Data breach incident management and recovery

Signalgate is a signal to revisit security onboarding and training

A leak of information on American military operations caused a major political incident in March 2025. The Security Think Tank considers what can CISOs can learn from this potentially fatal error. Continue Reading

By

• Mike Gillespie and Ellie Hurst, Advent IM

Adidas confirms customer data was accessed during cyber attack

Sportswear manufacturer Adidas has confirmed its systems were infiltrated by an unauthorised third party Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Maturing UK fintechs increase tech and cyber security hiring

Increased hiring reflects that fintechs are maturing and now require more cyber security and compliance experts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Armed forces charity steps in to address cyber mental health crisis

CIISec and military charity PTSD Resolution hope to address a gathering mental health crisis among frontline cyber professionals Continue Reading

By

• Alex Scroxton, Security Editor

Building resilient cyber threat intelligence communities

Cyber threat intelligence is no longer a luxury: intelligence sharing communities must mature, and there are many common lessons to learn. Continue Reading

By

• Rob Dartnall, SecAlliance

Security vs. usability: Why rogue corporate comms are still an issue

A leak of information on American military operations caused a major political incident in March 2025. The Security Think Tank considers what can CISOs can learn from this potentially fatal error. Continue Reading

By

• Elliott Wilkes, ACDS

Preparation and appreciation – the human factor in incident response

A typical incident response effort is highly technical, so where do soft skills come in and how do you know how effective your team is? We look at a measurement option and the human consideration in these scenarios Continue Reading

By

• Dan Raywood

M&S cyber attack disruption likely to last until July

M&S says it has moved into recovery mode after a ransomware attack, but expects some disruption to persist throughout the coming weeks Continue Reading

By

• Alex Scroxton, Security Editor

NCSC: Russia’s Fancy Bear targeting logistics, tech organisations

The NCSC and its partner agencies have blown the whistle on an extensive campaign of malicious cyber attacks orchestrated by the Russian state Fancy Bear operation Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware attacks dropped by a third last month

Reported ransomware attacks eased off during April following a dramatic spike in the first quarter of 2025 Continue Reading

By

• Alex Scroxton, Security Editor

Strong fintech security posture at risk via third-party weak links

Despite having a strong security posture, the financial technology sector could be open to attack via third parties Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Retail cyber attacks hit food distributor Peter Green Chilled

Cold chain services provider Peter Green Chilled, which supplies the likes of Aldi, Sainsbury’s and Tesco, has been forced to halt operations after succumbing to a ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

UK critical systems at risk from ‘digital divide’ created by AI threats

GCHQ’s National Cyber Security Centre warns that a growing ‘digital divide’ between organisations that can keep pace with AI-enabled threats and those that cannot is set to heighten the UK's overall cyber risk Continue Reading

Legal Aid Agency breach may encompass millions of people

Legal Aid Agency says the data of anybody who applied for legal aid over the past 15 years has been compromised in a cyber attack Continue Reading

By

• Alex Scroxton, Security Editor

NHS asks suppliers to sign up to cyber covenant

NHS digital and security leaders call on their suppliers to commit to a cyber security charter as the health service works to improve its resilience in the face of growing threat levels Continue Reading

By

• Alex Scroxton, Security Editor

Scattered Spider retail attacks spreading to US, says Google

Google’s threat intel analysts are aware of a number of in-progress cyber attacks against US retailers linked to the same Scattered Spider gang that supposedly attacked M&S and Co-op in the UK Continue Reading

By

• Alex Scroxton, Security Editor

Why we must reform the Computer Misuse Act: A cyber pro speaks out

Britain’s outdated hacking laws are leaving the UK’s cyber practitioners hamstrung and afraid. Security professional Simon Whittaker reveals how he nearly ran afoul of the Computer Misuse Act, and why he’s speaking out for reform Continue Reading

By

• Alex Scroxton, Security Editor

What is penetration testing?

