Finance
UK Must Brace for Rise in State-Backed Cyberattacks, Security Chief Says
Published by Global Banking & Finance Review®
Posted on April 22, 2026
3 min readLast updated: April 22, 2026
Add as preferred source on GoogleQuick Summary
The UK’s National Cyber Security Centre warns that state-backed cyberattacks—from China, Russia, Iran and others—are increasingly driving serious incidents, with roughly four nationally significant attacks handled per week. The government calls for AI-powered cyber defences and pledges £90 million o
UK Urged to Prepare for Rising State-Backed Cyberattacks Amid Geopolitical Shifts
Escalating Cyber Threats and National Response
By Sam Tabahriti
Current State of Cybersecurity in the UK
LONDON, April 22 (Reuters) - Britain should brace for a rise in cyberattacks linked to hostile states, the head of the country's cybersecurity agency said on Wednesday, as the government urged tech firms to help build defences powered by artificial intelligence.
Frequency and Nature of Cyber Incidents
Richard Horne, chief executive of the National Cyber Security Centre, said the agency continues to handle about four nationally significant cyber incidents a week on average and that the highest-impact attacks are increasingly tied to governments rather than criminal gangs alone. The NCSC is part of the UK's intelligence agency GCHQ.
Persistent Criminal Threats
Criminal threats such as ransomware remain the most common risk facing organisations, Horne told the government's annual CYBERUK conference in Glasgow, according to a copy of his speech.
Nation-State Attacks and Geopolitical Drivers
Origins of Serious Cyber Incidents
But he said the majority of the most serious incidents now originate "directly or indirectly" from nation states, including China, Iran and Russia. He said such activity was being directed at Britain and its European partners.
Geopolitical Shifts and Security Warnings
Horne also warned that the UK is living through "the most seismic geopolitical shift in modern history."
Recent Disruptions and Threats
Britain's domestic spy agency MI5 said last year that authorities had disrupted more than 20 Iran-linked plots since 2022, some of which targeted individuals living in Britain.
Potential for Large-Scale Hacktivist Attacks
"Were we to be in, or near, a conflict situation, the UK would likely face hacktivist attacks at scale," Horne warned, adding that such campaigns could cause disruption comparable to major ransomware attacks, but without the option of paying to restore systems.
International Perspectives and AI in Cybersecurity
Global Cyber Activity Amid Conflicts
Mathieu Cousin, a cyber risk and threat intelligence strategist at insurers AXA XL, said last month that there was also likely to be a rise in cyberactivity linked to the U.S.-Israeli war on Iran.
"When geopolitical tensions rise, cyber activity follows. In this conflict, Iranian state-aligned and affiliated groups are using cyber operations as another way to respond," he said.
The Role of Artificial Intelligence
Horne said on Wednesday that advances in artificial intelligence were expected to accelerate cyberattacks by enabling faster identification of vulnerabilities, even as the technology offers opportunities to strengthen defences.
Government Initiatives and Industry Collaboration
Calls for AI-Driven Cyber Defence
At the same conference, Security Minister Dan Jarvis called on leading AI companies to work with the government to build AI-powered cyber-defence capabilities to protect critical national infrastructure.
Investment in Cybersecurity and Business Support
Jarvis also invited businesses to sign a voluntary Cyber Resilience Pledge and announced 90 million pounds ($122 million) of additional investment over three years to bolster cybersecurity, including support for small and medium-sized firms.
($1 = 0.7393 pounds)
(Reporting by Sam Tabahriti; Editing by Hugh Lawson)
Key Takeaways
- •State-linked cyberattacks now constitute the majority of the UK’s most serious incidents, handled by the NCSC at an average of four per week, with China, Iran and Russia identified as primary sources (apnews.com)
- •The UK is facing what the NCSC chief termed the “most seismic geopolitical shift in modern history,” warning that in a conflict scenario, mass hacktivist campaigns could cause disruption akin to major ransomware attacks—but with no ransom option (apnews.com)
- •The government is urging AI firms to collaborate on AI-enabled cyber defences, launched a voluntary Cyber Resilience Pledge, and promised an additional £90 million (£122 million) over three years to strengthen cybersecurity, notably for SMEs (apnews.com)
References
Frequently Asked Questions about UK must brace for rise in state-backed cyberattacks, security chief says
1Why is the UK expecting a rise in state-backed cyberattacks?
According to the National Cyber Security Centre chief, geopolitical shifts and increased activity from hostile states like China, Iran, and Russia are driving more significant cyber threats targeting the UK.
2How many significant cyber incidents does the UK government handle each week?
The National Cyber Security Centre handles about four nationally significant cyber incidents per week on average.
3What role does artificial intelligence play in cybersecurity?
AI can help both accelerate cyberattacks by finding vulnerabilities faster, and strengthen defences if used by governments and tech companies collaboratively.
4What is the UK government doing to bolster its cyber defences?
The UK is investing £90 million over three years, inviting businesses to sign a Cyber Resilience Pledge, and calling for AI companies to help build robust defences.
5Who are the main sources of serious cyber incidents against the UK?
Nation states, including China, Iran, and Russia, are now responsible for most of the highest-impact cyber incidents targeting Britain and its partners.
