Privacy and data protection

Security Think Tank: Embrace data protection as a necessary business process

What strategies can information security professionals use to shift focus from GDPR fines to enabling business gains and success, changing the way data is used, and aligning data privacy with business purpose? Continue Reading

By

• Mike Gillespie

British Airways facing £183m GDPR fine

British Airways is to appeal against a record fine for infringement of data protection rules for a breach of customer data in 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

IISP gains Royal Charter status

The UK finally has its first national professional body for cyber security that will be responsible for setting the standards for skills and knowledge in the industry to reduce the skills gap and increase diversity Continue Reading

By

• Warwick Ashford, Senior analyst

St John Ambulance praised for response to ransomware attack

Charity’s response to ransomware attack demonstrates that it is possible to ensure minimal disruption if properly prepared Continue Reading

By

• Warwick Ashford, Senior analyst

Security and privacy key to smart buildings and cities

Security and privacy capabilities are essential for stakeholders if they are to realise the benefits of smart buildings and cities, says expert whitepaper Continue Reading

By

• Warwick Ashford, Senior analyst

Implementing IoT – overcoming barriers to commercial adoption

Tim Wright from the Institute of Telecoms Professionals reports from a recent seminar exploring questions around the barriers to commercial, at-scale adoption of the internet of things, and how to overcome them Continue Reading

By

• Tim Wright, Institute of Telecommunications Professionals

FireEye ties Microsoft Outlook exploit to Iranian hackers

US Cyber Command has issued a warning that a patched Microsoft Outlook vulnerability is being exploited by unnamed threat actors, and recommended immediate patching Continue Reading

By

• Warwick Ashford, Senior analyst

Email still top security vulnerability, survey shows

Email is still the top security vulnerability, a survey shows, but security researchers caution that switching to instant messaging is not necessarily a solution in the longer term Continue Reading

By

• Warwick Ashford, Senior analyst

APAC experts weigh in on cyber security trends

The onslaught of cyber attacks being reported each day has been a wake-up call, but experts say businesses need to be mindful of the limitations of certain security measures Continue Reading

By

• Aaron Tan, TechTarget

Sodin ransomware exploiting Windows zero-day, Kaspersky warns

Security researchers are warning that a recently discovered type of ransomware is now exploiting a zero-day Windows vulnerability, and does not require user interaction to trigger an infection Continue Reading

By

• Warwick Ashford, Senior analyst

Top VPNs secretly owned by Chinese firms

Nearly a third of top VPNs are secretly owned by Chinese companies, while other owners are based in countries with weak or no privacy laws, potentially putting users at risk, security researchers warn Continue Reading

By

• Warwick Ashford, Senior analyst

CPS faces legal ruling over refusal to disclose emails with US on WikiLeaks and Assange extradition

A court will decide whether the Crown Prosecution Service can refuse to neither confirm nor deny the existence of correspondence with US on investigations into Julian Assange and WikiLeaks Continue Reading

By

• Bill Goodwin, Computer Weekly

UK consumers still concerned about personal data security

Most UK consumers are still concerned about the security of their personal data, indicating that organisations need to do more to gain consumer trust, such as implementing biometric controls Continue Reading

By

• Warwick Ashford, Senior analyst

Podcast: The Computer Weekly Downtime Upload – Episode 22

In this week’s episode of the Computer Weekly Downtime Upload podcast, Brian McKenna, Caroline Donnelly and Clare McDonald talk about digital transformation in the NHS, Sky’s efforts to get more women working in tech and how big businesses could be risking extinction by ignoring IT Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Orvibo data leak puts security spotlight on IoT back end

The security of devices that make up the internet of things (IoT) is a top concern for many in the industry, but leaks from an IoT database highlights the importance of back-end security too Continue Reading

By

• Warwick Ashford, Senior analyst

Few UK firms are cyber insured despite financial losses

More than one-fifth of UK firms have been impacted financially by cyber attacks, yet potentially more than three-quarters of companies polled have never been insured for cyber-related losses Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook’s privacy game – how Zuckerberg backtracked on promises to protect personal data

Facebook promised its users privacy then quietly abandoned its promises in pursuit of profits. Now it faces antitrust regulation Continue Reading

