IT for government and public sector

Home Office selects CGI as strategic delivery partner

IT services supplier will act as strategic delivery partner for the Home Office’s plans to modernise and join up UK law enforcement’s digital capabilities Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Cyber criminals pivot away from macros as Microsoft changes bite

As Microsoft resumes blocking macros by default in its Office application suite, reversing a temporary reversal, analysis from Proofpoint suggests the action has had a remarkable effect Continue Reading

By

• Alex Scroxton, Security Editor

Teams in Grenoble work on 6G breakthrough technology

Even as 5G networks are being rolled out, new requirements are driving scientists, and engineers in Europe are back to the lab to start developing 6G Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

The verdict is Pure as Scottish prosecutor upgrades high-end storage

Scotland’s prosecution service saw disk drives in the dock every week with EMC legacy storage. Now it’s got Pure all-flash and has turned over an (Evergreen) new leaf Continue Reading

By

• Antony Adshead, Storage Editor

Government slammed for slow response to IR35-related consultation on zero-rights employees

The government has taken four years to publish its response to a three-month consultation on whether employment status and tax laws should be more closely aligned, and concluded that now is not the right time to make any changes Continue Reading

By

• Caroline Donnelly, Datacentre Editor

Consumers left out of pocket as security costs soar

As the average cost of a security incident reaches an all-time high of nearly $4.5m, an IBM Security study reveals how these costs are being passed on to ordinary people Continue Reading

By

• Alex Scroxton, Security Editor

Cyber security training ‘boring’ and largely ignored

Two-thirds of employees don’t bother to pay attention to cyber security training – and the fault does not lie with them Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Don’t rely on insurance alone

Cyber insurance is a useful addition to the cyber protection toolbox. However, it cannot be regarded as a replacement for the controls that should be in operation, says Turnkey Consulting’s Tom Venables Continue Reading

By

• Tom Venables, Turnkey Consulting

Secret court asked to quash a decade of MI5 surveillance warrants following ‘systemic breaches’

The culture at MI5 was to ‘prioritise’ missions ‘over everything else’, including compliance with safeguards designed to protect the public, the UK’s most secret court heard yesterday Continue Reading

By

• Bill Goodwin and Tommy Greene

No More Ransom initiative helps 1.5 million people in six years

One and a half million people have now taken advantage of free ransomware decryption tools offered by a joint European project Continue Reading

By

• Alex Scroxton, Security Editor

Post Office attacked subpostmasters who questioned Horizon, say victims

When the Post Office’s lie about the Horizon system failed to silence subpostmaster critics, it took more extreme measures, say victims of the scandal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ducktail infostealer targets Facebook Business users

Newly uncovered Ducktail operation targets individuals with access to Facebook Business service and tries to steal their accounts Continue Reading

By

• Alex Scroxton, Security Editor

Lambeth maps future with cloud applications

With its funding dramatically cut, Lambeth Council has turned to cloud delivery of its business applications to have a simpler technology stack and be nimbler in delivering services to its 330,000 population Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Six more subpostmaster convictions overturned in Horizon scandal

More former subpostmasters have their wrongful convictions for theft and fraud overturned in the Court of Appeal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Home Office ‘unlawfully’ approved MI5 bulk surveillance warrants

MI5 provided ‘false information’ to the Home Office to secure bulk surveillance warrants, the Investigatory Powers Tribunal heard Continue Reading

By

• Bill Goodwin and Tommy Greene

Umbrella IT contractors could get back-dated holiday pay windfall following Supreme Court ruling

Umbrella industry stakeholders weigh-up the financial implications of a Supreme Court ruling, which could pave the way for IT contractors to submit back-dated claims for holiday pay Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Latest Atlassian Confluence vulnerability raises concerns

CVE-2022-26138 is the second major vulnerability disclosure made for Atlassian’s Confluence collaboration platform in recent months Continue Reading

By

• Alex Scroxton, Security Editor

Russia could become the world’s largest market for illegal IT

Russia could become the biggest market for illegal IT equipment as companies try to get round sanctions imposed on the country Continue Reading

By

• Computer Weekly correspondent

GCHQ experts back scanning of encrypted phone messages to fight child abuse

Ian Levy, technical director of the NCSC, and Crispin Robinson, technical director of GCHQ, back client-side scanning software on mobile phones to detect child abuse Continue Reading

By

• Bill Goodwin, Computer Weekly

Buy ‘plug-n-play’ malware for the price of a pint of beer

Three-quarters of malwares and almost 90% of exploits retail on the dark web for about £8.40 or less, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

