UK National Cyber Security Centre

Why it’s essential to secure your APIs to build trust with your customers and partners.

Advice on the selection and deployment of Protective Domain Name Systems (DNS).

New proposals will combat the growing threat to UK critical national infrastructure (CNI).

The future of the CyberFirst Girls Competition and reflecting on brilliant progress.

Principles-based guidance for organisations setting up a PAW solution.

Passkeys are the future of authentication, offering enhanced security and convenience over passwords, but widespread adoption faces challenges that the NCSC is working to resolve.

The merits of choosing passkeys over passwords to help keep your online accounts more secure, and explaining how the technology promises to do this

Activities which organisations must carry out to migrate safely to post-quantum cryptography in the coming years.

Why the key milestones for PQC migration are part of building and maintaining good cyber security practice.

NCSC Technical Director Dr Ian Levy explains the technical impact of the recent US sanctions on the security of Huawei equipment in the UK.

With 5G set to transform mobile services, Ian Levy explains how the UK has approached telecoms security, and what that means for the future.

Cyber security – even in a time of global unrest – remains a balance of different risks. Ian Levy, the NCSC’s Technical Director, explains why.

NCSC Technical Director Dr Ian Levy explains how the security analysis behind the DCMS supply chain review will ensure the UK’s telecoms networks are secure – regardless of the vendors used.

Ian Levy, the NCSC’s departing Technical Director, discusses life, the universe, and everything.

The NCSC’s technical director outlines the challenges that TLS 1.3 presents for enterprise security.

Why established cyber security principles are still important when developing or implementing machine learning models.

…or ‘Why do people leave sensitive data in unprotected AWS S3 buckets?’

Applying patches may be a basic security principle, but that doesn’t mean it’s always easy to do in practice.

Join the Industrial Control System Community of Interest (ICS COI), and help build CNI expertise across the UK.

By exploiting cloud services, organisations no longer have to choose between ‘more security’ and ‘better usability’.

Why the NCSC decided to advise against this long-established security guideline.

Whilst not a password panacea, using ‘three random words’ is still better than enforcing arbitrary complexity requirements.

Chris Ensor highlights some important elements of the NCSC’s new Technology Assurance strategy.

Latest version of the CAF focusses on clarification and consistency between areas of the CAF.

Reflecting on the positive impact of the Vulnerability Reporting Service – and introducing something new for selected contributors.

The NCSC now uses ‘allow list’ and ‘deny list’ in place of ‘whitelist’ and ‘blacklist’. Emma W explains why…

Why organisations should avoid ‘blame and fear’, and instead use technical measures to manage the threat from phishing.

ThinkCyber’s CEO Tim Ward reflects on the challenges that startups face when developing innovative products.

Questions to ask your suppliers that will help you gain confidence in their cyber security.

Worked examples for Operational Technology and Virtualised systems, using the NCSC’s secure design principles