By

• Bill Goodwin and Sebastian Klovig Skelton

Huge jump in cyber incidents reported by finance sector

The number of cyber incidents reported by financial services firms increased nearly 12-fold in 2018 from 2017, mainly due to third-party failures, highlighting several key areas that need improvement Continue Reading

By

• Warwick Ashford, Senior analyst

How to get the basics of mobile device management right the first time

When adopting mobile device management, there are often fears around implementation and whether or not the strategy is even required Continue Reading

By

• Rene Millman

TIN coalition calls for industry action against cyber fraud

An industry group aimed at improving cyber security by tackling enduring challenges has called for collaboration in the fight against cyber fraud Continue Reading

By

• Warwick Ashford, Senior analyst

Dutch bank and researchers begin defence against quantum computing’s dark side

ABN Amro is working with QuTech to ensure that banks can protect data against quantum computers in the future Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

How privacy could breathe new life into personalisation

As much of the advertising technology used by marketers to deliver personalised content online is deemed unlawful, there are signs regulation could actually be a win-win for both consumers and business – as long as the industry embraces change Continue Reading

By

• Jim Mortleman

Fido Alliance announces new standards

Fido Alliance announces new identity verification and IoT initiatives to expand the reach and impact of Fido authentication, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

Commercial interests put customer security at risk, survey shows

Firms are bypassing security to push products and services into the market, increasing security risks for the organisation and its customers, a poll of information security professionals shows Continue Reading

By

• Warwick Ashford, Senior analyst

Wider threat campaign behind Wipro breach

A sophisticated, far-ranging threat campaign was behind the breach at Indian IT services firm Wipro in April, which was not an isolated incident, RiskIQ report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Six arrested over €24m cryptocurrency theft

Police have arrested six people in the UK and the Netherlands in connection with the theft of cryptocurrency worth €24m Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore government forms digital industry office

New office will help local tech firms grow their regional footprint and build new capabilities in order to thrive in APAC’s booming digital economy Continue Reading

By

• Aaron Tan, TechTarget

How facial recognition technology threatens basic privacy rights

As adoption of facial recognition systems continues to grow worldwide, there is increasing concern that this technology could undermine fundamental privacy rights and how it can be kept in check Continue Reading

By

• Nicholas Fearn

UK cyber security progress stalled, says report

UK firms rank cyber attacks as a top business issue, but are stalling in cyber security best practice, lagging behind top performers in India Continue Reading

By

• Warwick Ashford, Senior analyst

APT attack on telcos highlights need for comprehensive defence

A global cyber attack against multiple telecommunications firms underlines need for comprehensive approach to cyber defence, say researchers and industry commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Airbus opens cyber innovation hub in Wales

Newport hub will focus on industrial control systems, artificial intelligence and data analytics Continue Reading

By

• Warwick Ashford, Senior analyst

UK takes world lead in surveillance camera security

Although the UK is sometimes referred to as “the most surveilled country” in the world, it has taken the lead in setting minimum security requirements for surveillance cameras. But how will this make a difference internationally? Continue Reading

By

• Warwick Ashford, Senior analyst

Nominations open for UK’s security unsung heroes

The Security Serious cyber awareness campaign has opened nominations for the fourth annual cyber security Unsung Heroes awards Continue Reading

By

• Warwick Ashford, Senior analyst

Small business not necessarily weakest security link

Small businesses may not be the weakest link in the supply chain after all, with a lack of skills and best practices being bigger factors, a study by (ISC)² reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Disaster planning: How to expect the unexpected

Focusing too much on specific disasters rather than considering an organisation’s data protection, network security and process requirements, can lead to unpredicted vulnerabilities Continue Reading

By

• Peter Ray Allison

Surveillance camera czar calls for stronger UK code of practice

Surveillance cameras are for supporting communities, not spying on them, but the UK needs stronger regulation and citizen engagement in this area, says surveillance camera commissioner Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook officially unveils cryptocurrency plans

Facebook has released details about its Libra cryptocurrency, but questions still remain over how, and if, it will work Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Enterprises challenged with security basics

Visibility, security tool overload and manual reporting are cited as top concerns by UK security leaders, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

UK to launch security standard for surveillance cameras

The UK is launching the world’s first voluntary cyber security standard and compliance certification mark for the manufacturers of surveillance cameras Continue Reading

