Privacy and data protection

Most online retail sites put customers at risk of phishing

Most top online retail sites fail to protect consumers from phishing attacks, a study has revealed Continue Reading

By

• Warwick Ashford, Security Editor

Security Think Tank: Humans and AI machines in harmony

How can organisations evolve their security operations teams to do more automation of basic tasks and cope with dynamic IT environments? Continue Reading

By

• Piers Wilson, IISP

Millennials set to disrupt authentication, shows IBM study

Young adults are lax on passwords, but are more comfortable than older generations with biometric and multifactor authentication, an IBM study shows Continue Reading

By

• Warwick Ashford, Security Editor

GDPR’s latest gift? Class action privacy cases

Europeans will in future be able to bring US-style class actions for (alleged) privacy violations, instead of having to sue individually and expensively. It’s thanks to a little-known clause of the ... Continue Reading

By

• Bryan Betts, Freeform Dynamics

NGO to fight for GDPR rights set to launch

A new breed of NGO aimed at helping EU citizens fight for privacy rights under the GDPR is set to launch after achieving the minimum funding required Continue Reading

By

• Warwick Ashford, Security Editor

Business cyber crime up 63%, UK stats show  

Despite an overall decrease in fraud and computer misuse in 2017, the latest Office for National Statistics (ONS) reports show that incidents involving computer misuse and malware against business are way up Continue Reading

By

• Warwick Ashford, Security Editor

How blockchain can secure the IoT

By doing away with a central authority in internet of things (IoT) networks, blockchain technology can reduce the risk of IoT devices being compromised by a single point of security failure Continue Reading

By

• Aaron Tan, TechTarget

ICO launches data protection excellence award

UK’s privacy watchdog launches data protection excellence award to mark international Data Protection Day, as security suppliers issue data protection tips and guidelines Continue Reading

By

• Warwick Ashford, Security Editor

UK likely to remain strategic EU data protection partner

Head of European Union’s independent data protection authority says UK is likely to remain a strategic partner in data protection after Brexit Continue Reading

By

• Warwick Ashford, Security Editor

Ransomware was most popular cyber crime tool in 2017

Detections of ransomware increased by more than 90% last year compared with 2016 Continue Reading

By

• Warwick Ashford, Security Editor

Security spending not on most-effective controls, report reveals

While planned spending on IT security is up globally, so too are data breaches, with evidence mounting that hackers are hitting the bottom line, a global security survey reveals Continue Reading

By

• Warwick Ashford, Security Editor

Most UK organisations unaware of new data protection laws

The UK’s digital and culture secretary is urging businesses and charities to prepare for stronger data protection laws in the light of new information Continue Reading

By

• Warwick Ashford, Security Editor

GDPR worries hit cloud storage investments, says survey

NetApp-sponsored survey finds lack of customer confidence in cloud service providers’ retention of GDPR-affected data has led organisations to rethink and scale back cloud investments Continue Reading

By

• Antony Adshead, Storage Editor

AI is moving towards acceptance in cyber security, says Check Point

Artificial intelligence is well on its way to being a useful tool in the cyber security professional’s kit, but according to Check Point, there are still big challenges to overcome Continue Reading

By

• Alex Scroxton, Security Editor

Sweden puts government IT outsourcing under increased scrutiny

Government introduces rules to tighten security in IT outsourcing deals following a very public data leak last year Continue Reading

By

• Eeva Haaramo

Two-thirds of startups ill-prepared for GDPR

While most startups collect personal data, a survey reveals that many are not very well prepared for compliance with the EU’s forthcoming data protection regulation Continue Reading

By

• Warwick Ashford, Security Editor

NHS organisations to get cyber security alerts service

As part of a deal between NHS Digital and Microsoft, NHS organisations will be able to get a threat detection service, alerting them to any cyber security issues Continue Reading

By

• Lis Evenstad

Dark web Dream Market drives cyber fraud industry

An international operation shut down the AlphaBay and Hansa marketplaces in July 2017, but new ones have sprung up on the dark web, with one in particular helping to drive cyber fraud Continue Reading

