Privacy and data protection

Data protection is critical for all businesses

Companies that misuse data or fall victim to breaches not only risk financial loss, but also reputational damage. There are many reasons good data practice is essential Continue Reading

By

• Nicholas Fearn

Account takeover up tenfold in past year

The incidence of online account takeover and the proportion of high-risk account access attempts underlines the need for improved authentication, says fraud detection firm Continue Reading

By

• Warwick Ashford, Senior analyst

Business needs to keep up with Investigatory Powers Act

All indications are that the obligations on communication service providers under the controversial Investigatory Powers Act will change, and affected companies must ensure they are constantly up to date Continue Reading

By

• Peter Ray Allison

Data protection is a business issue, says IAPP

Data privacy is a rapidly maturing profession as organisations around the world increasingly see data protection as a business issue, according to an industry association Continue Reading

By

• Warwick Ashford, Senior analyst

UK surveillance laws a potential ‘sticking point’ post-Brexit

The UK’s controversial Investigatory Powers Act could be an impediment to achieving an adequacy agreement for free data exchanges with the EU post-Brexit, says privacy lawyer Continue Reading

By

• Warwick Ashford, Senior analyst

UK Commonwealth cyber security funding welcomed

The security community has welcomed the UK government announcement of funding to help Commonwealth countries strengthen their cyber security capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Mastercard calls for global online payments standard

Mastercard and its EMV partners are pushing for online payments standards similar to those for point-of-sale payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Good time to be in data protection, says information commissioner

There has never been a better time to be in data protection, Elizabeth Denham has told an IAPP data protection conference in London, addressing some key questions about the changing data protection regulatory landscape Continue Reading

By

• Warwick Ashford, Senior analyst

Security budgets up, but talent scarce, says Isaca

Security budgets are increasing, but qualified cyber talent remains difficult to find with positions taking at least three months to fill, an industry association report on the state of cyber security reveals Continue Reading

By

• Warwick Ashford, Senior analyst

APAC is becoming a hotspot for DDoS attacks

The region’s largest and most-connected economies are most vulnerable to distributed denial-of-service attacks, according to CenturyLink Continue Reading

By

• Aaron Tan, TechTarget

UK identity fraud reaches record level

The level of identity fraud has reached its highest level to date, a UK fraud report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Top tech firms take cyber security pledge

Top tech firms have committed to protecting customers worldwide from cyber attacks and prevent the misuse of their technology Continue Reading

By

• Warwick Ashford, Senior analyst

China’s ZTE a national security risk, UK telcos warned

UK national cyber security authority has warned telecommunications companies against using equipment and services from Chinese network equipment supplier ZTE, citing national security risks Continue Reading

By

• Warwick Ashford, Senior analyst

Judge in Max Schrems v Facebook action raises red flag on EU-US data transfers

The Irish High Court (Commercial Division) has once again cast a long shadow, with a very short deadline, over the arrangements for the safe and legal transfer of data between the EU and the US Continue Reading

By

• Kevin Cahill

Why AI skills, broadband and machine liability must be addressed

The House of Lords select committee on artificial intelligence has urged the government to adapt policies to bolster AI and protect the public Continue Reading

By

• Cliff Saran, Managing Editor

UK and US accuse Russia of targeting network infrastructure

The UK and US have accused the Russian government of targeting network infrastructure, calling on network operators to take the necessary protective measures Continue Reading

By

• Warwick Ashford, Senior analyst

Fintech professional’s tech predictions: 5 – better understanding of privacy settings

Consumers are set to become much more aware of the privacy settings on the websites they use Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK businesses urged to ensure they do cyber security basics

The cyber threat to business has never been greater, so the National Cyber Security Centre is urging UK companies to ensure they have implemented all the basic, best-practice cyber security controls and processes Continue Reading

By

• Warwick Ashford, Senior analyst

EU-US data sharing under threat as Irish court refers Facebook case to Europe

The Irish High Court is seeking answers from the European Court of Justice in a case that could have huge implications for EU-US data sharing and raises questions about US government surveillance of EU citizens. The move could bring a five-year legal battle between Austrian lawyer Max Schrems and Facebook to a close Continue Reading

By

• Bill Goodwin, Computer Weekly

Cyber attackers can breach targets in hours, report reveals

The majority of hackers claim they can breach an organisation within hours, while most security professionals admit they do not know what to look for Continue Reading

By

• Warwick Ashford, Senior analyst

UK playing central role in Facebook data misuse probe

Data protection is a hot issue and all about increasing confidence in the way data is handled, says UK privacy watchdog Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security a shared responsibility, says Amber Rudd

