Privacy and data protection

Icann calls for community collaboration to protect the internet

The domain name system watchdog Icann has reaffirmed its commitment to engage in collaborative efforts to ensure the security, stability and resiliency of the internet’s global identifier systems Continue Reading

By

• Warwick Ashford, Senior analyst

Chinese cyber attack group Bronze Union targeting weapons tech

Weapons technology is among the latest targets of a highly adaptable cyber espionage group that uses a wide range of publicly available and custom attack tools, presenting a challenge to network defenders Continue Reading

By

• Warwick Ashford, Senior analyst

Most UK consumers say Facebook should be regulated

Nearly three-quarters of UK consumers feel the social platform is damaging people’s mental health, survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Wearable technology in the workplace and data protection law

Wearable technology is slowly creeping into the workplace to monitor staff performance and health, but do employers understand the legal implications? We assess the data protection implications Continue Reading

By

• Charlotte Allery, Coffin Mew

Security is battling to keep pace with cloud adoption

Cloud-based business initiatives are accelerating more rapidly than security teams can secure them, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals earn $3bn a year exploiting social platforms

Businesses urged to respond to research findings that the ready availability of hacking tools, wildfire spread of malware and proliferation of cryptocurrency mining has seen a 300-fold increase in social media-enabled cyber crimes in two years Continue Reading

By

• Warwick Ashford, Senior analyst

EU gathers momentum in cyber security legislation and cooperation

The past two years have seen a step-change in the rate at which the European Union is putting legislation in place to support improved cyber security standards, collaboration and sharing of resources, says digital commissioner’s representative Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber power needs wider discussion, says GCHQ director

The topic of cyber power needs wider discussion, says GCHQ head in a speech about the opportunities of digital innovation such as 5G, as well as the accompanying complexity and risk, with particular mention of China and Huawei Continue Reading

By

• Warwick Ashford, Senior analyst

Android now Fido2 certified

Mobile operating system’s certification accelerates global migration beyond passwords, says Fido Alliance, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook planned to spy on Android phone users, internal emails reveal

Facebook planned to use its Android app to track the location of its customers and to allow advertisers to send political advertising and invites to dating sites to ‘single’ people, confidential documents show Continue Reading

By

• Bill Goodwin, Computer Weekly

US may cut off countries that use Huawei in 5G networks

US secretary of state Mike Pompeo has said America may scale back or cut military and diplomatic ties with countries that use Huawei equipment in national 5G networks Continue Reading

By

• Alex Scroxton, Security Editor

BlackBerry acquires Cylance to cement security capability

BlackBerry moves forward with its plans to establish itself as an enterprise security firm, focusing on internet-connected endpoints Continue Reading

By

• Warwick Ashford, Senior analyst

Thales to sell nCipher to Entrust Datacard

Thales eSecurity has announced that it is to sell HSM specialist nCipher, the UK-based encryption firm it acquired in 2008, after spinning it out as a separate business Continue Reading

By

• Warwick Ashford, Senior analyst

Nato supports collaboration on cyber security

Nato supports collaboration and cooperation on cyber security as an organisation founded on the principle of collective defence, says representative Continue Reading

By

• Warwick Ashford, Senior analyst

UK committed to working with EU cyber security partners

NCSC CEO uses cyber security conference in Brussels to set out his agency’s position on Brexit, 5G security, Huawei, market incentives and international cooperation on active cyber defence Continue Reading

By

• Warwick Ashford, Senior analyst

Cooperation a key theme of Brussels cyber security symposium

Fostering trust-based cooperation of like-minded cyber security stakeholders to create new strategies, policies and standards emerged as a key theme at a cyber security conference in Brussels Continue Reading

By

• Warwick Ashford, Senior analyst

Toyota Australia under cyber attack

The company has confirmed the attempted attack that took out its email system, forcing employees to turn to other forms of communication to continue working Continue Reading

By

• Aaron Tan, TechTarget

Breaking the chains: How FUD is holding the cyber sector hostage

The cyber security industry must move past fear tactics and get back to the basics of good cyber security practice Continue Reading

