Using a PIN mitigates many BitLocker vulnerabilities. Make sure you’re ready for the next one…

The NCSC wants to collaborate with organisations developing technologies and approaches for secure, resilient and deployable private 5G

New guidance is the first content authored by the Industrial Control System COI to appear on ncsc.gov.uk.

Progress is being made, but too many network devices still remain difficult to investigate after compromise

A highly disruptive incident can feel overwhelming. New guidance provides a framework for response and recovery.

GCHQ’s National Cyber Security Centre and international partners issue warning as ‘LAUNDRY BEAR’ cyber threat group exposed for targeted phishing campaign

No organisation can navigate the migration alone; key takeaways from our first PQC migration workshop.

Cyber Advisors are offering free 30-minute consultations to help small businesses get started with cyber security.

New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers

An alternate path to Cyber Essentials Plus certification, without compromising the integrity of the scheme.

Why the UK is pioneering an initiative to develop a national scale, sovereign defence capability

Pen testers suggest what organisations can do to make their job more difficult.

Organisations using Fortinet services are being urged to take action following a campaign affecting firewalls and VPN gateways.

Different code deserves different levels of oversight, so calibrate your approach to ‘vibe coding’ accordingly.

Dr Richard Horne highlighted the scale of cyber threats against the UK’s critical infrastructure at RUSI’s Annual Security Lecture.

Attackers are compromising open-source packages to spread malware. Cyber defenders are asked to review dependencies to reduce risks

New guidance explains how to design Zero Trust Network Access architectures aligned with zero trust principles and not built on old trust assumptions.

When it comes to using agentic AI, make sure you can walk before you run.

Using Artificial Intelligence to find vulnerabilities can bring added security considerations.

Organisations must act now to prepare for a wave of patches that will address decades of technical debt.

Poor metrics can render a well-intentioned security operation centre entirely ineffective.

Adopting AI will require time, the development of new capabilities and careful oversight. 

Explaining the widespread shift in tactics, techniques and procedures (TTPs) towards networks of compromised infrastructure, and how to defend against it

New advisory highlights how to defend against attacker tactics believed to be used by China-linked actors to hide malicious cyber activity.

Organisations should map and baseline their edge device traffic, especially VPN and remote access connections, and adopt dynamic threat feed filtering that includes known covert network indicators.

Passkeys are the more secure and user-friendly login method and should be the default authentication option for consumers.

Passkeys and other FIDO2 credentials offer a more usable, secure replacement for passwords and are already supported by most modern devices.

SilentGlass, a plug-and-play device, actively blocks any unexpected or malicious HDMI and Display Port connections.

As the technology landscape develops, the definition of cyber security is expanding with it.

Ensuring cross domain technologies are better understood – and more easily deployed – across sectors.

A call to action to collectively build UK resilience.

How the NCSC is reducing risk, improving detection, and helping to keep vital services running.

A step change in frontier AI models’ capabilities to find vulnerabilities in code can ultimately be a good thing for our cyber security.

New advisory warns cyber threat group APT28 have exploited vulnerable edge devices to support malicious operations.

Russian cyber actor APT28 exploit vulnerable routers to hijack DNS, enabling adversary‑in‑the‑middle attacks and theft of passwords and authentication tokens.

The NCSC has issued actions for individuals at risk of targeted attacks against messaging apps.

The NCSC is encouraging UK organisations to mitigate an unauthenticated remote code execution vulnerability affecting F5 BIG-IP Access Policy Manager.

Understanding the threats and staying ahead of the adversary

UK organisations encouraged to take immediate action to mitigate two recently disclosed vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway.

Dr Richard Horne delivered a keynote about cyber risks and opportunities at the RSA Conference in San Francisco

If ‘vibe coding’ disrupts the software market like SaaS did 20 years ago, what does this mean for cyber security?

CYBERUK will be delivered by the NCSC and sponsors across four distinct tracks of activity: Resilience, Technology, Threat, and Ecosystem.

In response to the evolving events in the Middle East, the NCSC is advising that UK organisations review their cyber security posture.

Agencies strongly encourage immediate investigation of potential compromise of Cisco Catalyst SD-WAN.