IT for small and medium-sized enterprises (SME)

Security Think Tank: Many routes to UTM to boost security capabilities

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

Government restates SME spend commitment as large suppliers win more cloud hosting deals

An analysis of the G-Cloud and Digital Outcomes and Specialists (DOS) framework sales figures suggests proportion of cloud hosting deals going to big suppliers is continuing to rise Continue Reading

Security Think Tank: Arguments for and against unified threat management

How can organisations best use unified threat management tools to help stem the tide of data breaches? Continue Reading

Orange acquires UK’s SecureData

The Orange telecommunications group is to acquire UK cyber security firm SecureData to strengthen its leadership position in Europe in this sector Continue Reading

ICO to audit Leave.EU and Eldon Insurance

UK privacy watchdog will audit the data protection practices at Leave.EU and Eldon Insurance and has confirmed fines for both companies for unlawful marketing messages Continue Reading

New stolen credentials cache puts spotlight on authentication

The discovery of billions more stolen usernames and passwords in Collections #2 to #5 have prompted fresh calls for the implementation of better authentication methods across industry Continue Reading

No-deal Brexit could lead to data issues, MPs told

Trade body TechUK is concerned smaller companies are far from ready for a no-deal scenario, while warning that leaving without a deal could lead to serious data issues for businesses Continue Reading

NetSuite CEO Evan Goldberg: Oracle ownership is symbiotic

Evan Goldberg, chief executive officer and founder of NetSuite, talks about the company’s narrative, from cloud applications pioneer to its acquisition by Oracle Continue Reading

Cyber insurance uptake growing, but not all firms convinced

The adoption of cyber insurance is expected to grow, but one in three companies still are not sold on the benefits, a survey shows Continue Reading

Unconfigured IoT is a security risk, warns researcher

Internet of things researcher says unconfigured internet-connected devices are a largely unrecognised cyber security risk to businesses and consumers, and welcomes the increased likelihood of UK IoT legislation Continue Reading

Global cyber attack could cost up to $193bn, study shows

A coordinated global cyber attack could have an economic impact of up to $193bn, an insurance industry-backed report claims Continue Reading

IT leaders grapple with workforce skills gap as they deploy AI and digital technology

Organisations will have to find new ways of reskilling their workforce as they get to grips with artificial intelligence and other digital technologies. CIOs also need to keep their skills updated if they are to succeed Continue Reading

UK police target hundreds of DDoS attackers

National Crime Agency is investigating hundreds of suspected users of a distributed denial of service-for-hire site that was taken down by an international law enforcement operation Continue Reading

New tech putting sensitive data at risk, report confirms

Deployments of new technologies are putting sensitive corporate data at risk because organisations are struggling to secure these new IT environments, a report confirms Continue Reading

Data protection practices still poor, survey shows

Despite concerns over privacy and data protection and a greater understanding of best security practices, individuals and businesses are still falling short, a survey reveals Continue Reading

Minister urges UK firms to prepare for no-deal Brexit

On International Data Protection Day, the UK’s digital minister has added her voice to calls by the data protection watchdog for UK firms to prepare for a no-deal Brexit Continue Reading

UK IT spending worth £27bn held back due to Brexit uncertainty

UK businesses are putting billions of pounds of IT investments on hold until they know the terms that the UK will leave the EU Continue Reading

UK cyber security agency investigates DNS hijacking

NCSC is probing the large-scale DNS hijacking campaign that has reportedly affected government and commercial organisations worldwide, and has issued defence advice Continue Reading

Budding UK cyber strategists gear up for national competition 

Teams of UK university students are preparing to compete for the second time in analysing the threat of a simulated cyber attack to develop policies and strategies Continue Reading

ICO adds to guidance on ‘no-deal’ Brexit

The UK’s privacy watchdog has been advising UK firms to prepare for a no-deal Brexit and has added some guidance for SMEs Continue Reading

Poor practices expose 24 million financial records

Failure to maintain appropriate security controls has again led to the exposure of millions of sensitive data records, this time from the banking world Continue Reading

IoT application vulnerabilities leave devices open to attack

Barracuda Networks calls for internet of things devices to be subject to regular security review after researchers detail the application vulnerabilities of an internet-connected security camera Continue Reading

Crime stats show switch in focus by cyber criminals

The latest crime statistics suggest that cyber criminals are turning their attention to organisations and social engineering attacks as they become more sophisticated Continue Reading

Business failing to see strategic value of cyber security

UK businesses are failing to get value out of cyber security because they fail to see its strategic importance and often have a negative attitude towards security professionals, a study has revealed Continue Reading

