UK National Cyber Security Centre Blog

New proposals will combat the growing threat to UK critical national infrastructure (CNI).

The future of the CyberFirst Girls Competition and reflecting on brilliant progress.

Principles-based guidance for organisations setting up a PAW solution.

Passkeys are the future of authentication, offering enhanced security and convenience over passwords, but widespread adoption faces challenges that the NCSC is working to resolve.

The merits of choosing passkeys over passwords to help keep your online accounts more secure, and explaining how the technology promises to do this

Why the key milestones for PQC migration are part of building and maintaining good cyber security practice.

NCSC Technical Director Dr Ian Levy explains the technical impact of the recent US sanctions on the security of Huawei equipment in the UK.

With 5G set to transform mobile services, Ian Levy explains how the UK has approached telecoms security, and what that means for the future.

Cyber security – even in a time of global unrest – remains a balance of different risks. Ian Levy, the NCSC’s Technical Director, explains why.

NCSC Technical Director Dr Ian Levy explains how the security analysis behind the DCMS supply chain review will ensure the UK’s telecoms networks are secure – regardless of the vendors used.

Ian Levy, the NCSC’s departing Technical Director, discusses life, the universe, and everything.

The NCSC’s technical director outlines the challenges that TLS 1.3 presents for enterprise security.

Why established cyber security principles are still important when developing or implementing machine learning models.

…or ‘Why do people leave sensitive data in unprotected AWS S3 buckets?’

Applying patches may be a basic security principle, but that doesn’t mean it’s always easy to do in practice.

Join the Industrial Control System Community of Interest (ICS COI), and help build CNI expertise across the UK.

By exploiting cloud services, organisations no longer have to choose between ‘more security’ and ‘better usability’.

Why the NCSC decided to advise against this long-established security guideline.

Whilst not a password panacea, using ‘three random words’ is still better than enforcing arbitrary complexity requirements.

Chris Ensor highlights some important elements of the NCSC’s new Technology Assurance strategy.