NCSC Cyber Series

What if the biggest artificial intelligence disaster in cyber security isn't an external hack, but a defensive AI system co-opted by an insider? 
Welcome to the latest episode of the National Cyber Security Center's refreshed podcast, where host Darragh unpacks the revolutionary force of AI. Joined by The Economist’s Alex Hern, NCSC CTO Ollie Whitehouse, and Deputy CTO Peter Hague, the panel dives into the realities of an incredibly hyped technology.

Together, they explore the central tension of AI acting as a "productivity enhancer for the problem factory as well as the solution factory," accelerating the capabilities of both attackers and defenders.

The discussion examines the economics of cyber warfare, warning that well-funded attackers might overpower under-resourced utilities by treating AI as a system for "turning pounds into vulnerabilities." The experts break down the lethal trifecta of AI integration: hooking systems to untrusted content, granting access to internal secrets, and enabling external communication.

To counter these threats, organisations must shift their risk management perspective, treating an AI system like an employee with specific, limited permissions rather than an infallible, godlike addition to the tech stack.

Looking ahead, the guests forecast that an organisation's AI adaptability will be intrinsically linked to its existing cyber resilience. While integrating AI as a defensive tool will unearth latent vulnerabilities at an unprecedented scale, it cannot act as a panacea to bypass basic security hygiene. The panel leaves business leaders with a critical reminder: until fundamentals like patching equipment, managing identities, and implementing multi-factor authentication are mastered, AI will simply exploit these familiar attack vectors at a much more efficient and dangerous scale.

If you enjoyed this episode, please do consider leaving us a review. Follow the podcast in your app so you are notified when we release future episodes and why not share the show with a friend or colleague who might be interested in the topics discussed today.

In this episode of Cyber Series, we explore the foundations of effective cyber security with experts Mary Haigh (BAE Systems), Emma Philpott (IASME Consortium), and Chris Ensor (NCSC).
They discuss the purpose of Cyber Essentials, the five core technical controls, and why “getting the basics right” remains a challenge for organisations of all sizes.
From practical implementation tips to tackling ransomware and myths around Cyber Essentials, this episode highlights how businesses and government can work together to build resilient cyber practices. Learn how Cyber Essentials helps organisations protect themselves and their supply chains, and what the future holds for this vital UK standard.

In this episode of Cyber Series, Darragh sits down with Dr Jeremy Bradley (Principal TD for Crypt and High Threat Technologies), and Flo D (Deputy CTO for Cyber Policy, NCSC-CAP) to explore what “the quantum threat” really means and how organisations should prepare.
From international standards and timelines for migration, to challenges facing critical national infrastructure, our guests break down the opportunities and obstacles of post-quantum cryptography.
Whether you’re a CISO, IT leader, or simply curious about the future of cyber security, this conversation sheds light on the steps we all need to take as we enter the quantum era.

What does it mean to be a cyber professional today? In this episode, we explore how professional standards are shaping the field with guests from the Bank of England.
From qualifications to cross-sector collaboration, we unpack what’s needed to thrive in a complex threat landscape.

When a cyber incident hits, what you say and how you say it can make all the difference. In this episode of The Cyber Series, we’re joined by Nicola Hudson, Partner at Brunswick and Global Lead for Cybersecurity, Data & Privacy, and Beth Maundrill, Editor at Infosecurity Magazine.
Together, we unpack why strong communication is vital during a crisis, common mistakes organisations make, and how to prepare your messaging strategy before an incident strikes. From leadership’s role to the risks and rewards of social media, this is essential listening for anyone involved in incident response.
Want to learn more about handling effective communications in a cyber crisis? Take a look at our guidance: https://www.ncsc.gov.uk/files/NCSC-Guidance-on-effective-communications-in-a-cyber-incident.pdf?utm_source=spotify&utm_medium=podcast&utm_campaign=NCSC_Cyber_Series_comms_in_an_incident_podcast