The UK home secretary has emphasised that cyber security is a shared responsibility and committed to promote EU cyber cooperation post-Brexit at the National Cyber Security Centre’s conference in Manchester Continue Reading

By

• Warwick Ashford, Senior analyst

GCHQ growing cyber capability to match threat

GCHQ continues to grow and develop its cyber capability to match the rapidly expanding and evolving threat landscape, says agency director Continue Reading

By

• Warwick Ashford, Senior analyst

UK cyber attack reporting set to be more streamlined

Government funding has been allocated to help streamline cyber attack reporting, according to the National Cyber Security Centre Continue Reading

By

• Warwick Ashford, Senior analyst

New cyber incident classification to boost UK response

A new cyber attack categorisation system has been unveiled to improve UK response to incidents Continue Reading

By

• Warwick Ashford, Senior analyst

Government to set up £13.5m cyber security centre

Located at the 2012 Olympic Park, the London Cyber Innovation Centre could create up to 2,000 jobs in cyber security Continue Reading

By

• Alex Scroxton, Security Editor

Diversity key to more effective cyber security, says NCSC

Diversity in defence teams is key to improved cyber security, according to the UK’s National Cyber Security Centre (NCSC) Continue Reading

By

• Warwick Ashford, Senior analyst

GCHQ to set up shop in Manchester

UK intelligence, security and cyber agency GCHQ is expanding its network of UK sites to north west England Continue Reading

By

• Warwick Ashford, Senior analyst

NSA calls for cyber security community collaboration

A US National Security Agency (NSA) representative has called for cyber security community collaboration at the National Cyber Security Centre’s conference in Manchester Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile phishing a growing threat, warns report

Phishing on mobile devices is a growing threat to business as attacks move beyond email to text messages and apps Continue Reading

By

• Warwick Ashford, Senior analyst

Podcast: Storage compliance for GDPR data subject requests

The General Data Protection Regulation is upon us. Mathieu Gorge, CEO of Vigitrust, talks you through the key areas needed for compliance in storage of data subjects’ data and how to find it quickly on request Continue Reading

By

• Antony Adshead, Storage Editor

Cyber criminals earn up to $2m a year, study shows

Academic study reveals just how lucrative cyber crime can be, with top-level cyber criminals out-earning government leaders and university graduates Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware top cyber threat, DBIR shows

Ransomware remains the top cyber security threat to organisations, humans continue to be significant weakness and HR departments are a top target, according to the latest Verizon Data breach investigations report Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber threat to UK business greater than ever, report reveals

The cyber threat to UK business is “bigger than ever” and the best way to defend against it is collaboration between government, law enforcement and business, a report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security of big data fashions a whole new look with GDPR

As data managers scramble to protect their precious lakes of washed and unwashed data from the evils of hacking, malware, ransomware and botnets, there comes a privacy regulation of European Union origin that could change the way many U.S. companies protect their data from inside and outside forces. For some U.S. companies doing business in Europe and preparing for compliance, the EU's General Data Protection Regulation could be a well-intended enforcer of better data governance practices. But for businesses forced to change their old data protection habits, GDPR can be a four-letter word.

The April issue of Business Information opens with our editor's note and historical insights into the fundamental differences in attitude between the U.S. and Europe when it comes to protecting the data privacy of customers. As data breaches mount, however, the U.S. government -- willing or not -- may have to take steps beyond current regulations to ensure companies increase their security of big data.

Along those lines, our cover story examines some GDPR rules that can directly impact U.S. companies doing business overseas and, in the process, their data governance and ethics procedures. With the noted lack of maturity in data governance and security tools, we see in another feature how IT teams are addressing data security issues upfront in do-it-yourself ways when deploying big data systems.

Also in this issue, a GDPR compliance expert advises data managers on the best ways to prepare for a regulation that puts more control of information in the hands of users, the internet of things and edge computing could be compromising the security of big data and surveys show that companies place data protection among the top reasons for escalating their security spending.

 Continue Reading

GDPR requirements put focus on data ethics, governance

The General Data Protection Regulation makes privacy paramount and reinforces the practice of good data governance. Will a new focus on data ethics be an important side effect? Continue Reading

By

• Jack Vaughan

U.S. data protection laws fall short in the age of big data

Data breaches and a history of data abuse led the EU to adopt GDPR, but it might take massive scale data security crises for the U.S. to legislate similar data protection laws. Continue Reading

By

• Bridget Botelho, Editorial Director, News

Who do you trust to censor social media?

