Buzz & Beyond: Ncsc feed

The Government Cyber Action Plan: strengthening resilience across the UK. With GCAP, the UK government is taking decisive steps towards a safer, more resilient future.

Trending

The Government Cyber Action Plan: strengthening resilience across the UK. With GCAP, the UK government is taking decisive steps towards a safer, more resilient future.

The Government Cyber Action Plan: strengthening resilience across the UK. With GCAP, the UK government is taking decisive steps towards a safer, more resilient future.

Source: NCSC Feed

Published: Jan, 07 2026 13:16

With GCAP, the UK government is taking decisive steps towards a safer, more resilient future.

Continue reading...

Cyber deception trials: what we’ve le...

Cyber deception trials: what we’ve learned so far. An update on the NCSC's trials to test the real-world efficacy of ... Cyber deception trials: what we’ve learned so far. An update on the NCSC's trials to test the real-world efficacy of cyber deception solutions.

Prompt injection is not SQL injection...

Prompt injection is not SQL injection (it may be worse). There are crucial differences between prompt and SQL injecti... Prompt injection is not SQL injection (it may be worse). There are crucial differences between prompt and SQL injection which – if not considered – can undermine mitigations.

Provisioning and managing certificate...

Provisioning and managing certificates in the Web PKI. How service owners should securely provision and manage certif... Provisioning and managing certificates in the Web PKI. How service owners should securely provision and manage certificates in the Web PKI.

Updating our guidance on security cer...

Updating our guidance on security certificates, TLS and IPsec. The NCSC has updated 3 key pieces of cryptographic gui... Updating our guidance on security certificates, TLS and IPsec. The NCSC has updated 3 key pieces of cryptographic guidance. Here, we explain the changes.

Building trust in the digital age: a ...

Building trust in the digital age: a collaborative approach to content provenance technologies. Joint NCSC and Canadi... Building trust in the digital age: a collaborative approach to content provenance technologies. Joint NCSC and Canadian Centre for Cyber Security primer helps organisations understand emerging technologies that can help maintain trust in their public-facing information.

What makes a responsible cyber actor:...

What makes a responsible cyber actor: introducing the Pall Mall industry consultation on good practice. Calling vulne... What makes a responsible cyber actor: introducing the Pall Mall industry consultation on good practice. Calling vulnerability researchers, exploit developers and others in the offensive cyber industry to share their views.

Most Viewed

The Government Cyber Action Plan: strengthening resilienc...

The Government Cyber Action Plan: strengthening resilience across the UK. With GCAP, th... The Government Cyber Action Plan: strengthening resilienc...

Cyber deception trials: what we’ve learned so far. An upd...

Cyber deception trials: what we’ve learned so far. An update on the NCSC's trials to te... Cyber deception trials: what we’ve learned so far. An upd...

Prompt injection is not SQL injection (it may be worse). ...

Prompt injection is not SQL injection (it may be worse). There are crucial differences ... Prompt injection is not SQL injection (it may be worse). ...

Provisioning and managing certificates in the Web PKI. Ho...

Provisioning and managing certificates in the Web PKI. How service owners should secure... Provisioning and managing certificates in the Web PKI. Ho...

Updating our guidance on security certificates, TLS and I...

Updating our guidance on security certificates, TLS and IPsec. The NCSC has updated 3 k... Updating our guidance on security certificates, TLS and I...

Building trust in the digital age: a collaborative approa...

Building trust in the digital age: a collaborative approach to content provenance techn... Building trust in the digital age: a collaborative approa...

What makes a responsible cyber actor: introducing the Pal...

What makes a responsible cyber actor: introducing the Pall Mall industry consultation o... What makes a responsible cyber actor: introducing the Pal...

It's time for all small businesses to act. The NCSC’s Cyb...

It's time for all small businesses to act. The NCSC’s Cyber Action Toolkit helps you to... It's time for all small businesses to act. The NCSC’s Cyb...

NCSC handing over the baton of smart meter security: a de...

NCSC handing over the baton of smart meter security: a decade of progress. Why transfer... NCSC handing over the baton of smart meter security: a de...

Choosing a managed service provider (MSP). An SME’s guide...

Choosing a managed service provider (MSP). An SME’s guide to selecting and working with... Choosing a managed service provider (MSP). An SME’s guide...

Cyber Action Toolkit: breaking down the barriers to resil...

