NCSC Feed

Introducing the next chapter of the NCSC research problem book, which aims to inspire research on the biggest impact topics in hardware cyber security.

Andrew A explains what's new in a significant update to the NCSC's flagship cloud guidance.

Lindy Cameron, CEO, introduces changes to the NCSC’s cyber security resources specifically designed for board members.

A new white paper examines the rise of 'ransomware as a service' and extortion attacks.

New ‘Code of Practice for Software Vendors’ will ensure that security is fundamental to developing and distributing products and services.

How safe is it to scan that QR code in the pub? Or in that email?

New advice on implementing high-risk and ‘break-glass’ accesses in cloud services.

Why small organisations need to manage their private branch exchange (PBX) telephone networks.

Non-email sending (parked) domains can be used to generate spam email, but they're easy to protect.

How operators of critical national infrastructure (CNI) can use NCSC guidance and blogs to secure their internet-facing services.

Why it's important to protect the interfaces used to manage your infrastructure, and some recommendations on how you might do this.

New guidance to protect your brand from being exploited online, and to help you choose alternate authentication models.

Explaining the forthcoming NCSC Technology Assurance Principles.

Although the UK has not experienced severe cyber attacks in relation to Russia’s invasion of Ukraine, now is not the time for complacency.

Jeremy B explains how the NCSC will help organisations plan their migration to PQC.

For large, complex firms struggling with the prescriptiveness of Cyber Essentials, ‘Pathways’ will provide a new route to certification.

Introducing a new set of NCSC principles to strengthen the resilience of organisations' cloud backups from ransomware attackers.

How to protect your backups that are stored in the public cloud.

Our updated multi-factor authentication (MFA) guidance recommends organisations use techniques that give better protection against phishing attacks.

Refreshed guidance published to help practitioners manage cyber risk.