Latest news

Australia air routes

NCC Group welcomes expansion of Australia’s Cyber Operational Resilience Intelligence-led Exercises (CORIE) framework

Having supported with the creation of the original CORIE framework and pilot launch in 2021, Tim Dillon, our Director of Professional Services in the Asia Pacific region, has been acknowledged for his contribution and shares his reaction to the updated framework.

Cyber safety padlock

Protecting our data: UK Government publishes Data Protection and Digital Information Bill

In July this year, the UK Government published its newly reformed data protection bill, the Data Protection and Digital Information Bill, aiming to improve upon previous regulations and simplify the UK’s data protection landscape. Stephen Bailey, Global Privacy Services practice lead at NCC Group, provides his thoughts on the Bill

My Path to Progression: Trainee to Fraud Analyst

My Path to Progression: Trainee to Fraud Analyst

Through our Path to Progression blog series, we are sharing colleague stories about how they’ve developed, changed and grown their career within NCC Group. For the fourth in our series, our Talent Attraction team spoke to Ariela Lopez to hear more about her journey so far and how she made the move from Trainee to Fraud Analyst.

NCC Group joins UK Cyber Security Council

NCC Group joins UK Cyber Security Council

Our membership of the UK Cyber Security Council, (the government-backed chartered body representing the UK’s cyber security profession), will see us work alongside The Council and other members, to develop and promote nationally recognised standards for cyber security, in support of the UK Government’s National Cyber Strategy.

Bank of England

Banking on resilience: Bank of England proposes new rules for financial sector cyber resilience

Following proposals from the Bank of England focused on outsourcing and third-party risk management, NCC Group outlines what the new rules set out to achieve, how they could impact financial services providers, and next steps to enhance the guidance.

NCC Group Monthly Threat Pulse - June 2022

NCC Group Monthly Threat Pulse - June 2022

Ransomware threat scene continues to evolve with newly established Lockbit 3.0 ramping up activity and Conti, as we knew it, all but disappearing completely

Social media

Max Groot & Ruud van Luijk TL;DR A recently uncovered malware sample dubbed ‘Saitama’ was uncovered by security firm Malwarebytes in a weaponized document, possibly targeted towards the Jordan government. This Saitama implant uses DNS as its sole Command and Control channel and utilizes long sleep times and (sub)domain randomization to evade detection. As no … Continue reading Detecting DNS implants: Old kitten, new tricks – A Saitama Case Study  →

Detecting DNS implants: Old kitten, new tricks – A Saitama Case Study 

Introduction Last weekend (July 30th) a truly incredible piece of mathematical/cryptanalysis research was put onto eprint. Wouter Castryck and Thomas Decru of KU Leuven published a paper “An efficient key recovery attack on SIDH (preliminary version)” describing a new attack on the Supersingular Isogeny Diffie-Hellman (SIDH) protocol together with a corresponding proof-of-concept implementation. SIDH is … Continue reading Implementing the Castryck-Decru SIDH Key Recovery Attack in SageMath →

Implementing the Castryck-Decru SIDH Key Recovery Attack in SageMath

RT @NCCGroupInfosec: NCC Group Research at Black Hat USA 2022 and DEF CON 30 - RCE-as-a-Service - MacAttack - framework with macro payload…

@NCCGroupplc

by Michael Mathews Ransomware has been a concern for everyone over the past several years because of its impact to organisations with the added pressure of extortion and regulatory involvement. However, the question always arises as to how we prevent it. Prevention is better than cure and hindsight is a virtue. This blog post aims … Continue reading Top of the Pops: Three common ransomware entry techniques →

Top of the Pops: Three common ransomware entry techniques

This year, NCC Group researchers will be presenting at least five presentations at Black Hat USA and DEF CON 30. A guide to these presentations (abstracts, dates, and links) is included below. We will also update this post with any additional presentations as they are accepted and announced. Virtually or in-person, we hope you will … Continue reading NCC Group Research at Black Hat USA 2022 and DEF CON 30 →

