Using TLS to protect data

Critical security issue affecting PHP

Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619).

Post-quantum updates to our TLS guidance

The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.

Help the NCSC understand how organisations approach external attack surface risk

We're looking to hear from people involved in evaluating, selecting or adopting EASM.

China-linked malicious actors called out by UK and international partners for targeting sensitive data globally