By

• Warwick Ashford, Senior analyst

Most mobile apps vulnerable to malware

iOS and Android apps equally vulnerable to being exploited remotely by malware, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

IoT Security Foundation publishes smart building whitepaper

The IoT Security Foundation has published a guide on security for smart buildings to highlight key issues and gather feedback to inform future guidance for industry stakeholders Continue Reading

By

• Warwick Ashford, Senior analyst

Converged security takes centre stage at IFSEC

The importance and benefits of combining physical and cyber security was underlined in the opening session of the 2019 IFSEC security conference Continue Reading

By

• Warwick Ashford, Senior analyst

UK government pushes data-driven agenda

A smart data report has been published with consultations under way, while an open call for evidence has been launched to help shape the national data plan Continue Reading

By

• Angelica Mari

UK to host world’s first surveillance camera day

The UK is to host the world’s first surveillance camera day to raise awareness about surveillance cameras and generate a debate about how they are used Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore faced fewer cyber threats in 2018

Despite the fall in the number of common cyber threats last year, Singapore will continue to face advanced persistent threats, CSA warns Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Business needs to see infosec pros as trusted advisers

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• RV Raghu, ISACA

Asco breaks silence on ransomware attack

A week after reportedly being hit by a ransomware attack, Belgium-based mechanical equipment manufacturer Asco has finally provided some details Continue Reading

Inside F5’s cyber security playbook

F5 Networks' CISO talks up measures that the application delivery and security specialist is employing to fend off cyber attackers that come knocking on its doors Continue Reading

By

• Aaron Tan, TechTarget

UK firms need to address risky user habits

McAfee calls for companies to ramp up their security culture and improve the integration of technical security controls to minimise exposure from workers Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook London hiring spree focuses on tackling online harms

Facebook is hiring for 500 tech jobs in the capital in the next six months, with a particular focus on seeking out and clamping down on malicious content and fake accounts, and curbing other harmful behaviour on its platforms Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Security risk ratings key to security/business understanding

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Maxine Holt, Omdia

Security Think Tank: Focus on business impact and likelihood of cyber attacks

How can cyber security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Paddy Francis

Austrian Supreme Court green-lights GDPR case against Facebook

A potential landmark case against Facebook for violating General Data Protection Regulation rights has been given the go-ahead by the Austrian Supreme Court Continue Reading

By

• Warwick Ashford, Senior analyst

In a cyber data breach, preparation is key

The importance of preparation was strongly emphasised at a breach response workshop hosted by DAC Beachcroft as part of London Tech Week Continue Reading

By

• Warwick Ashford, Senior analyst

MP brands Huawei exec a ‘moral vacuum’ as operators demand 5G clarity

Huawei chief security officer John Suffolk faces tough questions from parliament’s Science and Technology Select Committee over the firm’s links to the Chinese government Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Frame cyber security impacts in business contexts

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Simon Persin, Turnkey Consulting

Security Think Tank: Infosec letter to the board

How can security professionals communicate effectively with the board and senior business leaders – what works and what doesn’t? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Misconfigured container services are a security risk

Researchers at Palo Alto Networks have released details of the scale of misconfigured and exposed container services putting organisations at risk of cyber attack Continue Reading

By

• Warwick Ashford, Senior analyst

How ASEAN firms are using AI to combat cyber threats

Artificial intelligence tools are becoming a vital part of the security arsenal for organisations and cyber criminals alike Continue Reading

By

• Ai Lei Tao

Firms face targeted bespoke cyber attacks, dark web study reveals

Academic study exposes prolific availability and demand for tailored malware, network access and corporate espionage services, which suggests many firms’ cyber defences are below standard Continue Reading

By

• Warwick Ashford, Senior analyst

Digital transformation an opportunity for security

Digital transformation is an opportunity not only for the business to up its game, but also for security teams to engage with and win over the business, CISO tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Is GDPR worth the cost?

