Hackers and cybercrime prevention

MPs press outsourcer TCS over Jaguar cyber attack

The government’s cross-bench Business and Trade Committee has written to Tata Consultancy Services seeking answers over possible links to cyber attacks on Jaguar Land Rover, Marks and Spencer, and Co-op Continue Reading

By

• Alex Scroxton, Security Editor

Harrods hackers start contacting customers

Retailer Harrods has revealed that a number of customers whose data was stolen in a cyber attack have been contacted by the perpetrators Continue Reading

By

• Alex Scroxton, Security Editor

Google unveils AI-powered security to trap ransomware attacks

The new security capability, available at no extra cost for most Google Workspace users, detects mass file encryption during ransomware attacks, stops the attacks from spreading and allows for restoration of files Continue Reading

By

• Aaron Tan, Informa TechTarget

UK and US urge Cisco users to ditch end-of-life security appliances

An ongoing campaign of cyber attacks is targeting users of end-of-life Cisco security appliance kit Continue Reading

By

• Alex Scroxton, Security Editor

Harrods hit by second cyber attack in six months

Data on approximately 430,000 Harrods shoppers was stolen in a third-party breach, but the cyber attack is not related to an earlier Scattered Spider incident, says the retailer Continue Reading

By

• Alex Scroxton, Security Editor

JLR tentatively restarts production, following £1.5bn government backing

Jaguar Land Rover is to resume car production after a £1.5bn government loan guarantee amid its cyber attack fallout. Debate is growing over the bailout and insurance Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Over half of India-based companies suffer security breaches

Business supply chains, which include Indian companies, are at risk of attack as more than half of suppliers were breached last year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government might support Jaguar Land Rover supply chain to mitigate cyber attack impact

The government is considering buying car parts from JLR’s supply chain to sell them on to the company once it recovers from the August cyber attack Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Co-op declares cyber attack damage cost £206m

Co-op reveals £206m costs from April cyber attack, with revenues hit, member data stolen and shelves emptied, exposing major retail supply chain vulnerabilities Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Netherlands establishes cyber resilience network to strengthen public-private digital defence

Network will connect organisations in a cyber crime defence initiative that goes way beyond information sharing Continue Reading

By

• Kim Loohuis

NCA arrests man following cyber attack that disrupted air travel

The NCA has arrested a man in West Sussex over the cyber attack on Collins Aerospace that disrupted Heathrow and other EU airports. He has been released on conditional bail Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

SolarWinds warns over dangerous RCE flaw

A newly uncovered RCE flaw in SolarWinds’ helpdesk product bypasses two previously issued fixes, and users should prioritise updates as exploitation is likely to occur Continue Reading

By

• Alex Scroxton, Security Editor

Rethinking identity in the age of AI impersonation

Trust in business has long hinged on human instincts but with the advent of deepfakes, it is becoming dangerous to assume too much. Continue Reading

By

• Akif Khan, Gartner

Jaguar Land Rover extends cyber attack-induced shutdown to October

Jaguar Land Rover is extending its production shutdown caused by the 31 August cyber attack into next month, as government ministers drop by and supply chain workers lose wages Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

‘Our worst day’: The untold story of the Electoral Commission cyber attack

As head of digital at The Electoral Commission, Andrew Simpson’s mettle was tested when threat actors gained access to the regulator’s email systems and accessed sensitive voter data. Three years on, he tells his story to Computer Weekly Continue Reading

By

• Alex Scroxton, Security Editor

How to fend off identity-based cyber attacks

Attackers are using legitimate credentials to walk through the front door and “live off the land”. True cyber resilience now depends on protecting identity, not just the perimeter Continue Reading

By

• Kavitha Mariappan

From breach to resilience: How the Electoral Commission rebuilt its cyber defences

The UK's Electoral Commission fell victim to a major cyber attack in 2022. Three years on, the organisation is reflecting on its experience and sharing the lessons it learned to help others improve their security resilience. Continue Reading

By

• Andrew Simpson, The Electoral Commission

Teen charged with Las Vegas casino cyber heist

Another arrest of a teenage hacker associated with the Scattered Spider gang has been made, this time in relation to two 2023 cyber attacks on Las Vegas casinos and resorts Continue Reading

