Privacy and data protection

Interview: GDPR will give Dutch privacy watchdog its teeth

The Netherlands’ privacy watchdog has not handed out fines so far because there has been no reason to, says the organisation’s chairman, Aleid Wolfsen Continue Reading

By

• Tijs Hofmans

Ransomware puts pressure on incident response

Cyber attackers switched focus to ransomware attacks in 2017 putting pressure on incident response, while human error was responsible for two-thirds of compromised records, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Average attacker dwell time nearly six months for EMEA, study shows

Firms in Europe, the Middle East and Africa take nearly six months to detect cyber attacks on average, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

IT decision-makers trust Facebook less and are changing policies

As Facebook scrambles to contain the damage from the Cambridge Analytica data exploitation scandal, a survey reveals that a majority of IT decision-makers have lost trust in the social networking firm Continue Reading

By

• Warwick Ashford, Senior analyst

Data breaches revealed at four US retail chains

The Easter weekend has seen another round of data breaches, further underlining that many companies are still failing to take the necessary steps to protect customer data Continue Reading

By

• Warwick Ashford, Senior analyst

Future of internet regulation is focus of Lords inquiry

Inquiry will seek evidence on whether or not the law is up to the job of regulating online platforms such as Facebook, and what improvements can be made Continue Reading

By

• Alex Scroxton, Security Editor

Lawyers more influential than IT staff in cloud deployments

Traditionally considered risk-adverse, lawyers are twice as more influential than in-house technology staff about cloud, research finds Continue Reading

By

• Aaron Tan, TechTarget

Europol operation nabs another 20 cyber criminals

Police have arrested 20 cyber criminals in connection with a €1m fraud operation across Italy and Romania Continue Reading

By

• Warwick Ashford, Senior analyst

Business unaware of scale of cyber threat

Many businesses, especially board members, do not understand the scale of the cyber threat, but international efforts to combat cyber crime are being hampered by political barriers Continue Reading

By

• Warwick Ashford, Senior analyst

How the IT sector can help plug the cyber security skills gap

Businesses have a role to play in plugging the cyber security skills gap by engaging with future talent at a young age, providing more role models for under-represented groups, communicating the nature of the threat, and changing their approach to cyber security recruitment Continue Reading

By

• Frank Stajano, University of Cambridge

Organisations can use GDPR ambiguity to contest fines in court, experts say

Businesses can use the vagueness of the regulation to argue against fines in court, say experts Continue Reading

By

• Zach Emmanuel, Computer Weekly

Majority of European firms unprepared for phishing attacks

Most cyber attacks can be traced back to a phishing email, but more than half of European firms are unprepared to deal with email-based attacks, research has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook announces more privacy control updates

Social media giant updates privacy settings and tools in response to the unfolding controversy over Cambridge Analytica’s use of Facebook data for political campaigns Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft Word document and zero-day attacks on the rise

Macro-less Microsoft Word document attacks and zero-day malware are on the rise, according to data from WatchGuard Continue Reading

By

• Warwick Ashford, Senior analyst

AWS ups ante on cloud services for Australian government

Cloud supplier AWS says government agencies can now assess the prospect of running protected workloads, following an independent cloud security assessment Continue Reading

By

• Aaron Tan, TechTarget

Majority of firms fear mobile workers have been hacked

More than half of organisations fear that their mobile workers have been hacked and most are concerned that a growing mobile workforce means increased cyber security risk, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

UK organisations urged to develop cyber security skills

Managed cloud computing firm Rackspace is calling on UK organisations to do more to develop cyber security skills in the light of research into expertise in cloud security Continue Reading

By

• Warwick Ashford, Senior analyst

Most top UK firms fail to disclose cyber risk testing details

Most of the largest UK companies do not reveal their testing of cyber protection plans and do not share security updates with the board regularly, a Deloitte report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook could be hit with $2tn fine after FTC inquiry

Facebook could face huge fines as the result of a federal inquiry into the data exploitation scandal, further underlining the importance of personal data protection for all enterprises Continue Reading

By

• Warwick Ashford, Senior analyst

Case study: Berkshire NHS trust provides mental health support through social network

Berkshire NHS is using its Support Hope and Recovery Online Network to provide 24/7 support and advice to service users struggling with mental health issues Continue Reading

By

• Lis Evenstad

Police arrest €1bn cyber heist mastermind

Police have arrested a key member of the Carbanak gang believed to be responsible for more than 100 cyber heists worldwide Continue Reading

