NCSC's ‘Proactive Notifications’ warns orgs of flaws in exposed devices

The UK NCSC is piloting a Proactive Notifications service, delivered via Netcraft, to proactively alert UK organizations about exposed systems and unpatched software identified through public internet scanning, with guidance that may reference specific CVEs; emails originate from netcraft.com and never request payment or sensitive data. The program’s coverage is limited during the pilot, and NCSC encourages pairing it with the free Early Warning service for a layered approach that reduces risk pre-incident and detects active threats; no timeline for broader availability was provided.