IT for retail and logistics

NCSC sets out how to build cyber safe cultures

The UK’s National Cyber Security Centre has published guidance for security teams and leaders on how to foster accessible and appropriate cyber security cultures in their organisations Continue Reading

By

• Alex Scroxton, Security Editor

Fortifying the future: The pivotal role of CISOs in AI operations

The Security Think Tank considers how CISOs can best plan to facilitate the secure running of AI and Gen AI-based initiatives and ensure employees do not inadvertently leak data or make bad decisions. Continue Reading

By

• Aditya K Sood, Aryaka

Preparing for AI: The CISO’s role in security, ethics and compliance

The Security Think Tank considers how CISOs can best plan to facilitate the secure running of AI and Gen AI-based initiatives and ensure employees do not inadvertently leak data or make bad decisions. Continue Reading

By

• Elliott Wilkes, ACDS

The hidden security risks of open source AI

The Security Think Tank considers how CISOs can best plan to facilitate the secure running of AI and Gen AI-based initiatives and ensure employees do not inadvertently leak data or make bad decisions. Continue Reading

By

• Brian Fox, Sonatype

AI security: Balancing innovation with protection

The Security Think Tank considers how CISOs can best plan to facilitate the secure running of AI and Gen AI-based initiatives and ensure employees do not inadvertently leak data or make bad decisions. Continue Reading

By

• Javvad Malik, KnowBe4

How cyber security professionals are leveraging AWS tools

It’s now essential for IT security teams to have oversight of cloud computing, and AWS offers a plethora of tools to make managing it easier. Find out how cyber pros are using them in the wild Continue Reading

By

• Nicholas Fearn

Signalgate is a signal to revisit security onboarding and training

A leak of information on American military operations caused a major political incident in March 2025. The Security Think Tank considers what can CISOs can learn from this potentially fatal error. Continue Reading

By

• Mike Gillespie and Ellie Hurst, Advent IM

Post Office slammed after deleting social media comments on IT scandal

Post Office accused of suppressing the views of victims of the Horizon scandal by deleting comments on social media platforms Continue Reading

By

• Bill Curtis

Armed forces charity steps in to address cyber mental health crisis

CIISec and military charity PTSD Resolution hope to address a gathering mental health crisis among frontline cyber professionals Continue Reading

By

• Alex Scroxton, Security Editor

Preparation and appreciation – the human factor in incident response

A typical incident response effort is highly technical, so where do soft skills come in and how do you know how effective your team is? We look at a measurement option and the human consideration in these scenarios Continue Reading

By

• Dan Raywood

What are the best practices for securing AWS tech stacks?

An AWS tech stack can aid business growth and facilitate efficient operations, but misconfigurations have become all too common and stall this progress Continue Reading

By

• Nicholas Fearn

Microsoft raises posse to target dangerous Lumma malware

Microsoft, along with a consortium of partners, has seized and disrupted a significant part of the Lumma malware-as-a-service network used to steal data and funds Continue Reading

By

• Alex Scroxton, Security Editor

HMRC begins escape from Fujitsu’s grip through £500m contract

HMRC looking for a supplier to support its planned exit from three Fujitsu datacentre contracts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

M&S cyber attack disruption likely to last until July

M&S says it has moved into recovery mode after a ransomware attack, but expects some disruption to persist throughout the coming weeks Continue Reading

By

• Alex Scroxton, Security Editor

NCSC: Russia’s Fancy Bear targeting logistics, tech organisations

The NCSC and its partner agencies have blown the whistle on an extensive campaign of malicious cyber attacks orchestrated by the Russian state Fancy Bear operation Continue Reading

By

• Alex Scroxton, Security Editor

Fujitsu raked in £80m from HMRC in March alone, despite Post Office scandal

HM Revenue & Customs described as a UK ‘cash cow’ for the Japanese IT giant at the centre of the Post Office Horizon scandal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Ransomware attacks dropped by a third last month

Reported ransomware attacks eased off during April following a dramatic spike in the first quarter of 2025 Continue Reading

By

• Alex Scroxton, Security Editor

Botched Post Office IT projects continue to drain public purse

Millions more pounds of public money spent by the Post Office as a result of an IT error that exposed the personal details of Horizon victims Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Retail cyber attacks hit food distributor Peter Green Chilled

Cold chain services provider Peter Green Chilled, which supplies the likes of Aldi, Sainsbury’s and Tesco, has been forced to halt operations after succumbing to a ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Post Office Horizon scandal explained: Everything you need to know