UK government introduces data reforms legislation to Parliament

Proposed changes to UK’s data protection regime include new grounds for data processing, significant powers for the secretary of state to direct the regime’s application, and fewer restrictions on law enforcement’s use of data Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Victorian multilingual chatbot to provide Covid-19 support

The AskVic WhatsApp chatbot will provide culturally and linguistically diverse communities in Australia’s state of Victoria, with Covid-19 information and support Continue Reading

By

• Aaron Tan, TechTarget

(ISC)² expands entry-level cyber programme after UK success

Flush with success from a UK certification programme, reaching 100k in the UK, (ISC)² now wants to provide free security certification to a million people worldwide Continue Reading

By

• Alex Scroxton, Security Editor

Cato aims to bust cyber myths as it extends network protections

Cato Networks is beefing up its platform’s security features with ransomware and data loss protections, and the firm’s security strategy lead Etay Maor is using the occasion – and his unique access to billions of data points from the firm’s network – to explode some cyber myths Continue Reading

By

• Alex Scroxton, Security Editor

Estonia calls on tech experts to develop its Siri-like civil servant

Estonian government opens up applications to tech experts across the world, offering them the chance to work on a world first for digital government services Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Barnet Council to bring work outsourced to Capita back in-house by 2026

London borough is bringing swathes of outsourced services back in-house next year, with more to follow by 2026 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Advanced Research and Invention Agency gets CEO and chairman

The government has named a CEO for the agency it set up to get more out of science and technology, after its original appointment couldn’t take the role Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Russia’s Cozy Bear abusing Dropbox, Google Drive to target victims

Russian APT known as Cozy Bear has become adept at quickly incorporating popular cloud storage services into its attack chain to avoid detection Continue Reading

By

• Alex Scroxton, Security Editor

European IT services see bumper quarter, but signs of slowing emerge

Spending on IT and BPO services in Europe saw significant growth in the past quarter, but there are signs of a slowdown Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

US cyber agency CISA to open London office

The US Cybersecurity and Infrastructure Security Agency has chosen London to host its first office outside America Continue Reading

By

• Alex Scroxton, Security Editor

Drivers’ union calls for immediate dismissal of Uber executive

Uber’s continued employment of an executive directly involved in efforts to resist regulatory oversight puts the ride-hailing firm in breach of its 2018 licence conditions, says drivers’ union Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Log4Shell on its way to becoming ‘endemic’

US government report concludes that, like Covid, Log4Shell will be with us for a long time to come Continue Reading

By

• Alex Scroxton, Security Editor

Global IT services market shows signs of slowing

Spending on IT and business process services could be set to reduce over the coming months as the latest ISG figures show early signs of decline Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government pauses Online Safety Bill’s progress

The government has paused the Online Safety Bill’s journey towards becoming law, amid timetable pressure Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

ICO wants to ‘empower people through information’

Information Commissioner’s Office sets out commitment to safeguard the information rights of the most vulnerable people in UK society Continue Reading

By

• Alex Scroxton, Security Editor

EC urged to rejig green power strategy to include greater use of energy storage tech

Ten stakeholders from the world of energy storage systems have penned an open letter to the European Commission’s policymakers, urging them to factor in their technology to the EC’s green transition plans Continue Reading

By

• Caroline Donnelly, Datacentre Editor

Slippery phish wriggles around MFA protections, says Microsoft

Microsoft’s threat researchers share details of a phishing campaign that hit 10,000 organisations, against which standard multifactor authentication provides little defence Continue Reading

By

• Alex Scroxton, Security Editor

July Patch Tuesday brings more than 80 fixes, one zero-day

While some admins can put their feet up and let Windows Autopatch do the hard work of updating their Microsoft estates, for the rest of us, the Patch Tuesday bandwagon keeps on keeping on Continue Reading

By

• Alex Scroxton, Security Editor

ICO calls for review into government use of private email and WhatsApp messages

Information Commissioner’s Office reprimands Department of Health and Social Care after ministers and officials conducted government business on their own email accounts and messaging apps Continue Reading

By

• Bill Goodwin, Computer Weekly

First cohort of data science professionals certified by AfDSP

The Alliance for Data Science Professionals has certified its first cohort, with the imprimatur of the UK’s national statistician, Ian Diamond Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

MaliBot Android malware spreading fast, says Check Point

The MaliBot malware is becoming a persistent and widespread problem, and Android users should be on their guard, says Check Point Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft Windows Autopatch now generally available

