Buzz & Beyond: Ncsc feed

From bugs to bypasses: adapting vulnerability disclosure for AI safeguards. Exploring how far cyber security approaches can help mitigate risks in generative AI systems.

Trending

From bugs to bypasses: adapting vulnerability disclosure for AI safeguards. Exploring how far cyber security approaches can help mitigate risks in generative AI systems.

From bugs to bypasses: adapting vulnerability disclosure for AI safeguards. Exploring how far cyber security approaches can help mitigate risks in generative AI systems.

Source: NCSC Feed

Published: Sep, 02 2025 06:36

Exploring how far cyber security approaches can help mitigate risks in generative AI systems.

Continue reading...

Cyber Assessment Framework v4.0 relea...

Cyber Assessment Framework v4.0 released in response to growing threat. Updates to the CAF helps providers of essenti... Cyber Assessment Framework v4.0 released in response to growing threat. Updates to the CAF helps providers of essential services to better manage their cyber risks.

Getting your organisation ready for W...

Getting your organisation ready for Windows 11 upgrade before Autumn 2025. Why you should act now to ensure you meet ... Getting your organisation ready for Windows 11 upgrade before Autumn 2025. Why you should act now to ensure you meet the new hardware standards, and prioritise security.

Trusting the tech: using password man...

Trusting the tech: using password managers and passkeys to help you stay secure online. How today’s secure tools simp... Trusting the tech: using password managers and passkeys to help you stay secure online. How today’s secure tools simplify your digital life, and reduce login stress and password fatigue.

Have you got what it takes to be a 'C...

Have you got what it takes to be a 'Cyber Advisor'?. We need more cyber professionals to join our scheme providing ha... Have you got what it takes to be a 'Cyber Advisor'?. We need more cyber professionals to join our scheme providing hands-on advice to SMEs.

Sausages and incentives: rewarding a ...

Sausages and incentives: rewarding a resilient technology future. Why ‘thinking big’ is required to shift the dynamic... Sausages and incentives: rewarding a resilient technology future. Why ‘thinking big’ is required to shift the dynamics of the technology market.

Creating the right organisational cul...

Creating the right organisational culture for cyber security. Calling cyber security professionals, culture specialis... Creating the right organisational culture for cyber security. Calling cyber security professionals, culture specialists and leaders to drive uptake of new Cyber security culture principles.

Most Viewed

From bugs to bypasses: adapting vulnerability disclosure ...

From bugs to bypasses: adapting vulnerability disclosure for AI safeguards. Exploring h... From bugs to bypasses: adapting vulnerability disclosure ...

Cyber Assessment Framework v4.0 released in response to g...

Cyber Assessment Framework v4.0 released in response to growing threat. Updates to the ... Cyber Assessment Framework v4.0 released in response to g...

Getting your organisation ready for Windows 11 upgrade be...

Getting your organisation ready for Windows 11 upgrade before Autumn 2025. Why you shou... Getting your organisation ready for Windows 11 upgrade be...

Trusting the tech: using password managers and passkeys t...

Trusting the tech: using password managers and passkeys to help you stay secure online.... Trusting the tech: using password managers and passkeys t...

Have you got what it takes to be a 'Cyber Advisor'?. We n...

Have you got what it takes to be a 'Cyber Advisor'?. We need more cyber professionals t... Have you got what it takes to be a 'Cyber Advisor'?. We n...

Sausages and incentives: rewarding a resilient technology...

Sausages and incentives: rewarding a resilient technology future. Why ‘thinking big’ is... Sausages and incentives: rewarding a resilient technology...

Creating the right organisational culture for cyber secur...

Creating the right organisational culture for cyber security. Calling cyber security pr... Creating the right organisational culture for cyber secur...

New ETSI standard protects AI systems from evolving cyber...

New ETSI standard protects AI systems from evolving cyber threats. The NCSC and DSIT wo... New ETSI standard protects AI systems from evolving cyber...

Facing the cyber threat behind the headlines. NCSC CEO ur...

Facing the cyber threat behind the headlines. NCSC CEO urges all businesses to face the... Facing the cyber threat behind the headlines. NCSC CEO ur...

Decommissioning assets. How to retire digital assets (suc...

Decommissioning assets. How to retire digital assets (such as data, software, or hardwa... Decommissioning assets. How to retire digital assets (suc...

Incidents impacting retailers – recommendations from the ...

Incidents impacting retailers – recommendations from the NCSC. A joint blog post by the... Incidents impacting retailers – recommendations from the ...

