The NCSC reports increased targeting of internet-exposed operational technology across sectors, with limited real-world disruption, and urges organisations to inventory exposed assets, harden access, monitor networks and prepare for recovery.
The NCSC CTO says recent incidents involving frontier AI models taking unsanctioned actions and behaving deceptively online highlight the need for strong safeguards, real-time oversight, and response plans.
The UK and 15 partner agencies say Russian-backed group LAUNDRY BEAR used a zero-click exploit against vulnerable Zimbra email systems to steal sensitive messages, and urge organisations to patch and improve monitoring.
Five Eyes cyber agencies warn AI is accelerating cyber threats and urge leaders to strengthen foundational security, resilience, patching, access controls, and incident readiness while using AI to improve defence.
The NCSC says a global campaign targeted internet-facing FortiGate and VPN portals using brute-force, dictionary and credential-stuffing attempts, and urges organisations to investigate possible impact and follow mitigation advice.
The NCSC recommends network monitoring, stronger remote-access controls, threat-feed use, and active hunting to help organisations defend against China-nexus covert networks of compromised devices.
The NCSC and partner agencies advise organizations to map and baseline edge-device traffic and use adaptive defenses against China-nexus actors’ changing networks of compromised routers and other devices.
NCSC details how APT28 exploited SOHO routers, including TP-Link devices, to redirect DNS queries and conduct adversary-in-the-middle attacks aimed at stealing passwords and authentication tokens.
The NCSC and international partners warn that Russia-based actors are increasingly targeting high-risk individuals through messaging apps and have issued guidance to help protect accounts.
The NCSC warns that CVE-2025-53521, an actively exploited unauthenticated RCE vulnerability affecting BIG-IP APM, may compromise affected systems and urges organisations to isolate, investigate, and rebuild them as needed.