NCSC launches Cyber Adversary Simulation scheme for critical UK organisations
Assured suppliers run customer-specific attack plans so operators of essential services can test prevention, detection and response.
Stories per day · 30 days
5 RSS
Relateduk8critical-infrastructure6php5ransomware4cyber-resilience3agentic-ai2ai-cyber2aisi2cryptography2php2shell2post-quantum2remote-code-execution2tls2uk-government2adversary-simulation1aiai-spending1ai-policy1ai-ransomware1
58 stories, newest first · one card per story
Stories tagged #ncsc
UK warns critical infrastructure faces grave risk
National Cyber Security Centre assesses highly likely AI-powered malware use in ransomware attacks on UK CNI by 2028.
1
ThreatsDay covers fraud arrests, slow patching and a $250K cloud bounty
Europol says seven arrests and more than 100 seized servers followed fraud losses of at least $4.5 million.
1
NCSC warns UK organisations of AI-powered ransomware attacks
AI will increase speed, scale and efficiency of attacks on critical national infrastructure within two years.
1
NCSC warns of AI-powered ransomware attacks on UK critical infrastructure by 2028
NCSC predicts AI malware highly likely in future ransomware attacks on British critical infrastructure by 2028.
2
NCSC warns AI-powered ransomware could hit UK infrastructure by 2028
The UK also announced Cyber Shield, NERV, AISI and agent-security funding plus cheaper Cyber Essentials for smaller firms.
1
NCSC warns AI could accelerate ransomware on critical infrastructure
AI is helping attackers discover flaws and create social engineering messages faster, according to NCSC 2026 review.
1
NCSC warns of AI-powered ransomware on UK critical infrastructure by 2028
AI adoption by hostile actors is highly likely to boost ransomware scale and efficiency by 2028, NCSC report warns.
1
NCSC assesses rise in AI-cyber threats to 2028
Three scenarios project AI-cyber capability proliferation by 2028, with Russia and China as primary threats.
UK to consult on holding software firms liable for cyber breaches
The consultation is promised for next year and will build on a Law Commission review of product liability that runs until January 14.
1
NCSC and FCA clarify sharing cyber incidents under market-abuse rules
FCA guidance says sharing incident details with the NCSC can fit normal professional duties under UK market-abuse rules.
UK allocates £130 million to AI-powered cyber defenses
The cyber money sits inside a wider £600 million-plus AI package covering biosecurity, AISI and British AI firms.
PHP2Shell takes 32 UK government services offline
AWS says the two critical PHP bugs were exploited four days before disclosure; no public-sector compromise is confirmed.
PHP project issues critical security release; sites urged to update
Two critical flaws affect any PHP application; no WordPress update is planned, and PHP before 8.2 is unsupported.
Dutch NCSC takes its website offline over PHP flaws
A PHP security patch is planned for 16:00 Dutch time, and NCSC expects an advisory within an hour.
Critical PHP RCE flaws leaked a day before scheduled patches
CERT-EU told operators to prepare to patch or isolate internet-facing PHP apps; the PHP team rates the flaws CVSS 9.2, not 10.
PHP Foundation to patch two critical vulnerabilities in PHP
The October 20, 2026 notice names no CVE identifiers, affected versions, fixed releases, or known exploitation.
NCSC adds an AI chapter to its research problem book
The new chapter sets out seven problem areas across defence use, AI assurance and resilience.
1
UK public services told to treat cyber resilience as a board duty
The NCSC handled 204 nationally significant incidents in the year to September 2025, about four a week.
1
Using TLS to protect data
NCSC guidance urges TLS 1.3 with hybrid post-quantum key exchange and retirement of legacy SSL and TLS.
UK Government Announces Sweeping New AI Security Plans
The UK will use frontier AI to hunt government flaws and amend cyber law for AI incidents.
3
Help the NCSC understand how organisations approach external attack surface risk
UK NCSC is recruiting practitioners on how organisations assess and buy external attack surface management.
UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group
Allies warn Integrity Technology Group enables China-backed intrusions, email theft, and related hacking tools.
5
China-linked malicious actors called out by UK and international partners for targeting sensitive data globally
UK and partners attribute global data theft to China-linked Integrity Technology Group and Flax Typhoon-related activity.
8