UK National Cyber Security Centre Blog

Owners of operational technology encouraged to address avoidable vulnerabilities, and build long-term cyber resilience.

Use safeguards, sandboxing and active oversight to realise the benefits of autonomous systems while limiting the unintended activity.

Using a PIN mitigates many BitLocker vulnerabilities. Make sure you’re ready for the next one…

The NCSC wants to collaborate with organisations developing technologies and approaches for secure, resilient and deployable private 5G

New guidance is the first content authored by the Industrial Control System COI to appear on ncsc.gov.uk.

A statement from Ollie Whitehouse, Chief Technology Officer at the NCSC, on AI security following recent incidents.

Progress is being made, but too many network devices still remain difficult to investigate after compromise

A highly disruptive incident can feel overwhelming. New guidance provides a framework for response and recovery.

GCHQ’s National Cyber Security Centre and international partners issue warning as ‘LAUNDRY BEAR’ cyber threat group exposed for targeted phishing campaign

No organisation can navigate the migration alone; key takeaways from our first PQC migration workshop.

Cyber Advisors are offering free 30-minute consultations to help small businesses get started with cyber security.

New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers

An alternative path to Cyber Essentials Plus certification, without compromising the integrity of the scheme. 

Why the UK is pioneering an initiative to develop a national scale, sovereign defence capability

Pen testers suggest what organisations can do to make their job more difficult.

Five Eyes cyber security agencies urge organisations to act on rapidly transforming cyber risk.

Different code deserves different levels of oversight, so calibrate your approach to ‘vibe coding’ accordingly.

Organisations using Fortinet services are being urged to take action following a campaign affecting firewalls and VPN gateways.

Dr Richard Horne highlighted the scale of cyber threats against the UK’s critical infrastructure at RUSI’s Annual Security Lecture.

Attackers are compromising open-source packages to spread malware. Cyber defenders are asked to review dependencies to reduce risks