Microsoft customers with Windows Enterprise E3 and E5 licences can now take full advantage of its new automated patching service Continue Reading

By

• Alex Scroxton, Security Editor

Whitehall IT veteran Mike Potter returns as new government CDO

Potter will become the most senior digital government leader, in charge of the Central, Digital and Data Office, when he replaces Joanna Davinson in the autumn Continue Reading

By

• Bryan Glick, Editor in chief

Microsoft VBA macro block will return

Microsoft provides more details about its sudden decision to rollback a landmark security policy, and reassures users it is a temporary measure Continue Reading

By

• Alex Scroxton, Security Editor

Cyber insurance: An effective use of your scant security budget?

The ISF’s Paul Watts asks if cyber insurance is a must-have item, an expensive luxury, or the emperor’s new clothes Continue Reading

By

• Paul Watts, Information Security Forum

Ofcom publishes Online Safety Roadmap

The roadmap sets out how the online harms regulator will approach implementing the UK’s online safety regime, and tells tech firms to start preparing for the new rules Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Stop telling clients to pay ransomware gangs, solicitors told

The NCSC and the ICO are calling on solicitors to help tackle the rising number of ransomware payments being made, and to stop giving erroneous advice to victims Continue Reading

By

• Alex Scroxton, Security Editor

Accountability in algorithmic injustice

Computer Weekly looks at the growing number of injustices involving algorithms and automated decision-making, and what can be done to hold governments and companies accountable for the failures of computer systems they deploy Continue Reading

By

• Andrew Kersley

Microsoft appears to reverse VBA macro-blocking

Microsoft quietly reverses VBA macro-blocking across its Office portfolio in a move that has left security experts puzzled Continue Reading

By

• Alex Scroxton, Security Editor

Lots to consider when buying cyber insurance, so do your homework

When considering implementing a cyber insurance policy, due diligence should be your watchword, says Paddy Francis of Airbus CyberSecurity Continue Reading

By

• Paddy Francis

UK government does not yet understand threat of technology to foreign policy

Select committee chair warns government that the threat posed to global security by malign actors influencing tech standards is no ‘dystopian fantasy’ Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

MI5, FBI chiefs warn of Chinese cyber espionage threat

In a joint appearance in London, MI5 director general Ken McCallum and FBI director Chris Wray warn of the growing threat posed by the Chinese government to UK and US interests Continue Reading

By

• Alex Scroxton, Security Editor

UK signs ‘in principle’ data adequacy agreement with South Korea

Bilateral adequacy agreement will allow businesses to conduct cross-border data transfers with minimal restrictions Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Security Think Tank: Cyber insurance – A nice safety blanket, but don’t count on it

In the second instalment of this month’s Security Think Tank, Mike Gillespie argues that cyber insurance should be thought of like car insurance – you don’t start driving recklessly because you’re covered Continue Reading

By

• Mike Gillespie

Tech companies face pressure over end-to-end encryption in Online Safety Bill

An amendment to the Online Safety Bill, currently going through Parliament, will put pressure on tech companies over end-to-end encrypted messaging services Continue Reading

By

• Bill Goodwin, Computer Weekly

ESET: Lazarus APT hit aero, defence sector with fake job ads

ESET researchers present new findings into a series of cyber attacks on the aerospace and defence sectors by North Korea’s Lazarus crime syndicate Continue Reading

By

• Alex Scroxton, Security Editor

Legacy UK customs system stops accepting registration requests

HMRC closes new applications to legacy customs system as its shutdown nears Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Prepare for long-term cyber threat from Ukraine war, says NCSC

The NCSC has published refreshed guidance on cyber preparedness as the war on Ukraine continues, urging organisations to pay attention to the state of their security teams Continue Reading

By

• Alex Scroxton, Security Editor

NCSC CEO: Why we should run towards crises to elevate cyber security

National Cyber Security Centre CEO Lindy Cameron, the 2022 Computer Weekly UKtech50 Most Influential Person in UK IT, reflects on a career immersed in crisis management, and how she is using this to elevate cyber security standards across the country Continue Reading

By

• Alex Scroxton, Security Editor

How to get the right level of cyber insurance

In this week’s Computer Weekly, we look at how the market for cyber insurance is evolving and how to avoid buying the wrong level of cover. We find out what role hydrogen technologies could play in reducing datacentre carbon emissions. And we hear how a 125-year-old bicycle maker is embracing digital innovation. Read the issue now. Continue Reading

