NCSC Feed

Activities which organisations must carry out to migrate safely to post-quantum cryptography in the coming years.

Why the key milestones for PQC migration are part of building and maintaining good cyber security practice.

NCSC Technical Director Dr Ian Levy explains the technical impact of the recent US sanctions on the security of Huawei equipment in the UK.

With 5G set to transform mobile services, Ian Levy explains how the UK has approached telecoms security, and what that means for the future.

Cyber security – even in a time of global unrest – remains a balance of different risks. Ian Levy, the NCSC's Technical Director, explains why.

NCSC Technical Director Dr Ian Levy explains how the security analysis behind the DCMS supply chain review will ensure the UK’s telecoms networks are secure – regardless of the vendors used.

Ian Levy, the NCSC’s departing Technical Director, discusses life, the universe, and everything.

The NCSC's technical director outlines the challenges that TLS 1.3 presents for enterprise security.

Why established cyber security principles are still important when developing or implementing machine learning models.

...or 'Why do people leave sensitive data in unprotected AWS S3 buckets?'

Applying patches may be a basic security principle, but that doesn't mean it's always easy to do in practice.

Join the Industrial Control System Community of Interest (ICS COI), and help build CNI expertise across the UK.

By exploiting cloud services, organisations no longer have to choose between ‘more security’ and ‘better usability’.

Why the NCSC decided to advise against this long-established security guideline.

Whilst not a password panacea, using 'three random words' is still better than enforcing arbitrary complexity requirements.

Chris Ensor highlights some important elements of the NCSC's new Technology Assurance strategy.

Latest version of the CAF focusses on clarification and consistency between areas of the CAF.

Reflecting on the positive impact of the Vulnerability Reporting Service – and introducing something new for selected contributors.

The NCSC now uses 'allow list' and 'deny list' in place of 'whitelist' and 'blacklist'. Emma W explains why...

Why organisations should avoid ‘blame and fear’, and instead use technical measures to manage the threat from phishing.