Software supply chain attacks: check your dependencies

UK NCSC published multiple advisories and guidance covering urgent operational and strategic cyber risks: active supply‑chain attacks via compromised open‑source dependencies; guidance for designing Zero Trust Network Access; cautions and controls for agentic/AI use and AI‑assisted vulnerability finding; preparing for a large ‘vulnerability patch wave’; defending against China‑nexus covert networks of compromised edge devices (including VPN/remote‑access exposures and dynamic threat‑feed filtering); deployment of passkeys; a new device (SilentGlass) to protect display links; cross‑domain best‑