The head of the UK's National Cyber Security Centre (NCSC) has stated that approximately three-quarters of cyber attacks targeting the nation's critical infrastructure over the past year have been linked to hostile state actors. Dr. Richard Horne, CEO of the NCSC, revealed this figure during a speech at the Royal United Services Institute's (RUSI) Annual Security Lecture.
Dr. Horne indicated that the NCSC managed over 200 cyber incidents affecting critical national infrastructure and its supporting systems in the year leading up to May 2026. Of these, roughly 75% are believed to have originated from state-sponsored groups. He specifically mentioned Russia, China, and Iran as countries increasingly targeting the systems essential for UK services.
The NCSC CEO characterized the cyber landscape not as a contained risk to be managed, but as a continuous competition against sophisticated adversaries. He likened the ongoing cyber contest to a large-scale sporting event, such as football or basketball, emphasizing that success requires a comprehensive approach across all operational domains.
Dr. Horne urged all board members and executives to bolster their organizations' cyber resilience. He outlined three key areas for improvement: understanding their exposure to threats, implementing robust defenses based on fundamental security principles, and ensuring the ability to maintain operations and recover swiftly after an attack.
He noted that many significant cyber incidents still occur due to a lack of foundational security measures. Dr. Horne stressed that the cyber contest is not limited to specific professionals but involves everyone, from boardrooms to home users, and that collective engagement and a sense of urgency are crucial for prevailing.
Looking ahead, Dr. Horne warned that vulnerabilities tolerated today will likely be exploited in future conflicts. He suggested that the UK is, to some extent, already engaged in these future conflicts due to the current state of cybersecurity preparedness.
The NCSC CEO also highlighted the accelerating threat posed by advancements in artificial intelligence. The NCSC anticipates that by 2028, AI-enabled cyber capabilities will be used by attackers to exploit known vulnerabilities in legacy technology at scale, particularly within critical national infrastructure. The NCSC has provided resources to help organizations prepare for AI-powered attacks by strengthening their fundamental cybersecurity.