Calls to censor Facebook and its rivals are growing – but society needs to consider carefully the motivations of those making such demands Continue Reading

By

• Tim Worstall, Adam Smith Institute

More than one in 10 employees fall for social engineering attacks

Employees download malicious files, click phishing links, correspond with hackers, and even share contact information for their colleagues, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook data scandal a game changer, says ICO

Facebook’s controversial data sharing with London-based data mining firm Cambridge Analytica is a game changer, according to the UK’s privacy watchdog Continue Reading

By

• Warwick Ashford, Senior analyst

Business increases use of encryption in the cloud

The use of encryption has seen double-digit growth in the past year due to a number of security-related drivers, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Why businesses must think like criminals to protect their data

Cyber criminals use three main methods of operation to steal commercial data. Understanding their mindset can help organisations put the right defences in place Continue Reading

By

• Andy Barratt, Coalfire

HSBC IT whistleblower faces extradition to Switzerland

Hervé Falciani, who stole data from thousands of private banking customers, is apprehended in Spain following the issuing of an international arrest warrant Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Facebook among 30 organisations under investigation by the ICO

Facebook is among 30 organisations under investigation by the UK’s privacy watchdog for misusing personal data for political and other purposes Continue Reading

By

• Warwick Ashford, Senior analyst

Retail sector top cyber attack target

The retail sector was the top cyber attack target in 2017, as cyber attacks evolved to become more organised and structured, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Business should note Facebook data sharing, say security advisers

Businesses that use Facebook and have employees that use it should take note that data is shared with potential cyber attackers, security advisers warn, as Facebook reveals the Cambridge Analytica data exploitation scandal may affect 87 million users Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Deal with cryptojacking to avoid security vulnerability

How can organisations best defend against cryptojacking? Continue Reading

By

• Paddy Francis

More than 1.5 billion business and consumer files exposed online

With just over a month to go before the GDPR compliance deadline, more than 1.5 billion data files are exposed online without adequate protections, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Interview: GDPR will give Dutch privacy watchdog its teeth

The Netherlands’ privacy watchdog has not handed out fines so far because there has been no reason to, says the organisation’s chairman, Aleid Wolfsen Continue Reading

By

• Tijs Hofmans

Ransomware puts pressure on incident response

Cyber attackers switched focus to ransomware attacks in 2017 putting pressure on incident response, while human error was responsible for two-thirds of compromised records, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Average attacker dwell time nearly six months for EMEA, study shows

Firms in Europe, the Middle East and Africa take nearly six months to detect cyber attacks on average, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

IT decision-makers trust Facebook less and are changing policies

As Facebook scrambles to contain the damage from the Cambridge Analytica data exploitation scandal, a survey reveals that a majority of IT decision-makers have lost trust in the social networking firm Continue Reading

By

• Warwick Ashford, Senior analyst

Data breaches revealed at four US retail chains

The Easter weekend has seen another round of data breaches, further underlining that many companies are still failing to take the necessary steps to protect customer data Continue Reading

By

• Warwick Ashford, Senior analyst

Future of internet regulation is focus of Lords inquiry

Inquiry will seek evidence on whether or not the law is up to the job of regulating online platforms such as Facebook, and what improvements can be made Continue Reading

By

• Alex Scroxton, Security Editor

Lawyers more influential than IT staff in cloud deployments

Traditionally considered risk-adverse, lawyers are twice as more influential than in-house technology staff about cloud, research finds Continue Reading

By

• Aaron Tan, TechTarget

Europol operation nabs another 20 cyber criminals

Police have arrested 20 cyber criminals in connection with a €1m fraud operation across Italy and Romania Continue Reading

By

• Warwick Ashford, Senior analyst

Business unaware of scale of cyber threat

Many businesses, especially board members, do not understand the scale of the cyber threat, but international efforts to combat cyber crime are being hampered by political barriers Continue Reading

By

• Warwick Ashford, Senior analyst

How the IT sector can help plug the cyber security skills gap

Businesses have a role to play in plugging the cyber security skills gap by engaging with future talent at a young age, providing more role models for under-represented groups, communicating the nature of the threat, and changing their approach to cyber security recruitment Continue Reading

By

• Frank Stajano, University of Cambridge

Organisations can use GDPR ambiguity to contest fines in court, experts say

Businesses can use the vagueness of the regulation to argue against fines in court, say experts Continue Reading

By

• Zach Emmanuel, Computer Weekly

Majority of European firms unprepared for phishing attacks

Most cyber attacks can be traced back to a phishing email, but more than half of European firms are unprepared to deal with email-based attacks, research has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook announces more privacy control updates

