Privacy and data protection

Spike in cyber attacks targeting Cisco Webex

Cyber attacks targeting a leading web conference tool have increased dramatically and sextortion is becoming more popular with attackers, according to WatchGuard Technologies Continue Reading

By

• Warwick Ashford, Senior analyst

UK cyber experts to support global company boards

A consortium of UK cyber security experts and academics is to support multinational company boards to tackle online threats and protect against cyber crime Continue Reading

By

• Warwick Ashford, Senior analyst

UK government organisations’ email security lagging

Email security in UK government organisations is lagging far behind that of central government, analysis reveals, with less than a third implementing standard protection Continue Reading

By

• Warwick Ashford, Senior analyst

Growing board focus on cyber risk challenges current thinking

As digital transformation continues to drive change in the business and risk landscape, business and cyber security leaders need to improve discussions around this topic Continue Reading

By

• Marcus Alldrick

More than half of EU firms report cyber attack losses

More than half of European firms admit business disruption and data loss due to cyber attacks in the past 24 months, with UK firms among the most targeted, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Build in trust, experts advise cyber innovators

Trust will be increasingly important in the digital era, and is therefore a key component of new products and services, experts have told cyber security innovators Continue Reading

By

• Warwick Ashford, Senior analyst

EU law enforcement agencies prepare for major cyber attacks

Law enforcement agencies across the European Union are preparing for major cross-border cyber attacks, says Europol Continue Reading

By

• Warwick Ashford, Senior analyst

CyLon announces latest cyber security accelerator cohort

Swiss and Israeli cyber security startups join teams from the UK for CyLon’s ninth London accelerator cohort Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses failing to grasp DevSecOps

UK and US businesses are being exposed to security risks by a failure to integrate security into DevOps programmes, research shows Continue Reading

By

• Warwick Ashford, Senior analyst

Brexit complicating already complex data protection

GDPR impact is yet to be felt and data protection is set to become increasingly complex, with Brexit adding even more complexity that could be overwhelming, warns head of international privacy association Continue Reading

By

• Warwick Ashford, Senior analyst

Why the web needs patching

Regulators want to curb the web giants, while World Wide Web inventor Tim Berners-Lee believes problems with the web's misuse can be fixed Continue Reading

By

• Cliff Saran, Managing Editor

National Cyber Security Programme at risk of missing targets

The National Audit Office has sharply criticised the Cabinet Office over failings in how it set up the National Cyber Security Programme that mean it may struggle to meet its goals Continue Reading

By

• Alex Scroxton, Security Editor

Avoid infosec mistakes of the past, urges Robert Hannigan

Technology innovators need to avoid security mistakes of the past by building in integrity so that products and services can be used with trust and confidence, says former GCHQ director Continue Reading

By

• Warwick Ashford, Senior analyst

Met Police collaborated with US prosecutors in WikiLeaks investigation

The Metropolitan Police has confirmed it exchanged information on WikiLeaks staff in the UK with the US Department of Justice, which is conducting criminal investigations into the organisation Continue Reading

By

• BIll Goodwin & Niels Ladefoged

Security Think Tank: Map your own important risk metrics

What should be the key cyber security risk indicator for any business? Continue Reading

By

• RV Raghu, ISACA

ICO pledges to support innovation

UK data privacy watchdog is increasingly gearing up to support innovation to ensure developers of tech and digital services do not lose society’s trust Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Financial loss as a key security risk indicator

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Mike Yeomans, Information Security Forum

Almost half UK firms hit by phishing attacks

Almost half of UK organisations have been compromised in the past two years using phishing attacks, despite high levels of cyber awareness and training, research shows Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attackers favouring stealthier attacks, says Darktrace

Cyber attackers are moving away from ransomware to stealthier tactics, including banking Trojans and cryptojacking, an analysis of attack data reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: No one key risk indicator is generic across all businesses

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Simon Persin, Turnkey Consulting

Many firms unaware of data exfiltration threat

Many firms are unaware that they are being targeted by cyber espionage and that data is being exfiltrated from their networks by overseas adversaries, a security firm warns Continue Reading

