
The fundamentals of risk
This section focuses on the fundamental principles of risk management. Here, we won’t...

Understanding component-driven risk management
Component-driven risk assessments are the most mature and common types of assessment within the...

Microsoft December Patch Tuesday Update Fixes 34 Bugs
Microsoft patched 34 vulnerabilities in all on Tuesday with most of the bugs...

New Spider Ransomware Comes With 96-Hour Deadline
A ransomware campaign targeting the Balkans comes with a 96-hour deadline and includes...

Leftover Debugger Doubles as a Keylogger on Hundreds of HP Laptop Models
HP released an update that fixes debugger code that could allow an attacker...

Plan for security flaws
All but the very simplest software is likely to contain bugs, some of...

Secure the build and deployment pipeline
Continuous integration, delivery and deployment are modern approaches to the building, testing and...

Continually test your security
Testing during software development is well recognised as good practice. It helps you...

Protect your code repository
Your code is only as secure as the systems used to create it....

Secure your development environment
There is sometimes a perceived conflict between security and usability. This situation is...

Produce clean & maintainable code
If your code lacks consistency, is poorly laid out and undocumented, you're adding...

Keep your security knowledge sharp
Creating code that is capable of withstanding attack requires an understanding of attack...

Secure development is everyone's concern
Genuine security benefits can only be realised when delivery teams weave security into...

Apple Fixes Flaw Impacting HomeKit Devices
Apple said it has fixed an undisclosed vulnerability in its HomeKit framework that...

Banking Apps Found Vulnerable to MITM Attacks
Using a free tool called Spinner, researchers identified certificate pinning vulnerabilities in mobile...

Google Patches Critical Encryption Bug Impacting Pixel, Nexus Phones
As part of its December Android and Pixel/Nexus security updates, Google has issued...

TeamViewer Rushes Fix for Permissions Bug
TeamViewer says it has issued a hotfix to address a bug that allows...

Developers Targeted in ‘ParseDroid’ PoC Attack
A proof of concept attack developed by researchers target users of the development...

Ursnif Trojan Adopts New Code Injection Technique
Researchers have found a variant of Ursnif Trojan they said is a “v3...

Managing supply chain risk in cloud-enabled products
There’s been a lot of speculation about foreign involvement in the UK supply...

CyBOK – the scope
If you missed the earlier blogs and don't know what CyBOK is -...

Small Business Guide: Video Collection
The videos below introduce the five quick and easy steps outlined in the NCSC's...

Managing the risk of cloud-enabled products
Organisations are increasingly deploying software to both servers and end user devices that...

Cisco Patches Critical Playback Bugs in WebEx Players
A Cisco Systems security advisory is urges users of its WebEx platform to...

RAT Distributed Via Google Drive Targets East Asia
Researchers say a new remote access Trojan dubbed UBoatRAT is targeting individuals or...

Critical Apple Login Bug Puts macOS High Sierra Systems at Risk
A major bug in Apple’s macOS High Sierra gives anyone with physical access...

Leaky AWS Storage Bucket Spills Military Secrets, Again
For the second time in ten days, researchers at UpGuard released sensitive data...

Imgur Confirms 2014 Breach of 1.7 Million User Accounts
Researcher Troy Hunt is credited for tipping image sharing site Imgur off to...

Newly Published Exploit Code Used to Spread Marai Variant
Qihoo 360 Netlab researchers reported on Friday that they are tracking an uptick...

NCSC advice for Uber customers and drivers
Who is this guidance for? This guidance is aimed at all UK Uber...