Making the UK the safest place to live and do business online –
The NCSC’s Chief Executive Ciaran Martin outlines why the UK needs a National Cyber Security Centre. – Read More – NCSC Feed
Category: Gov/ISAC Feeds
Three random words or #thinkrandom –
Ian M discusses what makes a good password – Read More – NCSC Feed
Equities process –
Publication of the UK’s process for how we handle vulnerabilities. – Read More – NCSC Feed
Secure home working on personal IT –
Useful tips and resources for people using personal IT to work from home. – Read More – NCSC Feed
Terminology: it’s not black and white –
The NCSC now uses ‘allow list’ and ‘deny list’ in place of ‘whitelist’ and ‘blacklist’. Emma W explains why… – Read More – NCSC Feed
Video conferencing services: using them securely –
How to set up and use video conferencing services, such as Zoom and Skype, safely and securely – Read More – NCSC Feed
QR Codes – what’s the real risk? –
How safe is it to scan that QR code in the pub? Or in that email? – Read More – NCSC Feed
NCSC For Startups: taking on malvertising –
Can your startup help counter the rise of malicious advertising? – Read More – NCSC Feed
New interactive video – and related downloads – to help secondary school kids stay safe online –
A new initiative, aimed at 11 to 14-year-olds, that helps them navigate the risks of online life. – Read More – NCSC Feed
CISA Adds Two Known Exploited Vulnerabilities to Catalog – CISA
[[{“value”:” CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the...
CISA Requests Public Comment for Draft National Cyber Incident Response Plan Update – CISA
Today, CISA—through the Joint Cyber Defense Collaborative and in coordination with the Office of the National Cyber Director (ONCD)—released the National Cyber Incident Response Plan Update Public Comment Draft. The draft requests public comment on the National Cyber Incident Response Plan (NCIRP)—public comment period begins today and concludes on January 15, 2025. Since initial publication in 2016, CISA conducted broad...
CISA Releases Ten Industrial Control Systems Advisories – CISA
[[{“value”:” CISA released ten Industrial Control Systems (ICS) advisories on December 12, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-347-01 Siemens CPCI85 Central Processing/Communication ICSA-24-347-02 Siemens Engineering Platforms ICSA-24-347-03 Siemens RUGGEDCOM ROX II ICSA-24-347-04 Siemens Parasolid ICSA-24-347-05 Siemens Engineering Platforms ICSA-24-347-06 Siemens Simcenter Femap ICSA-24-347-07 Siemens Solid Edge SE2024 ICSA-24-347-08 Siemens COMOS...