Data breach incident management and recovery

NHS staff lack confidence in health service cyber measures

NHS staff understand their role in protecting the health service from cyber threats and the public backs them in this aim, but legacy tech and a lack of training are hindering efforts, according to BT Continue Reading

By

• Alex Scroxton, Security Editor

CISOs spending more on insider risk

Insider risk management budgets have more than doubled in the past 12 months and look set to grow further still in 2025, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Singapore rolls out guidelines to bolster cloud and datacentre resilience

New advisory guidelines to enhance resilience and security of cloud services and datacentres in Singapore amid potential service disruptions and growing cyber threats Continue Reading

By

• Aaron Tan, TechTarget

Ransomware: on the murky trail of one of the leaders of Black Basta

The internal exchanges within the Black Basta group revealed last week offer a new opportunity to investigate one of its leaders: Tramp. He may have been arrested in Armenia in June 2024, before being released Continue Reading

By

• Valéry Rieß-Marchive, Rédacteur en chef

European Union calls for more cyber data-sharing with Nato

Updates to the EU’s Cyber Blueprint, establishing best practice for multilateral security incident response in Europe, include calls for more collaboration with Nato member states, as the geopolitical environment becomes ever more fractious Continue Reading

By

• Alex Scroxton, Security Editor

The need for secure data sharing: Lessons learned from public health

Privacy-enhancing technologies can help healthcare organisations build resilience against cyber threats while maintaining patient privacy, security and regulatory compliance. Continue Reading

By

• Ronen Cohen, Duality Technologies

Check Point co-founder on AI, quantum and independence

Gil Shwed, Check Point’s co-founder and executive chairman, discusses the company’s focus on artificial intelligence-driven security and his commitment to remaining an independent force in the cyber security market Continue Reading

By

• Aaron Tan, TechTarget

A landscape forever altered? The LockBit takedown one year on

The NCA-led takedown of the LockBit ransomware gang in February 2024 heralded a transformative year in the fight against cyber crime. One year on, we look back at Operation Cronos and its impact Continue Reading

By

• Alex Scroxton, Security Editor

Watchdog approves Sellafield physical security, but warns about cyber

The Office for Nuclear Regulation has taken Sellafield out of special measures for physical security, but harbours cyber security concerns Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

MSP cuts costs with Scality pay-as-you-go anti-ransomware storage

Autodata gets Scality as-a-service for on-site immutable storage via Artesca, to allow customers to rapidly recover from ransomware and at the same cost per terabyte no matter the volume Continue Reading

By

• Antony Adshead, Storage Editor

CPX 2025: Check Point CEO talks up hybrid mesh security

At CPX 2025 in Bangkok, Check Point CEO Nadav Zafrir outlined a vision for network security centred on hybrid mesh architecture and AI-powered capabilities Continue Reading

By

• Aaron Tan, TechTarget

How to get employees to take cyber risk more seriously

To combat risky cyber security behaviour, organisations must move beyond awareness training and cultivate a culture where security violations are personally felt and socially unacceptable, leveraging existing values, real-world impacts, and even humour Continue Reading

By

• Leigh McMullen

Lenovo CSO: AI adoption fuels security paranoia

Doug Fisher, Lenovo’s chief security officer, outlines the company’s approach to security and AI governance, and the importance of having a strong security culture to combat cyber threats amplified by the use of AI Continue Reading

By

• Aaron Tan, TechTarget

UK government sanctions target Russian cyber crime network Zservers

The UK government has imposed sanctions on a Russian cyber crime syndicate responsible for aiding ransomware attacks, targeting the group and individual members Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Google: Cyber crime meshes with cyber warfare as states enlist gangs

A report from the Google Threat Intelligence Group depicts China, Russia, Iran and North Korea as a bloc using cyber criminal gangs to attack the national security of western countries Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

US lawmakers move to ban DeepSeek AI tool

US politicians have introduced a bill seeking to ban the use of the DeepSeek AI tool on government-owned devices, citing national security concerns due to its alleged links to the Chinese state Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware payment value fell over 30% in 2024

