British organizations urged to be alert to threat of Iranian cyberattacks

British organizations were warned on Monday to review and strengthen their cyber defenses amid the evolving conflict in the Middle East.

In an advisory alert, the National Cyber Security Centre (NCSC) said there was “likely no current significant change in the direct cyber threat from Iran to the UK, however due to the fast-evolving nature of the conflict, this assessment may be subject to change.”

It follows the launch of a joint U.S. and Israeli air campaign this weekend that killed Iran’s Supreme Leader Ayatollah Ali Khamenei and other senior officials, prompting Iran to launch missile and drone attacks across the region.

In a speech on Sunday, U.K. Prime Minister Keir Starmer said that British armed forces deliberately did not take part in the strikes targeting Iran. He added that British jets are “in the air” to intercept Iranian strikes and British bases are being used by U.S. forces to destroy Iranian missile sites.

A suspected Iranian attack drone struck the Royal Air Force’s base in Cyprus on Sunday, with others intercepted on Monday morning, as reported by The Guardian newspaper.

The NCSC said there was “a heightened risk of indirect cyber threat for those organisations and entities who have a presence, or supply chains, in the Middle East,” adding that both the Iran state and state-aligned actors maintain some cyber capabilities.

In a statement, Jonathon Ellison, the agency’s director for national resilience, said: “In light of rapidly evolving events in the Middle East, it is critical that all UK organisations remain alert to the potential risk of cyber compromise, particularly those with assets or supply chains that are in areas of regional tensions.”

The alert offered “practical steps” British organizations should take in response to cyber threats, including "engaging with our guidance to reduce the likelihood of falling victim to an attack where the cyber risk is heightened, and how critical national infrastructure organisations can prepare for and respond to severe cyber threats.” 

NCSC has previously echoed a U.S. government fact sheet published last June that described an increased risk posed by Iranian state-sponsored or affiliated threat actors against U.S. critical infrastructure and other U.S. entities.