UK infrastructure faces AI-powered ransomware threat by 2028

AI-powered malware is “highly likely” to be used in a ransomware attack against UK critical national infrastructure by 2028, according to the National Cyber Security Centre (NCSC). Its annual review identifies risks to essential facilities and services, including power stations, airports and hospitals, and warns that Russia and China will begin using AI routinely in cyber-attacks.

The technology could strengthen ransomware operations by helping attackers scout targets, locate network vulnerabilities and write malicious code. NCSC chief executive Richard Horne will warn of a potential unprecedented rise in cyber incidents in the coming months, driven by AI’s ability to expose longstanding weaknesses in IT systems.

Defenders can also use AI to identify and repair security flaws. The technology recently helped uncover a critical vulnerability in PHP, a programming language used by almost 70% of the world’s websites. Surrey University cybersecurity professor Alan Woodward said governments and companies need access to advanced AI tools to avoid falling behind attackers. OpenAI and Anthropic have given some companies early access to powerful models for security testing.

Horne will also highlight persistent daily attacks on British military communications networks, including Russian campaigns kept below the threshold of armed conflict. He will urge stronger investment in cyber resilience, citing attacks that raised European supermarket fridge temperatures to more than 50C.