Overview

• The NCSC’s annual review says it handled 429 incidents in the year to late August, with 204 classed in the three most serious categories and 18 deemed highly significant.
• Officials identified China, Russia, Iran and North Korea as major state or state‑linked threats, with attackers increasingly leveraging large language models to enhance operations.
• Letters signed by senior ministers and security chiefs called on company leaders to take concrete actions, including adopting board-level governance for cyber risk.
• Recent ransomware and other attacks disrupted major firms including Jaguar Land Rover, Marks & Spencer and the Co-op, underscoring economic and supply‑chain impacts.
• The government guaranteed a £1.5bn loan to support JLR’s suppliers during recovery, while the NCSC urged sign‑ups to its early warning system, use of Cyber Essentials and uptake of a new toolkit for small firms.