MPs call for ban on Chinese surveillance camera technology

Nearly 70 MPs have called on the government to ban Chinese camera technology that is widely used by UK government agencies despite links to human rights abuses in China Continue Reading

By

• Bill Goodwin, Computer Weekly

Government rejects Lords police tech inquiry recommendations

The government has largely rejected the findings and recommendations of a House of Lords inquiry into police tech, which called for an overhaul of how police deploy artificial intelligence and algorithmic technologies Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Assange appeals against Priti Patel’s extradition order

WikiLeaks founder is expected to raise concerns over the political nature of his prosecution, the likelihood of him receiving a fair trial, and the risk of a coercive plea bargain Continue Reading

By

• Bill Goodwin, Computer Weekly

Security Think Tank: Now is the time to think about cyber insurance

Many IT leaders shy away from cyber insurance, but new, innovative developments in the market can help organisations take an approach that suits their needs Continue Reading

By

• Carl Nightingale

ICO to cut back on fines for public sector data breaches

Information commissioner John Edwards sets out a revised approach to how the ICO handles data breaches in the public sector, saying fining victims risks punishing the public twice over Continue Reading

By

• Alex Scroxton, Security Editor

Subpostmaster campaigning forces government to set up compensation scheme and make interim payments

Subpostmaster campaign group is a step closer to achieving what it was originally set up to do as government launches compensation scheme for its members who did not receive fair payouts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Independent scrutiny brought into compensation negotiations for wrongly prosecuted subpostmasters

Former Supreme Court judge will offer his view on the valuation of compensation for wrongly convicted subpostmasters Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government sets NHS digital transformation plan

The government expects to save billions of pounds and improve patient outcomes through digital transformation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Urgent need for new laws to govern biometrics, legal review finds

Independent review says new framework is needed to clear up legal and ethical concerns over the use of biometric data and technologies, which can impact privacy, freedom of expression and other human rights Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

New cyber extortion op appears to have hit AMD

Semiconductor specialist AMD has confirmed it is investigating reports that a ‘bad actor’ has stolen hundreds of gigabytes of its data Continue Reading

By

• Alex Scroxton, Security Editor

CEA-Leti and the Silicon Valleys of Grenoble, France

At the intersection of three valleys in the French Alps lies the city of Grenoble, a hotbed of microelectronics, where much of the innovation is fuelled by CEA-Leti Continue Reading

By

• Pat Brans, Pat Brans Associates/Grenoble Ecole de Management

Digital Poverty Alliance unveils evidence review

Evidence review into the state of digital poverty in the UK sets out policy principles and recommendations, which will be used as the basis for a national action plan to eliminate the issue Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Russia-aligned hacktivists behind Lithuania DDoS attack

Killnet hacktivist collective targeted Lithuania with distributed denial of service attacks after its government angered the Kremlin Continue Reading

By

• Alex Scroxton, Security Editor

Brexit a net negative for UK cyber, say CISOs

Six years on from the UK’s Brexit vote, the majority of security professionals say leaving the EU has raised concerns over their ability to keep their organisations safe Continue Reading

By

• Alex Scroxton, Security Editor

LockBit ransomware gang launches bug bounty programme

A bug bounty programme is among a number of features LockBit’s developers have added to ‘version 3.0’ of the ransomware Continue Reading

By

• Alex Scroxton, Security Editor

The cyber security impact of Operation Russia by Anonymous

The campaign against the Russian government by Anonymous surprised many with the depth and scale of the cyber attacks. What can we learn from this online war? Continue Reading

By

• Peter Ray Allison

Black Basta ransomware crew aiming for ‘big leagues’

Emergent Black Basta ransomware gang has hit more than 50 countries since bursting onto the scene earlier this year, says Cybereason Continue Reading

By

• Alex Scroxton, Security Editor

US cyber agency in fresh warning over Log4Shell risk to VMware

Many VMware Horizon and UAG servers remain defenceless against Log4Shell, and organisations continue to fall victim to the vulnerability Continue Reading

By

• Alex Scroxton, Security Editor

Assessment and knowledge: Your key tools to secure suppliers

There is no silver bullet that will resolve all the issues arising from today’s interconnected businesses and complex supply chains, but there are some key tools at your disposal Continue Reading

By

• Andrew Morris, Turnkey Consulting

Finding the balance between innovation and data security in healthcare

As the government launches its data strategy for health and social care, a fine line must be trodden between innovating through privacy-enhancing technologies, and retaining data security for patients Continue Reading

By

• Kevin Curran, IEEE

What will the Data Reform Bill mean for UK businesses operating in the EU?

