NCSC Feed

This guidance is aimed at service owners and security specialists involved in the provision of online services.

Good practises for the management of public domain names owned by your organisation.

Can your startup help counter the rise of malicious advertising?

Trial project makes vulnerability scanning easier.

...and that's why we are making some changes. Anne W summarises what they are, and explains the thinking behind them.

An architecture pattern for safely importing data into a system from an external source.

The NCSC now uses 'allow list' and 'deny list' in place of 'whitelist' and 'blacklist'. Emma W explains why...

How to start the journey to zero trust architecture once you have decided it meets your business requirements.

How organisations can address the growing trend in which multiple vulnerabilities within a single product are exploited over a short period.

Do you need antivirus (AV) products on smartphones and tablets?

How operators of critical national infrastructure (CNI) can use NCSC guidance and blogs to secure their internet-facing services.

We caught up with George Brown, founder of PORGiESOFT, about his first few weeks in NCSC For Startups...

Guidance to help you assess the security of voice, video and messaging communication services.

Chris Ensor highlights some important elements of the NCSC's new Technology Assurance strategy.

The first in a series of blogs to ease your journey towards a zero trust architecture.

Zero trust architecture design principles 1.0 launched.

The NCSC's Cloud Security Research Lead suggests some approaches to help you get confidence in cloud services.

In part 2 of his Cloud Blog Trilogy, Andrew explains why it's better for everyone if cloud providers are willing to be open about how they run their services.

Highlighting guidance which will help you secure your servers

Guidance for enterprise administrators, small businesses and home users in relation to the recently published 'Krack' vulnerability in Wi-Fi networks protected by WPA2.