Ransomware · 3h ago
The UK’s National Cyber Security Centre (NCSC) says AI-powered malware is highly likely to feature in ransomware attacks against British critical infrastructure by 2028. The forecast covers services such as power, transport and hospitals.
The NCSC expects AI to make established attack techniques more efficient, rather than uncover entirely new vulnerabilities. It could help attackers find and exploit weaknesses organizations have tolerated for years at a scale that was previously impractical. NCSC chief Richard Horne pointed to end-of-life systems kept running and upgrades repeatedly deferred; attacks on technology controlling physical processes could disrupt essential services, not just IT.
If UK energy, water, transport or healthcare operators still depend on end-of-life technology, the forecast points to long-standing weaknesses becoming easier to exploit. The NCSC names no specific systems or evidence that these ransomware attacks are already occurring, making 2028 a planning horizon, not an incident alert.
5 sources covering this story
UK organisations warned to brace for AI-powered ransomware attacks
NCSC warns that AI will increase the scale and efficiency of assaults on Britain’s critical national infrastructure.
Britain on notice: AI-powered ransomware attacks to arrive by 2028
Cyber agency warns critical infrastructure is a likely target as chief urges bosses to stop doing 'tech on the cheap'
NCSC Chief Warns of AI Ransomware Threat to UK Critical Infrastructure
The UK’s cyber chief has warned that AI-powered malware is highly likely to feature in ransomware attacks targeting British critical infrastructure by 2028
UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028
will likely face AI cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber activity.
Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years
The NCSC warns that ‘tech on the cheap’ has left UK organisations exposed to AI uncovering and exploiting longstanding cyber security weaknesses and calls for urgent investment in resilience.
Part of the PlainSec briefing for 2026-11-03