Regulations have costs, which are meant to be recouped by the expected benefits. But who decides whether this is a good deal? Ultimately, it’s you Continue Reading

By

• Tim Worstall, Adam Smith Institute

DNS – a security opportunity not to be overlooked, says Nominet

Domain name system data is the best-kept secret for eliminating network cyber threats, Nominet tells Infosecurity Europe attendees Continue Reading

By

• Warwick Ashford, Senior analyst

Nearly two-thirds of businesses hit by credential abuse

Most businesses admit to breaches relating to abuse of user credentials, according to a report that highlights cyber hygiene failings in the UK and the importance of greater visibility and integration to cyber defence capability Continue Reading

By

• Warwick Ashford, Senior analyst

Big tech chiefs boycott parliamentarians investigating citizens’ privacy

An International Grand Committee on Big Data, Privacy and Democracy considers whether failure to protect citizens’ privacy constitutes grounds for anti-trust regulation against Facebook and other big tech companies Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Businesses investing blindly in cyber security

Businesses need to find out what their real cyber risks and weaknesses are before investing in new technologies, says ethical hacker Continue Reading

By

• Warwick Ashford, Senior analyst

Deterministic data-based AI key for security

AI-based cyber security systems have enormous potential, but under specific conditions that are essential for success, AI expert tells Infosecurity Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Beware of security blind spots in encrypted traffic

The growth of encrypted traffic has put the spotlight on intrusion prevention systems that help to surface cyber attacks conducted under the cloak of network encryption Continue Reading

By

• Aaron Tan, TechTarget

Australia’s Notifiable Data Breaches scheme drives compliance but issues remain

Australia’s data breach notification rules have largely been complied with, but some quarters are calling for more clarity on the reporting threshold and tougher action against errant firms Continue Reading

By

• Beverley Head

Data governance: The importance of getting it right

With ever-increasing storage capacity, organisations are needing to take more control of their file management systems with thorough data governance policies. Otherwise, they run the risk of project data being exposed Continue Reading

By

• Peter Ray Allison

Facebook loses bid to halt European court decision on EU-US data sharing

Irish Supreme Court dismisses attempt by Facebook to prevent the European Court of Justice considering the validity of US-EU data transfers, after Austrian lawyer Max Schrems argued that they put the privacy of EU citizens at risk Continue Reading

By

• Bill Goodwin, Computer Weekly

GCHQ urged to abandon plans to access encrypted chats

Tech companies and security and policy experts are calling for more dialogue with GCHQ on encryption, urging it to ditch its proposal for eavesdropping on encrypted chats Continue Reading

By

• Warwick Ashford, Senior analyst

2.3 billion business and consumer data files exposed online

In the year since the GDPR compliance deadline, the number of data files exposed online without adequate protection is up more than 50% due to misconfigured security controls, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Hackers targeting UK universities a threat to national security

Poorly defended UK university research that is mainly commissioned by government is a top target for hackers, putting national security at risk, a study reveals, underlining the need for better cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

Turla APT group beefs up cyber attack tool

An advanced persistent threat cyber espionage group has improved its tools to attack diplomatic targets, making their activities more difficult to detect and block Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber weapons readily available to criminals, researchers warn

Security researchers have discovered an attack campaign infrastructure designed to scan, brute-force and infect tens of thousands of MS-SQL and PHPMyAdmin servers Continue Reading

By

• Warwick Ashford, Senior analyst

ICO to shortlist Sandbox applicants

Privacy watchdog’s Sandbox service aims to help develop innovative and beneficial products and services that are privacy compliant Continue Reading

By

• Warwick Ashford, Senior analyst

Perfect storm for data science in security

After nearly 20 years of research, the perfect storm of computing technologies is finally enabling data science to realise its potential to make valuable contributions to improving cyber security capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Many search engine users unaware of personal data collection

Many users of online search engines are still unaware that data is being collected about them for personalised advertising, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Australian firms coming to grips with AI ethics

Australian businesses are warming up to AI, but just two in five have standards and guidelines for AI ethics, a study finds Continue Reading

By

• Aaron Tan, TechTarget

Just over half of UK firms don’t have a cyber resilience plan

Many UK firms still lack cyber resilience and data protection capabilities covering email a year after the implementation of the GDPR aimed at improving personal data protection Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR: Are we there yet?

