UK National Cyber Security Centre Blog

Adopting AI will require time, the development of new capabilities and careful oversight. 

Organisations should map and baseline their edge device traffic, especially VPN and remote access connections, and adopt dynamic threat feed filtering that includes known covert network indicators.

Passkeys offer a more usable, secure replacement for passwords and are already supported by most modern devices.

New advisory highlights how to defend against attacker tactics believed to be used by China-linked actors to hide malicious cyber activity.

Passkeys are the more secure and user-friendly login method and should be the default authentication option for consumers.

Explaining the widespread shift in tactics, techniques and procedures (TTPs) towards networks of compromised infrastructure, and how to defend against it

SilentGlass, a plug-and-play device, actively blocks any unexpected or malicious HDMI and Display Port connections.

Ensuring cross domain technologies are better understood – and more easily deployed – across sectors.

As the technology landscape develops, the definition of cyber security is expanding with it.

A call to action to collectively build UK resilience.

How the NCSC is reducing risk, improving detection, and helping to keep vital services running.

As AI accelerates vulnerability discovery, organisations must raise their security baselines to safeguard their cyber security.

Russian cyber actor APT28 exploit vulnerable routers to hijack DNS, enabling adversary‑in‑the‑middle attacks and theft of passwords and authentication tokens.

New advisory warns cyber threat group APT28 have exploited vulnerable edge devices to support malicious operations.

The NCSC has issued actions for individuals at risk of targeted attacks against messaging apps.

The NCSC is encouraging UK organisations to mitigate an unauthenticated remote code execution vulnerability affecting F5 BIG-IP Access Policy Manager.

Understanding the threats and staying ahead of the adversary

UK organisations encouraged to take immediate action to mitigate two recently disclosed vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway.

If ‘vibe coding’ disrupts the software market like SaaS did 20 years ago, what does this mean for cyber security?

Dr Richard Horne delivered a keynote about cyber risks and opportunities at the RSAC Conference in San Francisco