Several factors, including the impact of law enforcement operations disrupting cyber criminal gangs and better preparedness among users, may be behind a significant drop in the total value of ransomware payments Continue Reading

By

• Alex Scroxton, Security Editor

UK’s Cyber Monitoring Centre begins incident classification work

The Cyber Monitoring Centre will work to categorise major incidents against a newly developed scale to help organisations better understand the nature of systemic cyber attacks and learn from their impact Continue Reading

By

• Alex Scroxton, Security Editor

DeepSeek API, chat log exposure a ‘rookie’ cyber error

Security researchers at Wiz find a trove of DeepSeek data including API secrets and chat logs publicly exposed via an open source database management tool, raising questions about the fast-growing service’s approach to security Continue Reading

By

• Alex Scroxton, Security Editor

Vallance rejects latest charge to reform UK hacking laws

Science minister Patrick Vallance rejects proposed amendments to the Computer Misuse Act, arguing that they could create a loophole for cyber criminals to exploit Continue Reading

By

• Alex Scroxton, Security Editor

Turbulent times ahead for tech

In this week’s Computer Weekly, the World Economic Forum in Davos highlighted growing risks to digital supply chains – we examine the turbulence ahead. Data sovereignty is becoming a growing issue as companies move to the cloud – we look at the regulatory challenges. And we analyse the best practices in automated patch management. Read the issue now. Continue Reading

Cyber incident that closed British Museum was inside job

An IT incident that disrupted visitor access to the British Museum last week was the work of a disgruntled contractor who had been let go Continue Reading

By

• Alex Scroxton, Security Editor

US indicts five in fake North Korean IT contractor scandal

The US authorities have accused five men, including two American citizens, of involvement in a scheme which saw companies duped into hiring fake North Korean IT contractors Continue Reading

By

• Alex Scroxton, Security Editor

Privacy professionals expect budget cuts, lack confidence

Over 50% of privacy professionals in Europe expect to see less money earmarked for data security initiatives in 2025, and many don’t have faith their organisations are taking the issue seriously, according to an ISACA report Continue Reading

By

• Alex Scroxton, Security Editor

Funksec gang turned up ransomware heat in December

The criminal ransomware fraternity was hard at work over the festive period, with attack volumes rising and a new threat actor emerging on the scene Continue Reading

By

• Alex Scroxton, Security Editor

Will the UK become an AI powerhouse?

In this week’s Computer Weekly, we analyse the UK government’s new AI strategy and ask if the ambitious plans are achievable. The latest EU regulation affecting cyber security, called DORA, will affect digital resilience plans for many businesses – we examine the implications. We also look at the benefits and technologies behind cloud data lakes. Read the issue now. Continue Reading

Biden signs new cyber order days before Trump inauguration

With days left in the White House, outgoing US president Joe Biden has signed a wide-ranging cyber security executive order with far-reaching implications Continue Reading

By

• Alex Scroxton, Security Editor

Russia’s Star Blizzard pivots to WhatsApp in spear-phishing campaign

The Russian cyber spy operation known as Star Blizzard changed tactics after a takedown operation by Microsoft and the US authorities, turning to widely used messaging platform WhatsApp to try to ensnare its targets Continue Reading

By

• Alex Scroxton, Security Editor

Almost half of UK banks set to miss DORA deadline

A significant minority of financial services organisations in the UK will not be fully compliant with the EU’s DORA cyber and risk management regulation when it comes into force on 17 January Continue Reading

By

• Alex Scroxton, Security Editor

Barings Law enleagues 15,000 claimants against Google and Microsoft

Barings Law has signed up 15,000 claimants in a data breach suit against Microsoft and Google. The firm says the tech giants use personal data without proper consent to train AI models Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

UK government plans to extend ransomware payment ban

A ban on ransomware payments by UK government departments will be extended to cover organisations such as local councils, schools and the NHS should new government proposals move forward Continue Reading