Computer Weekly has investigated the Post Office Horizon scandal since 2008 and is, in fact, part of the story. This guide contains essential information about the scandal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office performs costly 30-year U-turn on Horizon

Post Office Horizon replacement magnifies missed opportunity as move from the controversial Horizon system to an off-the-shelf alternative is going back to a plan it rejected in the 1990s Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Mid-career professionals must learn to understand and use AI as GenAI tips balance

Whether in the finance, IT or legal sectors, artificial intelligence will change the way businesses operate and how their people work Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office scandal inquiry to publish first findings this summer

Inquiry announces that findings on compensation and human impact will be presented in the next few months Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Scattered Spider retail attacks spreading to US, says Google

Google’s threat intel analysts are aware of a number of in-progress cyber attacks against US retailers linked to the same Scattered Spider gang that supposedly attacked M&S and Co-op in the UK Continue Reading

By

• Alex Scroxton, Security Editor

May Patch Tuesday brings five exploited zero-days to fix

Microsoft fixes five exploited, and two publicly disclosed, zero-days in the fifth Patch Tuesday update of 2025 Continue Reading

By

• Alex Scroxton, Security Editor

M&S forces customer password resets after data breach

M&S is instructing all of its customers to change their account passwords after a significant amount of data was stolen in a DragonForce ransomware attack Continue Reading

By

• Alex Scroxton, Security Editor

Controversial Post Office Horizon system could stay until 2033

Post Office seeks off-the-shelf Horizon replacement as part of £492m tender that includes ongoing support for Horizon up to 2033 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Evidence reveals Post Office scandal victims short-changed in compensation payouts

Subpostmasters who appealed compensation payments have significantly increased ‘worryingly undervalued’ settlements Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Chaos spreads at Co-op and M&S following DragonForce attacks

No end is yet in sight for UK retailers subjected to apparent ransomware attacks Continue Reading

By

• Alex Scroxton, Security Editor

Oxford Uni adds cyber resilience module to MBA programme

Oxford University’s Saïd Business School is working with cyber response specialist Sygnia to help future business leaders get on top of security Continue Reading

By

• Alex Scroxton, Security Editor

UK hands Indian IT suppliers competitive boost in trade deal

Trade deal will exempt IT workers from India from paying National Insurance contributions for three years Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Beyond the hook: How phishing is evolving in the world of AI

Phishing attacks are evolving. Gone are the days of clumsy, error-ridden emails that were easy to spot – today’s campaigns harness advanced techniques to bypass even the latest defences. A new approach is needed Continue Reading

By

• Isla Sibanda

Security Think Tank: What CISOs can learn from Signalgate

A leak of information on American military operations caused a major political incident in March 2025. The Security Think Tank considers what can CISOs can learn from this potentially fatal error. Continue Reading

By

• Javvad Malik, KnowBe4

Retail cyber crime spree a ‘wake-up call’, says NCSC CEO

The National Cyber Security Centre confirms it is providing assistance to M&S, Co-op and Harrods as concerns grow among UK retailers Continue Reading

By

• Alex Scroxton, Security Editor

Explaining what’s happening in a cyber attack is hard but crucial

The recent attacks on Marks and Spencer, Harrods and the Co-op show why it is essential for organisations to have a strategy to communicate effectively with customers affected Continue Reading

By

• Mikey Hoare, Kekst CNC

Harrods becomes latest UK retailer to fall victim to cyber attack

Harrods confirms it is the latest UK retailer to experience a cyber attack, shutting off a number of systems in an attempt to lessen the impact Continue Reading

By

• Alex Scroxton, Security Editor

Signalgate: Learnings for CISOs securing enterprise data

A leak of information on American military operations caused a major political incident in March 2025. The Security Think Tank considers what CISOs can learn from this potentially fatal error Continue Reading

By

• Todd Thiemann, Principal Analyst

Co-op instructs staff to be wary of lurking hackers

Co-op tells staff to stop using their VPNs and be wary that their communications channels may be being monitored, as a cyber attack on the organisation continues to develop Continue Reading

By

• Alex Scroxton, Security Editor

Progress made on government’s Post Office Capture redress, but concerns remain

Latest meeting between campaigners and business department seen as positive, but frustration and concerns remain Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The year of the ESL in UK retail

Multiple forces combining to make the electronic shelf label one of the more sought-after items to add to retailers’ tech stacks Continue Reading

