UK Faces a Cyber ‘Perfect Storm’
UK Faces a Cyber ‘Perfect Storm’
https://www.infosecurity-magazine.com/news/uk-faces-a-cyber-perfect-storm-ncsc/
Publish Date: 2026-04-22 04:07:00
Source Domain: www.infosecurity-magazine.com
The UK faces a “perfect storm” for cybersecurity as the next decade will be defined by a combination of geopolitical tensions and high-seed technological evolution.
Speaking at the tenth annual CYBERUK conference in Glasgow, Richard Horne, CEO of the UK’s National Cyber Security Centre (NCSC), said that the meeting of rapid technological change driven by developments in AI and geopolitical tensions are giving rise to a period of “tumultuous uncertainty”.
The NCSC had dealt with 204 “national significant” cyber incidents at the time of its last annual review, published in October 2026. Today, Horne said the number of incidents remained “fairly steady”.
Most Serious Cyber Threats Come from Nation States
Ransomware attacks continue to be the most prevalent threat to most firms. However, Horne warned that the majority of “nationally significant” threats the NCSC deals with originate directly from nation states.
Speaking to Infosecurity, Jamie Collier, lead threat intelligence advisor, (Europe), Google Threat Intelligence Group (GTIG) said the firm’s research shows that the UK is currently “navigating a complex and blended threat landscape where nation-state actors pursue very different strategic goals.” This he said, makes it difficult to compare them side-by-side.
In his speech at CYBERUK, Horne outlined how Russia, China and Iran continue to target both UK firms and individuals with their different tactics and objectives.
He noted that China’s intelligence and military agencies now display an “eye-watering level of sophistication” in their cyber operations.
In August 2025, the NCSC published a joint advisory alongside twelve allied agencies publicly linking three China-based companies to a global campaign targeting critical networks, overlapping with what industry tracks as Salt Typhoon.
China-nexus activity is often quieter and persistent, especially compared to the likes of Russian threat actors. They have typically…