By

• Alex Scroxton, Security Editor

CNI operators should ask these 12 questions of their OT suppliers

The NCSC, CISA and others have set out 12 cyber security considerations CNI organisations and other users of operational technology should incorporate into their buying processes to force their suppliers to do better Continue Reading

By

• Alex Scroxton, Security Editor

Mandiant: Latest Ivanti vulns exploited by Chinese cyber spooks

Threat actors are once again lining up to exploit vulnerabilities in the widely used Ivanti product suite, with an apparent link to Chinese espionage activity Continue Reading

By

• Alex Scroxton, Security Editor

Regional skills plan to boost UK cyber defences

Over 30 projects in England and Northern Ireland will receive a share of a £1.9m fund designed to enhance cyber security skills and protect small businesses Continue Reading

By

• Alex Scroxton, Security Editor

Government develops quantum tech for military

A high-tech atomic clock has been developed by a ‘secret lab’ and aims to decrease the reliance on GPS technology Continue Reading

By

• Lis Evenstad

US Treasury incident a clear warning on supply chain security in 2025

A cyber incident at the US Department of the Treasury – blamed on a Chinese state actor – raises fresh warnings about supply chain risk after it was found to have originated via vulnerabilities in a remote tech support product Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 ANZ stories of 2024

The 2024 tech landscape in Australia and New Zealand was dotted with developments spanning cloud migrations and AI adoption to heightened data security and real-time data streaming Continue Reading

By

• Aaron Tan, TechTarget

LockBit ransomware gang teases February 2025 return

An individual associated with the LockBit ransomware gang has broken cover to tease details of a new phase of the cyber criminal operation's activity, which they claim is set to begin in February 2025 Continue Reading

By

• Alex Scroxton, Security Editor

Innovation, insight and influence: the CISO playbook for 2025 and beyond

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Mandy Andress, Elastic

French court refuses to expedite trial of Sky ECC cryptophone distributor Thomas Herdman

Canadian businessman Thomas Herdman, who was arrested by French police despite agreeing a deal to cooperate with US investigators, has been denied bail after 42 months in pre-trial detention Continue Reading

By

• Bill Goodwin, Computer Weekly

The Security Interviews: Martin Lee, Cisco Talos

Threat intel expert and author Martin Lee, EMEA technical lead for security research at Cisco Talos, joins Computer Weekly to mark the 35th anniversary of the first ever ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 cyber security stories of 2024

Data breaches, data privacy and protection, and the thorny issue of open source security were all hot topics this year. Meanwhile, security companies frequently found themselves hitting the headlines, and not always for good reasons. Here are Computer Weekly's top 10 cyber security stories of 2024 Continue Reading

By

• Alex Scroxton, Security Editor

Look to the future: How the threat landscape may evolve next

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Elliott Wilkes, ACDS

Top 10 cyber crime stories of 2024

From ransomware targeting the NHS to nation-state-backed intrusions, 2024 was another big year for cyber criminals and cyber spooks alike, but they didn't have it all their own way as the good guys fought back Continue Reading

By

• Alex Scroxton, Security Editor

2025-30: Geopolitical influence on cyber and the convergence of threat

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Rob Dartnall, SecAlliance

The Security Interviews: Stephen McDermid, Okta

Okta regional chief security officer for EMEA sits down with Dan Raywood to talk about how Okta is pivoting to a secure-by-design champion Continue Reading

By

• Dan Raywood

Decoding the end of the decade: What CISOs should watch out for

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Paul Lewis, Nominet

CISOs: Don’t rely solely on technical defences in 2025

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Deepti Gopal, Gartner

Emerging Ymir ransomware heralds more coordinated threats in 2025

A newly observed ransomware strain has the community talking about more collaboration, and blurred lines, between threat groups next year, according to NCC’s monthly cyber barometer Continue Reading

By

• Alex Scroxton, Security Editor

In 2025: Identities conquer, and hopefully unite

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Stephen McDermid, Okta

Bahrain faces legal action after planting Pegasus spyware on UK blogger

A court has given the go-ahead to UK-based blogger Yusuf Al-Jamri to seek damages from the Kingdom of Bahrain after it deployed spyware from Israel’s NSO Group to hack his phone Continue Reading

