NCSC Feed

Allow your website to accept pasted passwords - it makes your site more secure, not less.

Toby L, Technical Lead for Incident Management, explains how modern-day ransomware attacks are evolving.

Andrew A puts some context around the recently published KRACK guidance and explains why patching - once again - is the answer.

Jon L provides an update on the NCSC's guidance on the 'WannaCry' ransomware.

MalwareTech's blog post on coming across a kill switch to stop the spread of the recent ransomware incident.

The NCSC has open sourced the code behind MailCheck - one of our Active Cyber Defence projects.

Andy P summarises how organisations can protect users' accounts from password spraying.

Andy P explains how the NCSC rolls out software updates without delays.

Intel's report this week of security vulnerabilities emphasises the importance of automating firmware updates.

Discussing the state of UEFI firmware running on Windows laptops.

In part 3, we discuss why there is no one right answer to "What is the best MDM product?", as we found when building our own IT system.

A look at the high-level design of the NCSC's new IT system, including the single sign-on architecture, our initial end user device choices, and how we tackled the captive portal problem.

Initial research shows firmware frequently out of date.

Investigating the security of firmware and why this often overlooked component should not be ignored.

Work from schools and companies paying dividends in the number and diversity of pupils taking up computer science.

The NCSC's first 'Outreach' event welcomes pupils from Carlton Primary School.

What organisations should think about before choosing apps for secure communications and collaboration...

Covering the ‘Product development', 'Design and functionality' and ‘Though-life’ aspects of product assurance.

The NCSC hands over administration of the Certified Cyber Professional scheme, with details to be announced at CYBERUK 2022.

A technical analysis of a new variant of the SparrowDoor malware.