NCSC UK

The NCSC’s Board Toolkit is designed to help leaders ensure that cyber resilience and risk management strategies are embedded throughout their organisation, supporting its people, systems, processes and technologies. For more information ⬇️ https://www.ncsc.gov.uk/collection/board-toolkit

AI is redefining cyber security best practice. That's why we have added a new chapter to our NCSC research problem book: 'AI in cyber security problems'. To learn more and contribute to the discussion⬇️ https://www.ncsc.gov.uk/blogs/introducing-new-ai-chapter-ncsc-research-problem-book

The critical PHP security issue highlights the importance of understanding your organisation's attack surface. The NCSC's guidance can support your organisation to navigate a vulnerability patch wave and respond with greater confidence. Learn more:

New podcast: Ten years, four CEOs, one mission. This episode, we celebrate the NCSC's tenth anniversary with those who have led the organisation. They reflect on leadership, resilience, and managing crises. 🎧⬇️ https://www.ncsc.gov.uk/section/cyber-series-podcast/series-3

The NCSC has issued an update to the PHP alert reflecting the release of mitigations. We encourage UK organisations to take immediate action. For more information on the issue as well as our guidance, head to⬇️ https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php

The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP. Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated. For more⬇️ www.ncsc.gov.uk/news/critica...

Receive malicious activity notifications from the NCSC. Early Warning can inform your organisation of potential cyber attacks on your network, as soon as possible, potentially giving you the crucial time needed to act. Sign up now⬇️ https://www.ncsc.gov.uk/section/active-cyber-defence/early-warning

Good cyber hygiene is the foundation of defence💡 Our new guidance provides a supportive framework for senior decision makers to build strong cyber security foundations and reduce the likelihood and impact of highly disruptive cyber attacks. Take action today⬇️ www.ncsc.gov.uk/collection/d...

Help shape future guidance and services💡 The NCSC's Active Cyber Defence programme is looking to connect with people involved in evaluating, selecting or adopting external attack surface management capabilities. Find out more⬇️ www.ncsc.gov.uk/blogs/help-n...

We're mid-way through cyber month, so there's never been a better time to ensure that your business is protected against the most common internet based cyber security threats. Check out Cyber Essentials now⬇️ https://www.ncsc.gov.uk/cyberessentials/overview

The first time you try out your cyber incident response plan shouldn’t be on the day you're attacked. That's why the NCSC has assured Cyber Incident Exercising providers to help you test your response in a safe environment. See⬇️ https://www.ncsc.gov.uk/schemes/cyber-incident-exercising/introduction

Investing in strong cyber security underpins growth💡 Our new guidance unpacks how to prepare people, plans and processes for highly disruptive cyber incidents so that you can respond and recover effectively. Act now⬇️ https://www.ncsc.gov.uk/collection/disruptive-cyber-attacks/preparing

We were delighted to receive this letter from His Majesty King Charles III on the occasion of our tenth anniversary, recognising how the NCSC delivers on making the UK the safest place to live and work online. For practical cyber security advice visit ncsc.gov.uk

For small businesses and sole traders, strong cyber security foundations are built one step at a time. You could complete a step from the Cyber Action Toolkit today in as little as ten minutes, try it now⬇️ https://cybertoolkit.service.ncsc.gov.uk/ #CyberMonth2026

This month, the National Cyber Security Centre, part of GCHQ, turns 10. In a special message, CEO Richard Horne marks this milestone and explains why taking action to improve cyber defences is critical for the UK’s resilience and growth. To learn more about our mission, visit ncsc.gov.uk

If you are a customer of ASOS and concerned about your personal data being impacted by a cyber incident they are investigating, visit the NCSC website for actions to take: https://www.ncsc.gov.uk/news/incident-affecting-asos-customers

Tired of juggling complex passwords? Passkeys are faster, simpler and keep your accounts more secure. Boost your cyber resilience this #CyberMonth2026 by switching to passkeys where available. Find out more🔍 https://www.ncsc.gov.uk/passkeys

“It’s the who’s who of the industry.” Put your organisation at the heart of #CYBERUK27. The deadline for key content applications is 7 October. Apply now: https://www.cyberuk.uk/2027/exhibition 📍11-13 May 2027, Liverpool Experience Campus

The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited. Read more⬇️ www.ncsc.gov.uk/news/exploit...

Over 20,000 UK organisations are already signed up to free malicious activity notifications from the NCSC.🔔 Early Warning offers potentially invaluable time to detect and respond to cyber incidents on your network before they escalate. Sign up today⬇️ www.ncsc.gov.uk/section/acti...

How can leaders create environments where cyber resilience becomes part of everyday decision-making? The second episode of our two-part special on institutional wilful blindness considers what it takes to turn cyber risk awareness into action.⬇️ www.ncsc.gov.uk/section/cybe...

The NCSC has published a new blog on how defenders can make better use of AI. To read more⬇️ www.ncsc.gov.uk/blogs/one-do...

