The NCSC’s threat report is drawn from recent open source reporting.