By

• Alex Scroxton, Security Editor

Cyber attack that downed airport systems confirmed as ransomware

Authorities in Europe say the cyber attack that caused disruption to passenger-facing services at multiple airports, including Heathrow, was the result of ransomware, as investigations continue Continue Reading

By

• Alex Scroxton, Security Editor

Government meets with car parts suppliers amid JLR cyber crisis

Government officials have met with the Society of Motor Manufacturers and Traders to discuss the challenges they are facing amid disrupted production at Jaguar Land Rover Continue Reading

By

• Alex Scroxton, Security Editor

French court ruling may lead to legal challenges over state Sky ECC and EncroChat phone hack

A decision by the French supreme court may pave the way for defendants to challenge the lawfulness of France’s hacking of the EncroChat and Sky ECC cryptophone networks used by organised crime groups Continue Reading

By

• Bill Goodwin, Investigations Editor

Pentera expands in APAC, taps AI to outsmart attackers

The penetration testing specialist is expanding its presence in the Asia-Pacific region and deploying AI-driven capabilities as it eyes acquisitions and a potential IPO Continue Reading

By

• Aaron Tan, Informa TechTarget

Are AI agents a blessing or a curse for cyber security?

Agentic AI is touted as a helpful tool for managing tasks, and cyber criminals are already taking advantage. Should information security teams look to AI agents to keep up? Continue Reading

By

• Danny Palmer

Teen hackers charged over Scattered Spider attack on TfL

Two men have appeared in court in London in connection with the September 2024 cyber attack that disrupted online services at Transport for London Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft scores win against Office 365 credential thieves

Microsoft’s Digital Crimes Unit disrupts a major phishing-as-a-service operation that targeted and stole Office 365 usernames and credentials Continue Reading

By

• Alex Scroxton, Security Editor

NCC: How RaaS team-ups help Scattered Spider enhance its attacks

Scattered Spider’s alliances with ransomware-as-a-service gangs act as a force multiplier for the scope, and number, of its cyber attacks, according to NCC Group analysts Continue Reading

By

• Alex Scroxton, Security Editor

Google Cloud unveils open protocol for agentic payments

Google’s Agent Payments Protocol is an open standard developed with more than 60 global partners to create a secure standard for AI-driven transactions Continue Reading

By

• Aaron Tan, Informa TechTarget

Exabeam: Treat AI agents as the new insider threat

As artificial intelligence agents are given more power inside organisations, Exabeam’s chief AI officer, Steve Wilson, argues they must be monitored for rogue behaviour just like their human counterparts Continue Reading

By

• Stephen Withers

Jaguar Land Rover extends production shutdown for another week

Jaguar Land Rover says that vehicle production will remain suspended in the wake of a cyber attack, while the hackers allegedly responsible claim they are retiring from a life of crime Continue Reading

By

• Alex Scroxton, Security Editor

ShinyHunters linked to breach of French luxury goods house

Kering, the parent group of fashion houses including Balenciaga and Gucci, becomes the latest organisation to allegedly fall victim to ShinyHunters Continue Reading

By

• Alex Scroxton, Security Editor

Retailers turn to tech as in-store crime soars

Retailers such as H&M, Iceland, Poundland and Tesco are deploying tech in stores as a way of protecting themselves and their employees from rising shop crime Continue Reading

By

• Ben Sillitoe

M&S parts ways with CTO after cyber attack

M&S chief digital and technology officer Rachel Higham steps back from her role in the wake of the April 2025 cyber attack on the retailer’s systems Continue Reading

By

• Alex Scroxton, Security Editor

Students an increasing source of cyber threat in UK schools

Insider threats arising from student activity now appears to be the chief cause of notifiable cyber or data breach incidents in Britain’s schools Continue Reading

By

• Alex Scroxton, Security Editor

Splunk.conf: Cisco and Splunk expand agentic SOC vision

The arrival of agentic AI in the security operations centre heralds an era of simplification for security professionals, Splunk claims Continue Reading

