NCC Group

Great to see Joshua Kolleda, CISSP, PMP, Associate Director, representing NCC Group at the British Ambassador's Reception in Washington, D.C. this month. Bringing together leaders from government, industry and the wider business community, the reception provided an opportunity to connect, exchange perspectives and strengthen relationships across the transatlantic ecosystem. At NCC Group, our purpose is to create a more secure digital future. Through our Government Affairs work, we engage with policymakers, industry leaders and partners to help shape effective cyber policy and support a stronger cyber ecosystem. Thank you to the British Embassy for hosting an excellent evening. #CyberSecurity #CyberResilience #GovernmentAffairs #WashingtonDC

Cyber regulation is expanding. Geopolitical uncertainty is intensifying. Critical infrastructure organisations are being asked to demonstrate cyber resilience with greater confidence, consistency and accountability. At our recent energy and utilities security workshop in Manchester UK, we spoke with our leading cyber experts to learn how organisations we support are managing their compliance obligations. For more insights into the policies and regulations shaping the future of cyber security, register to get the next edition of our Global Cyber Policy Radar, launching in November 2026. Sign up now 📝 https://lnkd.in/emtNsduH #CyberSecurity #CriticalInfrastructure #CyberPolicy #CyberResilience #Regulation Sean Arrowsmith David Brown - ChCSP Derek Gordon

🔐 WPA3 was designed to strengthen Wi-Fi security. But how resilient is it against denial-of-service attacks? New research from NCC Group explores how attackers can exploit WPA3-SAE to trigger resource exhaustion, revisiting early techniques like Dragon Drain and examining lesser-known attacks that remain relevant today. Understanding these risks is key to balancing both security and availability in modern wireless networks. 👇 Read the full research by Óscar Alfonso Díaz: https://lnkd.in/eBiYQ62T #CyberSecurity #WiFiSecurity #WPA3 #WirelessSecurity #SecurityResearch #NCCGroup

As AI accelerates vulnerability discovery and exploitation, security teams are under increasing pressure to make faster, better informed decisions.   But speed alone is not enough.   Organisations need to understand which vulnerabilities are most exploitable, how they connect across environments, and which remediation actions will reduce risk most effectively.   Natalie Walker’s latest article looks at the European Central Bank’s recent call to action for financial institutions but it’s also a message that will resonate far beyond financial services.   Read now 👇 https://lnkd.in/eiSzANfi   #CyberResilience #RiskManagement #Banking #FinancialServices #Industry #AIGovernance #EUFinance #ECB

🔐 Security teams don't need more findings. They need confidence. Last week, Amber Robinson, Lead Product Manager at NCC Group, joined a panel at Horizon3's EMEA Partner Conference in Dubrovnik to discuss how organisations are evolving their approach to cyber risk. One key theme emerged: the challenge isn't a lack of security data, it's knowing what matters most. As attack surfaces grow, organisations are shifting: ➡️ From vulnerability counts to risk-based decision making ➡️ From periodic assessments to continuous validation ➡️ From operational metrics to measurable security outcomes Through our partnership with Horizon3, we help organisations continuously validate their security posture, understand real-world exposure, and prioritise remediation where it matters most. By combining AI-powered security validation with deep offensive security expertise, we're helping customers reduce risk with confidence. Great to connect with partners from across EMEA and discuss the future of exposure management and cyber resilience. #CyberSecurity #CyberResilience #ExposureManagement #CTEM #SecurityValidation #CyberRisk #TechnologyPartners

Think like an attacker. Validate like a pro.   Go beyond point-in-time testing. Proactive Security helps organisations anticipate risk, prioritise what matters and act earlier, so they stay in control rather than reacting under pressure. ✅ Understand your true exposure before attackers do ✅ Prioritise the risks that matter most to the business ✅ Blend human expertise with AI-enabled insight to keep pace with fast-moving risk ✅ Build continuous assurance as threats and environments change ✅ Strengthen resilience through real-world attack simulation   The outcome: greater visibility, stronger assurance and the confidence to act before risk becomes disruption.   Explore Proactive Security and discover how to stay ahead of exposure.   Learn more: https://lnkd.in/eP3ccEsH   #ProactiveSecurity #CyberSecurity #OffensiveSecurity #ContinuousAssurance #ExposureManagement

🧘♀️💙 Wellness, but make it a full-day experience. 🌿 This week our Manchester office became a mini wellness retreat, complete with sound baths, massages, reflexology and healthy food, giving colleagues the opportunity to recharge, reset and focus on their wellbeing. The day was packed with activities designed to help colleagues relax, recharge and reset: 🎵 Sound bath sessions with Katie from Kokorow Wellness, using crystal singing bowls to create a deeply calming experience. 🧠 Confidence-building hypnotherapy, focused on strengthening self-belief, reducing stress and helping people feel more confident in everyday situations. 💆 Chair massages to ease tension and help colleagues unwind. 🦶 Reflexology sessions offering some well-deserved time to relax and recharge. 🥗 A healthy lunch from Balance Kitchen, a local Manchester business bringing people together through nutritious food that doesn't compromise on taste. Creating space for wellbeing isn't a luxury. It's an investment in our people. The wellbeing of our colleagues matters. Creating opportunities to step away from the day-to-day, recharge and connect with others is an important part of fostering a supportive environment where people can thrive. A huge thank you to everyone who got involved, and a special shoutout to Danielle Jennings for organising another fantastic event and making it all happen. 👏✨ #Wellbeing #EmployeeExperience #WorkplaceWellness #Manchester #TeamNCC #MentalHealth #WellbeingAtWork

It's been a great first day at #CS4CA Europe, with plenty of insightful discussions on the challenges facing critical infrastructure organisations today.   We're looking forward to Day 2, including NCC Group's speaking session from Amer Kayyal, Principal OT Security Consultant and Sidharth N., Senior OT Consultant, exploring how Cyber-Informed Engineering (CIE) is helping organisations move beyond traditional security controls and engineer resilience directly into industrial systems.   The key message: 👉 We cannot patch our way to operational resilience. We must engineer resilience into industrial systems from the start.   🎤 Cyber-Informed Engineering: Building Tomorrow's Resilience Today 📅 24 September 🕧 12:30pm | Track B   #CS4CA #OperationalResilience #OTSecurity

NCC Group in Infosecurity Magazine: Matt Hull on rising ransomware activity 👤 Matt Hull, VP of Cyber Intelligence and Response at NCC Group, has been featured in a dedicated article by Infosecurity Magazine exploring the rise in global ransomware activity and the factors driving today's evolving threat landscape. NCC Group's August 2026 Cyber Threat Intelligence Report recorded 1,073 ransomware victims globally, marking the highest monthly total seen so far this year and a 12% increase on July's figures. Commenting on the findings, Matt highlighted the steady rise in ransomware activity, citing rapid advancements in AI and ongoing geopolitical volatility as key factors shaping the threat landscape. He emphasised the importance of ensuring organisational resilience and incident response capabilities keep pace with evolving threats. Read the full coverage in Infosecurity Magazine for more insights: https://lnkd.in/eah3sNRf

✅ Compliance demonstrates conformance. ✅ Testing provides evidence. ✅ Certifications offer assurance artefacts. But none of these, on their own, answer a simple question: Why should we trust this system? Our latest research from Dr Liz J. explores why assurance is not a deliverable or a tick-box exercise, but the ongoing process of building and maintaining justified confidence in complex systems. 📖 Read more in Assurance Is Not Compliance (and Why That Distinction Matters) 👇 https://lnkd.in/e-9BpiNq #CyberSecurity #RiskManagement #Assurance #Compliance