Home Secretary Shabana Mahmood used an oral statement to the Commons on 12 October 2026 to set out the government’s current national security posture. The statement treats terrorism, extremism, hostile state activity and cyber risk as a connected set of threats, rather than as separate policy files. (gov.uk) For departments, police forces and regulated operators, that framing matters. It suggests ministers intend to use criminal law, sanctions, protective security reviews, information controls and online-safety duties in parallel, with the Home Office presenting the response as a joined-up security programme. That is an inference drawn from the statement itself and from the related government announcements published on the same day. (gov.uk)
The immediate political trigger was the case linked to the murder of Ann Widdecombe in Devon. Mahmood told MPs that a suspect was charged on 2 October 2026 with a terrorism offence, including preparing an act of terror against the leader of Reform UK and MP for Clacton. She also said the Independent Office for Police Conduct is examining the response to an attempted break-in at that MP’s home last year, with findings expected early in 2027. (gov.uk) Mahmood said existing arrangements do not give enough protection to those in public life. With immediate effect, police support is being widened beyond sitting MPs to include former MPs, peers and party spokespeople, with access to a named officer and advice on wider security measures. In practice, that moves protective security earlier in the risk cycle, before a threat reaches the point of close protection or criminal charge. (gov.uk)
Alongside the immediate change, the Home Office has commissioned a wider review of state-provided protective security, led by former National Security Adviser Sir Stephen Lovegrove and due within six months. Government material says the review will test whether current arrangements are fit for purpose for ministers, MPs, locally elected representatives, royals and other prominent figures, and that it will sit alongside Sir Robert Buckland’s review into the killing of Sir David Amess. (gov.uk) The policy consequence could extend beyond Westminster security. If the review concludes that online abuse, harassment and intimidation are precursors to physical attack, public bodies may face tighter expectations on threat reporting, information-sharing and risk assessment, not only additional police presence. That is an inference from the published remit, which expressly covers physical threats, online risks and pressures arising from social polarisation. (gov.uk)
Mahmood also used the statement to announce a public inquiry into the deaths of Melvin Cravitz and Adrian Daulby in the October 2025 Heaton Park synagogue attack. The Home Office said the inquiry is being opened at the coroner’s request so that sensitive national security material can be heard outside the limits of ordinary coroner proceedings. (gov.uk) That announcement sits within a wider account of antisemitic violence and attempted attacks over the past year, including the Golders Green stabbing, arson attacks in north London and a foiled plot against the Jewish community in Manchester, for which two Iranian nationals have been charged with terrorism offences. The Home Secretary said police funding had been increased by an additional £250 million to strengthen presence in key Jewish areas and respond to antisemitism. (gov.uk)
The statement draws a deliberate link between extremism and hostile-state operations. Mahmood said the Islamic Movement of Companions of the Right was behind the north London arson campaign, that members of Iran’s Islamic Revolutionary Guard Corps were behind the group, and that the National Security (State Threats) Act 2026 was fast-tracked in response to this style of proxy activity. Government factsheets show that the 2026 Act gives the Home Secretary a new power to designate bodies engaged in state-threat activity, using counter-terrorism-style tools against foreign-state organisations and proxies. (gov.uk) The same framework is now being applied to the incident at RAF Fairford. The Home Secretary said the government’s assessment is that the event was highly likely coordinated by an individual based in Iran and almost certainly directed by the IRGC; the Foreign Secretary has summoned the Iranian Ambassador, and the UK is sanctioning two individuals linked to espionage and attacks for Iran in Europe and the United States. (gov.uk)
The Home Office positioned Iran as only one part of the state-threat picture. Mahmood also pointed to Russian activity, including UK action following attribution with the EU of the December 2025 attack on Poland’s energy grid, and to fresh UK charges under the National Security Act involving alleged Russian espionage contacts and an accused Royal Navy spy. She added that more than 23 people have been charged under the National Security Act since 2023, producing five convictions and more than 48 years of imprisonment so far, including 18 years for two men convicted of spying for China. (gov.uk) For universities, research bodies and compliance teams, the practical change is that foreign influence rules are no longer confined to conventional lobbying. Official guidance says Russia and Iran are currently specified under the enhanced tier of the Foreign Influence Registration Scheme, and activity undertaken at their direction in the UK may need to be registered. Separate Department for Education guidance tells higher education providers to treat foreign interference as a governance and research-security issue, not just a diplomatic one. (gov.uk)
On domestic extremism, the government is combining policing with earlier intervention. The statement links its wider security posture to the March 2026 ‘Protecting What Matters’ paper, which committed ministers to an annual State of Extremism report and to embedding the 2024 extremism definition and engagement principles across government. (gov.uk) The most immediate operational change is in Prevent. The Home Secretary said repeat referrals are being handled more robustly and that a referral can be made without a clearly identifiable ideology. Home Office guidance published in February 2026 confirms that ideology remains important but is not mandatory for a Prevent referral, which widens scope for early intervention where violent fixation appears before a settled worldview. (gov.uk)
The online and cyber elements are moving on a parallel track. Mahmood said the Online Safety Act has already produced stronger age checks and safety measures across thousands of services, while Ofcom guidance shows that providers in scope of the Act may have to carry out children’s access assessments and, in some cases, deploy highly effective age assurance. (gov.uk) Beyond platforms, the government is establishing a National Centre for Information Defence, building a specialist Counter Terror Policing mission on state threats and tightening security around military sites. The Cyber Security and Resilience Bill, first introduced on 12 November 2025, would update the Network and Information Systems regime to strengthen protection for essential and digital services, and the Home Secretary said a further National Security Bill is planned to expand police and intelligence powers against cyber-criminals. For operators of infrastructure, public services and major suppliers, the direction of travel is towards more reporting, more resilience duties and closer engagement with the NCSC and NPSA. (gov.uk)