The UK's critical national infrastructure is under constant threat from state-sponsored cyber attacks, with over 200 incidents reported in the past year alone. This is a stark reminder of the ongoing contest between the UK and capable adversaries, particularly Russia, China, and Iran. The National Cyber Security Centre's (NCSC) chief executive, Richard Horne, has emphasized the need for organizations to focus on the fundamentals of cybersecurity, such as ensuring quick recovery from attacks. Horne's comments echo those of Pat McFadden, the former chancellor of the duchy of Lancaster, who warned of Russia's targeting of key infrastructure and the potential for AI-enabled cyber attacks. The emergence of advanced AI models, such as Anthropic's Claude Mythos, has further heightened concerns about the risk of AI-enabled cyber attacks. However, experts caution that most breaches still come from well-established risks, such as weak authentication and unpatched vulnerabilities. Horne also highlighted the need for a collective embrace of the contest, understanding the urgency, and believing in the ability to match any opponent. The NCSC has recommended that consumers drop passwords and adopt passkeys, which are described as a 'digital stamp' stored on devices, as a more secure alternative. This recommendation comes as the UK faces the potential for 'hacktivist attacks at scale' if it becomes embroiled in a conflict, with the impact potentially similar to recent high-profile ransomware incidents. The UK's critical national infrastructure, including the nuclear deterrent, power plants, hospitals, and airports, is at risk from these attacks. Horne's comments also reflect the warning from Blaise Metreweli, the head of MI6, who said the UK is caught in 'a space between peace and war' as tensions with Russia mount. The ongoing contest and the need for a comprehensive cybersecurity strategy are clear. The UK must continue to invest in its cybersecurity capabilities and work closely with its allies to defend against these threats. The future of the UK's critical national infrastructure depends on it.