By

• Warwick Ashford, Senior analyst

UK government publishes export strategy for UK cyber security

The government has published a guide for UK cyber security firms on how it plans to support their efforts to find and secure opportunities to export their products and services Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware publicity heightened awareness but other threats remain, experts say

Due to several high profile attacks over the past year, ransomware is now well known across organisations, but there are other threats to be aware of, say cyber security experts Continue Reading

By

• Zach Emmanuel, Computer Weekly

Dutch SMEs’ cyber security is insufficient

Nowhere in the Netherlands is digitisation as big as it is in small and medium-sized enterprises, but the sector still has a lot to do in terms of cyber security Continue Reading

By

• Kim Loohuis

Apple CEO calls for better privacy regulations

Apple’s CEO is calling for better data privacy regulations as Elon Musk joins Brian Acton in supporting the #DeleteFacebook campaign Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook braces for new regulation for Cambridge Analytica deal

Facebook's COO has joined the social network’s CEO in apologising for betraying users’ trust by giving Cambridge Analytica unfettered access to personal data, saying the firm will work with regulators Continue Reading

By

• Warwick Ashford, Senior analyst

Privacy group calls for UK response to data exploitation

Policy-makers need to respond swiftly to the Cambridge Analytica and Facebook data exploitation scandal, according to privacy rights group Continue Reading

By

• Warwick Ashford, Senior analyst

Colt pioneers blockchain in telco voice wholesaling

Colt Technology Services and Hong Kong Telecom’s international unit PCCW Global teamed up to trial the use of blockchain in wholesale voice settlements Continue Reading

By

• Alex Scroxton, Security Editor

Pressure grows on government to clarify post-Brexit position on UK-EU data flows

TechUK says clear guidance is needed on whether the UK will need a data adequacy agreement in place during the 21-month Brexit transition period Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

MoD to focus on SMEs to raise supply chain cyber security

The Ministry of Defence continues to develop a joint initiative with industry aimed at raising the security posture throughout the UK’s defence supply chain, with increasing focus on SMEs Continue Reading

By

• Warwick Ashford, Senior analyst

Popular culture key to giving cyber security much-needed boost

The cyber security industry should turn to popular culture to raise awareness of the cyber threat to businesses and consumers and attract new blood to the field, says McMafia author Continue Reading

By

• Warwick Ashford, Senior analyst

WhatsApp co-founder calls time on Facebook

Brian Acton has called time on Facebook following reports of the firm’s dealings with data mining firm Cambridge Analytica linked to the EU referendum and Donald Trump’s US election campaign Continue Reading

By

• Warwick Ashford, Senior analyst

Wigan data breaches underline need to share threat intelligence

Ongoing data breaches experienced by local authorities underline the need for greater sharing of threat intelligence, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

Network security in the digital transformation era

Network security has always been a core focus for CISOs and IT security managers, but in an era of digital transformation, we examine if network security strategies are keeping up with new and emerging cyber threats Continue Reading

By

• Nicholas Fearn

IT contractors not a risk despite Snowden leaks, GCHQ tells court

The government argues in the Investigatory Powers Tribunal that contractors with systems administration rights to computers holding GCHQ’s most sensitive intelligence pose no more of a security risk than the agency’s employees Continue Reading

By

• Bill Goodwin, Computer Weekly

SD-WAN needs software-defined security

Digital transformation is driving organisations to move to the cloud, which requires a new architecture that embraces cloud technology, but that in turn requires a new way of thinking about network security to ensure data is protected Continue Reading

By

• Klaus Gheri, Barracuda

Defence industry urges government to relax controls on crypto exports

Trade body representing defence, aerospace and security companies calls on government to make it easier to export “non-contentious” cryptography to secure organisations against cyber crime Continue Reading

By

• Gamil Jassin

CW ASEAN: Time to boost cyber defences

With a relatively young and tech-savvy population, ASEAN has been at the forefront of technology adoption. Yet, this has exposed its people and businesses to more cyber threats, including the massive data leak in Malaysia in 2017. In this month’s issue of CW ASEAN, we take a closer look at ASEAN’s patchy cyber security landscape, including varying levels of cyber resilience across the region, cyber security strategies adopted by different countries, as well as efforts to improve cyber capabilities and foster greater collaboration in the common fight against cyber threats. Download the issue now. Continue Reading

