Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Timeline

NCSC

UK national cyber agency within GCHQ; advisories, attribution, and the GDPR Article 32 standard.

45 of 45 entries (41 events, 4 interactions)

Filters
#14 8 Oct

Co-signed the advisory and published the UK release on 8 October

Cybersecurity: Threats and Defences: Ten agencies name Beijing firm in hacks
#14 6 Oct

Told every ASOS customer to assume they are affected

Cybersecurity: Threats and Defences: ASOS app pushes rogue alert to customers
#14 29 Sept
#14 27 Sept

Told UK organisations on 28 September to mitigate

Cybersecurity: Threats and Defences: Citrix replaces its own NetScaler fix
#14 15 Sept

Exposed CHOSEN BRICK with the FBI and AIVD

Cybersecurity: Threats and Defences: UK, US and Dutch expose Iranian spyware
#12 29 Jul

Provided March 2024 connectivity guidance that CISA cited as a mitigation resource

Cybersecurity: Threats and Defences: The alert's citations predate the alert
#12 26 Jul
#11 23 Jul

Co-sealed the AA26-204A advisory

Cybersecurity: Threats and Defences: Zimbra preview leaks mail to Russia
#12 22 Jul
#10 9 Jul

Published a joint advisory naming FSB Centre 16

Cybersecurity: Threats and Defences: NCSC names FSB Centre 16 over routers
#9 1 Jul

Flagged the FortiBleed credential set as privately held

Cybersecurity: Threats and Defences: Lynx crew cashes in FortiBleed haul
#8 22 Jun

Co-issued the Five Eyes AI cyber-risk statement on 22 June 2026

Cybersecurity: Threats and Defences: Five Eyes warn AI threat is months away
#8 18 Jun

Issued joint alert on 18 June and recommended factory reset of affected Fortinet devices

Cybersecurity: Threats and Defences: 86,644 Fortinet logins become a hit list
#8 17 Jun

Managed 200+ UK CNI cyber incidents in the year to May 2026

Cybersecurity: Threats and Defences: NCSC counts 200+ UK infrastructure hits
#7 10 Jun

Mentioned in: UK cyber bill drops payment regime

Cybersecurity: Threats and Defences
#7 8 Jun

Warned of imminent large-scale abuse following the advisory

Cybersecurity: Threats and Defences: VPN zero-day open a month pre-patch
#7 1 Jun
#6 28 May

Mentioned in: ENISA puts water and rail in risk zone

Cybersecurity: Threats and Defences
#4 15 May
#4 14 May

Mentioned in: UAT-8616 keeps Cisco SD-WAN under fire

Cybersecurity: Threats and Defences
#4 12 May

ICO fines South Staffs Water £963,900

Cybersecurity: Threats and Defences
#5 1 May

Provided the Early Warning service that Pledge signatories must enrol in

Cybersecurity: Threats and Defences: UK cyber sector clears 14.7bn pounds
#2 30 Apr
#2 24 Apr

Co-signed advisory AA26-113A attributing FIRESTARTER to UAT-4356

Cybersecurity: Threats and Defences: FIRESTARTER implant survives every Cisco firewall patch
#2 24 Apr
#2 23 Apr
#2 23 Apr

Co-anchored 16-agency advisory formally attributing Flax Typhoon and Integrity Technology Group

Cybersecurity: Threats and Defences: Sixteen cyber agencies name Flax Typhoon network
#2 22 Apr

Launched SilentGlass commercial hardware product and licensed it to Goldilock Labs for global distribution

Cybersecurity: Threats and Defences: NCSC ships SilentGlass, its first commercial product
#2 22 Apr
#1 14 Apr

Mentioned in: 17-year-old Office RCE back on KEV

Cybersecurity: Threats and Defences
#1 7 Apr
#1 7 Apr

Published attribution-backed advisory on 7 April 2026 naming APT28 / GRU Unit 26165 for SOHO router DNS hijacking

Cybersecurity: Threats and Defences: GRU hijacks home routers for M365 logins
#1 7 Apr
Published→AAPT28
“published attribution advisory”
Cybersecurity: Threats and Defences · source event
#1 31 Mar
#1 31 Mar
Convened→AAIVD
“issued joint advisory”
Cybersecurity: Threats and Defences · source event
#1 28 Mar

Mentioned in: F5 reclassifies DoS bug to 9.8 RCE

Cybersecurity: Threats and Defences
#1 25 Mar
Contacted→CCitrix
“issued advisory”
Cybersecurity: Threats and Defences · source event
#1 23 Mar

Issued advisory on CVE-2026-3055 on 25 March 2026 urging UK operators to patch

Cybersecurity: Threats and Defences: CitrixBleed 3 lands on SAML broker
#1 2 Mar

UK 24-hour reporting bill at Report

Cybersecurity: Threats and Defences
#1 2 Mar
“established enforceable security baseline”
Cybersecurity: Threats and Defences · source event