Privacy and data protection

Coronavirus: Cyber criminals may be changing tactics

Cyber criminals “may soon shift to heavier exploitation of footholds established through phishing and other scams”, warns Cyber Threat Coalition Continue Reading

By

• Alex Scroxton, Security Editor

Amazon’s Whole Foods uses heat mapping to track unionisation efforts

Whole Foods is using mapping technology to predict where strikes or union activity will happen, but organisers can use similar tools for the inverse of bolstering their actions too Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Coronavirus: HMRC job retention scheme targeted by cyber criminals

The UK government’s scheme to pay furloughed employees 80% of their wages is being targeted by cyber criminals Continue Reading

By

• Alex Scroxton, Security Editor

When data protection is not enough

Organisations should take a holistic approach to data protection and cyber security in what the CEO of Acronis deems a “cyber protection” strategy Continue Reading

By

• Aaron Tan, TechTarget

NCSC launches coronavirus cyber security campaign

The National Cyber Security Centre has launched a reporting service for scam emails as part of a campaign to help people protect themselves from cyber criminals exploiting the pandemic Continue Reading

By

• Alex Scroxton, Security Editor

IT services company Cognizant warns customers after ‘Maze’ ransomware attack

US IT services company Cognizant alerts customers after the Maze ransomware group launches a cyber attack Continue Reading

By

• Bill Goodwin, Computer Weekly

Zoom and WebEx users targeted by credential stealing attempts

Videoconferencing apps such as Zoom and Cisco’s WebEx are being targeted by cyber criminals trying to steal users’ personal data Continue Reading

By

• Alex Scroxton, Security Editor

Dutch organisations address business email compromise fraud

Public-private partnership in the Netherlands works to break the chains used by fraudsters to carry out BEC attacks Continue Reading

By

• Kim Loohuis

Coronavirus: How Nominet fights back against malicious domains

Domain name registry has thwarted hundreds of attempts to register malicious .uk domain names during the coronavirus pandemic Continue Reading

By

• Alex Scroxton, Security Editor

EU warns no compromise on privacy as NHS clashes with tech firms on contact tracing

EU and UK regulators express data privacy concerns days after Silicon Valley giants announce collaboration on contact-tracing apps to prevent the spread of the Covid-19 coronavirus Continue Reading

By

• Joe O’Halloran, Computer Weekly

Coronavirus: Security certification body puts exams online

Candidates for certification by the International Association of Privacy Professionals will now be able to sit their exams remotely Continue Reading

By

• Alex Scroxton, Security Editor

Check Point sounds alarm over double extortion ransomware threat

Researchers say double extortion ransomware attacks are likely to increase in frequency, and warn organisations to be on guard Continue Reading

By

• Alex Scroxton, Security Editor

NHS Wales to get free security services during coronavirus pandemic

NHS Wales Informatics Services enlists Thales to help it face down security threats and let its teams focus on the Covid-19 coronavirus crisis Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Cyber attacks on banks seen spiking, says Carbon Black

VMware’s Carbon Black observes a spike in cyber attacks on financial services organisations Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Indian IT sector takes hit

India’s IT market will see slower growth this year though opportunities abound in artificial intelligence and cyber security Continue Reading

By

• Aaron Tan, TechTarget

Coronavirus: ICO temporarily relaxes regulatory approach

The Information Commissioner’s Office sets out a revised approach to its regulatory duties during the Covid-19 coronavirus pandemic Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Standard Chartered bans employees from Zoom

Standard Chartered is the first bank to have instructed its staff to refrain from using Zoom Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Researcher finds security vulnerability in Slack

Some common assumptions about the security of cloud-based messaging platform Slack may not be entirely accurate, says an Alien Labs researcher Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft patches 19 critical bugs in another heavy Patch Tuesday

The volume of vulnerabilities being uncovered by Microsoft remains high, with more than 100 fixes pushed out in April’s Patch Tuesday Continue Reading

By

• Alex Scroxton, Security Editor

A legal perspective on data breaches and home working

Legal experts from Fieldfisher share guidance on how to deal with cyber attacks during the coronavirus crisis, and what the ICO expects in terms of notification Continue Reading

By

• Sabba Mirza and Michael Brown

Apple and Netflix most imitated brands in phishing attacks

A new report highlights the brands which are being most frequently spoofed by cyber criminals in phishing attacks Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Zoom user credentials for sale on dark web