CW ANZ: Report data break-ins – it’s the law

Cyber security is an increasingly global endeavour, with threat actors who know no boundaries unleashing attacks from nearly anywhere in the world. In this month’s issue of CW ANZ, we look at how Australia’s mandatory data breach notification law underscores recent efforts to lift its cyber security game, both locally and internationally. Download the issue now. Continue Reading

DocuTrac medical software is a breach risk, warns Rapid7

Security researchers have issued a security warning about medical billing and documentation software they say puts patients at risk of data breach Continue Reading

By

• Warwick Ashford, Senior analyst

WhatsApp to suspend data sharing with Facebook

WhatsApp has agreed to stop sharing personal data with Facebook until data protection concerns are addressed Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Awareness is a good starting point to counter fileless malware

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Ed Moyle, Drake Software

Researchers accused of irresponsible disclosure of AMD chip flaws

Israel-based researchers have been accused of irresponsible disclosure for going public with more than a dozen security flaws discovered in AMD processors Continue Reading

By

• Warwick Ashford, Senior analyst

Government ‘unlawfully delegated’ bulk data powers to GCHQ, court hears

Privacy International urges Britain’s most secret court, the Investigatory Powers Tribunal, to rule that the government illegally collected surveillance data from internet and phone companies until at least September 2017 Continue Reading

By

• Bill Goodwin, Computer Weekly

Businesses need to take cryptojacking seriously

Organisations must pay attention to cyber criminals hijacking computing resources to mine cryptocurrencies, because nearly half are affected and the impact is greater than many realise Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Human, procedural and technical response to fileless malware

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Mike Gillespie

Eight new cyber threats a second in Q4 2017, McAfee report reveals

There was an increase in cyber attacks on healthcare organisations, the use of fileless malware and cryptocurrency mining in the last three months of 2017, with eight new threats a second Continue Reading

By

• Warwick Ashford, Senior analyst

Regulator takes tougher line than expected on surveillance warrants

The Investigatory Powers Commissioner’s Office has signalled to government that it will take a tough line when scrutinising surveillance warrants under the controversial Investigatory Powers Act Continue Reading

By

• Bill Goodwin, Computer Weekly

UK leads global upward trend in SOC maturity

The UK is leading the way towards more efficient security operations centres, but many still continue to operate with serious gaps in security, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

UK government criticised over lack of GDPR explanation

Most IT decision makers in the UK are critical of the government for failing to educate organisations about the GDPR and its implications, and few have a clear understanding of it, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Cooperation and exercises key to cyber defence, says Nato centre

International cooperation and regular tabletop exercises are essential to ensure effective cyber defence, according to the Nato cyber defence centre Continue Reading

By

• Warwick Ashford, Senior analyst

Ten ways to protect intellectual property and trade secrets

Industrial espionage is on the rise, and more data means more risk. Find out how to control the growth of data stores and secure your organization's most valuable assets. Continue Reading

By

• Randolph Kahn, Kahn Consulting Inc.

The EU's GDPR will make us better storage managers

The European Union's General Data Protection Regulation has organizations worldwide rethinking storage management to their and their customers' benefit. Continue Reading

By

• Rich Castagna

European security industry has failed users, says expert

 Continue Reading

CW Europe: Germany’s Lemoncat takes catering to the cloud

Business catering startup Lemoncat has taken advantage of the affordable cost of living in Berlin and is shaking up the catering sector by harnessing the Amazon and Salesforce clouds. Also in this issue, read how Moscow’s government is taking advantage of high penetration of broadband and mobile internet to expand innovative services under the Russian capital’s smart city programme, and how organisations in the Netherlands still have much to do to comply with the General Data Protection Regulation. Continue Reading

Now that’s what I call compliance

Cloud-based customer relationship management software supplier Donorfy has taken the initiative in putting data protection officers nationwide out of their misery and compiling what can only be ... Continue Reading

By

• Ryan Priest

UK cyber security certification pilot launched

UK businesses now have the opportunity to improve their cyber security and prove they have taken steps to protect data they hold, thanks to a police-backed certification scheme Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attacks up nearly 20% in 2017

Research by SonicWall shows there were 9.32 billion malware attacks globally last year, but ransomware attacks fell by 71% Continue Reading

By

• Zach Emmanuel, Computer Weekly

Cyber security is a team sport, says NCSC

The UK’s national cyber security agency aims to help organisations understand the need to act collaboratively and collectively against the cyber threat, urging them to raise the bar Continue Reading

