NCSC warns of likely AI ransomware attack by 2028

The National Cyber Security Centre says it is highly likely that AI-powered malware will be used in a ransomware attack on UK critical national infrastructure by 2028, warning that artificial intelligence could help attackers exploit longstanding weaknesses at greater speed and scale. The forecast appears in the agency’s annual review, published November 3. It is a time-bound assessment, not a claim that a specific attack is inevitable or that AI-driven ransomware has already struck UK infrastructure. The NCSC says AI is more likely to amplify familiar methods than create entirely new ones. The technology can help identify vulnerabilities, select targets and make cyber operations more efficient, while also aiding defenders in finding and fixing flaws. The agency warns that organisations which have delayed updates or continued to rely on outdated systems may struggle to keep pace. Essential services such as electricity, water, healthcare and transport are among the areas at risk, but the NCSC has not identified particular targets for the forecast. The assessment also covers operational technology that monitors or controls physical processes, including electricity switching,...