UK Cyber Defense: NCSC Predicts AI-Driven Infrastructure Attack by 2028

British critical infrastructure faces a heightened risk of sophisticated digital intrusion over the next two years. The National Cyber Security Centre issued this warning on Tuesday, November 3, urging organizations to remediate long-standing technological flaws before hostile actors exploit them with artificial intelligence.

The agency’s annual report assesses that a ransomware attack utilizing AI-powered malware against critical national infrastructure is highly likely by 2028. The report further predicts that hostile actors will use AI to increase the scale and efficiency of their operations during this period. The NCSC specifically identified China as the state best equipped to execute such operations against Britain.

Richard Horne, chief executive of the NCSC, a body within the GCHQ intelligence agency, attributed the vulnerability to decades of inadequate investment. He stated that British organizations and their supply chains had left themselves exposed by “doing tech on the cheap.” This approach allowed vulnerabilities to persist within systems that support essential services.

In a speech delivered later that day, Horne warned that the coming months could bring a sharp rise in cyber incidents. He explained that AI allows attackers to find and exploit existing weaknesses on a massive scale. The threat is not necessarily new methods of attack, but rather the accelerated exploitation of known gaps in security.

The NCSC designated China as highly likely to have both the intention and the capability to deploy AI against British strategic targets. Horne described Chinese cyber activity as the most sophisticated and sustained challenge facing the UK. The agency also cited threats from Russia, which is persistently attempting to penetrate military networks, and Iran, which is conducting malicious operations against Britain and perceived threats.

The warning follows recent hacking attacks on European supermarkets that revealed weaknesses in IT systems. Horne noted that weaknesses tolerated for years will become increasingly exploitable as adversaries integrate AI into their operations. He called for urgent action to prevent consequences such as empty food shelves, power interruptions, and business failures.

Horne stated that organizations failing to act must be able to explain why they recognized warning signs but made inadequate choices. The NCSC’s assessment places the burden of defense on entities that have historically prioritized cost savings over technological resilience.