warns Computer Weekly it is possible Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Report reveals inadequate cyber security at Schiphol Airport

A report has revealed problems with critical security systems in Amsterdam’s Schiphol Airport Continue Reading

By

• Kim Loohuis

Podcast: UK SME planning and compliance for ‘the new normal’

We look at how UK SMEs face a “new normal” following the coronavirus lockdowns and how they can plan for compliance with more remote working and a new data landscape Continue Reading

By

• Antony Adshead, Storage Editor

Nation state APT groups prefer old, unpatched vulnerabilities

The Cybersecurity and Infrastructure Security Agency and the FBI have published details of the most commonly exploited vulnerabilities of recent years, and there are some “classics” on the list Continue Reading

By

• Alex Scroxton, Security Editor

Can Lady Gaga and Madonna get people to take security seriously?

What does it take to get people to pay attention to cyber security? A celebrity law firm hack may hold some answers Continue Reading

By

• Alex Scroxton, Security Editor

British public largely distrustful of technology companies, says report

High levels of distrust in the motivations of technology companies and a lack of meaningful influence over their behaviour has left the British public feeling digitally disempowered, says Doteveryone report Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Microsoft fixes 16 critical vulnerabilities on Patch Tuesday

The trend towards mammoth Patch Tuesdays continues as Microsoft fixes 111 vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

European comms bodies set up standards group, call for vigilance on contact-tracing apps

New ETSI group will develop standardisation framework for secure smartphone-based proximity tracing systems, helping to break Covid-19 transmission chains Continue Reading

By

• Joe O’Halloran, Computer Weekly

Draft Covid-19 contact tracing legislation proposes formal oversight

Human Rights Committee chair Harriet Harman has outlined a proposed bill to guarantee the security and privacy of data generated by the UK’s Covid-19 contact tracing app Continue Reading

By

• Alex Scroxton, Security Editor

MPs take part in first live test of remote voting during Covid-19 debate

MPs will use phones and computers to vote from their homes in a House of Commons debate today in the biggest change in parliamentary procedure for 150 years Continue Reading

By

• Bill Goodwin, Computer Weekly

Details released of second UK contact-tracing app development

Contractual documents show Zuhlke Engineering receiving an official start date of 6 May to supply a managed delivery team to support and run proximity mobile application and services for the UK Continue Reading

By

• Joe O’Halloran, Computer Weekly

Pay the ransom and double your recovery costs, report warns

Paying cyber criminals a ransom to recover your data adds over half a million dollars to the cost of organisational recovery, says Sophos Continue Reading

By

• Alex Scroxton, Security Editor

Police failing to consult public on new technologies

A freedom of information campaign has revealed that UK police are largely failing to consult the public on their use of new technologies, with the potential to undermine the principle of policing by consent Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

APAC firms still coming to grips with data protection

More governments in Asia are implementing data protection regimes, but challenges such as checkbox compliance and the lack of effective staff training remain Continue Reading

By

• Aaron Tan, TechTarget

How Australian firms can plug data protection gaps

Australian organisations can address data protection challenges by creating roles such as a data governance lead, classifying data and improving employee awareness of cyber hygiene Continue Reading

By

• Stephen Withers

Banks failing to protect customers from coronavirus fraud

Just 13 of the 64 banks accredited for the government’s Coronavirus Business Interruption Loan Scheme have implemented Dmarc protection Continue Reading

By

• Alex Scroxton, Security Editor

Will the NHS’s Covid-19 contact-tracing app work?

In this week’s Computer Weekly, we get the expert reaction to find out if the NHS contact-tracing app will work. Staying close to clients is crucial through lockdown – we look at the importance of customer experience management. And imagine implementing a digital transformation plan in two weeks – one CIO explains how he did it. Read the issue now. Continue Reading

Pitney Bowes hit by Maze in second ransomware attack in a year

Shipping services firm falls victim to Maze ransomware just seven months after a previous major attack Continue Reading

By

• Alex Scroxton, Security Editor

Zoom buys secure messaging service Keybase

Unified comms platform Zoom says the acquisition of Keybase will finally let it bring end-to-end encryption to the table Continue Reading

By

• Alex Scroxton, Security Editor

Privacy International to Palantir: We are watching you

Privacy International expresses a qualified welcome for Palantir’s responses to questions about its data integration role in the NHS Covid-19 data store, but continues to raise concerns Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

Storage 101: Replication vs backup, and synchronous vs asynchronous

Storage 101: Can replication replace backup? What are the pros and cons of synchronous and asynchronous backup? What’s the best way to mix backup and replication? Continue Reading

By

• Antony Adshead, Storage Editor

SilverTerrier cyber crime group targets Covid-19 key workers

Organisations on the front line in the fight against coronavirus are under attack from Nigeria’s SilverTerrier criminal gang Continue Reading

By

• Alex Scroxton, Security Editor

Contact-tracing app fails to protect privacy and human rights

Reassurances over the security and human rights implications of NHSX’s approach to developing its Covid-19 contact-tracing app are insufficient, says the cross-bench Human Rights Committee Continue Reading