Cyber Action Toolkit: breaking down the barriers to resilience. How the NCSC’s ‘Cyber A... Cyber Action Toolkit: breaking down the barriers to resil...

NCSC to retire Web Check and Mail Check. By 31 March 2026...

NCSC to retire Web Check and Mail Check. By 31 March 2026, organisations should have al... NCSC to retire Web Check and Mail Check. By 31 March 2026...

Historical Trends

Putting staff welfare at the heart of incident response. Guidance for staff responsible for managing a cyber incident response within their organisation.

Putting staff welfare at the heart of incident response. Guidance for staff responsible... Putting staff welfare at the heart of incident response. ...

NCSC Feed

Provisioning and securing security certificates. How certificates should be initially provisioned, and how supporting infrastructure should be securely operated.

Provisioning and securing security certificates. How certificates should be initially p... Provisioning and securing security certificates. How cert...

NCSC Feed

Protective DNS for the private sector. Advice on the selection and deployment of Protective Domain Name Systems (DNS).

Protective DNS for the private sector. Advice on the selection and deployment of Protec... Protective DNS for the private sector. Advice on the sele...

NCSC Feed

Protecting SMS messages used in critical business processes. Security advice for organisations using text messages to communicate with end users.

Protecting SMS messages used in critical business processes. Security advice for organi... Protecting SMS messages used in critical business process...

NCSC Feed

Private Branch Exchange (PBX) best practice. Protecting your organisation’s telephony systems from cyber attacks and telecoms fraud.

Private Branch Exchange (PBX) best practice. Protecting your organisation’s telephony s... Private Branch Exchange (PBX) best practice. Protecting y...

NCSC Feed

Preventing Lateral Movement. Guidance for preventing lateral movement in enterprise networks.

Preventing Lateral Movement. Guidance for preventing lateral movement in enterprise networks. Preventing Lateral Movement. Guidance for preventing late...

NCSC Feed

Phishing attacks: defending your organisation. How to defend your organisation from email phishing attacks.

Phishing attacks: defending your organisation. How to defend your organisation from ema... Phishing attacks: defending your organisation. How to def...

NCSC Feed

Penetration testing. How to get the most from penetration testing.

Penetration testing. How to get the most from penetration testing. Penetration testing. How to get the most from penetration...

NCSC Feed

Pattern: Safely Importing Data. An architecture pattern for safely importing data into a system from an external source.

Pattern: Safely Importing Data. An architecture pattern for safely importing data into ... Pattern: Safely Importing Data. An architecture pattern f...

NCSC Feed

Operational technologies. Making sense of cyber security in OT environments.

Operational technologies. Making sense of cyber security in OT environments. Operational technologies. Making sense of cyber security ...

NCSC Feed

Online gaming for families and individuals. How to enjoy online gaming securely by following just a few tips.

Online gaming for families and individuals. How to enjoy online gaming securely by foll... Online gaming for families and individuals. How to enjoy ...

NCSC Feed

Network security fundamentals. How to design, use, and maintain secure networks.

Network security fundamentals. How to design, use, and maintain secure networks. Network security fundamentals. How to design, use, and ma...

NCSC Feed

NCSC advice: Malicious software used to illegally mine cryptocurrency. Guidance for members of the public, website administrators and JavaScript developers in relation to the recently publicised cryptocurrency mining compromises of several websites.

NCSC advice: Malicious software used to illegally mine cryptocurrency. Guidance for mem... NCSC advice: Malicious software used to illegally mine cr...

NCSC Feed

NCSC advice for Dixons Carphone plc customers. Advice for Dixons Carphone customers following its data breach.

NCSC advice for Dixons Carphone plc customers. Advice for Dixons Carphone customers fol... NCSC advice for Dixons Carphone plc customers. Advice for...

NCSC Feed

NCSC advice on the use of equipment from high risk vendors in UK telecoms networks. The NCSC's guidance for the risk management of high risk vendors in telecommunications networks.

NCSC advice on the use of equipment from high risk vendors in UK telecoms networks. The... NCSC advice on the use of equipment from high risk vendor...

NCSC Feed

NCSC advice for Marriott International customers. Advice for customers of Marriott International following the reports of a data breach.

NCSC advice for Marriott International customers. Advice for customers of Marriott Inte... NCSC advice for Marriott International customers. Advice ...

