Overview

• The NCSC handled 429 incidents in the 12 months to August 2025, with 204 classed as nationally significant—more than double the prior year’s 89—and 18 deemed highly significant, a 50% increase.
• Letters to FTSE350 leaders from senior ministers urge making cyber risk a board-level responsibility, enrolling in the NCSC’s free Early Warning service, and requiring suppliers to meet Cyber Essentials.
• Businesses are advised to plan for continuity, including keeping hard copies of critical data and rehearsing recovery, because not all attacks can be prevented.
• Ransomware remains the dominant threat, attackers are exploiting widely used vulnerabilities, and increased use of AI is expected to challenge cyber resilience through 2027.
• Recent attacks hit Marks & Spencer and the Co-op and forced Jaguar Land Rover to pause production for nearly six weeks, after which the government provided a £1.5bn loan guarantee to support suppliers.