By

• Tom Kranz, Cyber Lab

MWC 2019: Huawei claims massive lead on 5G readiness

At a pre-Mobile World Congress event in London, Huawei’s Ryan Ding shared details of the firm’s rapidly expanding 5G mobile portfolio, and laid into his competitors Continue Reading

By

• Alex Scroxton, Security Editor

UK naïve to think China won’t try to exploit Huawei

A think-tank report has branded the UK government naïve at best, irresponsible at worst, over its use of Chinese networking equipment in critical national infrastructure Continue Reading

By

• Alex Scroxton, Security Editor

Activist Lauri Love’s computer ‘contained hacked data’, says judge

Lauri Love, who has been accused of hacking into US government computer systems, has lost a legal action against the NCA for the return of his computers and storage device Continue Reading

By

• Bill Goodwin, Computer Weekly

No More Ransom releases GandCrab decryption tool

Another free decryption tool is available that allows anyone infected with the latest versions of the GandCrab ransomware to regain control of their files and avoid paying the fee Continue Reading

By

• Warwick Ashford, Senior analyst

IT Priorities 2019: Cyber security and risk management among top priorities for 2019

This year’s Computer Weekly/TechTarget IT Priorities research shows that cyber security and risk management are among the top investment priorities Continue Reading

By

• Warwick Ashford, Senior analyst

Huawei’s Ren Zhengfei: US won’t crush us

Huawei CEO Ren Zhengfei has taken a more combative stance in the ongoing row over the firm’s alleged links to the Chinese intelligence services Continue Reading

By

• Alex Scroxton, Security Editor

When is it best to stick with paper?

In this week’s Computer Weekly, sometimes going digital is not necessarily the best thing to do – we weigh the pros and cons of paper versus technology. Our new buyer’s guide examines the challenges of asset management as you move IT infrastructure to the cloud. And we look at the growing role of software developers in the future of networking. Read the issue now. Continue Reading

Collaborative security approaches underpin container success

Containers are helping organisations to accelerate age-old software development approaches, but success is underpinned by a constant and team-wide attention to security Continue Reading

By

• Nicholas Fearn

NCSC signals UK may take softer line on Huawei

The UK’s National Cyber Security Centre suggests Huawei will be allowed to form core elements of the country’s 5G mobile network infrastructure after all Continue Reading

By

• Alex Scroxton, Security Editor

CISOs under increasing pressure, study shows

Cyber security professionals are under growing pressure from workloads and budget deficits, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

(ISC)² invests in professional development of security workforce

Security industry association sets up Professional Development Institute to extend training offerings beyond certification Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: UTM a key part of a well-rounded security strategy

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Mary-Jo de Leeuw, (ISC)2

Australian government warns of blockchain gaps

Digital Transformation Agency dispels some myths around blockchain, calling for government agencies to be cautious about using the technology Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: No tech will ever counter-balance poorly implemented processes

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

APAC healthcare providers losing $23m to cyber attacks

Healthcare organisations in the Asia-Pacific region could lose an average of $23.3m to cyber attacks, including losses from productivity and customer churn, a study finds Continue Reading

By

• Aaron Tan, TechTarget

Lauri Love takes legal action against NCA for return of seized computers

Lauri Love, a former engineering student who won a battle with the US Department of Justice against extradition to the US to face hacking charges, is suing the UK's intelligence agency, the NCA, for the return of his seized computers Continue Reading

By

• Bill Goodwin, Computer Weekly

Security Think Tank: Know strengths and weaknesses of UTM systems

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Simon Persin, Turnkey Consulting

Australia’s defence department keeps old PCs out of landfills

Department has securely wiped data from used devices and kept 1,300 tonnes of e-waste out of landfills Continue Reading

By

• Beverley Head

Mumsnet denies 'thousands' affected by software glitch-induced data breach

Parenting advice site Mumsnet moves to clear up reports that thousands of users have been affected by its recent data breach Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

A guide to choosing cloud-based security services

Cloud-based security services can help organisations with a growing cloud footprint to reduce cost and address the manpower crunch in cyber security Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Approach UTM with caution