By

• Alex Scroxton, Security Editor

Jaguar Land Rover admits data has been compromised in cyber attack

The car maker revealed that data was stolen in the cyber attack that began on 31 August, as its production line continues to be affected Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

UK contactless card payment limits could be unlimited

The UK Financial Conduct Authority says contactless payment technology and fraud protections have advanced enough for firms to adjust the limit Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Splunk.conf: Splunk urges users to eat their ‘cyber veggies’

The dawn of AI-enabled cyber attacks makes it even more important for defenders to bring their A-game, particularly when it comes to getting the basics right Continue Reading

By

• Alex Scroxton, Security Editor

UK AI sector balloons by 85% to 5,800 companies from 2023 to 2025

A Perspective Economics study commissioned by DSIT sizes the UK AI sector at 5,800 companies, an increase of 85% over two years Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Lessons from Jaguar Land Rover: How can businesses prepare for cyber attacks?

A cyber attack at Jaguar Land Rover has halted production lines and caused widespread disruption. How can businesses protect themselves and mitigate the risks of such an attack? Continue Reading

By

• Dominic Holden

US politicians ponder Wimwig cyber intel sharing law

US cyber data sharing legislation is set to replace an Obama-era law, but time is running out to get it over the line, with global ramifications for the security industry, and intelligence and law enforcement communities Continue Reading

By

• Alex Scroxton, Security Editor

Jaguar Land Rover cyber attack keeps workers at home

The recent cyber attack on Jaguar Land Rover is keeping workers out of the plants as possible attack group identity becomes public Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Fastly CEO plots course through AI and security

Chief exec Kip Compton explains how Fastly’s unified platform is solving the web’s biggest challenges, from content scrapping by AI bots to distributed denial-of-service attacks Continue Reading

By

• Stephen Withers

Cyber attackers damage Jaguar Land Rover production

Jaguar Land Rover reports a cyber attack has ‘severely disrupted’ its vehicle production and retail operations, recalling similar attacks on other prominent British brands this year Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

AI and backup: How backup products leverage AI

We look at how AI helps with backup, from AI analysis of backup jobs and their integrity through natural language support functionality to ransomware and anomaly detection Continue Reading

By

• Stephen Pritchard

UK cyber security centre helps expose China-based cyber campaign

GCHQ cyber security centre and its international partners release details of malicious cyber activity linked to Chinese businesses Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ransomware activity levelled off in July, says NCC

Ransomware levels held steady in the month of July, although the risk remained as persistent as ever Continue Reading

By

• Alex Scroxton, Security Editor

Three new Citrix NetScaler zero-days under active exploitation

Citrix patches three new vulnerabilities in its NetScaler lines warning of active zero-day exploitation by an undisclosed threat actor Continue Reading

By

• Alex Scroxton, Security Editor

How to secure the identity perimeter and prepare for AI agents

Ping Identity CEO Andre Durand explains why identity has become the critical security battleground, how decentralised credentials will reduce data breach risks, and why AI agents will need their own identities to be trusted Continue Reading

By

• Stephen Withers

Ransomware attack volumes up nearly three times on 2024

During the first six months of 2025, the number of observed and tracked ransomware attacks far outpaced the volume seen in 2024 Continue Reading

By

• Alex Scroxton, Security Editor

Moscow exploiting seven-year-old Cisco flaw, says FBI

US authorities warn of an uptick in state-sponsored exploitation of a seven-year-old vulnerability in Cisco's operating system software Continue Reading

By

• Alex Scroxton, Security Editor

Apple iOS update fixes new iPhone zero-day flaw

Latest Apple zero-day found in the ImageIO framework opens the door for targeted zero-click attacks on iPhone users Continue Reading

By

• Alex Scroxton, Security Editor

Warlock claims more victims as cyber attacks hit Colt and Orange

Ransomware gang Warlock is adding more victims to its data leak site as the impact of a spreading wave of cyber attacks continues to be felt Continue Reading

By

• Alex Scroxton, Security Editor

Deepfake AI scammers target the Big Yin

Cyber criminal scammers exploiting GenAI to create deepfake AI tools are targeting one of the UK’s most beloved comics, and one of its strongest accents Continue Reading