By

• Alex Scroxton, Security Editor

Facebook announces oversight board members

New board will rule on freedom of expression issues and make policy recommendations to social media giant. Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

FBI search warrants reveal Trump aide’s messages to WikiLeaks founder Julian Assange

FBI search warrants reveal Trump campaigner Roger Stone sent private messages to WikiLeaks founder Julian Assange after the site published thousands of documents that damaged Hillary Clinton’s election campaign Continue Reading

By

• Bill Goodwin, Computer Weekly

Next round of Zoom updates targets consumer security

Casual consumer users of Zoom will get additional protections in an update to be released over the long weekend Continue Reading

By

• Alex Scroxton, Security Editor

NCSC Covid-19 scam reporting service sees more than 160,000 reports

The general public has taken to the NCSC’s scam reporting service like ducks to water, with thousands of suspicious emails reported to it in just two weeks Continue Reading

By

• Alex Scroxton, Security Editor

Criminal justice system is failing cyber crime victims

Victims of cyber crime face barriers to reporting, receiving support and achieving justice, says a Home Office-backed study Continue Reading

By

• Alex Scroxton, Security Editor

Re-purposing data and questionable effectiveness could undermine trust in NHS contact-tracing app

Experts call for greater clarity over how contact-tracing data will be used, while discussing the limitations of the coronavirus app Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

HMRC tackles almost 300 coronavirus phishing websites

Of 292 websites removed since lockdown began on 23 March, 237 were proactively identified by HMRC and 55 were flagged by the public Continue Reading

By

• Alex Scroxton, Security Editor

End-users failing to protect themselves online

Remote workers and stuck-at-home consumers are taking silly risks with their security during the coronavirus pandemic, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Security teams are key workers and need support

Cyber criminals are enjoying a boom during the Covid-19 pandemic, and security teams are working overtime as a result. How can security pros manage their increased workload, safeguard their mental wellbeing, and avoid burnout? Continue Reading

By

• Petra Wenham

Contact tracing: The privacy vs protection debate

The Covid-19 pandemic has necessitated extreme measures not seen in peacetime for over 100 years. Contact-tracing apps are being developed as a tool for managing the pandemic, but are they a step too far? Continue Reading

By

• Peter Ray Allison

Coronavirus: NCSC issues urgent alert for healthcare sector

UK National Cyber Security Centre and US Cybersecurity and Infrastructure Security Agency say they are seeing large-scale campaigns targeting healthcare bodies and medical research organisations Continue Reading

By

• Alex Scroxton, Security Editor

GoDaddy owns up to October 2019 data breach

Web hosting services provider has suffered yet another security incident, confirming that an unauthorised individual accessed hosting accounts Continue Reading

By

• Alex Scroxton, Security Editor

Building security and privacy into contact-tracing apps

Governance and data decentralisation are among measures that organisations can take to allay security and privacy concerns over contact-tracing apps, according to RSA Continue Reading

By

• Aaron Tan, TechTarget

Xen Orchestra latest victim of Salt cryptojackers

More victims of cyber criminals exploiting two critical Salt vulnerabilities are coming forward Continue Reading

By

• Alex Scroxton, Security Editor

NHSX contact-tracing app needs legislative oversight

Legal experts have told Parliament’s Human Rights Committee that legislation is desirable to ensure public trust in the data security of the Covid-19 coronavirus contact-tracing app Continue Reading

By

• Alex Scroxton, Security Editor

Assange extradition hearing to take place in September following coronavirus lockdown

An extradition hearing against WikiLeaks founder Julian Assange has been delayed by four months, after defence and prosecution lawyers said the Covid-19 lockdown would make it impractical to hold a fair hearing in May Continue Reading

By

• Bill Goodwin, Computer Weekly

Podcast: How to get cyber accountability on the board agenda

We look at how boards should carry out strategic and operational risk profile assessments and plan for compliance on an ongoing basis to avoid fines and damage to the business Continue Reading

By

• Antony Adshead, Storage Editor

Four risks to data privacy and governance amid Covid-19

EY privacy experts assess some of the novel risks to data privacy, protection and governance during the Covid-19 coronavirus pandemic Continue Reading

By

• Pragasen Morgan and Paul Smith

IT Priorities 2020: Compliance and risk are top security concerns

When it comes to security, buyers are prioritising solutions and services that address compliance issues, risk management and data protection, according to the Computer Weekly/TechTarget IT Priorities 2020 study Continue Reading

By

• Alex Scroxton, Security Editor

Why you should think before you Zoom

Feel free to use Zoom during the coronavirus lockdown, but think before you discuss anything confidential Continue Reading

By

• Dai Davis, Percy Crow Davis & Co

Cyber security skills courses go online during pandemic

The government is turning to online learning to find the next generation of cyber security talent Continue Reading

By

• Alex Scroxton, Security Editor

Critical SaltStack vulnerability affects thousands of datacentres

Critical vulnerabilities in the Salt remote task and configuration framework enable hackers to take control of cloud servers and must be patched right away Continue Reading

By

• Alex Scroxton, Security Editor

Mobile banking customers at risk from new EventBot trojan

Customers of Barclays, HSBC, Santander and many other banks should be alert to a dangerous new trojan Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: GCHQ gets access to NHS data to beef up security

Health secretary gave GCHQ emergency powers to obtain information relating to the security of its networks and IT systems at the beginning of April, it has emerged Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Call for extension to European payment security standard deadline

Payment processors across Europe want more time to meet the SCA payment security standard Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NHSX on track for May launch of Covid-19 contact-tracing app but challenges remain

Leading UK scientific experts assure MPs that much-anticipated application will be ready for launch in May but concede that challenges exist on achieving meaningful uptake Continue Reading

By

• Joe O’Halloran, Computer Weekly

Under the spotlight, video apps rush to strengthen security

Most popular videoconferencing applications now meet Mozilla’s minimum security standards, with fierce competition and public pressure driving rapid improvement Continue Reading

By

• Alex Scroxton, Security Editor

Black Rose Lucy ransomware now posing as FBI porn warning

A new strain of Russian-developed ransomware impersonates US federal law enforcement to force payment, says Check Point Continue Reading

By

• Alex Scroxton, Security Editor

Julian Assange extradition hearing postponed amid coronavirus lockdown

Julian Assange’s lawyers say they have been unable to communicate or share legal documents with the WikiLeaks founder to enable them to prepare a defence in time for a planned extradition hearing in May Continue Reading

By

• Bill Goodwin, Computer Weekly

Microsoft patches .gif file vulnerability in Teams

Vulnerability could have enabled cyber criminals to use a malicious .gif file to scrape user data and take over Teams accounts Continue Reading

By

• Alex Scroxton, Security Editor

UK tech companies launch online safety body

Online Safety Tech Industry Association unites 14 technology companies to drive conversation and policy around online safeguarding Continue Reading

By

• Alex Scroxton, Security Editor

How Vonage is riding the e-commerce wave in Asia

The surge in online sales across Asia has boosted demand for cloud-based communications services as more e-commerce players look to integrate text messaging, voice and video into customer engagement platforms Continue Reading

By

• Aaron Tan, TechTarget

Australia’s CovidSafe app debuts, source codes to follow

Australia’s contact tracing app has been downloaded more than 1.1 million times, even as privacy concerns linger on Continue Reading

By

• Stephen Withers

Coronavirus: Dutch Covid-19 tracking app stirs national debate

Privacy concerns raised over mobile app to help track and control the spread of coronavirus in the Netherlands Continue Reading

By

• Kim Loohuos

The Security Interviews: Can AV go from dodgy scareware to cyber hero?

Alun Baker, CEO of Clario, is on a mission to rehabilitate the image of consumer security products and take the fear out of selling antivirus. We find out how things are changing Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware-stricken Travelex up for sale

Travelex’s parent Finablr is washing its hands of the ransomware-stricken forex provider as it struggles with the twin shocks of the Covid-19 pandemic and a developing fraud scandal Continue Reading

By

• Alex Scroxton, Security Editor

Technology has brought us together, but can it lead us out of lockdown?

The government needs to tell us more about the NHSX contact tracing app - choices made now around privacy and transparency will affect all our lives as we aim to ease lockdown, says the shadow digital minister Continue Reading

By

• Chi Onwurah, Labour

Public authorities set to receive expanded surveillance powers

UK government wants to extend the number of public authorities able to obtain communications data using mass surveillance Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

iOS zero-day leaves iPhone users dangerously exposed

Researchers identify dangerous vulnerabilities in Apple’s iOS operating system that allow remote code execution on target devices Continue Reading

By

• Alex Scroxton, Security Editor

Zoom to roll out fresh cyber security updates

New features include support for advanced AES 256-bit encryption Continue Reading

By

• Alex Scroxton, Security Editor

A carrot-and-stick approach to fixing cyber security complacency

With a majority of IT decision-makers holding the opinion that their employers are complacent when it comes to data protection, we look at what needs to be fixed, and how to fix it Continue Reading

By

• Matthew Staff

NCSC overwhelmed by response to coronavirus campaign

The UK’s NCSC has taken down more than 80 malicious web campaigns and received 5,000 reports of suspicious emails within 24 hours of launching reporting service Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Banking and mobile sectors collaborate to stop text scams

Initiative aims to protect 50 genuine brands and government organisations from being impersonated by cyber criminals Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Remote compliance assessments and how they are done

Remote working adds to IT compliance risks, but doesn’t remove the need to assess compliance. How are remote compliance assessments carried out and how can you prepare for them? Continue Reading

By

• Antony Adshead, Storage Editor

Coronavirus: Cyber criminals may be changing tactics

Cyber criminals “may soon shift to heavier exploitation of footholds established through phishing and other scams”, warns Cyber Threat Coalition Continue Reading

By

• Alex Scroxton, Security Editor