Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement.
If you've encountered this scam: