Cybersecurity

Posted: 26th August 2026

The UK government is seeking to change the law so that it can block companies from buying products from high-risk suppliers, in a move that comes shortly after news that a hacking group had shut down a small energy facility. Ministers could demand companies in critical sectors such as energy, healthcare and telecoms take extra security measures such as implementing a phased removal of certain vendors or be banned from acquiring technology from them under proposals announced on Monday. The vulnerability of key UK infrastructure was highlighted by Sunday’s revelation that hackers thought to be linked to Iran had forced a small gas plant offline. The National Cyber Security Centre has also warned that companies must do more to guard against cyber attacks. The government’s plans were introduced via amendments to the Cyber Security and Resilience Bill and are subject to parliamentary approval. They will seek to safeguard the supply chains of companies, which are often used as a “soft underbelly” by hackers seeking to target larger groups.

FT 24th Aug 2026

https://www.ft.com/content/3d46e4cb-4dee-4f49-adc1-0bb0f63d4c49
A cyberattack that shut down a small power facility in the UK last month has been described by security officials as a “warning shot” by Iran that sent a message about its ability to attack critical British national infrastructure. Hackers affiliated with the Iranian regime were behind the attack at an undisclosed power plant, which disabled it for four days. The incident was reported to the National Cyber Security Centre (NCSC), an arm of GCHQ, but it did not receive any reports of power cuts in relation to the cyberattack. A government source told the Sunday Telegraph: “We have thresholds for important generators to legally notify us of cyber activity, and this site is nowhere near. It’s a very small-scale site, less than a rounding error compared to grid capacity.” However, it has prompted fresh fears of Iran’s appetite and capacity to target Britain’s critical infrastructure.

Times 23rd Aug 2026

https://www.thetimes.com/uk/politics/article/iran-hackers-cyberattack-shut-down-power-plant-5gtvs09dk

UK energy companies on alert after ‘Iran-linked hackers’ shut down ‘peaker’ plant. Security chiefs brief energy bosses with ‘advice, direction and next steps’ after cyber attack on small gas-fired facility.
Energy bosses have been briefed by Britain’s security chiefs on the successful cyber attack “with advice, direction and next steps”, the government said on Sunday. The attack took down one of the UK’s small gas-fired “peaker” plants, which generally have a capacity of about 15MW and are connected to local electricity distribution networks, according to two energy industry executives with knowledge of the situation. The UK has roughly 300 such plants, with a total capacity of between 4GW and 7GW. These plants usually have no employees on site and turn themselves on and off when they get a signal that more electricity is needed.

FT 23rd Aug 2026

https://www.ft.com/content/bae67bb7-ebf8-44fc-8d55-bbfaada47eb7