The UK Government Cyber Action Plan (2026) marks a decisive shift from advisory cyber policy to enforceable, cross-government governance. It introduces a central risk “spine” within DSIT, clarifies accountability for departments and suppliers, and reframes outages and attacks as equivalent resilience failures. This briefing assesses credibility, deliverability, skills and industry reliance, legislative dependencies, and the unanswered questions that will determine success.

Global coverage from 05–07 Nov 2025: SonicWall attributes its breach to a state-backed actor, while the Washington Post confirms exposure via Oracle-linked software. Android’s “Landfall” spyware zero-day and Monsta FTP RCE headline new exploits. ENISA warns of DDoS waves on public services as CISA releases fresh ICS advisories and NCSC announces Mail/Web Check retirement.