King Arthur was a legendary medieval king of Britain. His association with the search for the ‘Holy Grail’, described in various traditions as a cup, dish, or stone with miraculous healing powers and, sometimes, providing eternal youth or infinite sustenance, stems from the 12th century. Since then, the search has become an essential part of Arthurian legend, so much so that Monty Python parodied it in their 1975 film. Indeed, it’s common for people today to refer to any goal that seems impossible to reach as a ‘Holy Grail’. It’s become a powerful metaphor for a desired, ultimate achievement that’s beyond reach.
Recently, bad cyber actors – a phrase used here to refer collectively to wicked individuals, gangs, and organisations, regardless of their location, ideology, ultimate sponsorship or specific motives – have caused a plethora of highly disruptive incidents in the UK. Incidents at the Co-op, Marks & Spencer, Harrods, JLR, and Kido have been high profile due to the nature and scale of the impact on the companies themselves, their supply chains, their customers, and also potentially the economy. Behind the scenes (see here, for example) questions are, no doubt, being asked not only of the relevant IT service providers, but also more generally about how vulnerable we are to cyber security threats.
While taking in the colours of Autumn visible through the window by his desk, the Badger found himself mulling over what these incidents imply in a modern world reliant on the internet, online services, automation and underlying IT systems. As the UK government’s ‘Cyber security breaches survey – 2025’ shows, the number of bad cyber actor incidents reported is high, with many more going unreported. AI, as the National Cyber Security Centre indicates, means that bad actors will inevitably become more effective in their intrusion operations, and so we can expect an increase in the frequency and intensity of cyber threats in the coming years. The musing Badger, therefore, concluded that organisations need to be relentlessly searching for a ‘Holy Grail’ to protect their operations from being vulnerable to serious cyber security breaches. As he watched a few golden leaves flutter to the ground, the Badger also concluded that in a world underpinned by complex IT, continuous digital evolution, and AI, this ‘Holy Grail’ will never be found. But that doesn’t mean organisations should stop searching for it!
These damaging incidents highlight again that cyber security cannot be taken for granted, especially when the tech revolution of recent decades has enabled anyone with a little knowledge and internet access to be a bad cyber actor. The UK government’s just announced the introduction of digital ID by 2029. Perhaps they have found a ‘Holy Grail’ that guarantees not only the security of personal data, but also that its IT programmes will deliver on time and to their original budget? Hmm, that’s very doubtful…