Info Gov

The Government has announced plans to "rapidly improve" cyber defences and digital resilience across government departments and the wider public sector, in an effort to tackle cyber security threats.

The ‘Government Cyber Action Plan’ published this week centres on the creation of a new 'Government Cyber Unit' and is backed by £210m.

The Government says the plan will lead to "clearer visibility of risks" across government, stronger central Government action on severe and complex risks that no single organisation can solve alone, and faster response to threats and incidents.

It will also establish a "higher resilience across government" by boosting resilience at scale, with targeted measures to close major gaps and protect critical services, the Government claims.

The scheme and funding will seek to support the Government's efforts to digitise public services.

Digital Government Minister Ian Murray said the plan "sets a new bar to bolster the defences of our public sector, putting cyber-criminals on warning that we are going further and faster to protect the UK’s businesses and public services alike".

The Government also announced the launch of a new 'Software Security Ambassador Scheme' which the Government says will help drive adoption of the Software Security Code of Practice, a voluntary project designed to reduce software supply chain attacks and disruption.

The news comes as three London councils - Westminster City Council, Hammersmith Council and the Royal Borough of Kensington and Chelsea - were hit with cyber attacks in November 2025.

In an update on the attacks in December 2025, the Royal Borough of Kensington and Chelsea said attack was carried out "with criminal intent, with data copied and taken away".

Adam Carey

Also in this section

Sep 11, 2026

Anthropic discloses fourth incident of AI model attacking real systems and hands investigation to independent evaluation organisation

Anthropic has published details of four incidents in which its Claude models gained unauthorised access to real third-party systems during cybersecurity evaluations, downloading and modifying user records at a real company, reading the personal information of an individual, harvesting credentials and accessing a security vendor's live database, after the test environments were mistakenly…
Sep 10, 2026

Welsh environmental watchdog hit by data breach

Environmental regulator Natural Resources Wales (NRW) has reported itself to the Information Commissioner's Office after a data breach saw personal details of staff made public.
Aug 24, 2026

Ministers seek power to ban tech risky vendors from critical sectors and bar recipients from discussing the order

The government has tabled amendments to the Cyber Security and Resilience (Network and Information Systems) Bill that would allow the Secretary of State to direct operators of essential services, data centres, managed service providers and other designated organisations to stop buying from, restrict the use of, or remove and disable products from a named vendor on national security grounds, with…
Aug 12, 2026

ACRO Criminal Records Office reprimanded by ICO following cyber security failings

The Information Commissioner's Office (ICO) has urged organisations to strengthen “patching and security monitoring processes” after cyber security failings at ACRO Criminal Records Office left the personal information of up to ten-thousand people, including some individuals’ sensitive data, potentially exposed.
Aug 06, 2026

AI agents sent malicious files to real developers and planted prompt injections in unmonitored test: AISI

The AI Security Institute (AISI) has published an incident report disclosing that AI agents under evaluation in its research environment took sustained, unsanctioned action against real people and organisations on the live internet, including researching the human maintainers of an open-source project, creating fake online identities to pressure one of them into approving malicious code, and…
Aug 05, 2026

Third AI platform goes rogue during cyber testing

The AI Security Institute (AISI) has reveaked a security incident in which AI agents being evaluated for their cyber capabilities took sustained, unsanctioned action directed at real people and organisations, including an attempted supply-chain attack on a publicly used open-source software project.

InfoGov Masthead Newsletter 800