By

• Alex Scroxton, Security Editor

US says UK has agreed to drop encryption ‘backdoor’ demands against Apple

US and UK end diplomatic row over UK encryption ‘backdoor’ order against Apple, but it remains unclear whether Apple will restore advanced encryption services to UK users Continue Reading

By

• Bill Goodwin, Investigations Editor

Workday hit in wave of social engineering attacks

A campaign of voice-based social engineering attacks targeting users of Salesforce’s services appears to have struck HR platform Workday Continue Reading

By

• Alex Scroxton, Security Editor

Extremist hacker who defaced websites and stole data imprisoned

Hacker Al-Tahery Al-Mashriky pled guilty to attacking multiple websites based on extremist political and religious ideology Continue Reading

By

• Alex Scroxton, Security Editor

L’Oréal to promote cyber resilience for Britain’s beauty salons

L’Oréal UK and Ireland will work with law enforcement, cyber educators and students, and other large organisations to help thousands of small salons across the UK improve their cyber resilience practice Continue Reading

By

• Alex Scroxton, Security Editor

Warlock claims ransomware attack on network services firm Colt

UK network services firm Colt is attempting to recover various customer-facing systems following a cyber attack that has been claimed by the Warlock ransomware gang and may have arisen via a SharePoint flaw Continue Reading

By

• Alex Scroxton, Security Editor

Would you hire a hacker?

At a time when cyber security breaches are on the up and skills remain in short supply, security experts believe we may be missing a trick by overlooking unconventional sources of talent Continue Reading

By

• Cath Everett

Teen hackers aren't the problem. They're the wake-up call

If we take the time to build the right pathways into cyber, young people could be our best line of defence. Continue Reading

By

• Fergus Hay, The Hacking Games

BlackSuit ransomware payment recovered in takedown operation

US authorities reveal how over a million dollars’ worth of cryptocurrency assets laundered by the BlackSuit ransomware gang were seized ahead of a July takedown operation Continue Reading

By

• Alex Scroxton, Security Editor

What the UK's ransomware crackdown signals for Europe

The UK government is forging a bold path as it aims to ban ransomware payments from certain organisations. Its actions could herald an inflexion point in Europe's broader response to ransomware. Continue Reading

By

• Fintan Quinn, Gartner

Researchers firm up ShinyHunters, Scattered Spider link

ReliaQuest researchers present new evidence that firms up a potential link, or outright partnership, between the ShinyHunters and Scattered Spider cyber gangs Continue Reading

By

• Alex Scroxton, Security Editor

UK work visa sponsors are target of phishing campaign

Mimecast identifies a phishing campaign targeting UK organisations that sponsor migrant workers and students, opening the door to account compromise and visa fraud Continue Reading

By

• Alex Scroxton, Security Editor

Norway fixing Big Bang e-health botch with fintech security

Experts call for Europe’s health sector to protect medical APIs with security originated from UK open banking as officials take urgent measures against unprecedented attacks Continue Reading

By

• Mark Ballard

ShinyHunters Salesforce cyber attacks explained: What you need to know

Computer Weekly gets under the skin of an ongoing wave of ShinyHunters cyber attacks orchestrated via social engineering against Salesforce users Continue Reading

By

• Alex Scroxton, Security Editor

McCullough Review into PSNI spying on journalists and lawyers delayed

Angus McCullough KC is to present findings of an independent review of police spying on phone data of lawyers, journalists and NGOs in Northern Ireland in October   Continue Reading

By

• Bill Goodwin, Investigations Editor

What is the Mitre ATT&CK framework?

