Advancing UK Aerospace, Defence, Security & Space Solutions Worldwide
  • Home
  • /
  • Security
  • /
  • UK and allies publish cyber vulnerability fixes

Security

UK and allies publish cyber vulnerability fixes

The National Cyber Security Centre (NCSC), Cybersecurity and Infrastructure Security Agency (CISA), Australian Cyber Security Centre (ACSC) and the Federal Bureau of Investigation (FBI) have published advice on countering the most publicly known — and often dated — software vulnerabilities, for private and public sector organisations worldwide.

Above: The National Cyber Security Centre (NCSC), Nova South, London.
By Simone Flamigni / copyright Shutterstock

Last Wednesday, the NCSC, CISA, ACSC and FBI published a joint advisory highlighting 30 vulnerabilities routinely exploited by cyber actors in 2020 and those being exploited in 2021.

Advertisement
Advanced Engineering RT

In 2021, malicious cyber actors continued to target vulnerabilities in perimeter-type devices. Today’s advisory lists the vendors, products, and CVEs, and recommends that organisations prioritise patching those listed.

NCSC Director for Operations, Paul Chichester, said: “We are committed to working with allies to raise awareness of global cyber weaknesses – and present easily actionable solutions to mitigate them.

“The advisory published today puts the power in every organisation’s hands to fix the most common vulnerabilities, such as unpatched VPN gateway devices.

“Working with our international partners, we will continue to raise awareness of the threats posed by those that seek to cause harm."

As well as alerting organisations to the threat, this advisory directs public and private sector partners to the support and resources available to mitigate and remediate these vulnerabilities.

Guidance for organisations on how to protect themselves in cyberspace can be found on the NCSC website. Our 10 Steps to Cyber Security collection provides a summary of advice for security and technical professionals.

On the mitigation of vulnerabilities, network defenders are encouraged to familiarise themselves with guidance on establishing an effective vulnerability management process. Elsewhere, the NCSC’s Early Warning Service also provides vulnerability and open port alerts.

CISA Executive Assistant Director for Cybersecurity, Eric Goldstein, said: “Organisations that apply the best practices of cyber security, such as patching, can reduce their risk to cyber actors exploiting known vulnerabilities in their networks.

“Collaboration is a crucial part of CISA’s work and today we partnered with ACSC, NCSC and FBI to highlight cyber vulnerabilities that public and private organisations should prioritise for patching to minimise risk of being exploited by malicious actors.”

Advertisement
Farsound RT 2

FBI Cyber Assistant Director, Bryan Vorndran, said: “The FBI remains committed to sharing information with public and private organisations in an effort to prevent malicious cyber actors from exploiting vulnerabilities.

“We firmly believe that coordination and collaboration with our federal and private sector partners will ensure a safer cyber environment to decrease the opportunity for these actors to succeed.”

Head of the ACSC, Abigail Bradshaw CSC, said: “This guidance will be valuable for enabling network defenders and organisations to lift collective defences against cyber threats.

“This advisory complements our advice available through cyber.gov.au and underscores the determination of the ACSC and our partner agencies to collaboratively combat malicious cyber activity.”

 

 

Advertisement
Advanced Navigation LB 1
Serco hands back HMP Kilmarnock to the Scottish Prison Service

Security

Serco hands back HMP Kilmarnock to the Scottish Prison Service

26 March 2024

After 25 years of running the most cost-effective prison in Scotland, Serco is saying farewell to HMP Kilmarnock and handing it back to the Scottish Prison Service.

C3IA Solutions strengthens commitment to British Armed Forces

Defence Security

C3IA Solutions strengthens commitment to British Armed Forces

26 March 2024

Dorset cyber security company C3IA Solutions has re-signed the Armed Forces Covenant in a ceremony at Blandford Camp.

Ultra I&C opens Cyber Centre of Excellence in Maidenhead

Defence Security Events

Ultra I&C opens Cyber Centre of Excellence in Maidenhead

22 March 2024

Ultra Intelligence & Communications (Ultra I&C) has celebrated the official opening of its flagship facility in Maidenhead, UK, marking a major milestone in the company’s ongoing expansion and development.

HENSOLDT UK gains Manta NEO X Type Approval

Security

HENSOLDT UK gains Manta NEO X Type Approval

22 March 2024

Sensor solutions provider HENSOLDT UK announces the successful completion of Type Approval for its latest Manta NEO X band radar system, designed specifically for the commercial shipping market.

Advertisement
Marshall RT
New SIA non-executive director appointed

Security

New SIA non-executive director appointed

19 March 2024

The UK Minister for Safeguarding has appointed a new non-executive director to the Board of the Security Industry Authority (SIA), the regulator of the UK’s private security industry.

AI leaves 87% of UK organisations vulnerable to cyberattacks

Security

AI leaves 87% of UK organisations vulnerable to cyberattacks

18 March 2024

According to a new report released today by Microsoft in collaboration with Dr Chris Brauer at Goldsmiths, University of London, 87% of UK organisations are vulnerable to cyberattacks in the age of AI.

Advertisement
Farsound RT Brain