By

• Warwick Ashford, Security Editor

Thousands of critical systems affected by serious security flaws

Multiple and serious vulnerabilities have been found in a software management system widely used in corporate and industrial control environments, researchers warn Continue Reading

By

• Warwick Ashford, Security Editor

Facebook offers funding to secure the internet

Facebook has announced that it is offering funding for research into ways of improving internet security Continue Reading

By

• Warwick Ashford, Security Editor

New controversies as Trump passes US Foreign Intelligence Surveillance Act

The amended Foreign Intelligence Surveillance Act, which seeks to legitimise US surveillance on foreigners, has been signed off by president Trump Continue Reading

By

• Kevin Cahill

Interview: Kaspar Korjus, Estonian e-Residency lead

As the number of people signing up to become Estonian e-residents exceeds the country’s birth rate, Computer Weekly speaks to the man heading up the programme Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Uncontrolled cyber attacks on UK cyber defenders’ radar

Uncontrolled cyber attacks are just as much a threat as targeted attacks, according to the UK’s cyber defence agency, which continues to consider a major cyber attack imminent Continue Reading

By

• Warwick Ashford, Security Editor

China’s Yitu eyes ASEAN market with facial recognition know-how

Facial recognition software specialist Yitu, which recently won a face identification accuracy contest in the US, has already nabbed regional clients such as Singapore’s Certis Cisco Continue Reading

By

• Aaron Tan, TechTarget

Will banking regulations create a new Big Bang?

In this week's Computer Weekly, we look at two important new financial services regulations, PSD2 and open banking, which promise to revolutionise the industry by opening up customer data. We ask security researchers to explain the Spectre and Meltdown processor flaws and how to tackle them. And we examine the NVMe protocol and its likely benefits for storage technologies. Read the issue now. Continue Reading

GDPR: Not too late to ensure real risks will be addressed

With just four months to go before the General Data Protection Regulation compliance deadline, there is a growing anxiety in many parts of the regulated community that their GDPR plans may not be fit for purpose Continue Reading

By

• Warwick Ashford, Security Editor

Almost a quarter of London businesses unaware of GDPR

Nearly one in four London businesses unaware of new data protection regulation, a survey has revealed, with just months before the compliance deadline Continue Reading

By

• Warwick Ashford, Security Editor

Norwegian healthcare breach alert failed GDPR requirements

Norwegian healthcare authorities failed General Data Protection Regulation requirements for notifying those affected by a personal data breach by waiting a week before disclosing a breach discovered on 8 January 2018 Continue Reading

By

• Warwick Ashford, Security Editor

Judge will take time to seek answers from EU court over Max Schrems Facebook privacy fight

The Irish High Court will take time to decide what questions to put before the European Court of Justice in a case with significant implications for EU and US trade and the privacy of EU citizens Continue Reading

By

• Bill Goodwin, Computer Weekly

European Parliament votes to restrict exports of surveillance equipment

European Parliament votes to tighten export controls to restrict supply of surveillance and encryption technology to states with poor human rights records amid fears British companies may not have to comply after Brexit Continue Reading

By

• Bill Goodwin, Computer Weekly

Cyber attackers exploiting trust in FTP servers

Some cyber attackers are exploiting trust in FTP servers to distribute malware, security researchers warn Continue Reading

By

• Warwick Ashford, Security Editor

The rights and wrongs about GDPR compliance

We explore some common myths surrounding the forthcoming General Data Protection Regulation Continue Reading

By

• Jimmy Desai

Create security culture to boost cyber defences, says Troy Hunt

Security suffers when there is tension between software developers and security professionals, but it is common in many organisations, says world-renowned security blogger and trainer Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber attackers upped their game in 2017, warns report

Cyber attackers ranging from criminals to nation states have upped their game in the past year, “moving the needle” in terms of tactics, techniques and procedures, a report by a cyber security firm warns Continue Reading