A penetration test, also called a 'pen test,' is a simulated cyberattack on a computer system, network or application to identify and highlight vulnerabilities in an organization's security posture. Continue Reading

By

• Kinza Yasar, Technical Writer
• Puneet Mehta, SDG

New security paradigm needed for IT/OT convergence

Industry leaders and policymakers highlight growing cyber threats from the integration of IT and operational technology systems, calling for collaboration and regulatory frameworks to protect critical systems, among other measures Continue Reading

By

• Aaron Tan, Informa TechTarget

M&S forces customer password resets after data breach

M&S is instructing all of its customers to change their account passwords after a significant amount of data was stolen in a DragonForce ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Australian data breaches hit record high in 2024

More than 1,100 data breaches were reported in Australia last year, a 25% jump from 2023, prompting calls for stronger security measures across businesses and government agencies Continue Reading

By

• Aaron Tan, Informa TechTarget

Ransomware: What the LockBit 3.0 data leak reveals

An administration interface instance for the ransomware franchise's affiliates was attacked on 29 April. Data from its SQL database has been extracted and disclosed Continue Reading

By

• Valéry Rieß-Marchive, Rédacteur en chef

Government will miss cyber resiliency targets, MPs warn

A Public Accounts Committee report on government cyber resilience finds that the Cabinet Office has been working hard to improve, but is likely to miss targets and needs a fundamentally different approach Continue Reading

By

• Alex Scroxton, Security Editor

US tells CNI orgs to stop connecting OT kit to the web

US authorities have released guidance for owners of critical national infrastructure in the face of an undisclosed number of cyber incidents Continue Reading

By

• Alex Scroxton, Security Editor

UK government websites to replace passwords with secure passkeys

Government websites are to replace difficult-to-remember passwords with highly secure passkeys that will protect against phishing and cyber attackers Continue Reading

By

• Bill Goodwin, Computer Weekly

Chaos spreads at Co-op and M&S following DragonForce attacks

No end is yet in sight for UK retailers subjected to apparent ransomware attacks Continue Reading

By

• Alex Scroxton, Security Editor

Europe leads shift from cyber security ‘headcount gap’ to skills-based hiring

Research from Sans Institute reveals European organisations are leading a global shift in hiring priorities, driven by regional regulatory frameworks Continue Reading

By

• Kim Loohuis

Oxford Uni adds cyber resilience module to MBA programme

Oxford University’s Saïd Business School is working with cyber response specialist Sygnia to help future business leaders get on top of security Continue Reading

By

• Alex Scroxton, Security Editor

UK critical systems at risk from ‘digital divide’ created by AI threats

GCHQ’s National Cyber Security Centre warns that a growing ‘digital divide’ between organisations that can keep pace with AI-enabled threats and those that cannot is set to heighten the UK's overall cyber risk Continue Reading

By

• Bill Goodwin, Computer Weekly

What is segregation of duties (SoD)?

Segregation of duties (SoD) is an internal control mechanism designed to prevent errors and fraud by ensuring at least two individuals are responsible for the separate parts of any task. Continue Reading

By

• Katie Terrell Hanna
• Rahul Awati

Security Think Tank: What CISOs can learn from Signalgate

A leak of information on American military operations caused a major political incident in March 2025. The Security Think Tank considers what can CISOs can learn from this potentially fatal error. Continue Reading

By

• Javvad Malik, KnowBe4

Retail cyber crime spree a ‘wake-up call’, says NCSC CEO

The National Cyber Security Centre confirms it is providing assistance to M&S, Co-op and Harrods as concerns grow among UK retailers Continue Reading

By

• Alex Scroxton, Security Editor

Explaining what’s happening in a cyber attack is hard but crucial

The recent attacks on Marks and Spencer, Harrods and the Co-op show why it is essential for organisations to have a strategy to communicate effectively with customers affected Continue Reading

By

• Mikey Hoare, Kekst CNC

Harrods becomes latest UK retailer to fall victim to cyber attack

Harrods confirms it is the latest UK retailer to experience a cyber attack, shutting off a number of systems in an attempt to lessen the impact Continue Reading

By

• Alex Scroxton, Security Editor

Co-op instructs staff to be wary of lurking hackers

Co-op tells staff to stop using their VPNs and be wary that their communications channels may be being monitored, as a cyber attack on the organisation continues to develop Continue Reading