By

• Bill Goodwin, Computer Weekly

Six trends that will define cyber through to 2030

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Pierre-Martin Tardif, ISACA

TfL cyber attack cost over £30m to date

TfL provides more detail on the financial impact of the September 2024 cyber attack that crippled several of its online systems Continue Reading

By

• Alex Scroxton, Security Editor

Government agencies urged to use encrypted messaging after Chinese Salt Typhoon hack

Chinese hacking of US telecom networks raises questions about the exploitation by hostile hacking groups of government backdoors to provide lawful access to telecoms services Continue Reading

By

• Bill Goodwin, Computer Weekly

Shared digital gateway was source of three NHS ransomware attacks

Alder Hey children’s hospital confirms ransomware operators accessed its systems through a shared digital gateway, but is standing firm in the face of the gang’s demands Continue Reading

By

• Alex Scroxton, Security Editor

Nordics move to deepen cyber security cooperation

Nordic countries are increasing collaboration on cyber security amid more sophisticated and aggressive attacks Continue Reading

By

• Gerard O'Dwyer

US updates telco security guidance after mass Chinese hack

Following the widespread Salt Typhoon hacks of US telecoms operators including AT&T and Verizon, CISA and partner agencies have launched refreshed security guidance for network engineers and defenders alike Continue Reading

By

• Alex Scroxton, Security Editor

APAC businesses face cyber onslaught

The Asia-Pacific region is a cyber security hotspot, enduring significantly more cyber attacks than the global average, with AI-powered threats and skills shortages exacerbating the problem Continue Reading

By

• Stephen Withers

NCSC boss calls for ‘sustained vigilance’ in an aggressive world

NCSC CEO Richard Horne is to echo wider warnings about the growing number and severity of cyber threats facing the UK as he launches the security body’s eighth annual report Continue Reading

By

• Alex Scroxton, Security Editor

CISOs will face growing challenges in 2025 and beyond

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Mike Gillespie and Ellie Hurst, Advent IM

Second Merseyside hospital hit by cyber attack

Hot on the heels of a major cyber attack at a nearby NHS trust, one of Europe’s biggest and busiest children’s hospitals is reportedly scrambling to deal with ransomware gang Continue Reading

By

• Joe O’Halloran, Computer Weekly

Energy sector’s digital shift opens door to cyber threats

The transition to renewable energy and the increasing integration of IT and OT systems in the energy sector are creating new cyber security challenges Continue Reading

By

• Stephen Withers

Further disruption expected after latest NHS cyber attack

IT and security teams at Wirral University Teaching Hospitals NHS Trust continue to work around the clock following a major cyber incident, with services disrupted and no timeline for resolution Continue Reading

By

• Alex Scroxton, Security Editor

Sellafield operator opens dedicated cyber centre

The UK’s Nuclear Decommissioning Authority has opened a cyber security centre spanning its activities across the nuclear sector Continue Reading

By

• Alex Scroxton, Security Editor

Blue Yonder ransomware attack breaks systems at UK retailers

UK supermarkets continue to deal with the impact of a ransomware attack on the systems of supply chain software supplier Blue Yonder, which is disrupting multiple aspects of their businesses including deliveries and staff management Continue Reading

By

• Alex Scroxton, Security Editor

Russian threat actors poised to cripple power grid, UK warns

UK government escalates cyber rhetoric in a speech at a Nato event, saying Russian advanced persistent threats stand ready to conduct cyber attacks that could ‘turn off the lights for millions’ Continue Reading

By

• Alex Scroxton, Security Editor

Metropolitan Police officer dismissed for unlawfully accessing Sarah Everard files

Over 100 Met Police officers and staff have been investigated for accessing sensitive data related to the Sarah Everard case, leading to the dismissal of a Roads and Transport officer who accessed the information while off-duty Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Microsoft calls on Trump to ‘push harder’ on cyber threats

