NCSC Feed

An NCSC assessment that examines current AI-enabled threat trends and projections of the threat landscape to 2028.

The NCSC warns that ‘tech on the cheap’ has left UK organisations exposed to AI uncovering and exploiting longstanding cyber security weaknesses and calls for urgent investment in resilience.

How industry, the NCSC and the FCA worked together to help organisations share information while protecting market integrity

Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619).

A revolution is underway at the intersection of AI and cyber security.

The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.

Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.

We're looking to hear from people involved in evaluating, selecting or adopting EASM.

Joint advisory with international partners highlights malicious targeting of organisations from a range of sectors across the globe.

ASOS has said it is investigating a cyber incident and that some customer personal information may have been accessed.

The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.

Defenders can’t use AI in the same way attackers can, but there’s much they can do to unlock the potential of agentic cyber defence.

Adversary simulation ('red teaming') tests your ability to prevent, detect and respond to cyber attacks.

Our view of good cyber adversary simulation – and how assured providers can deliver it.

Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.

UK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware.

Understanding why staff use unapproved AI tools is key to managing the security challenges they can create.

Owners of operational technology encouraged to address avoidable vulnerabilities, and build long-term cyber resilience.

Use safeguards, sandboxing and active oversight to realise the benefits of autonomous systems while limiting the unintended activity.

Using a PIN mitigates many BitLocker vulnerabilities. Make sure you’re ready for the next one...