By

• Alex Scroxton, Security Editor

Thomas Herdman’s legal battle over Sky ECC encrypted phone distribution set to enter fifth year

Computer Weekly speaks to Julie Kawai Herdman, daughter of Thomas Herdman, the only person in custody for distributing Sky ECC encrypted phones Continue Reading

By

• Bill Goodwin, Computer Weekly
• Rebecca Tidy

Co-op shuts off IT systems to contain cyber attack

A developing cyber incident at Co-op has forced the retailer to pull the plug on some of its IT systems as it works to contain the attack Continue Reading

By

• Alex Scroxton, Security Editor

Scattered Spider on the hook for M&S cyber attack

The infamous Scattered Spider hacking collective may have been behind the ongoing cyber attack on Marks and Spencer that has crippled systems at the retailer and left its ecommerce operation in disarray. Continue Reading

By

• Alex Scroxton, Security Editor

Kaspersky calls for cyber immunity amid growing cyber threats

The rise of professional cyber crime groups and state-sponsored actors targeting critical infrastructure requires a move towards inherently secure ‘cyber immune’ systems, says Kaspersky CEO Eugene Kaspersky Continue Reading

By

• Aaron Tan, Informa TechTarget

M&S suspends all online sales as cyber attack worsens

M&S shuts down online sales as it works to contain and mitigate a severe cyber attack on its systems Continue Reading

By

• Alex Scroxton, Security Editor

M&S systems remain offline days after cyber incident

M&S is still unable to provide contactless payment or click-and-collect services amid a cyber attack that it says has forced it to move a number of processes offline to safeguard its customers, staff and business Continue Reading

By

• Alex Scroxton, Security Editor

Data breach class action costs mount up

Organisations exposed to the US market paid out over $150m in class action settlements in just six months. Security leaders must do more to address cyber gaps, respond better to incidents and demonstrate compliance Continue Reading

By

• Alex Scroxton, Security Editor

Challenges persist as UK’s Cyber Security and Resilience Bill moves forward

Elements of the Cyber Security and Resilience Bill are welcome but questions remain about how best to act in the face of persistent challenges like geopolitical chaos, threats to critical infrastructure, and technological advances Continue Reading

By

• James Morris, CSBR

March ransomware slowdown probably a red herring

An apparent slowdown in ransomware attack volumes is raising eyebrows, but the statistics never tell the full story Continue Reading

By

• Alex Scroxton, Security Editor

Rethink authentication to remove the burden on users

The rise of AI powered threats and non-human identities will push an already strained identity security model over the edge Continue Reading

By

• Patrick Wardrop, IBM

Financially motivated cyber crime remains biggest threat source

Mandiant’s latest annual threat report reveals data on how financially motivated cyber criminals, such as ransomware gangs, dominate the cyber security landscape Continue Reading

By

• Alex Scroxton, Security Editor

Qualys goes to bat for US cricket side San Francisco Unicorns

Cloud security specialist Qualys partners with US T20 cricket squad San Francisco Unicorns and its Sparkle Army fanclub as the team prepares for its summer 2025 campaign Continue Reading

By

• Alex Scroxton, Security Editor

Cyber attack downs systems at Marks & Spencer

A cyber attack at Marks & Spencer has caused significant disruption to customers, leaving them unable to make contactless payments or use click-and-collect services Continue Reading

By

• Alex Scroxton, Security Editor

Beyond baselines - getting real about security and resilience

In an increasingly contested world, the UK government needs a security certification that goes beyond baseline measures. Continue Reading

By

• Neil Ashdown and Tash Buckley

Collaboration is the best defence against nation-state threats

The rise of DeepSeek has prompted the usual well-documented concerns around AI, but also raised worries about its potential links to the Chinese state. The Security Think Tank considers the steps security leaders can take to counter threats posed by nation state industrial espionage? Continue Reading

By

• Stephen McDermid, Okta

Hertz warns UK customers of Cleo-linked data breach

Car hire giant Hertz reveals UK customer data was affected in a cyber incident orchestrated via a series of vulnerabilities in Cleo managed file transfer products Continue Reading

