UK Announces AI Risk Package and Extends Cyber Defense Pilots

The UK government announced a package of measures on October 12, 2026, to protect Britain from the risks posed by increasingly powerful AI, including extending a frontier-AI cyber defense program the government said has already helped find and fix more than 1,000 potential vulnerabilities across government systems.

The announcement was issued by the Cabinet Office, the AI Security Institute (AISI), the National Cyber Security Centre (NCSC) and the Department for Digital, Culture, Media and Sport. AI Minister Kanishka Narayan set out the measures at Base One, Imperial College London’s science and technology incubator, arguing for a whole-society approach to resilience. He warned that as frontier AI systems become more powerful and capable of acting autonomously, the potential consequences of failures or malicious use could become far more serious.

“I want Britain to become one of the hardest countries in the world to attack using artificial intelligence,” Narayan said. He pledged to legislate wherever necessary and to rely on British scientific expertise, technological capability and institutions to understand increasingly powerful systems, counter emerging threats and respond when things go wrong. He said companies building the world’s most powerful AI systems should heed their scientists’ warnings of serious dangers, investigate unexpected behavior and withhold any system whose risks cannot be adequately controlled.

According to the announcement, the move builds on two pilots that have helped find and fix the vulnerabilities and detect potential cyber threats. Extending the program, the government said, will help protect the public services people rely on every day, reduce risk in the short term and support longer-term adoption across the public sector.

Cyber Bill Changes and AI Incident Preparedness

The government said it will explore strengthening parts of the Cyber Security and Resilience Bill and the wider regime so that essential services such as hospitals and utilities are better protected from emerging AI-related risk, including AI loss-of-control risk, where autonomous systems evade human oversight. It will also examine how serious AI incidents and near misses should be identified and reported, and how lessons can be learned quickly to reduce the risk of future harm, with the detail of any measures worked through with parliamentarians, technical experts and the operators who would need to deliver them.

Work is also underway with the NCSC and AISI on how to respond to incidents involving AI agents, systems capable of carrying out complex tasks with little human supervision. Such an incident could unfold faster and spread wider than other major incidents governments are designed to handle, the announcement said, and meeting that challenge will require new expertise and capabilities.

The package also extends to AI verification, which the announcement describes as an emerging field that checks whether claims about how AI systems have been developed, tested and assessed withstand scrutiny. The government said the UK is well placed to take a leading role in the field and that more details on support for UK AI verification efforts will be set out in the coming months.

Cyber Minister Liz Lloyd said cyber incidents continue to disrupt organizations large and small across the private and public sectors, creating what she described as a business-critical need to stay on the front foot on cyber security. “Through scaling up projects piloting AI to protect public services and progressing a Cyber Bill to boost our defences, government is putting cyber security and AI preparedness at the heart of the UK’s digital future,” Lloyd said.

The Pilot Behind the Vulnerability Figures

The announcement cites a case study published on June 12, 2026, by the Department for Science, Innovation and Technology (DSIT) and the NCSC, in support of its figures. It documents a pilot in which the Government Cyber Coordination Centre (GC3), a partnership between the NCSC and DSIT, ran weekly in-person hackathons that used frontier AI to scan public code repositories across government. Working with AISI and NCSC specialists, teams sought to find and mitigate previously unidentified vulnerabilities before they could be exploited. GC3 did not mandate a single approach; teams received model access and built their own tooling.

The case study describes several pipelines. One team ran each public repository through a six-stage AI agent chain (triage, validator, auditor, tracer, judge and summary) in which each stage reads and challenges the last, with manual escalation: a team member checked every line, re-verified exposure and handled false positives. Another team ran conventional scanning tools first, including Gitleaks, Trivy, Semgrep and Hadolint, then layered three model stages on top covering discovery, attack-chain investigation and triage. A third department distilled an organization-wide audit across hundreds of services into five domain-specific Claude Skills.

Participants identified 407 findings in total, including critical weaknesses exposing services to authentication bypass, data exposure and remote code execution, the case study reports. All critical weaknesses were remediated and no evidence of exploitation was identified for any finding, at a cost of £13,000 in tokens across nine government organizations over the month. The authors said the models traced vulnerabilities across service boundaries, which traditional scanners cannot do, and linked business logic with technical detail.

One critical finding affected legacy GitHub Actions in a repository supporting a key government digital service. A specially crafted comment on an open pull request could let an external user set off a chain of workflows, producing arbitrary remote code execution on the GitHub Actions runner and a potential path to extract the secrets and tokens available to that workflow. GC3 will start a second phase of the pilot with more departments, additional models and an extension from public code to closed-source estates.

Model Evaluations and Wider Government Program

Narayan confirmed that AISI scientists are conducting rigorous evaluations of the latest generation of advanced AI models, following work with leading AI developers and the US government.

The announcement also points to an open letter to business leaders published on April 15, 2026, in which DSIT Secretary of State Liz Kendall and Security Minister Dan Jarvis urged businesses to take cyber security seriously at the top of their organizations, get the basics right with the government’s Cyber Essentials scheme, and follow NCSC advice, including signing up to its free Early Warning service, which alerts organizations to potential cyber attacks so they can act before an incident escalates.

According to the announcement, the measures are the first steps on a longer journey, and wider work is being spearheaded by the Prime Minister’s AI Taskforce. The announcement noted the Prime Minister’s commitment at the UN General Assembly in September to do whatever is necessary to protect British people from AI risks as they arise, and said AI will be at the heart of the UK’s G20 Presidency. In the coming months, the taskforce will focus on the areas most impacted by AI, spanning national security, economic growth and the future of public services and the workforce.