GCHQ: UK critical services cyber threat is real
UK critical infrastructure operators are facing a real cyber threat, GCHQ's director says.


The cyber threat facing UK critical services is "real and credible," according to GCHQ director Iain Lobban.
Addressing delegates at the International Institute for Strategic Studies, Lobban said GCHQ has worked with critical infrastructure operators on dealing with attacks.
Concerns have escalated over the security of critical services since the emergence of Stuxnet, a virus which targeted service providers in its attempt to compromise controls in industrial facilities.
Stuxnet was seen to be most prevalent in Iran and a number of high-profile security companies suggested the worm was created with state backing.
"Much attention has been paid in the media to the potential for cyber attacks to seriously disrupt critical national infrastructure," Lobban said.
"I would not wish to talk about the steps we take with the security service to reduce specific vulnerabilities. But the threat is a real and credible one."
He explained GCHQ gives expert advice and incident response to critical infrastructure providers, but the security body needs to be quicker in its response and try to match "the speed at which cyber events happen."
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"We need to consider the value of receiving in return a direct feed of information from the operators with that same sort of timeliness so that we are aware of the attacks that they are seeing on their systems as they happen," he said.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
Cleo attack victim list grows as Hertz confirms customer data stolen
News Hertz has confirmed it suffered a data breach as a result of the Cleo zero-day vulnerability in late 2024, with the car rental giant warning that customer data was stolen.
By Ross Kelly
-
Lateral moves in tech: Why leaders should support employee mobility
In-depth Encouraging staff to switch roles can have long-term benefits for skills in the tech sector
By Keri Allan
-
Former GCHQ intern risked national security after taking home top secret data
News A former GCHQ intern has pleaded guilty to transferring data from a top-secret computer onto his work phone.
By Bobby Hellard
-
Businesses must get better at sharing cyber information, urges former GCHQ chief
Jeremy Fleming, the former head of GCHQ, has warned businesses face increasingly sophisticated cyber attacks on critical national infrastructure (CNI).
By Rory Bathgate
-
The UK cybersecurity sector is worth over £13 billion, but experts say there’s huge untapped potential if it can overcome these hurdles
Analysis A new report released by the DSIT revealed the UK’s cybersecurity sector generated £13.2 billion over the last year
By Solomon Klappholz
-
"Thinly spread": Questions raised over UK government’s latest cyber funding scheme
The funding will go towards bolstering cyber skills, though some industry experts have questioned the size of the price tag
By George Fitzmaurice
-
Threat of cyber attacks to national security compared to that of chemical weapons
News The UK government has raised the threat level posed by cyber attacks, deeming it greater on average than an event such as the Salisbury poisoning
By Rory Bathgate
-
2022 Public Sector Identity Index Report
Whitepaper UK Report
By ITPro
-
UK and Japan strike digital partnership to collaborate on IoT security, semiconductors
News The two countries are also set to align their approaches to digital regulation to make it easier for companies to operate in each nation
By Zach Marzouk
-
Defra's legacy software problem 'threatens' UK gov cyber security until 2030
News The department spends over two-thirds of its digital budget on maintaining the risky applications, with no plan in place for a fix within the decade
By Rory Bathgate