Cyber Security News

UK Government Launches Cyber Action Plan to Bolster Public Sector Security

The UK government has unveiled an ambitious £210 million cyber security initiative designed to fortify digital defenses across public sector departments and restore confidence in online government services.

The centerpiece of the initiative is the newly formed Government Cyber Unit, which will coordinate risk management and incident response operations across all government departments.

This centralized approach addresses the growing sophistication of cyber threats that can turn off vital public services within minutes, disrupting essential functions from healthcare access to tax payments and benefit applications.

The plan arrives at a critical juncture as the government pursues widespread digitization of public services.

While this digital-first strategy promises to eliminate lengthy phone queues, reduce bureaucratic paperwork, and enable seamless information sharing between departments, its success hinges entirely on public trust.

Officials estimate that effective technology deployment across the public sector could unlock up to £45 billion in productivity savings, but only if citizens believe their data and services remain secure.

The Government Cyber Action Plan, published Tuesday, January 6, 2026, establishes comprehensive measures to protect citizens’ data and ensure the resilience of critical digital infrastructure as the nation accelerates its digital transformation agenda.

“Cyber-attacks can take vital public services offline in minutes – disrupting our digital services and our very way of life,” stated Digital Government Minister Ian Murray.

Cyber Action Plan

“This plan sets a new bar to bolster the defenses of our public sector, putting cyber-criminals on warning that we are going further and faster to protect the UK’s businesses and public services alike.”

The comprehensive strategy focuses on four key pillars: establishing clearer visibility of cyber risks across government operations, enabling more decisive centralized action against complex threats that individual departments cannot address independently, accelerating response times to emerging vulnerabilities, and systematically elevating resilience standards throughout the public sector.

The plan’s release coincides with the Second Reading of the Cyber Security and Resilience Bill in the House of Commons, which establishes mandatory cyber resilience requirements for firms supplying services to government.

These standards extend throughout critical supply chains, encompassing energy providers, water utilities, healthcare systems, and data centers.

Complementing the government-focused measures, the initiative introduces the Software Security Ambassador Scheme to address vulnerabilities in software supply chains.

With 59% of organizations experiencing software supply chain attacks in the past year, the scheme enlists prominent industry leaders including Cisco, Palo Alto Networks, Sage, Santander, and NCC Group to champion the voluntary Software Security Code of Practice across sectors.

“We are pleased to be an ambassador for the UK government’s Software Security Code of Practice and it reflects our broader commitment to collective resilience,” said Thomas Harvey, Chief Information Security Officer at Santander UK.

“By advocating for these standards we’re not just protecting Santander and our customers, we are helping to build a more secure digital economy for everyone.”

The £210 million investment will establish minimum security standards, provide hands-on support to vulnerable departments, and implement accountability mechanisms to ensure organizations remediate identified vulnerabilities promptly.

Government officials emphasize that cyber resilience forms a cornerstone of national renewal efforts, recognizing that secure digital services are essential for protecting citizens, supporting economic growth, delivering taxpayer value, and maintaining the public trust that underpins democratic governance in the digital age.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Mayura Kathir

Mayura Kathir is a cybersecurity reporter at GBHackers News, covering daily incidents including data breaches, malware attacks, cybercrime, vulnerabilities, zero-day exploits, and more.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago