Privacy and data protection

Matching disaster recovery to cyber threats

While it is important to take steps to prevent cyber attacks, they can still happen. That is why disaster recovery practices are equally critical Continue Reading

By

• Nicholas Fearn

Hackers increasingly targeting cloud infrastructure

Cloud infrastructure is a growing target for cyber attackers because of available computing resources, as well as the repositories of valuable data, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Brexit proposal calls for standards alignment and data sharing

Although the government’s Brexit whitepaper focuses on curbing immigration, collaboration on cyber crime, data sharing and services are among the bargaining chips Continue Reading

By

• Cliff Saran, Managing Editor

Security Think Tank: A good password policy alone is not enough

In light of the fact that complex passwords are not as strong as most people think and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Bruce Beam , (ISC)²

Cyber attackers cashing in on ‘hidden’ attack surface

Cyber attackers are cashing in on organisations’ lack of visibility into all online interactions that can involve multiple third parties, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

An exciting time to be in cyber security innovation

Cyber security innovation has received a £1.35m shot in the arm from the UK government with the opening of a new innovation centre in London. Computer Weekly looks at why now is a good time to be working and innovating in this industry Continue Reading

By

• Warwick Ashford, Senior analyst

Cloudian adds Storage Made Easy file-sync-and-share compliance

Object storage maker adds file-sync-and-share with compliance filters from Storage Made Easy to restrict movement of potentially sensitive data between endpoints and datacentres Continue Reading

By

• Antony Adshead, Storage Editor

White-hat hackers find record number of vulnerabilities

White-hat hackers are finding more vulnerabilities than ever before, with crowdsourced security testing continuing to gain popularity, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Cracking the code – what makes a good password?

In light of the fact complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Ramsés Gallego, Isaca

Facebook could face ICO fine of up to £500,000

Facebook could face the maximum fine provided by the UK’s previous data protection laws for lack of transparency and security issues relating to the harvesting of data, the UK’s privacy watchdog has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Hidden costs of data breaches difficult to manage, study finds

The full cost of “mega breaches” can be up to £264m, with the average UK data breach costing £2.69m, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Lords urge Brexit negotiators to reach agreement on security

Time is running out for the UK and EU to agree on a future security relationship and if negotiators fail to find common ground, all stakeholders stand to lose, warns a Lords’ committee Continue Reading

By

• Warwick Ashford, Senior analyst

Collaborative taskforce launches security intelligence network

BAE Systems, Vodafone, cyber security incubator CyLon and other partners have joined forces in unveiling a manifesto for safeguarding society in the digital age Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Passwords alone are not good enough

In the light of the fact that complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Infosec community welcomes bank sector focus on cyber resilience

The information security community has welcomed regulators’ call on the banking industry to demonstrate their capability to respond to cyber attacks because it highlights the importance of cyber resilience for all businesses Continue Reading

By

• Warwick Ashford, Senior analyst

ICO Grants Programme launches second round of funding

The ICO is inviting a second round of applications for funding to promote and support independent, innovative research and solutions focused on privacy and data protection Continue Reading

By

• Warwick Ashford, Senior analyst

European Parliament calls for suspension of Privacy Shield

The Privacy Shield framework that replaced the Safe Harbour agreement for personal data transfers between the EU and the US is under increased pressure due to alleged non-compliance by US firms Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: How to create good passwords and add security layers

In light of the fact complex passwords are not as strong as most people think and most password strategies inevitably lead to people following them blindly, what actually makes a good password - and when is a password alone not enough? Continue Reading

By

• Simon Persin, Turnkey Consulting

Beware blockchain security blindspots, warns RSA

Companies need to ensure that rushed blockchain and other new technology projects are not introducing security vulnerabilities by gaining granular visibility of network activity, according to RSA Security Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Complex passwords provide a false sense of security

In the light of the fact that complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Tim Holman, 2-sec

Israel accuses Hamas of using spy apps to target soldiers

Israel has accused Hamas of using apps to hijack soldiers’ phones to spy on them, and UK defence secretary demonstrates how effective that could be Continue Reading

By

• Warwick Ashford, Senior analyst

Exiting EU committee cattle-prods government on 'data adequacy'

House of Commons Select Committee for Exiting the European Union urges the government to start the process to secure a “Data Adequacy Decision” from the EU pronto Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

Security Think Tank: Use pass phrases and 2FA to beef up access control

In light of the fact complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password – and when is a password alone not enough? Continue Reading

By

• Paddy Francis

NHS data breach caused details of 150,000 patients to be shared

The NHS has inadvertently shared the confidential data of 150,000 patients over a three-year period due to a coding error in one of the most common GP IT systems Continue Reading

By

• Lis Evenstad

Feds expand Facebook data sharing probe

The US federal probe into Facebook’s data sharing practices is expanding and MEPs are considering new measures as the firm reveals it granted extended access to 61 companies and admits to another data sharing software bug Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Put more layers around passwords to up security

In light of the fact that complex passwords are not as strong as most people think and most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Maxine Holt, Omdia

HMRC deactivates record number of fake websites

HM Revenue & Customs has removed more than 20,000 malicious websites in the past year, but warns people to stay alert to the threat from online fraudsters Continue Reading

By

• Warwick Ashford, Senior analyst

UK government cyber security standard welcomed

The information security community has welcomed the publication of the government’s minimum cyber security standard, which could be used by any organisation to improve its cyber defences Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR exposes breach reporting flaws

In the month since the GDPR compliance deadline, it has become clear that many organisations are not well prepared for personal data breach notifications, says PwC’s data protection lead Continue Reading

By

• Warwick Ashford, Senior analyst

UK biometrics strategy criticised for lack of content

The long-awaited government biometrics strategy falls short of the mark, say critics, failing to provide a detailed and coherent strategy or governance framework Continue Reading

By

• Warwick Ashford, Senior analyst

British Muslim considers appeal after court rules repeated terrorism stops are legal

Muzaffar Abdullah, a 37-year-old gas engineer who has been stopped and questioned by police at airports at least 10 times, is considering an appeal after being found guilty of wilful obstruction for refusing to answer questions under controversial terrorism legislation. He received a conditional discharge. Continue Reading

By

• Bill Goodwin, Computer Weekly

First Lorca cohort to focus on security orchestration

The first companies to benefit from the new London cyber innovation centre will focus on cyber security orchestration and automation Continue Reading

By

• Warwick Ashford, Senior analyst

Ticketmaster warns of third-party data breach

Ticketmaster has warned of a potential data breach through malware found in a third-party customer support service, underlining the importance of supply chain security Continue Reading

By

• Warwick Ashford, Senior analyst

Lorca will help drive UK cyber exports, says ex-GCHQ boss

New London cyber security innovation centre will help to boost exports of UK cyber security expertise, says former GCHQ director Continue Reading

By

• Warwick Ashford, Senior analyst

Government must challenge popular smart city misconceptions

A report by the All Party Parliamentary Group on Smart Cities says many people feel alienated by the concept, and calls on the government to challenge some popular misconceptions Continue Reading

By

• Alex Scroxton, Security Editor

Cyber criminals 'infect and collect' in cryptojacking surge

Illicit cryptocurrency mining offers cyber criminals lower risk, higher efficacy and greater ease of making money, adding passive exploitation to ransomware extortion, data breach theft and fraud, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

AI and other tech key to post-Brexit success, says Matt Hancock

Digital secretary Matt Hancock highlights the importance of emerging technologies to the future of the UK at the opening of London’s cyber security innovation centre Continue Reading

By

• Warwick Ashford, Senior analyst

Global IoT security standard remains elusive

Despite the lack of a global internet of things security standard, existing security frameworks are on the same page in areas such as device upgradability and data stewardship Continue Reading

By

• Aaron Tan, TechTarget

British Muslim challenges use of intelligence databases for repeated police stops

Muzaffar Abdullah is challenging police use of intelligence databases to repeatedly stop and question Muslims, after being arrested for refusing to answer questions under Schedule 7 of the Terrorism Act 2000. His lawyers say he had been stopped at least 10 times before and the police should have known he had no connection to terrorism Continue Reading

By

• Bill Goodwin, Computer Weekly

High-Tech Bridge bets on machine learning capabilities

Machine learning has a great potential to drive the automation of some security tasks to free up information security professionals to do more strategic work, says High-Tech Bridge founder Continue Reading

By

• Warwick Ashford, Senior analyst

Hospitality industry under siege from botnets

The hospitality industry, including hotels, airlines and cruise lines, is the biggest target for cyber criminal botnet attacks that abuse credentials and overwhelm online systems, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

London cyber innovation centre opens

The government-funded London cyber innovation centre is set to open today and welcome the first cyber security businesses as a study reveals that a quarter of UK firms lack the right security technology Continue Reading

By

• Warwick Ashford, Senior analyst

UK privacy groups join call on EU to halt comms data collection

UK-based privacy groups have joined calls for a halt to the collection of communications data by European Union member states Continue Reading

By

• Warwick Ashford, Senior analyst

UK cyber skills in demand, says Dorset firm C3IA Solutions

UK cyber security skills are in demand and there is a bright future in exporting them, according to Dorset-based firm C3IA Solutions Continue Reading

By

• Warwick Ashford, Senior analyst

Firms look to automation for cloud security

In the face of increasingly sophisticated and nation-state-sponsored cyber attacks, organisations are looking to managed security services and automation for security in the cloud and on-premise Continue Reading

By

• Warwick Ashford, Senior analyst

Infosec pros expect increase in nation state cyber attacks

Most information security professionals expect a rise in nation state cyber attacks, with more than two-thirds preparing to defend against them Continue Reading

By

• Warwick Ashford, Senior analyst

Government sponsors diversity cyber academy

The UK government has awarded a grant for the establishment of a cyber academy to promote neurodiversity in the industry Continue Reading

By

• Warwick Ashford, Senior analyst

Younger employees 'main culprits' for security breaches

UK senior decision makers believe younger workers are the biggest risk to cyber security, but are doing little to support them and reduce that risk, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Most small businesses fail to act after a cyber attack  

Nearly half of small businesses have suffered at least one cyber attack in the past year, yet most fail to take action afterwards, citing lack of budget at the biggest challenge Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore remains hotbed for cyber threats

Singapore was a victim of advanced persistent threats, phishing and website defacements in 2017, according to the latest threat landscape report by the Cyber Security Agency Continue Reading

By

• Aaron Tan, TechTarget

Surface web used in private data sales

The surface web plays an integral role in the selling of personal information, a report on identify fraud has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

MPs see risk to critical infrastructure as top threat

A majority of MPs are concerned about the cyber threat to critical national infrastructure, a survey has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore firms unprepared for GDPR

An EY study reveals that only 10% of organisations in Singapore are ready to comply with the Europe’s new data protection regime. Continue Reading

Microsoft becomes devoted to open source developers

In this week’s Computer Weekly, after Microsoft’s recent acquisition of GitHub, we examine the software giant’s tools for embracing open source developers. Secretary of state for digital, culture, media and sport Matt Hancock talks about growing the UK digital economy and supporting the tech sector. And we look at SAP’s next steps for its “intelligent enterprise” strategy. Read the issue now. Continue Reading

European Parliament heads for showdown with US over Privacy Shield

By Kevin Cahill The Justice Committee of the European Parliament has set the scene for a major showdown with the US over data transfers between the EU and the US by setting a Sept 1st deadline for ... Continue Reading

By

• Bill Goodwin, Computer Weekly

AI is key to keeping IBM compliant with GDPR

Artificial intelligence is vital for keeping IBM compliant with the principles of the General Data Protection Regulation, which, in turn, provides opportunities for business, says the company’s data protection officer Continue Reading

By

• Warwick Ashford, Senior analyst

NCSC urges action after Dixons Carphone breach

The National Cyber Security Centre (NCSC) is urging UK business to improve data protection capabilities after Dixons Carphone revealed that millions of payment card and personal data records may have been compromised in a cyber breach Continue Reading

By

• Warwick Ashford, Senior analyst

Dixons Carphone admits 'falling short' on data protection

Dixons Carphone has warned that millions of credit card and personal data records may have been compromised in a cyber breach Continue Reading

By

• Warwick Ashford, Senior analyst

Insurer Beazley meets global challenge to secure mobile workforce

Beazley has stolen a march on other London-market insurers by implementing a versatile global digital workspace with improved security Continue Reading