By

• Ben Sillitoe

Current SaaS delivery model a risk management nightmare, says CISO

JPMorgan Chase security chief Patrick Opet laments the state of SaaS security in an open letter to the industry and calls on software providers to do more to enhance resilience Continue Reading

By

• Alex Scroxton, Security Editor

Co-op shuts off IT systems to contain cyber attack

A developing cyber incident at Co-op has forced the retailer to pull the plug on some of its IT systems as it works to contain the attack Continue Reading

By

• Alex Scroxton, Security Editor

Scattered Spider on the hook for M&S cyber attack

The infamous Scattered Spider hacking collective may have been behind the ongoing cyber attack on Marks and Spencer that has crippled systems at the retailer and left its ecommerce operation in disarray. Continue Reading

By

• Alex Scroxton, Security Editor

Fujitsu UK staff will get bonus despite Post Office scandal fallout

Employees will receive bonuses as Fujitsu UK reaches sales target - suggesting that its pause on bidding for public sector business has had limited impact Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

M&S suspends all online sales as cyber attack worsens

M&S shuts down online sales as it works to contain and mitigate a severe cyber attack on its systems Continue Reading

By

• Alex Scroxton, Security Editor

M&S systems remain offline days after cyber incident

M&S is still unable to provide contactless payment or click-and-collect services amid a cyber attack that it says has forced it to move a number of processes offline to safeguard its customers, staff and business Continue Reading

By

• Alex Scroxton, Security Editor

Challenges persist as UK’s Cyber Security and Resilience Bill moves forward

Elements of the Cyber Security and Resilience Bill are welcome but questions remain about how best to act in the face of persistent challenges like geopolitical chaos, threats to critical infrastructure, and technological advances Continue Reading

By

• James Morris, CSBR

March ransomware slowdown probably a red herring

An apparent slowdown in ransomware attack volumes is raising eyebrows, but the statistics never tell the full story Continue Reading

By

• Alex Scroxton, Security Editor

Rethink authentication to remove the burden on users

The rise of AI powered threats and non-human identities will push an already strained identity security model over the edge Continue Reading

By

• Patrick Wardrop, IBM

Cyber attack downs systems at Marks & Spencer

A cyber attack at Marks & Spencer has caused significant disruption to customers, leaving them unable to make contactless payments or use click-and-collect services Continue Reading

By

• Alex Scroxton, Security Editor

Beyond baselines - getting real about security and resilience

In an increasingly contested world, the UK government needs a security certification that goes beyond baseline measures. Continue Reading

By

• Neil Ashdown and Tash Buckley

CW Innovation Awards: Finding revenue gains from parked cars

Singapore real estate investment firm CapitaLand Investment taps machine learning models to optimise space utilisation across 23 commercial buildings and business parks Continue Reading

By

• Eileen Yu

Tariff turmoil is making supply chain security riskier

Many businesses around the world are taking the decision to alter their supplier mix in the face of tariff uncertainty, but in doing so are creating more cyber risks for themselves, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

Saudi Arabia struggling to reach global leadership in deeptech

Petrostate monarchy trying to build surrogate industry made of foreign startups because own ecosystem is too immature Continue Reading

By

• Mark Ballard

Hertz warns UK customers of Cleo-linked data breach

Car hire giant Hertz reveals UK customer data was affected in a cyber incident orchestrated via a series of vulnerabilities in Cleo managed file transfer products Continue Reading

By

• Alex Scroxton, Security Editor

Computer and law experts respond to call for opinions on computer evidence

IT and legal experts have made submissions to a government consultation on the use of computer evidence in court Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

More than 100 Horizon victims are challenging Post Office offers on complex claims

Calls for advanced dispute resolution meetings by victims of the Post Office Horizon system have been ignored by the Department of Business and Trade Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Mattel taps into Google Cloud to accelerate product innovation in response to customer feedback

Barbie doll manufacturer Mattel reveals how leaning on Google Cloud has enabled it to respond to customer feedback quicker and speed up its product development processes Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Post Office gets extra £136m towards tech transformation as clock ticks on Horizon

Latest handout means government has given the Post Office more than a quarter of a billion pounds in ‘further’ funding, with half destined to support its technology transformation Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Spoofing vuln threatens security of WhatsApp Windows users

Meta has disclosed and patched a potentially dangerous spoofing flaw in WhatsApp for Windows that could have caused big problems for unwitting users Continue Reading

