UK NCSC
Help the NCSC understand how organisations approach external attack surface risk
20 hours ago
Help the NCSC understand how organisations approach external attack surface risk
Earlier this year, we invited organisations with experience of external attack surface management (EASM) and exposure management solutions to take…
China-linked malicious actors called out by UK and international partners for targeting sensitive data globally
5 days ago
China-linked malicious actors called out by UK and international partners for targeting sensitive data globally
China-linked company Integrity Technology Group has been exposed by the UK and international partners for enabling cyber actors to target…
One does not simply defend agentically
3 weeks ago
One does not simply defend agentically
One of my favourite cybersecurity maxims is Halvar Flake’s observation that “All offensive problems are technical problems, and all defensive…
Cyber Adversary Simulation (CyAS): scheme documents now available
4 weeks ago
Cyber Adversary Simulation (CyAS): scheme documents now available
Alongside the guidance, we have shared the first CyAS scheme documents, including the Scheme Standard and the Working Practices Document.…
Adversary simulation: what you need to know
4 weeks ago
Adversary simulation: what you need to know
Phase 2: Testing The testing phase typically involves continual active reconnaissance, initial access, internal phase, and clean up. Continual active…
The hidden risks of shadow AI
September 7, 2026
The hidden risks of shadow AI
The use of shadow AI can create risks that organizations may struggle to identify and manage, potentially resulting in breaches…
Disruptive cyber activity highlights risk from internet-exposed systems and edge devices
August 27, 2026
Disruptive cyber activity highlights risk from internet-exposed systems and edge devices
While we have observed targeting of OT, there continues to be a broader pattern of disruptive cyber activity targeting internet-exposed…
Managing the cyber risk of agentic AI
August 20, 2026
Managing the cyber risk of agentic AI
Always run AI agents within a sandboxed environment that controls and manages what resources can and cannot be communicated with,…
How BitLocker PINs help protect your data and devices
August 13, 2026
How BitLocker PINs help protect your data and devices
BitLocker has been under increased public scrutiny in recent months, as vulnerabilities like YellowKey made headlines. By using the Windows…
Help shape the future of resilient private 5G
August 12, 2026
Help shape the future of resilient private 5G
The National Cyber Security Centre (NCSC) is seeking to engage with technology partners, innovators, and industry leaders to explore the…