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Simon McCalla, Nominet

Data breaches in Australia show no sign of abating

Australia’s privacy watchdog recorded over 800 cases of data breaches, nearly one year into the country’s mandatory data breach notification regime Continue Reading

By

• Beverley Head

Huawei: We are not spying on the UK

Huawei’s Ryan Ding tells the British government that the company has never, and will never, use its technology to assist the Chinese intelligence services Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Focus UTM capabilities on security and business needs

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Civil liberties groups to challenge bulk surveillance and intelligence sharing in Strasbourg

Coalition of campaigning groups wins the right to challenge the UK’s use of bulk surveillance powers, which allows suspicionless surveillance of the population and sharing of intercepted data with overseas intelligence agencies, in European Court of Human Rights Continue Reading

By

• Bill Goodwin, Computer Weekly

Cambridge launches urban data IoT project

The city of Cambridge will use Telensa IoT sensors and a Microsoft Azure platform to better manage its urban data assets Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Many routes to UTM to boost security capabilities

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Petra Wenham

Security Think Tank: Arguments for and against unified threat management

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Mike Gillespie

Massive uptick in cyber attacks targeting Student Loans Company

Cyber criminals used a range of techniques, as well as malware, malicious emails and calls, in attempts to access confidential financial data belonging to students, in massive uptick in attacks in the past year Continue Reading

By

• Warwick Ashford, Senior analyst

Met Police deploys live facial recognition technology for ninth time

Police say technology is helping to prevent and detect crime by identifying wanted criminals, but privacy groups have voiced their opposition Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Orange acquires UK’s SecureData

The Orange telecommunications group is to acquire UK cyber security firm SecureData to strengthen its leadership position in Europe in this sector Continue Reading

By

• Warwick Ashford, Senior analyst

Innocent people arrested following surveillance blunders, IPCO reveals

Interception of communications commissioner Adrian Fulford warns of “grave” repercussions for people wrongly identified as suspects due to errors made when government bodies access email, phone and telephone data Continue Reading

By

• Bill Goodwin, Computer Weekly

ICO to audit Leave.EU and Eldon Insurance

UK privacy watchdog will audit the data protection practices at Leave.EU and Eldon Insurance and has confirmed fines for both companies for unlawful marketing messages Continue Reading

By

• Warwick Ashford, Senior analyst

New stolen credentials cache puts spotlight on authentication

The discovery of billions more stolen usernames and passwords in Collections #2 to #5 have prompted fresh calls for the implementation of better authentication methods across industry Continue Reading

By

• Warwick Ashford, Senior analyst

Airbus investigates personnel data breach

Intruders were detected in the information systems of manufacturer’s commercial aircraft business, highlighting the need for a new approach to data protection Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook profit up despite privacy failings

Social media giant reports profit gains for the last quarter and the past year, despite a string of privacy blunders that came to light in 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber insurance uptake growing, but not all firms convinced

The adoption of cyber insurance is expected to grow, but one in three companies still are not sold on the benefits, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

YouTuber impersonation scam not new, say researchers

Scam that tricked users into clicking on phishing links has affected tens of thousands of victims and has been active for several years, say security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

Unconfigured IoT is a security risk, warns researcher

Internet of things researcher says unconfigured internet-connected devices are a largely unrecognised cyber security risk to businesses and consumers, and welcomes the increased likelihood of UK IoT legislation Continue Reading

By

• Warwick Ashford, Senior analyst

How traffic scrubbing can guard against DDoS attacks

Although most scrubbing services can help fend off distributed denial of service attacks, a more comprehensive mitigation strategy is required to remain unscathed Continue Reading

By

• Ai Lei Tao

New tech putting sensitive data at risk, report confirms

Deployments of new technologies are putting sensitive corporate data at risk because organisations are struggling to secure these new IT environments, a report confirms Continue Reading

By

• Warwick Ashford, Senior analyst

Personal records of HIV-positive individuals in Singapore leaked online

The personal information of 14,200 people with the human immunodeficiency virus was leaked by an American who lived in Singapore Continue Reading

