Sign in

NCSC UK

@ncsc.gov.uk
2K followers 12 following 300 posts

We are the National Cyber Security Centre – part of the UK’s intelligence & cyber agency GCHQ. We help to make the UK the safest place to live and work online.

PostsRepliesMedia
NCSC UK @ncsc.gov.uk · 28/09/2026
The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited. Read more⬇️ www.ncsc.gov.uk/news/exploit...
ncsc.gov.uk
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
042
NCSC UK @ncsc.gov.uk · 24/09/2026
Over 20,000 UK organisations are already signed up to free malicious activity notifications from the NCSC.🔔 Early Warning offers potentially invaluable time to detect and respond to cyber incidents on your network before they escalate. Sign up today⬇️ www.ncsc.gov.uk/section/acti...
010
NCSC UK @ncsc.gov.uk · 23/09/2026
How can leaders create environments where cyber resilience becomes part of everyday decision-making? The second episode of our two-part special on institutional wilful blindness considers what it takes to turn cyber risk awareness into action.⬇️ www.ncsc.gov.uk/section/cybe...
010
NCSC UK @ncsc.gov.uk · 22/09/2026
The NCSC has published a new blog on how defenders can make better use of AI. To read more⬇️ www.ncsc.gov.uk/blogs/one-do...
New blog: One does not simply defend agentically
011
NCSC UK @ncsc.gov.uk · 21/09/2026
Supply chain cyber attacks are rising, yet only a fraction of UK businesses assess these risks. Cyber Essentials significantly reduces exposure to common attacks. For information on how to embed Cyber Essentials within your supply chain ⬇️ www.ncsc.gov.uk/cyberessentials/sec…
022
NCSC UK @ncsc.gov.uk · 18/09/2026
Next week! The NCSC Cyber Series Podcast will discuss how leaders can respond to incidents, how to tell stories that encourage people to act, & how people may actually be the strongest link in an organisation's defences. Other episodes⬇️ www.ncsc.gov.uk/section/cyber-serie…
031
NCSC UK @ncsc.gov.uk · 17/09/2026
Join us for a free live webinar for small and medium retail businesses to learn practical steps to take for stronger cyber security. 📅Monday 5th October 2026, 10-11am Sign up now⬇️ events.teams.microsoft.com/event/0a…
events.teams.microsoft.com
Microsoft Virtual Events Powered by Teams
Microsoft Virtual Events Powered by Teams
022
NCSC UK @ncsc.gov.uk · 16/09/2026
Sponsor and exhibitor applications for #CYBERUK27 are now open. Join us in Liverpool to explore our 2027 theme: Securing the AI Era. Read more⬇️ www.ncsc.gov.uk/sites/default/files…
000
NCSC UK @ncsc.gov.uk · 16/09/2026
A new advisory exposes Iranian state cyber attackers using malware dubbed CHOSEN BRICK. Our Director of Operations Paul Chichester says individuals at risk should follow advice in our new advisory ⬇️ www.ncsc.gov.uk/news/iranian-cyber-…
031
NCSC UK @ncsc.gov.uk · 15/09/2026
Today, the NCSC alongside the FBI and the Dutch AIVD, has published an advisory exposing spyware used by Iranian state actors to target dissidents, activists, and journalists. 1/2
141
NCSC UK @ncsc.gov.uk · 14/09/2026
Passkeys are a faster, simpler and more secure way to sign in and forget the password headaches.🔐 Millions of users will now be able to choose passkeys on GOV.UK One Login for improved security and usability at point of access. Find out more about passkeys: www.ncsc.gov.uk/passkeys
042
NCSC UK @ncsc.gov.uk · 12/09/2026
Severe cyber attacks can cause major disruption to systems, data or infrastructure, often with widespread consequences. Act now⬇️ www.ncsc.gov.uk/collection/how-to-p…
011
NCSC UK @ncsc.gov.uk · 07/09/2026
Don't let unapproved AI use cast a shadow over your organisation’s security. Understanding employees' needs with AI tools will help ensure they can access the benefits securely. Read our new blog on shadow AI here ⬇️ www.ncsc.gov.uk/blogs/the-hi...
