NCSC Reports 75% of UK Critical Infrastructure Cyber Attacks Originate from Nation-State Actors (infosecurity-magazine.com)

• NCSC responded to 200 cyber incidents on UK CNI in one year
• 75% attributed to nation-state actors (Russia, China, Iran)
• Horne calls for cybersecurity as continuous contest, not risk
• AI predicted to exploit legacy vulnerabilities by 2028
• Pre-positioning by adversaries already underway (e.g., Volt Typhoon)

"NCSC CEO Richard Horne stated at RUSI that 75% of cyber incidents affecting UK critical infrastructure over the past year were linked to hostile states including Russia, China, and Iran. The agency handled 200 such incidents between June 2025 and May 2026. Horne urged treating cybersecurity as an ongoing contest rather than a risk, and warned that AI will accelerate exploitation of legacy vulnerabilities by 2028."