By

• Aaron Tan, TechTarget

Data protection practices still poor, survey shows

Despite concerns over privacy and data protection and a greater understanding of best security practices, individuals and businesses are still falling short, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Minister urges UK firms to prepare for no-deal Brexit

On International Data Protection Day, the UK’s digital minister has added her voice to calls by the data protection watchdog for UK firms to prepare for a no-deal Brexit Continue Reading

By

• Warwick Ashford, Senior analyst

DCMS funding fuels cyber diversity drive

The Department for Digital, Culture, Media and Sport is investing in four new projects to drive the number of diverse candidates considered for cyber careers Continue Reading

By

• Clare McDonald, Business Editor

UK cyber security agency investigates DNS hijacking

NCSC is probing the large-scale DNS hijacking campaign that has reportedly affected government and commercial organisations worldwide, and has issued defence advice Continue Reading

By

• Warwick Ashford, Senior analyst

Brexit and data protection: What’s next?

PA Consulting assesses how a no-deal Brexit would affect the flow of data from the UK into and out of Europe Continue Reading

By

• Annelie van Milink

Vodafone suspends use of Huawei hardware

Vodafone’s UK CEO has said the operator will ‘pause’ its use of Huawei hardware for the foreseeable future Continue Reading

By

• Alex Scroxton, Security Editor

ICO adds to guidance on ‘no-deal’ Brexit

The UK’s privacy watchdog has been advising UK firms to prepare for a no-deal Brexit and has added some guidance for SMEs Continue Reading

By

• Warwick Ashford, Senior analyst

Former EU data protection tsar joins ICO

Former EU data protection supervisor joins the UK’s privacy watchdog as non-executive director, strengthening its commitment to international work Continue Reading

By

• Warwick Ashford, Senior analyst

Chinese government grants BT new powers

Enhanced operating licences improve telco’s ability to work with customers in China Continue Reading

By

• Alex Scroxton, Security Editor

Poor practices expose 24 million financial records

Failure to maintain appropriate security controls has again led to the exposure of millions of sensitive data records, this time from the banking world Continue Reading

By

• Warwick Ashford, Senior analyst

IoT application vulnerabilities leave devices open to attack

Barracuda Networks calls for internet of things devices to be subject to regular security review after researchers detail the application vulnerabilities of an internet-connected security camera Continue Reading

By

• Warwick Ashford, Senior analyst

Thales eSecurity spins out nCipher

After just over a decade, Thales eSecurity has announced that it has spun out HSM specialist nCipher, the UK-based encryption firm it acquired for $100m in 2008 Continue Reading

By

• Warwick Ashford, Senior analyst

Business failing to see strategic value of cyber security

UK businesses are failing to get value out of cyber security because they fail to see its strategic importance and often have a negative attitude towards security professionals, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

AWS now accredited to run protected workloads in Australia

Accreditation from the Australian Cyber Security Centre will enable organisations to store and process sensitive data in the Amazon Web Services Sydney region Continue Reading

By

• Aaron Tan, TechTarget

Facebook’s objections to court concerns over privacy more about ‘optics’ than facts

Facebook’s challenge to a High Court ruling that raises serious concerns about data transfers between Europe and the US is more about appearance than facts, lawyers for the Irish Data Protection Commission told Dublin's Supreme Court Continue Reading

By

• Bill Goodwin, Computer Weekly

MPs challenge Huawei over spying allegations

The chair of the cross-bench Science and Technology Committee has written to Huawei seeking answers over its activities in the UK Continue Reading

By

• Alex Scroxton, Security Editor

Time to deploy strong authentication, says Fido

The time has come for organisations to deploy cryptographically backed strong authentication, according to the Fido Alliance, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware in decline, report confirms

The trend of cryptomining replacing ransomware as the most popular money-generating activity by cyber attackers appears to be confirmed by malware stats for the past year Continue Reading

By

• Warwick Ashford, Senior analyst

London cyber innovation centre expands global ties

London innovation centre Plexal has announced international partnerships aimed at boosting global cyber security cooperation Continue Reading

