UK organisations urged to review cyber security following Middle East tensions

Voluntary, Community, Faith and Social Enterprise (VCFSE) organisations are being encouraged to review their cyber security arrangements following new advice issued by the National Cyber Security Centre (NCSC).

The advisory follows evolving events in the Middle East, which the NCSC says could increase the risk of indirect cyber activity affecting organisations in the UK.

While the NCSC currently assesses that there is no significant direct cyber threat from Iran to the UK, the rapidly changing situation means organisations should remain vigilant and ensure their systems are properly protected.

What this means for voluntary organisations

Many voluntary sector organisations rely heavily on digital tools to deliver services, manage volunteers, handle donations and store sensitive personal data. As a result, even smaller charities can become targets of opportunistic cyber activity, such as:

• Phishing emails designed to steal login details
• Distributed Denial of Service (DDoS) attacks disrupting websites or services
• Attempts to exploit weaknesses in websites or online systems

The NCSC has warned that Iran-linked hacktivist groups may still have the capability to carry out cyber activity, which could have knock-on effects for UK organisations.

Steps organisations can take

The NCSC is advising organisations to review their cyber security posture and take sensible precautionary measures, including:

• Ensuring staff remain alert to phishing emails and suspicious messages
• Reviewing website and IT system security
• Increasing monitoring of networks and online services where possible
• Checking supply chain partners for potential cyber risks
• Ensuring backups are up to date and securely stored

Organisations with partners, operations or supply chains in the Middle East may face a higher level of risk and should consider strengthening monitoring and reviewing their external attack surface.

Sign up for Early Warning alerts

The NCSC also encourages UK organisations to register for its free Early Warning service, which provides alerts about potential security issues affecting your network.

With cyber threats continuing to evolve globally, taking proactive steps now can help voluntary organisations protect their data, services and communities.

Resources

As part of the FraudWatch project, a number of practical cyber security and fraud prevention resources are available for voluntary organisations and community groups.

📚 Visit: fraudwatch.org.uk/videos-and-resources to access guidance, videos and tools to help improve your organisation’s awareness and resilience to fraud and cyber crime.

You can also get further guidance from the National Cyber Security Centre by visiting: ncsc.gov.uk.