Use AI at work? Using unapproved apps can put your organisation at risk of breaches and cyber attacks. Read more about shadow AI: NCSC.gov.uk
031
NCSC UK @ncsc.gov.uk · 28/08/2026
The NCSC has published an advisory calling on all organisations that use operational technology (OT) to review their security. Network defenders are encouraged to act on the advice to bolster resilience and prepare for severe cyber threats. Read the advisory⬇️ www.ncsc.gov.uk/news/disrupt...
A picture of Jonathon Ellison, NCSC Director for National Resilience, alongside a quote which says: Recent disruptive activity against operational technology makes clear that the threat to UK networks is far from theoretical. It is part of a broader trend in targeting we are seeing across sectors. Our advice is clear: OT devices do not need to be directly exposed to the internet and so we urge organisations to ensure they are not - to limit opportunities for malicious activity. Against the backdrop of growing capability and geopolitical tensions, the urgency with which organisations need to act has never been more acute.
010
NCSC UK @ncsc.gov.uk · 27/08/2026
If you have been the victim of a data breach, you should stay alert to scammers using phishing messages, emails and calls asking you to click links or share sensitive information. For guidance on what to do if your data has been breached ⬇️ www.ncsc.gov.uk/guidance/dat...
Think you've been the victim of a data breach? The NCSC has guidance to help you respond: NCSC.gov.uk/guidance/data-breaches
001
NCSC UK @ncsc.gov.uk · 27/08/2026
The NCSC has seen increased targeting of operational technology (OT) systems across multiple sectors globally, including in the UK. Any organisation with internet-exposed OT should read the latest advisory and review their security posture: www.ncsc.gov.uk/news/disrupt...
ncsc.gov.uk
Disruptive cyber activity highlights risk from internet-exposed systems and edge devices
010
NCSC UK @ncsc.gov.uk · 25/08/2026
New podcast available now: Leadership expert and author Margaret Heffernan, Genevieve Liveley, Director of the Research Institute for Sociotechnical Cyber Security, and Kathryn, our Head of Social Sciences explore why organisations struggle to respond to cyber risk⬇️ www.ncsc.gov.uk/section/cybe...
182
NCSC UK @ncsc.gov.uk · 22/08/2026
Coming next week! Episode 2, series 3 of the NCSC's Cyber Series podcast, featuring leadership expert Dr Margaret Heffernan, who previously spoke at #CYBERUK26 Previous podcasts⬇️ www.ncsc.gov.uk/section/cyber-serie… Dr Heffernan at CYBERUK26⬇️ youtu.be/SiFTmk8BRDE
001
NCSC UK @ncsc.gov.uk · 21/08/2026
In charge of configuring Microsoft Windows for your organisation? Setting up BitLocker without a PIN can leave you vulnerable. Learn how to better protect your devices and data with our new guidance. Act now⬇️ www.ncsc.gov.uk/blogs/how-bitlocker…
ncsc.gov.uk
How BitLocker PINs help protect your data and devices
Using a PIN mitigates many BitLocker vulnerabilities. Make sure you’re ready for the next one...
152
NCSC UK @ncsc.gov.uk · 20/08/2026
Today, the NCSC has published a new blog post on managing the cyber risk from agentic AI. The advice supports system designers and operators to make informed decisions as AI cyber security continues to evolve. Read it now: www.ncsc.gov.uk/blogs/managing-the-…
A quote from NCSC CTO Ollie Whitehouse which reads: Appropriate human oversight is paramount when granting any level of autonomy to agentic AI systems so that cyber risk can be effectively managed. From the instructions agents receive to the systems they can access, operators must carefully define the red lines around how AI systems function and be prepared to detect unintended activity and respond accordingly.
154
NCSC UK @ncsc.gov.uk · 19/08/2026
CYBERUK is coming to Liverpool! The UK government's flagship cyber security event brings the cyber security community together every year to network, learn and collaborate. Sign up to our mailing list for the latest updates⬇️ Save the date: Liverpool, 11-13 May 2027 www.cyberuk.uk
Save the date for CYBERUK 2027. CYBERUK 2027 is coming to Liverpool, 11-13 May.
030
NCSC UK @ncsc.gov.uk · 18/08/2026
If you design or maintain an Operational Technology (OT) network, our secure connectivity principles can help you build cyber resilience. Make sense of navigating cyber, operational and safety considerations with our new fictional worked example⬇️🚰 www.ncsc.gov.uk/collection/o...
ncsc.gov.uk
Secure connectivity - Water Sector Example
A fictional worked example exploring the application of the NCSC’s secure connectivity principles.
