> TODAY'S SUMMARY (2 articles)
Today’s cybersecurity landscape highlights significant threats involving Check Point gateways. Attackers exploited PHP2Shell and a zero-day vulnerability in Gaia OS to compromise these gateways, leading to the deployment of a wiper malware on VMware ESXi hosts. This incident underscores a trend where firewalls, traditionally seen as secure perimeters, are becoming targets themselves due to their internet-facing nature. Organizations must enhance their defenses and stay vigilant, as attackers increasingly turn established security devices against their owners.
|
// AI-powered summary generated at 08:00
The NCSC has published a new RFC on Indicators of Compromise to support cyber security in protocol design - and hopes to encourage more cyber defenders to engage with international standards.
SMS and telephone guidance updated to address the rise in Artificial Inflation of Traffic (AIT).
Microsoft has fixed seven zero-days this Patch Tuesday, including one not currently being actively exploited
Businesses, academia and international partners invited to respond to the UK government's ‘call for views’ on the security of AI.
Chris P explains how AMS will enable high-threat organisations to stay connected ‘on the go'.
The UK’s cybersecurity sector added thousands of workers and over £1bn in revenue in 2024
New ACD services developed to help protect SMEs from the harms caused by cyber attacks.
We publish the results of our ACD 2.0 external attack surface management (EASM) trials
We thank participants and look forward to sharing what we've learned
Want security that works better for people? Make it accessible.
Introducing the new NCSC research problem book and find out how you can get involved.
The 10-year anniversary of Cyber Essentials is not just a celebration of past achievements but a call to action for the future.
The NCSC’s ‘Protective Domain Name Service for Schools’ scaled-up to protect a wider range of organisations.
Chris Wallis, CEO of Intruder, explains how completing the NCSC's Startup Programme was a turning point for his organisation.
Irrespective of whether the ransom is paid, a ransomware attack means organisations have lost control of their information.
Assessing the security of network equipment.
This report outlines the risks associated with the use of official and third party app stores.
Report informing readers about the threat to UK industry and society from commercial cyber tools and services.
An NCSC assessment focusing on how AI will impact the efficacy of cyber operations and the implications for the cyber threat over the next two years.
Assessing the cyber security threat to UK Universities