Software supply chain attacks: check your dependencies

UK NCSC updates and advisories covering multiple elevated cyber risks: attackers are compromising open‑source packages in supply‑chain attacks (review dependencies, harden package use), nation‑state style covert networks of compromised edge devices (map and baseline edge/VPN traffic, adopt dynamic threat‑feed filtering), and active exploitation of vulnerable routers by APT28 enabling DNS hijacking and credential theft. Guidance also covers designing Zero Trust Network Access, preparing for a large patch wave to address technical debt, cautious adoption of agentic AI and use of AI for vuln‑diso