The National Cyber Security Centre (NCSC) has issued a stark warning that AI-powered malware is “highly likely” to be used in ransomware attacks against the UK’s critical national infrastructure by 2028. The state cybersecurity body, which operates under the GCHQ spy agency, identified power stations, airports, and hospitals as primary targets for these advanced digital threats.
AI-Enhanced Ransomware Threatens Critical Services
In its annual review, the NCSC outlined a future where malicious actors use artificial intelligence to identify vulnerabilities and write bespoke code with unprecedented speed. The agency stated that between now and 2028, it is probable that AI tools will facilitate a ransomware incident against facilities deemed essential to the nation’s survival. These sectors include energy, transport, defence, food supply, health, and finance.
Ransomware remains a dominant tactic for criminal gangs, particularly those operating from former Soviet Union states. The process typically involves hackers gaining access to IT systems, encrypting files, and demanding cryptocurrency payments to restore access. The NCSC noted that AI will amplify this threat by automating the scouting of targets and the discovery of weaknesses in network defenses.
Richard Horne, the chief executive of the NCSC, will address the public in a speech accompanying the review. He warned that the coming months could see an “unprecedented rise” in cyber incidents. Horne attributed this surge to the technology’s ability to uncover security flaws that organizations have “tolerated for far too long” due to budget constraints or legacy system issues.
Geopolitical Tensions and Hybrid Warfare
The warning extends beyond criminal gangs to state-sponsored actors. The NCSC expects Russia and China to use AI “routinely” in cyber-attacks. Horne highlighted that communications networks used by the British military face daily, persistent attacks. While Russia is identified as a key perpetrator, these operations are carefully calibrated to remain below the threshold of armed conflict, representing a form of hybrid warfare.
This digital pressure coincides with broader government efforts to prepare citizens for emergencies. The “Be Ready” campaign, launched by Defence Secretary Wes Streeting, urges households to stockpile water and food. Streeting emphasized the need to prepare for “state-sponsored terrorism” from hostile powers targeting everyday infrastructure.
Recent incidents in Europe serve as a tangible example of the risks. Hackers have manipulated supermarket refrigeration systems, raising internal temperatures above 50C to spoil goods. The NCSC cited these events as a clear signal that organizations must invest heavily in cyber resilience rather than relying on outdated or cheap technology.
Industry Response and Defensive AI
Experts argue that the solution lies in adopting the same technology used by attackers. Alan Woodward, a cybersecurity professor at the University of Surrey, stated that the NCSC’s warning underscores the necessity for nations and companies to access cutting-edge AI. He noted that while leading AI firms like OpenAI and Anthropic are providing some companies with advanced models to identify glitches, the race is against malicious actors who will use the same tools to find flaws first.
The urgency is further highlighted by recent discoveries of critical vulnerabilities in widely used software. Last month, AI technology helped identify a significant weakness in PHP, a programming language powering nearly 70% of global websites. This discovery illustrates the dual nature of AI in cybersecurity, acting as both a shield for defenders and a sword for attackers.
As the threat landscape evolves, the NCSC’s annual review serves as a call to action for the UK’s critical sectors. The agency’s message is clear that the era of “tech on the cheap” is ending, and the cost of inaction could be severe disruptions to essential public services.
Source: The Guardian
