NCSC UK

How industry, the NCSC and the FCA worked together to help organisations share information while protecting market integrity

Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619).

A revolution is underway at the intersection of AI and cyber security.

The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.

Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.

We're looking to hear from people involved in evaluating, selecting or adopting EASM.

Joint advisory with international partners highlights malicious targeting of organisations from a range of sectors across the globe.

ASOS has said it is investigating a cyber incident and that some customer personal information may have been accessed.

The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.

Defenders can’t use AI in the same way attackers can, but there’s much they can do to unlock the potential of agentic cyber defence.

Adversary simulation ('red teaming') tests your ability to prevent, detect and respond to cyber attacks.

Our view of good cyber adversary simulation – and how assured providers can deliver it.

UK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware.

Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.

Understanding why staff use unapproved AI tools is key to managing the security challenges they can create.

Owners of operational technology encouraged to address avoidable vulnerabilities, and build long-term cyber resilience.

Use safeguards, sandboxing and active oversight to realise the benefits of autonomous systems while limiting the unintended activity.

Using a PIN mitigates many BitLocker vulnerabilities. Make sure you’re ready for the next one...

The NCSC wants to collaborate with organisations developing technologies and approaches for secure, resilient and deployable private 5G

New guidance is the first content authored by the Industrial Control System COI to appear on ncsc.gov.uk.