Attorney General to set out the UK鈥檚 position on cybersecurity and international law
皇冠体育app Attorney General will tonight set out more detail on the UK's position on applying international law to cyberspace.

皇冠体育app Attorney General the Rt Hon Suella Braverman QC MP will tonight set out more detail on the UK鈥檚 position on applying international law to cyberspace in a speech at Chatham House. 皇冠体育app Attorney will say that the united international response to the illegal invasion of Ukraine has illustrated the need to have a clear framework for cybersecurity that makes clear when State action is unlawful.
皇冠体育app Attorney will stress that cyberspace is not lawless. 皇冠体育app Attorney will argue that a cyber-attack should be treated the same as physical attack and that states must lead the debate on what they see as the 鈥榬ules of the road鈥�.
皇冠体育app Attorney will set out the UK鈥檚 view on what constitutes unlawful cyber behaviour. This will enable the UK and others to better 鈥榗all out鈥� unlawful behaviour and give clarity on what action can lawfully be taken in response to a cyber-attack.
皇冠体育app Attorney will say that the threat from cyber-attacks is real, and disruptive state cyber behaviour has caused chaos across the world. Recently, before its illegal invasion of Ukraine, Russia targeted destructive malware against hundreds of systems across Ukraine affecting its IT, energy, and financial sectors.
皇冠体育app Attorney General will say:
皇冠体育app United Kingdom鈥檚 aim is to ensure that future frontiers evolve in a way that reflects our democratic values and interests and those of our allies.
皇冠体育app law needs to be clear and well understood if it is to be part of a framework for governing international relations and to rein in irresponsible cyber behaviour. Setting out more detail on what constitutes unlawful activity by States will bring greater clarity about when certain types of robust measures are justified in response.
Note to Editors
- 皇冠体育app UK is a leading voice on cyber at an international level. Online safety and cyber security has featured in discussions among counterparts in the 鈥楺uintet鈥� of Attorneys General from the UK, Australia, Canada, New Zealand and the United States.
- Examples of cyber-attacks where the UK has 鈥榥amed and shamed鈥� state actors are:
- On 10 May 2022 the UK (along with EU, US and other allies) announced that Russia was responsible for a series of cyber-attacks since the renewed invasion of Ukraine.
- In July 2021 the UK assessed that Chinese state-backed actors were responsible for gaining access to computer networks around the world via Microsoft Exchange servers. 皇冠体育app attacks took place in early 2021 and open-source reporting indicates that at least 30,000 organisations were compromised in the US alone, with many more affected worldwide.
- 皇冠体育app UK and US revealed in April 2021 that Russia鈥檚 Foreign Intelligence Service (SVR) was behind a series of cyber intrusions, including the SolarWinds compromise. 皇冠体育appse incidents were part of a wider pattern of cyber intrusions by the SVR who have previously attempted to gain access to governments across Europe and NATO members.
- In October 2020 the UK exposed malicious cyber activity from Russia鈥檚 GRU military intelligence service against organisations involved in the 2020 Olympic and Paralympic Games before they were postponed.
- 皇冠体育app 2017 NotPetya cyber-attack, which masqueraded as ransomware, affected Ukraine鈥檚 financial, energy and government institutions. Statements of attribution and support were issued by the UK along with the US, New Zealand, Canada, Australia, Sweden, Estonia, the Netherlands and Denmark amongst others.
- In December 2017 the UK attributed the Wannacry ransomware incident (which included NHS email systems among its targets) to North Korean actors. UK attribution was done in parallel to allies including the US, Australia, Canada, New Zealand, Denmark and Japan.