UK critical infrastructure hit by 200 cyber incidents in a year, agency says

The UK’s critical national infrastructure was hit by more than 200 cyber incidents in the year to May, with state-linked actors behind roughly three-quarters of the attacks, the National Cyber Security Centre disclosed Tuesday. Richard Horne, chief executive of the NCSC, said the incidents targeted systems underpinning the country’s nuclear deterrent, power plants, hospitals and airports [1]. The agency defines a cyber incident as an attempt to “damage, disrupt or gain unauthorised access to computer systems, networks or devices” [1]. Horne told an audience at the Royal United Services Institute that the UK is locked in an “ongoing contest with capable adversaries” and described the threat landscape as sprawling. “This contest is not confined to a compact space. It is not like a wrestling match in a closely defined territory, as some have suggested,” he said. “It is far more akin to a football or basketball game, played across a large field of play, where success depends on how you operate across the entire pitch” [1]. Horne said about 75 percent of the more than 200 incidents the NCSC responded to were “believed to be linked to state actors” [1]. Hostile states including Russia, China and Iran were identified as the principal sources of the activity [1]. The warning builds on a 2024 statement by Pat McFadden, then chancellor of the duchy of Lancaster, who said Russia had “targeted our media, our telecoms, our political and democratic institutions and our energy infrastructure” and could “shut down the power grids” [1]. Cybersecurity has become a defining concern of the decade as digital infrastructure underpins more essential services. Computer security focuses on protecting systems and networks from threats that can lead to disruption or damage, a challenge that has grown with the spread of smart devices and the Internet of things [2]. The NCSC’s latest figures arrive during a period of heightened geopolitical friction. The 2020s have seen an escalation of military conflicts, including the Russian invasion of Ukraine and the 2026 Iran war, which itself triggered large-scale cyber and kinetic exchanges and disrupted global energy markets [3][6]. Horne cautioned that advances in artificial intelligence are likely to accelerate the threat, with 2028 shaping up as the year when cyber-flaws in national infrastructure could crystallise [1]. The UK’s AI Security Institute, a research body under the Department for Science, Innovation and Technology, was established after the 2023 AI Safety Summit and has since detected serious vulnerabilities in models before launch, including flaws that could enable development of biological weapons [8]. Horne stressed that organisations must focus on the fundamentals of cybersecurity, including rapid recovery from attacks. “The many vulnerabilities that organisations tolerate today will be exploited in conflict tomorrow. If they are too expensive or hard to fix in peacetime, then they certainly will be in war,” he said [1]. The NCSC separately recommended in April that consumers abandon passwords in favour of passkeys, describing the technology as a “digital stamp” stored on devices that allows sign-in to apps and websites [1]. Horne said the cyber-threat now stretches from “boardrooms to IT help desks, to sofas at home” [1].