Help the NCSC understand how organisations approach external attack surface risk
2026-10-12T08:52:09Z•93210d4d6bc7b1a4d0a281aafc903c4c875741ac947ceda01a3a85d6c41d5811
CHOSEN BRICKChina-linked actorsCitrix NetScalerIranian cyber activityLAUNDRY BEARRussian state-sponsored activityUK NCSCactive exploitationadversary simulationagentic AIedge devicesexternal attack surface managementincident responseinternet-exposed systemsoperational technologypost-quantum cryptographyshadow AIthreat intelligencezero-click phishing
What happened
UK NCSC RSS collection containing current cybersecurity advisories, threat intelligence, incident notices, and defensive guidance. High-priority items include active exploitation of Citrix NetScaler ADC/Gateway vulnerabilities, China-linked targeting of sensitive global data, Iranian CHOSEN BRICK spyware targeting dissidents and journalists, Russian state-supported zero-click phishing, and disruptive activity against internet-exposed systems and edge devices. The feed also covers external attack surface management, adversary simulation, agentic and shadow AI risk, incident recovery, network-e
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- uk_ncsc_all_rss
- Record identifier
- 93210d4d6bc7b1a4d0a281aafc903c4c875741ac947ceda01a3a85d6c41d5811
- Enrichment time
- 2026-10-12T08:52:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.