132
NCSC UK @ncsc.gov.uk · 17/08/2026
If you've been the victim of a data breach, stay alert to scammers using phishing messages, emails and calls asking you to click links or share sensitive information. For guidance on how to spot such messages and what to do if your data has been breached⬇️ www.ncsc.gov.uk/guidance/dat...
Think you've been the victim of a data breach? The NCSC has guidance to help you respond. ncsc.gov.uk/guidance/data-breaches
182
NCSC UK @ncsc.gov.uk · 17/08/2026
The NCSC is a partner for @AMLUCS, the Applied Machine Learning for Cyber Security Conference 2026, 23-24 September. The programme covers AI security threats, offensive/defensive AI, multi-agent system design, governance, and more. For more information: amlucs.ai
amlucs.ai
AMLUCS | Official AMLUCS Website-Register for AMLUCS 2026
Join AMLUCS 2026 in London to explore AI and ML advancements in cybersecurity. Attend expert talks, hands-on sessions, and networking to discover innovative threat detection, defense strategies, and research driving the future of secure systems. 23-24 S...
130
NCSC UK @ncsc.gov.uk · 12/08/2026
Understanding your supply chain is the first step to securing it.✅ Cyber Essentials provides a clear way to reduce complexity on cyber security due diligence. To find out whether your suppliers are certified, try the supplier check tool⬇️ ncsc.gov.uk/cyberessentials/secure-…
National Cyber Security Centre graphic of a magnifying glass studying puzzle pieces, one of which is damaged upon closer inspection. The text reads "You can't protect what you can't see. Improve your supply chain oversight with Cyber Essentials".
032
NCSC UK @ncsc.gov.uk · 06/08/2026
Cyber security is more than a compliance function or technical issue, it's about business survival, & demands senior engagement. The NCSC’s Board Toolkit is designed to help leaders embed cyber resilience & risk management within their organisations⬇️ www.ncsc.gov.uk/collection/board-to…
A quote from NCSC CEO, Dr Richard Horne: "Effective cyber governance starts at the top. Board members have a critical role in ensuring their organisations are able to exploit the opportunities that technology brings in such a way that they build a resilient and secure business.”  
012
NCSC UK @ncsc.gov.uk · 05/08/2026
The NCSC has published a new statement on AI security in response to recent incidents resulting from frontier AI evaluations. Read the latest from our CTO Ollie Whitehouse: www.ncsc.gov.uk/news/ncsc-st...
ncsc.gov.uk
NCSC statement in response to recent incidents resulting from frontier AI evaluations
A statement from Ollie Whitehouse, Chief Technology Officer at the NCSC, on AI security following recent incidents.
043
NCSC UK @ncsc.gov.uk · 04/08/2026
Time is a key asset when faced with a cyber incident, and an Early Warning notification could be potentially invaluable to your business operations. Add a vital layer to your cyber defences with free malicious activity alerts for UK organisations⚠️⬇️ www.ncsc.gov.uk/section/acti...
011
NCSC UK @ncsc.gov.uk · 31/07/2026
"Does this make our citizens and our allies safer?" Anne Keast-Butler, Director @GCHQ, spoke at #CYBERUK26 about how security underpins the agency’s freedom to operate and is a central goal that informs decision-making. To watch Anne's full discussion ⬇️ www.youtube.com/watch?v=8ygU...
140
NCSC UK @ncsc.gov.uk · 31/07/2026
Migrating to post-quantum cryptography (PQC) requires careful planning, but organisations do not need to navigate it alone. The NCSC's recent blog has key reflections on the importance of Board engagement, supply chain readiness, and collaboration ⬇️ www.ncsc.gov.uk/blogs/post-q...
ncsc.gov.uk
Post-quantum cryptography (PQC) migration workshop report
No organisation can navigate the migration alone; key takeaways from our first PQC migration workshop.
010
NCSC UK @ncsc.gov.uk · 30/07/2026
43% of businesses reported a cyber breach last year. The NCSC offers clear, practical response & recovery guidance to support organisations through a disruptive cyber attack. Don't wait for the breach. Act now to support business continuity, resilience & growth: www.ncsc.gov.uk/blogs/when-c...
