NCSC Feed

By exploiting cloud services, organisations no longer have to choose between ‘more security’ and ‘better usability’.

Why striving for better (rather than perfect) security will help more people stay safer online.

In a perfect world we'd use unique passwords for every online service. But the world isn't perfect...

Emma W on why supporting users to do the right things is better then telling them what to do.

Allow your website to accept pasted passwords - it makes your site more secure, not less.

Why the NCSC decided to advise against this long-established security guideline.

A brief guide to MIKEY-SAKKE, a protocol that allows organisations to provide secure communications with end-to-end encryption.

Advice for board members of medium to large organisations that are at risk from the Apache Log4j vulnerability.

Toby L, Technical Lead for Incident Management, explains how modern-day ransomware attacks are evolving.

Immediate actions for all organisations using the SolarWinds Orion suite of IT management tools

Unparalleled access to skilled users transformed Rebellion Defence’s product roadmap.

Approaches to the design, development and assessment of products capable of resisting elevated threats.

The NCSC's technical director outlines the challenges that TLS 1.3 presents for enterprise security.

Andrew A puts some context around the recently published KRACK guidance and explains why patching - once again - is the answer.

Jon L provides an update on the NCSC's guidance on the 'WannaCry' ransomware.

MalwareTech's blog post on coming across a kill switch to stop the spread of the recent ransomware incident.

The NCSC has open sourced the code behind MailCheck - one of our Active Cyber Defence projects.

The following tips can help organisations create their own cyber incident response exercises.

Following attacks on political party websites, this guidance provides a summary of 5 practical steps that your organisation can take to help it prepare to respond in the event of a Denial of Service (DoS) attack.

Focused on automating UEFI firmware updates on Windows devices.