Finance

UK must brace for rise in state-backed cyberattacks, security chief says

Published by Global Banking & Finance Review

Posted on April 22, 2026

3 min read

· Last updated: April 22, 2026

Add as preferred source on Google
UK must brace for rise in state-backed cyberattacks, security chief says
Global Banking & Finance Awards 2026 — Call for Entries

By Sam Tabahriti LONDON, April 22 (Reuters) - Britain should brace for a rise in cyberattacks linked to hostile states, the head of the country's cybersecurity agency said on Wednesday, as the

UK Urged to Prepare for Rising State-Backed Cyberattacks Amid Geopolitical Shifts

Escalating Cyber Threats and National Response

By Sam Tabahriti

Current State of Cybersecurity in the UK

LONDON, April 22 (Reuters) - Britain should brace for a rise in cyberattacks linked to hostile states, the head of the country's cybersecurity agency said on Wednesday, as the government urged tech firms to help build defences powered by artificial intelligence.

Frequency and Nature of Cyber Incidents

Richard Horne, chief executive of the National Cyber Security Centre, said the agency continues to handle about four nationally significant cyber incidents a week on average and that the highest-impact attacks are increasingly tied to governments rather than criminal gangs alone. The NCSC is part of the UK's intelligence agency GCHQ.

Persistent Criminal Threats

Criminal threats such as ransomware remain the most common risk facing organisations, Horne told the government's annual CYBERUK conference in Glasgow, according to a copy of his speech.

Nation-State Attacks and Geopolitical Drivers

Origins of Serious Cyber Incidents

But he said the majority of the most serious incidents now originate "directly or indirectly" from nation states, including China, Iran and Russia. He said such activity was being directed at Britain and its European partners.

Geopolitical Shifts and Security Warnings

Horne also warned that the UK is living through "the most seismic geopolitical shift in modern history." 

Recent Disruptions and Threats

Britain's domestic spy agency MI5 said last year that authorities had disrupted more than 20 Iran-linked plots since 2022, some of which targeted individuals living in Britain.

Potential for Large-Scale Hacktivist Attacks

"Were we to be in, or near, a conflict situation, the UK would likely face hacktivist attacks at scale," Horne warned, adding that such campaigns could cause disruption comparable to major ransomware attacks, but without the option of paying to restore systems.

International Perspectives and AI in Cybersecurity

Global Cyber Activity Amid Conflicts

Mathieu Cousin, a cyber risk and threat intelligence strategist at insurers AXA XL, said last month that there was also likely to be a rise in cyberactivity linked to the U.S.-Israeli war on Iran. 

"When geopolitical tensions rise, cyber activity follows. In this conflict, Iranian state-aligned and affiliated groups are using cyber operations as another way to respond," he said.

The Role of Artificial Intelligence

Horne said on Wednesday that advances in artificial intelligence were expected to accelerate cyberattacks by enabling faster identification of vulnerabilities, even as the technology offers opportunities to strengthen defences.

Government Initiatives and Industry Collaboration

Calls for AI-Driven Cyber Defence

At the same conference, Security Minister Dan Jarvis called on leading AI companies to work with the government to build AI-powered cyber-defence capabilities to protect critical national infrastructure.

Investment in Cybersecurity and Business Support

Jarvis also invited businesses to sign a voluntary Cyber Resilience Pledge and announced 90 million pounds ($122 million) of additional investment over three years to bolster cybersecurity, including support for small and medium-sized firms.

($1 = 0.7393 pounds)

(Reporting by Sam Tabahriti; Editing by Hugh Lawson)

Key Takeaways

  • State-linked cyberattacks now constitute the majority of the UK’s most serious incidents, handled by the NCSC at an average of four per week, with China, Iran and Russia identified as primary sources (apnews.com)
  • The UK is facing what the NCSC chief termed the “most seismic geopolitical shift in modern history,” warning that in a conflict scenario, mass hacktivist campaigns could cause disruption akin to major ransomware attacks—but with no ransom option (apnews.com)
  • The government is urging AI firms to collaborate on AI-enabled cyber defences, launched a voluntary Cyber Resilience Pledge, and promised an additional £90 million (£122 million) over three years to strengthen cybersecurity, notably for SMEs (apnews.com)

References

Frequently Asked Questions

Why is the UK expecting a rise in state-backed cyberattacks?
According to the National Cyber Security Centre chief, geopolitical shifts and increased activity from hostile states like China, Iran, and Russia are driving more significant cyber threats targeting the UK.
How many significant cyber incidents does the UK government handle each week?
The National Cyber Security Centre handles about four nationally significant cyber incidents per week on average.
What role does artificial intelligence play in cybersecurity?
AI can help both accelerate cyberattacks by finding vulnerabilities faster, and strengthen defences if used by governments and tech companies collaboratively.
What is the UK government doing to bolster its cyber defences?
The UK is investing £90 million over three years, inviting businesses to sign a Cyber Resilience Pledge, and calling for AI companies to help build robust defences.
Who are the main sources of serious cyber incidents against the UK?
Nation states, including China, Iran, and Russia, are now responsible for most of the highest-impact cyber incidents targeting Britain and its partners.

Tags

Related Articles

More from Finance

Explore more articles in the Finance category