NCSC Feed

Different code deserves different levels of oversight, so calibrate your approach to ‘vibe coding’ accordingly.

Organisations using Fortinet services are being urged to take action following a campaign affecting firewalls and VPN gateways.

Dr Richard Horne highlighted the scale of cyber threats against the UK’s critical infrastructure at RUSI’s Annual Security Lecture.

Attackers are compromising open-source packages to spread malware. Cyber defenders are asked to review dependencies to reduce risks

New guidance explains how to design Zero Trust Network Access architectures aligned with zero trust principles and not built on old trust assumptions.

When it comes to using agentic AI, make sure you can walk before you run.

Using Artificial Intelligence to find vulnerabilities can bring added security considerations.

Organisations must act now to prepare for a wave of patches that will address decades of technical debt.

Poor metrics can render a well-intentioned security operation centre entirely ineffective.

New advisory highlights how to defend against attacker tactics believed to be used by China-linked actors to hide malicious cyber activity.

Explaining the widespread shift in tactics, techniques and procedures (TTPs) towards networks of compromised infrastructure, and how to defend against it

Adopting AI will require time, the development of new capabilities and careful oversight. 

Organisations should map and baseline their edge device traffic, especially VPN and remote access connections, and adopt dynamic threat feed filtering that includes known covert network indicators.

Passkeys offer a more usable, secure replacement for passwords and are already supported by most modern devices.

Passkeys are the more secure and user-friendly login method and should be the default authentication option for consumers.

SilentGlass, a plug-and-play device, actively blocks any unexpected or malicious HDMI and Display Port connections.

As the technology landscape develops, the definition of cyber security is expanding with it.

Ensuring cross domain technologies are better understood - and more easily deployed - across sectors.

A call to action to collectively build UK resilience.