Building more resilient CNI: what industry pen testers told us

This NCSC feed aggregates multiple advisories and guidance covering active threats and defensive priorities. Key items: an alert urging action following global targeting of Fortinet firewalls and VPN gateways; guidance and an executive summary on defending against China‑nexus covert networks of compromised devices; warnings about software supply‑chain compromises and a call to review dependencies; a recommendation to prepare for a large vulnerability patch wave; and practical guidance on ZTNA, passkeys (password replacement), AI risk/agentic AI, CNI resilience informed by pen‑test findings, as