By

• Warwick Ashford, Senior analyst

Business needs to reduce cyber threat to payment card data

Cardholder data is a prime target for cyber criminals, and that is only likely to increase in the coming year, according to a cloud-based secure payments firm Continue Reading

By

• Warwick Ashford, Senior analyst

North Korean hackers tied to cryptocurrency attacks in South Korea

North Korea's Lazarus Group targeted South Korean cryptocurrency exchanges and users in late 2017, but may soon go after exchanges and users in other countries, warns report Continue Reading

By

• Warwick Ashford, Senior analyst

Davos: Disintegration of the internet could create economic turmoil

Politicians and business leaders will discuss the risks posed by fake news, cyber attacks, and artificial intelligence to jobs, political stability and global security, at the World Economic Forum in Davos Continue Reading

By

• Bill Goodwin, Computer Weekly

Vulnerability exploit report shows importance of patching

Latest vulnerability exploit report by security firm AlienVault shows the most popular vulnerabilities remain exploited for several years Continue Reading

By

• Warwick Ashford, Senior analyst

LeakedSource operator could face up to 10 years in jail

Canadian man accused of selling stolen identities and passwords on website Continue Reading

By

• Zach Emmanuel, Computer Weekly

Sweden pilots surveillance technology to combat terrorism and crime

The Swedish police and security agencies are trialling surveillance equipment to help them respond to terrorism and crime more quickly Continue Reading

By

• Gerard O'Dwyer

Skygofree Android spyware active since 2014, say researchers

Powerful, highly advanced spyware has been targeting Android mobiles for the past four years, security researchers have discovered Continue Reading

By

• Warwick Ashford, Senior analyst

How to fix the Meltdown and Spectre chip flaws

In this week’s Computer Weekly, as CIOs come to terms with the Meltdown and Spectre processor flaws that make every computer a security risk, we examine how to protect your IT estate. We find out how Alexa-style voice recognition smart speakers can help with CRM strategies and open up new sources of customer data. And we look at how the public sector is implementing DevOps and the benefits being delivered. Read the issue now. Continue Reading

London cyber security careers fair highlights opportunities

A cyber security careers fair in London on 17 January 2018 is aimed at anyone thinking of a career in the field, including experienced professionals and students Continue Reading

By

• Warwick Ashford, Senior analyst

Ohio computer programmer faces 16 criminal charges over monitoring thousands of computers

A 28-year-old computer expert has been charged for monitoring thousands of computers, using a form of malware he created Continue Reading

By

• Zach Emmanuel, Computer Weekly

Call for statutory regulation of police number plate cameras amid concerns over accuracy

The UK’s automatic number plate recognition database – one the largest non-military data-gathering systems – records up to 1.2 million false readings of number plates every day. It should be subject to statutory regulation, says an independent watchdog Continue Reading

By

• Bill Goodwin, Computer Weekly

Check Point finds AdultSwine malware in Google Play apps

Security researchers have discovered new malware code hidden in game apps, mainly aimed at youngsters Continue Reading

By

• Warwick Ashford, Senior analyst

Intel makes security-first pledge

As it scrambles to deal with the Meltdown and Spectre processor exploits, Intel has made a series of security commitments Continue Reading

By

• Warwick Ashford, Senior analyst

F-Secure highlights another critical Intel security issue

As Intel scrambles to issue security updates to address the Meltdown and Spectre exploits, researchers have highlighted another, unrelated, critical security issue that could affect millions of corporate laptops Continue Reading

By

• Warwick Ashford, Senior analyst

How secure are smart energy grids?