By

• Warwick Ashford, Senior analyst

Despite failings, exec appetite for secure collaboration growing

Top business decision makers are more reckless than ever with company data, but the appetite for secure collaboration tools is growing, survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Key considerations for determining cyber risk

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Petra Wenham

ICO data raises doubts over UK firms’ ability to manage breaches

Most ICO data breach reports late and incomplete prior to full GDPR implementation, FoI request data reveals, raising doubts about breach prevention, detection and response capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Growing awareness of mobile security risk

There is a growing awareness of mobile security risk among members of the information security community, but most admit accessing corporate data from personal devices or public Wi-Fi Continue Reading

By

• Warwick Ashford, Senior analyst

Equifax defends against scathing Senate report

Equifax chief says firm did take cyber security seriously in a response to a scathing Senate report on the credit rating agency’s 2017 data breach, which experts say highlights failings around open source software Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Five elements of a key cyber risk indicator

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Mary-Jo de Leeuw, (ISC)2

Facebook’s objections to court concerns over privacy more about ‘optics’ than facts

Facebook’s challenge to a High Court ruling that raises serious concerns about data transfers between Europe and the US is more about appearance than facts, lawyers for the Irish Data Protection Commission told Dublin's Supreme Court Continue Reading

CW Europe: Robots deliver savings for Dutch postal service

In this issue we look at how Dutch delivery company PostNL is reaping huge efficiency savings by using robotic technology to automate time-consuming administrative tasks, Facebook’s opposition to the referral of questions about the legality of data transfers between Europe and the US to the European Court of Justice, and how Oslo is thriving from a unique combination of business agility, a cultural receptiveness to technology, and a social desire to do good. Read the issue now. Continue Reading

Vodafone defends its use of Huawei as 5G trials go live

As Vodafone begins trials of a live 5G service in Bristol, Cardiff and Liverpool, the operator’s CTO and general counsel have defended their use of Huawei equipment in Vodafone’s network and challenged its detractors to produce evidence of spying Continue Reading

By

• Alex Scroxton, Security Editor

How aid workers are using encrypted communications to stay safe in conflict zones

Often operating in volatile conflict zones, aid workers are frequently turning to encrypted communication services to protect each other Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

ICO head still in top three of DataIQ data leader list

The UK’s information commissioner remains in the top three data leaders after claiming top spot in 2018 in the DataIQ 100 list of most influential data leaders, but GDPR is not the only focus in the industry Continue Reading

By

• Warwick Ashford, Senior analyst

Machine identities for sale on dark web, business warned

Academics and security professionals are warning businesses that certificates used to establish trust and privacy on the internet are being weaponised and sold to cyber criminals bundled with other services Continue Reading

By

• Warwick Ashford, Senior analyst

US government ban unconstitutional, says Huawei

Huawei’s lawsuit accuses Washington of violating the US Constitution by banning it from government contracts Continue Reading

By

• Alex Scroxton, Security Editor

Zuckerberg commits to Facebook becoming privacy-focused

After a storm of controversy and criticism over the way Facebook fails to protect users’ privacy, the company’s chief says he plans to transform it into a privacy-focused platform Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber espionage group behind SingHealth attack

A cyber espionage group dubbed Whitefly has been identified as the perpetrators behind Singapore’s largest data breach to date Continue Reading

By

• Aaron Tan, TechTarget

5G one of several security challenges to CNI

5G technology is among the key security challenges facing critical national infrastructure and all other business organisations, according to the Information Security Forum Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Aim for business intelligence-driven system of risk indicators

What should be the key cyber security risk indicator for any business? Continue Reading

US doubles down on Huawei fears as Chinese prepare to sue

US secretary of state Mike Pompeo has reinforced his attacks on Huawei as the firm apparently prepares to sue the US government over its federal-level ban Continue Reading

By

• Alex Scroxton, Security Editor

IT Priorities 2019: What projects are IT professionals spending their budgets on?

