Privacy and data protection

The Security Interviews: What is the real cyber threat from China?

Former NCSC boss Ciaran Martin talks about nation-state attacks, why the UK has become so exercised about cyber espionage, and how our leaders are in danger of misunderstanding their adversaries Continue Reading

By

• Alex Scroxton, Security Editor

WikiLeaks founder Julian Assange granted appeal

Two high court judges granted WikiLeaks founder Julian Assange leave to appeal against extradition to the US after defence lawyers argued that the US had failed to give adequate assurances Continue Reading

By

• Bill Goodwin, Computer Weekly

US authorities crack BreachForums for a second time

The BreachForums data leak website has been seized by the FBI and international partners again Continue Reading

By

• Alex Scroxton, Security Editor

GCHQ to protect politicians and election candidates from cyber attacks

The National Cyber Security Centre, part of GCHQ, to protect election candidates from hostile state cyber attacks Continue Reading

By

• Bill Goodwin, Computer Weekly

NHS trust dismisses governors who questioned allegations of email tampering

Two NHS trust governors who raised questions in a dispute over allegations of email tampering concerning whistleblower Peter Duffy have been dismissed after an investigation that followed their suspension Continue Reading

By

• Tommy Greene

Major breach of customer information developing at Dell

Almost 50 million data records relating to Dell customers appear to have been compromised in a major cyber breach Continue Reading

By

• Alex Scroxton, Security Editor

Over 5.3 billion data records exposed in April 2024

The number of data records breached in April 2024 hit over five billion, a staggering year-on-year increase Continue Reading

By

• Alex Scroxton, Security Editor

Cyber attack victims need to speak up, says ICO

The Information Commissioner’s Office is urging organisations to be transparent and learn from each other’s mistakes as it reveals most of the cyber attacks it responds to stem from the same core errors Continue Reading

By

• Alex Scroxton, Security Editor

Ofcom publishes draft online child safety rules for tech firms

In the draft codes, Ofcom calls on technology firms to use ‘robust’ age-checking and content moderation systems to keep harmful material away from children online Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Police accessed phone records of ‘trouble-making journalists’

The Police Service of Northern Ireland ran a rolling programme to monitor phone records of journalists to identify the source of police leaks, it was claimed today Continue Reading

By

• Bill Goodwin, Computer Weekly

Germany: European Court of Justice ruling on EncroChat could lead to new legal challenges

A ruling by the European Court of Justice could prompt legal challenges in EncroChat prosecutions in Germany and other EU states Continue Reading

By

• Bill Goodwin, Computer Weekly

Government plans to scan bank accounts of disabled people will lead to another scandal

The government is sleepwalking into another scandal as it pushes plans for ‘bank scanning’ algorithms to monitor bank accounts of disabled people Continue Reading

By

• Mikey Erhardt, campaigner at Disability Rights UK

Chinese APT suspected of Ministry of Defence hack

A cyber attack on the Ministry of Defence is suspected to be the work of threat actors working on behalf of Chinese intelligence Continue Reading

By

• Alex Scroxton, Security Editor

What does the Data Protection and Digital Information Bill mean for UK industry?

The Data Protection and Digital Information Bill is the first shift in the UK’s data protection regime since leaving the EU, but what could it mean for UK industry? Continue Reading

By

• Peter Ray Allison

EU calls out Fancy Bear over attacks on Czech, German governments

The European Union, alongside member states Czechia and Germany, have accused Russian government APT Fancy Bear of being behind a series of attacks on political parties and government bodies Continue Reading

By

• Alex Scroxton, Security Editor

Why IAM is central to cyber security

BeyondTrust’s chief security strategist talks up the importance of identity and access management, and the role of cyber insurance in driving security improvements Continue Reading

By

• Stephen Withers

Dropbox Sign user information accessed in data breach

Account data belonging to Dropbox Sign users was accessed by an unknown threat actor after they hacked into the organisation’s backend infrastructure Continue Reading

By

• Alex Scroxton, Security Editor

BBC instructs lawyers over allegations of police surveillance of journalist

Lawyers for the BBC have written to the Investigatory Powers Tribunal over allegations that the Police Service of Northern Ireland spied on investigative journalist Vincent Kearney Continue Reading

