NCSC Feed

A highly disruptive incident can feel overwhelming. New guidance provides a framework for response and recovery.

GCHQ’s National Cyber Security Centre and international partners issue warning as ‘LAUNDRY BEAR’ cyber threat group exposed for targeted phishing campaign

No organisation can navigate the migration alone; key takeaways from our first PQC migration workshop.

Cyber Advisors are offering free 30-minute consultations to help small businesses get started with cyber security.

New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers

An alternative path to Cyber Essentials Plus certification, without compromising the integrity of the scheme. 

Why the UK is pioneering an initiative to develop a national scale, sovereign defence capability

Pen testers suggest what organisations can do to make their job more difficult.

Five Eyes cyber security agencies urge organisations to act on rapidly transforming cyber risk.

Different code deserves different levels of oversight, so calibrate your approach to ‘vibe coding’ accordingly.

Organisations using Fortinet services are being urged to take action following a campaign affecting firewalls and VPN gateways.

Dr Richard Horne highlighted the scale of cyber threats against the UK’s critical infrastructure at RUSI’s Annual Security Lecture.

Attackers are compromising open-source packages to spread malware. Cyber defenders are asked to review dependencies to reduce risks

New guidance explains how to design Zero Trust Network Access architectures aligned with zero trust principles and not built on old trust assumptions.

When it comes to using agentic AI, make sure you can walk before you run.

Using Artificial Intelligence to find vulnerabilities can bring added security considerations.

Organisations must act now to prepare for a wave of patches that will address decades of technical debt.

Poor metrics can render a well-intentioned security operation centre entirely ineffective.

New advisory highlights how to defend against attacker tactics believed to be used by China-linked actors to hide malicious cyber activity.

Explaining the widespread shift in tactics, techniques and procedures (TTPs) towards networks of compromised infrastructure, and how to defend against it