Warnings and recommendations from national cyber security agencies, newest first. Each brief is at most 120 words, bottom line first, and links to the publication it was written from.
NCSC (UK) · Guidance ·
Using TLS to protect data
NCSC advises system administrators on configuring TLS securely.
The NCSC guidance covers configuring TLS 1.3 and TLS 1.2, managing deprecated protocol versions, and using certificates with TLS. TLS 1.1 and 1.0 have been deprecated by the IETF. The NCSC recommends disabling TLS features known to be insecure and transitioning to TLS 1.3 to adopt post-quantum cryptography.
Recommended by the publisher: The NCSC recommends using hybrid schemes as an interim measure when migrating to PQC. System administrators should keep servers and client software up to date.
NCSC guides organisations on adversary simulation.
The NCSC guides organisations on adversary simulation, also known as 'red teaming', to test defences against cyber attacks. It is designed for medium to large-sized organisations. Adversary simulation tests technical defences and reveals security gaps. The NCSC expects teams to ensure safety features to minimise risks.