Two economies, one partnership, and a new centre to deal with deepfakes

What happened
On 8 October 2026 the UK and Germany announced a joint partnership to counter sabotage, cyber attacks and other hybrid threats. Prime Minister Andy Burnham travelled to Berlin for talks with Chancellor Friedrich Merz. It was their first face-to-face meeting. "Hybrid threat" is a term for hostile activity that sits below the line of open conflict. It covers cyber attacks, sabotage of infrastructure such as cables and pipelines, and organised campaigns of false information. The two governments say they will jointly identify and disrupt hybrid activity, share information, and coordinate action to monitor, deter and disrupt threats. The stated aim is to reduce hostile actors' capacity to operate in Europe and to build resilience against attacks on critical infrastructure. The announcement names Russia in particular. The partnership builds on the 2025 Kensington Treaty, which was formally ratified on the same day. That treaty commits the two countries to deeper cooperation on science, technology, defence, security and growth. The two leaders also convened a UK-Germany Regional Growth Forum, bringing together British and German chief executives.
Why this matters
Germany is the UK's second largest trading partner and already contributes some £155 billion to the UK economy, according to the announcement. The UK and Germany are Europe's two largest economies and its two biggest defence investors. When those two coordinate, it changes the arithmetic for anyone trying to cause trouble across European infrastructure. The Prime Minister framed it in domestic terms: "Attacks on our infrastructure, our businesses and our democracies are not a distant threat. They reach into people's homes and workplaces, and they are designed to make us weaker and more divided." That is not rhetorical. Hybrid attacks tend to land on ordinary services. Hospitals, water companies, logistics firms, councils and schools have all been disrupted by cyber incidents in recent years. A cut cable or a ransomware attack does not feel geopolitical when you are the patient whose appointment is cancelled. The announcement also sits alongside two domestic measures. The government has fast-tracked legislation giving the Home Secretary new proscription-like powers to designate state-backed organisations and proxy groups that threaten national security. And the Prime Minister has asked security chiefs to establish a new National Centre for Information Defence, to detect, attribute and disrupt hostile state information attacks and to identify disinformation and deepfakes damaging British interests.
What the evidence actually says
Announcements of international partnerships are easy to over-read, so it helps to note what is specific and what is not. Specific: the Kensington Treaty was formally ratified on 8 October 2026. Ratification is a real legal step, not a press line. Specific: Germany contributes some £155 billion to the UK economy and is the UK's second largest trading partner. Specific: a National Centre for Information Defence has been commissioned, with the task of detecting, attributing and disrupting hostile state information operations. Less specific: the counter-hybrid partnership itself is described in terms of sharing information and coordinating action. No budget, staffing or structure was published with the announcement. That is normal for security cooperation, where detail is often deliberately withheld, but it means there is nothing yet to measure progress against. Also worth noting what was discussed rather than agreed. The leaders talked about support for Ukraine, instability in the Middle East, and disruption to global trade routes including the Strait of Hormuz. Those are agenda items, not commitments. On deepfakes, the new centre's remit is detection, attribution and disruption. It has not been described as a regulator of online content, and nothing in the announcement changes what platforms must do.
Practical advice
You cannot personally defend an undersea cable. But the household end of this is real, and worth a few minutes. Turn on two-factor authentication for your email first. Email is the key to everything else, because it is where password resets land. Use a different password for your bank and your email than for anything else. If you cannot face a password manager, at least make those two unique. Install updates when prompted rather than pressing "later" for three weeks. Most successful attacks use flaws that were already fixed. Treat urgency as a warning sign. Messages that insist you must act immediately, especially about money, deliveries or NHS appointments, are the standard shape of a scam. Real organisations will let you ring them back on a number you looked up yourself. Be slower to share dramatic clips and screenshots. Deepfakes work by being passed on quickly by people acting in good faith. Checking whether a reputable outlet has covered it takes less than a minute. If you run a small business or a care service, write down what you would do if your systems were unavailable for 48 hours. Paper backups of key phone numbers are unglamorous and extremely useful.
What to know
On 8 October 2026 the UK and Germany launched a counter-hybrid threat partnership covering cyber attacks, sabotage and threats to critical infrastructure, naming Russia in particular. Prime Minister Andy Burnham met Chancellor Friedrich Merz in Berlin for the first time. The 2025 Kensington Treaty, covering science, technology, defence, security and growth, was formally ratified the same day. Germany is the UK's second largest trading partner, contributing some £155 billion to the UK economy. Alongside the partnership, the government has fast-tracked proscription-like powers to designate state-backed organisations, and has commissioned a new National Centre for Information Defence to detect, attribute and disrupt hostile state information attacks, including deepfakes. A UK-Germany Regional Growth Forum of British and German chief executives also met. Sources: Prime Minister's Office, 10 Downing Street, "UK and Germany launch joint-partnership to counter sabotage and cyber attacks", 8 October 2026, https://www.gov.uk/government/news/uk-and-germany-launch-joint-partnership-to-counter-sabotage-and-cyber-attacks ; National Cyber Security Centre, "Cyber Aware", accessed 8 October 2026, https://www.ncsc.gov.uk/cyberaware/home ; Foreign, Commonwealth & Development Office, "UK/Germany: Treaty on Friendship and Bilateral Cooperation [CS Germany No.1/2026]", 7 January 2026, https://www.gov.uk/government/publications/ukgermany-treaty-on-friendship-and-bilateral-cooperation-cs-germany-no12026 This article is for general information and does not replace advice from a doctor, pharmacist or other qualified healthcare professional.
Related articles

Four months early: 3,880 rural premises and an £8.2 million contract
On 13 October 2026, the government announced that a rural broadband project in North Oxfordshire had finished four months ahead of schedule. The work connected…

First hearing from a police cell: £17.4 million and four force areas
On 12 October 2026, the Ministry of Justice published the government's response to Lord Leveson's review of the criminal courts. The review made 180 recommendat…

Over 1,000 weak spots found, and a minister's message to AI firms
On Monday 12 October 2026, the UK government set out a package of measures aimed at protecting the country from increasingly powerful artificial intelligence.…
