UK National Cyber Security Centre

Defenders can’t use AI in the same way attackers can, but there’s much they can do to unlock the potential of agentic cyber defence.

Our view of good cyber adversary simulation – and how assured providers can deliver it.

Adversary simulation (‘red teaming’) tests your ability to prevent, detect and respond to cyber attacks.

UK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware.

Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.

Understanding why staff use unapproved AI tools is key to managing the security challenges they can create.

Owners of operational technology encouraged to address avoidable vulnerabilities, and build long-term cyber resilience.

Use safeguards, sandboxing and active oversight to realise the benefits of autonomous systems while limiting the unintended activity.

Using a PIN mitigates many BitLocker vulnerabilities. Make sure you’re ready for the next one…

The NCSC wants to collaborate with organisations developing technologies and approaches for secure, resilient and deployable private 5G

New guidance is the first content authored by the Industrial Control System COI to appear on ncsc.gov.uk.

A statement from Ollie Whitehouse, Chief Technology Officer at the NCSC, on AI security following recent incidents.

Progress is being made, but too many network devices still remain difficult to investigate after compromise

A highly disruptive incident can feel overwhelming. New guidance provides a framework for response and recovery.

GCHQ’s National Cyber Security Centre and international partners issue warning as ‘LAUNDRY BEAR’ cyber threat group exposed for targeted phishing campaign

No organisation can navigate the migration alone; key takeaways from our first PQC migration workshop.

Cyber Advisors are offering free 30-minute consultations to help small businesses get started with cyber security.

New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers

An alternative path to Cyber Essentials Plus certification, without compromising the integrity of the scheme. 

Why the UK is pioneering an initiative to develop a national scale, sovereign defence capability