From Russia (and China) with Love? The UK National Cyber Security Centre Annual Review

According to the NCSC Annual Review, China remained a highly sophisticated actor in cyberspace with increasing ambition to project its influence beyond its borders and a proven interest in the UK’s commercial secrets. How China evolves in the next decade will probably be the single biggest driver of the UK’s future cyber security.

en flag
nl flag
et flag
fi flag
fr flag
de flag
he flag
ja flag
lv flag
pl flag
pt flag
ru flag
es flag

Content Assessment: From Russia (and China) with Love? The UK National Cyber Security Centre Annual Review

Information - 95%
Insight - 95%
Relevance - 95%
Objectivity - 90%
Authority - 100%

95%

Excellent

A short percentage-based assessment of the qualitative benefit of the post highlighting the recently published annual review from the UK's National Cyber Security Centre (NCSC).

Editor’s Note: From time to time, ComplexDiscovery highlights publicly available or privately purchasable announcements, content updates, and research from cyber, data, and legal discovery providers, research organizations, and ComplexDiscovery community members. While ComplexDiscovery regularly highlights this information, it does not assume any responsibility for content assertions.

To submit recommendations for consideration and inclusion in ComplexDiscovery’s cyber, data, and legal discovery-centric service, product, or research announcements, contact us today.


Backgrounder Information: The National Cyber Security Centre (NCSC), a part of GCHQ, is the UK’s technical authority for cyber security. Since the NCSC was created in 2016 as part of the Government’s National Cyber Security Strategy, it has worked to make the UK the safest place to live and work online.

This review of its fifth year looks at some of the key developments and highlights between 1 September 2020 and 31 August 2021. As part of a national security agency not all its work can be disclosed publicly but the review seeks to describe the year with insights and facts from colleagues inside and outside of the organization.

Annual Report from the NCSC*

National Cyber Security Centre Annual Review 2021

Extract from Report: Global Threat Actors

The NCSC continued its work with global partners to detect and disrupt shared threats, the most consistent of these emanating from Russia and China. In addition to the direct cyber security threats posed by the Russian state, it became clear that many of the organized crime gangs launching ransomware attacks against Western targets were based in Russia.

China remained a highly sophisticated actor in cyberspace with increasing ambition to project its influence beyond its borders and a proven interest in the UK’s commercial secrets. How China evolves in the next decade will probably be the single biggest driver of the UK’s future cyber security.

While less sophisticated than Russia and China, Iran and North Korea continued to use digital intrusions to achieve their objectives, including through theft and sabotage.

Extract from Report: Ransomware

Ransomware became the most significant cyber threat facing the UK this year. Due to the likely impact of a successful attack on essential services or critical national infrastructure, it was assessed as potentially harmful as state-sponsored espionage.

In 2020 the NCSC observed the evolving model of criminals exfiltrating data before encrypting victim networks; data which they then threatened to leak unless the ransom was paid (known as double extortion).

Ransomware gained increased public attention following attacks on Colonial Pipeline in the US, which supplied fuel to the East Coast, and against the Health Service Executive in Ireland. In the UK there was an increase in the scale and severity of ransomware attacks. Hackney Borough Council suffered significant disruption to services – leading to IT systems being down for months and property purchases within the borough delayed. Attacks this year were across the economy, targeting businesses, charities, the legal profession, and public services in the education, local government, and health sectors.

Among other ransomware incidents investigated was a major attack on the American software firm Kaseya. In July, the NCSC helped to identify and support British victims after the Florida-based company was infiltrated by a hacking group, which seized troves of data and demanded $70m (£51.5m) in cryptocurrency for its return. The NCSC welcomed international efforts in tackling ransomware when it was discussed at the G7 meeting of world leaders in Cornwall, underlining the need for coordinated multilateral attention.


Read the Complete Report: NCSC Annual Review 2021 (PDF) – Mouseover to Scroll

NCSC Annual Review 2021

Read the original report.


*Shared with permission.