The improved efficiency of smart grids need to be weighed against the cost of security - presenting a unique opportunity for the tech sector and a new market for security companies Continue Reading

By

• Peter Ray Allison

Spyware targets North Korean dissidents via social links, says McAfee

Researchers at security firm McAfee have confirmed that social networks are being used to target North Korean dissidents with spyware Continue Reading

By

• Warwick Ashford, Senior analyst

EC underlines need for data transfer agreement post-Brexit

The European Commission has emphasised the importance of having a data transfer agreement in place after the UK leaves the European Union Continue Reading

By

• Warwick Ashford, Senior analyst

UAE tech growth prompts firms to review internal IT security

As IT becomes more prominent in the UAE economy, more and more internal connections between people and systems are created, all of which need to be secured Continue Reading

By

• Alicia Buller

ICO fines Carphone Warehouse £400,000

Mobile retailer hit with one of the highest fines for putting personal data at risk as UK privacy watchdog warns that more stringent data protection laws will apply from 25 May 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

Max Schrems champions NGO to fight for GDPR rights

Privacy activist whose legal challenge of Facebook led to the scrapping of the Safe Harbour Agreement says crowdfunding a new type of non-government organisation is essential to deliver privacy rights Continue Reading

By

• Warwick Ashford, Senior analyst

Meltdown and Spectre a big deal for enterprises

Although consumers are relatively unaffected by the recently disclosed security vulnerabilities in most modern processors, enterprises need to take the threat seriously. Computer Weekly looks at how enterprise IT and security professionals should be approaching these threats Continue Reading

By

• Warwick Ashford, Senior analyst

Countdown to GDPR

In this week’s Computer Weekly, with the EU General Data Protection Regulation (GDPR) coming in to force this year, we look at the challenges for businesses to comply by the 25 May deadline. We examine the future for HPE as CEO Meg Whitman steps down. And we find out how the move to hyper-converged systems affects your backup strategy. Read the issue now. Continue Reading

Cyber attacks in 2017 drive Nordic security efforts

The volume of cyber attacks last year has increased boardroom focus on security in the Nordic region Continue Reading

By

• Eeva Haaramo

Intel to set up new group to focus on hardware security

Chip maker is reportedly planning to form a new group to focus on hardware security as it scrambles to limit the impact of recently discovered security flaws in chip designs Continue Reading

By

• Warwick Ashford, Senior analyst

Top UK and US firms still overestimating GDPR readiness

Less than five months before the compliance deadline for the EU’s General Data Protection Regulation (GDPR), most top UK and US firms are still overestimating their state of readiness, a study suggests Continue Reading

Sweden steps up cyber defence measures

Sweden is tightening up its cyber security defences as part of a wider national security strategy Continue Reading

By

• Gerard O'Dwyer

Get tooled up to meet GDPR requirements

We look at options for tools to help organisations comply with the EU’s General Data Protection Regulation Continue Reading

By

• Renee Murphy

Patch systems against Meltdown and Spectre, urges ICO

UK’s data protection watchdog is calling for organisations to apply security updates to mitigate against exploits of microprocessor flaws as soon as possible to safeguard personal data Continue Reading

By

• Warwick Ashford, Senior analyst

2018 could be year of critical infrastructure attacks, says report

The coming year is likely to see an increase in the number of cyber attacks on critical national infrastructure (CNI), according to a report based on experts’ forecasts Continue Reading

By

• Warwick Ashford, Senior analyst

Zero in on your zero-day vulnerabilities

A zero-day attack comes, by definition, out of the blue. You cannot predict its nature or assess how much damage it might cause, but you can take some basic steps to protect yourself from a potentially crippling cyber strike Continue Reading

By

• Graeme Park

Critical Intel security patch will slow PCs, servers and Macs

AMD shares rise on news that the performance of millions of Windows PCs, Linux servers and Apple Macs is to be impacted by critical updates for a recently discovered security flaw in Intel chips manufactured in the past 10 years Continue Reading

By

• Warwick Ashford, Senior analyst

What the EU’s new data protection regime means for ASEAN

A large proportion of businesses in the regional economic grouping will be affected by Europe’s General Data Protection Regulation, but awareness of the new rules remains low, even in countries with existing data protection laws Continue Reading

By

• Aaron Tan, TechTarget

Top IT priorities for Nordic CIOs in 2018

Nordic CIOs tell Computer Weekly about their intentions for the year ahead Continue Reading

