UK National Cyber Security Centre Blog

Attackers are compromising open-source packages to spread malware. Cyber defenders are asked to review dependencies to reduce risks

New guidance explains how to design Zero Trust Network Access architectures aligned with zero trust principles and not built on old trust assumptions.

When it comes to using agentic AI, make sure you can walk before you run.

Using Artificial Intelligence to find vulnerabilities can bring added security considerations.

Organisations must act now to prepare for a wave of patches that will address decades of technical debt.

Poor metrics can render a well-intentioned security operation centre entirely ineffective.

New advisory highlights how to defend against attacker tactics believed to be used by China-linked actors to hide malicious cyber activity.

Passkeys are the more secure and user-friendly login method and should be the default authentication option for consumers.

Passkeys offer a more usable, secure replacement for passwords and are already supported by most modern devices.

Explaining the widespread shift in tactics, techniques and procedures (TTPs) towards networks of compromised infrastructure, and how to defend against it

Organisations should map and baseline their edge device traffic, especially VPN and remote access connections, and adopt dynamic threat feed filtering that includes known covert network indicators.

Adopting AI will require time, the development of new capabilities and careful oversight. 

SilentGlass, a plug-and-play device, actively blocks any unexpected or malicious HDMI and Display Port connections.

Ensuring cross domain technologies are better understood – and more easily deployed – across sectors.

As the technology landscape develops, the definition of cyber security is expanding with it.

A call to action to collectively build UK resilience.

How the NCSC is reducing risk, improving detection, and helping to keep vital services running.

As AI accelerates vulnerability discovery, organisations must raise their security baselines to safeguard their cyber security.

Russian cyber actor APT28 exploit vulnerable routers to hijack DNS, enabling adversary‑in‑the‑middle attacks and theft of passwords and authentication tokens.

New advisory warns cyber threat group APT28 have exploited vulnerable edge devices to support malicious operations.