Privacy and data protection

Under surveillance – what the Investigatory Powers Act means for business

In this week’s Computer Weekly, the UK government has passed the Investigatory Powers Act, labelled a “snoopers’ charter” that expands the scope of state surveillance – but what does it mean for businesses? We find out what digital transformation means in the fire and rescue service. And we examine the role of public cloud in supporting enterprise storage requirements. Read the issue now. Continue Reading

Breaking the cyber kill chain

Traditional antivirus is no longer good enough for fileless malware attacks that don’t leave a trace Continue Reading

By

• Aaron Tan, TechTarget

How a Dublin court case could derail EU-US data privacy agreements

The Irish Commercial Court will consider whether privacy protection offered by standard contractual clauses for data transfers to the US from Europe is legally valid Continue Reading

By

• Kevin Cahill and Dai Davis

NHS websites defaced by Tunisian Islamist hacktivists

Another series of pro-Islamic State hacktivist attacks on NHS websites has underlined the need to harden websites and keep software up to date as attackers exploit a vulnerability in WordPress Continue Reading

By

• Warwick Ashford, Senior analyst

Google to appeal against order to hand over foreign emails

UK firms urged to consider the risks of non-UK cloud service providers and to encrypt data in the light of another US warrant to access emails held by a US cloud services firm on non-US servers Continue Reading

By

• Warwick Ashford, Senior analyst

Data breach costs exceed 20% of revenue

The cost of data breaches topped 20% of revenue in the past year as cyber attacks became more sophisticated and defenders struggled to keep pace, the latest Cisco security report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook ups security with Fido U2F two-factor authentication

Social media giant is enabling users to increase the security of their logins with Fido U2F USB security keys Continue Reading

By

• Warwick Ashford, Senior analyst

Security spending leaving data vulnerable, study finds

Cyber breaches are increasing despite increased security spending, a study shows, highlighting that security investment decisions are not aligned with actual cyber threats Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft’s cloud privacy battle may go to US Supreme Court

The US Department of Justice is considering going to the Supreme Court after an appeals court refused to revisit its July 2016 landmark ruling blocking government access to Microsoft servers in Ireland Continue Reading

By

• Warwick Ashford, Senior analyst

Challenges of complying with the Investigatory Powers Act

Despite opposition by civil liberties groups and technology companies, the UK government has passed the controversial Investigatory Powers Act, adding a host of security and contingency requirements that UK businesses need to consider Continue Reading

By

• Peter Ray Allison

Lords ‘deeply concerned’ about Digital Economy Bill data-sharing clauses

Digital Economy Bill comes under fire again for its data-sharing principles, this time from the House of Lords Delegated Powers Committee Continue Reading

By

• Lis Evenstad

How information security professionals can help business understand cyber risk

Information security is continually moving up business and board agendas, but information security professionals find it challenging to help business leaders to understand fully the cyber risks across increasingly digital businesses. Continue Reading

By

• Warwick Ashford, Senior analyst

RAC digitises driver assistance

In this week’s Computer Weekly, we speak to the RAC about its modernisation initiative, where it is using Microsoft Azure to digitise older cars and gather real-time data to alert members of faults before they result in roadside breakdowns. We also look at how a lack of diversity in organisations is costing the UK economy money, and how attacks against IoT devices are highlighting the vulnerabilities of specific devices but failing to provide a complete picture of the security challenges. Continue Reading

Davos: Technology poses new risks to jobs, economies and society

Politicians and business leaders will discuss the risks posed by technology to jobs, political stability and cyber security at the World Economic Forum in Davos Continue Reading

By

• Bill Goodwin, Computer Weekly

TechUK launches framework to build public trust in the IoT

Tech sector association techUK wants to help overcome public distrust in the internet of things Continue Reading

By

• Alex Scroxton, Security Editor

Flawed GoDaddy security certificates show need for control

Vulnerabilities in digital security certificates highlight the need for organisations to be able to exercise more control over those certificates Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Top three DNS-related security risks

What are the main security risks associated with the domain name system and how are these best mitigated? Continue Reading

