Ollie Whitehouse

CTO at NCSC Summary: week ending February 8th Nation-state threat actors exploit end-of-support (EOS) edge devices -ncluding, but not limited to, load balancers, firewalls, routers, and virtual private network (VPN) gateways

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending February 8th Nation-state threat actors exploit end-of-support (EOS) edge devices -ncluding, but not limited to, load balancers, firewalls, routers, and virtual private network (VPN) gateways

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending February 1st Cyber incidents targeting organisations – particularly those against critical national infrastructure (CNI) – are becoming more frequent, sophisticated and potentially destructive.

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending January 25th NCSC issues warning over hacktivist groups disrupting UK organisations and online services

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

Pro-Russia hacktivist activity continues to target UK organisations The NCSC encourages local government and critical infrastructure operators to harden their ‘denial of service’ (DoS) defences

Today the NCSC has issued a warning highlighting Pro-Russian Hacktivist groups are targeting sectors across the UK.

All organisations are urged to act now by reviewing and implementing our free guidance to protect against DoS attacks.

CTO at NCSC Summary: week ending January 18th We have time to ensure and assure we get the outcome we want, but we don’t have limitless time. As such urgency, pace and relentless focus are the imperatives when it comes to technology security..

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending January 18th We have time to ensure and assure we get the outcome we want, but we don’t have limitless time. As such urgency, pace and relentless focus are the imperatives when it comes to technology security..

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

The NCSC would like to see passkeys become the default authentication recommendation

Passkeys provide an easier, faster and more secure way to log into online accounts than passwords.🗝️

Read more about how the NCSC is keeping pace with evolving technology⬇️

https://www.ncsc.gov.uk/collection/ncsc-annual-review-2025/chapter-03-keeping-pace-with-evolving-technology

At @ncsc.gov.uk supported by international partners released guidance on Secure connectivity principles for operational technology (OT) - go forth and secure..

Blog:
www.ncsc.gov.uk/blog-post/de...

Guidance:
www.ncsc.gov.uk/collection/o...

#OT #CyberSecurity

CTO at NCSC Summary: week ending January 11th DSIT, with the support of the NCSC, has refreshed the Government’s Cyber Security Strategy (GCSS) to form the Government Cyber Action Plan (GCAP)..

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending January 4th Happy New Year...

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending December 28th Addressing fundamentals move dials - be it architectures (cross-domain, privileged access workstations etc), approaches (external attack surface management, deception), or solutions (passkeys).

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending December 28th Addressing fundamentals move dials - be it architectures (cross-domain, privileged access workstations etc), approaches (external attack surface management, deception), or solutions (passkeys).

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

Toughen up your online security. Turn on 2-step verification now

If you're looking out for good Boxing Day deals, stay ahead of scams by enabling 2-Step Verification (2SV).

Keep the fraudsters out of your online accounts with an extra step to verify your identity after a login attempt.

Learn more:
https://stopthinkfraud.campaign.gov.uk/

CTO at NCSC Summary: week ending December 21st - nearly Christmas edition ❄️🎄🎅🤶🎄❄️ “Alongside the grinding war, Russia is testing us in the grey zone with tactics that are just below the threshold of war."

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending December 21st - nearly Christmas edition ❄️🎄🎅🤶🎄❄️ “Alongside the grinding war, Russia is testing us in the grey zone with tactics that are just below the threshold of war."

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending December 14th “One of the most promising aspects of cyber deception is its potential to impose cost on adversaries." - NCSC

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

Cyber deception trials: what we’ve learned so far An update on the NCSC's trials to test the real-world efficacy of cyber deception solutions.

At @ncsc.gov.uk we have been running cyber deception experiments across 121 organisations from across the UK..

.. the team have just shared our insights ..

www.ncsc.gov.uk/blog-post/cy...

Cyber deception trials: what we’ve learned so far An update on the NCSC's trials to test the real-world efficacy of cyber deception solutions.

At @ncsc.gov.uk we have been running cyber deception experiments across 121 organisations from across the UK..

.. the team have just shared our insights ..

www.ncsc.gov.uk/blog-post/cy...

Prompt injection != SQL injection - There are crucial differences between prompt and SQL injection which – if not considered – can undermine mitigations.

CTO at NCSC Summary: week ending December 7th Patch those React and Next.JS servers... please..

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending December 7th Patch those React and Next.JS servers... please..

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 30th “A lack of liability for software vendors is among the most pressing issues putting Britain’s economic and national security at risk"

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 23rd CHERI a hardware solution to memory safety vulnerabilities gets £21 million from UK Government

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 23rd CHERI a hardware solution to memory safety vulnerabilities gets £21 million from UK Government

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 16th Motivating small organisations to take action - Using an evidence-based approach in the development of action-based guidance for the UK’s small organisations

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 16th Motivating small organisations to take action - Using an evidence-based approach in the development of action-based guidance for the UK’s small organisations

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 9th It is clear that AI will drive a generational shift in productivity - the trick is not letting it distract us from the fundamentals which ensure cyber security outcomes we seek.

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 9th It is clear that AI will drive a generational shift in productivity - the trick is not letting it distract us from the fundamentals which ensure cyber security outcomes we seek.

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

At @ncsc.gov.uk we have just launched the CyberUK tech talks call for papers across three topics

- Cyber applications of AI
- What works: approaches that reduce cyber harm
- The evolving threat

www.cyberuk.uk/2026/call-fo...