NCSC publishes 10th annual report, warns that AI is transforming cyber operations

The National Cyber Security Centre (NCSC) has released its tenth annual review, warning that the UK faces an escalating cyber threat landscape characterised by both persistent attack methods and emerging automated technologies. To illustrate the point, the report notes that 88% of cybersecurity incidents affecting large organisations stem from four long-standing access vectors: 

• Phishing;
• Misuse of legitimate accounts; 
• Exploiting external remote services; 
• External remote services vulnerabilities 

Alongside widespread cybercrime, state-sponsored espionage remains a sustained challenge as hostile nations increasingly deploy cyber capabilities as instruments of national power.

At the same time, the NCSC highlights that artificial intelligence (AI) is transforming offensive capabilities. Threat actors are deploying AI across the entire threat stack, enabling broader, cheaper, and faster operations that risk outpacing defensive measures. As autonomous end-to-end AI capabilities emerge, the NCSC cautions that the proliferation of state and non-state adversaries demands urgent preparation for both routine software weaknesses and rapidly accelerating automated attacks.

Training Announcement: The BCS Foundation Certificate in Information Security Management Principles (CISMP) is an entry-level programme aligned with ISO/IEC 27001 and Cyber Essentials that examines the fundamental concepts, technologies and principles of information security management. It provides attendees with practical knowledge of key concepts and techniques in risk management, security operations, and technical, physical, and environmental security. In addition, CISMP addresses legal and regulatory requirements, business continuity and disaster recovery planning, and emerging technologies. Find out more.