By

• Bill Goodwin, Computer Weekly

Australia’s Qantas apologises for mobile app data breach

Australian flag carrier Qantas has apologised after a glitch in its mobile application temporarily enabled some customers to view the flights and booking details of other frequent fliers on two separate occasions Continue Reading

By

• Alex Scroxton, Security Editor

DWP anti-fraud measures will allow monitoring of bank accounts of landlords, carers and parents

Parliamentarians raise concerns that a proposed law to require banks to monitor the accounts of millions of people receiving state benefits could lead to those on welfare being denied accommodation or bank accounts Continue Reading

By

• Bill Goodwin, Computer Weekly

Are we ready for the era of the ‘sentient’ document?

This year is set to be the automation of documents since the invention of the printing press. Content control is key Continue Reading

By

• John Bates

Autonomous weapons reduce moral agency and devalue human life

Military technology experts gathered in Vienna have warned about the detrimental psychological effects of AI-powered weapons, arguing that implementing systems of algorithmic-enabled killing dehumanises both the user and the target Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Persistent data breaches deny people with HIV dignity and privacy

The ICO has urged charities and healthcare organisations that work with people living with HIV to do better when it comes to protecting their personal data, after the HIV status of more than 100 people was accidentally disclosed by London’s Central YMCA Continue Reading

By

• Alex Scroxton, Security Editor

Zero trust is a strategy, not a technology

Zero-trust security should be seen as a strategy to protect high-value assets and is not tied to a specific technology or product, says the model’s creator John Kindervag Continue Reading

By

• Aaron Tan, TechTarget

TikTok ban sails through US Senate

A law that will ban TikTok in the US unless its owner sells up pronto passed the US Senate by a landslide majority after being included in a package of military aid Continue Reading

By

• Alex Scroxton, Security Editor

Questions for IT and cyber leaders from the CSRB Microsoft report

The US government's CSRB report on last year's state sponsored cyber attacks on Microsoft raises significant concerns for Redmond and its customers. Expert Owen Sayers outlines five key questions IT and cyber security leaders should now consider Continue Reading

By

• Owen Sayers, Secon Solutions

Former Sellafield consultant claims the nuclear complex tampered with evidence

Whistleblower Alison McDermott claims former employer Sellafield tampered with metadata in letters used in evidence during an employment tribunal Continue Reading

By

• Tommy Greene
• Bill Goodwin, Computer Weekly

Fujifilm plans to ‘make tape easy’ with Kangaroo SME appliance

Fujifilm to add 100TB SME-focused Kangaroo tape infrastructure in a box to existing 1PB offer, as energy efficiency and security of tape make it alluring to customers Continue Reading

By

• Antony Adshead, Storage Editor

Crime agency criticises Meta as European police chiefs call for curbs on end-to-end encryption

Law enforcement agencies step up demands for ‘lawful access’ to encrypted communications Continue Reading

By

• Bill Goodwin, Computer Weekly

Report reveals Northern Ireland police put up to 18 journalists and lawyers under surveillance

Disclosures that the Police Service of Northern Ireland obtained phone communications data from journalists and lawyers leads to renewed calls for inquiry Continue Reading

By

• Bill Goodwin, Computer Weekly

Tech companies operating with opacity in Israel-Palestine

Tech firms operating in Occupied Palestinian Territories and Israel are falling “woefully short” of their human rights responsibilities amid escalating devastation in Gaza, says Business & Human Rights Resource Centre Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

CSA warns of emerging security risks with cloud and AI

Few users appreciate the security risks of cloud and have the expertise to implement the complex security controls, says CSA chief executive David Koh Continue Reading

By

• Aaron Tan, TechTarget

TUC publishes legislative proposal to protect workers from AI

Proposed bill for regulating artificial intelligence in the UK seeks to translate well-meaning principles and values into concrete rights and obligations that protect workers from systems that make ‘high-risk’ decisions about them Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