By

• Alex Scroxton, Security Editor

Government faces claims of serious security and data protection problems in One Login digital ID

The Government Digital Service was warned about serious cyber security and data protection problems in its flagship digital identity system, with insider claims that the data of three million users may still be at risk Continue Reading

By

• Bryan Glick, Editor in chief

Google bets on unifying security tools to ease CISO pain

At Google Cloud Next in Las Vegas, Google launches its Unified Security platform with the goal of bringing together disparate security solutions to help cyber leaders and practitioners address their most keenly felt pain points Continue Reading

By

• Alex Scroxton, Security Editor

Government punts cyber governance code of practice for UK businesses

The Department for Science, Innovation and Technology’s cyber security minister Feryal Clark announces a cyber security code of governance for UK businesses to follow Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

UK SMEs losing over £3bn a year to cyber incidents

A lack of access to technology, little to no staff training, and competing priorities are losing UK SMEs up to £3.4bn to cyber incidents every year Continue Reading

By

• Alex Scroxton, Security Editor

Norway and Nordic financial sector ramps up cyber security

Finans Norge sets up cyber security unit CTSU to support the finance sector in Norway amid increasing threats Continue Reading

By

• Gerard O'Dwyer

Taking a ‘good enough’ approach with cloud security isn't enough

In the wake of the January 2025 'Codefinger' attacks against AWS S3 users, Thales Rob Elliss argues that many organisations are dropping the ball when it comes to their understanding of cloud security best practice Continue Reading

By

• Rob Ellis, Thales

Top 1,000 IT service providers in scope of UK cyber bill

The government’s proposed Cyber Security and Resilience Bill is set to include regulatory provisions covering both datacentre operators and larger IT service providers Continue Reading

By

• Alex Scroxton, Security Editor

Advanced Software fined £3m over LockBit attack

The ICO has issued a £3m fine to software provider Advanced in the wake of security failings that led to significant disruption to NHS customers in a ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Clop resurgence drives ransomware attacks in February

The exploitation of two new vulnerabilities in a popular file transfer service saw the Clop ransomware gang soar in February, according to NCC Continue Reading

By

• Alex Scroxton, Security Editor

Largest ever cyber deal reflects Google’s CNAPP ambitions

In a signal of its future ambitions, Google lays down $32bn to acquire cloud-native application protection platform Wiz, reflecting the increasing need to secure multicloud environments Continue Reading

By

• Alex Scroxton, Security Editor

UK under-prepared for catastrophic cyber attack

In this week’s Computer Weekly, MPs have been told the UK is under-prepared to cope with a catastrophic cyber attack – we find out where the problems lie. Our new buyer’s guide assesses the challenges of datacentre capacity planning. And one of the UK’s most successful businessmen, Sir Martin Sorrell, gives his view on the risks and opportunities of AI. Read the issue now. Continue Reading

Seaco charts course for unified security strategy

Shipping container leasing giant consolidates security tools onto a single platform, leveraging AI and extended detection and response to improve security operations Continue Reading

By

• Aaron Tan, Informa TechTarget

Chinese espionage group UNC3886 targets Juniper routers

Advanced persistent threat group UNC3886 deployed custom backdoors on end-of-life Juniper Networks routers, underscoring the need for timely patching and advanced security monitoring Continue Reading

By

• Aaron Tan, Informa TechTarget

US Congress demands UK lifts gag on Apple encryption order

Apple and Google have told US lawmakers that they cannot tell Congress whether they have received technical capability notices from the UK Continue Reading

By

• Bill Goodwin, Computer Weekly
• Duncan Campbell , 2QQ Ltd, Sussex University

SuperBlack ransomware may have ties to LockBit

Forescout researchers report on a new ransomware gang that appears to be keeping the legacy of the notorious LockBit crew alive Continue Reading

By

• Alex Scroxton, Security Editor

Perimeter security appliances source of most ransomware hits

Perimeter security appliances and devices, particularly VPNs, prove to be the most popular entry points into victim networks for financially motivated ransomware gangs, according to reports Continue Reading