Social media giant updates privacy settings and tools in response to the unfolding controversy over Cambridge Analytica’s use of Facebook data for political campaigns Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft Word document and zero-day attacks on the rise

Macro-less Microsoft Word document attacks and zero-day malware are on the rise, according to data from WatchGuard Continue Reading

By

• Warwick Ashford, Senior analyst

AWS ups ante on cloud services for Australian government

Cloud supplier AWS says government agencies can now assess the prospect of running protected workloads, following an independent cloud security assessment Continue Reading

By

• Aaron Tan, TechTarget

Majority of firms fear mobile workers have been hacked

More than half of organisations fear that their mobile workers have been hacked and most are concerned that a growing mobile workforce means increased cyber security risk, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

UK organisations urged to develop cyber security skills

Managed cloud computing firm Rackspace is calling on UK organisations to do more to develop cyber security skills in the light of research into expertise in cloud security Continue Reading

By

• Warwick Ashford, Senior analyst

Most top UK firms fail to disclose cyber risk testing details

Most of the largest UK companies do not reveal their testing of cyber protection plans and do not share security updates with the board regularly, a Deloitte report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook could be hit with $2tn fine after FTC inquiry

Facebook could face huge fines as the result of a federal inquiry into the data exploitation scandal, further underlining the importance of personal data protection for all enterprises Continue Reading

By

• Warwick Ashford, Senior analyst

Case study: Berkshire NHS trust provides mental health support through social network

Berkshire NHS is using its Support Hope and Recovery Online Network to provide 24/7 support and advice to service users struggling with mental health issues Continue Reading

By

• Lis Evenstad

Police arrest €1bn cyber heist mastermind

Police have arrested a key member of the Carbanak gang believed to be responsible for more than 100 cyber heists worldwide Continue Reading

By

• Warwick Ashford, Senior analyst

UK government publishes export strategy for UK cyber security

The government has published a guide for UK cyber security firms on how it plans to support their efforts to find and secure opportunities to export their products and services Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware publicity heightened awareness but other threats remain, experts say

Due to several high profile attacks over the past year, ransomware is now well known across organisations, but there are other threats to be aware of, say cyber security experts Continue Reading

By

• Zach Emmanuel, Computer Weekly

Dutch SMEs’ cyber security is insufficient

Nowhere in the Netherlands is digitisation as big as it is in small and medium-sized enterprises, but the sector still has a lot to do in terms of cyber security Continue Reading

By

• Kim Loohuis

Apple CEO calls for better privacy regulations

Apple’s CEO is calling for better data privacy regulations as Elon Musk joins Brian Acton in supporting the #DeleteFacebook campaign Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook braces for new regulation for Cambridge Analytica deal

Facebook's COO has joined the social network’s CEO in apologising for betraying users’ trust by giving Cambridge Analytica unfettered access to personal data, saying the firm will work with regulators Continue Reading

By

• Warwick Ashford, Senior analyst

Privacy group calls for UK response to data exploitation

Policy-makers need to respond swiftly to the Cambridge Analytica and Facebook data exploitation scandal, according to privacy rights group Continue Reading

By

• Warwick Ashford, Senior analyst

Colt pioneers blockchain in telco voice wholesaling

Colt Technology Services and Hong Kong Telecom’s international unit PCCW Global teamed up to trial the use of blockchain in wholesale voice settlements Continue Reading

By

• Alex Scroxton, Security Editor

Pressure grows on government to clarify post-Brexit position on UK-EU data flows

TechUK says clear guidance is needed on whether the UK will need a data adequacy agreement in place during the 21-month Brexit transition period Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

MoD to focus on SMEs to raise supply chain cyber security

The Ministry of Defence continues to develop a joint initiative with industry aimed at raising the security posture throughout the UK’s defence supply chain, with increasing focus on SMEs Continue Reading

By

• Warwick Ashford, Senior analyst

Popular culture key to giving cyber security much-needed boost

The cyber security industry should turn to popular culture to raise awareness of the cyber threat to businesses and consumers and attract new blood to the field, says McMafia author Continue Reading

By

• Warwick Ashford, Senior analyst

WhatsApp co-founder calls time on Facebook

Brian Acton has called time on Facebook following reports of the firm’s dealings with data mining firm Cambridge Analytica linked to the EU referendum and Donald Trump’s US election campaign Continue Reading

By

• Warwick Ashford, Senior analyst

Wigan data breaches underline need to share threat intelligence

Ongoing data breaches experienced by local authorities underline the need for greater sharing of threat intelligence, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