US provides assurances over extradition of WikiLeaks founder Julian Assange

Extradition of the WikiLeaks founder moves a step closer after the US government gives diplomatic assurances over his treatment in the US. Assange supporters accuse the US of ‘weasel words’ Continue Reading

By

• Bill Goodwin, Computer Weekly

CISOs not yet convinced to invest in AI

CISOs say their eyes are fixed firmly on threats like ransomware and supply chain attacks, and while AI is becoming a threat that needs to be dealt with, it’s not yet an immediate spending priority Continue Reading

By

• Alex Scroxton, Security Editor

CW Innovation Awards: Balancing security and user experience

The National University of Singapore’s Safe initiative has strengthened the security of IT systems and end-user devices while prioritising user experience through passwordless access Continue Reading

By

• Edwin Yapp

2024 election security: Confronting disinformation and deepfakes

Although disinformation and deepfakes are a threat to electoral integrity, we already have ways to counter emerging threats and there is an opportunity is to adapt and scale these approaches to counter the challenge to democracy, writes Saj Huq. Continue Reading

By

• Saj Huq, Plexal

Threat actors look to stolen credentials

In 2023, threat actors wrought havoc on corporate networks by logging in through valid accounts, and as bad actors begin investing in AI to help them identify priority targets, this problem is only expected to worsen in the future Continue Reading

By

• Martin Borrett

EU’s AI Act fails to protect the rule of law and civic space

Analysis reveals that the AI Act is ‘riddled with far-reaching exceptions’ and its measures to protect fundamental rights are insufficient Continue Reading

By

• Josh Osman, Computer Weekly

Apple iPhone security alert renews spyware concerns

An Apple security alert received by users in 92 countries raises fresh fears over ongoing campaigns by users of mercenary spyware products Continue Reading

By

• Alex Scroxton, Security Editor

5G networks and biometric breakthroughs: Navigating opportunities and risks

Businesses are quickly adopting 5G to introduce advanced security features such as facial recognition, but while these technologies improve safety and ease of use, they also raise concerns about how sensitive biometric information is gathered and may be misused Continue Reading

By

• Isla Sibanda

Executive interview: Balancing AI with human creativity

We speak to the chief product officer at Getty Images and iStock about the role generative AI can play in the image-making process. Continue Reading

By

• Cliff Saran, Managing Editor

European Digital Identity Wallet: One ID for EU citizens

The European Digital Identity Wallet is a personal digital wallet with which you will be able to identify yourself digitally in the future. Is this the solution for a centralised ID? Continue Reading

By

• Oliver Schonschek

Facial recognition to play key role in UK shoplifting crackdown

UK government will fund roll-out of police facial recognition across the country as part of its crackdown on shoplifting and violence against retail staff, but civil society groups say the government is attempting to police its way out of the cost-of-living crisis Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Government dismisses Lords’ concerns over facial recognition

UK government is claiming police forces’ use of live facial recognition is comprehensively covered by existing laws, in response to a Lords investigation that found police lacked a clear legal basis to deploy it Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Breakthrough may herald secure home quantum computing

An emerging approach to quantum security dubbed blind quantum computing may one day help spur mass adoption of quantum computing safely and securely, using technology that is already available today Continue Reading

By

• Alex Scroxton, Security Editor

Biden considering whether to end prosecution of WikiLeaks founder Julian Assange

US president Joe Biden says he is considering requests by Australia to end the prosecution of WikiLeaks founder Julian Assange under espionage and computer fraud charges Continue Reading

By

• Bill Goodwin, Computer Weekly

Salesforce helps customers establish bug bounty programmes

Salesforce has added new learning content to its Trailhead platform designed to help customers develop their own bug bounty programmes Continue Reading

By

• Alex Scroxton, Security Editor

Public worried by police and companies sharing biometric data

More than half of the British public do not feel comfortable with police forces sharing biometric data with the private sector, including facial recognition images, to tackle crimes such as shoplifting Continue Reading

By

• Josh Osman, Computer Weekly

How do companies protect customer data?

Companies can protect customer data through various technical tools and strategies, like authentication and encryption. But some types of data need more protection than others. Continue Reading

By

• Sandra Mathis, Microsoft

Is a cyber arms control treaty out of reach?