Supply chain cyber attacks are rising, yet only a fraction of UK businesses assess these risks. Cyber Essentials significantly reduces exposure to common attacks. For information on how to embed Cyber Essentials within your supply chain ⬇️ https://www.ncsc.gov.uk/cyberessentials/secure-supply-chain

Next week! The NCSC Cyber Series Podcast will discuss how leaders can respond to incidents, how to tell stories that encourage people to act, & how people may actually be the strongest link in an organisation's defences. Other episodes⬇️ https://www.ncsc.gov.uk/section/cyber-series-podcast/series-3

Join us for a free live webinar for small and medium retail businesses to learn practical steps to take for stronger cyber security. 📅Monday 5th October 2026, 10-11am Sign up now⬇️ https://events.teams.microsoft.com/event/0a724efa-36a6-4d0a-8dca-6f4067085878@14aa5744-ece1-474e-a2d7-34f46dda64a1

Sponsor and exhibitor applications for #CYBERUK27 are now open. Join us in Liverpool to explore our 2027 theme: Securing the AI Era. Read more⬇️ https://www.ncsc.gov.uk/sites/default/files/2026-09/CYBERUK-2027-SPEX-brochure.pdf

A new advisory exposes Iranian state cyber attackers using malware dubbed CHOSEN BRICK. Our Director of Operations Paul Chichester says individuals at risk should follow advice in our new advisory ⬇️ https://www.ncsc.gov.uk/news/iranian-cyber-targeting-of-dissidents-activists-and-journalists

Passkeys are a faster, simpler and more secure way to sign in and forget the password headaches.🔐 Millions of users will now be able to choose passkeys on GOV.UK One Login for improved security and usability at point of access. Find out more about passkeys: https://www.ncsc.gov.uk/passkeys

Severe cyber attacks can cause major disruption to systems, data or infrastructure, often with widespread consequences. Act now⬇️ https://www.ncsc.gov.uk/collection/how-to-prepare-and-plan-your-organisations-response-to-severe-cyber-threat-a-guide-for-cni

Don't let unapproved AI use cast a shadow over your organisation’s security. Understanding employees' needs with AI tools will help ensure they can access the benefits securely. Read our new blog on shadow AI here ⬇️ www.ncsc.gov.uk/blogs/the-hi...

The NCSC has published an advisory calling on all organisations that use operational technology (OT) to review their security. Network defenders are encouraged to act on the advice to bolster resilience and prepare for severe cyber threats. Read the advisory⬇️ www.ncsc.gov.uk/news/disrupt...

If you have been the victim of a data breach, you should stay alert to scammers using phishing messages, emails and calls asking you to click links or share sensitive information. For guidance on what to do if your data has been breached ⬇️ www.ncsc.gov.uk/guidance/dat...

The NCSC has seen increased targeting of operational technology (OT) systems across multiple sectors globally, including in the UK. Any organisation with internet-exposed OT should read the latest advisory and review their security posture: www.ncsc.gov.uk/news/disrupt...

Coming next week! Episode 2, series 3 of the NCSC's Cyber Series podcast, featuring leadership expert Dr Margaret Heffernan, who previously spoke at #CYBERUK26 Previous podcasts⬇️ https://www.ncsc.gov.uk/section/cyber-series-podcast/overview Dr Heffernan at CYBERUK26⬇️ https://youtu.be/SiFTmk8BRDE

In charge of configuring Microsoft Windows for your organisation? Setting up BitLocker without a PIN can leave you vulnerable. Learn how to better protect your devices and data with our new guidance. Act now⬇️ https://www.ncsc.gov.uk/blogs/how-bitlocker-pins-help-protect-your-data-and-devices

Today, the NCSC has published a new blog post on managing the cyber risk from agentic AI. The advice supports system designers and operators to make informed decisions as AI cyber security continues to evolve. Read it now: https://www.ncsc.gov.uk/blogs/managing-the-cyber-risk-of-agentic-ai

CYBERUK is coming to Liverpool! The UK government's flagship cyber security event brings the cyber security community together every year to network, learn and collaborate. Sign up to our mailing list for the latest updates⬇️ Save the date: Liverpool, 11-13 May 2027 https://www.cyberuk.uk/

If you design or maintain an Operational Technology (OT) network, our secure connectivity principles can help you build cyber resilience. Make sense of navigating cyber, operational and safety considerations with our new fictional worked example⬇️🚰 www.ncsc.gov.uk/collection/o...

If you've been the victim of a data breach, stay alert to scammers using phishing messages, emails and calls asking you to click links or share sensitive information. For guidance on how to spot such messages and what to do if your data has been breached⬇️ www.ncsc.gov.uk/guidance/dat...

The NCSC is a partner for @AMLUCS, the Applied Machine Learning for Cyber Security Conference 2026, 23-24 September. The programme covers AI security threats, offensive/defensive AI, multi-agent system design, governance, and more. For more information: amlucs.ai

Understanding your supply chain is the first step to securing it.✅ Cyber Essentials provides a clear way to reduce complexity on cyber security due diligence. To find out whether your suppliers are certified, try the supplier check tool⬇️ https://ncsc.gov.uk/cyberessentials/secure-supply-chain

Cyber security is more than a compliance function or technical issue, it's about business survival, & demands senior engagement. The NCSC’s Board Toolkit is designed to help leaders embed cyber resilience & risk management within their organisations⬇️ https://www.ncsc.gov.uk/collection/board-toolkit

The NCSC has published a new statement on AI security in response to recent incidents resulting from frontier AI evaluations. Read the latest from our CTO Ollie Whitehouse: www.ncsc.gov.uk/news/ncsc-st...

Time is a key asset when faced with a cyber incident, and an Early Warning notification could be potentially invaluable to your business operations. Add a vital layer to your cyber defences with free malicious activity alerts for UK organisations⚠️⬇️ www.ncsc.gov.uk/section/acti...