Microsoft’s Brad Smith urges president-elect Donald Trump to keep the faith when it comes to fighting back against hostile cyber actors from China, Iran and Russia Continue Reading

By

• Alex Scroxton, Security Editor

Geopolitical strife drives increased ransomware activity

The lines between financially motivated cyber criminals and nation state APTs are rapidly blurring, as geopolitical influences weigh heavily on the threat landscape, according to data from NCC Continue Reading

By

• Alex Scroxton, Security Editor

BianLian cyber gang drops encryption-based ransomware

The Australian and American cyber authorities have published updated intelligence on the BianLian ransomware gang, which has undergone a rapid evolution in tactics Continue Reading

By

• Alex Scroxton, Security Editor

Brit charged in US over Scattered Spider cyber attacks

A UK national named as Tyler Robert Buchanan has been charged in the US over his alleged involvement in cyber attacks perpetrated by the Scattered Spider gang Continue Reading

By

• Alex Scroxton, Security Editor

Apple addresses two iPhone, Mac zero-days

Two zero-day vulnerabilities uncovered in Apple’s operating systems could have allowed for arbitrary code execution and cross-site scripting attacks Continue Reading

By

• Alex Scroxton, Security Editor

Storage technology explained: Ransomware and storage and backup

We look at ransomware attacks, and the importance of good backup practice as well as immutable snapshots, air-gapping, network segmentation, AI anomaly detection and supplier warranties Continue Reading

By

• Antony Adshead, Storage Editor

CW APAC – Trend Watch: Modernising security operations

Organisations everywhere know the risks of cyber security complacency. In this handbook, focused on modernising security operations in the Asia-Pacific region, Computer Weekly looks at how Australia is bolstering its defences, Splunk and Cisco’s integration, and Palo Alto Networks’ ‘precision AI’. Continue Reading

China’s Volt Typhoon rebuilds botnet in wake of takedown

Nine months after its malicious botnet comprising legacy routers was disrupted by the Americans, Chinese APT Volt Typhoon is rebuilding and presents as persistent a threat as ever Continue Reading

By

• Alex Scroxton, Security Editor

Zero-day exploits increasingly sought out by attackers

Threat actors increasingly favour zero-day exploits to attack their victims before patches become available, according to the NCSC and CISA, which have just published a list of the most widely used vulnerabilities of 2023 Continue Reading

By

• Alex Scroxton, Security Editor

More data stolen in 2023 MOVEit attacks comes to light

Over a year since the infamous MOVEit Transfer cyber attacks affected thousands of organisations, more new victims have come to light after an anonymous threat actor leaked their data on the dark web Continue Reading

By

• Alex Scroxton, Security Editor

ESET shines light on cyber criminal RedLine empire

ESET publishes fresh data on the inner workings of the RedLine Stealer malware empire, which was taken down at the end of October Continue Reading

By

• Alex Scroxton, Security Editor

AI a force multiplier for the bad guys, say cyber pros

CIISec’s annual report on the security profession finds evidence of growing concern that artificial intelligence will ultimately prove more useful to threat actors than defenders Continue Reading

By

• Alex Scroxton, Security Editor

Post Office data breach caused by botched website upgrade

Data breach exposed personal details of the hundreds of former subpostmasters who had defeated the Post Office in the High Court Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CISA looks to global collaboration as fraught US election begins

The US' CISA cyber agency has unveiled a two-year International Strategic Plan to advance collaboration and improve resilience against shared risks and threats Continue Reading

By

• Alex Scroxton, Security Editor

UK launches cyber guidance package for tech startups

The NCSC and NPSA, alongside agencies from the Five Eyes alliance, have issued guidance for startups on how to secure themselves against common cyber threats and targeted industrial espionage Continue Reading

By

• Alex Scroxton, Security Editor

Dutch critical infrastructure at risk despite high leadership confidence

Stark paradox in Dutch cyber security landscape has business leaders expressing high confidence in their IT infrastructure as cyber attacks rise Continue Reading