A full year since the General Data Protection Regulation was implemented, there has not been the severe punitive action expected by many and personal data breaches continue to happen, leaving many wondering if any progress has been made Continue Reading

By

• Warwick Ashford, Senior analyst

Effect of GDPR yet to be felt, says law firm Hogan Lovells

Despite the fact that the GDPR has been in full effect for a year, the true effect of the regulation is yet to be felt and organisations should ensure they keep their eye on the ball, says leading privacy law firm Continue Reading

By

• Warwick Ashford, Senior analyst

No real change a year into GDPR, says privacy expert

A year after the GDPR compliance deadline, many organisations still have a lot of work to do to make real changes and shift focus away from fines to business value and gain, says PwC’s GDPR and data protection lead Continue Reading

By

• Warwick Ashford, Senior analyst

SurveyMonkey opens Dublin datacentre region to court data-security conscious enterprises in Europe

Online survey software provider SurveyMonkey is on a Europe-wide enterprise charm offensive, and is focusing on winning over CIOs with the offer to locally host their data within its European datacentre region Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

IBM’s investment in automation pays off in GDPR’s first year

The first year of the EU’s General Data Protection Regulation has demonstrated the value of IBM’s investment in machine learning-based automation and the importance of having the right strategy and systems in place, according to the firm’s data protection officer Continue Reading

By

• Warwick Ashford, Senior analyst

Lapse in LinkedIn security certificate update

A lapse in the update of LinkedIn’s security certificate has once again underlined the importance of keeping track to avoid disruptions and phishing attacks, and how even big players are failing to get it right Continue Reading

By

• Warwick Ashford, Senior analyst

TalkTalk admits new failings in 2015 data breach notification

TalkTalk’s failure to notify all those affected by its 2015 data breach highlights the importance of data visibility so that breach notifications are fast and accurate – a key requirement of the GDPR Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore proposes data portability provisions

The Personal Data Protection Commission is seeking public feedback on proposed provisions that will let consumers move their personal data across organisations Continue Reading

By

• Aaron Tan, TechTarget

US grants Huawei stay of execution

US Commerce Department temporarily restores Huawei’s ability to maintain its existing networks and smartphone user base Continue Reading

By

• Alex Scroxton, Security Editor

Planned UK age verification checks risky for internet users

Proposed controversial online age verification checks could increase the risk of identity theft and other cyber crimes, warn security experts, who advise parents to set technological boundaries and ensure their families are aware of risks Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR an opportunity to improve data systems and processes

A year after the official implementation of the GDPR, it is important to highlight the positive opportunities that compliance provides and the insights breach reports are providing, say Deloitte consultants Continue Reading

By

• Warwick Ashford, Senior analyst

Google cuts off Huawei from Android ecosystem

Google decision follows an executive order signed by President Trump, but Huawei insists US businesses and consumers will be the real losers Continue Reading

By

• Alex Scroxton, Security Editor

ICO to support GDPR certification schemes

The UK data protection watchdog is accepting enquiries from organisations considering developing GDPR certification schemes, which the ICO says could help recipients achieve competitive advantage Continue Reading

By

• Warwick Ashford, Senior analyst

Identity custodians needed in digital era

Digital identity systems will fail if they do not take humans into account, warns identity innovator, suggesting that a ‘digital guardian’ could help overcome most of these challenges Continue Reading

By

• Warwick Ashford, Senior analyst

Are there any positives from the first year of GDPR?

A year has passed since the new EU data protection law came into force. What have we learned in that time that can help organisations deliver benefits from the regulation? Continue Reading

By

• Elle Todd, Reed Smith

Self-sovereign ID key to data privacy

Coupling self-sovereign identity with insights from research on consumer identity management may be the key to personalising products and services without putting people at risk, says industry analyst Continue Reading

By

• Warwick Ashford, Senior analyst

Fujitsu sets out to restore trust in technology

Trust in technology, how to recapture it, and how to ensure AI doesn’t overstep its bounds were the big messages on the opening day of Fujitsu Forum in Tokyo Continue Reading

By

• Alex Scroxton, Security Editor

Facebook engaged in ‘calculated’ campaign to eliminate competition, claims businessman

A US businessman is seeking damages from Facebook after accusing the social media company of unfairly blocking “humorous” Facebook pages which generated hundreds of thousands of dollars in advertising revenue Continue Reading

By

• Bill Goodwin and Sebastian Klovig Skelton

Microsoft working to support decentralised identity

Microsoft is among the big tech players aiming to help enable personalisation of products and services without putting privacy at risk Continue Reading

By

• Warwick Ashford, Senior analyst