The UK’s threat landscape for cyber attacks has intensified, according to the NCSC’s latest annual review.
In the 12 month period to September 2025, the agency handled 204 “nationally significant” cyber incidents, equivalent to an average of four such events every week. The report notes this marks a sharp increase from the 89 nationally significant incidents handled in the previous year.
In the words of NCSC Chief Executive Dr Richard Horne:
“Cyber security is now a matter of business survival and national resilience. With over half the incidents handled by the NCSC deemed to be nationally significant … our collective exposure to serious impacts is growing at an alarming pace.”
What this means for organisations
• The surge in “nationally significant” incidents signals that disruption is no longer a possibility—it is an increasing probability for UK organisations.
• The NCSC’s data shows that more than half...