NCSC Feed

Moving your business from the physical to the digital. Security questions to ask your IT service providers when considering a digital transition.

Moving your business from the physical to the digital. Security questions to ask your I... Moving your business from the physical to the digital. Se...

NCSC Feed

Mitigating malware and ransomware attacks. How to defend organisations against malware or ransomware attacks.

Mitigating malware and ransomware attacks. How to defend organisations against malware ... Mitigating malware and ransomware attacks. How to defend ...

NCSC Feed

MIKEY-SAKKE frequently asked questions. A brief guide to MIKEY-SAKKE, a protocol that allows organisations to provide secure communications with end-to-end encryption.

MIKEY-SAKKE frequently asked questions. A brief guide to MIKEY-SAKKE, a protocol that a... MIKEY-SAKKE frequently asked questions. A brief guide to ...

NCSC Feed

Mapping your supply chain. How organisations can map their supply chain dependencies, so that risks in the supply chain can be better understood and managed.

Mapping your supply chain. How organisations can map their supply chain dependencies, s... Mapping your supply chain. How organisations can map thei...

NCSC Feed

Managing the risk of cloud-enabled products. Guidance outlining the risks of locally installed products interacting with cloud services, and suggestions to help organisations manage this risk.

Managing the risk of cloud-enabled products. Guidance outlining the risks of locally in... Managing the risk of cloud-enabled products. Guidance out...

NCSC Feed

Managing Public Domain Names. Good practises for the management of public domain names owned by your organisation.

Managing Public Domain Names. Good practises for the management of public domain names ... Managing Public Domain Names. Good practises for the mana...

NCSC Feed

Maintaining a sustainable strengthened cyber security posture. How organisations can avoid staff burnout during an extended period of heightened cyber threat.

Maintaining a sustainable strengthened cyber security posture. How organisations can av... Maintaining a sustainable strengthened cyber security pos...

NCSC Feed

Macro Security for Microsoft Office. Why macros are a threat, and the approaches you can take to protect your systems.

Macro Security for Microsoft Office. Why macros are a threat, and the approaches you ca... Macro Security for Microsoft Office. Why macros are a thr...

NCSC Feed

'Krack' Wi-Fi guidance. Guidance for enterprise administrators, small businesses and home users in relation to the recently published 'Krack' vulnerability in Wi-Fi networks protected by WPA2.

'Krack' Wi-Fi guidance. Guidance for enterprise administrators, small businesses and ho... 'Krack' Wi-Fi guidance. Guidance for enterprise administr...

NCSC Feed

Introduction to logging for security purposes. Laying the groundwork for incident readiness.

Introduction to logging for security purposes. Laying the groundwork for incident readiness. Introduction to logging for security purposes. Laying the...

NCSC Feed

Introduction to identity and access management. This guidance provides a primer on the essential techniques, technologies and uses of access management.

Introduction to identity and access management. This guidance provides a primer on the ... Introduction to identity and access management. This guid...

NCSC Feed

How to spot scammers claiming to be from the NCSC. Check that you're talking to a genuine NCSC employee, and not a criminal.

How to spot scammers claiming to be from the NCSC. Check that you're talking to a genui... How to spot scammers claiming to be from the NCSC. Check ...

NCSC Feed

How to recover an infected device. Advice for those concerned a device has been infected.

How to recover an infected device. Advice for those concerned a device has been infected. How to recover an infected device. Advice for those conce...

NCSC Feed

Home working: preparing your organisation and staff. How to make sure your organisation is prepared for home working.

Home working: preparing your organisation and staff. How to make sure your organisation... Home working: preparing your organisation and staff. How ...

NCSC Feed

Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances. Outlining the expectations for the minimum requirement for forensic visibility, to help network defenders secure organisational networks both before and after a compromise.

Guidance on digital forensics and protective monitoring specifications for producers of... Guidance on digital forensics and protective monitoring s...

NCSC Feed

Guidance for organisations considering payment in ransomware incidents. Advice for organisations experiencing a ransomware attack and the partner organisations supporting them.

Guidance for organisations considering payment in ransomware incidents. Advice for orga... Guidance for organisations considering payment in ransomw...

NCSC Feed

Guidance for brands to help advertising partners counter malvertising. Advice to make it harder for cyber criminals to deliver malicious advertising, and reduce the risk of cyber-facilitated fraud.

