CTO at NCSC Summary: week ending April 19th. As AI accelerates vulnerability discovery, organisations must raise their security baselines to safeguard their cyber security.

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending April 12th Technical and operational debt now the talk of the town..

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

There is no easy 'just do' in response to the surfacing of latent vulnerability in technology.

Vendors must make the investment to address, test and then release.

Customers then need to patch.

There is no magic - just a sequence of events which now need to take place..

CTO at NCSC Summary: week ending March 22nd UK registered organisations can apply for a share of up to £5 million for collaborative projects that enable adoption of the Government's Software Security Code of Practice

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending April 5th Alongside international partners, the NCSC has issued actions for individuals at risk of targeted attacks against messaging apps

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending March 29th UK organisations encouraged to take immediate action to mitigate two recently disclosed vulnerabilities, CVE-2026-3055 and CVE-2026-4368, that affect Citrix NetScaler ADC and Citrix NetScaler Gateway.

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending March 22nd UK registered organisations can apply for a share of up to £5 million for collaborative projects that enable adoption of the Government's Software Security Code of Practice

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending March 15th SQL injection in AI systems in 2026...

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

Free Cyber Action Toolkit. Helping sole traders and small businesses take simple steps to protect against cyber criminals. Get your free toolkit.

No business is too small to be a target for cyber attackers.

The Cyber Action Toolkit is a free, easy-to-use government service designed to help your business avoid being one of the millions that experience a cyber attack every year.

Try it now:
https://cybertoolkit.service.ncsc.gov.uk/

CTO at NCSC Summary: week ending March 15th SQL injection in AI systems in 2026...

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending March 8th NCSC advises UK organisations to take action following conflict in the Middle East

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending March 1st Agencies strongly encourage immediate investigation of potential compromise of Cisco Catalyst SD-WAN, and full updating and hardening.

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending March 1st Agencies strongly encourage immediate investigation of potential compromise of Cisco Catalyst SD-WAN, and full updating and hardening.

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

Exploitation of Cisco Catalyst SD-WAN Agencies strongly encourage immediate investigation of potential compromise of Cisco Catalyst SD-WAN, and full updating and hardening.

Exploitation of Cisco Catalyst SD-WAN

Agencies strongly encourage immediate investigation of potential compromise of Cisco Catalyst SD-WAN, and full updating and hardening.

www.ncsc.gov.uk/news/exploit...

Exploitation of Cisco Catalyst SD-WAN Agencies strongly encourage immediate investigation of potential compromise of Cisco Catalyst SD-WAN, and full updating and hardening.

Exploitation of Cisco Catalyst SD-WAN

Agencies strongly encourage immediate investigation of potential compromise of Cisco Catalyst SD-WAN, and full updating and hardening.

www.ncsc.gov.uk/news/exploit...

CTO at NCSC Summary: week ending February 22nd Malicious cyber activity is a burden on business and the way this burden and cost is minimised is through increased resilience...

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending February 22nd Malicious cyber activity is a burden on business and the way this burden and cost is minimised is through increased resilience...

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending February 15th Organisations with experience in external attack surface management can help NCSC UK shape future Active Cyber Defence 2.0 services

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending February 15th Organisations with experience in external attack surface management can help NCSC UK shape future Active Cyber Defence 2.0 services

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

Improving your response to vulnerability management How to ensure the ‘organisational memory’ of past vulnerabilities is not lost.

At the @ncsc.gov.uk we have today released reflections on how to ensure the ‘organisational memory’ of past vulnerabilities is not lost in technology producers.

www.ncsc.gov.uk/blog-post/im...

CTO at NCSC Summary: week ending February 8th Nation-state threat actors exploit end-of-support (EOS) edge devices -ncluding, but not limited to, load balancers, firewalls, routers, and virtual private network (VPN) gateways

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending February 8th Nation-state threat actors exploit end-of-support (EOS) edge devices -ncluding, but not limited to, load balancers, firewalls, routers, and virtual private network (VPN) gateways

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending February 1st Cyber incidents targeting organisations – particularly those against critical national infrastructure (CNI) – are becoming more frequent, sophisticated and potentially destructive.

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending January 25th NCSC issues warning over hacktivist groups disrupting UK organisations and online services

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

Pro-Russia hacktivist activity continues to target UK organisations The NCSC encourages local government and critical infrastructure operators to harden their ‘denial of service’ (DoS) defences

Today the NCSC has issued a warning highlighting Pro-Russian Hacktivist groups are targeting sectors across the UK.

All organisations are urged to act now by reviewing and implementing our free guidance to protect against DoS attacks.

CTO at NCSC Summary: week ending January 18th We have time to ensure and assure we get the outcome we want, but we don’t have limitless time. As such urgency, pace and relentless focus are the imperatives when it comes to technology security..

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending January 18th We have time to ensure and assure we get the outcome we want, but we don’t have limitless time. As such urgency, pace and relentless focus are the imperatives when it comes to technology security..

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

The NCSC would like to see passkeys become the default authentication recommendation

Passkeys provide an easier, faster and more secure way to log into online accounts than passwords.🗝️

Read more about how the NCSC is keeping pace with evolving technology⬇️

www.ncsc.gov.uk/collection/ncsc-annual-r...

At @ncsc.gov.uk supported by international partners released guidance on Secure connectivity principles for operational technology (OT) - go forth and secure..

Blog:
www.ncsc.gov.uk/blog-post/de...

Guidance:
www.ncsc.gov.uk/collection/o...

#OT #CyberSecurity

CTO at NCSC Summary: week ending January 11th DSIT, with the support of the NCSC, has refreshed the Government’s Cyber Security Strategy (GCSS) to form the Government Cyber Action Plan (GCAP)..

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...