By

• Kim Loohuis

Detect ransomware in storage to act before it spreads

Anomaly detection and immutable copies can be frontline tools against ransomware – we look at the role storage can play against the latest techniques employed by ransomware gangs Continue Reading

By

• Stephen Pritchard

Democracy campaigner to sue Saudi Arabia over Pegasus and QuaDream spyware in UK court

Pro-democracy campaigner Yahya Assiri given permission to file legal action in London court against Saudi Arabia over its use of Israeli spyware Continue Reading

By

• Bill Goodwin, Computer Weekly

Danish government reboots cyber security council amid AI expansion

Denmark’s government relaunches digital security initiative to protect business sectors and society at large Continue Reading

By

• Gerard O'Dwyer

Can AI be secure? Experts discuss emerging threats and AI safety

International cyber security experts call for global cooperation and proactive strategies to address the security challenges posed by artificial intelligence Continue Reading

By

• Aaron Tan, TechTarget

What is tailgating (piggybacking)?

Tailgating, sometimes referred to as piggybacking, is a type of physical security breach in which an unauthorized person follows an authorized individual to enter secured premises while avoiding detection by an electronic or human access control (or alarm) system. Continue Reading

By

• Rahul Awati

NCSC chief warns of gap in cyber threats and defence capabilities

The UK and its allies must take collective action to improve their cyber resilience and repel the increasing volume of severe cyber attacks, says NCSC chief Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

How to build an incident response plan, with examples, template

With cyberthreats and security incidents growing by the day, every organization needs a solid incident response plan. Learn how to create one for your company. Continue Reading

By

• Paul Kirvan

NCSC issues fresh alert over wave of Cozy Bear activity

The NCSC, FBI and NSA publish updated warning about Cozy Bear’s activities, highlighting a range of vulnerabilities the threat actor is using to set up its cyber attacks Continue Reading

By

• Alex Scroxton, Security Editor

Government launches cyber standard for local authorities

Local government bodies are being invited to take advantage of a new NCSC-derived Cyber Assessment Framework to help enhance their resilience and ward off cyber attacks Continue Reading

By

• Alex Scroxton, Security Editor

Internet Archive web historians target of hacktivist cyber attack

The Internet Archive nonprofit digital library and Wayback Machine operator has been attacked by pro-Palestinian hacktivists Continue Reading

By

• Alex Scroxton, Security Editor

How Recorded Future finds ransomware victims before they get hit

Threat intel specialists at Recorded Future have shared details of newly developed techniques they are using to disrupt Rhysida ransomware attacks before the gang even has a chance to execute them Continue Reading

By

• Alex Scroxton, Security Editor

Australia bolsters cyber defences with security bill

Legislation tackles IoT security and establishes a Cyber Incident Review Board to bolster Australia’s cyber resilience Continue Reading

By

• Stephen Withers

MoneyGram customer data breached in attack

MoneyGram confirms that customer data has been stolen in an incident that appears to have started with a social engineering attack on its IT helpdesk staff Continue Reading

By

• Alex Scroxton, Security Editor

Secureworks: Ransomware takedowns didn’t put off cyber criminals

The number of active cyber criminal ransomware gangs has surged by almost a third in the space of 12 months, according to the latest intelligence from Secureworks Continue Reading

By

• Alex Scroxton, Security Editor

UK’s cyber incident reporting law to move forward in 2025

The UK government says that enforced cyber incident and ransomware reporting for critical sectors of the economy will help to build a better picture of the threat landscape and enable more proactive and preventative responses Continue Reading

By

• Alex Scroxton, Security Editor

IBM: Data breach cost in ASEAN hits new high

The average cost of a data breach in ASEAN grew by 7% from last year, as organisations grapple with increasingly distributed IT environments and complex security systems Continue Reading

By

• Aaron Tan, TechTarget

UK telcos including BT at risk from DrayTek router vulnerabilities

A series of vulnerabilities in DrayTek's Vigor router product lines affects multiple comms service providers in the UK, according to new analysis Continue Reading

By

• Alex Scroxton, Security Editor