The Mitre ATT&CK -- pronounced miter attack -- framework is a free, globally accessible knowledge base that describes the latest behaviors and tactics of cyberadversaries to help organizations strengthen their cybersecurity strategies. Continue Reading

By

• Paul Kirvan
• Kinza Yasar, Technical Writer
• Ben Lutkevich, Site Editor

Black Hat USA: Startup breaks secrets management tools

Researchers at Cyata, an agentic identity specialist that has just emerged from stealth, found 14 CVEs in the widely used CyberArk Conjur and HashiCorp Vault enterprise secrets management platforms Continue Reading

By

• Alex Scroxton, Security Editor

Cyber criminals would prefer businesses don’t use Okta

Okta details a phishing campaign in which the threat actor demonstrated some unusually strong opinions on what authentication methods they would like their targets to use Continue Reading

By

• Alex Scroxton, Security Editor

Attacker could defeat Dell firmware flaws with a vegetable

Cisco Talos discloses five vulnerabilities in cyber security firmware used on Dell Latitude and Precision devices, including one that could enable an attacker to log on with a spring onion Continue Reading

By

• Alex Scroxton, Security Editor

Digitising fan experience

In this issue, discover the latest twist regarding a secret Home Office order requiring Apple to give UK law enforcement access to users’ encrypted data stored on the Apple iCloud. Also discover how the Premier League is using digital means to reach fans, and learn about identity security in SaaS deployments. Read the issue now. Continue Reading

Black Hat USA: Halcyon and Sophos tag-team ransomware fightback

Ransomware experts Halcyon and Sophos are to pool their expertise in ransomware, working together to enhance data- and intelligence-sharing and bringing more comprehensive protection to customers Continue Reading

By

• Alex Scroxton, Security Editor

Agentic AI a target-rich zone for cyber attackers in 2025

At Black Hat USA 2025, CrowdStrike warns that cyber criminals and nation-states are weaponising GenAI to scale attacks and target AI agents, turning autonomous systems against their makers Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Palo Alto Networks to acquire CyberArk for $25bn

The deal marks Palo Alto Networks’ entry into the identity and access management space amid the growing need to secure human, machine and emerging AI agent identities Continue Reading

By

• Aaron Tan, Informa TechTarget

Scattered Spider tactics continue to evolve, warn cyber cops

CISA, the FBI, NCSC and others have clubbed together to update previous guidance on Scattered Spider's playbook, warning of new social engineering tactics and exploitation of legitimate tools, among other things Continue Reading

By

• Alex Scroxton, Security Editor

Industry experts warn crypto infrastructure is ‘creaking’

A report from experts at HSBC, Thales and InfoSec Global claims decades-old cryptographic systems are failing, putting businesses at risk from current vulnerabilities and the threat from quantum computing Continue Reading

By

• Aaron Tan, Informa TechTarget

Austrian government faces likely legal challenge over state spyware

Civil society groups are talking to opposition MPs about bringing a legal challenge to the Austrian constitutional court over ‘state trojan’ law Continue Reading

By

• Bill Goodwin, Investigations Editor

Building digital resilience in retail

Retail is suffering economically and from hacking attacks. What steps can retailers can take to prevent cyber attacks, supply chain disruptions and migration downtime? Continue Reading

By

• Madeline Bennett, Mowser Media

Data resilience critical as ransomware attacks target backups

With more threat actors targeting backup repositories to ensure a payday, Veeam urges organisations to treat data resilience as a competitive advantage, not just an insurance policy Continue Reading

By

• Stephen Withers

The UK’s ransomware payment ban is a strategic win

The UK's proposed public sector ransomware payment ban could be a bold step, but it can't operate in isolation. Continue Reading

By

• Rob Dartnall, SecAlliance

US seeks ‘unquestioned’ AI dominance

US AI action plan sets out aims to expand American dominance in the world of artificial intelligence Continue Reading

By

• Alex Scroxton, Security Editor

SharePoint users hit by Warlock ransomware, says Microsoft

Microsoft’s security analysts confirm a number of cyber attacks on on-premise SharePoint Server users involve ransomware Continue Reading

By

• Alex Scroxton, Security Editor

Scattered Spider victim Clorox sues helpdesk provider

Cleaning products manufacturer Clorox fell victim to a Scattered Spider social engineering attack two years ago – it blames its IT helpdesk provider, Cognizant Continue Reading

By

• Alex Scroxton, Security Editor

Dutch researchers use heartbeat detection to unmask deepfakes

Dutch method to counter deepfakes analyses blood flow patterns in faces that current deepfake generation tools cannot yet replicate Continue Reading