By

• Warwick Ashford, Senior analyst

Developed APAC countries well-poised for the cloud

With strong policies in data protection and cyber security, Japan, Australia and Singapore are among countries that are most prepared to reap the benefits of the cloud Continue Reading

By

• Aaron Tan, TechTarget

Government sets out tighter security measures for IoT devices

The government has announced plans to develop a new code of practice to improve the security of connected internet of things devices Continue Reading

By

• Alex Scroxton, Security Editor

Local councils call for government funding for GDPR compliance

National Association of Local Councils is concerned complying with GDPR puts financial strain on local authorities and calls on government to help with funding Continue Reading

By

• Lis Evenstad

Security Think Tank: Social engineering at the heart of fileless malware attacks

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Most Britons concerned about personal data sharing

Most UK consumers are concerned about personal data they have shared online, but few know the extent of that data or their rights, a survey shows, indicating a need for education and transparency Continue Reading

By

• Warwick Ashford, Senior analyst

Security remains an afterthought in DevOps

Enterprises in Asia are lapping up DevOps but less than one-third have baked security processes into their developments Continue Reading

By

• Aaron Tan, TechTarget

Getting up to speed with 5G

In this week’s Computer Weekly, we look at what needs to be done to make next-generation 5G mobile networks a reality. Fewer EU workers are moving to the UK due to Brexit fears – we examine what that means for the IT skills gap. And we analyse the state of the hyper-converged infrastructure market and the main suppliers. Read the issue now. Continue Reading

Security Think Tank: How to tackle fileless malware attacks

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Adrian Davis, (ISC)²

CIO interview: Helena Theakstone, head of digital, Oasis Fashion

Oasis Fashion’s head of digital talks about GDPR preparation, collaboration between digital and IT, and the importance of listening to customers Continue Reading

By

• Mark Samuels

Most healthcare organisations have been breached, report shows

 Less than a third of global healthcare organisations remain untouched, as data breaches rise across the industry, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

UK will need data protection agreement with EU as part of Brexit deal, says PM

Prime minister Theresa May's Brexit speech highlights need for data protection deal with EU, “advanced” border IT systems, and re-confirms UK won’t be part of the EU digital single market Continue Reading

By

• Lis Evenstad

Cyber crime is a top threat to UK charities, says NCSC

Cyber crime poses the most serious threats to UK charities, the National Cyber Security Centre has warned Continue Reading

By

• Warwick Ashford, Senior analyst

Equifax ups breach figure by a further 2.5 million

Credit rating agency Equifax has increased the number of US records believed to have been compromised in 2017 Continue Reading

By

• Warwick Ashford, Senior analyst

New privacy fears as IT challenges delay surveillance oversight body by a year

IT challenges have delayed government plans for an independent body to authorise requests to access the public’s internet and phone records by nearly a year, raising new legal and privacy concerns Continue Reading

By

• Bill Goodwin, Computer Weekly

Imaging systems biggest security risk in healthcare

Imaging systems have been identified as the biggest cyber security risk in the healthcare sector, a report on internet of things security has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Trust underpins innovation, says UK information commissioner

Underlining the relevance of data protection legislation to business, the UK information commissioner says consumer trust is key to innovation Continue Reading

By

• Warwick Ashford, Senior analyst

ICO head tops DataIQ data leader list

The UK’s information commissioner has been named at the top data leader for 2018 in the DataIQ 100 list of most influential data leaders Continue Reading

By

• Warwick Ashford, Senior analyst

ANZ organisations grappling with cloud outages

A majority of organisations from Australia and New Zealand admitted in a survey that they had not fully evaluated the impact of cloud outages which were longer than they had expected Continue Reading

By

• Beverley Head

Affiliate marketing industry failing on privacy compliance

The affiliate marketing industry needs to clean up its act in terms of privacy law compliance, a review of more than 900 websites has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Salary is not top way to attract cybersec pros, report reveals

Salary is not the highest priority for cyber security professionals, a report on hiring and retaining top cyber security talent shows Continue Reading

By

• Warwick Ashford, Senior analyst

Firms failing to learn from cyber attacks

Organisations are failing to learn from cyber attacks, and lax security practices are leaving organisations worldwide open to damaging cyber attacks, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Government must rewrite illegal sections of Snoopers’ Charter, court told

A court has been asked to give ministers until July 2018 to rewrite powers to require phone and internet companies to retain data on the population. The government acknowledges parts of surveillance regime are unlawful Continue Reading