By

• Alex Scroxton, Security Editor

UK government under-prepared for catastrophic cyber attack, hears PAC

The Commons Public Accounts Committee heard government IT leaders respond to recent National Audit Office findings that the government’s cyber resilience is under par Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Post Office scandal data leak interim compensation offers made

Some subpostmasters affected by Post Office data breach offered interim compensation payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Singapore IT leaders boost AI security defences

Study reveals a surge in perceived importance of artificial intelligence for cyber security in Singapore, but declining investment in traditional measures raises concerns as sophisticated cyber attacks intensify Continue Reading

By

• Aaron Tan, Informa TechTarget

Managing security in the AI age

Gartner experts offer guidance on harnessing AI’s power while mitigating its risks, from managing shadow AI to implementing security controls and policies Continue Reading

By

• Stephen Withers

Norway says ‘no way’ to global financial crime

Oslo’s startup ecosystem is fighting back against cyber criminals with tech to wipe out attacks rather than just detect them Continue Reading

By

• Matthew Staff

NHS investigating how API flaw exposed patient data

NHS patient data was left vulnerable by a flaw in an application programming interface used at online healthcare provider Medefer Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Aussie businesses ramp up security spending

Australian organisations are set to spend A$6.2bn on security and risk management in 2025, a 14.4% jump from the previous year, driven by the rise of AI and a growing threat landscape Continue Reading

By

• Aaron Tan, Informa TechTarget

Singapore’s HomeTeamNS hit by ransomware attack

The non-profit organisation suffered a ransomware attack that affected some servers containing employee and member data, prompting an investigation and enhanced security measures Continue Reading

By

• Aaron Tan, Informa TechTarget

NHS staff lack confidence in health service cyber measures

NHS staff understand their role in protecting the health service from cyber threats and the public backs them in this aim, but legacy tech and a lack of training are hindering efforts, according to BT Continue Reading

By

• Alex Scroxton, Security Editor

CISOs spending more on insider risk

Insider risk management budgets have more than doubled in the past 12 months and look set to grow further still in 2025, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Singapore rolls out guidelines to bolster cloud and datacentre resilience

New advisory guidelines to enhance resilience and security of cloud services and datacentres in Singapore amid potential service disruptions and growing cyber threats Continue Reading

By

• Aaron Tan, Informa TechTarget

Ransomware: on the murky trail of one of the leaders of Black Basta

The internal exchanges within the Black Basta group revealed last week offer a new opportunity to investigate one of its leaders: Tramp. He may have been arrested in Armenia in June 2024, before being released Continue Reading

By

• Valéry Rieß-Marchive, Rédacteur en chef

European Union calls for more cyber data-sharing with Nato

Updates to the EU’s Cyber Blueprint, establishing best practice for multilateral security incident response in Europe, include calls for more collaboration with Nato member states, as the geopolitical environment becomes ever more fractious Continue Reading

By

• Alex Scroxton, Security Editor

The need for secure data sharing: Lessons learned from public health

Privacy-enhancing technologies can help healthcare organisations build resilience against cyber threats while maintaining patient privacy, security and regulatory compliance. Continue Reading

By

• Ronen Cohen, Duality Technologies

Check Point co-founder on AI, quantum and independence

Gil Shwed, Check Point’s co-founder and executive chairman, discusses the company’s focus on artificial intelligence-driven security and his commitment to remaining an independent force in the cyber security market Continue Reading

By

• Aaron Tan, Informa TechTarget

A landscape forever altered? The LockBit takedown one year on

The NCA-led takedown of the LockBit ransomware gang in February 2024 heralded a transformative year in the fight against cyber crime. One year on, we look back at Operation Cronos and its impact Continue Reading

By

• Alex Scroxton, Security Editor

Watchdog approves Sellafield physical security, but warns about cyber

The Office for Nuclear Regulation has taken Sellafield out of special measures for physical security, but harbours cyber security concerns Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

