Webinar: Cyber Threat and Resilience Intelligence Briefing Series – Defence

Escalating Cyber Risks to UK Defence

The UK's defence industrial base confronts a rapidly intensifying cyber threat environment as state actors exploit vulnerabilities in supply chains and personnel. Recent intelligence highlights how adversaries, including those linked to Russia and China, have expanded targeting to include spoofed websites of hundreds of defence firms and direct approaches to employees during recruitment. This evolution makes espionage more accessible and harder to detect, particularly as AI tools reduce the expertise needed to mount sophisticated operations.

Geopolitical pressures drive this focus: the 2025 Strategic Defence Review positioned cyber alongside traditional domains, establishing a CyberEM Command for integrated offensive and defensive operations while accelerating digital targeting capabilities by 2027. Concurrently, the government advanced a Cyber Action Plan with £210 million funding and proposed a Cyber Security and Resilience Bill to expand oversight of critical sectors. These moves respond to persistent incidents, including breaches at Ministry of Defence contractors that exposed sensitive military site data.

The stakes extend beyond immediate data loss. Compromised defence suppliers can disrupt production timelines for weapons systems, erode technological edges, and impose substantial economic costs—exemplified by a 2025 attack on a major manufacturer causing £1.9 billion in UK-wide damages. Smaller firms in the supply chain remain particularly vulnerable, often lacking resources to counter advanced persistent threats, creating cascading risks for larger primes and national capabilities.

Tensions arise between rapid innovation and security: the push for digital transformation and AI integration in defence systems introduces new attack surfaces, while reliance on global supply chains exposes dependencies that adversaries can exploit. Balancing collaboration with international partners against the need for sovereign resilience adds complexity, as does the skills shortage in cyber expertise across government and industry.