NCSC Feed

The NCSC now uses 'allow list' and 'deny list' in place of 'whitelist' and 'blacklist'. Emma W explains why...

Why organisations should avoid ‘blame and fear’, and instead use technical measures to manage the threat from phishing.

ThinkCyber's CEO Tim Ward reflects on the challenges that startups face when developing innovative products.

Questions to ask your suppliers that will help you gain confidence in their cyber security.

Worked examples for Operational Technology and Virtualised systems, using the NCSC’s secure design principles

New guidance to help organisations manage rogue devices and services within the enterprise.

Download the NCSC’s point-of-sale leaflet explaining how new PSTI regulation affects consumers and retailers.

If migrating SCADA solutions to the cloud, cyber security must be a key consideration for operational technology organisations.

Can a Software Bill of Materials (SBOM) provide organisations with better insight into their supply chains?

Discover the Research Institute in Trustworthy Inter-connected Cyber-physical Systems.

The ‘NCSC for Startups’ alumnus giving identity verification the 'Trust Stamp'

Introducing the next chapter of the NCSC research problem book, which aims to inspire research on the biggest impact topics in hardware cyber security.

Andrew A explains what's new in a significant update to the NCSC's flagship cloud guidance.

Lindy Cameron, CEO, introduces changes to the NCSC’s cyber security resources specifically designed for board members.

A new white paper examines the rise of 'ransomware as a service' and extortion attacks.

New ‘Code of Practice for Software Vendors’ will ensure that security is fundamental to developing and distributing products and services.

How safe is it to scan that QR code in the pub? Or in that email?

New advice on implementing high-risk and ‘break-glass’ accesses in cloud services.

Why small organisations need to manage their private branch exchange (PBX) telephone networks.

Non-email sending (parked) domains can be used to generate spam email, but they're easy to protect.