The world needs cyber arms control more than ever, but the challenges facing a multilateral agreement will be hard to surmount, according to researchers at Germany’s Digital Society Institute Continue Reading

By

• Alex Scroxton, Security Editor

Police forces check intelligence and criminal databases after errors discovered in O2 phone data

Criminal Bar Association calls for information about reliability of communications data used in criminal trials to be disclosed Continue Reading

By

• Bill Goodwin, Computer Weekly

Greek government fined over AI surveillance in refugee camps

Greece’s Data Protection Authority has issued a €175,000 fine against the country’s migration ministry over its deployment of artificial intelligence-powered security systems in refugee camps after the watchdog’s investigation found ‘serious shortcomings’ with the roll-out Continue Reading

By

• Lydia Emmanouilidou

UK vet network CVS hit by cyber attack

Operations at UK-based veterinary network CVS have been disrupted by a cyber incident of an as-yet undisclosed nature Continue Reading

By

• Alex Scroxton, Security Editor

Seven ways to be sure you can restore from backup

Backups are no good if you can’t restore from them. We look at key elements of backup restoration, including backup audits, RPOs and RTOs, and how and when to test backups Continue Reading

By

• Stephen Pritchard

China ramps up use of AI misinformation

Microsoft researchers have identified a growing pattern of AI-laced misinformation and political interference coming from Chinese threat actors Continue Reading

By

• Alex Scroxton, Security Editor

Changes needed for SOCs and CSIRTs, claims Dutch research institute

Cyber security specialists need a game-changer to keep up with their adversaries, who increasingly use automation and AI for their attacks Continue Reading

By

• Kim Loohuis

Obituary: Professor Ross Anderson, pioneer in security engineering and campaigner

Ross Anderson, a titan in the field of security engineering and campaigner for privacy and security, has passed away Continue Reading

By

• Bill Goodwin, Computer Weekly

Organisations getting better at spotting identity fraud

As the barriers to committing identity fraud continue to drop, organisations should consider more sophisticated technical measures to successfully up their game, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

sensitive information

Sensitive information is data that must be protected from unauthorized access to safeguard the privacy or security of an individual or organization. Continue Reading

By

• Nick Barney, Technology Writer

UK plc going backwards on cyber maturity, Cisco report claims

Fewer UK organisations believe their cyber security postures have reached a mature level than did so 12 months ago, as they struggle to keep up with new challenges and a fast-evolving threat landscape Continue Reading

By

• Alex Scroxton, Security Editor

Sellafield to be prosecuted over alleged cyber compliance failure

Sellafield Ltd, the organisation responsible for cleaning up and decommissioning the UK's largest nuclear waste site, is to be prosecuted over alleged cyber security failings dating back to 2019 Continue Reading

By

• Alex Scroxton, Security Editor

Facial recognition endangers us all without a clear legal basis

Technology researcher Stephanie Hare outlines the growing danger of the UK’s failure to legalise and regulate facial recognition technology Continue Reading

By

• Stephanie Hare

Ransomware gang leaks data stolen from Scottish NHS board

Data stolen from an earlier attack on NHS Dumfries and Galloway has been leaked by a ransomware gang that claims to be in possession of much more content Continue Reading

By

• Alex Scroxton, Security Editor

Qilin ransomware gang claims cyber attack on the Big Issue

A ransomware attack on the systems of publisher and social enterprise Big Issue Group has been claimed by the Qilin gang Continue Reading

By

• Alex Scroxton, Security Editor

WikiLeaks founder Julian Assange given temporary reprieve over extradition

Court seeks assurances from the US that Assange will be given First Amendment Rights, will not prejudiced at trial because of his nationality, and will not be subject to the death penalty Continue Reading

By

• Bill Goodwin, Computer Weekly
• Sander Priston

NCSC reaffirms guidance for those at risk of Chinese state hacking

As the UK and US governments announce sanctions and indictments of a Chinese state threat actor, the NCSC has reiterated its security advice for individuals at risk of being targeted for espionage purposes Continue Reading