By

• Eeva Haaramo

Top UK and US firms still overestimating GDPR readiness

Less than five months before the compliance deadline for the EU’s General Data Protection Regulation (GDPR), most top UK and US firms are still overestimating their state of readiness, a study suggests Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware to hit cloud computing in 2018, predicts MIT

Ransomware targeting cloud services is one of the six biggest cyber threats likely to face organisations in 2018, according to the Massachusetts Institute of Technology Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 IT security stories of 2017

Here are Computer Weekly's top 10 IT security stories of 2017 Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 cyber crime stories of 2017

Here are Computer Weekly’s top 10 cyber crime stories of 2017 Continue Reading

By

• Warwick Ashford, Senior analyst

UK government blames North Korea for WannaCry cyber attack

The UK and US governments say a North Korean group was responsible for the ransomware attacks that hit the NHS and other organisations globally this year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Top cyber security predictions in APAC in 2018

Cyber criminals will ramp up efforts to mine cryptocurrencies, while mobile malware will rear its ugly head across the APAC region in 2018 Continue Reading

By

• Aaron Tan, TechTarget

CW Europe: Eurosport pumps up digital technology for cycling fans

Read how Eurosport is using a novel combination of technology and information to develop immersive viewing experiences for sports fans across a range of platforms. Also find out how Russian state bank Vneshekonombank expects to become a vehicle for a blockchain revolution in the country’s public sector, and what the European Parliament's approval of a new electronic system to store biometric information might mean for UK citizens after Brexit. Continue Reading

Labour MP Liam Byrne launches ‘People’s Plan for Digital’

Shadow digital minister launches online collaborative project for the public and industry to share and debate ideas on the UK’s digital future Continue Reading

By

• Lis Evenstad

Innovation key to halt cyber attacks

In the light of the number of cyber breaches taking place, innovative security systems are required, according to the UK National Cyber Security Centre (NCSC) Continue Reading

By

• Warwick Ashford, Senior analyst

Steal a march on cyber criminals through security by deception

Security by obscurity, although a common and tempting practice, is generally not recommended, but security by deception offers a way for defenders to make it more difficult for attackers to succeed and easier for defenders to catch them Continue Reading

By

• Nicholas Fearn

Barclays Bank stops offering Kaspersky software to new users

Bank is no longer offering customers Kaspersky anti-virus software after UK security agency issues warning Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

We're living in a global beta test to determine the legal and ethical boundaries of data collection

In the fast-expanding world of ubiquitous personal data, sometimes it feels like we’re living in an enormous global beta test to work out what’s acceptable and what’s not. This week, Google was hit ... Continue Reading

By

• Bryan Glick, Editor in chief

Google faces £2.7bn claim on behalf of 5.4 million iPhone users

Technology giant is accused of harvesting and selling data from millions of iPhone users from 2011 to 2012 who could each receive compensation of several hundred pounds Continue Reading

By

• Warwick Ashford, Senior analyst

Lauri Love would face ‘medieval’ conditions in US prison if extradited over hacking charges

Engineering student Lauri Love should be tried in the UK, court hears, as new evidence is presented on the “medieval” conditions in US jails for people with medical problems Continue Reading

By

• Bill Goodwin & Julia Gregory

Consumer identity management a growing trend

Consumer identity and access management is a growing trend, but system choice is still challenging, according to KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses need to balance user experience, privacy and security

Balancing user experience, privacy and security for the connected consumer is a key challenge for online businesses, according to KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Lauri Love: how reformed hackers halted the WannaCry virus

Lauri Love presents a compelling story of the WannaCry malware that nearly brought down the NHS, and the behind the scenes work of former hackers, and security researchers that helped to prevent lives being lost. Love is facing extradition to the US after allegedly taking part in a hacking protest over the death of internet pioneer Aaron Swartz, who faced jail for using a hidden computer to downloading academic journals at MIT. Continue Reading

By

• Bill Goodwin, Computer Weekly

UK sale of surveillance equipment to Macedonia raises questions over export licence policy

The UK approved an export licence for the sale of surveillance equipment to Macedonia – while the country was engaged in an illegal surveillance programme against its citizens. A senior minister was consulted on the decision Continue Reading

