● Covered by 2 sources · 2 reportsMedium impact1 negative1 neutral
UK Critical Infrastructure Faces AI-Powered Cyberattack Threat by 2028, NCSC Warns
Key points
- AI-powered malware likely to target UK critical infrastructure by 2028.
- NCSC's annual review issued the warning, part of GCHQ.
- Ransomware attacks are a primary concern for critical national infrastructure.
- Russia and China are expected to routinely use AI in cyber-attacks.
- AI could exploit vulnerabilities at an unimaginable scale.
AI-Powered Cyberattacks Imminent
The National Cyber Security Centre (NCSC), a component of the GCHQ spy agency, has warned that AI-powered malicious software is "highly likely" to be used in hacking attacks against the UK's critical national infrastructure (CNI) by 2028. This includes facilities and services across sectors such as energy, transport, defense, food, health, and finance.
Specifically, the NCSC stated it is "highly likely that between now and 2028, AI-powered malware will have been used in a ransomware attack on UK CNI."
Increased Threat from State Actors
The NCSC's annual review also highlighted that Russia and China are expected to routinely use AI in cyber-attacks. Richard Horne, head of the NCSC, noted that Chinese cyber activity represents the "most sophisticated and sustained cyber challenge facing the U.K."
Both nations are anticipated to leverage AI to achieve their geopolitical goals, with Russia intentionally conducting cyber campaigns below the threshold of armed conflict.
AI's Role in Exploitation
AI technology is predicted to enable the discovery and exploitation of vulnerabilities "at a scale that was once unimaginable." This capability could allow attackers to identify targets and exploit weaknesses more efficiently.
Ransomware, a common tactic of criminal hacker groups often operating from former Soviet Union states, involves encrypting IT systems and demanding cryptocurrency payments to restore access.
Call for Cybersecurity Investment
Richard Horne emphasized the need for businesses and organizations to invest in cybersecurity and update outdated technology. He warned that a failure to do so could lead to significant disruptions, impacting essential services and business operations.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
The UK's National Cyber Security Center (NCSC) head, Richard Horne, predicts AI-powered cyberattacks on critical infrastructure by 2028, citing increased AI use by states like China and Russia. These attacks could exploit vulnerabilities at an unprecedented scale, impacting essential services if cybersecurity investments are not made.
The UK's National Cyber Security Centre (NCSC) predicts that AI-powered malware will likely be used in ransomware attacks against the nation's critical infrastructure by 2028. This assessment, part of the NCSC's annual review, highlights AI's potential to assist attackers in identifying targets, exploiting vulnerabilities, and generating malicious code. The NCSC also expects Russia and China to routinely use AI in cyber-attacks.