By

• Richard Hollis

Cyber security scare stories could sharpen focus at banks

There are continual cyber attacks on banks, and although most are repelled, there is significant room for improvement Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK youngsters unwittingly exposing private data

The UK children's commissioner has called for better support for child privacy after study shows most are unknowingly agreeing to share private data Continue Reading

By

• Warwick Ashford, Senior analyst

Flight booking systems easy to hack, researchers warn

Malicious actors could infiltrate systems to alter passenger information and even cancel bookings, Chaos Communications Congress told Continue Reading

By

• Warwick Ashford, Senior analyst

European court delivers blow to Snoopers’ Charter

Parts of the controversial Investigatory Powers Act relating to the bulk collection of communications data have been ruled unlawful by the European Court of Justice Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 IT security stories of 2016

Here are Computer Weekly’s top 10 IT security stories of 2016: Continue Reading

By

• Warwick Ashford, Senior analyst

Data danger: Cyber threats lurk inside every company

In this week’s issue, we investigate the hidden threats lurking in every company and discuss what options CIOs and heads of security have to limit damage. We also look at how CIOs can fund digital initiatives when costs are under pressure, and how Boots has built an SAP centre of expertise to take back control of the strategic direction of its IT organisation from its previously outsourced structure. Read the issue now. Continue Reading

Top 10 cyber crime stories of 2016

Here are Computer Weekly’s top 10 cyber crime stories of 2016: Continue Reading

Typo allowed Russian hackers to access US Democratic Party emails

Typographical mistake in an email warning of a phishing attack on the US Democrats led to thousands of private emails being accessed and published by Russian-backed hackers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

European law enforcement seeking smart ways to fight cyber crime

Cyber criminals are always likely to be better resourced than law enforcement. Now, national and regional police forces in Europe are switching tactics to even the odds. Under-resourced law enforcement needs a smarter approach as cyber crime becomes increasingly prevalent and sophisticated, backed by the money and expertise of organised crime groups set up and run as well-resourced and efficient professional business organisations. Cyber crime operations typically have teams dedicated to looking at open source intelligence, targets’ physical environments, weaknesses in supply chains, and potential collaborators inside target organisations to enable sophisticated, blended attacks that involve a combination of actions against a range of vulnerabilities, making them difficult to detect and defend against. Continue Reading

PowerShell security threats greater than ever, researchers warn

Administrators should upgrade to the latest version of Microsoft PowerShell and enable extended logging and monitoring capabilities in the light of a surge in related security threats, warn researchers Continue Reading

By

• Warwick Ashford, Senior analyst

More than 2,000 TalkTalk routers hijacked by Mirai botnet variant

Security researchers are urging ISPs to issue emergency patches for Marai botnet infections after 2,374 TalkTalk routers were linked in a regional botnet Continue Reading

By

• Warwick Ashford, Senior analyst

UK falls below global cyber security confidence

Global confidence in ability to accurately assess cyber risk has fallen in the past year, but the UK has fallen below the global average Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 ANZ enterprise IT stories of 2016

Here is a rundown of Computer Weekly’s most popular ANZ enterprise IT articles for 2016 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Academics link payment card vulnerability to Tesco Bank cyber heist

UK academics uncover a vulnerability in online payment systems, which they say could have been used in the Tesco Bank cyber heist Continue Reading

By

• Warwick Ashford, Senior analyst

US and UK government expand surveillance powers

The US has introduced wide new hacking powers for federal agents a day after the UK's Investigatory Powers Act firmed up bulk surveillance powers for intelligence and polices services Continue Reading

By

• Warwick Ashford, Senior analyst

Mozilla and Tor issue patches for Firefox flaw exposing Tor users

Users of Tor anonymous browsing urged to update to the latest versions of relevant software to block an exploit that collects IP and MAC addresses to identify users Continue Reading

By

• Warwick Ashford, Senior analyst

IBM blamed for Australian census website crash

Computer giant reportedly pays $30m to Australian government as reports are released from two inquiries into DDoS attacks on census website Continue Reading

By

• Beverley Head

One in four Wi-Fi hotspots vulnerable to attack, study finds

At least one in four Wi-Fi hotspots are open to attack, a study by Kaspersky Lab reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Consumer identity key to digital transformation

Customer identity and access management has benefits for consumers and service providers alike, but is key to digital transformation, says KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Alleged hacker Lauri Love’s ‘life will be destroyed’ under Trump regime

Supporters fear for activist Lauri Love if his extradition to face hacking charges to the US goes ahead Continue Reading

By

• Fiona O'Cleirigh and Bill Goodwin

Three breach highlights several security issues, says (ISC)2

Customer data breaches continue to demonstrate that companies are still not treating cyber risk like every other business risk, says Adrian Davis of (ISC)2 Continue Reading

By

• Warwick Ashford, Senior analyst

Hackers arrested in Three mobile upgrade scam

Three men arrested in connection with mobile handset upgrade fraud enabled by unauthorised access to customer data Continue Reading

By

• Warwick Ashford, Senior analyst

Digital transformation not a finite process, says Martin Kuppinger

Security, privacy and identity are key to digital transformation, which is an evolutionary process, according to Martin Kuppinger Continue Reading

By

• Warwick Ashford, Senior analyst

Government data security confusing, finds PAC

A Public Accounts Committee hearing shows the government’s data and cyber security landscape is chaotic and confusing Continue Reading

By

• Lis Evenstad

Online identity needs to be fixed, says Microsoft’s Kim Cameron

Software giant’s identity architect calls on enterprises to professionalise the way they relate to customers to help replace online identity infrastructure that is not fit for purpose Continue Reading

By

• Warwick Ashford, Senior analyst

Counting the cost of financial cyber crime

In this week’s Computer Weekly, the cyber security of banks is under scrutiny after an attack on Tesco Bank leads to millions lost in fraudulent transactions. Our latest buyer’s guide, on server operating systems, looks at the new features in Windows Server 2016. And Coca-Cola explains how a move to the cloud is helping motivate staff. Read the issue now. Continue Reading

Amber Rudd orders Lauri Love extradition to US to face hacking charges

Engineering student Lauri Love faces trials in three US states and a possible 99-year jail sentence for allegedly hacking into US government computer systems as part of a political protest, despite concerns over his health Continue Reading

By

• Fiona O'Cleirigh

412 million user accounts exposed in FriendFinder Networks hack

Another huge data breach has exposed poor security of user details and continued poor user password practices Continue Reading

By

• Warwick Ashford, Senior analyst

Russian banks hit by IoT-enabled DDoS attacks

DDoS attacks on Russian banks have been linked to IoT botnets, further confirming this worrying trend and highlighting the need for IoT suppliers to improve security capabilties Continue Reading

By

• Warwick Ashford, Senior analyst

24 cyber criminals arrested in Europol operation

Romanian police arrest 24 members of a card skimming and cloning operation and identify 47 other suspects Continue Reading

By

• Warwick Ashford, Senior analyst

The march of the robot workers

In this week’s Computer Weekly, we look at how artificial intelligence is being used to automate existing jobs, including roles as varied as IT administrators and customer service agents. Capital One’s European CIO talks about how to create an agile business. And we offer tips on how to deal with an Oracle software audit. Read the issue now. Continue Reading

CW ASEAN: SMEs present security weakness

In this month's CW ASEAN, we look at how the cyber security defences at small and medium-sized enterprises in Southeast Asia may have some vulnerabilities, resulting in cyber security attacks on the large corporations they work with. We also consider the need to educate users of smartphones and tablets across the region as card fraud rates rise, with high use of mobile devices considered a contributing factor. Read the issue now. Continue Reading

CW ANZ: Using gamification to build cyber security skills

In this month's CW ANZ, we look at how PwC is using an online game to give its customers first-hand experience of what it means to face a cyber attack. We also look at how identity is gaining greater prominence in the security debate in Australia as the DTO takes the wraps off plans for a national identity system. Read the issue now. Continue Reading

Pure-play cyber security has real value, says incoming McAfee head

Intel Security has outlined its strategy to protect the new digital economy as it gears up for innovation as a new independent pure-play security firm under the McAfee banner Continue Reading

