UK warns of AI cyberattacks on critical infrastructure by 2028

The UK will likely face AI-powered cyberattacks on critical infrastructure by 2028, National Cyber Security Center chief Richard Horne warned. AI could enable ransomware malware and help attackers discover and exploit longstanding weaknesses at unprecedented scale. Horne said organisations that fail to invest in cybersecurity risk disruptions to food supplies, electricity and business operations.

The NCSC described Chinese cyber activity as the UK’s most sophisticated and sustained cyber challenge. It expects China and Russia to routinely use AI to pursue geopolitical goals, while Iran is conducting attacks against the UK and targeting individuals viewed as threats to its regime. AI is more likely to enhance and scale existing attack techniques than uncover entirely new vulnerabilities, according to the agency.

Horne highlighted risks to electricity switching, water facilities, manufacturing and refrigeration controls, citing attacks on French supermarket refrigeration systems. Malicious cyber activity costs UK organisations almost $20 billion every year, the NCSC said. GCHQ director Anne Keast-Butler urged organisations to act immediately, calling cybersecurity part of national defence. Recommended protections include updating devices, restricting administrator access and backing up important files and data.