By

• Christian Annesley

Security Think Tank: GDPR requires unprecedented view of data flows

Why is it important to know where data flows, with whom it's shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Yves Le Roux, (ISC)2

Privacy Shield under threat by US non-compliance

The Privacy Shield framework that replaced the Safe Harbour agreement for personal data transfers between the EU and the US is under threat due to non-compliance by US firms Continue Reading

By

• Warwick Ashford, Senior analyst

BT announces “unhackable” quantum-secured network

In the face of the threat that quantum computers could crack many of the encryption methods used to protect highly sensitive data, BT has developed a “quantum-secured” network Continue Reading

By

• Warwick Ashford, Senior analyst

Email-based cyber attacks gathering momentum

Email-based cyber attacks are gathering momentum and the cost of these attacks are rising, with several hidden costs, a survey of IT professionals in Europe, Middle East and Africa reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore career website hit by PageUp malware scare

A Singapore government career website was among others affected by a malware attack on an Australian recruitment technology supplier Continue Reading

By

• Aaron Tan, TechTarget

Industry must do more to open up cyber security profession

Talented and successful cyber security researcher and passionate advocate for the profession, James Lyne reveals that he fell into security more by accident than design, and says training and recruitment must change to find and develop talented individuals Continue Reading

By

• Warwick Ashford, Senior analyst

How Australia is keeping pace with ICS threats

Besides bridging the security gap between IT and operational technology teams, Australia is driving efforts to bolster the security of IoT devices Continue Reading

By

• Beverley Head

Security Think Tank: Data flow visibility is essential to security

Why is it important to know where data flows, with whom it is shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Elisabetta Zaccaria, Secure Chorus

Parliamentary computers at risk after staff targeted by phone phishing

Police are investigating phone phishing attacks targeted against Parliament. Staff warned not to disclose details of their computers to fraudulent callers. Continue Reading

By

• Bill Goodwin, Computer Weekly

BYOD for mobile ‘a year away’ for Williams F1

Companies in the Williams Group – the Formula One racing operation Williams Grand Prix Engineering and its high-growth sister operation Williams Advanced Engineering – are investing with mobile security front-of-mind to enable more agile working practices within 12 months Continue Reading

By

• Christian Annesley

Security Think Tank: Focus on data protection, but do not rely on DLP alone

Why is it important to know where data flows, with whom it's shared and where it lives at rest – and what is the best way of achieving this? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

European Court hearing into EU-US data transfer system will not happen for at least 18 months

By Kevin Cahill The European Court of Justice may not have a hearing into crucial questions about the legality of the EU-US data transfer system for at least 18 months according to a spokesperson ... Continue Reading

By

• Bill Goodwin, Computer Weekly

Businesses must report cyber crime, panel urges

By reporting cyber crimes, private enterprise can help improve national and international cyber defences and bring criminals to justice, according to an expert panel Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security focus too much on tech, says Domino’s CISO

Many organisations are still focusing only on technology and compliance, which means their cyber defences are not as solid as they think, according to Domino’s Pizza chief information security officer Continue Reading

By

• Warwick Ashford, Senior analyst

IT spending reaches 10-year high as CIOs struggle with digital technology strategy

IT leaders have seen their budgets and headcounts rise for the first time in 10 years, but face challenges implementing their digital strategies Continue Reading

By

• Bill Goodwin, Computer Weekly

Nation state cyber attacks affect all, says former GCHQ boss

Cyber attacks by nation states used to be a small part of the problem for state authorities to address, but now all organisations are potential targets of nation state attacks, according to former GCHQ head Continue Reading

By

• Warwick Ashford, Senior analyst

Business not learning from past cyber security incidents

Businesses are still not getting the basics right and they are not learning from past security incidents, according to world-renowned security blogger and trainer Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Understand data for risk-based protection

Why is it important to know where data flows, with whom it is shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Simon Persin, Turnkey Consulting

GDPR and backup: A potential minefield easily avoided

The right to be forgotten will be impossible in backups and snapshots, but systems can be built that automate for compliance, says Andy Barratt of security consultancy Coalfire Continue Reading