MSP cuts costs with Scality pay-as-you-go anti-ransomware storage

Autodata gets Scality as-a-service for on-site immutable storage via Artesca, to allow customers to rapidly recover from ransomware and at the same cost per terabyte no matter the volume Continue Reading

By

• Antony Adshead, Storage Editor

CPX 2025: Check Point CEO talks up hybrid mesh security

At CPX 2025 in Bangkok, Check Point CEO Nadav Zafrir outlined a vision for network security centred on hybrid mesh architecture and AI-powered capabilities Continue Reading

By

• Aaron Tan, Informa TechTarget

How to get employees to take cyber risk more seriously

To combat risky cyber security behaviour, organisations must move beyond awareness training and cultivate a culture where security violations are personally felt and socially unacceptable, leveraging existing values, real-world impacts, and even humour Continue Reading

By

• Leigh McMullen

Lenovo CSO: AI adoption fuels security paranoia

Doug Fisher, Lenovo’s chief security officer, outlines the company’s approach to security and AI governance, and the importance of having a strong security culture to combat cyber threats amplified by the use of AI Continue Reading

By

• Aaron Tan, Informa TechTarget

UK government sanctions target Russian cyber crime network Zservers

The UK government has imposed sanctions on a Russian cyber crime syndicate responsible for aiding ransomware attacks, targeting the group and individual members Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Google: Cyber crime meshes with cyber warfare as states enlist gangs

A report from the Google Threat Intelligence Group depicts China, Russia, Iran and North Korea as a bloc using cyber criminal gangs to attack the national security of western countries Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

US lawmakers move to ban DeepSeek AI tool

US politicians have introduced a bill seeking to ban the use of the DeepSeek AI tool on government-owned devices, citing national security concerns due to its alleged links to the Chinese state Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware payment value fell over 30% in 2024

Several factors, including the impact of law enforcement operations disrupting cyber criminal gangs and better preparedness among users, may be behind a significant drop in the total value of ransomware payments Continue Reading

By

• Alex Scroxton, Security Editor

UK’s Cyber Monitoring Centre begins incident classification work

The Cyber Monitoring Centre will work to categorise major incidents against a newly developed scale to help organisations better understand the nature of systemic cyber attacks and learn from their impact Continue Reading

By

• Alex Scroxton, Security Editor

DeepSeek API, chat log exposure a ‘rookie’ cyber error

Security researchers at Wiz find a trove of DeepSeek data including API secrets and chat logs publicly exposed via an open source database management tool, raising questions about the fast-growing service’s approach to security Continue Reading

By

• Alex Scroxton, Security Editor

Vallance rejects latest charge to reform UK hacking laws

Science minister Patrick Vallance rejects proposed amendments to the Computer Misuse Act, arguing that they could create a loophole for cyber criminals to exploit Continue Reading

By

• Alex Scroxton, Security Editor

Turbulent times ahead for tech

In this week’s Computer Weekly, the World Economic Forum in Davos highlighted growing risks to digital supply chains – we examine the turbulence ahead. Data sovereignty is becoming a growing issue as companies move to the cloud – we look at the regulatory challenges. And we analyse the best practices in automated patch management. Read the issue now. Continue Reading

Cyber incident that closed British Museum was inside job

An IT incident that disrupted visitor access to the British Museum last week was the work of a disgruntled contractor who had been let go Continue Reading

By

• Alex Scroxton, Security Editor

US indicts five in fake North Korean IT contractor scandal

The US authorities have accused five men, including two American citizens, of involvement in a scheme which saw companies duped into hiring fake North Korean IT contractors Continue Reading

By

• Alex Scroxton, Security Editor

Privacy professionals expect budget cuts, lack confidence

Over 50% of privacy professionals in Europe expect to see less money earmarked for data security initiatives in 2025, and many don’t have faith their organisations are taking the issue seriously, according to an ISACA report Continue Reading

By

• Alex Scroxton, Security Editor

Funksec gang turned up ransomware heat in December

The criminal ransomware fraternity was hard at work over the festive period, with attack volumes rising and a new threat actor emerging on the scene Continue Reading

By

• Alex Scroxton, Security Editor