Designing secure access with ZTNA

This NCSC feed aggregates guidance and advisories covering enterprise and national cyber resilience: designing Zero Trust Network Access (ZTNA), moving to passkeys (passwordless authentication), cautious adoption and use of agentic/AI tools (including using AI to find vulnerabilities), and preparing for a large ‘vulnerability patch wave’. It highlights active threat activity and mitigation: China‑nexus covert networks of compromised edge devices and an advisory on defence, and Russian APT28 exploiting vulnerable routers for DNS‑hijacking operations. Other items include new cross‑domain and NHS