By

• Alex Scroxton, Security Editor

It’s time to stop the victim-blaming and insist on safer software

Businesses spend too much time and money protecting themselves against flaws and vulnerabilities in modern software products, when they ought to raise their expectations and insist on better solutions from providers Continue Reading

By

• Mandy Andress, Elastic

Post Office can’t find evidence for over 1,000 Horizon scandal redress claimants

The Post Office has no evidence of errors for more than 1,000 subpostmasters applying for compensation through the Horizon Shortfall Scheme Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Taking a ‘good enough’ approach with cloud security isn't enough

In the wake of the January 2025 'Codefinger' attacks against AWS S3 users, Thales Rob Elliss argues that many organisations are dropping the ball when it comes to their understanding of cloud security best practice Continue Reading

By

• Rob Ellis, Thales

Virtual reality enterprise journey a marathon, not a sprint

IT supplier is using virtual reality in not-for-profit projects that demonstrate its wider potential Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UKtech50 2025 – help us find the most influential people in UK IT

Computer Weekly’s annual search for the 50 most influential people in UK IT is on – let us know who you would like to nominate for this year's list Continue Reading

By

• Lis Evenstad

Bridging Borders: The rise of Ukrainian-British tech collaboration

The IT sectors of the UK and Ukraine have built strong relationships since Russia’s invasion of the latter, and there is more to come, writes the IT Ukraine Association’s ambassador in the UK Continue Reading

By

• Alexandra Govorukha

Gmail ‘bubble’ encryption may be an S/MIME killer, says Google

Marking the 21st anniversary of Gmail, Google is preparing to roll out an end-to-end encryption standard for its email service in hopes of democratising encryption and leaving old standards in the dust Continue Reading

By

• Alex Scroxton, Security Editor

Post Office Capture and Ecco+ users asked to make contact with Scottish statutory body

Scottish statutory body attempting to contact people that might have been wrongly convicted of crimes based on the Post Office’s flawed systems Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Scottish support group for Post Office scandal victims launched

Support group calls on former subpostmasters in Scotland who have been affected by Horizon errors to come forward Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Inside Amazon’s robot-powered warehouse

In this week’s Computer Weekly, we go behind the scenes at Amazon’s robot-powered Swindon warehouse to see how AI and humans are working together. We examine the state of open source licensing and find out how it’s affecting datacentre operators. And we visit a 130-year-old wine and drinks company to find out how technology has brought operations into the modern age. Read the issue now. Continue Reading

Countering nation-state cyber espionage: A CISO field guide

The rise of DeepSeek has prompted the usual well-documented concerns around AI, but also raised worries about its potential links to the Chinese state. The Security Think Tank considers the steps security leaders can take to counter threats posed by nation state industrial espionage? Continue Reading

By

• Andrew Hodges, Quorum Cyber

Experts question court’s rejection of former Post Office manager’s Horizon appeal

Experts on the use of computer evidence question why Court of Appeal rejected former Post Office branch manager’s appeal against conviction Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Kroll reviewing Post Office Horizon’s current integrity and discrepancy identification

The Post Office appoints third party to review Horizon following concerns about current version of the system Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

MPs demand government reconsider response to Post Office compensation report

Select committee calls on government to ‘reflect and revise’ response to Post Office scandal compensation scheme Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

NCSC, DSIT enlist IBM to spearhead cyber diversity agenda

IBM signs on to a partnership deal in support of the popular NCSC CyberFirst Girls scheme designed to foster gender diversity in the cyber security profession Continue Reading

By

• Alex Scroxton, Security Editor

Dutch workforce faces radical transformation as AI adoption accelerates

While the Netherlands leads Europe in AI adoption, a deeper analysis of the labour market reveals a more nuanced narrative than the apocalyptic predictions of job losses Continue Reading

By

• Kim Loohuis

NCSC proposes three-step plan to move to quantum-safe encryption

The NCSC urges service providers, large organisations and critical sectors to start thinking today about how they will migrate to post-quantum cryptography over the next decade Continue Reading

By

• Alex Scroxton, Security Editor

Government considering redress scheme for families of Post Office scandal victims

Campaign group brings together the children of subpostmasters to meet Post Office minister to discuss redress for their suffering Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Clop resurgence drives ransomware attacks in February

The exploitation of two new vulnerabilities in a popular file transfer service saw the Clop ransomware gang soar in February, according to NCC Continue Reading

