Tag: ncsc
51 articles
UK Warns of Iranian Spyware Campaign Targeting Dissidents
The UK's National Cyber Security Centre has warned that dissidents, activists, and journalists critical of the Iranian regime are being ruthlessly targeted by a Tehran-backed spyware campaign, which steals emails, messages, and device data to silence critics. This sinister campaign has even led to stolen info being leaked on pro-Iranian sites, putting lives at risk.
Iranian Hackers Deploy Telegram-Controlled Malware to Infiltrate Dissident Networks
Iranian dissidents, journalists, and activists are in the crosshairs of Tehran's intelligence service, which is using sneaky Telegram-controlled malware to spy on and expose targets around the world, putting their personal safety and private lives at risk. This sinister campaign has prompted a joint warning from top cyber agencies in the UK, US, and Netherlands.
UK.gov Deploys Passkeys for 23 Million Users
Say goodbye to password headaches! The UK government just made it easier for 23 million people to securely access public services with passkeys, as part of its GOV.UK One Login rollout.
Dutch NCSC Warns of Imminent Check Point VPN Flaw Exploitation
The Dutch National Cyber Security Centrum is warning organizations to act fast - two critical flaws in Check Point VPN, tracked as CVE-2026-85102 and CVE-2026-85103, are likely to be exploited soon, with potentially severe consequences. Install security updates as soon as possible to protect yourself.
NCSC Warns of Shadow AI Security Risks
Employees are increasingly turning to AI tools outside of company-approved systems, a phenomenon known as "shadow AI," which poses significant security risks. A staggering 71% of UK employees have already admitted to using unauthorized AI tools at work.
NCSC Warns of Unchecked AI Risks, Urges Tighter Controls
Stay ahead of AI risks with expert guidance from the UK's National Cyber Security Centre (NCSC), which advises organizations to implement sandboxing, human oversight, and tight access controls to prevent unintended or malicious activity from autonomous AI agents. By taking these proactive steps, you can ensure safer deployment of AI systems and minimize potential harm.
Hackers exploit macOS flaw to deploy Monero miners
Hackers are exploiting a recently fixed macOS security flaw to secretly deploy Monero miners, and experts warn that public exploit code is now available, putting users at risk. This vulnerability, affecting macOS's built-in Screen Sharing feature, allows attackers to gain access without valid credentials.
NCSC Urges Vendors to Embed Forensic Observability in Network Devices
When cyber incidents strike, organizations need a reliable way to piece together what happened and determine if a device is still trustworthy - that's where forensic observability comes in. The NCSC is urging vendors to build this capability into network devices, like firewalls and VPN gateways, to help defenders quickly investigate and respond to threats.
NCSC Issues Guidance to Bolster Cyber-Incident Response
Don't let a cyber-attack catch you off guard - the NCSC's new guidance helps you prepare for the worst with a practical, three-stage playbook to respond and recover. Train for the cyber-marathon with a clear plan to tackle disruptions and get back on track.
UK Unveils AI-Powered Cyber Shield to Bolster National Defense
The UK's National Cyber Security Centre warns that attackers are using AI to supercharge their cyber offensives, speeding up vulnerability discovery and reconnaissance to alarming levels. In response, the UK has unveiled an AI-powered Cyber Shield to bolster its national defense and stay ahead of the threats.
Spain Arrests Alleged Pro-Russia Hacktivist Tied to Cyber Attacks
Hacktivists aligned with Russia are wreaking havoc on UK organizations with denial-of-service attacks that may be simple, but have a significant impact by disrupting essential services. These attacks can overwhelm important websites and online systems, leaving people unable to access the services they rely on daily.
UK Government Unveils Cyber Resilience Pledge with Over 60 Signatories
Joining forces to combat cyber threats, the UK government has launched a groundbreaking Cyber Resilience Pledge, signed by over 60 organisations, to strengthen board-level accountability and supply chain security. By making three key commitments, signatories can bolster their defences and stay ahead of emerging threats.
