NCSC Warns AI Malware Will Target UK Infrastructure by 2028

The National Cyber Security Centre warned that AI-powered malware is highly likely to be used in ransomware attacks against the United Kingdom's critical national infrastructure by 2028. These threats target essential services including hospitals, airports, and power stations. Chief Executive Richard Horne stated that AI will allow attackers to discover and exploit long-tolerated IT vulnerabilities at an unprecedented scale.

The agency identified China as the most sophisticated and sustained cyber challenge facing the UK, noting that both Russia and China routinely use AI to achieve geopolitical goals. Horne further noted that Russia is conducting hybrid warfare campaigns designed to remain below the threshold of armed conflict. These warnings follow AI-assisted discoveries of flaws in the PHP programming language and attacks on European supermarket refrigeration systems.

GCHQ Director Anne Keast-Butler urged organizations to implement basic security measures, noting that malicious cyber activity costs UK organizations nearly $20 billion annually. The warning comes as the UK government launches the Be Ready campaign, encouraging citizens to stock emergency supplies in anticipation of potential disruptions.