By

• Alex Scroxton, Security Editor

Former subpostmaster to sue Post Office and Fujitsu for judgment ‘obtained by fraud’

Lee Castleton, one of a group of seven former subpostmasters who began the fight against the Post Office in 2009, triggers ‘seismic’ shift in Post Office scandal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Seaco charts course for unified security strategy

Shipping container leasing giant consolidates security tools onto a single platform, leveraging AI and extended detection and response to improve security operations Continue Reading

By

• Aaron Tan, Informa TechTarget

How CISOs can counter the threat of nation state espionage

The rise of DeepSeek has prompted the usual well-documented concerns around AI, but also raised worries about its potential links to the Chinese state. The Security Think Tank considers the steps security leaders can take to counter threats posed by nation state industrial espionage? Continue Reading

By

• Elisabeth Mackay, PA Consulting

Minister asks for evidence of Post Office ECCO+ system problems

Subpostmaster federation is calling on former Post Office crown branch staff to come forward if they experienced problems with ECCO+ Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

SuperBlack ransomware may have ties to LockBit

Forescout researchers report on a new ransomware gang that appears to be keeping the legacy of the notorious LockBit crew alive Continue Reading

By

• Alex Scroxton, Security Editor

March Patch Tuesday brings 57 fixes, multiple zero-days

The third Patch Tuesday of 2025 brings fixes for 57 flaws and a hefty number of zero-days Continue Reading

By

• Alex Scroxton, Security Editor

Perimeter security appliances source of most ransomware hits

Perimeter security appliances and devices, particularly VPNs, prove to be the most popular entry points into victim networks for financially motivated ransomware gangs, according to reports Continue Reading

By

• Alex Scroxton, Security Editor

Post Office scandal data leak interim compensation offers made

Some subpostmasters affected by Post Office data breach offered interim compensation payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Innovation strategy continues to deliver for Co-op

Co-op Food innovation strategy ramps up as it launches rapid delivery grocery app to support independent retailers to serve online customers faster Continue Reading

By

• Ben Sillitoe

Government announcement on Fujitsu talks add ‘vague words’ and no interim payment

Peer James Arbuthnot says he is ‘disappointed’ that there was no mention of an interim payment in announcement of government’s latest talks with Fujitsu Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Behind the scenes at Amazon UK’s robotic-powered warehouse

Robots, automation, artificial intelligence and people power – Computer Weekly tours the tech-heavy Amazon warehouse in Swindon Continue Reading

By

• Ben Sillitoe

Norway says ‘no way’ to global financial crime

Oslo’s startup ecosystem is fighting back against cyber criminals with tech to wipe out attacks rather than just detect them Continue Reading

By

• Matthew Staff

CFIT publishes blueprint for digital company business IDs

Plan to increase the use of digital identities by businesses could add billions of pounds to UK economy through compliance savings and reduced fraud Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Metropolitan Police concern puts brakes on Post Office Horizon data migration

The Post Office has paused its project to migrate all Horizon data from Fujitsu systems to its own while in discussions with Metropolitan Police Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Post Office makes first official apology to Capture users

The Post Office has written to former Capture user Ken Tooby to apologise for its failings which devastated his family’s lives Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

'Positive steps' in redress for Post Office Capture victims

Lawyers say progress has been made in efforts to provide financial redress and justice for former users of the Post Office's flawed Capture system Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Peer demands Fujitsu cough up £300m interim payment towards Post Office scandal bill

Kevan Jones tells fellow peers in the House of Lords that Fujitsu should also be barred from bidding for public sector contracts Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Secure software: Third-party suppliers your first-party risk

Outgoing CISA chief Jen Easterly called on buyers to demand better security standards from their software suppliers. The Security Think Tank considers what better means, and what best practice for secure software procurement looks like in 2025 Continue Reading

By

• Ejona Preci, Lindal Group

CVE volumes head towards 50,000 in 2025, analysts claim

Many trends, notably a big shift to open source tools, are behind an expected boom in the number of disclosed vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

CISOs spending more on insider risk

Insider risk management budgets have more than doubled in the past 12 months and look set to grow further still in 2025, according to a report Continue Reading

By

• Alex Scroxton, Security Editor

A landscape forever altered? The LockBit takedown one year on

The NCA-led takedown of the LockBit ransomware gang in February 2024 heralded a transformative year in the fight against cyber crime. One year on, we look back at Operation Cronos and its impact Continue Reading

By

• Alex Scroxton, Security Editor