By

• Warwick Ashford, Senior analyst

The cyber threats lurking within every company

Insider threats have been around for a long time, but it is only recently that people have begun to acknowledge the true danger they pose Continue Reading

By

• Peter Ray Allison

Apple iCloud and Gmail hacker gets 18 months in jail

A US man is given a sentence of 18 months in jail for hacking into celebrity iCloud and Gmail accounts after investigators failed to find a link with the leak of celebrity nude photos online in 2014 Continue Reading

By

• Warwick Ashford, Senior analyst

Information security set for steep trajectory, says (ISC)2

By helping to create a thriving, diverse and open information security community, (ISC)2 hopes to ensure a steep rise for the profession Continue Reading

By

• Warwick Ashford, Senior analyst

Lessons to be learned from attempted $1bn bank heist

Analysis of an attack aimed at stealing $1bn reveals important lessons for cyber defenders, says BAE Systems head of threat intelligence Adrian Nish Continue Reading

By

• Warwick Ashford, Senior analyst

Armed forces minister wants military recruiters to "think different" to attract cyber security pros

Armed Forces minister Mike Penning says military must rethink how it recruits trainees to attract people with the cyber security skills the country needs to protect itself Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Snowden: the IT analyst turned whistleblower who exposed mass surveillance

Oliver Stone's biopic on Edward Snowden reaches the heart of the ethical crisis posed by mass surveillance for the state and ordinary citizens Continue Reading

By

• Fiona O'Cleirigh

Information security needs to cast recruitment net wider, says panel

Companies struggling to fill info sec roles should focus on finding people who can do what they need, not on qualifications, according to a security industry panel Continue Reading

By

• Warwick Ashford, Senior analyst

Saving Lauri Love: activists plan their next move

An eclectic bunch of activists, charity workers and reformed hackers spent a rainy Sunday afternoon plotting their next move in a campaign to save Lauri Love from extradition to the US on hacking charges Continue Reading

By

• Julia Gregory

Most businesses vulnerable to cyber attacks through firmware, study shows

Company culture and overall attitude to security is a major contribution to vulnerability to cyber attack through firmware, a study by Isaca has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Digital Economy Bill lacks clarity on data sharing, experts say

The Digital Economy Bill needs to firm up its definitions on data sharing and improve transparency to avoid losing public trust, according to experts Continue Reading

By

• Lis Evenstad

Retail websites riddled with security holes, researchers warn

Retailers urged to improve the security of their online stores amid a series of discoveries of cyber criminal campaigns to exploit vulnerabilities in retail websites Continue Reading

By

• Warwick Ashford, Senior analyst

Almost two-thirds of US office workers unaware of ransomware threat

Nearly half of ransomware attacks are aimed at office workers, but almost two-thirds of those polled in the US are unaware of the threat Continue Reading

By

• Warwick Ashford, Senior analyst

Gary McKinnon: Why Lauri Love should be spared the nightmare of extradition

Computer activist Lauri Love should be spared a life sentence in a US jail, says former hacker Gary McKinnon Continue Reading

By

• Gary McKinnon

Smartwatches banned from UK Cabinet as EC plans IoT security standards

The EC is planning a security certification scheme for internet of things devices as the UK Cabinet bans smartwatches amid heightened fears of cyber espionage Continue Reading

By

• Warwick Ashford, Senior analyst

NGOs challenge UK and US mass surveillance in human rights court

Privacy International, Liberty and the American Civil Liberties Union are among 10 human rights groups backing a landmark challenge to mass surveillance in the European Court of Human Rights Continue Reading

By

• Bill Goodwin, Computer Weekly

Trust issues stifling digital economy growth, study shows

Businesses that have products and services based on trust have a significant opportunity to future-proof their business, but those who do not risk being side-lined, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Business warned not to be complacent about cyber security

Lloyds of London survey reveals just how badly some European firms are failing in terms of cyber security and low levels of awareness about the role of cyber insurance Continue Reading

