> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
Cyber security-themed videos, blogs and interviews from industry experts are supporting students and teachers.
New presentation includes voiceover and insights on ransomware attack on the British Library.
Microsoft has fixed seven zero-days this Patch Tuesday, including one not currently being actively exploited
New NCSC training package to help schools improve their cyber security.
A new NCSC scheme assuring providers of CAF-based audits is now open for potential members.
The UK’s cybersecurity sector added thousands of workers and over £1bn in revenue in 2024
NCSC-assured CRA service now offering Cyber Assessment Framework based audits and more applications invited from potential service providers.
Can an equivalent cyber security standard deliver the same outcomes as the NCSC’s Cyber Essentials scheme?
Sara Ward, the CEO of Black Country Women's Aid, discusses her organisation's experience of gaining Cyber Essentials Plus certification.
We are encouraging large organisations to help us develop an alternative route to certification.
Latest version of the CAF reflects the increased threat to critical national infrastructure
A Critical National Infrastructure (CNI)-specific look at NCSC guidance on remote access architecture design
Our research shows that using Serverless components makes it easier to get good security in the cloud
Free online tool from the NCSC prevents cyber criminals using your email to conduct cyber attacks.
Do loose prompts* sink ships? Exploring the cyber security issues of ChatGPT and LLMs.
Updated NCSC guidance on enabling your staff to use their own devices for work.
How to disrupt targeted phishing attacks aimed at senior executives or budget holders.
The NCSC has published new cryptographic research on robust cryptography – we explain its significance and how the ideas could support research to inform future global standards.
The NCSC is inviting UK organisations to contribute evidence of cyber deception use cases and efficacy to support our long-term research goals.
Risk appetites; what are they, what’s their purpose, how do organisations go about defining them?