Time to deploy strong authentication, says Fido

The time has come for organisations to deploy cryptographically backed strong authentication, according to the Fido Alliance, which seeks to eliminate the world’s dependence on password-based security Continue Reading

US issues emergency directive to halt DNS hijacking

US government agencies have been given 10 days to complete a four-step action plan to stop DNS hijacking attacks Continue Reading

IBM mobile cyber range starts European tour in London

IBM’s mobile cyber range is kicking of a tour in London to raise awareness around the need for tried and tested cyber attack responses among organisations in Europe Continue Reading

Young Dutch cyber criminals get re-education rather than jail time

Young hackers in the Netherlands are being rehabilitated through punishments that educate rather than incarcerate Continue Reading

Ransomware in decline, report confirms

The trend of cryptomining replacing ransomware as the most popular money-generating activity by cyber attackers appears to be confirmed by malware stats for the past year Continue Reading

London cyber innovation centre expands global ties

London innovation centre Plexal has announced international partnerships aimed at boosting global cyber security cooperation Continue Reading

Broadband divide persists across the UK, says Which?

Latest statistics from Which? show the UK’s broadband divide persists, with many areas still missing out on high-speed services despite industry tub-thumping Continue Reading

Name and shame firms with poor cyber security, government told

The government should name and shame companies whose cyber security measures fail to protect consumers’ data and firms should implement Active Cyber Defence, an academic report urges Continue Reading

Public procurement key to cyber security

Using public procurement as a means of boosting cyber security is the top recommendation for 2019, according to a report based on expert views Continue Reading

Five issues for SMEs to consider when adopting encryption

Encryption is still considered difficult to deploy and use as a data protection method, especially by small businesses, but considering five key factors can make adoption easier, says Becrypt Continue Reading

Breach of nearly 2.7 billion records underlines password flaws

Potentially the biggest personal data breach to date from thousands of sources, some possibly breached as far back as 2008, illustrates the deeply flawed nature of password-based authentication, say industry commentators Continue Reading

Threat intelligence boosts security training

Security professionals in training can now benefit from real-time threat intelligence data, thanks to a partnership between Digital Shadows and Immersive Labs Continue Reading

Security Think Tank: Cloud tech helps to protect advanced networks

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

UK tech firms favour second referendum as next move in Brexit stalemate

UK tech firms want to remain as close to the EU as possible and believe a second referendum on membership of the trading bloc would be the best way out of the current political stalemate Continue Reading

Researchers discover new Magecart group

Security researchers have uncovered a sub-group of the Magecart hacking group, highlighting the wider risks of web-based supply chain attacks Continue Reading

Security Think Tank: Walk before you run

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

Millions of industrial remote controllers open to attack

Millions of industrial remote controllers are open to cyber attack because of vulnerabilities in the radio frequency technology used, a study has revealed Continue Reading

The rise of DevSecOps

The increasing complexity of security threats facing enterprises is leading to DevSecOps approaches, which combine operations and development with security, so that all business units are involved in security operations Continue Reading

Businesses fail to apply encryption technology effectively

Most businesses are not applying common encryption tools effectively to contain the fallout and costs of data breaches, research shows Continue Reading

Nottingham Building Society boosts storage and saves power with Nexsan deployment

Building society ditches geriatric IBM storage array to gain reliability, boost capacity by 20 times and make energy savings with Nexsan, but rejects flash storage for spinning disk SAN Continue Reading

Security Think Tank: Apply different techniques to safeguard against rogue code

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

Security Think Tank: Combine SDN, containerisation and encryption to halt rogue code

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

Top UK hacker-for-hire jailed

Notorious British hacker-for-hire jailed for cyber attacks on a Liberian telco after an international criminal justice operation Continue Reading

AI application overlooked in cyber security research

Despite the proliferation of cyber security products and services claiming to be driven by artificial intelligence, the application of the technology is being overlooked by research, a study shows Continue Reading

Security Think Tank: How to use SDN, containers and encryption – and some warnings

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

Microsoft takes community approach to artificial intelligence in Sweden

Microsoft is making increasing use of artificial intelligence in Sweden as it shares experiences with the development community Continue Reading

Security Think Tank: Creative thinking key to meeting emerging security challenges

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

UK firms say £6.6bn annual security testing cost too high

Avord launches platform to reduce the multibillion-pound annual cyber security testing cost that most UK firms say is too high Continue Reading

Enterprises are increasing the human workforce while deploying AI

Artificial intelligence is creating more jobs than it replaces, according to a study of businesses using the technology Continue Reading

