Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying
Some adults may not need to prove it, but many will
Latest
Lapsed US snooping law still running as senators object
FISA 702 is one of two key US laws that undermine data sovereignty and allow the US to access foreign data without the subject knowing. Senators demand release of a secret ruling
Austrian doctors to swap emails and phone calls for encrypted messages
Austria is following Germany’s lead by introducing a sovereign encrypted messaging service for healthcare professionals
Vulnerabilities
PHP2Shell: US updates Kev catalogue as exploits spread
After live exploitation of PHP2Shell was verified at the weekend, the US Cisa cyber agency has updated its vulnerability catalogue, urging organisations to prioritise their fixes
Vulnerabilities
OpenAI’s Altman: Only way out of patch apocalypse is through
OpenAI CEO Sam Altman took to the keynote stage at Oracle AI World, calling for the security community to keep focus in the face of AI-enabled vulnerability discovery
From industry concern to practical action: the value of working with regulators
How industry, the NCSC and the FCA worked together to help organisations share information while protecting market integrity
Autumn Budget 2026: Healey sets out AI funding
The chancellor wants to boost UK tech sovereignty and has unveiled plans to support chip development, AI defence and biosecurity
Vulnerabilities
AI World: AI vulnerability surge brings change for Oracle’s cyber practice
With CVE volumes spiking amid AI-assisted vulnerability discovery, Oracle is responding with cyber initiatives and practices for its customers
Vulnerabilities
EU makes progress towards PHP patching, UK lags behind
Five days into the PHP2Shell incident, and patch rates are creeping upwards, but the majority of publicly visible PHP hosts remain exposed
Vulnerabilities
Critical security issue affecting PHP
Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619).
Introducing a new AI chapter in the NCSC research problem book
A revolution is underway at the intersection of AI and cyber security.
Why Britain should reject the lure of cheap – and scary – Chinese AI
In the west the technology comes with at least some effort to provide security and a benign intent – not so from ChinaThere is much to fear from artificial intelligence developed in China and handed to businesses and…
Using TLS to protect data
Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.
Post-quantum updates to our TLS guidance
The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.
Ransomware
U.K. Sanctions Cryptomus for RU Money Laundering
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud…
Data Breaches
Cyber-attack similar to OpenAI Medicare breach seems likely in UK, says minister
Kanishka Narayan, concerned by Australian incident, says British cyber defences could be bypassed by artificial intelligence agentUK politics live – latest updatesAn AI-driven cyber-attack similar to the OpenAI breach…
Help the NCSC understand how organisations approach external attack surface risk
We're looking to hear from people involved in evaluating, selecting or adopting EASM.
Vulnerabilities
China-linked malicious actors called out by UK and international partners for targeting sensitive data globally
Joint advisory with international partners highlights malicious targeting of organisations from a range of sectors across the globe.
Incident affecting ASOS customers
ASOS has said it is investigating a cyber incident and that some customer personal information may have been accessed.
Zero-day
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.