Network security in the digital transformation era

Network security has always been a core focus for CISOs and IT security managers, but in an era of digital transformation, we examine if network security strategies are keeping up with new and emerging cyber threats Continue Reading

By

• Nicholas Fearn

IT contractors not a risk despite Snowden leaks, GCHQ tells court

The government argues in the Investigatory Powers Tribunal that contractors with systems administration rights to computers holding GCHQ’s most sensitive intelligence pose no more of a security risk than the agency’s employees Continue Reading

By

• Bill Goodwin, Computer Weekly

SD-WAN needs software-defined security

Digital transformation is driving organisations to move to the cloud, which requires a new architecture that embraces cloud technology, but that in turn requires a new way of thinking about network security to ensure data is protected Continue Reading

By

• Klaus Gheri, Barracuda

Defence industry urges government to relax controls on crypto exports

Trade body representing defence, aerospace and security companies calls on government to make it easier to export “non-contentious” cryptography to secure organisations against cyber crime Continue Reading

By

• Gamil Jassin

CW ASEAN: Time to boost cyber defences

With a relatively young and tech-savvy population, ASEAN has been at the forefront of technology adoption. Yet, this has exposed its people and businesses to more cyber threats, including the massive data leak in Malaysia in 2017. In this month’s issue of CW ASEAN, we take a closer look at ASEAN’s patchy cyber security landscape, including varying levels of cyber resilience across the region, cyber security strategies adopted by different countries, as well as efforts to improve cyber capabilities and foster greater collaboration in the common fight against cyber threats. Download the issue now. Continue Reading

CW ANZ: Report data break-ins – it’s the law

Cyber security is an increasingly global endeavour, with threat actors who know no boundaries unleashing attacks from nearly anywhere in the world. In this month’s issue of CW ANZ, we look at how Australia’s mandatory data breach notification law underscores recent efforts to lift its cyber security game, both locally and internationally. Download the issue now. Continue Reading

DocuTrac medical software is a breach risk, warns Rapid7

Security researchers have issued a security warning about medical billing and documentation software they say puts patients at risk of data breach Continue Reading

By

• Warwick Ashford, Senior analyst

WhatsApp to suspend data sharing with Facebook

WhatsApp has agreed to stop sharing personal data with Facebook until data protection concerns are addressed Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Awareness is a good starting point to counter fileless malware

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Ed Moyle, Drake Software

Researchers accused of irresponsible disclosure of AMD chip flaws

Israel-based researchers have been accused of irresponsible disclosure for going public with more than a dozen security flaws discovered in AMD processors Continue Reading

By

• Warwick Ashford, Senior analyst

Government ‘unlawfully delegated’ bulk data powers to GCHQ, court hears

Privacy International urges Britain’s most secret court, the Investigatory Powers Tribunal, to rule that the government illegally collected surveillance data from internet and phone companies until at least September 2017 Continue Reading

By

• Bill Goodwin, Computer Weekly

Businesses need to take cryptojacking seriously

Organisations must pay attention to cyber criminals hijacking computing resources to mine cryptocurrencies, because nearly half are affected and the impact is greater than many realise Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Human, procedural and technical response to fileless malware

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Mike Gillespie

Eight new cyber threats a second in Q4 2017, McAfee report reveals

There was an increase in cyber attacks on healthcare organisations, the use of fileless malware and cryptocurrency mining in the last three months of 2017, with eight new threats a second Continue Reading

By

• Warwick Ashford, Senior analyst

Regulator takes tougher line than expected on surveillance warrants

The Investigatory Powers Commissioner’s Office has signalled to government that it will take a tough line when scrutinising surveillance warrants under the controversial Investigatory Powers Act Continue Reading

By

• Bill Goodwin, Computer Weekly

UK leads global upward trend in SOC maturity

The UK is leading the way towards more efficient security operations centres, but many still continue to operate with serious gaps in security, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

UK government criticised over lack of GDPR explanation

Most IT decision makers in the UK are critical of the government for failing to educate organisations about the GDPR and its implications, and few have a clear understanding of it, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Cooperation and exercises key to cyber defence, says Nato centre

International cooperation and regular tabletop exercises are essential to ensure effective cyber defence, according to the Nato cyber defence centre Continue Reading

By

• Warwick Ashford, Senior analyst

Ten ways to protect intellectual property and trade secrets

Industrial espionage is on the rise, and more data means more risk. Find out how to control the growth of data stores and secure your organization's most valuable assets. Continue Reading

By

• Randolph Kahn, Kahn Consulting Inc.