National Cyber Security Centre (NCSC) Annual Review 2021

guest · Nov 18, 2021

NCSC Annual Review 2021
Making the UK the safest place to live and work online
November 17, 2201
https://www.ncsc.gov.uk/collection/ncsc-annual-review-2021

The National Cyber Security Centre (NCSC), a part of GCHQ, is the UK’s technical authority for cyber security. Since the NCSC was created in 2016 as part of the Government’s National Cyber Security Strategy, it has worked to make the UK the safest place to live and work online.

This review of its fifth year looks at some of the key developments and highlights between 1 September 2020 and 31 August 2021. As part of a national security agency not all its work can be disclosed publicly but the review seeks to describe the year with insights and facts from colleagues inside and outside of the organisation.
Click to expand...

NCSC: Annual Review 2021
(PDF): https://www.ncsc.gov.uk/files/NCSC%20Annual%20Review%202021.pdf

Our pioneering Active Cyber Defence programme has taken down 2.3 million cyber-enabled commodity campaigns – including 442 phishing campaigns using NHS branding and 80 illegitimate NHS apps hosted and available to download outside of official app stores.

Our Suspicious Email Reporting Service has received 5.4 million reports from the public of potentially malicious material – leading to the removal of more than 50,500 scams and more than 90,100 malicious URLs. [...]
Click to expand...

guest · Nov 18, 2021

NCSC Annual Review reveals ransomware business model driving attack success
November 18, 2021
https://www.csoonline.com/article/3...re-business-model-driving-attack-success.html

The UK National Cyber Security Centre (NCSC) today released its latest Annual Review detailing cyberthreat trends of the past 12 months and the work it has undertaken to help protect the UK.

The review outlines a record 777 cyberattacks tackled by the NCSC in 2021, the damaging effect of professional, organised ransomware campaigns on UK organisations, and highlights the continued evolution of the ransomware-as-a-service (RaaS) business model. This is where off-the-shelf malware variants and online credentials are available to criminals for a one-off payment or a share of profits.

“We’ve been tackling a growing trend in criminal groups using ransomware to extort money on the internet. I see this now as the most immediate cybersecurity threat to the UK and to UK businesses – the public sector in particular,” said NCSC CEO Lindy Cameron, speaking to introduce the review.
Click to expand...

Professional ransomware groups becoming more successful
NCSC cited increasing success rates for ransomware groups that are adopting business-like approaches. In doing so, they are securing significant ransom payments from large companies who cannot afford to lose their data to encryption or to suffer the down time while their services are offline.
Click to expand...

Addressing sophisticated ransomware operations
Whilst ransomware actors are profiting from more business-like and organised approaches, UK organisations can use a growing number of services to protect themselves against ransomware or mitigate the impact of an attack.

One example is the NCSC’s Cyber Security Information Sharing Partnership (CISP) service, which provides a secure forum where companies and government can collaborate on threat information. It also gives access to regular sensitive threat reports.
Click to expand...

Log in or Sign up

National Cyber Security Centre (NCSC) Annual Review 2021

guest Guest

guest Guest

Log in or Sign up

National Cyber Security Centre (NCSC) Annual Review 2021

guest Guest

guest Guest

Useful Searches