Severity of the risk facing the UK is widely underestimated, NCSC annual review warns

The NCSC's 2024 review reports a substantial increase in UK cyber incidents—12 maximum-severity events, 89 nationally significant incidents, and 347 reports of data exfiltration/extortion (317 involving ransomware)—including exploitation of two zero-day vulnerabilities affecting Palo Alto and Cisco; the report warns of growing nation-state and criminal threats (notably from Russia and China), the rising role of AI and an insecure supply chain, and urges faster, broader adoption of cyber resilience measures.