Guidance for brands to help advertising partners counter malvertising. Advice to make i... Guidance for brands to help advertising partners counter ...

NCSC Feed

Guidance following recent DoS attacks in the run up to the 2019 General Election.

Guidance following recent DoS attacks in the run up to the 2019 General Election. Guidance following recent DoS attacks in the run up to th...

NCSC Feed

GDPR security outcomes. This guidance describes a set of technical security outcomes that are considered to represent appropriate measures under the GDPR.

GDPR security outcomes. This guidance describes a set of technical security outcomes th... GDPR security outcomes. This guidance describes a set of ...

NCSC Feed

Effective steps to cyber exercise creation. The following tips can help organisations create their own cyber incident response exercises.

Effective steps to cyber exercise creation. The following tips can help organisations c... Effective steps to cyber exercise creation. The following...

NCSC Feed

Guidance on effective communications in a cyber incident. Supporting organisations of all sizes to manage their communications strategy before, during and after a cyber security incident.

Guidance on effective communications in a cyber incident. Supporting organisations of a... Guidance on effective communications in a cyber incident....

NCSC Feed

Early Years practitioners: using cyber security to protect your settings. How to protect sensitive information about your setting and the children in your care from accidental damage and online criminals.

Early Years practitioners: using cyber security to protect your settings. How to protec... Early Years practitioners: using cyber security to protec...

NCSC Feed

Design Pattern: Safely Exporting Data. How to implement a secure end-to-end data export solution.

Design Pattern: Safely Exporting Data. How to implement a secure end-to-end data export... Design Pattern: Safely Exporting Data. How to implement a...

NCSC Feed

Design guidelines for high assurance products. Approaches to the design, development and assessment of products capable of resisting elevated threats.

Design guidelines for high assurance products. Approaches to the design, development an... Design guidelines for high assurance products. Approaches...

NCSC Feed

Dealing with the SolarWinds Orion compromise. Immediate actions for all organisations using the SolarWinds Orion suite of IT management tools.

Dealing with the SolarWinds Orion compromise. Immediate actions for all organisations u... Dealing with the SolarWinds Orion compromise. Immediate a...

NCSC Feed

Data breaches: guidance for individuals and families. How to protect yourself from the impact of data breaches.

Data breaches: guidance for individuals and families. How to protect yourself from the ... Data breaches: guidance for individuals and families. How...

NCSC Feed

Cyber security for major events. Assessing the cyber security needs of major events.

Cyber security for major events. Assessing the cyber security needs of major events. Cyber security for major events. Assessing the cyber secu...

NCSC Feed

Cyber security for high profile conferences. Managing the cyber security of high profil... Cyber security for high profile conferences. Managing the...

NCSC Feed

Cyber security for farmers. Guidance to help farmers improve the security and resilience of their business against cyber threats.

Cyber security for farmers. Guidance to help farmers improve the security and resilienc... Cyber security for farmers. Guidance to help farmers impr...

NCSC Feed

Cyber security for construction businesses. Guidance to help the construction industry improve the security and resilience of their business against cyber threats.

Cyber security for construction businesses. Guidance to help the construction industry ... Cyber security for construction businesses. Guidance to h...

NCSC Feed

Cyber insurance guidance. Cyber security considerations for organisations thinking about taking out cyber insurance.

Cyber insurance guidance. Cyber security considerations for organisations thinking abou... Cyber insurance guidance. Cyber security considerations f...

NCSC Feed

Configuring Microsoft Outlook 365's 'Report Phishing' add-in. How to report emails to the NCSC's Suspicious Email Reporting Service (SERS) using the 'Report Phishing' add-in for Microsoft Outlook 365.

Configuring Microsoft Outlook 365's 'Report Phishing' add-in. How to report emails to t... Configuring Microsoft Outlook 365's 'Report Phishing' add...

NCSC Feed

Buying and selling second-hand devices. How to erase the personal data from your phone, tablets, and other devices (and why it's important when you're buying and selling them).

Buying and selling second-hand devices. How to erase the personal data from your phone,... Buying and selling second-hand devices. How to erase the ...

NCSC Feed

Business email compromise: defending your organisation. How to disrupt email phishing attacks that target senior executives or budget holders.

Business email compromise: defending your organisation. How to disrupt email phishing a... Business email compromise: defending your organisation. H...

NCSC Feed