Following the government’s response to the Data Reform Bill consultation, Peter Galdies of DQM GRC looks at what might lie ahead for UK organisations working in the European Union Continue Reading

By

• Peter Galdies

Ukraine cyber agency enlists Radware to protect government networks

Ukraine’s State Service of Special Communications and Information Protection is using Radware cloud DDoS protection and web application firewall services to protect the government from persistent Russian attacks Continue Reading

By

• Alex Scroxton, Security Editor

Non-European tech giants could be subject to EU-backed anti-greenwashing directive

EU-backed push to tighten up the sustainability reporting processes for companies that do business in Europe gathers pace Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Germany – let’s stop debating data retention and start finding solutions

Germany has the opportunity to set the democratic precedent for ending the collection and retention of everybody’s call details record and metadata in the EU. It is time find real and effective solutions to crime Continue Reading

By

• Patrick Breyer

Security Think Tank: Supply chain security demands systematic approach

Supply chain security measures need to be systematic and assessed so as to minimise the complexity and cost to the business Continue Reading

By

• Paddy Francis

Why the world needs tech standards for UN Sustainable Development Goals

Chaesub Lee from the ITU argues that the world needs technology standards to address the UN’s Sustainable Development Goals Continue Reading

By

• Chaesub Lee, ITU Telecommunication Standardisation Bureau

Security Think Tank: Balanced approach can detangle supply chain complexity

Achieving an appropriate balance between people, processes and technology can help to detangle the complexities of the supply chain and create better security practices Continue Reading

By

• Francesca Williamson, Information Security Forum

Government won’t regulate on professional cyber standards

The government has elected not to proceed with regulatory intervention to embed standards and pathways across the cyber profession Continue Reading

By

• Alex Scroxton, Security Editor

Post Office IT investigator to be released from confidentiality obligations for inquiry

Forensic accounting firm that ‘knows where the bodies are buried’ will be released from confidentiality obligations by the Post Office to give evidence to public inquiry Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CNI leaders’ attitude to ransomware lackadaisical at best

A survey of security decision-makers in sectors regarded as critical national infrastructure reveals a disappointing attitude to ransomware threats Continue Reading

By

• Alex Scroxton, Security Editor

CIO interview: Mark Bramwell, CIO, Saïd Business School

After seven years in the job, there are still fresh challenges for the IT leader, including a second digital strategy to deliver Continue Reading

By

• Mark Samuels

New coalition lifts Finland’s 6G status

Finland is laying the foundations for future European leadership in 6G research and development Continue Reading

By

• Gerard O'Dwyer

Supply chain security goes deep – forget this at your peril

It may have hit the headlines as an IT issue, but supply chain security goes far deeper into an organisation than just technology Continue Reading

By

• Mike Gillespie

Dreams come true – how data and communication saved a failing company

In this week’s Computer Weekly, the former CEO of bed retailer Dreams explains how digital, data and communication helped turn round a failing company. The UK government has a new digital strategy – but it all seems rather familiar. And we talk to the tech firms trialling a four-day working week. Read the issue now. Continue Reading

Minister says compensation offer to 555 subpostmasters close

Government minister says an announcement on subpostmaster compensation could be made within weeks Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

British businesses to recognise Google skills certificates

Google training programmes are being made available to more people in the UK as part of an initiative from the supplier and major UK businesses Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government responds to Data Reform Bill consultation

Westminster claims its new data laws will boost British benefits, protect consumers, and seize the ‘benefits’ of Brexit Continue Reading

By

• Alex Scroxton, Security Editor

Consider governance, coordination and risk to secure supply chain

A recent ISACA study found myriad factors that give good reason to be concerned about supply chain security. Cyber adviser Brian Fletcher recommends three areas to zero in on Continue Reading

By

• Brian Fletcher

MoD sets out strategy to develop military AI with private sector

The UK Ministry of Defence has outlined its intention to work closely with the private sector to develop and deploy a range of artificial intelligence-powered technologies, committing to ‘lawful and ethical AI use’ Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Loan charge MPs want contractor adviser community to participate in latest call for evidence

Loan Charge and Taxpayer Fairness All-Party Parliamentary Group seeks input from accountants, lawyers and tax advisers who work with contractors in-scope of the loan charge policy Continue Reading

By

• Caroline Donnelly, Senior Editor, UK