● Covered by 1 source · 1 reportMedium impact1 neutral
UK Amends Cyber Security Bill to Block High-Risk Tech Suppliers in Critical Infrastructure
Key points
- UK CSRB amended to block high-risk tech suppliers.
- Ministers gain power to prevent critical sector use.
- Amendment follows Iran-linked attack on UK energy facility.
- Bill is nearing Royal Assent to become law.
New Powers for Supply Chain Security
The UK Cyber Security and Resilience Bill (CSRB) has received late amendments aimed at addressing supply chain threats to critical national infrastructure. These changes empower ministers to prohibit organizations within critical sectors from utilizing technology suppliers identified as high-risk. The bill, introduced in November 2025, has passed the House of Commons and is currently in the House of Lords, nearing Royal Assent.
Catalyst for the Amendments
The amendments were tabled on August 24, 2026, in direct response to a cyberattack reported on August 22, 2026. This incident involved Iran-linked adversaries targeting a small UK energy facility, taking it offline for four days. Although the attack had no severe immediate impact, it underscored the potential for broader supply chain attacks to disrupt critical industries.
Industry Reaction and Implications
Industry experts view these amendments as a significant step. Darren Guccione, CEO of Keeper Security, noted that the energy generator incident has increased the urgency for the bill's provisions to designate critical suppliers. Shankar Haridas of ManageEngine emphasized that such attacks are public safety threats, not just IT problems. Jamie Akhtar of CyberSmart highlighted that supply chain security is increasingly recognized as a national resilience issue, as attackers can exploit less protected suppliers to compromise sophisticated critical infrastructure defenses.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
The UK government has introduced amendments to its Cyber Security and Resilience Bill (CSRB) to grant ministers powers to prevent critical infrastructure organizations from using technology suppliers deemed high-risk. This move follows a recent cyberattack on a UK energy facility, highlighting supply chain vulnerabilities in critical sectors.