The Computer Weekly/TechTarget IT Priorities 2019 survey finds that cloud maturity, security and automation are among the hot areas for spending Continue Reading

By

• Cliff Saran, Managing Editor

Security Think Tank: Invest in proactive approach to security and digital risk

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Maxine Holt, Omdia

Cyber awareness of UK boards found wanting

Boards of many of the UK’s biggest firms must do more to be cyber aware, according to a government report. Continue Reading

By

• Warwick Ashford, Senior analyst

RSA Security bets on digital risk management

RSA Security chief predicts that managing digital risk is set to become increasingly important to organisations as they complete their journeys to digital transformation Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Cyber metrics need to be meaningful

What should be the key cyber security risk indicator for any business? Continue Reading

By

• Paddy Francis

Clearer North Korean link to global infrastructure malware campaign

Researchers have uncovered clearer links between a North Korean hacking group and a cyber espionage campaign targeting government, defence, nuclear, energy and financial organisations around the world Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook asked George Osborne to influence EU data protection law

Facebook COO Sheryl Sandberg invited one of the chancellor’s children to Facebook’s office as part of a intensive lobbying programme to influence European data protection legislation Continue Reading

By

• Bill Goodwin, Duncan Campbell & Sebastian Klovig Skelton

Facebook facing 10 GDPR investigations in Ireland

Ireland’s Data Protection Commission has revealed it has 10 active probes into Facebook, Instagram and WhatsApp, as well as Apple, LinkedIn and Twitter, on its books Continue Reading

By

• Alex Scroxton, Security Editor

Using simulated disaster management to tackle the security skills gap

With the increasing need for cyber security professionals, organisations are turning to new ways to address the skills gap facing the security sector Continue Reading

By

• Peter Ray Allison

Teen becomes first millionaire through HackerOne bug bounties

A self-taught teen hacker from Argentina has become the first bug bounty hacker to become a millionaire by hacking to create a safer internet Continue Reading

By

• Warwick Ashford, Senior analyst

Supplier consolidation tops infosec goals for 2019

Supplier consolidation, collaboration between networking and security teams, and security awareness are the top priorities for information security professionals trying to prepare for the unknown, annual benchmark study shows Continue Reading

By

• Warwick Ashford, Senior analyst

London cyber security innovation centre issues open invitation

Government-backed cyber security innovation centre is calling for innovators to address key challenges facing the cyber security industry, offering a year of bespoke support to scale quickly Continue Reading

By

• Warwick Ashford, Senior analyst

Sextortion accounts for one in 10 spear-phishing emails

Email sextortion scams have increased in frequency and scope in the past four months, as well as evolving to bypass spam filters and trick recipients into reading the messages, research shows Continue Reading

By

• Warwick Ashford, Senior analyst

Icann calls for community collaboration to protect the internet

The domain name system watchdog Icann has reaffirmed its commitment to engage in collaborative efforts to ensure the security, stability and resiliency of the internet’s global identifier systems Continue Reading

By

• Warwick Ashford, Senior analyst

Chinese cyber attack group Bronze Union targeting weapons tech

Weapons technology is among the latest targets of a highly adaptable cyber espionage group that uses a wide range of publicly available and custom attack tools, presenting a challenge to network defenders Continue Reading

By

• Warwick Ashford, Senior analyst

Most UK consumers say Facebook should be regulated

Nearly three-quarters of UK consumers feel the social platform is damaging people’s mental health, survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Wearable technology in the workplace and data protection law

Wearable technology is slowly creeping into the workplace to monitor staff performance and health, but do employers understand the legal implications? We assess the data protection implications Continue Reading

By

• Charlotte Allery, Coffin Mew

Security is battling to keep pace with cloud adoption

Cloud-based business initiatives are accelerating more rapidly than security teams can secure them, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals earn $3bn a year exploiting social platforms

Businesses urged to respond to research findings that the ready availability of hacking tools, wildfire spread of malware and proliferation of cryptocurrency mining has seen a 300-fold increase in social media-enabled cyber crimes in two years Continue Reading

By

• Warwick Ashford, Senior analyst

EU gathers momentum in cyber security legislation and cooperation

The past two years have seen a step-change in the rate at which the European Union is putting legislation in place to support improved cyber security standards, collaboration and sharing of resources, says digital commissioner’s representative Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber power needs wider discussion, says GCHQ director