IntSight researchers say they have found a database containing thousands of Zoom usernames and passwords being sold on the dark web Continue Reading

By

• Alex Scroxton, Security Editor

How Singapore’s Niometrics is changing network analytics

By extracting granular data and emphasising privacy protection, Niometrics’ network analytics technology is being put through its paces in a variety of use cases Continue Reading

Coronavirus: Warning over surge in Zoom security incidents

Check Point researchers have observed a surge in suspicious Zoom domains as cyber criminals target popular remote working and collaboration tools Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Zoom restricted or banned at multiple organisations

Use of videoconferencing tool has been banned at Google and in parts of the German and US governments Continue Reading

By

• Alex Scroxton, Security Editor

Revealed: Estonia targeted by Russia-linked disinformation deluge

Kremlin-linked threat actors are undermining the government of Estonia and its relationship with the European Union through a concerted disinformation campaign, with wider ramifications Continue Reading

By

• Alex Scroxton, Security Editor

Despite coronavirus, overall cyber crime volumes hold steady

The UK’s NCSC and the US’s CISA see little change in overall volumes of cyber crime in spite of the coronavirus crisis – for the time being Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: McAfee unearths dark web blood bank

Cyber criminals are selling fake goods and running scams on online marketplaces during the Covid-19 pandemic. Don’t be taken in Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus threats ramp up as more hospitals come under attack

The Covid-19 Cyber Threat Coalition finds the majority of security pros have been targeted by cyber criminals exploiting the coronavirus pandemic, and adds to warnings of increased activity targeting the health sector Continue Reading

By

• Alex Scroxton, Security Editor

Judge refuses to delay Assange's extradition hearing over coronavirus pandemic

District Judge Vanessa Baraitser says extradition proceedings will go ahead against Julian Assange, after his lawyers argued that the coronavirus lockdown means they cannot prepare their defence Continue Reading

By

• Bill Goodwin, Computer Weekly

Coronavirus: Criminals using Zoom installer to spread cryptominer

Videoconferencing application targeted to deliver cryptomining malware to unsuspecting victims Continue Reading

By

• Alex Scroxton, Security Editor

Two-factor authentication is broken: What comes next?

Two-factor authentication is seen by many as a robust authentication method, but is it really as impervious as it seems? Continue Reading

By

• Peter Ray Allison

BA and Marriott get GDPR fine reprieve

Both British Airways and Marriott International have had their General Data Protection Regulation fines deferred until later in 2020 Continue Reading

By

• Alex Scroxton, Security Editor

Zero-day exploits increasingly commodified, say researchers

The exploitation of zero-day vulnerabilities increasingly demonstrates access to cash, rather than skills Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Why and how cyber criminals exploit world events

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Paddy Francis

Interpol warns of more ransomware attacks against healthcare sector

Purple notice issued to alert police forces around the world of ransomware attacks against hospitals and other healthcare institutions Continue Reading

By

• Aaron Tan, TechTarget

Google data shows high interest in security and remote working

An analysis of the most Googled technology terms during the Covid-19 coronavirus pandemic has highlighted the scale of the cyber security challenge presented by the crisis Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: What does the ‘new normal’ mean for how we work?

Examining the long-term impact of the Covid-19 coronavirus pandemic on the world of work, security, privacy and networks Continue Reading

By

• Cate Pye, PA Consulting

JavaScript skimmers: An evolving and dangerous threat

Cyber attacks exploiting Magecart JavaScript skimmers are spiking during the coronavirus pandemic, and like biological viruses, they just keep evolving Continue Reading

By

• Fabian Libeau

Coronavirus: Magecart attacks on online retailers jump 20%

RiskIQ researchers have observed a sharp uptick in Magecart credit card attacks, driven by increased traffic to online retailers during the coronavirus pandemic Continue Reading

By

• Alex Scroxton, Security Editor

Morrisons appeal success is cold comfort for enterprises

The success of Morrisons’ appeal against judgments that it should be held vicariously liable for an insider data breach will be welcomed by businesses, but may be of limited comfort to them Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: Is Zoom safe and should security teams ban it?

