Here we present the latest compilation of cybersecurity news, offering insights and updates from the UK and global landscape.
Insufficient Preparedness Alarmingly Pointed Out Against Nation-Supported Cyberattacks in the UK
There’s a concern raised by cybersecurity professionals regarding the UK’s escalating susceptibility to cyber threats supported by state actors. A recent publication by the National Cyber Security Centre (NCSC) indicates a 16% upsurge in severe cyber occurrences impacting national foundations in 2024. Distressingly, 64% of leaders in the public sector related to IT marked their uncertainty about optimal strategies, with outdated systems exacerbating the danger. As the process of digital transformation gains momentum, essential structures such as energy and healthcare are increasingly at risk from ransomware and espionage.
Explore further
NCSC Unveils Blueprint for Transitioning to Post-Quantum Cryptography
The NCSC has put forth official advice on shifting towards post-quantum cryptography (PQC) to shield against potential threats posed by quantum computing. The guideline advises operators of critical infrastructure to commence groundwork now, with anticipated system identification and hazard evaluations scheduled by 2028. The entire migration procedure is expected to conclude by 2035. The plan accentuates the necessity for cryptographic adaptability and risk-focused strategizing in anticipation of quantum-related dangers.
Learn more
UK Authorities Set to Refine Security Code of Practice for Software Providers
In the aftermath of a public deliberation, the UK government will unveil an amended voluntary code of practice tailored for software providers later this year. The enhanced structure will encompass more explicit technical specifications and introduce a novel validation mechanism for providers to confirm adherence. This maneuver aspires to enhance the cybersecurity benchmark in commercial software employed by enterprises and public utilities in the UK.
Delve deeper
Google Addresses Actively Exploited Chrome Zero-Day Issue (CVE-2025-2783)
In response to the briskly exploited Chrome zero-day vulnerability, specifically CVE-2025-2783, Google has rolled out an urgent update. This high-impact flaw facilitated the circumvention of sandbox defenses. It is recommended that all users promptly update their browsers. This event marks the second prominent zero-day vulnerability detected in Chrome in 2025.
Find out more
Proposal for Prohibition of Ransomware Payments in the UK Public Sector Under Evaluation
There is an ongoing assessment of a proposition to prohibit ransomware payments by organizations within the UK public sector and critical infrastructure. While this measure targets discouraging threat actors, specialists caution that it could amplify the strain on inadequately equipped organizations and redirect attacks towards entities lacking swift recovery capabilities.
About Author