The topic of cyber power needs wider discussion, says GCHQ head in a speech about the opportunities of digital innovation such as 5G, as well as the accompanying complexity and risk, with particular mention of China and Huawei Continue Reading

By

• Warwick Ashford, Senior analyst

Android now Fido2 certified

Mobile operating system’s certification accelerates global migration beyond passwords, says Fido Alliance, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook planned to spy on Android phone users, internal emails reveal

Facebook planned to use its Android app to track the location of its customers and to allow advertisers to send political advertising and invites to dating sites to ‘single’ people, confidential documents show Continue Reading

By

• Bill Goodwin, Computer Weekly

US may cut off countries that use Huawei in 5G networks

US secretary of state Mike Pompeo has said America may scale back or cut military and diplomatic ties with countries that use Huawei equipment in national 5G networks Continue Reading

By

• Alex Scroxton, Security Editor

BlackBerry acquires Cylance to cement security capability

BlackBerry moves forward with its plans to establish itself as an enterprise security firm, focusing on internet-connected endpoints Continue Reading

By

• Warwick Ashford, Senior analyst

Thales to sell nCipher to Entrust Datacard

Thales eSecurity has announced that it is to sell HSM specialist nCipher, the UK-based encryption firm it acquired in 2008, after spinning it out as a separate business Continue Reading

By

• Warwick Ashford, Senior analyst

Nato supports collaboration on cyber security

Nato supports collaboration and cooperation on cyber security as an organisation founded on the principle of collective defence, says representative Continue Reading

By

• Warwick Ashford, Senior analyst

UK committed to working with EU cyber security partners

NCSC CEO uses cyber security conference in Brussels to set out his agency’s position on Brexit, 5G security, Huawei, market incentives and international cooperation on active cyber defence Continue Reading

By

• Warwick Ashford, Senior analyst

Cooperation a key theme of Brussels cyber security symposium

Fostering trust-based cooperation of like-minded cyber security stakeholders to create new strategies, policies and standards emerged as a key theme at a cyber security conference in Brussels Continue Reading

By

• Warwick Ashford, Senior analyst

Toyota Australia under cyber attack

The company has confirmed the attempted attack that took out its email system, forcing employees to turn to other forms of communication to continue working Continue Reading

By

• Aaron Tan, TechTarget

Breaking the chains: How FUD is holding the cyber sector hostage

The cyber security industry must move past fear tactics and get back to the basics of good cyber security practice Continue Reading

By

• Tom Kranz, Cyber Lab

MWC 2019: Huawei claims massive lead on 5G readiness

At a pre-Mobile World Congress event in London, Huawei’s Ryan Ding shared details of the firm’s rapidly expanding 5G mobile portfolio, and laid into his competitors Continue Reading

By

• Alex Scroxton, Security Editor

UK naïve to think China won’t try to exploit Huawei

A think-tank report has branded the UK government naïve at best, irresponsible at worst, over its use of Chinese networking equipment in critical national infrastructure Continue Reading

By

• Alex Scroxton, Security Editor

Activist Lauri Love’s computer ‘contained hacked data’, says judge

Lauri Love, who has been accused of hacking into US government computer systems, has lost a legal action against the NCA for the return of his computers and storage device Continue Reading

By

• Bill Goodwin, Computer Weekly

No More Ransom releases GandCrab decryption tool

Another free decryption tool is available that allows anyone infected with the latest versions of the GandCrab ransomware to regain control of their files and avoid paying the fee Continue Reading

By

• Warwick Ashford, Senior analyst

IT Priorities 2019: Cyber security and risk management among top priorities for 2019

This year’s Computer Weekly/TechTarget IT Priorities research shows that cyber security and risk management are among the top investment priorities Continue Reading

By

• Warwick Ashford, Senior analyst

Huawei’s Ren Zhengfei: US won’t crush us

Huawei CEO Ren Zhengfei has taken a more combative stance in the ongoing row over the firm’s alleged links to the Chinese intelligence services Continue Reading

By

• Alex Scroxton, Security Editor

When is it best to stick with paper?

