UK fast-tracks sweeping national cybersecurity bill

• Aims to deter, detect, and disrupt foreign state operations ranging from espionage and cyberattacks to propaganda and proxy activity.
• Bill, which could take effect as early as July 2026, grants “new powers” to counter foreign intelligence operations and equip agencies with stronger tools to pursue proxies acting on behalf of hostile states.

The UK government has introduced the 2026 National Security State Threats Bill, fast-tracked amid what ministers called a “wave of alarming antisemitic attacks,” aiming to deter, detect, and disrupt foreign state operations ranging from espionage and cyberattacks to propaganda and proxy activity. Subject to Parliamentary approval, the law could take effect as early as July 2026.

Officials say the bill grants “new powers” to counter foreign intelligence operations and equip agencies with stronger tools to pursue proxies acting on behalf of hostile states. The move follows years of intensified activity attributed to Iran, Russia, China, and North Korea, which authorities say have shown a persistent pattern of interference.

Former Prime Minister Rishi Sunak previously warned the UK is “under daily attack,” citing espionage and cyber operations.

Countering modern cyber threats

The government highlights state-sponsored hacking and information operations as core threats. Russian-linked APT “Fancy Bear” has been accused of hijacking TP-Link routers in the UK to steal credentials, while North Korean operators have allegedly used remote IT job scams to infiltrate companies.

Iran’s Islamic Revolutionary Guard Corps has been linked to coordinated propaganda across social platforms, streaming services, websites, and blogs, with a joint task force identifying 14,200 related posts. MI5 raised the national terrorism threat level to severe in May, citing online radicalization and threats to specific communities amid Middle East tensions.

The bill also paves the way for long-anticipated reforms to the 1990 Computer Misuse Act to better counter modern cyber threats. Separately, a complementary bill under review seeks to “improve cyber security and resilience” by expanding the UK’s cybersecurity framework across more sectors as attack volumes grow.

If enacted, the legislation would mark one of the most significant overhauls of the UK’s national security and cyber defense posture in decades.