By

• Antony Adshead, Storage Editor

We need to design for security and privacy, says Martha Lane Fox

The digital future is bright, but only if society works through a gear change in its relationship with technology, and demands products and services that are secure and private by design, says internet service pioneer Continue Reading

By

• Warwick Ashford, Senior analyst

Understanding is key to security awareness, says specialist

Only if people understand why cyber security matters will they change their behaviours as a result of awareness training, according to a human behaviour specialist and cyber security consultant Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Ignorance about data is tantamount to negligence

Why is it important to know where data flows, with whom it's shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Tim Holman, 2-sec

Cyber attacks not sophisticated, says Just Eat CISO

The chief information security officer of Just Eat has challenged the perception that all cyber attacks are sophisticated and that it is impossible to fill cyber security jobs Continue Reading

By

• Warwick Ashford, Senior analyst

Nexsan adds Assureon Cloud Transfer for hybrid cloud archiving

Nexsan archiving appliances add hybrid cloud capability to AWS and Azure cloud for unstructured data, targeting users that want to retain files on-site with cloud access Continue Reading

By

• Antony Adshead, Storage Editor

Boards not asking right security questions, says Dido Harding

Former TalkTalk CEO says boards are still not asking the right cyber security questions, do not understand that they should be making cyber risk decisions, and are not communicating with engineers Continue Reading

By

• Warwick Ashford, Senior analyst

Application security more important than ever

Applications have an increasingly crucial role in our lives, yet they are also a real security threat, with hackers always finding new ways to bypass security defences. Computer Weekly looks at how organisations are responding to the challenge Continue Reading

By

• Nicholas Fearn

Security Think Tank: Use data flow information to protect systems

Why is it important to know where data flows, with whom it's shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Paddy Francis

Technology key to new UK counter-terrorism strategy

Technologies such as machine learning and data analytics are key to the UK government’s updated counter-terrorism strategy Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR – like a lot of regulation – will mostly benefit the big incumbents

The law of unintended consequences applies to the new EU data protection laws, because the big players it seeks to regulate can better afford to comply Continue Reading

By

• Tim Worstall, Adam Smith Institute

Security Think Tank: Data governance is essential to data security

Why is it important to know where data flows, with whom it's shared and where it lives at rest – and what is the best way of achieving this? Continue Reading

By

• Raef Meeuwisse

Offensive AI unlikely in the near future, says Mikko Hypponen

Cyber criminals are not close to being able to use AI for attack purposes, according to industry veteran Mikko Hypponen, who has been at the forefront of AI use in cyber defence for several years Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Data controllers are essential in modern business environment

Why is it important to know where data flows, with whom it's shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Petra Wenham

Security suppliers need to interact with community, says researcher

Security suppliers need to interact with the community to get feedback on their products before launch to ensure they have not missed any vulnerabilities, a security researchers advises Continue Reading

By

• Warwick Ashford, Senior analyst

Fintech professional’s tech predictions: 9- Gamers monitored by businesses and authorities

People that use online gaming platforms might be being sized up for a job or even by security services Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

VPN hacks can be lethal, warns security expert

Organisations should not overlook the need to secure VPN connections because failure to do so could be fatal, but 2FA alone is not enough, warns a security expert Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Data governance is good for business and security

Why is it important to know where data flows, with whom it's shared and where it lives at rest, and what is the best way of achieving this? Continue Reading

By

• Maxine Holt, Omdia

Security Think Tank: Information management means better security

Why is it important to know where data flows, with whom it's shared and where it lives at rest – and what is the best way of achieving this? Continue Reading

By

• Mike Gillespie

Security community urged to prepare for quantum computing

A top European chief information security officer is urging the security community to prepare for quantum computing to ensure their encryption processes are ready in time Continue Reading

By

• Warwick Ashford, Senior analyst

US issues warning about North Korean malware

US government has identified more than 85 networks compromised by two malware families believed to be North Korean in origin Continue Reading

By

• Warwick Ashford, Senior analyst

Business still not addressing insider threat

Businesses are still not addressing inside threats when it comes to cyber security, leaving themselves wide open to data breaches as a result, according to a security analyst Continue Reading

By

• Warwick Ashford, Senior analyst

UK security spend low despite breaches

The UK is the most breached country in Europe, but IT security spend remains low compared with other countries in the region, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst