AI and Geopolitics Raise UK Nation-State Cyber Risk

The UK’s cyber risk is shifting toward more capable, harder-to-spot intrusions even though incident counts have not surged. The standard read would be to focus on volume, but the NCSC is warning that AI-driven change and geopolitical pressure are raising the quality of attacks, not just the quantity. At CYBERUK, NCSC CEO Richard Horne said the agency’s national-significant incident count remained fairly steady at 204, yet most of those serious threats still come from nation states. He pointed to Russia, China and Iran as active actors, and said China’s intelligence and military agencies now show an unusually high level of sophistication in cyber operations. The forward risk is a UK threat landscape where steady incident totals can hide more dangerous intrusions. That means more zero-day use, more persistent espionage, and more pressure on government and national-sector targets even without a spike in headline incident numbers.

Part of the PlainSec briefing for 2026-04-22

Sources