Zoom’s rapid rise to prominence has highlighted a score of security problems with the service. Should CISOs try to steer their organisations away from it, or ban it outright? Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Covid-19, compliance risk, remote assessment and training

We talk to Mathieu Gorge, CEO of Vigitrust, about why organisations cannot drop their guard on compliance during the increased risks faced as a result of the coronavirus crisis Continue Reading

By

• Antony Adshead, Storage Editor

What we can learn from Marriott’s new data breach embarrassment

Marriott International has egg on its face once again following a second data breach in as many years, but there are encouraging signs in its response that suggest it is at least trying to learn from its experiences Continue Reading

By

• Alex Scroxton, Security Editor

Morrisons not liable for 2014 data breach, says Supreme Court

Court allows supermarket chain’s appeal against judgments holding it liable for a 2014 insider data breach, saying previous rulings misunderstood the concept of vicarious liability Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: WHO, Rakuten collaborate on anti-disinformation chatbot

The World Health Organisation and Rakuten Viber have built an interactive, multi-language chatbot to try to get on top of the growing problem of disinformation during the coronavirus pandemic Continue Reading

By

• Alex Scroxton, Security Editor

Nigerian email attacks evolving into credible, dangerous threat

Palo Alto’s Unit 42 reports on Nigeria’s SilverTerrier cyber crime group, which is becoming a highly dangerous threat to businesses worldwide Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: The Computer Weekly Downtime Upload – Episode 53

In this week’s episode of the Computer Weekly Downtime Upload podcast, Alex Scroxton, CW’s security editor, joins Caroline Donnelly and Brian McKenna to talk about the Covid-19 coronavirus crisis, including chancellor Rishi Sunak’s package for the self-employed and how Southeast Asia’s approach has differed from ours. They also talk about using data to govern the public realm Continue Reading

By

• Caroline Donnelly, Senior Editor, UK
• Alex Scroxton, Security Editor
• Brian McKenna, Senior Analyst, Business Applications

Marriott International hotel chain in second data breach

Marriott International notifies customers of a major data breach that unfolded earlier in 2020 – the second it has experienced in the past two years Continue Reading

By

• Alex Scroxton, Security Editor

Too late to protect online privacy, say Brits

Most UK consumers are concerned about data privacy, but think it’s too late to do much about it, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Houseparty denies hack as credential stuffing attacks spread

Social media service denies its service has been hacked, and is offering a million-dollar bounty to anybody who can prove otherwise Continue Reading

By

• Alex Scroxton, Security Editor

Why security validation matters

FireEye’s top executives in Asia-Pacific discuss the benefits of security validation and offer their take on the region’s cyber threat landscape Continue Reading

By

• Aaron Tan, TechTarget

Hackathon launched to help fight coronavirus pandemic

Virtual hackathon seeks to develop a suite of applications to help people during the Covid-19 coronavirus outbreak through ethically built technology Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Coronavirus: Don’t fall for fake cures, warns UK government

Government urges people to be more vigilant about what they read and share online as it relaunches its Don’t Feed the Beast campaign to counter coronavirus disinformation Continue Reading

By

• Alex Scroxton, Security Editor

Australian government unveils Covid-19 app

Federal government launches Coronavirus Australia app to keep Australians updated on the latest developments in its fight against the coronavirus outbreak Continue Reading

By

• Aaron Tan, TechTarget

Insurance firm Chubb may be latest Maze ransomware victim

Maze ransomware group claims to have stolen personal data from the systems of cyber security insurance firm Chubb Continue Reading

By

• Alex Scroxton, Security Editor

Lorca calls on security scaleups to tackle coronavirus challenge

Lorca innovation programme has launched an open call for its next cohort of cyber security scaleups, with a timely focus on coronavirus challenges Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: What are the latest free cyber security offers?

We round up the latest free offers on cyber security products and services being made available during the Covid-19 coronavirus crisis Continue Reading

By

• Alex Scroxton, Security Editor

Tupperware fixes hacked site, but questions remain over response

Kitchenware brand removes active digital credit card skimmer from its website and insists it takes security seriously despite ignoring repeated attempts to contact it Continue Reading

By

• Alex Scroxton, Security Editor

Is personal privacy more important than combatting Covid-19?

