According to the UK's National Cyber Security Centre (NCSC), critical UK infrastructure suffered over 200 cyber incidents in the past year.

It is believed that approximately 75% of these incidents are linked to state actors. This means that other countries are seeking to undermine the country's stability.

NSSC Chief Richard Horne described the situation as a continuous competition against capable adversaries, not isolated incidents.

He also warned that AI could accelerate the risk. Furthermore, he points to 2028 as a potential point at which this threat could materialize.

The institution's recommendations for other administrations are based on the fundamentals of cybersecurity: patching, strengthening authentication, and not tolerating minor flaws that may become critical. 

A vulnerability in peacetime can be exploited in a conflict.

The UK demonstrates that attacks on critical infrastructure are frequent, and despite state support, the risk will increase. For businesses and organizations, the practical message is to prioritize recovery and reduce exposure to these incidents.