CW Middle East: Bahrain aims to be fintech hub

Bahrain’s government wants to make the country the go-to place in the Middle East for financial technology companies. It hopes to capitalise on its banking know-how to establish an ambitious fintech “ecosystem”. Also read about Dubai’s plans for the Smart Data platform and the UAE Pass, a digital ID and signature, and how Shell is using AI to amplify the human impact of its workforce. Continue Reading

2FA bypass tool highlights top business security vulnerabilities

CEOs are the most likely target of two-factor authentication phishing bypasses, demonstrated by a security researcher’s proof-of-concept attack Continue Reading

FireEye gears up email security for emerging threats

Email continues to be a top means of initiating cyber attacks with new detection bypass techniques and executive impersonation capabilities continually emerging, research shows Continue Reading

Security Think Tank: The security role of SDN, containers, encryption and SDP

How can organisations combine software-defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

Second Lorca cohort to focus on supply chain security

The second cohort of companies to benefit from the new London cyber innovation centre will focus on user-centric security and securing supply chains Continue Reading

Protego Labs launches serverless app security tool

Security professionals and developers now have a way to assess the security of their serverless applications with a new open source testing tool donated to Owasp Continue Reading

Security Think Tank: Meeting the security challenge of multiple IT environments

How can organisations combine software defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

Boards need to be active partners in cyber defence

Board members must be active governance partners in collaborative cyber defence, says US regional information sharing and analysis organisation Continue Reading

BlackBerry licenses security tech to IoT device makers

BlackBerry is to license its secure software development technology to the makers of internet-connected devices to boost IoT security Continue Reading

Security Think Tank: Use SDN, containerisation and encryption tools to boost security

How can organisations combine software defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

Modern IT underlines need for zero-trust security

The increasing complexity of supply chains and interconnectivity of IT systems means the attack surface is widening and security has to evolve accordingly, warns British computer scientist Continue Reading

Data breaches affected more than a billion people in 2018

The personal information of more than a billion people was compromised in 2018 as companies holding the data failed to keep it safe Continue Reading

Phishing attacks hidden by custom fonts

Security researchers have uncovered a new way in which phishing attacks are evading detection. Continue Reading

Fortinet to lead cyber security discussion at WEF annual summit

The head of cyber security firm Fortinet has been named as a discussion leader at the upcoming World Economic Forum annual meeting in Davos, Switzerland Continue Reading

Kaspersky Lab champions gender equality and digital child safety

Kaspersky Lab report highlights gender equality in the technology industry and child education about digital security Continue Reading

Nordic digital transformation driven by traditional businesses

More traditional Nordic businesses are fuelling the region's digital transformation, finds report Continue Reading

SMEs urged to get on board with Network Services 2 framework

Suppliers have until the end of January 2019 to sign up to the new government network services purchasing framework Continue Reading

Can we live without passwords?

Can you imagine a future in which we can be secure online without having to remember an unwieldly list of passwords? Solutions are emerging that could make passwords redundant, but there will be other security problems to resolve Continue Reading

Security Think Tank: Focus on malicious use of AI in 2019

At the close of 2018, we asked CW Security Think Tank contributors to name one thing predicted for 2018 that did not happen, one thing that was not predicted but did happen, and one thing that should happen in 2019 but probably will not Continue Reading

Top 10 HR technology stories of 2018

Companies are turning to artificial intelligence, robotic automation and chatbots to take the drudgery out of human resource management Continue Reading

Security Think Tank: Strong 2FA should be a goal in 2019

At the close of 2018, we asked CW Security Think Tank contributors to name one thing predicted for 2018 that did not happen, one thing that was not predicted but did happen, and one thing that should happen in 2019 but probably will not Continue Reading

Top 10 Middle East stories of 2018

Here are Computer Weekly’s top 10 Middle East enterprise IT stories of 2018 Continue Reading

Top 10 IT security stories of 2018

Here are Computer Weekly’s top 10 IT security stories of 2018 Continue Reading

Security Think Tank: Let’s hope for treaty on online norms

At the close of 2018, we asked CW Security Think Tank contributors to name one thing predicted for 2018 that did not happen, one thing that was not predicted but did happen, and one thing that should happen in 2019 but probably will not Continue Reading

Security Think Tank: Put collaboration on 2019 security agenda

At the close of 2018, we asked CW Security Think Tank contributors to name one thing predicted for 2018 that did not happen, one thing that was not predicted but did happen, and one thing that should happen in 2019 but probably will not Continue Reading