Additional Reading

Source: ComplexDiscovery

 

Have a Request?

If you have information or offering requests that you would like to ask us about, please let us know and we will make our response to you a priority.

ComplexDiscovery is an online publication that highlights cyber, data and legal discovery insight and intelligence ranging from original research to aggregated news for use by cybersecurity, information governance, and eDiscovery professionals. The highly targeted publication seeks to increase the collective understanding of readers regarding cyber, data and legal discovery information and issues and to provide an objective resource for considering trends, technologies, and services related to electronically stored information.

ComplexDiscovery OÜ is a technology marketing firm providing strategic planning and tactical execution expertise in support of cyber, data and legal discovery organizations. Focused primarily on supporting the ComplexDiscovery publication, the company is registered as a private limited company in the European Union country of Estonia, one of the most digitally advanced countries in the world. The company operates virtually worldwide to deliver marketing consulting and services.

From Russia (and China) with Love? The UK National Cyber Security Centre Annual Review

According to the NCSC Annual Review, China remained a highly sophisticated...

New Federal Government Cybersecurity Incident and Vulnerability Response Playbooks

According to Matt Hartman, Deputy Executive Assistant Director for Cybersecurity, "The...

A Surge in Cybercriminality? The Annual ENISA Threat Landscape Report – 9th Edition

According to EU Agency for Cybersecurity Executive Director Juhan Lepassaar, “Given...

Considering Zero Trust? November 2021 Cyber Events Report from NATO CCDCOE

Computer security professionals love to say that there is no such...

A Long Runway? KLDiscovery Files for Initial Public Offering

On Tuesday, November 23, 2021, KLDiscovery took a strong step toward...

Modus Secures Working Capital Facility from J.P. Morgan

According to Steven Horan, Chairman, and CEO of Modus, “Having the...

Driven and Innovative Discovery Merge

According to the announcement, Silver Oak Services Partners, a private equity...

Smarsh Acquires Digital Safe Product Line from Micro Focus

According to Smarsh CEO Brian Cramer, “Solving the sophisticated archiving, compliance...

An eDiscovery Market Size Mashup: 2021-2026 Worldwide Software and Services Overview

From market retraction in 2020 to resurgence in 2021, the worldwide...

A New Era in eDiscovery? Framing Market Growth Through the Lens of Six Eras

There are many excellent resources for considering chronological and historiographical approaches...

An eDiscovery Market Size Mashup: 2020-2025 Worldwide Software and Services Overview

While the Compound Annual Growth Rate (CAGR) for worldwide eDiscovery software...

Resetting the Baseline? eDiscovery Market Size Adjustments for 2020

An unanticipated pandemeconomic-driven retraction in eDiscovery spending during 2020 has resulted...

Five Great Reads on Cyber, Data, and Legal Discovery for November 2021

From worldwide eDiscovery market sizing and discovery intelligence to cybersecurity playbooks...

Five Great Reads on Cyber, Data, and Legal Discovery for October 2021

From artificial intelligence and predictive coding to eDiscovery business confidence and...

Five Great Reads on Cyber, Data, and Legal Discovery for September 2021

From countering ransomware to predictive coding and packaged services, the September...

Five Great Reads on Cyber, Data, and Legal Discovery for August 2021

From the interplay of digital forensics in eDiscovery to collecting online...

Calm Before the Storm? Eighteen Observations on eDiscovery Business Confidence in the Fall of 2021

In the fall of 2021, 71.2% of survey respondents felt that...

Help Wanted? Issues Impacting eDiscovery Business Performance: A Fall 2021 Overview

In the fall of 2021, 27.4% of respondents viewed lack of...

Harvest Time? eDiscovery Operational Metrics in the Fall of 2021

In the fall of 2021, 67 eDiscovery Business Confidence Survey participants...

Unseasonably Hot? Fall 2021 eDiscovery Business Confidence Survey Results

Since January 2016, 2,595 individual responses to twenty-four quarterly eDiscovery Business...