75% of Cyber Attacks on UK Infrastructure Linked to Hostile States, NCSC Reports

• •75% of cyber incidents affecting UK CNI linked to hostile state actors.
• •AI advancements may escalate cyber threats by 2028, targeting legacy systems.
• •Urgent action needed from all organizations to strengthen cyber defenses.

The UK's National Cyber Security Centre (NCSC) reported that 75% of over 200 cyber incidents affecting critical national infrastructure (CNI) in the past year were linked to hostile state actors, including Russia, China, and Iran. Richard Horne, CEO of NCSC, emphasized that these attacks target essential services such as power plants, hospitals, and transportation systems. He described the cyber threat landscape as an ongoing contest, urging organizations to strengthen their defenses and improve resilience. Horne warned that vulnerabilities tolerated today could be exploited in future conflicts, particularly as artificial intelligence (AI) capabilities evolve. The NCSC anticipates that by 2028, AI-enabled attacks will exploit weaknesses in legacy systems. Horne called for immediate action from all sectors, stating that there are no spectators in this contest. The NCSC managed 200 incidents from June 2025 to May 2026, highlighting the urgency of addressing cybersecurity fundamentals.