NCSC Offers Guidance on Thwarting Penetration Testers
Want to make life harder for hackers? The National Cyber Security Centre teamed up with penetration testers to share practical tips on building secure systems from the ground up.
Nation-States Drive 75% of UK Critical Infrastructure Cyber-Attacks, NCSC Warns
The UK's National Cyber Security Centre has warned that a staggering 75% of critical infrastructure cyber-attacks in the UK are driven by nation-states, with 200 incidents reported in the past year alone. This alarming trend highlights the growing threat of state-sponsored cybercrime, with countries like Russia, China, and Iran linked to many of these attacks.
Cybersecurity Leaders Stress Need for Effective Crisis Playbooks
To navigate a cybersecurity crisis effectively, you need a solid playbook - and that means getting three key things right: identifying the crisis type, assembling the right team, and clarifying roles and responsibilities to build trust. With these pillars in place, you'll be better equipped to tackle even the toughest challenges with confidence.
NCSC Warns of Rising Uncertainty, Urges Immediate Cyber Resilience Boost
With 77% of British organizations hit by a cyber incident in the past year, the National Cyber Security Centre is sounding the alarm: it's time to supercharge your cyber resilience now more than ever. The rapidly changing threat landscape demands immediate action to protect your business.
Dutch Police Disrupt Major Botnet Linked to 17 Million Infected Devices
Dutch authorities have successfully dismantled a massive botnet that had infected a staggering 17 million devices worldwide, turning everyday gadgets into a global attack platform. The operation, led by the Dutch Police and National Cyber Security Center, seized key servers and brought the botnet's infrastructure offline.
Dutch Authorities Disrupt Massive Botnet of 17 Million Devices
In a major cybercrime crackdown, Dutch authorities have successfully dismantled a massive botnet comprising 17 million infected devices, seizing over 200 servers used to host its infrastructure. This significant takedown was made possible through a collaborative effort between the Police and the National Cyber Security Centre (NCSC).
NCSC Warns of Agentic AI Risks, Urges Cautious Deployment
Be cautious with agentic AI - a single misstep could have serious consequences if an agent misinterprets its task, oversteps its boundaries, or falls prey to manipulation. Don't give agentic AI unrestricted access to sensitive data or critical systems without careful consideration.
UK Cyber Agency Warns of Impending Patch Wave Fueled by AI
The UK's National Cyber Security Centre warns that AI is about to expose decades of technical shortcuts, demanding a massive and urgent patching effort - and organisations must prepare to patch quickly, frequently, and at scale. Get ready for a surge in fixes as buried technical debt is brought to the surface.
UK Urges Adoption of Passkeys Over Passwords
Say goodbye to password headaches! The UK is leading the charge towards a more secure and user-friendly login experience with passkeys, which offer stronger resilience and eliminate many common cyber threats.
NCSC Warns of Flawed SOC Metrics
The National Cyber Security Centre is warning that common security operations center metrics are fundamentally flawed, and that the only metric that truly matters is whether attacks are detected and responded to in a timely manner. By focusing on easily quantifiable but misleading metrics, organizations may inadvertently be encouraging their teams to prioritize speed over substance.
Firestarter Malware Evades Cisco Firewall Updates, Persists Across Reboots
A custom backdoor called Firestarter has been discovered evading Cisco firewall updates and persisting across reboots, posing a significant threat to cybersecurity. This sophisticated malware is attributed to a threat actor linked to cyberespionage campaigns, including the notorious ArcaneDoor operation.
CISA Exposes Persistent FIRESTARTER Backdoor in Cisco Devices
CISA and NCSC have uncovered a sneaky FIRESTARTER backdoor lurking in Cisco devices, allowing hackers to regain control even after patches are applied. This persistent threat can leave devices vulnerable to re-entry, putting your entire network at risk.