23rd October 2025 | Member Insight | SANS

It’s been a tough year for cyber defenders in the UK and many of our friends in other countries. Major, highly disruptive cybercrime incidents led the news. Our government revealed sophisticated intrusions into our crucial national networks from hostile nation states. Worsening geopolitical conditions made the threat even worse. And all the while we were deluged with evidence-backed warnings of how emerging technologies were making the problem worse.

It’s been a year where cyber threats went mainstream: the nation realised that no one is immune to the dangers posed by cyber attackers. And that’s a huge risk to a highly digitised country focusing on technology as a means to drive growth.

But the UK is fortunate to have a committed and expert community of cyber defenders. Some of the very best work on the threat landscape. And their brilliant, stalwart work is becoming increasingly critical to the UK’s future cyber defences.

A Constantly Changing Threat Landscape

One of the defining characteristics of cybersecurity today is its sheer unpredictability. What constituted a cutting-edge threat vector last year might now be obsolete, and new, more sophisticated attacks can emerge seemingly overnight. In the UK, cyber threats are growing not just in volume but in complexity and impact.

Recent years have seen a surge in ransomware attacks, supply chain compromises, and advanced persistent threats (APTs) targeting sectors from retail, healthcare and finance to education and government.

Two clear twin harms are evident. One is a huge scale data loss. The other – an increasing worry in an era of global instability – is disruptive cyber attacks, including on critical services.

Emerging Technologies: A Double-Edged Sword

As the UK government and private sector embrace digital transformation, they must also contend with the vulnerabilities that come with it. The adoption of cloud computing, IoT devices, and artificial intelligence brings about efficiency and scalability, but also opens new attack surfaces.

Many organisations have handled this well. Overall, cloud has been good for security. But misconfigured cloud environments, insecure APIs, and machine learning model manipulation are all real concerns today.

Additionally, generative AI tools, while promising for innovation and productivity, have created new challenges. Then there’s the imperative on all organisations to prepare for quantum.

The Need for Collaboration and Knowledge Sharing

Cybersecurity is not a solitary pursuit; it thrives on collaboration. As threats evolve, so must our collective defences. One of the most effective ways to build resilience is through knowledge sharing.

Events like CyberThreat play a crucial role in this collaborative ecosystem. Organised as a hub for cybersecurity professionals, researchers and students, CyberThreat offers a unique space to exchange experiences, tools, and techniques.

CyberThreat: Hands-on Learning

What sets CyberThreat apart is its focus on real-world, hands-on experience. One of the event’s highlights is its Capture The Flag (CTF) competition. A dynamic, high-pressure challenge where participants test their skills.

This isn’t just a game. The CTF is an immersive learning experience designed for both individuals and teams. Whether you want to compete solo or join forces with colleagues or friends, the event offers a super-technical, unpredictable, and rewarding environment. The challenges mimic real-world threats, requiring participants to think creatively, act quickly, and collaborate effectively.

From digital forensics to offensive and OSINT, the CTF covers a wide spectrum of cybersecurity domains. It’s an opportunity to learn from both success and failure.

Inspiration from the Front Lines

Beyond technical skill-building, CyberThreat also offers something equally important: inspiration. The event brings together some of the brightest minds in the cybersecurity field. Industry leaders, researchers, and government experts take the stage to share their insights, stories, and strategies.

Hearing firsthand accounts of major incident responses, breakthrough research, or the evolution of an attacker’s playbook can be incredibly motivating. It reminds us that cybersecurity is not just a technical discipline but a community effort rooted in curiosity, vigilance, and innovation.

Building a More Secure Future

Staying informed and connected is more critical than ever. Threats will continue to evolve, and the challenge for defenders will be to stay one step ahead. That requires a blend of technical expertise, continuous learning, and collaboration.

Events like CyberThreat are more than just annual gatherings. They are catalysts for progress. They provide the platform for defenders to grow, challenge themselves, and contribute to a more resilient digital future. Whether you’re a seasoned professional or just starting out, engaging in these opportunities can make all the difference.

“In the course of nearly a decade, CyberThreat has become the call-to-action for the UK’s cyber threat community, and for many of our valued partners. Magic happens in the conference hall and in the surrounding areas: eye-popping presentations; terrifying threats; brilliant defence; innovation; partnership; friendship and fun. It’s not just a worthwhile event – it’s a critically important one. That’s why SANS, with our founding partners the National Cyber Security Centre, are so keen to see it continue to prosper. We can’t wait to bring the threat community together again.” - Ciaran Martin, Founder of the NCSC and Director of CISO Network at SANS

Find out more about CyberThreat 2025.