The UK’s National Cyber Security Centre (NCSC) is to fund free Cyber Essentials accreditation for some of the most vulnerable small organisations in the country, including charities and firms offering legal aid. The Funded Cyber Essentials Programme is designed to offer small organisations in high-risk sectors practical support to establish and maintain a baseline […]
Proposals by the Payment Systems Regulator (PSR) to establish a new fraud refund mechanism risks excluding many victims of authorised push payment (APP) fraud and other forms of digitally enabled fraud by setting a minimum level of reimbursement, retail bank TSB has warned. Under the proposals, which TSB does in general support, the regulator […]
Organisations that fell victim to Andromeda, a commodity malware that dates back 12 years, seem to be at risk of compromise by the Moscow-backed advanced persistent threat (APT) group tracked variously as UNC2410 or Turla, according to Mandiant, which has observed the group reactivating second-hand command and control (C2) infrastructure in a year-long campaign […]
The Vice Society ransomware crew has leaked a large volume of personally identifiable information (PII) on pupils and staff at 14 UK schools and universities, including children’s special educational needs (SEN) information, scanned passport data for school trips, and details of staff payroll and contracts. The documents are known to relate to 14 separate […]
Facebook parent firm Meta faces fines totalling €390m (£345m) after European regulators found it had been unlawfully processing customers’ personal data to deliver targeted advertising on its Facebook and Instagram social media sites since 2018. Ireland’s Data Protection Commission has given the company three months to comply with Europe’s data protection laws after regulators […]
Computer Weekly Buyer’s Guides map the IT buying cycle of our readership onto relevant editorial that will inform and educate readers and help them in making the right buying decision. On a three-week cycle, the publication runs a series of articles focused on a particular category of software/hardware/IT service. Articles appear in the features […]
2022 was slow for vendor acquisitions, and Salesforce was no different. The vendor’s three acquisitions in 2022 focused on improving integrations and supporting its ecosystem. Some years are standouts for vendors: big acquisitions, new product releases and major innovations. 2022 was not that year. Still, Salesforce made three significant acquisitions of very different companies. […]
Towards the end of last year, management consultant McKinsey published an article where the first paragraph was created by ChatGPT, the generative artificial intelligence (AI) language model. The article’s authors admitted that the AI’s attempt was “not perfect but overwhelmingly impressive”. They noted that products like ChatGPT and GitHub Copilot take technology into realms once […]
A South Africa-based threat actor known as Automated Libra has been observed adopting increasingly sophisticated techniques to conduct a widespread freejacking campaign against various public cloud services. Freejacking is the act of using free or time-limited access to public cloud resources – such as introductory trial offers – to perform illicit cryptomining. The campaign […]
Ransomware operators are exploiting Fortinet network devices that remain vulnerable to a critical authentication bypass vulnerability, according to research publicly released today by eSentire’s Threat Research Unit (TRU). Fortinet first disclosed the vulnerability in question – tracked as CVE-2022-40684 – on 10 October 2022. It affects FortiOS, FortiProxy and FortiSwitchManager, which, if successfully exploited, […]