NCSC Feed

The NCSC has open sourced the code behind MailCheck - one of our Active Cyber Defence projects.

Andy P summarises how organisations can protect users' accounts from password spraying.

Andy P explains how the NCSC rolls out software updates without delays.

Intel's report this week of security vulnerabilities emphasises the importance of automating firmware updates.

Discussing the state of UEFI firmware running on Windows laptops.

In part 3, we discuss why there is no one right answer to "What is the best MDM product?", as we found when building our own IT system.

A look at the high-level design of the NCSC's new IT system, including the single sign-on architecture, our initial end user device choices, and how we tackled the captive portal problem.

Initial research shows firmware frequently out of date.

Investigating the security of firmware and why this often overlooked component should not be ignored.

Work from schools and companies paying dividends in the number and diversity of pupils taking up computer science.

The NCSC's first 'Outreach' event welcomes pupils from Carlton Primary School.

What organisations should think about before choosing apps for secure communications and collaboration...

Covering the ‘Product development', 'Design and functionality' and ‘Though-life’ aspects of product assurance.

The NCSC hands over administration of the Certified Cyber Professional scheme, with details to be announced at CYBERUK 2022.

A technical analysis of a new variant of the SparrowDoor malware.

Advice for organisations on implementing multi-factor authentication (or 2-step verification) to protect against password guessing and theft on online services.

This white paper explains how basic security controls can protect organisations from the most common cyber attacks.

Two new pieces of NCSC guidance replace Good Practice Guides 43 and 53.

...and that's why we are making some changes. Anne W summarises what they are, and explains the thinking behind them.

How to start the journey to zero trust architecture once you have decided it meets your business requirements.