Security News

Harriet Harman, chair of the UK's Joint Committee on Human Rights and former Labour Deputy Leader, has redoubled calls on the British government to ensure any COVID-19 contact-tracing app sufficiently protects users' privacy. "We don't want the system to rely on the individual integrity of any minister, or any ministerial team, or any government. That's not the way to protect rights. The way to have protections is through law," Harman said.

Harriet Harman, chair of the UK's Joint Committee on Human Rights and former Labour Deputy Leader, has redoubled calls on the British government to ensure any COVID-19 contact-tracing app sufficiently protects users' privacy. "We don't want the system to rely on the individual integrity of any minister, or any ministerial team, or any government. That's not the way to protect rights. The way to have protections is through law," Harman said.

A broad-based campaign group has written to UK health secretary Matt Hancock calling for greater openness in the government's embrace of private-sector tech companies contracted to provide a data store and dashboards as part of the NHS response to the COVID-19 outbreak. Campaign groups including Liberty, openDemocracy and Privacy International have now written to Hancock saying that promises of openness about the role of multiple private-sector tech firms in handling the health data of millions of UK citizens have not been fulfilled.

A broad-based campaign group has written to UK health secretary Matt Hancock calling for greater openness in the government's embrace of private-sector tech companies contracted to provide a data store and dashboards as part of the NHS response to the COVID-19 outbreak. Campaign groups including Liberty, openDemocracy and Privacy International have now written to Hancock saying that promises of openness about the role of multiple private-sector tech firms in handling the health data of millions of UK citizens have not been fulfilled.

A card-skimming Magecart malware infection lingered on a British outdoor clothing retailer's website without detection for nearly eight months despite regular security scans. The warning continued: "This code copied card details entered, destined for PayPal and additionally sent them on to the attacker's server. The data transferred was name, address, card number and CVV code."

A card-skimming Magecart malware infection lingered on a British outdoor clothing retailer's website without detection for nearly eight months despite regular security scans. The warning continued: "This code copied card details entered, destined for PayPal and additionally sent them on to the attacker's server. The data transferred was name, address, card number and CVV code."

An important middleman in the UK's electrical power grid has suffered a cyber attack, though the lights are still on across good old Blighty. Elexon, which reconciles electricity supply to the National Grid and issues bills for undersupply or oversupply, was struck by what appears to be a partially contained ransomware attack, judging by its effects on the company's operations.

Elexon, a company involved in the management of the electricity market in the United Kingdom, has been hit by a cyberattack that impacted its internal IT systems. Elexon manages the Balancing and Settlement Code on behalf of the electricity sector in the UK. The BSC defines the rules and governance for the balancing mechanism and imbalance settlement processes of electricity in Britain.

Hosted by the University of Edinburgh and packing 118,080 processing cores running on a Cray XC30, the ARCHER supercomputer is the primary academic research supercomputer in the UK. The ARCHER Service was started in November 2013. On May 11, 2020, the team behind ARCHER disabled access to the service due to a "Security exploitation" on its login nodes.

- the world's largest nonprofit association of certified cybersecurity professionals - announced that the Certified Information Systems Security Professional certification has been found comparable to Level 7 of the Regulated Qualifications Framework in the UK, denoting that the certification is comparable to Masters degree standard. The benchmarking of the CISSP was conducted by UK NARIC, the UK's designated national agency responsible for providing information and expert guidance on academic, vocational and professional qualifications from across the world.