Software Code of Practice: building a secure digital futu...

Software Code of Practice: building a secure digital future. New voluntary code of prac... Software Code of Practice: building a secure digital futu...

Historical Trends

"Winning trust, and making powerful connections". Chris Wallis, CEO of Intruder, explains how completing the NCSC's Startup Programme was a turning point for his organisation.

"Winning trust, and making powerful connections". Chris Wallis, CEO of Intruder, explai... "Winning trust, and making powerful connections". Chris W...

NCSC Feed

Protect your customers to protect your brand. New guidance to protect your brand from b... Protect your customers to protect your brand. New guidanc...

NCSC Feed

Takedown: removing malicious content to protect your brand. How to protect your brand f... Takedown: removing malicious content to protect your bran...

NCSC Feed

The security benefits of modern collaboration in the cloud. By exploiting cloud services, organisations no longer have to choose between ‘more security’ and ‘better usability’.

The security benefits of modern collaboration in the cloud. By exploiting cloud service... The security benefits of modern collaboration in the clou...

NCSC Feed

The problems with forcing regular password expiry. Why the NCSC decided to advise against this long-established security guideline.

The problems with forcing regular password expiry. Why the NCSC decided to advise again... The problems with forcing regular password expiry. Why th...

NCSC Feed

Log4j vulnerability: what should boards be asking?. Advice for board members of medium to large organisations that are at risk from the Apache Log4j vulnerability.

Log4j vulnerability: what should boards be asking?. Advice for board members of medium ... Log4j vulnerability: what should boards be asking?. Advic...

NCSC Feed

The rise of ransomware. Toby L, Technical Lead for Incident Management, explains how modern-day ransomware attacks are evolving.

The rise of ransomware. Toby L, Technical Lead for Incident Management, explains how mo... The rise of ransomware. Toby L, Technical Lead for Incide...

NCSC Feed

How Rebellion Defence used NCSC For Startups to accelerate product development. Unparalleled access to skilled users transformed Rebellion Defence’s product roadmap.

How Rebellion Defence used NCSC For Startups to accelerate product development. Unparal... How Rebellion Defence used NCSC For Startups to accelerat...

NCSC Feed

TLS 1.3: better for individuals - harder for enterprises. The NCSC's technical director outlines the challenges that TLS 1.3 presents for enterprise security.

TLS 1.3: better for individuals - harder for enterprises. The NCSC's technical director... TLS 1.3: better for individuals - harder for enterprises....

NCSC Feed

'WannaCry' ransomware: guidance updates. Jon L provides an update on the NCSC's guidance on the 'WannaCry' ransomware.

'WannaCry' ransomware: guidance updates. Jon L provides an update on the NCSC's guidanc... 'WannaCry' ransomware: guidance updates. Jon L provides a...

NCSC Feed

Spray you, spray me: defending against password spraying attacks. Andy P summarises how organisations can protect users' accounts from password spraying.

Spray you, spray me: defending against password spraying attacks. Andy P summarises how... Spray you, spray me: defending against password spraying ...

NCSC Feed

Cyber security for schools. New NCSC training package to help schools improve their cyber security.

Cyber security for schools. New NCSC training package to help schools improve their cyb... Cyber security for schools. New NCSC training package to ...

NCSC Feed

Bring Your Own Device: How to do it well. Updated NCSC guidance on enabling your staff to use their own devices for work.

Bring Your Own Device: How to do it well. Updated NCSC guidance on enabling your staff ... Bring Your Own Device: How to do it well. Updated NCSC gu...

NCSC Feed

CNI system design: Secure Remote Access. A Critical National Infrastructure (CNI)-specific look at NCSC guidance on remote access architecture design.

CNI system design: Secure Remote Access. A Critical National Infrastructure (CNI)-speci... CNI system design: Secure Remote Access. A Critical Natio...

NCSC Feed

Using secure messaging, voice and collaboration apps. What organisations should think about before choosing apps for secure communications and collaboration.

Using secure messaging, voice and collaboration apps. What organisations should think a... Using secure messaging, voice and collaboration apps. Wha...

NCSC Feed

NCSC For Startups: the feedback loop. How startups can make the most of their time when pitching to cyber security experts.

NCSC For Startups: the feedback loop. How startups can make the most of their time when... NCSC For Startups: the feedback loop. How startups can ma...

NCSC Feed

ACD - The Fifth Year. Key findings from the 5th year of the Active Cyber Defence (ACD) programme.

ACD - The Fifth Year. Key findings from the 5th year of the Active Cyber Defence (ACD) ... ACD - The Fifth Year. Key findings from the 5th year of t...