By

• Alex Scroxton, Security Editor

US authorities charge seven over Chinese hacking

The US Department of Justice has charged seven Chinese nationals linked to the APT31 threat actor that targeted politicians in the UK and US Continue Reading

By

• Alex Scroxton, Security Editor

Which? calls for government action on fake banking sites

Amid high volumes of spoofed, fraudulent banking websites, Which? is calling for the government to implement new legal obligations for domain registrars Continue Reading

By

• Alex Scroxton, Security Editor

Chinese hackers responsible for two ‘malicious’ cyber campaigns against UK

Government sanctions two Chinese nationals and a Chinese company identified as responsible for cyber campaigns against government officials and members of parliament Continue Reading

By

• Bill Goodwin, Computer Weekly

Britain’s democracy under threat from Chinese cyber attackers, government warns

The deputy prime minister, Oliver Dowden, is due to tell Parliament that Beijing is behind a hacking attack that obtained details of 40 million UK voters and has targeted parliamentarians who have criticised the regime Continue Reading

By

• Bill Goodwin, Computer Weekly

Data protection impact assessment template and tips

Conducting a data protection impact assessment is key to evaluating potential risk factors that could pose a serious threat to individuals and their personal information. Continue Reading

By

• Paul Kirvan

Open Data Institute launches digital policy manifesto

The Open Data Institute has launched a policy manifesto ahead of the UK general election that outlines policies and issues it believes must be part of the political discussion around digital and data Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

NCSC guidance to help CEOs work through cyber incidents

The NCSC has published in-depth guidance on how business leaders should respond to a cyber attack or data breach. Learn about some of the key steps you will need to follow Continue Reading

By

• Alex Scroxton, Security Editor

Ukrainians crack network that stole 100m email, social accounts

Three members of an organised cyber criminal group who hacked and appropriated personal email and social media accounts face up to 15 years in prison Continue Reading

By

• Alex Scroxton, Security Editor

UK’s cyber resilience stagnates as more fall victim to attacks

The government is calling on businesses to ramp up their cyber protections as study shows improvements to resilience are stagnating amid an ever-growing volume of attacks Continue Reading

By

• Alex Scroxton, Security Editor

EMEA security spend will have another boom year in 2024

Cyber security services and technology will once again be the focus of major investment across EMEA during 2024, according to the latest Technology Spending Intentions study from TechTarget and ESG Continue Reading

By

• Alex Scroxton, Security Editor

IT Governance for Today and Tomorrow: Minimum Viable Principles

Introduction The traditional one-size-fits-all approach to IT governance, particularly in relation to data, is becoming increasingly unsustainable in the flexible, Agile/DevOps/AI-driven IT ... Continue Reading

By

• Tony Lock, Freeform Dynamics

Australia’s cyber security spending to grow 11.5% this year

Highly publicised cyber attacks and growing regulatory obligations are keeping security and risk top of mind for Australian organisations this year, says Gartner Continue Reading

By

• Aaron Tan, TechTarget

Spring Budget risks funding legally questionable police tech

Open legal questions around how UK police are using facial recognition and cloud technology could undermine the £230m investment committed in the Spring Budget to “time and money-saving technology” for police Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

UK’s AI ambitions pointless while cyber security is still neglected

The UK’s AI ambitions may be at considerable risk without stronger cyber defences across the private and public sectors Continue Reading

By

• Alex Scroxton, Security Editor

London Mayor’s Office reprimanded over data breach

The London Mayor’s Office has been reprimanded by the ICO after an internal error exposed the data of people who had made complaints against the Metropolitan Police Continue Reading

By

• Alex Scroxton, Security Editor

Questions raised over NHS deletion of thousands of emails during whistleblower tribunal

NHS doctor Chris Day has won the right to challenge a tribunal ruling that found no procedural unfairness when an NHS trust deleted thousands of emails. The case that raises wider questions about the use of electronic evidence Continue Reading

By

• Tommy Greene

US authorities move a step closer to banning TikTok

Lawmakers in Washington DC have moved a step closer to enacting a broad national ban on controversial video app TikTok in the US, with global ramifications Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Immutable storage essential against ransomware, but...

