UK businesses should prepare for potential Iran cyberattacks, the National Cyber Security Centre warned on Monday amid the war in the Middle East. The NCSC is part of the intelligence organization, Government Communications Headquarters (GCHQ).
While there is likely no current significant change in the direct cyber threat from Iran to the UK, NCSC noted there is “almost certainly a heightened risk of indirect cyber threat for those organizations and entities who have a presence, or supply chains, in the Middle East.”
NCSC also determined that Iranian state and Iran-linked cyber actors “almost certainly” have the capability to conduct cyber activity.
The center encouraged organizations to prepare to respond to Iran-linked hacktivists by reading previously issued advisories on DDoS attacks, phishing activity, and ICS targeting.
Organizations exposed to higher risk, for example, those with offices or supply chains in the region, are urged to adjust their cybersecurity posture accordingly.
NCSC asks UK organizations to sign up to Early Warning
The NCSC also asked UK organizations to sign up to its Early Warning service to receive notifications of security issues affecting their networks.
Jonathan Ellison, the director for national resilience at the NCSC, said, “In light of rapidly evolving events in the Middle East, it is critical that all UK organizations remain alert to the potential risk of cyber compromise, particularly those with assets or supply chains that are in areas of regional tensions.”
This comes just hours after Prime Minister Keir Starmer announced his support for the war with Iran by giving the US permission to use British bases for military action.