Cyber Security in 2022: Attacks, Law and the Future of Digital Defence

What Cyber Security Protects

Cyber security refers to the processes and technologies used to defend networks, devices and critical systems from internal and external threats. Its purpose is simple. Reduce the risk of cyber attacks and prevent criminals from accessing sensitive information.

Major Cyber Attacks and Data Breaches in 2022

The NHS ransomware attack on Advanced

On 4 August 2022, the NHS suffered a major ransomware attack on Advanced, one of its key software suppliers. Hackers deployed LockBit 3.0 malware to encrypt systems and extract client data.

The attack affected:

• Adastra, used by 111 call handlers
• Caresys, used in care homes
• Carenotes, used by mental health trusts
• Crosscare, used by hospices

Oxford Health NHS Foundation Trust warned of an imminent system outage. Advanced stated that contingency plans would be required for at least 3 to 4 weeks. Some trusts lost access to essential software for more than 2 months.

The incident exposed the vulnerability of large public databases and the scale of disruption caused when clinical systems are compromised.

Advanced has since confirmed it must satisfy assurance processes set by the National Cyber Security Centre, NHS England and NHS Digital.

KillNet’s attack on US airport websites

In October 2022, pro‑Russian hacktivist group KillNet targeted more than a dozen US airport websites. The group flooded servers with fake traffic, forcing sites offline. These were DDoS attacks, designed to overwhelm systems rather than infiltrate them.

Airport operations were not disrupted. However, US officials warned that the incident reflects a broader trend of escalating cyber threats against transport infrastructure.

Senator Rosen stated that the aviation ecosystem remains vulnerable to debilitating cyber attacks, with potential consequences for tourism‑dependent economies.

The FBI advised Critical National Infrastructure firms to adopt DDoS mitigation services, work closely with Internet Service Providers and maintain disaster recovery plans.

Major Types of Cyber Security

Network security

Network security protects computer networks from internal and external threats. Firewalls form the first line of defence, filtering traffic based on security rules.

Cloud security

Cloud platforms such as Microsoft OneDrive, Apple iCloud and Google Drive store vast amounts of data. Cloud security ensures these systems remain protected from breaches.

Application security

Application security protects sensitive information within apps. Measures include two‑step authentication and identity verification.

Major Types of Cyber Security Threats

Malware

Malware enables hackers to gain unauthorised access. Common forms include ransomware, viruses, worms and Trojans. Anti‑virus software and multi‑layered protection reduce risk.

Phishing

Phishing is the most common form of social engineering. Hackers send fake messages to employees to obtain login details. Corporate email systems, spam filters and staff training help prevent attacks.

Man‑in‑the‑Middle attacks

MITM attacks occur when hackers intercept information between a user and a network. Avoiding public Wi‑Fi and using secure networks reduces exposure.

Cyber Security Legislation

In early 2022, the UK government proposed new laws to strengthen cyber security following several high‑profile attacks. Firms providing essential digital services must comply with cyber security duties or face significant fines.

Key proposals include:

• Improved incident reporting
• Flexible legislation capable of adapting to technological change
• Stronger enforcement powers

National Cyber Strategy

The government’s £2.6 billion National Cyber Strategy aims to use cyber power to protect national interests. Cyberspace is defined as the digital medium enabling communication across global computer subnetworks.

Production Security and Telecommunications Infrastructure Bill

The amended Production Security and Telecommunications Infrastructure Bill, introduced on 11 May 2022, requires firms to disclose how they fix security flaws and bans universal default passwords.

Minister Julia Lopez stated:

“Most of us assume if a product is for sale, it is safe and secure. Yet many are not, putting too many of us at risk of fraud and theft.”

She added that the Bill will “put a firewall around everyday tech from phones and thermostats to dishwashers, baby monitors and doorbells”.

The Future of Cyber Security

By 2025, 60% of businesses will assess cyber security risk before entering third‑party collaborations or transactions. Frost and Sullivan predict that within 8 years there will be a network of 200 billion devices, averaging 20 devices per person.

With cyber attacks increasing in frequency and sophistication, governments and businesses must allocate higher budgets to cyber defence. The digital world is expanding rapidly. The threat landscape is expanding with it.