Ollie Whitehouse

CTO at NCSC Summary: week ending November 30th “A lack of liability for software vendors is among the most pressing issues putting Britain’s economic and national security at risk"

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 23rd CHERI a hardware solution to memory safety vulnerabilities gets £21 million from UK Government

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 23rd CHERI a hardware solution to memory safety vulnerabilities gets £21 million from UK Government

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 16th Motivating small organisations to take action - Using an evidence-based approach in the development of action-based guidance for the UK’s small organisations

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 16th Motivating small organisations to take action - Using an evidence-based approach in the development of action-based guidance for the UK’s small organisations

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 9th It is clear that AI will drive a generational shift in productivity - the trick is not letting it distract us from the fundamentals which ensure cyber security outcomes we seek.

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending November 9th It is clear that AI will drive a generational shift in productivity - the trick is not letting it distract us from the fundamentals which ensure cyber security outcomes we seek.

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

At @ncsc.gov.uk we have just launched the CyberUK tech talks call for papers across three topics

- Cyber applications of AI
- What works: approaches that reduce cyber harm
- The evolving threat

www.cyberuk.uk/2026/call-fo...

At @ncsc.gov.uk we have just launched the CyberUK tech talks call for papers across three topics

- Cyber applications of AI
- What works: approaches that reduce cyber harm
- The evolving threat

www.cyberuk.uk/2026/call-fo...

Demystifying Zero Trust Addressing common misconceptions, and providing practical advice on when and how it should be adopted.

Zero Trust is not a product it is an approach - at @ncsc.gov.uk we have just released demystifying zero trust which addresses common misconceptions, and provides practical advice on when and how it should be adopted.

www.ncsc.gov.uk/collection/z...

Using PAWs in OT environments Considerations for the use of Privileged Access Workstations (PAWS) in OT environments.

At @ncsc.gov.uk we have just released guidance on using Privileged Access Workstations (PAWs) in Operational Technology (OT) environments..

www.ncsc.gov.uk/collection/o...

CTO at NCSC Summary: week ending November 2nd The UK stands ready to work with international partners to build resilience, share intelligence, and uphold a secure and open digital environment for all.

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

‼️ Update: the MIT-linked “AI-powered ransomware” report appears to have been taken offline. We updated our article to include an Internet Archive link to the original paper.

CTO at NCSC Summary: week ending November 2nd The UK stands ready to work with international partners to build resilience, share intelligence, and uphold a secure and open digital environment for all.

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending October 26th Cyber security is business survival...

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

Cyber Hack - Evil Corp - Introducing Evil Corp - BBC Sounds Accused of stealing hundreds of millions of dollars – Russia’s most wanted hackers

Well this is VERY exciting. For the last 6 months we've been making a brand new BBC podcast series all about Evil Corp - the OGs of Russian cyber crime. Preview here. Series drops Monday! www.bbc.co.uk/sounds/play/...

CTO at NCSC Summary: week ending October 19th.. Now is the time to act..

Weekly summary is out...

ctoatncsc.substack.com/p/cto-at-ncs...

Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances Outlining the expectations for the minimum requirement for forensic visibility, to help network defenders secure organisational networks both before and after a compromise.

Once again all edge network device vendors are asked to read and implement our 'Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances'

Doing do will enable cyber defenders to know and hunt.

www.ncsc.gov.uk/guidance/gui...

Confirmed compromise of F5 network The NCSC is advising organisations to follow the guidance issued by F5 and to install the latest security updates.

An alert from the @ncsc.gov.uk on the compromise of the F5 network - The NCSC is advising organisations to follow the guidance issued by F5 and to install the latest security updates.

www.ncsc.gov.uk/news/confirm...

Our annual review is out covering technical highlights such as

- Engineering resilience against critical loss
- Passkeys
- The future of digital identity
- Post quantum crypt transition
- Our Initiate r&d program with industry
- Radical transparency in technology

.. and more

CTO at NCSC Summary: week ending October 12th Strengthening national cyber resilience through observability and threat hunting..

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

CTO at NCSC Summary: week ending October 12th Strengthening national cyber resilience through observability and threat hunting..

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

Strengthening national cyber resilience through observability and threat hunting How organisations can improve their ability to both detect and discover cyber threats.

A call to arms on observability and threat hunting coupled with a marker of where we want to collectively get to..

www.ncsc.gov.uk/blog-post/st...

Strengthening national cyber resilience through observability and threat hunting How organisations can improve their ability to both detect and discover cyber threats.

A call to arms on observability and threat hunting coupled with a marker of where we want to collectively get to..

www.ncsc.gov.uk/blog-post/st...

If you run Oracle E-Business ensure you patch..

CTO at NCSC Summary: week ending October 5th Welcome to the weekly highlights and analysis of the blueteamsec Lemmy (and my wider reading).

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

RAEng Fellow 2025: Ollie Whitehouse FREng Ollie Whitehouse leads the National Cyber Security Centre's technical mission to protect the nation.

New Fellow: Ollie Whitehouse FREng @ollieatnowhere.bsky.social leads the @ncsc.gov.uk's technical mission to protect the nation. With over 27 years in cybersecurity, and nine patents, his work has had global impact across the public and private sectors.
raeng.org.uk/about-us/fel... #RAEngFellows

CTO at NCSC Summary: week ending September 28th NCSC warns of persistent malware campaign targeting Cisco devices ...

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

Many congratulations @ollieatnowhere.bsky.social well deserved recognition

I am honoured to have been elected a Fellow of the Royal Academy of Engineering - @raeng.org.uk

I join 73 other leading figures in the fields of engineering and technology to be elected this year: raeng.org.uk/new-fellows-...

#RAEngFellows