NCC Group Research at Black Hat USA 2022 and DEF CON 30

Happy #NationalInternDay! https://t.co/orrLIcX2ej

@NCCGroupplc
We recently caught up with Ariela, a Fraud Analyst at Fox-IT, part of NCC Group, who shared her journey from Trainee to her current role as part of our #PathToProgression blog series. Find out how her thesis internship research as part of her International Business and Languages degree inspired her to join the world of cyber security and more in our latest blog, available on our newsroom (link in bio)! #WeAreNCCGroup #BehindTheScreens #CyberSecurity #WomenInCyberSecurity #CyberCareers #CareersInCyber #BlogSeries

We recently caught up with Ariela, a Fraud Analyst at Fox-IT, part of NCC Group, who shared her journey from Trainee to her current role as part of our #PathToProgression blog series. Find out how her thesis internship research as part of her International Business and Languages degree inspired her to join the world of cyber security and more in our latest blog, available on our newsroom (link in bio)! #WeAreNCCGroup #BehindTheScreens #CyberSecurity #WomenInCyberSecurity #CyberCareers #CareersInCyber #BlogSeries

lifeatnccgroup

The following vulnerabilities were found as part of a research project looking at the state of security of the different Nuki (smart lock) products. The main goal was to look for vulnerabilities which could affect to the availability, integrity or confidentiality of the different devices, from hardware to software. Eleven vulnerabilities were discovered. Below are … Continue reading Technical Advisory – Multiple vulnerabilities in Nuki smart locks (CVE-2022-32509, CVE-2022-32504, CVE-2022-32502, CVE-2022-32507, CVE-2022-32503, CVE-2022-32510, CVE-2022-32506, CVE-2022-32508, CVE-2022-32505) →

Technical Advisory – Multiple vulnerabilities in Nuki smart locks (CVE-2022-32509, CVE-2022-32504, CVE-2022-32502, CVE-2022-32507, CVE-2022-32503, CVE-2022-32510, CVE-2022-32506, CVE-2022-32508, CVE-2022-32505)

Our latest monthly Threat Pulse from our Strategic Threat Intelligence Practice includes a rundown of the key highlights and trends seen in June, including the most targeted sectors, regions and most active threat actors. https://t.co/oVzqw6GnY3

@NCCGroupplc

RT @enjenneer: Check out @NCCGroupInfosec researcher Sultan Qasim Khan on @donutmedia today, demonstrating how his link-layer relay attack…

@NCCGroupplc

RT @NCCGroupCareers: Join our mission in making the world safer & more secure as our Senior Security Analyst in the U.S. https://t.co/bkmzv…

@NCCGroupplc

Last week, NIST announced some algorithms selected for standardization as part of their Post-Quantum Cryptography project. This is a good opportunity to recall the history of this process, observe its current state, and comment on the selected algorithms. It is important to remember that the process is not finished: round 4 has started, and should … Continue reading NIST Selects Post-Quantum Algorithms for Standardization →

NIST Selects Post-Quantum Algorithms for Standardization

Press contacts

NCC Group Press Office

NCC Group Press Office

Press contact All media enquires relating to NCC Group plc +44 7824 412 405
NCC Group - Financial Media Enquiries

NCC Group - Financial Media Enquiries

Press contact Maitland AMO Financial Results Media Enquiries +44 (0)20 7379 5151
Regional Press Office - North America

Regional Press Office - North America

Press contact +1 408 776 1400
Regional Press Office - Europe

Regional Press Office - Europe

Press contact +31 (0)23 562 8208

NCC Group exists to make the world safer and more secure

In today’s threat landscape understanding the risks organisations and customers are exposed to is more important than ever.

Understanding the impact and how to be more resilient is key to protecting brand, reputation and sensitive customer information. Building a cyber-resilient organization can be a complex process but it’s not impossible.

With our knowledge, experience and global footprint, we help assess, develop and manage cyber resilience posture.

NCC Group Newsroom
XYZ Building, 2 Hardman Boulevard, Spinningfield
M3 3AQ Manchester
United Kingdom
NCC Group customer website
NCC Group corporate website
NCC Group Cyberstore