UK Cyber Chief Warns of Perfect Storm for Cyber Security Amid AI Threats
Summary
Dr Richard Horne, CEO of the NCSC, delivered a keynote at the CYBERUK conference warning that the UK faces a 'perfect storm' for cyber security driven by rapid AI advancement and escalating geopolitical tensions. Horne stated that the majority of nationally significant incidents the NCSC handles now originate directly or indirectly from nation states, with Russia applying lessons from the Ukraine conflict to cyber operations beyond the battlefield. He called on all organisations to make cyber security part of their mission, noting that frontier AI is rapidly enabling vulnerability discovery at scale.
“cyber security is the responsibility of everyone, whether they sit on the Board or the IT help desk… cyber security is part of their mission.”
While this is a speech rather than a binding rule, the NCSC's explicit framing of cyber security as a board-level mission obligation signals supervisory expectations that UK-regulated entities should monitor. Firms that have not recently assessed whether cyber resilience is embedded in strategic technology decisions — particularly regarding AI-enabled systems, autonomous operations, and connected devices — should consider this a prompt for review.
What changed
This speech by the NCSC CEO highlights the expanding cyber threat landscape driven by AI and nation-state actors, with the majority of significant incidents now originating from state-linked attackers. Horne emphasizes that the definition of cyber security is evolving to cover robotics, autonomous systems, and physically integrated human technology.
Organisations across all sectors should treat cyber security as a core mission function rather than a technical afterthought. While this is a speech rather than a binding regulatory instrument, compliance and security teams should note the heightened threat environment and the explicit expectation that boards and leadership will prioritise technology base security as essential to organisational resilience.
Archived snapshot
Apr 22, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
News Download & print article PDF
Cyber chief: UK faces "perfect storm" for cyber security
As the technology landscape develops, the definition of cyber security is expanding with it and organisations must grasp the new reality.
Sonny Vermeer via Getty Images
- Technological change and geopolitical tensions present “tumultuous uncertainty” requiring culture shift in approach to cyber defence, says head of UK cyber agency
- All organisations urged to follow advice to make cyber security part of their mission, as cyberspace sits in state “between peace and war”
- Threat picture ever more contested, with majority of significant incidents handled by National Cyber Security Centre coming from attackers linked to nation states The head of the UK’s cyber agency is expected to say that the country is facing a “perfect storm” for cyber security against the backdrop of a new “technological revolution” in a major speech today (Weds, 22 nd April).
Dr Richard Horne, the CEO of the National Cyber Security Centre, a part of signals intelligence agency GCHQ, will say that the meeting of rapid technological change driven by developments in AI and geopolitical tensions are giving rise to a period of “tumultuous uncertainty”.
Speaking to the CYBERUK conference in Glasgow, Dr Horne will say that as the technology landscape develops, the definition of cyber security is expanding with it.
In the future, it will be vital to secure technology that will control robotics, autonomous systems and technology that is physically integrated with human bodies – all of which is “way beyond” the definition of cyber security as it was understood and practised a decade ago and will require organisations to continually reimagine cyber security.
He will call on those working in the field to lead a “cultural shift” within organisations, adding that, amidst the uncertainty, it is clear what actions need to be taken to maintain collective resilience. Dr Horne is expected to say that;
cyber security is the responsibility of everyone, whether they sit on the Board or the IT help desk… cyber security is part of their mission.
Dr Richard Horne, CEO, NCSC
Dr Horne will go on to say that “organisations that do not focus on their technology base...as core to their prosperity ... are no longer just naïve but are failing to grasp the reality of today’s world.”
Speaking about the cyber threat landscape, Dr Horne will say that the number of incidents dealt with by the NCSC remains “fairly steady”. However, there has been a change in where the attacks are coming from as “the majority of the nationally significant incidents that the NCSC is handling now originate directly or indirectly from nation states.”
Dr Horne is also expected to outline that cyberspace is part of the contested space “between peace and war”. He will outline that the UK’s cyber agency is seeing Russia applying lessons it has learnt on the battlefield in the illegal invasion of Ukraine and “moving them beyond the battlefield.”
He will say that conflicts around the world in the past year have shown that “cyber operations are now integral to conflict” and that “cyber security is the home front”.
Addressing the recent discussion about new frontier AI models, Dr Horne will say;
frontier AI is rapidly enabling discovery and exploitation of existing vulnerabilities at scale, illustrating how quickly it will expose where fundamentals of cyber security are still to be addressed.
Dr Richard Horne, CEO, NCSC
As the UK’s national technical authority on cyber security, the NCSC provides a wealth of practical advice, guidance and tools to help organisations and individuals protect themselves from online threats and raise their cyber resilience, available at ncsc.gov.uk
Download & print article PDF Share Share Facebook LinkedIn X Copy Link
Published
21 April 2026
Written for
Cyber security professionals Large organisations Public sector Small & medium sized organisations
News type
General news
Was this article helpful?
17 Apr 2026
Strengthening cyber resilience across the NHS with collaboration and innovation
How the NCSC is reducing risk, improving detection, and helping to keep vital services running.
Blog Post
15 Apr 2026
Retaining defensive advantage in the age of frontier AI cyber capabilities
As AI accelerates vulnerability discovery, organisations must raise their security baselines to safeguard their cyber security.
News
12 Mar 2026
International security chiefs to convene in Glasgow for flagship CYBERUK conference
CYBERUK will be delivered by the NCSC and sponsors across four distinct tracks of activity: Resilience, Technology, Threat, and Ecosystem.
Related changes
Get daily alerts for NCSC UK News
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from NCSC.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when NCSC UK News publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.