In this week’s Computer Weekly, sometimes going digital is not necessarily the best thing to do – we weigh the pros and cons of paper versus technology. Our new buyer’s guide examines the challenges of asset management as you move IT infrastructure to the cloud. And we look at the growing role of software developers in the future of networking. Read the issue now. Continue Reading

Collaborative security approaches underpin container success

Containers are helping organisations to accelerate age-old software development approaches, but success is underpinned by a constant and team-wide attention to security Continue Reading

By

• Nicholas Fearn

NCSC signals UK may take softer line on Huawei

The UK’s National Cyber Security Centre suggests Huawei will be allowed to form core elements of the country’s 5G mobile network infrastructure after all Continue Reading

By

• Alex Scroxton, Security Editor

CISOs under increasing pressure, study shows

Cyber security professionals are under growing pressure from workloads and budget deficits, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

(ISC)² invests in professional development of security workforce

Security industry association sets up Professional Development Institute to extend training offerings beyond certification Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: UTM a key part of a well-rounded security strategy

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Mary-Jo de Leeuw, (ISC)2

Australian government warns of blockchain gaps

Digital Transformation Agency dispels some myths around blockchain, calling for government agencies to be cautious about using the technology Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: No tech will ever counter-balance poorly implemented processes

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

APAC healthcare providers losing $23m to cyber attacks

Healthcare organisations in the Asia-Pacific region could lose an average of $23.3m to cyber attacks, including losses from productivity and customer churn, a study finds Continue Reading

By

• Aaron Tan, TechTarget

Lauri Love takes legal action against NCA for return of seized computers

Lauri Love, a former engineering student who won a battle with the US Department of Justice against extradition to the US to face hacking charges, is suing the UK's intelligence agency, the NCA, for the return of his seized computers Continue Reading

By

• Bill Goodwin, Computer Weekly

Security Think Tank: Know strengths and weaknesses of UTM systems

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Simon Persin, Turnkey Consulting

Australia’s defence department keeps old PCs out of landfills

Department has securely wiped data from used devices and kept 1,300 tonnes of e-waste out of landfills Continue Reading

By

• Beverley Head

Mumsnet denies 'thousands' affected by software glitch-induced data breach

Parenting advice site Mumsnet moves to clear up reports that thousands of users have been affected by its recent data breach Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

A guide to choosing cloud-based security services

Cloud-based security services can help organisations with a growing cloud footprint to reduce cost and address the manpower crunch in cyber security Continue Reading

By

• Aaron Tan, TechTarget

Security Think Tank: Approach UTM with caution

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Simon McCalla, Nominet

Data breaches in Australia show no sign of abating

Australia’s privacy watchdog recorded over 800 cases of data breaches, nearly one year into the country’s mandatory data breach notification regime Continue Reading

By

• Beverley Head

Huawei: We are not spying on the UK

Huawei’s Ryan Ding tells the British government that the company has never, and will never, use its technology to assist the Chinese intelligence services Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Focus UTM capabilities on security and business needs

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Civil liberties groups to challenge bulk surveillance and intelligence sharing in Strasbourg

Coalition of campaigning groups wins the right to challenge the UK’s use of bulk surveillance powers, which allows suspicionless surveillance of the population and sharing of intercepted data with overseas intelligence agencies, in European Court of Human Rights Continue Reading

By

• Bill Goodwin, Computer Weekly

Cambridge launches urban data IoT project

The city of Cambridge will use Telensa IoT sensors and a Microsoft Azure platform to better manage its urban data assets Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Many routes to UTM to boost security capabilities

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Petra Wenham

Security Think Tank: Arguments for and against unified threat management

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

By

• Mike Gillespie

Massive uptick in cyber attacks targeting Student Loans Company

Cyber criminals used a range of techniques, as well as malware, malicious emails and calls, in attempts to access confidential financial data belonging to students, in massive uptick in attacks in the past year Continue Reading

By

• Warwick Ashford, Senior analyst

Met Police deploys live facial recognition technology for ninth time

Police say technology is helping to prevent and detect crime by identifying wanted criminals, but privacy groups have voiced their opposition Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor