The US government’s Cybersecurity and Infrastructure Security Agency (CISA) yesterday issued a new warning over continuing exploitation of the dangerous CVE-2021-44228 Apache Log4j vulnerability – also known as Log4Shell – on VMware... Read more »
As organisations increasingly rely on third parties to provide a myriad of IT and business services, the boundaries between the enterprise and its suppliers have become ever more blurred. The result is... Read more »
In his classic book Animal Farm, George Orwell wrote: “All animals are equal, but some animals are more equal than others.” A crude modern comparison might be: “All data should be secured,... Read more »
At the state opening of parliament on 10 May, the Prince of Wales announced the government’s intention to reform the UK’s data protection regime. Since Brexit, this has comprised two complementary laws... Read more »
Ukraine’s State Service of Special Communications and Information Protection (SSSCIP), the government body tasked with performing a similar cyber function to the UK’s National Cyber Security Centre (NCSC), has implemented network protection... Read more »
The distinction between protecting information technology (IT) and protecting operational technology (OT) became very clear in 2010, when the Iranian nuclear enrichment facility Natanz was attacked by Stuxnet malware. OT includes programmable... Read more »
SolarWinds has unveiled a new software development model, dubbed Next-Generation Build System, that it hopes will help to avoid a repeat of the devastating December 2020 Sunburst cyber attack, and serve as... Read more »
As organisations have increased their own cyber security over the past five to 10 years, there has been an increase in indirect attacks via the supply chain. At the same time, there... Read more »
We encounter international standards every day without knowing it. A hidden part of the information and communication technology (ICT) networks and devices we all use every day, standards are rarely perceived by... Read more »
A data breach whistleblower said NatWest files under her bed contain current customer details, contrary to the bank’s claims that it is historic information. The former worker at the Royal Bank of... Read more »