National Cyber Security Centre

The UK government's new Cyber Resilience Pledge has 60 signatories, including Marks & Spencer and Capita, despite Capita's history of cybersecurity issues. Notable absentees include Co-op, Harrods, and Jaguar Land Rover, while Microsoft and other major corporations joined the initiative.

The UK's National Cyber Security Centre reported that 75% of cyberattacks on critical infrastructure are linked to hostile states. Richard Horne, NCSC head, stated 200 such incidents were handled in the year to May 2026, with Russia, China, and Iran identified as key perpetrators.

Labour has reported the alleged hacking of Nigel Farage’s phone to police and cybersecurity officials after Reform UK leader failed to do so. The claims involve actors linked to Moscow accessing Farage’s data and leaking information about a £5m donation.

UK spy chief Anne Keast-Butler of GCHQ warns that AI is an 'unstoppable force' reshaping cyber warfare, emphasizing the need for ethical, AI-integrated cybersecurity. She highlights risks from China's advanced AI capabilities and Russia's hybrid warfare tactics, while urging global cooperation to secure AI for societal good.

National security and digital forensics experts have dismissed Nigel Farage's claim that Russia hacked his phone to leak details of a £5 million gift from crypto billionaire Christopher Harborne. Experts like Peter Sommer and Ciaran Martin criticized the unsubstantiated allegations, noting the lack of evidence and the potential national security implications of such accusations.

Nigel Farage's claim that a Russian hack influenced a Guardian report about a £5m gift he received from a crypto billionaire has been dismissed as 'without any merit' by Ciaran Martin, former head of the National Cyber Security Centre. Martin stated the allegation is 'entirely unsubstantiated' and lacks evidence.

Microsoft is phasing out SMS as a method of authentication and recovery for personal Microsoft accounts due to security concerns, citing phishing and SIM-swap attacks. The company will guide users through the transition to passwordless accounts and passkeys. This move is part of a larger shift towards more secure authentication methods.

A scammer is part of a secret network targeting Britons, pretending to help them while robbing them blind, affecting thousands of people. The scammer's actions are deceitful and harmful. The network's existence highlights a significant threat to individuals' financial security.

CISA and the UK's NCSC disclosed that a federal civilian agency's Cisco Firepower device running ASA software was compromised in September 2025 by the FIRESTARTER backdoor malware. The malware, designed for remote access, persisted despite security patches, indicating a sophisticated cyberattack.

CISA and UK cybersecurity agencies detected a previously unknown backdoor malware called Firestarter in a U.S. federal agency's network, part of an ongoing attack on Cisco equipment. The targeted agency remains unnamed, but the incident highlights a long-running cyber campaign against federal infrastructure.

UK cyber chiefs, including the National Cyber Security Centre (NCSC), recommend replacing traditional passwords with passkeys for enhanced online security. Passkeys are presented as a more secure alternative to conventional password systems.

US and UK cybersecurity agencies warned that a state-sponsored hacking group has deployed a persistent backdoor called Firestarter on Cisco firewalls, which can survive firmware updates and reboots. The malware, linked to threat actor UAT-4356, exploits vulnerabilities patched in September 2025 and has prompted an emergency directive for federal agencies to audit Cisco infrastructure.

The UK's National Cyber Security Centre (NCSC) warns that China-linked hacking groups are using everyday devices like Wi-Fi routers to launch espionage attacks on British businesses. Agencies in the UK and nine other countries have urged companies to increase vigilance against these persistent cyber threats.

The UK's National Cyber Security Centre (NCSC) and agencies from nine other countries have warned that China-linked hacking groups are using everyday devices like Wi-Fi routers to conduct espionage against British businesses. Companies are urged to enhance vigilance to prevent these cyber-attacks.

The UK's GCHQ cyber arm has developed a commercial hardware device to prevent cyberattacks on display devices, addressing malware risks via monitor cables as a national security concern. The gadget is now available for purchase, though detailed specifications remain limited.

The UK's National Cyber Security Centre (NCSC) has officially endorsed passkeys as the default authentication standard, advising consumers to abandon passwords entirely. This marks the first time the agency has recommended a complete shift away from traditional password-based authentication.

Britain's cybersecurity chief reported that the UK is managing four nationally significant cyber incidents weekly, primarily attributed to hostile foreign governments rather than criminal hackers. The surge in nation-state attacks highlights growing cybersecurity threats to the country.

The UK could face large-scale hacktivist attacks if involved in a conflict, with potential impacts similar to recent ransomware incidents. Richard Horne, head of the National Cyber Security Centre (NCSC), warned that nation states are the primary source of significant cyber threats.

The UK could face large-scale hacktivist attacks if involved in a conflict, warns Richard Horne, head of the National Cyber Security Centre (NCSC), comparing potential impacts to recent ransomware incidents. The NCSC reports nation states as the primary source of significant cyber threats.

The head of the National Cyber Security Centre stated that frontier AI tools, such as Mythos, can be beneficial if controlled properly. He emphasized the importance of preventing access by malicious actors to ensure their positive impact.

The UK's National Cyber Security Centre (NCSC) warns of Russia's Fancy Bear group continuing to attack routers to deploy fake sites. Over 200 organizations and 5,000 devices have been compromised in recent cyber operations, with Microsoft noting the scale of the breach.