NCSC Feed

Mythbusting cloud key management services. Why trying to avoid trusting the KMS doesn't make sense (and other common misconceptions).

Mythbusting cloud key management services. Why trying to avoid trusting the KMS doesn't... Mythbusting cloud key management services. Why trying to ...

NCSC Feed

Relaunching the NCSC's Cloud security guidance collection. Andrew A explains what's new in a significant update to the NCSC's flagship cloud guidance.

Relaunching the NCSC's Cloud security guidance collection. Andrew A explains what's new... Relaunching the NCSC's Cloud security guidance collection...

NCSC Feed

Threat report on application stores. This report outlines the risks associated with the use of official and third party app stores.

Threat report on application stores. This report outlines the risks associated with the... Threat report on application stores. This report outlines...

NCSC Feed

Malware analysis report on SparrowDoor malware. A technical analysis of a new variant of the SparrowDoor malware.

Malware analysis report on SparrowDoor malware. A technical analysis of a new variant o... Malware analysis report on SparrowDoor malware. A technic...

NCSC Feed

Vendor Security Assessment. Assessing the security of network equipment.

Vendor Security Assessment. Assessing the security of network equipment. Vendor Security Assessment. Assessing the security of net...

NCSC Feed

The Cyber Assessment Framework 3.1. Latest version of the CAF focusses on clarification and consistency between areas of the CAF.

The Cyber Assessment Framework 3.1. Latest version of the CAF focusses on clarification... The Cyber Assessment Framework 3.1. Latest version of the...

NCSC Feed

Motivating developers to write secure code. The 'Motivating Jenny' project is helping to change the conversation about security in software development.

Motivating developers to write secure code. The 'Motivating Jenny' project is helping t... Motivating developers to write secure code. The 'Motivati...

NCSC Feed

Common Cyber Attacks: Reducing the Impact. This white paper explains how basic security controls can protect organisations from the most common cyber attacks.

Common Cyber Attacks: Reducing the Impact. This white paper explains how basic security... Common Cyber Attacks: Reducing the Impact. This white pap...

NCSC Feed

Using IPsec to protect data. Guidance for organisations wishing to deploy products that use IPsec.

Using IPsec to protect data. Guidance for organisations wishing to deploy products that... Using IPsec to protect data. Guidance for organisations w...

NCSC Feed

Introducing Scanning Made Easy. Trial project makes vulnerability scanning easier.

Introducing Scanning Made Easy. Trial project makes vulnerability scanning easier. Introducing Scanning Made Easy. Trial project makes vulne...

NCSC Feed

We think Cyber Essentials is, well, still essential . ...and that's why we are making some changes. Anne W summarises what they are, and explains the thinking behind them.

We think Cyber Essentials is, well, still essential . ...and that's why we are making s... We think Cyber Essentials is, well, still essential . ......

NCSC Feed

Zero Trust migration: where do I start?. How to start the journey to zero trust architecture once you have decided it meets your business requirements.

Zero Trust migration: where do I start?. How to start the journey to zero trust archite... Zero Trust migration: where do I start?. How to start the...

NCSC Feed

Why vulnerabilities are like buses. How organisations can address the growing trend in which multiple vulnerabilities within a single product are exploited over a short period.

Why vulnerabilities are like buses. How organisations can address the growing trend in ... Why vulnerabilities are like buses. How organisations can...

NCSC Feed

Protecting internet-facing services on public service CNI. How operators of critical national infrastructure (CNI) can use NCSC guidance and blogs to secure their internet-facing services.

Protecting internet-facing services on public service CNI. How operators of critical na... Protecting internet-facing services on public service CNI...

NCSC Feed

NCSC For Startups diaries: PORGiESOFT. We caught up with George Brown, founder of PORGiESOFT, about his first few weeks in NCSC For Startups.

NCSC For Startups diaries: PORGiESOFT. We caught up with George Brown, founder of PORGi... NCSC For Startups diaries: PORGiESOFT. We caught up with ...

NCSC Feed

Zero Trust: Is it right for me?. The first in a series of blogs to ease your journey towards a zero trust architecture.

Zero Trust: Is it right for me?. The first in a series of blogs to ease your journey to... Zero Trust: Is it right for me?. The first in a series of...

NCSC Feed

Serving up some server advice. Highlighting guidance which will help you secure your servers.

Serving up some server advice. Highlighting guidance which will help you secure your servers. Serving up some server advice. Highlighting guidance whic...