Concerns over personal privacy, of serious concern to the political activists who might be "picked off" by their opponents but not to the majority of the population, have come ahead of enthusiasm ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Coronavirus: Be alert to rogue mobile apps exploiting outbreak

Well-meaning developers are beginning to offer medical apps to monitor coronavirus symptoms and provide information on the pandemic. Opportunists and cyber criminals are not far behind them Continue Reading

By

• Alex Scroxton, Security Editor

Developed APAC states most exposed to cyber risks

Singapore, South Korea, Japan, Australia and New Zealand have the highest exposure to cyber risks, but they are also the most prepared to deal with cyber attacks, study finds Continue Reading

By

• Aaron Tan, TechTarget

Kitchenware brand Tupperware is ignoring hacked website

Website has been hacked in a targeted cyber attack, and the dangerous vulnerability has not been addressed Continue Reading

By

• Alex Scroxton, Security Editor

Almost half of UK businesses suffered a cyber attack in past year

Latest government statistics reveal the scale of the cyber security challenge facing UK plc, but reveals some cause for optimism Continue Reading

By

• Alex Scroxton, Security Editor

Fake antivirus site promises coronavirus protection, delivers trojan

Researchers at Malwarebytes have warned of an increasing volume of scam sites exploiting the Covid-19 coronavirus Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus and privacy – finding the middle ground

Data collection has a role to play in fighting the deadly Covid-19 coronavirus outbreak, but governments need to be accountable for how it is used Continue Reading

By

• Eduardo Ustaran

Tekya auto-clicker malware exploits kids’ Android apps

Google has removed multiple apps for children that were found to contain Tekya auto-clicker malware Continue Reading

By

• Alex Scroxton, Security Editor

Legacy AV defenceless against onslaught of evasive malware

More than two-thirds of malware detected by WatchGuard in the last three months of 2019 was able to evade signature-based antivirus products, rendering them effectively useless in most instances Continue Reading

By

• Alex Scroxton, Security Editor

Singapore government to open source contact-tracing protocol

Singapore’s Government Technology Agency is contributing the source codes of the BlueTrace protocol that powers its contact-tracing app Continue Reading

By

• Aaron Tan, TechTarget

The AWS bucket list: Keep your cloud secure

Misconfigured cloud installations risk billions of records being exposed, damaging organisations’ finances and reputations. Paying attention to securing AWS storage buckets is a simple matter Continue Reading

By

• Peter Ray Allison

Coronavirus: Kaspersky, Bitdefender make products free to NHS

Kaspersky and Bitdefender have both made various products and services available free to healthcare customers as the Covid-19 coronavirus pandemic intensifies Continue Reading

By

• Alex Scroxton, Security Editor

Thousands of Netflix, Disney+ streaming accounts being stolen

Proofpoint has urged users of streaming services to be alert to cyber criminals hijacking their accounts Continue Reading

By

• Alex Scroxton, Security Editor

Why zero trust may not be all it’s cracked up to be

While they are discussed ad nauseam in the security industry, zero-trust architectures may not be all they’re cracked up to be, according to analyst Sam Bocetta Continue Reading

By

• Sam Bocetta

Cyber gangsters hit UK medical firm poised for work on coronavirus with Maze ransomware attack

The Maze ransomware group has published personal and medical details of thousands of former patients of a London-based medical research company after a failed attempt to disable the firm's computer systems Continue Reading

By

• Bill Goodwin, Computer Weekly

UK Coronavirus Bill relaxes restrictions on mass surveillance powers

Emergency legislation would massively expand state surveillance and police detainment powers Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Coronavirus: Sans Institute issues cyber security advice for parents

With schools now shut across the UK, parents will bear more responsibility for keeping children safe online and educating them about online harms Continue Reading

By

• Alex Scroxton, Security Editor

Unpatched Zyxel storage devices co-opted into IoT botnet

Owners of Zyxel network-attached storage devices are in danger of being hijacked by Mukashi, a descendant of the infamous Mirai botnet, if they don’t patch a critical vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

IT Priorities 2020: ANZ firms to spend more on cyber security

Over half of respondents in Australia and New Zealand plan to invest more in cyber security, especially in key areas such as data loss prevention Continue Reading

By

• Aaron Tan, TechTarget

Volume of computer misuse incidents falling, says ONS

Downward trend comes despite an overall increase in fraud, according to new statistics Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus: How to implement safe and secure remote working

Find out what CIOs and CISOs need to know to enable their end-users to work remotely and stay secure during the Covid-19 coronavirus crisis, and learn how users can help themselves Continue Reading