By

• Warwick Ashford, Senior analyst

Digital giving – transforming Save the Children with technology

In this week’s Computer Weekly, we talk to global charity Save the Children to find out how digital technology is helping to transform its work in improving children’s lives. We go behind the scenes at the UK’s most secretive court as it discusses bulk data surveillance of citizens by the UK intelligence services. And we analyse the often contradictory experiences of firms implementing SAP’s Hana in-memory database platform. Read the issue now. Continue Reading

Alleged hacker Lauri Love can be extradited to the US, court rules

Westminster Magistrates’ Court has ruled that alleged hacker, Lauri Love, can be extradited to the US, where he could face a 99-year prison sentence Continue Reading

By

• Fiona O'Cleirigh

Lauri Love: the student accused of hacking the US

How did a brilliant but fragile computer science student from a rural English town end up facing life imprisonment in the US? Computer Weekly speaks to Lauri Love Continue Reading

By

• Bill Goodwin and Niels Ladefoged

Dell Technologies aims for an intelligent, connected future

In this week’s Computer Weekly, as Dell and EMC complete the largest IT supplier merger in history, we look at the new $74bn company’s strategy and what it means for IT leaders. Our latest buyer’s guide examines a key aspect of cloud – cloud bursting, used for dynamic capacity management. And we assess the latest views on the UK government’s plans for internet surveillance legislation. Read the issue now. Continue Reading

MaidSafe secure internet concept enters testing phase

Scottish internet startup MaidSafe brings its vision for a more private and secure approach to the web a step closer to reality Continue Reading

By

• Alex Scroxton, Security Editor

NSA used Iraq war to develop surveillance capability, documents show

As the controversial Investigatory Powers Bill inches closer to becoming law, NSA documents reveal that the agency used the Iraq war to develop and expand its surveillance infrastructure Continue Reading

By

• Warwick Ashford, Senior analyst

Basic security could have prevented OPM breach, says report

Basic security controls and malware-detection tools could have prevented the breach of more than 21 million records at the US Office of Personnel Management in 2015, claims a congressional report Continue Reading

By

• Warwick Ashford, Senior analyst

Use ransomware to get security buy-in, says Trend Micro CTO

Ransomware is one of the top cyber threats to business, but organisations should use that to engage stakeholders and review processes and defences, says Trend Micro CTO Raimund Genes Continue Reading

By

• Warwick Ashford, Senior analyst

Lessons from the Dropbox breach

Dropbox is the latest major company to confirm a data breach, albeit four years old, but – as with all recent data breaches by cloud-based services – it highlights some key security lessons Continue Reading

By

• Warwick Ashford, Senior analyst

Evidence of DNS tunnelling in two-fifths of business networks

Cyber criminals are capitalising on the failure of many businesses to examine their DNS traffic for malware insertion and data exfiltration, according to Infoblox Continue Reading

By

• Warwick Ashford, Senior analyst

Westpac bank launches Databank data protection service

Australia's Westpac bank is offering organisations that share customer data a service that it says securely locks down personal information Continue Reading

By

• Stuart Kennedy

Encryption hiding malware in half of cyber attacks

Cyber attackers are using encryption to hide malicious activity, making it increasingly difficult to find as more organisations turn to encryption to protect data, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Law firms planning litigation market for GDPR

Businesses should be preparing for the storm of litigation that is likely to be unleashed when the GDPR goes into force, warns Stewart Room of PwC Legal Continue Reading

By

• Warwick Ashford, Senior analyst

French submarine maker data breach highlights challenges of IP security

French naval contractor data breach proves that protecting intellectual property is challenging, say security experts Continue Reading

By

• Warwick Ashford, Senior analyst

Expect ransomware arrests soon, says bitcoin tracking firm Chainalysis

Law enforcement organisations are set to ramp up arrests of cyber criminals behind ransomware attacks, according to financial technology startup Chainalysis Continue Reading

By

• Warwick Ashford, Senior analyst

Police arrest woman in connection with Sage data breach

A woman has been arrested on suspicion of fraud in connection with a data breach at accounting software firm Sage Continue Reading

