NCSC Annual Review 2026
Looking back at the National Cyber Security Centre's tenth year and its key developments and highlights, between 1 September 2025 and 31 August 2026.
Pages
Page 7 of 29
Understanding the threat

The threat picture of the last 10 years is a story of both remarkable continuity and change.
In this chapter:
- Continuity and change: A decade of cyber threat
Technology has changed dramatically over the last decade, but many of the weaknesses exploited by attackers are remarkably familiar.
- The cyber threat to the UK
A more contested, competitive and technologically accelerated cyber environment.
- The impact of AI on cyber threat
Artificial intelligence is already beginning to reshape the cyber threat landscape. While AI is unlikely to fundamentally change the goals of hostile actors, it is highly likely to increase the speed, scale and efficiency with which they operate.
- The age of autonomous attack
We can build a more secure, resilient and prosperous digital future, where the UK benefits from technological change while managing its risks. But that future is not guaranteed.
- Incident management
Explore the cyber incidents handled by the NCSC, including common attack methods, vulnerabilities, supply chain risks and ways to improve cyber resilience.
- 7 things we learned
What 337 incidents revealed about cyber resilience in the UK.