Home Office ‘unlawfully’ approved MI5 bulk surveillance warrants

The Home Office has unlawfully allowed MI5 to gather vast amounts of the public’s data by wrongly approving bulk surveillance warrants, Britain’s most secret court heard on 25 July 2022. The human... Read more »

NCSC seeks community input for Cyber Advisor service

The UK’s National Cyber Security Centre (NCSC) has unveiled proposals to establish a new Cyber Advisor service for small and medium-sized enterprises (SMEs), and is asking for the security community’s input to... Read more »

Latest Atlassian Confluence vulnerability raises concerns

A newly disclosed vulnerability affecting users of Atlassian’s Confluence collaboration platform could give a malicious actor remote access to all non-restricted pages in an organisation’s Confluence instance, and should be fixed immediately.... Read more »

The Security Interviews: Why you need to protect abandoned digital assets

In the wake of Russia’s invasion of Ukraine, governments from around the world imposed economic sanctions against Russia. Following this, it became apparent that private organisations needed to take action, leading to... Read more »

insider threat

What is an insider threat? An insider threat is a category of risk posed by those who have access to an organization’s physical or digital assets. These insiders can be current employees,... Read more »

LinkedIn most impersonated brand in phishing attacks

Workplace social network LinkedIn has emerged as the brand most imitated by cyber criminals in their phishing attacks for the second quarter in a row, accounting for 45% of all phishing attacks... Read more »

GCHQ experts back scanning of encrypted phone messages to fight child abuse

Companies could police encrypted messaging services for possible child abuse while still preserving the privacy and security of the people who use them, government security and intelligence experts said in a discussion... Read more »

Buy ‘plug-n-play’ malware for the price of a pint of beer

A wide variety of malwares and vulnerability exploits can be bought with ease on underground marketplaces for about $10 (£8.40) on average, according to new statistics – only a few pennies more... Read more »

Russia-linked APTs targeted fleeing Ukrainian civilians

Two advanced persistent threat (APT) groups likely linked to the governments of Russia and its puppet state Belarus conducted a phishing campaign that targeted Ukrainian civilians fleeing the illegal shelling of their... Read more »

(ISC)² expands entry-level cyber programme after UK success

Security training and certification specialist (ISC)² has announced a new programme, One Million Certified in Cybersecurity, pledging to put a million people around the world through its foundation level education programme and... Read more »