Ollie Whitehouse
@ollieatnowhere.bsky.social
CTO at the UK's National Cyber Security Center
We were delighted to receive this letter from His Majesty King Charles III on the occasion of our tenth anniversary, recognising how the NCSC delivers on making the UK the safest place to live and work online. For practical cyber security advice visit ncsc.gov.uk
Next week! The NCSC Cyber Series Podcast will discuss how leaders can respond to incidents, how to tell stories that encourage people to act, & how people may actually be the strongest link in an organisation's defences. Other episodes⬇️ https://www.ncsc.gov.uk/section/cyber-series-podcast/series-3
Weekly summary is out... ctoatncsc.substack.com/p/cto-at-ncs...
CTO at NCSC Summary: week ending September 13th
“New research analyses 253,912 CVEs and 3,769 confirmed exploited vulnerabilities, finding adversaries continue to target a small fraction of the vulnerability population”
ctoatncsc.substack.com
Weekly summary is out. ctoatncsc.substack.com/p/cto-at-ncs...
CTO at NCSC Summary: week ending September 6th
“higher volume of vulnerabilities/faster pace of patching, recognising that these dynamics could create operational/resilience challenges if change, testing and recovery processes are unable to adapt”
ctoatncsc.substack.com
Weekly summary is out... ctoatncsc.substack.com/p/cto-at-ncs...
CTO at NCSC Summary: week ending August 30th
“Targeting of operational technology reinforces the need for organisations to understand what is exposed to the internet, address avoidable vulnerabilities, and build long-term cyber resilience.”
ctoatncsc.substack.com
The @ncsc.gov.uk yesterday released initial guidance on 'Managing the cyber risk of agentic AI' - this provides defense in depth guidance on architecture, implementation and operations. www.ncsc.gov.uk/blogs/managi...
Managing the cyber risk of agentic AI
Use safeguards, sandboxing and active oversight to realise the benefits of autonomous systems while limiting the unintended activity.
ncsc.gov.uk
Weekly summary is out.. ctoatncsc.substack.com/p/cto-at-ncs...
CTO at NCSC Summary: week ending August 9th
“North Korea relies upon a network of skilled Information Technology (IT) workers, deployed within and outside of North Korea, to obtain false identities and remotely earn income"
ctoatncsc.substack.com
Today, the UK and partners have exposed Russian state-supported actors LAUNDRY BEAR for a phishing campaign targeting Western organisations. Act now to mitigate the threat⬇️ https://www.ncsc.gov.uk/news/uk-and-partners-expose-russian-state-supported-actors-for-new-zero-click-phishing-campaign
Cyber deception as a defensive strategy 'is both a viable tool and a valuable tool when used in the right way to disrupt adversaries.' NCSC CTO Ollie Whitehouse on how deception can be used for threat intelligence and threat detection. To learn more⬇️ www.ncsc.gov.uk/blog-post/cy...
Cyber deception trials: what we’ve learned so far
An update on the NCSC's trials to test the real-world efficacy of cyber deception solutions.
ncsc.gov.uk
Tracebit@tracebit.bsky.social · 4mo agoNew episode of Canaries in the Wild: Ollie Whitehouse, CTO of the UK's National Cyber Security Centre. 23 years in deception, from running honeypots in 2002 to catching state adversaries and a criminal zero-day, now leading NCSC's deception programme. Watch: www.youtube.com/watch?v=NxfS...
Weekly summary is out.. ctoatncsc.substack.com/p/cto-at-ncs...
CTO at NCSC Summary: week ending July 5th
"Data from Report Fraud reveals that 323 organisations reported a ransomware attack between April 2025 and March 2026. Of the reports received, more than 50% were from Small Medium Enterprises"
ctoatncsc.substack.com
Need a vibe check? Find out how our spectrum approach could help you build safer AI-assisted software: https://www.ncsc.gov.uk/blogs/the-vibe-coding-spectrum-approach-to-ai-assisted-software-development
The 'vibe coding spectrum' approach to AI-assisted software development
Different code deserves different levels of oversight, so calibrate your approach to ‘vibe coding’ accordingly.
ncsc.gov.uk
Weekly summary is out.. ctoatncsc.substack.com/p/cto-at-ncs...
CTO at NCSC Summary: week ending June 14th
"A partnership between the NCSC and the Department for Science, Innovation and Technology - is leading this work, exploring how frontier AI can be applied safely to cyber defence across government."
ctoatncsc.substack.com