Top 10 cyber crime stories of 2018

Here are Computer Weekly’s top 10 cyber crime stories of 2018 Continue Reading

Security Think Tank: Align security strategy to business objectives

At the close of 2018, we asked CW Security Think Tank contributors to name one thing predicted for 2018 that did not happen, one thing that was not predicted and did happen and one thing that should happen in 2019, but probably will not Continue Reading

Top 10 broadband stories of 2018

The networking industry swung firmly behind full-fibre broadband in 2018, with encouraging signs that the gold-standard of broadband service delivery technology is at long last taking off in the UK Continue Reading

Broadband coverage improved through 2018, says Ofcom

Ofcom’s annual Connected Nations report reveals that the number of people who cannot receive a 10Mbps broadband connection has halved Continue Reading

Ofcom fires starting gun for new mobile spectrum auction

Mobile spectrum in the 700MHz and 3.6-3.8GHz bands will be put up for auction either late in 2019 or early in 2020 Continue Reading

Security Think Tank: Let’s get back to basics in 2019

At the close of 2018, we asked CW Security Think Tank contributors to name one thing predicted for 2018 that did not happen, one thing that was not predicted but did happen, and one thing that should happen in 2019 but probably will not Continue Reading

Security Think Tank: Prioritise multifactor authentication in 2019

At the close of 2018, we asked CW Security Think Tank contributors to name one thing predicted for 2018 that did not happen, one thing that was not predicted but did happen, and one thing that should happen in 2019 but probably will not Continue Reading

Iranian cyber espionage highlights human element

State-backed hackers in Iran have reportedly upped efforts to compromise US officials’ email accounts using phishing scams Continue Reading

Australia passes controversial encryption law

Arguments continue over law that requires companies to work with government agencies to ensure that encrypted communications can be read if a crime is suspected Continue Reading

Security Think Tank: Smart botnets resist attempts to cut comms

As attackers begin to use multiple command and control systems to communicate with backdoors and other malware, how can organisations ensure that they detect such methods and that all C&C systems are removed, including "sleepers" designed to be activated at a future date Continue Reading

Security Think Tank: Strategies for blocking malware comms

As attackers begin to use multiple command and control systems to communicate with backdoors and other malware, how can organisations ensure that they detect such methods and that all C&C systems are removed, including “sleepers” designed to be activated at a future date? Continue Reading

Machine identity protection development gets funding boost

Cyber security firm Venafi has launched a development fund aimed at accelerating the delivery of protection for machine identities Continue Reading

Social engineering at the heart of critical infrastructure attack

Social engineering is the core technique used in a series of cyber attacks targeting government, defence, nuclear, energy and financial organisations around the world, which means people are key to defence Continue Reading

CW Europe: Russia banks on electronic payments

A recent study by Sberbank, Russia’s largest state-run lender, shows the country has experienced a cashless payment boom over the past decade. Also read about the attempt by four Russians to break into the networks of the Organisation for the Prohibition of Chemical Weapons in The Hague, and why the Estonian government is directly targeting IT professionals in the UK. Continue Reading

UK trade sector risks GDPR fines over poor data disposal

UK businesses in the trade sector are risking GDPR fines for failing to wipe data from old IT equipment, a survey shows Continue Reading

Most UK retailers plan to up cyber security

The majority of UK retailers are planning to increase cyber security measures during the Christmas season, a survey reveals Continue Reading

Security Think Tank: Prevention and detection key to disrupting malware comms

As attackers begin to use multiple command and control systems to communicate with backdoors and other malware, how can organisations ensure that they detect such methods and that all C&C systems are removed, including “sleepers” designed to be activated at a future date? Continue Reading

Criminals act like nation-state attackers in Russian campaign

Security researchers have uncovered evidence of a sustained effort targeting Russian state-owned critical infrastructure companies by financially motivated non-state actors Continue Reading

Security Think Tank: Severing C&C comms is key, but complex

As attackers begin to use multiple command and control systems to communicate with backdoors and other malware, how can organisations ensure that they detect such methods and that all C&C systems are removed, including “sleepers” designed to be activated at a future date? Continue Reading

Mac malware makes debut in top 10 list

Mac malware appears in the WatchGuard top 10 malware list for first time, and 6.8% of major websites still use an insecure SSL protocol, according to the firm’s latest internet security report Continue Reading

O2 expected to pursue Ericsson for compensation over 24-hour stoppage

Mobile network operator could seek up to £100m in damages from its supplier, which failed to update expired software certificates, causing a day-long outage Continue Reading

Security Think Tank: Firms neglect DNS security at their peril

As attackers begin to use multiple command and control systems to communicate with backdoors and other malware, how can organisations ensure that they detect such methods and that all C&C systems are removed, including “sleepers” designed to be activated at a future date? Continue Reading