Scammers accidentally reveal fake Amazon review data

An opsec-illiterate scammer has accidentally exposed more than 13 million data records via an open ElasticSearch database, relating to a large-scale fake review scam implicating independent Amazon vendors and... Read more »

Google to introduce mandatory MFA for users

Google plans to make multifactor authentication (MFA) compulsory for Google account holders to better protect them from compromise in an increasingly dangerous and sophisticated threat landscape. Announced by Mark... Read more »

HSBC blocks £249m in UK fraud with voice biometrics

HSBC said that telephone banking fraud has been reduced by 50% since the introduction of a biometric security system that authenticates customers through their voices. The bank said about... Read more »

Why ITAM can aid IT-fuelled business recovery

Over the course of the past decade, IT asset management (ITAM) has been slowly increasing its influence. Apart from the people in finance, few senior business executives lose sleep... Read more »

Dysfunctional cyber, network teams disrupt digital transformation

Digital transformation projects worth billions of pounds are being jeopardised by poor relationships between cyber security and networking teams, according to cloud security firm Netskope, which has released a... Read more »

Sophos: How timely intervention stopped a ProxyLogon attack

Cyber security researchers at Sophos have been sharing details of how they were able to cut off an ongoing cyber attack on one of their customers, which exploited the... Read more »

How GCHQ proposes to implement and use ethical AI

In early March 2021, GCHQ released a whitepaper outlining its plans for the future. In response to the escalating threats faced online, the government intelligence and security organisation will... Read more »

Half of organisations breached via a third party in 12 months

Third-party contractors and related entities with remote, privileged access to organisational IT systems are increasingly the cause of data breaches, according to a newly published report produced by SecureLink... Read more »

The practical steps needed to accelerate a UK digital identity ecosystem

In February, the Department for Digital, Culture, Media and Sport (DCMS) published the initial “alpha” version of its digital identity trust framework, and key players in the sector have... Read more »

EncroChat: Top lawyer warned CPS of risk that phone hacking warrants could be unlawful

A senior lawyer told the Crown Prosecution Service (CPS) that there was a “substantial risk” that police warrants to obtain messages from the encrypted mobile phone network, EncroChat, would... Read more »
Subscribe to our Newsletter