By

• Tena Prelec

My brother Lauri Love should have the right to a trial in the UK

Lauri Love should face trial over hacking allegations in a British Court, rather than be extradited to the US, where his extraordinary skills will be lost to society, says his younger sister Continue Reading

By

• Natasha Love

UK only average in terms of digital public services

UK government has the innovation skills to become a digital public services leader, but needs to improve the ID and authentication that sits underneath it to reach this goal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Blockchain could be used for citizen identity services, says Reform

Reform think tank argues that government could use blockchain technology to create a secure identity for citizens to use across public services Continue Reading

By

• Lis Evenstad

Uber recognises need for consumer trust after breach cover up

New Uber leadership has recognised the importance of consumer trust and that they never should have attempted to cover up a 2016 data breach that affected millions of customers and drivers Continue Reading

By

• Warwick Ashford, Senior analyst

Europe not ready for imminent cyber strikes, say infosec professionals

Information security leaders in Europe believe a major breach of critical infrastructure is coming and that data breaches in their own organisations are imminent – yet most are not ready Continue Reading

By

• Warwick Ashford, Senior analyst

CW ANZ: On cyber alert

Achieving any form of computer security is an uphill task, costing Australian companies time and money with no prospect of a reprieve any time soon. In this month’s CW ANZ, read about the state of cyber security in Australia, Telstra’s efforts to help enterprises improve their cyber security posture, and how Australian organisations can keep up with the demands of cyber security. Also, find out why unsanctioned cloud apps continue to be a major bugbear among security chiefs in Australia. Continue Reading

CW ASEAN: How managed security services help to reduce cyber risk

The growing complexity and volume of cyber threats has led to rising demand for managed security services that provide the capabilities and technological know-how to combat cyber threats. In this month’s issue of CW ASEAN, read more about the pros and cons of using managed security services and considerations you should be aware of. Also, find out what organizations can do to put the odds in their favor when combating cyber threats. Continue Reading

How the biggest cyber security disasters could have been avoided

The headline-grabbing breaches that hit Accenture and Equifax in 2017 could have been averted had basic cyber hygiene been in place Continue Reading

By

• Jessica McGreal, Contino

Only a quarter of UK law firms are ready for GDPR, study shows

Just 25% of UK law firms are ready for the General Data Protection Regulation and one in five have experienced an attempted cyber attack in the past month Continue Reading

By

• Warwick Ashford, Senior analyst

Why UK police are learning cyber forensics

The need for the UK police force to conduct forensic investigations on computers is nothing new, but a rapid escalation of cyber crime has demanded a different approach Continue Reading

By

• Alex Bennett, Firebrand Training

Muslim hactivists hack “unhackable” IS news site

A Muslim hacktivist group has hacked into Islamic State’s news site and published thousands of subscribers’ details just hours after the site claimed it was impenetrable Continue Reading

By

• Warwick Ashford, Senior analyst

CW Benelux: Young wayward hackers could help fill Dutch IT skills gap

In this issue, read how an initiative in Rotterdam is helping young people get into the IT sector by targeting those overlooked by traditional methods. Also find out how Amsterdam’s Schiphol airport is utilising open source software to create and use a multi-cloud platform with an open API, and how the Netherlands’ Rabobank has moved from tape libraries and robotic arms to a platform-based storage and retrieval system. Continue Reading

GDPR fines may affect almost 80% of US firms, poll shows

Most US companies risk fines for non-compliance with new European data protection laws that apply to all organisations processing any personal data of EU citizens Continue Reading

By

• Warwick Ashford, Senior analyst

A guide for businesses to China’s first cyber security law

Companies that break China’s new cyber security law may be fined or even have their licence to trade in the country removed Continue Reading

By

• Nick Beckett, CMS

Go beyond GDPR for a competitive edge

By exceeding the bare minimum requirements set by privacy regulations, businesses can win customers by offering greater assurances, says a business adviser Continue Reading

By

• Warwick Ashford, Senior analyst