A quote from NCSC CEO Richard Horne that says: “In today’s world, the ability to absorb cyber attacks, contain their impact, sustain critical operations and recover quickly is no longer optional. It is a core competence for any digital organisation and that is pretty much every organisation.”
040
NCSC UK @ncsc.gov.uk · 28/07/2026
The NCSC has co-sealed joint guidance to assist critical national infrastructure operators in becoming more resilient to the expanding cyber threat. The advice, published by the Five Eyes cyber security agencies, outlines six steps to take to successfully isolate vital systems.
264
NCSC UK @ncsc.gov.uk · 27/07/2026
"The New AI Reality" – our latest podcast episode – is out now🆕🎙️ The agentic AI world is rapidly changing, but what should you do about it? Tune in as NCSC experts join Alex Hern @hern.bsky.social, AI Writer @economist.com ⬇️ www.ncsc.gov.uk/section/cybe... #CyberSeries
021
NCSC UK @ncsc.gov.uk · 24/07/2026
Next week: NCSC Cyber Series podcast Series 3. Experts explore cyber security issues shaping organisations today: frontier AI, supply chains, resilience & culture, with practical insights on navigating the risk landscape. 🎧Previous eps⬇️ www.ncsc.gov.uk/section/cyber-serie…
020
NCSC UK @ncsc.gov.uk · 23/07/2026
Today, the UK and partners have exposed Russian state-supported actors LAUNDRY BEAR for a phishing campaign targeting Western organisations. Act now to mitigate the threat⬇️ www.ncsc.gov.uk/news/uk-and-partner…
Quote from NCSC Chief Operating Officer, Beth Hopkins CMG, which reads: "This phishing campaign demonstrates how hostile actors will ruthlessly adapt techniques and exploit vulnerable technology in pursuit of their aims to steal sensitive information from Western organisations. We will continue to call out malicious cyber activity supported by the Russian state and urge everyone to follow NCSC guidance to raise resilience, including steps to strengthen online account security".
163
NCSC UK @ncsc.gov.uk · 22/07/2026
When a severe cyber incident hits, it will be too late to begin figuring out how to respond effectively. Don’t let disruption become gridlock; it's time to act⏰ www.ncsc.gov.uk/collection/how-to-p…
062
NCSC UK @ncsc.gov.uk · 21/07/2026
Supply chain cyber attacks are rising, yet just 15% of businesses said they reviewed risks posed by their immediate suppliers in the last year. Get started with embedding Cyber Essentials in your organisation’s supply chain today: www.ncsc.gov.uk/cyberessentials/sec…
000
NCSC UK @ncsc.gov.uk · 13/07/2026
Today, the NCSC, alongside international allies, has published a new advisory on defending against the threat from Russian state intelligence actors. To read more on the threat and how to mitigate it ⬇️ www.ncsc.gov.uk/news/uk-and-...
Quote card with a picture of NCSC Director of National Resilience, Jonathon Ellison, facing the camera wearing a suit.

The quote reads: 

Today’s joint advisory provides decisive, actionable directions from the global security community that network defenders should implement to protect against Russian Intelligence operations and secure the UK’s critical infrastructure. 

I’d strongly encourage all organisations, especially those entrusted with UK critical networks, to adopt these recommended measures immediately, thereby reducing the risk of compromise.

 - Jonathon Ellison, NCSC Director of National Resilience
022
NCSC UK @ncsc.gov.uk · 11/07/2026
Cyber deception as a defensive strategy 'is both a viable tool and a valuable tool when used in the right way to disrupt adversaries.' NCSC CTO Ollie Whitehouse on how deception can be used for threat intelligence and threat detection. To learn more⬇️ www.ncsc.gov.uk/blog-post/cy...
ncsc.gov.uk
Cyber deception trials: what we’ve learned so far
An update on the NCSC's trials to test the real-world efficacy of cyber deception solutions.
042
NCSC UK @ncsc.gov.uk · 07/07/2026
Don’t wait for the breach, sign up for tailored alerts on the cyber threats to your organisation's IP address. Early Warning delivers an average of 2,000 alerts a month, offering potentially invaluable time to detect and stop a cyber incident. Sign up⬇️ www.ncsc.gov.uk/section/acti...
