Latest publications 27 May 2026 Opportunities for AI in cyber defence This publication provides guidance on how organisations can adopt frontier AI to strengthen cyber defence while managing associated risks. 01 May 2026 Careful adoption of agentic AI services Agentic AI enables powerful automation but introduces significant security risks. Our new guidance helps organisations consider its careful adoption, prioritising secure and resilient use. 09 Apr 2026 Detecting socially engineered messages Socially engineered messages pose a significant threat to organisations. They can have a big impact, helping malicious actors access accounts, systems or sensitive information. Learn how to spot a socially engineered message, including through email, SMS, social media or messaging apps. All publications Title AudienceIndividuals & familiesSmall & medium businessesOrganisations & Critical InfrastructureGovernment Sort by Sort byDate updated (new to old)Date updated (old to new)Title (A-Z)Title (Z-A) Items per page 61218243036424854606672788490200 22 Sep 2025 Planning for post-quantum cryptography Prepare your organisation for post-quantum cryptography with advice on transition timelines, milestones, and a framework to map transition stages. 04 Sep 2025 End of support for Microsoft Windows and Microsoft Windows server Support for Microsoft Windows and Microsoft Windows Server users following the expiration of the specified servicing timeline. 04 Sep 2025 Hardening Microsoft Windows 10 workstations This publication provides recommendations on hardening workstations using Enterprise and Education editions of Microsoft Windows 10. While this publication refers to workstations, most recommendations are equally applicable to servers (with the exception of Domain Controllers) using Microsoft Windows Server. Security features discussed in this publication, along with the names and locations of Group Policy settings, are taken from Microsoft Windows 10 version 22H2. 04 Sep 2025 A Shared Vision of Software Bill of Materials (SBOM) for Cybersecurity This guidance, authored by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and international partners, presents a shared vision of Software Bill of Materials (SBOM) and the value that increased software component and supply chain transparency can offer to the global community. 26 Aug 2025 Managing cryptographic keys and secrets This guide has been developed to help organisational personnel in understanding the threat environment and the value of implementing secure keys and secrets management to make better informed decisions. 14 Aug 2025 Foundations for OT cybersecurity: Asset inventory guidance for owners and operators This guidance outlines how OT owners and operators can create and maintain an asset inventory and OT taxonomy, to protect their most vital assets. It includes steps for defining scope and objectives for the inventory, identifying assets, collecting attributes, creating a taxonomy, managing data, and implementing asset life cycle management. Pagination Previous page ‹‹ Page 5 Next page ›› Alerts and Advisories Advice, guidance and publications Reports and statistics News Programs Glossary