[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMtHZrkn4AJ9H4kWADFJAgc3gOXHvhCZAEqA9p-RghSY":3},{"article":4,"iocs":37,"watch_terms":38,"solutions":39,"lesson":42},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":24},"b881d1e7-ab44-4338-9a54-15c31ceb9124","Why hostile state cyber activity is now a day-to-day business risk","why-hostile-state-cyber-activity-is-now-a-day-to-day-business-risk-afa412","Christopher Clark, Cyber Security Incident Response Team Director, Thrive Geopolitical escalation can become a cyber security problem for businesses far more quickly than many boards expect. The National Cyber Security Council (NCSC) has warned that UK critical infrastructure faced more than 200 cyber incidents over the past year, with around three-quarters believed to be linked […] The post Why hostile state cyber activity is now a day-to-day business risk appeared first on IT Security Guru.","Geopolitical tensions are increasingly translating into cyber security threats for businesses, moving beyond the realm of specialized national security concerns. The UK's National Cyber Security Council (NCSC) reported that critical infrastructure experienced over 200 cyber incidents in the last year, with a significant majority attributed to state-sponsored activity.","UK critical infrastructure faced over 200 state-linked cyber incidents in the past year.","https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F09\u002F09\u002Fwhy-hostile-state-cyber-activity-is-now-a-day-to-day-business-risk\u002F?utm_source=rss&utm_medium=rss&utm_campaign=why-hostile-state-cyber-activity-is-now-a-day-to-day-business-risk",null,"2026-09-09T14:53:20+00:00","2026-09-09T16:00:36.862173+00:00",7,[17],{"name":18,"type":19},"NCSC","vendor","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":20,"icon":12,"name":22,"slug":23},"Nation-state","nation-state",[25,27,32],{"category":26},{"id":20,"icon":12,"name":22,"slug":23},{"category":28},{"id":29,"icon":12,"name":30,"slug":31},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":33},{"id":34,"icon":12,"name":35,"slug":36},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":40,"vendors":41},[],[],{"slug":43,"title":44,"body":45,"framework_refs":46,"framework_notes":59},"state-sponsored-cyber-threats-are-now-an-everyday-business-risk","State-Sponsored Cyber Threats Are Now an Everyday Business Risk","Geopolitical tensions have fundamentally shifted the cyber threat landscape, making state-sponsored attacks a routine business risk rather than a niche national security concern. The NCSC's report of over 200 critical infrastructure incidents — predominantly attributed to hostile state actors — demonstrates that no sector can afford to treat geopolitical cyber threats as someone else's problem. Many organisations lack the threat intelligence, resilience planning, and segmentation strategies necessary to withstand sophisticated, well-resourced adversaries. This matters because state-sponsored attackers often pursue long-term, patient campaigns targeting operational disruption, espionage, and critical system compromise, which can have cascading societal consequences.",[47,48,49,50,51,52,53,54,55,56,57,58],"NIST CSF: Identify (ID.RA) — Risk Assessment","NIST CSF: Protect (PR.AC) — Access Control & Network Segmentation","NIST CSF: Detect (DE.CM) — Security Continuous Monitoring","NIST CSF: Respond (RS.RP) — Response Planning","CIS Control 12 — Network Infrastructure Management","CIS Control 13 — Network Monitoring and Defense","CIS Control 17 — Incident Response Management","NIST SP 800-61 — Computer Security Incident Handling Guide","NIST SP 800-150 — Guide to Cyber Threat Information Sharing","UK NCSC Cyber Assessment Framework (CAF)","ISO\u002FIEC 27001:2022 — A.5.7 Threat Intelligence","GDPR Article 32 — Security of Processing (for incidents involving personal data)",{}]