Identify cyber threats before they escalate. Early Warning provides alerts about potential cyber attacks. Sign up for free to help secure your business.
000
NCSC UK @ncsc.gov.uk · 01/07/2026
Mitigating the threat from future quantum computers is a challenge that needs addressing now. Migration to post-quantum cryptography (PQC) will take years to complete. To learn about the key milestones and necessary steps to take towards PQC⬇️ www.ncsc.gov.uk/guidance/pqc...
122
NCSC UK @ncsc.gov.uk · 26/06/2026
This year's CyberFirst Social Value Report highlights the positive impact of early skills investment in classrooms, communities, and ultimately across the wider UK economy and society. Learn more: www.ncsc.gov.uk/sites/default/files…
CyberFirst Social Value Report 2026 headlines: £45.1 million social value generated (2025-2026), £6.94 Social Return on Investment delivered for every £1 invested, 58,000+ students engaged from 683 schools, improved educational attainment, workforce readiness and diversity in the talent pipeline. Search NCSC.gov.uk/CyberFirst.
021
NCSC UK @ncsc.gov.uk · 25/06/2026
Whilst frontier AI can ultimately benefit our cyber defences, in the immediate term it is making it easier and faster for attackers to discover and exploit cyber weaknesses. Organisations should take these 5 urgent steps to maintain cyber security fundamentals:🧵
Torch illuminating the darkness. Text reads: frontier AI will shine a light on your basic cyber hygiene. Act now. Visit ncsc.gov.uk/frontier-ai
100
NCSC UK @ncsc.gov.uk · 23/06/2026
With our Five Eyes partners, we have published a joint statement warning organisations they have months - not years - to protect their systems from the accelerating cyber threat driven by frontier AI. 🧵 To read the full statement ⬇️ www.ncsc.gov.uk/news/the-ai-...
ncsc.gov.uk
The AI shift in cyber risk: why leaders must act now
267
NCSC UK @ncsc.gov.uk · 20/06/2026
Need a vibe check? Find out how our spectrum approach could help you build safer AI-assisted software: www.ncsc.gov.uk/blogs/the-vibe-codi…
ncsc.gov.uk
The 'vibe coding spectrum' approach to AI-assisted software development
Different code deserves different levels of oversight, so calibrate your approach to ‘vibe coding’ accordingly.
022
NCSC UK @ncsc.gov.uk · 18/06/2026
Organisations using Fortinet services are urged to investigate whether they have been affected by global targeting of firewalls and VPN gateways and should follow mitigation advice to help defend against the threat. For more information ⬇️ www.ncsc.gov.uk/news/advice-...
ncsc.gov.uk
Alert: NCSC issues advice following global targeting of Fortinet firewalls and VPN gateways
Organisations using Fortinet services are being urged to take action following a campaign affecting firewalls and VPN gateways.
045
NCSC UK @ncsc.gov.uk · 17/06/2026
“Cyber security is a continuous national contest with capable adversaries, requiring urgent, coordinated action across government, industry and individuals to strengthen resilience.” - NCSC CEO Dr Richard Horne delivering RUSI’s Annual Security Lecture this afternoon.
NCSC CEO Dr Richard Horne Standing at a podium on stage giving speech to a crowd.
220
NCSC UK @ncsc.gov.uk · 15/06/2026
On CYBERUK TV, Brett Leatherman, Assistant Director of the FBI Cyber Division, explained how bringing in outside perspectives can assist with cyber threat response. Cyber resilience thrives when specialist skills, diverse perspectives and real-world insights are connected.
110
NCSC UK @ncsc.gov.uk · 10/06/2026
🎉 We are celebrating success across our 2025/26 Undergraduate certification cycle: ✅ 23 university programmes recognised 🎓 3 new universities joining the community 💼 2 apprenticeship programmes achieving NCSC full certification
120
NCSC UK @ncsc.gov.uk · 09/06/2026
At #CYBERUK26 Keri Gilder, CEO of Colt Technology Services, shared her experience of leading an organisation through a cyber attack. Read our blog on why resilience matters as much as defence, and next steps to take: www.ncsc.gov.uk/blog-post/wh... Watch the full talk: youtu.be/luvwJDFs7MY?...
010