According to Reuters and IT Pro, Richard Horne, head of the National Cyber Security Centre, disclosed that three-quarters of cyberattacks on UK critical systems can be linked to hostile state actors. This represents a clear escalation in the targeting and sophistication of attacks against national infrastructure.
The significance here is straightforward: critical infrastructure—power grids, water systems, communications networks, financial systems—are no longer the secondary targets of cybercriminals. They are now primary objectives for state-level threat actors with resources, intent, and patience to conduct sustained campaigns.
What makes this threat assessment particularly acute is the NCSC's warning on AI's role. According to IT Pro's reporting, Horne flagged that with the rise of AI, the danger is only set to get worse. This signals the organization's assessment that automation and machine learning will lower barriers to entry, accelerate attack cycles, and potentially enable faster exploitation of vulnerabilities across interconnected systems.
For infrastructure-dependent populations, this matters because state actors operate under different constraints than criminal groups. They prioritize strategic advantage, intelligence collection, and disruption potential over immediate financial gain. Attack timelines are measured in months or years, not hours. Reconnaissance is methodical. Persistence is the goal.
The UK's explicit attribution to hostile states also removes plausible deniability from the threat equation—this is a declared geopolitical reality, not a theoretical concern.
What to watch: Monitor for public disclosures around successful intrusions into UK grid operators, water authorities, or telecom infrastructure. Any confirmed breach of operational technology (OT) systems—not just IT networks—would signal that reconnaissance has matured into active infiltration. Track NCSC advisories for emerging vulnerabilities in SCADA and industrial control systems. Watch whether defensive funding and incident response timelines shift in response to these warnings.
