Warnings and recommendations from national cyber security agencies, newest first. Each brief is at most 120 words, bottom line first, and links to the publication it was written from.
NCSC (UK) · News ·
Critical security issue affecting PHP
NCSC advises UK organisations to update PHP systems immediately.
The PHP Foundation announced an upcoming security release addressing two critical vulnerabilities in PHP. The NCSC encourages organisations to prepare for immediate updating of systems using PHP. Organisations should identify systems running any version of PHP and monitor for malicious activity.
Recommended by the publisher: The NCSC recommends applying PHP updates as they become available and continuously monitoring for security updates from third-party software vendors.
China-linked malicious actors called out by UK and international partners for targeting sensitive data globally
China-linked actors target sensitive data globally.
China-linked company Integrity Technology Group enables cyber actors to target organisations worldwide, using AI-enabled tools and large-scale botnets to compromise networks and steal sensitive data, affecting critical sectors.
Recommended by the publisher: Organisations are being urged to strengthen their cyber resilience and defend against this evolving threat.
ASOS customers' personal info may have been accessed.
ASOS is investigating a cyber incident where some customers received an unauthorised push notification. Basic personal information including name and contact details may have been accessed. The company does not believe payment card information or account passwords were affected. ASOS customers should assume they are affected.
Recommended by the publisher: The NCSC recommends seeing their data breach guidance and looking out for suspicious messages.
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
NCSC urges UK organisations to mitigate Citrix NetScaler vulnerabilities.
Citrix NetScaler ADC and Gateway are affected by eight vulnerabilities, two of which are being actively exploited. CVE-2026-88771 and CVE-2026-88772 allow remote code execution. Organisations using Citrix NetScaler ADC or Gateway on premises are affected.
Recommended by the publisher: The NCSC recommends following vendor best practice advice to mitigate vulnerabilities. The NCSC urges network defenders to read the Citrix security bulletin and install the latest available updates.
UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalists
Iranian state actors target dissidents with CHOSEN BRICK spyware.
The NCSC assesses that Iran uses cyber activity to repress individuals. CHOSEN BRICK malware collects information and includes screen capture functionality. It targets Windows operating systems.
Recommended by the publisher: The NCSC recommends individuals at risk to follow the mitigation steps in the advisory.
Iranian cyber targeting of dissidents, activists and journalists
Iranian cyber actors target dissidents, activists and journalists with CHOSEN BRICK malware.
CHOSEN BRICK enables Iranian state cyber actors to collect information on a target’s contacts, emails and social media messages. The malware is delivered via social engineering on social messaging platforms. It has a wide range of functionality, including enumerating running processes and capturing screen content.
Recommended by the publisher: The NCSC shares technical information and advice to help individuals and organisations protect themselves.
Disruptive cyber activity highlights risk from internet-exposed systems and edge devices
NCSC warns of increased targeting of operational technology systems.
The NCSC has seen increased targeting of operational technology systems across multiple sectors globally. Any organisation with internet-exposed OT could be affected. The NCSC assesses that the threat from state use of offensive cyber has almost certainly increased.
Recommended by the publisher: The NCSC recommends organisations build a definitive view of their OT architecture and harden their OT boundary.