By

• Warwick Ashford, Senior analyst

CW Benelux: Painting by numbers

In this issue of CW Benelux, we describe how data scientists in the Netherlands have applied technology to art. The Dutch are renowned for being creative with technology and the country has a deep history in art, boasting some of the most celebrated painters. It is therefore apt that the combined tech brains of ING, Microsoft, the Technical University of Delft and other contributors have created The Next Rembrandt, which serves as a visual showcase for big data. The new portrait in the style of Rembrandt van Rijn was put together by a combination of big data technology and 3D printing. All of Rembrandt’s 346 paintings were analysed using data analytics, making it possible to create a seemingly genuine Rembrandt image, while a 3D printer made accurate emulation of his paint patterns and textures a reality. Also in the Netherlands, we feature a case study about how The Hague is solving a bike parking headache with a mobile app. Continue Reading

Cerber ransomware service reaps $195,000 profit in a month

Franchises such as Cerber are making highly profitable ransomware available to a broader range of cyber criminals, according to a report by security firm Check Point Continue Reading

By

• Warwick Ashford, Senior analyst

Financial sector faces era of cyber mega heists

Banks and other financial institutions are threatened by a new breed of elite cyber criminals running professional operations that will use any means to achieve their goals, says Barclays security chief Continue Reading

By

• Warwick Ashford, Senior analyst

Sage data breach underlines insider threat

Organisations need to take insider threats more seriously say security experts, as Sage warns that a data breach using an internal log-in may have compromised employee data at nearly 300 UK firms Continue Reading

By

• Warwick Ashford, Senior analyst

CW Nordics: Dealing with digital disruption

The Nordic countries are renowned for being home to thriving tech startup scenes, so it is hardly surprising that IT is a disruptive force in the region. In this quarter’s CW Nordics ezine we look more closely at how the Nordic region is being affected by technology disruption across industry sectors and how organisations are reacting to it. Continue Reading

MI5 staff repeatedly overrode data surveillance rules

Security service MI5 is responsible for 210 “clear contraventions” over five years for the way it accessed private internet and telephone data Continue Reading

By

• SA Mathieson

Strider cyber attack group deploying malware for espionage

Symantec security researchers have uncovered a spying campaign by a previously unknown group using modular malware as stealthware Continue Reading

By

• Warwick Ashford, Senior analyst

Banner Health cyber breach underlines need for faster intrusion detection

A data breach at Banner Health has highlighted the importance of intrusion detection and prompted calls for greater cyber security investment in the increasingly targeted healthcare industry Continue Reading

By

• Warwick Ashford, Senior analyst

Artificial intelligence takes centre stage in cyber security

Artificial intelligence-led cyber security technology has been in the spotlight at two major industry conferences in Las Vegas, signalling a firm trend in cyber defence research Continue Reading

By

• Warwick Ashford, Senior analyst

Italian-based Android RAT spies on mobiles in Japan and China, say researchers

Researchers discover an Italian-based Android RAT designed for spying that is targeting mobile devices using their unique identification codes Continue Reading

By

• Warwick Ashford, Senior analyst

Consumer identity management is the core of real CRM

IAM + CRM is much more than simply IAM for external users, says Ivan Niccolai Continue Reading

By

• Ivan Niccolai

Six essential processes for keeping data secure

Data security is increasingly vital for organisations as the countdown begins for compliance with new rules imposed by the EU’s general data protection regulation Continue Reading

By

• Christine Andrews

UK’s top security judges struggle to assess privacy threats

Technological advancements make it difficult for the Investigatory Powers Tribunal to assess privacy threats, say the tribunal’s own judges Continue Reading

By

• Fiona O'Cleirigh

Date set for landmark hearing into EU-US data transfers

Irish court hearing triggered by Austrian law student Max Schrems could have huge implications for EU-US trade and the data privacy rights of millions of EU citizens Continue Reading

By

• Computer Weekly Reporters

Security industry welcomes cyber crime’s inclusion in official stats

The security industry welcomes the inclusion of cyber crime statistic in official crime reports to highlight the size and nature of the threat Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile payments get Isaca’s security approval

Mobile contactless payments enable three key security controls that make them more secure than physical and e-commerce payments, according to a report by Isaca Continue Reading

By

• Warwick Ashford, Senior analyst