Below are RSS feeds from the NCSC and other organisations, serving as your one-stop shop for cyber security updates across industry.

National Cyber Security Centre

• Using TLS to protect data
• Post-quantum updates to our TLS guidance
• Help the NCSC understand how organisations approach external attack surface risk
• China-linked malicious actors called out by UK and international partners for targeting sensitive data globally
• Incident affecting ASOS customers

Google

• ARMORY CASTLE Exploits BeyondTrust
• Investigating Ephemeral Supply Chain Tampering
• Vulnerability Discovery and Exploitation Trends in the AI Era
• Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
• ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

NHS (for others, see here)

• CC-4873 – Multiple Critical Vulnerabilities in Next.js
• CC-4872 – F5 Releases Security Advisory for Critical Vulnerabilities in NGINX Plus and NGINX Open Source
• CC-4871 – Drupal Releases Security Advisory for Drupal Core
• CC-4870 – Active Exploitation of BeyondTrust Remote Support Vulnerability (CVE-2026-102764)
• CC-4869 – Cisco Releases Advisory For Critical Vulnerability in Cisco Async OS Affecting Secure Email Gateway

Bruce Schneier

• Training AIs to Solve CAPTCHAs
• Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
• Backdooring Open-Weight AI Models
• Measuring Human Cryptanalysis Effort
• Upcoming Speaking Engagements

Troy Hunt

• Weekly Update 526: Building HIBP AI/SI First
• Weekly Update 525: AI Data Breach Hyperbole
• Weekly Update 524: Live From Copenhagen
• Weekly Update 523: Live From a Norwegian Fjord
• Weekly Update 522: Live From Oslo with Scott Helme