Project Zero Chains Bugs for ‘aPAColypse Now’ Attack on Windows 10
Google’s Project Zero team dubs a new WPAD-related attack as an “aPAColypse Now”…
Entries by
U.S. Government Blames North Korea for WannaCry
The United States government is officially blaming North Korea for the WannaCry ransomware…
Using TLS to protect data
This guidance outlines how to configure the services that must be able to…
Triton Malware Targets Industrial Control Systems in Middle East
Malware intended for a “high-impact” attack against safety systems likely would of caused…
Now published: the NCSC’s new guidance on risk management for cyber security
A few weeks ago, we said that we’d be publishing the first phase of our…
Permissions Flaw Found Azure AD Connect
A permissions flaw in Microsoft’s Azure AD Connect software could allow a rogue…
19-Year-Old TLS Vulnerability Weakens Modern Website Crypto
New research shows how an old vulnerability called ROBOT can be exploited using…
Variety in risk information
Risk information is any information which can influence a decision. Some organisations have a tendency to…
Understanding component-driven risk management
Component-driven risk assessments are the most mature and common types of assessment within the…
Introduction to the risk management for cyber security guidance
This page introduces the intent behind the NCSC’s risk management guidance, and how to best…