This is Kong Ji Chen, caught by BTP with an SMS blaster in his suitcase 🎒 He was loitering on the Underground, sending phishing texts to commuters. Thanks to alert passengers, he’s now serving 6 months in prison. Spot something odd? Text 61016 🔗 spkl.io/6006AXyyq

Cyber Essentials certifications are increasing. Over 39,000 awarded in 2024/25, up 17.5% from last year. See how we’re helping organisations of every size to prepare, protect, detect and respond in our Annual Review 2025, Chapter 2: Resilience at Scale ncsc.gov.uk/collection/ncs…

The Cyber Action Toolkit is a free, personalised cyber security solution for sole traders, micro businesses and small organisations that turns cyber protection into simple, achievable steps for your business. It’s Time to Act. Try it now⬇️ ncsc.gov.uk/news/small-bus…

Weekly summary is out... ctoatncsc.substack.com/p/cto-at-ncsc-…

👏 Congratulations to our 2025 UK Intelligence Community Postdoctoral Research Fellows. The funded research includes new ways to remotely detect hazardous substances and to investigate how chemicals in fingerprints age on different surfaces: raeng.org.uk/news/new-cloak…

Weekly summary is out.. ctoatncsc.substack.com/p/cto-at-ncsc-…

Weekly summary is out... ctoatncsc.substack.com/p/cto-at-ncsc-…

At NCSC UK we have just released guidance on using Privileged Access Workstations (PAWs) in Operational Technology (OT) environments.. ncsc.gov.uk/collection/ope…

Zero Trust is not a product it is an approach - at the NCSC UK we have just released demystifying zero trust which addresses common misconceptions, and provides practical advice on when and how it should be adopted. ncsc.gov.uk/collection/zer…

Some fantastic guidance from NCSC UK on zero-trust architectural design principles.

At the NCSC UK we have just launched the CYBERUK tech talks call for papers across three topics - Cyber applications of AI - What works: approaches that reduce cyber harm - The evolving threat cyberuk.uk/2026/call-for-…

This is solid. I appreciate the focus on hardware-bound cryptographic device identity, ideally with key attestation *before* thinking about device health. The hard part, however, is knowing that the key was generated in the specific device your org owns vs. a random other one.

Weekly summary is out... ctoatncsc.substack.com/p/cto-at-ncsc-…

Have you put anyone forward for the CyberFirst Girls Competition? The entry window is closing soon, but there’s still space for more curious, young minds to win incredible prizes as they tackle tech challenges. Find out more at: ncsc.gov.uk/cyberfirst/gir…

Weekly summary is out.. ctoatncsc.substack.com/p/cto-at-ncsc-…

Happy birthday Cybersecurity and Infrastructure Security Agency!🥳🎂 Here's to many more years of close cyber security collaboration and continuing our crucial work together

Apply now to secure your place at the UK government's flagship cyber security event #CYBERUK26! 🗓️ 21 – 23 April 2026 📍Scottish Event Campus, UK Limited early bird tickets are available - don't miss out! 👇 cyberuk.uk

Weekly summary is out.. ctoatncsc.substack.com/p/cto-at-ncsc-…