CyberHappenings logo

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

NCSC Pilot Project Identifies Barriers and Risks in Cyber Deception

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

The UK's National Cyber Security Centre (NCSC) has shared findings from a pilot project under the Active Cyber Defence (ACD) 2.0 program, involving 121 organizations and 14 cyber-deception solution providers. The project aims to establish an evidence base for cyber deception use cases at a national scale. Key findings include challenges in generating outcome-based metrics, inconsistent terminology, a guidance gap, risks of improper tool configuration, and the strategic advantage of not advertising deception tools. The NCSC plans to deploy thousands of deception solutions across various environments to improve national resilience by imposing costs on adversaries.

Timeline

  1. 12.12.2025 12:30 1 articles · 23h ago

    NCSC Shares Findings from Cyber Deception Pilot Project

    The NCSC has shared findings from a pilot project under the Active Cyber Defence (ACD) 2.0 program, involving 121 organizations and 14 cyber-deception solution providers. The project aims to establish an evidence base for cyber deception use cases at a national scale. Key findings include challenges in generating outcome-based metrics, inconsistent terminology, a guidance gap, risks of improper tool configuration, and the strategic advantage of not advertising deception tools. The NCSC plans to deploy thousands of deception solutions across various environments to improve national resilience by imposing costs on adversaries.

    Show sources

Information Snippets

  • The NCSC pilot project involved 121 UK organizations and 14 cyber-deception solution providers.

    First reported: 12.12.2025 12:30
    1 source, 1 article
    Show sources
  • Five key findings were highlighted, including challenges in generating outcome-based metrics and inconsistent terminology.

    First reported: 12.12.2025 12:30
    1 source, 1 article
    Show sources
  • A guidance gap was identified, lacking impartial advice and real-world case studies.

    First reported: 12.12.2025 12:30
    1 source, 1 article
    Show sources
  • Improper tool configuration can lead to undetected threats and a false sense of security.

    First reported: 12.12.2025 12:30
    1 source, 1 article
    Show sources
  • 90% of organizations prefer not to advertise their use of cyber-deception tools.

    First reported: 12.12.2025 12:30
    1 source, 1 article
    Show sources
  • The NCSC plans to deploy 5,000 low- and high-interaction solutions on the UK internet and 20,000 inside internal networks.

    First reported: 12.12.2025 12:30
    1 source, 1 article
    Show sources
  • Additionally, 200,000 low-interaction solutions will be deployed in cloud environments and two million honeytokens.

    First reported: 12.12.2025 12:30
    1 source, 1 article
    Show sources
  • Cyber deception can impose costs on adversaries by forcing them to navigate false environments.

    First reported: 12.12.2025 12:30
    1 source, 1 article
    Show sources