NCSC warns of ‘perfect storm’ as geopolitics and AI accelerate the level of Cyber Threat

IT Ambulance is urging organisations across the UK to review their cyber security posture following warnings (7th May) from the National Cyber Security Centre (NCSC) that today’s threat landscape is being reshaped by rising geopolitical tension, large-scale attacks and the rapid adoption of artificial intelligence.

The combination of state-backed capability, heightened activity linked to Russia and China, and the growth of hacktivism is driving an increase in high-impact incidents. At the same time, AI is lowering the barrier to entry for attackers and speeding up the discovery and exploitation of vulnerabilities.

IT Ambulance expects the continued growth of AI-assisted scanning to drive a sustained “patch wave”, as newly discovered weaknesses are exploited faster and at greater scale. Organisations should ensure they have clear ownership for patching, timely deployment processes, and visibility of any internet-facing services and third-party suppliers.

“We’re seeing an environment where capability is increasing and time-to-exploit is shrinking,” said Frank Connelly, MD at IT Ambulance. “The practical takeaway for most organisations is simple: reduce reliance on passwords, strengthen authentication, and keep systems patched – consistently.”

What organisations should do now

Passwords have historically been treated as the first line of defence, but the NCSC is increasingly encouraging organisations and users to adopt Passkeys where they are available. Passkeys are designed to reduce common password-related risks such as phishing and credential reuse, helping organisations strengthen access security. Where passkeys are available, organisations should enable them and provide clear guidance to users on how to adopt them safely.

This small change can significantly reduce the most commonly exploited credential risks.

IT Ambulance can help organisations assess current exposure, implement stronger authentication (including passkeys), and put in place managed patching and monitoring processes. Talk to us today.