AI could speed ransomware against UK critical infrastructure
The UK’s National Cyber Security Centre (NCSC) says AI-powered malware is highly likely to feature in ransomware attacks against British critical infrastructure by 2028. The forecast covers services such as power, transport and hospitals.
The NCSC expects AI to make established attack techniques more efficient, rather than uncover entirely new vulnerabilities. It could help attackers find and exploit weaknesses organizations have tolerated for years at a scale that was previously impractical. NCSC chief Richard Horne pointed to end-of-life systems kept running and upgrades repeatedly deferred; attacks on technology controlling physical processes could disrupt essential services, not just IT.
If UK energy, water, transport or healthcare operators still depend on end-of-life technology, the forecast points to long-standing weaknesses becoming easier to exploit. The NCSC names no specific systems or evidence that these ransomware attacks are already occurring, making 2028 a planning horizon, not an incident alert.
NCSC Chief Warns of AI Ransomware Threat to UK Critical Infrastructure
The UK’s cyber chief has warned that AI-powered malware is highly likely to feature in ransomware attacks targeting British critical infrastructure by 2028