...not all immutable storage is created equal. That’s the message from Paul Speciale of Scality, who looks at immutable storage, its variants and what’s needed to secure data Continue Reading

By

• Antony Adshead, Storage Editor

Dutch organisations vulnerable to deepfake fraud

With the information many employees share on social media, Dutch companies are especially vulnerable to a new form of fraud Continue Reading

By

• Kim Loohuis

PSNI chief denies ‘industrial’ use of surveillance powers against journalists

PSNI chief constable Jon Boutcher has agreed to provide a report on police surveillance of journalists and lawyers to Northern Ireland’s policing watchdog Continue Reading

By

• Bill Goodwin, Computer Weekly

NI Policing Board pressed to open inquiry into PSNI spying on journalists’ phones

Amnesty International and the Committee on the Administration of Justice have asked Northern Ireland’s policing watchdog to open an inquiry into the Police Service of Northern Ireland’s use of surveillance powers against journalists Continue Reading

By

• Bill Goodwin, Computer Weekly

Apple patches zero-days amid ‘foundational’ post-quantum update

Apple’s iOS 17.4 update not only fixes zero-day flaws that are being actively exploited, but includes important new security protocols to safeguard users against future attacks Continue Reading

By

• Alex Scroxton, Security Editor

ALPHV/BlackCat gang vanishes amid ransomware ‘turmoil’

Mystery surrounds the apparent disappearance of the ALPHV/BlackCat cyber crime gang amid reports that a prominent US victim paid a $22m ransom Continue Reading

By

• Alex Scroxton, Security Editor

Open Rights Group accuses LiveRamp of ‘unlawful’ data processing

Privacy campaigners at Open Rights Group have submitted formal complaints to UK and French data regulators about allegedly unlawful data processing by online advertising firm LiveRamp Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

American Express customers exposed through third-party breach

US card giant warns customers that their personal details may have been exposed after a third party experienced a systems breach Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Fancy Bear sniffs out Ubiquiti router users

The authorities have warned users of Ubiquiti EdgeRouter products to take remedial action after a number of devices were hijacked into a malicious botnet by a Russian cyber espionage unit Continue Reading

By

• Alex Scroxton, Security Editor

APAC firms bullish on IT spending

More than half of organisations plan to spend more on key areas such as cyber security, generative AI and cloud in a sign of growing optimism across the region Continue Reading

By

• Aaron Tan, TechTarget

Home Office GPS tagging of asylum seekers breaches data protection law

The Information Commissioner’s Office has issued an enforcement notice against the Home Office after finding its programme to tag asylum seekers with GPS monitors breaches data protection law Continue Reading

By

• Bill Goodwin, Computer Weekly

Okta doubles down on cyber in wake of high-profile breaches

Okta launches Secure Identity Commitment to shore up its technology in the wake of a damaging breach and elevate best practice around identity Continue Reading

By

• Alex Scroxton, Security Editor

Police arrested journalists as part of surveillance operation to identify confidential sources

Three police forces took part in surveillance operations between 2011 and 2018 to identify sources that leaked information to journalists Trevor Birney and Barry McCaffrey, the Investigatory Powers Tribunal hears Continue Reading

By

• Bill Goodwin, Computer Weekly

New version of ALPHV/BlackCat ransomware hits victims

An updated version of the ALPHV/BlackCat ransomware has been spotted in the wild amid a series of attacks on American healthcare providers, prompting a new alert from the authorities Continue Reading

By

• Alex Scroxton, Security Editor

Hycu uses AI to develop APIs for SaaS application backup

SaaS applications don’t usually come with built-in data protection, but Hycu plans to tackle that gap in the market with AI to generate the connectors needed to backup user data Continue Reading

By

• Yann Serra, LeMagIT
• Antony Adshead, Storage Editor

Microsoft president commits to Azure open platform for AI

Brad Smith sets out Microsoft’s ambitions to make Azure the best platform to host foundational AI models, and train and run AI applications Continue Reading

By

• Cliff Saran, Managing Editor