By

• Warwick Ashford, Senior analyst

Davos 2019: Why data sharing is key to AI in Industry 4.0

Machines can learn from humans, but no one does the same job in the same way, so it makes sense to identify best practices Continue Reading

By

• Cliff Saran, Managing Editor

Facebook: US government does not engage in mass and indiscriminate surveillance

Social media giant challenges a ruling by Dublin’s High Court over a judgment that it says made ‘extraordinary and incorrect’ findings about the US legal system Continue Reading

By

• Bill Goodwin, Computer Weekly

€50m GDPR fine for Google is a wake-up call for tech giants

The French data protection authority has fined Google €50m for contravening EU data protection laws, which has been hailed as a warning for tech giants and other data handling firms Continue Reading

By

• Warwick Ashford, Senior analyst

Name and shame firms with poor cyber security, government told

The government should name and shame companies whose cyber security measures fail to protect consumers’ data and firms should implement Active Cyber Defence, an academic report urges Continue Reading

By

• Warwick Ashford, Senior analyst

Podcast: How to get ready for the California Consumer Privacy Act

If you have any customers in California, you need to know about that state’s equivalent to GDPR. Mathieu Gorge of Vigitrust talks through what you need to achieve compliance Continue Reading

By

• Antony Adshead, Storage Editor

Public procurement key to cyber security

Using public procurement as a means of boosting cyber security is the top recommendation for 2019, according to a report based on expert views Continue Reading

By

• Warwick Ashford, Senior analyst

Home Office vetoes privacy campaigner from senior post in surveillance watchdog

The Home Office refuses academic and privacy campaigner, Eric King, security clearance for a senior role at the intelligence services watchdog, despite high-level backing from officials Continue Reading

By

• Bill Goodwin, Computer Weekly

Five issues for SMEs to consider when adopting encryption

Encryption is still considered difficult to deploy and use as a data protection method, especially by small businesses, but considering five key factors can make adoption easier, says Becrypt Continue Reading

By

• Warwick Ashford, Senior analyst

Prepare for no-deal Brexit, says ICO

The UK data protection authority is urging businesses to prepare for a no-deal Brexit to ensure there is no interruption in data flows from Europe Continue Reading

By

• Warwick Ashford, Senior analyst

Breach of nearly 2.7 billion records underlines password flaws

Potentially the biggest personal data breach to date from thousands of sources, some possibly breached as far back as 2008, illustrates the deeply flawed nature of password-based authentication, say industry commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Threat intelligence boosts security training

Security professionals in training can now benefit from real-time threat intelligence data, thanks to a partnership between Digital Shadows and Immersive Labs Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Cloud tech helps to protect advanced networks

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Greg Temm

Researchers discover new Magecart group

Security researchers have uncovered a sub-group of the Magecart hacking group, highlighting the wider risks of web-based supply chain attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook’s high-stakes privacy gamble goes to Dublin court

A high-wire gamble with billions in compensation at stake for European internet users – part of a complex case between Facebook and the Irish information commissioner – hides challenge to the unlawfulness of US state internet surveillance Continue Reading

By

• Kevin Cahill

Security Think Tank: Walk before you run

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

The rise of DevSecOps

The increasing complexity of security threats facing enterprises is leading to DevSecOps approaches, which combine operations and development with security, so that all business units are involved in security operations Continue Reading

By

• Finbarr Toesland

Businesses fail to apply encryption technology effectively

Most businesses are not applying common encryption tools effectively to contain the fallout and costs of data breaches, research shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Apply different techniques to safeguard against rogue code

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Ramsés Gallego, Isaca

Less than half of firms able to detect IoT breaches, study shows

UK firms have one of the lowest internet-of-things device breach detection capabilities in Europe, a study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

SingHealth and IT supplier fined S$1m for data breach

Singapore’s data protection commission considered the fact that both SingHealth and its IT supplier fell prey to sophisticated threat actors, among other factors, when meting out the fine Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Combine SDN, containerisation and encryption to halt rogue code

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Mary-Jo de Leeuw, (ISC)2