By

• Alex Scroxton, Security Editor

Coronavirus now possibly largest-ever cyber security threat

The cumulative volume of coronavirus-related email lures and other threats is the largest collection of attack types exploiting a single theme for years, possibly ever Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Amid panic, how to find a sound level of security

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Sabba Mirza and James Walsh

Covid-19: NCSC issues secure remote working guidance

With hundreds of thousands likely to be working remotely for some time, the UK’s NCSC has issued best practice guidance to enable security teams to support them Continue Reading

By

• Alex Scroxton, Security Editor

Travelex under threat as insolvency risk, hacking costs and coronavirus take their toll

Foreign exchange group’s future remains uncertain as its parent company, Finablr, prepares for potential insolvency Continue Reading

By

• Bill Goodwin, Computer Weekly

UN identifies tech companies working in Occupied Palestinian Territories

United Nations Human Rights Office report names a number of technology companies that could be involved in violating human rights Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: To tackle Covid-19, be prepared, flexible and resilient

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Dan Norman

UK makes its case for post-Brexit data adequacy decision

Government sets out an explanatory framework as it seeks adequacy decisions from the European Commission to maintain the free flow of personal data between the European Union, the UK and Gibraltar Continue Reading

By

• Alex Scroxton, Security Editor

How NHS Digital is helping support the coronavirus crisis

In this week’s Computer Weekly, we talk to NHS Digital about how technology is supporting the health service’s response to the coronavirus crisis. We examine the challenges of running a successful security operations centre. And we look at the emerging datacentre architecture based on composable infrastructure. Read the issue now. Continue Reading

NCSC issues coronavirus cyber security alert

The UK’s National Cyber Security Centre has issued a public alert and fresh guidance as more cyber criminals get wise to the lucrative potential of Covid-19 Continue Reading

By

• Alex Scroxton, Security Editor

Equality watchdog calls on police to stop using facial recognition

Equalities and Human Rights Commission says use of automatic facial recognition and predictive algorithms by police is discriminatory, stifles freedom of expression and lacks a proper legislative framework Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Coronavirus-linked hacks likely as Czech hospital comes under attack

The world of cyber security is on high alert to heightened vulnerabilities as the spread of the Covid-19 coronavirus changes daily life across Europe Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: A guide to security best practice for pandemics

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Petra Wenham

Turla’s use of Iranian infrastructure probably opportunistic

Turla, the Kremlin-linked APT group that last year hijacked an Iranian group’s infrastructure, was likely to have been operating opportunistically, according to researchers Continue Reading

By

• Alex Scroxton, Security Editor

Cookie-stealing trojans found lurking on Android phones

Kaspersky discovers two new Android malware modifications that could give hackers control of their victims’ social media accounts Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Coronavirus crisis helps put security in context

In our globalised world, high-profile events such as Covid-19 have huge business impacts, some of which may be felt by CISOs. What responsibilities do security professionals have in such circumstances? Continue Reading

By

• Maxine Holt, Omdia

Microsoft fixes 26 critical vulnerabilities in another heavy Patch Tuesday

March’s Patch Tuesday is another big one for Microsoft, addressing 115 vulnerabilities, 26 of them critical Continue Reading

By

• Alex Scroxton, Security Editor

Hacking community targeted by cyber criminals in new trojan campaign

Cybereason’s Nocturnus threat research team has uncovered a cyber criminal campaign that weaponises popular hacking tools Continue Reading

By

• Alex Scroxton, Security Editor

VAT software supplier exposed data of millions

Eight million sales records belonging to UK and EU consumers left exposed due to misconfigured server Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: The Computer Weekly Downtime Upload – Episode 50

In this week’s episode of the Computer Weekly Downtime Upload podcast, Clare McDonald, Caroline Donnelly, and Brian McKenna are joined by CW production editor Claire Cormack to discuss the Everywoman in Tech Forum, the vulnerability to hacking of smart cameras and baby monitors, and the utility of the traditional annual performance review Continue Reading

By

• Clare McDonald, Business Editor
• Caroline Donnelly, Senior Editor, UK
• Brian McKenna, Senior Analyst, Business Applications

Bill Gates backs Crest fintech security scheme for Africa and Asia

UK-based cyber security accreditation and certification non-profit Crest has been awarded a $1.4m grant from the Bill and Melinda Gates Foundation to expand cyber security capacity for fintechs in Africa and Asia Continue Reading

By

• Alex Scroxton, Security Editor