By

• Kim Loohuis

Monzo’s £21m fine highlights banks’ cyber security failures

Monzo’s recent fine over failings in its customer verification processes highlights wider security and privacy shortcomings in the personal finance world Continue Reading

By

• Nicholas Fearn

WhatsApp is refused right to intervene in Apple legal action on encryption ‘backdoors’

Investigatory Powers Tribunal to hear arguments in public over lawfulness of secret UK order requiring Apple to give UK law enforcement access to users’ encrypted data stored on the Apple iCloud Continue Reading

By

• Bill Goodwin, Investigations Editor

Business resilience needs comprehensive approach

The cyber attack on Marks & Spencer showed the vulnerability of even very established companies. But business applications resilience goes beyond cyber security basics Continue Reading

By

• SA Mathieson

Microsoft confirms China link to SharePoint hacks

Microsoft confirms two known China-nexus threat actors, and one other suspected state-backed hacking group, are exploiting vulnerabilities in SharePoint Server Continue Reading

By

• Alex Scroxton, Security Editor

Overconfidence in cyber security: a silent catalyst for CNI breaches

Many CNI organisations are perilously overconfident in their ability to manage and combat cyber risks, according to Bridewell research. This is leaving vital systems exposed. Continue Reading

By

• Anthony Young

Chinese cyber spies among those linked to SharePoint attacks

Exploitation of the ToolShell RCE zero-day in Microsoft SharePoint continues to gather pace, with evidence emerging of exploitation by nation state-backed threat actors Continue Reading

By

• Alex Scroxton, Security Editor

UK government to bring in ransomware payment ban

Critical infrastructure operators, hospitals, local councils and schools will be among those banned from giving in to cyber criminal demands as the UK moves forward with proposals to address the scourge of ransomware Continue Reading

By

• Alex Scroxton, Security Editor

UK may be seeking to pull back from Apple encryption row with US

UK government officials say that attempts by the Home Office to require Apple to introduce ‘backdoors’ to its secure encrypted storage service will cross US red lines Continue Reading

By

• Bill Goodwin, Investigations Editor

Patch ToolShell SharePoint zero-day immediately, says Microsoft

The active exploitation of a dangerous zero-day vulnerability chain in Microsoft SharePoint – which was disclosed over the weekend – is underway. Immediate action is advised Continue Reading

By

• Alex Scroxton, Security Editor

The Security Interviews: Jason Nurse, University of Kent

Jason Nurse, reader in cyber security at the University of Kent, discusses the psychological side of cyber and online safety, why placing blame on users as ‘the weakest link’ is wrong – and why security pros should think about user needs more Continue Reading

By

• Danny Palmer

Singapore under ongoing cyber attack from APT group

Nation-state actor UNC3886 is actively targeting Singapore’s critical national infrastructure in a sophisticated espionage and disruption campaign, with the country mounting a whole-of-government response Continue Reading

By

• Aaron Tan, Informa TechTarget

NCSC exposes Fancy Bear's Authentic Antics malware attacks

Amid a new round of UK government sanctions targeting Moscow's intelligence apparatus, the NCSC has formally attributed attacks orchestrated with a cleverly-designed malware to the GRU's Fancy Bear cyber unit Continue Reading

By

• Alex Scroxton, Security Editor

European cyber cops target NoName057(16) DDoS network

A Europol operation has succeeded in disrupting a pro-Russian hacktivist network accused of conducting DDoS cyber attacks on targets in Ukraine and Europe Continue Reading

By

• Alex Scroxton, Security Editor

CW EMEA: Vive la AI

In this quarter’s CW EMEA, we look at how one of the Netherlands’ leading technology education centres, Eindhoven University of Technology, fell victim to sophisticated cyber attacks. What unfolded in the university’s reaction is evidence that the hard work and preparation for such an event pays off. Continue Reading

Hackbots biggest cloud security risk, slashing attack times to minutes

With cyber criminals using automated tools to steal data in minutes, organisations must focus on runtime protection and automated responses to combat the rising threat from AI and misconfigured cloud assets Continue Reading

By

• Stephen Withers