Help the NCSC understand how organisations approach external attack surface risk
2026-10-13T20:52:09Z•624ddfb12d63c8f8580a67162ab92d4d79a3f5812872a2ffb3315f965c76673c
CHOSEN BRICKChina-linked actorsCitrix NetScalerIranian cyber activityLAUNDRY BEARNetScaler ADCNetScaler GatewayRussian state-sponsored actorsUK NCSCactive exploitationadversary simulationagentic AIcritical infrastructurecyber resilienceexternal attack surface managementincident responseinternet-exposed systemsnation-state activityoperational technologyphishingpost-quantum cryptographyshadow AIspywarethreat intelligencezero-click phishing
What happened
UK NCSC RSS updates covering nation-state cyber activity, active exploitation of Citrix NetScaler vulnerabilities, spyware targeting dissidents and journalists, disruptive activity against internet-exposed and operational technology systems, and guidance on AI security, incident recovery, adversary simulation, and post-quantum cryptography. The most urgent item concerns actively exploited Citrix NetScaler ADC and Gateway vulnerabilities; other items describe high-impact state-sponsored threats and defensive guidance.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- uk_ncsc_all_rss
- Record identifier
- 624ddfb12d63c8f8580a67162ab92d4d79a3f5812872a2ffb3315f965c76673c
- Enrichment time
- 2026-10-13T20:52:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.