Despite an unprecedented wave of new legislation, strategies and industry guidance, many UK organisations and the public remain unaware of just how significantly the threats we face every day have changed.
In late 2025, former Defence Secretary and NATO Secretary General Lord Robertson issued a stark warning on the Lord Speaker’s podcast:
“We are under prepared, we’re under insured, we’re under attack and we’re not safe.”
His statement reflects a wider shift recognised by the UK's 2025 National Security Strategy, which describes a world that has become more dangerous, more unpredictable and more interconnected.
Below, we’ve identified four key changes across the UK’s threat landscape:
1. Shift from organised groups to lone actors
For over two centuries, the UK’s primary security threat was dominated by organised groups. Their attacks were often coordinated, large scale and politically driven.
Today, threat actors are far more varied, with an increasing trend in lone wolf attackers, inspired by overseas groups or online media. This type of terrorism has become harder to identify and disrupt, and is increasingly prevalent. Recent research by the Institute for Economics and Peace reported that 93% of fatal terrorist attacks in Western nations over the last five years were carried out by lone actors[i].
2. Increased low-tech methods
Where previous groups relied on military grade weapons or large explosive devices, today’s attackers are using low-sophistication attacks, including:
- Small person-borne Improvised Explosive Devices (IEDs)
- Knives or improvised weapons
- Vehicle as a weapon attacks
- Easy to source consumer technology, such as drones or e-bikes
These methods demand less planning, fewer resources and offer little warning.
3. Growing cyber and state sponsored threats
The rise of cyber-crime and state sponsored activity has radically expanded the UK's vulnerability. In the 12 months to August 2025, the National Cyber Security Centre responded to 204 nationally significant cyber incidents, more than double the previous year[ii].
Cyber-attacks now target essential systems, from Operational Technology (OT) and Internet of Things (IoT) devices to critical national infrastructure and public services.
4. The convergence of threats
Increasing digitisation means physical, cyber and personnel security are no longer separate challenges. A cyber breach may enable physical access. A malicious insider may use digital tools for espionage. A physical intrusion may be designed to plant malware.
.png)