NCSC Feed

Systems administration architectures.

Systems administration architectures. Systems administration architectures.

NCSC Feed

Active Cyber Defence (ACD) - the fourth year. The year four report covers 2020 and aims to highlight the achievements and efforts made by the Active Cyber Defence programme.

Active Cyber Defence (ACD) - the fourth year. The year four report covers 2020 and aims... Active Cyber Defence (ACD) - the fourth year. The year fo...

NCSC Feed

What is OT malware?. How malware works on Operational Technology (OT) and how to stop it.

What is OT malware?. How malware works on Operational Technology (OT) and how to stop it. What is OT malware?. How malware works on Operational Tec...

NCSC Feed

Active Cyber Defence (ACD) - The Third Year. The year three report covers 2019 and aims to highlight the achievements and efforts made by the Active Cyber Defence programe.

Active Cyber Defence (ACD) - The Third Year. The year three report covers 2019 and aims... Active Cyber Defence (ACD) - The Third Year. The year thr...

NCSC Feed

The strength of the ICS COI is the team. Join the Industrial Control System Community of Interest (ICS COI), and help build CNI expertise across the UK.

The strength of the ICS COI is the team. Join the Industrial Control System Community ... The strength of the ICS COI is the team. Join the Indust...

NCSC Feed

RITICS: Securing cyber-physical systems. Discover the Research Institute in Trustworthy Inter-connected Cyber-physical Systems.

RITICS: Securing cyber-physical systems. Discover the Research Institute in Trustworthy... RITICS: Securing cyber-physical systems. Discover the Res...

NCSC Feed

Technical report: Responsible use of the Border Gateway Protocol (BGP) for ISP interworking. Technical report on best practice use of this fundamental data routing protocol.

Technical report: Responsible use of the Border Gateway Protocol (BGP) for ISP interwor... Technical report: Responsible use of the Border Gateway P...

NCSC Feed

The elephant in the data centre. A new white paper from the NCSC explains the potential benefits of adopting a cloud-system.

The elephant in the data centre. A new white paper from the NCSC explains the potential... The elephant in the data centre. A new white paper from t...

NCSC Feed

Active Cyber Defence (ACD) - The Second Year. The second report examining how the NCSC's ACD programme is improving the security of the UK public sector and the wider UK cyber ecosystem.

Active Cyber Defence (ACD) - The Second Year. The second report examining how the NCSC'... Active Cyber Defence (ACD) - The Second Year. The second ...

NCSC Feed

Moving to a cloud, not a storm. Avoiding common problems when moving to the cloud.

Moving to a cloud, not a storm. Avoiding common problems when moving to the cloud. Moving to a cloud, not a storm. Avoiding common problems ...

NCSC Feed

The leaky pipe of secure coding. Helen L discusses how security can be woven more seamlessly into the development process.

The leaky pipe of secure coding. Helen L discusses how security can be woven more seaml... The leaky pipe of secure coding. Helen L discusses how se...

NCSC Feed

The cyber threat to sports organisations. The NCSC report highlights the cyber threats faced by the sports sector and suggests how to stop or lessen their impact on organisations.

The cyber threat to sports organisations. The NCSC report highlights the cyber threats ... The cyber threat to sports organisations. The NCSC report...

NCSC Feed

A different future for telecoms in the UK. NCSC Technical Director Dr Ian Levy explains the technical impact of the recent US sanctions on the security of Huawei equipment in the UK.

A different future for telecoms in the UK. NCSC Technical Director Dr Ian Levy explains... A different future for telecoms in the UK. NCSC Technical...

NCSC Feed

Summary of the NCSC analysis of May 2020 US sanction. A summary of the NCSC’s analysis of the May 2020 US sanction which caused the NCSC to modify the scope of its security mitigation strategy for Huawei.

Summary of the NCSC analysis of May 2020 US sanction. A summary of the NCSC’s analysis ... Summary of the NCSC analysis of May 2020 US sanction. A s...

NCSC Feed

Malicious macros are still causing problems!. Andrew A explains the updated guidance for Microsoft Office macros.

Malicious macros are still causing problems!. Andrew A explains the updated guidance fo... Malicious macros are still causing problems!. Andrew A ex...

NCSC Feed

Security, complexity and Huawei; protecting the UK's telecoms networks. With 5G set to transform mobile services, Ian Levy explains how the UK has approached telecoms security, and what that means for the future.

Security, complexity and Huawei; protecting the UK's telecoms networks. With 5G set to ... Security, complexity and Huawei; protecting the UK's tele...

NCSC Feed