By

• Bill Goodwin, Computer Weekly

Understanding the cyber threat key to UK defence, says NCSC

Understanding cyber threats is key to defending the UK and ensuring it is a safe place to do business, says the National Cyber Security Centre Continue Reading

By

• Warwick Ashford, Senior analyst

How IT is taking UPS to new heights

In this week's Computer Weekly, we talk to UPS CIO Juan Perez to find out how making his IT department “business intimate” is driving innovation at the parcel shipping giant. We look at how cloud management platforms can help ease the adoption of multiple public cloud services. And we examine how UK local councils are struggling to deal with cyber attacks and data breaches. Read the issue now. Continue Reading

GDPR will have positive ripple effect, says US consumer group

New EU data protection laws will have a positive ripple effect around the world, according to a US consumer group Continue Reading

By

• Warwick Ashford, Senior analyst

Singapore firms unprepared for GDPR

An EY study reveals that only 10% of organisations in Singapore are ready to comply with Europe’s new data protection regime Continue Reading

By

• Aaron Tan, TechTarget

London councils set aside more than £1.2m for GDPR

London councils have spent over £1.2m in preparation for new EU data protection laws, a think tank report has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Surveillance watchdog investigates security risks of GCHQ IT contractors

The investigatory powers commissioner is reviewing the security arrangements for IT contractors that have access to live computer systems at GCHQ holding highly sensitive records on the UK population Continue Reading

By

• Bill Goodwin, Computer Weekly

Cyber criminals catching up with nation state attacks

The trickle-down effect of advanced “military-grade” tools is seeing the gap between cyber criminal and nation state attack capabilities closing, outpacing many organisations’ defence capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

2018 could be year of mobile malware, says McAfee 

Security firm announces several mobile industry partnerships as its latest mobile threat report shows mobile malware is becoming increasingly popular with cyber attackers Continue Reading

By

• Warwick Ashford, Senior analyst

Most UK small firms still not prepared for GDPR, FSB survey shows

Most small businesses are not prepared for new data regulations, according to research by the Federation of Small Businesses Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR is having positive impact on privacy profession, says IAPP

The EU’s new data protection rules are driving greater interest in the privacy profession, and provide an opportunity to develop new business plans, says privacy association Continue Reading

By

• Warwick Ashford, Senior analyst

Public education important in new data protection era, says ICO

UK information commissioner Elizabeth Denham tells Data Protection 2018 event of the tough requirements ahead in a new age of data regulation Continue Reading

By

• Warwick Ashford, Senior analyst

Is cyber security becoming a cost of doing business - to the detriment of our data?

Computer Weekly writes a lot about cyber security – it’s the easily most popular topic among our readers, and always rates as one of the top priorities in our annual survey of IT professionals. ... Continue Reading

By

• Bryan Glick, Editor in chief

Avast discovers Tempting Cedar Android spyware campaign

Security researchers have uncovered a three-year-old Android spyware campaign spread through social media and targeting people in the Middle East Continue Reading

By

• Warwick Ashford, Senior analyst

Where are security and data governance in IoT?

IoT Back to Basics, chapter 3: It’s no surprise that security and governance are important considerations when it comes to the IoT, but quite how incredibly important they are may not be ... Continue Reading

By

• Jason Stamper, Freeform Dynamics

UK plans laws to protect company directors from ID theft

Legislation will make it easier for directors to remove their personal addresses from the company register Continue Reading

By

• Warwick Ashford, Senior analyst

CW Nordics: Nordics CIOs’ priorities in 2018

A select group of CIOs and analysts in Denmark, Finland, Norway and Sweden give their views on the top IT priorities in 2018. As in 2017, digital transformation will continue to be a buzzword. Also read how Sweden is tightening up its cyber security defences as part of a wider national security strategy, and how Nordic banks cannot afford to slow their digital transformations as PSD2 comes into force. Continue Reading

Hawaii missile alert: Why the wrong guy was fired

In January 2018, an employee at Hawaii’s emergency management agency sent out a false alarm of an imminent missile attack, and was subsequently fired – but perhaps poor system design is really to blame Continue Reading

By

• Jonny Corbett, Norman & Sons

People worried about data security in public sector, survey finds

Majority of people are concerned with the security of the data they share with public sector organisations, according to a report Continue Reading

By

• Lis Evenstad

Economic impact of cyber crime is significant and rising

Cyber attacks are becoming easier to carry out while defences remain inadequate, study shows Continue Reading

By

• Warwick Ashford, Senior analyst