UK National Cyber Security Centre Blog

GCHQ’s National Cyber Security Centre and international partners issue warning as ‘LAUNDRY BEAR’ cyber threat group exposed for targeted phishing campaign

No organisation can navigate the migration alone; key takeaways from our first PQC migration workshop.

Cyber Advisors are offering free 30-minute consultations to help small businesses get started with cyber security.

New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers

An alternative path to Cyber Essentials Plus certification, without compromising the integrity of the scheme. 

Why the UK is pioneering an initiative to develop a national scale, sovereign defence capability

Pen testers suggest what organisations can do to make their job more difficult.

Five Eyes cyber security agencies urge organisations to act on rapidly transforming cyber risk.

Organisations using Fortinet services are being urged to take action following a campaign affecting firewalls and VPN gateways.

Different code deserves different levels of oversight, so calibrate your approach to ‘vibe coding’ accordingly.

Dr Richard Horne highlighted the scale of cyber threats against the UK’s critical infrastructure at RUSI’s Annual Security Lecture.

Attackers are compromising open-source packages to spread malware. Cyber defenders are asked to review dependencies to reduce risks

New guidance explains how to design Zero Trust Network Access architectures aligned with zero trust principles and not built on old trust assumptions.

When it comes to using agentic AI, make sure you can walk before you run.

Using Artificial Intelligence to find vulnerabilities can bring added security considerations.

Organisations must act now to prepare for a wave of patches that will address decades of technical debt.

Poor metrics can render a well-intentioned security operation centre entirely ineffective.

Passkeys offer a more usable, secure replacement for passwords and are already supported by most modern devices.

Organisations should map and baseline their edge device traffic, especially VPN and remote access connections, and adopt dynamic threat feed filtering that includes known covert network indicators.

New advisory highlights how to defend against attacker tactics believed to be used by China-linked actors to hide malicious cyber activity.