AI-powered malware likely to threaten UK infrastructure by 2028

The National Cyber Security Centre (NCSC) has issued a stark warning regarding the future of digital security, stating that AI-powered malware is highly likely to be used in ransomware attacks against the United Kingdom's critical national infrastructure (CNI) by 2028. This assessment, detailed in the agency's annual review, highlights the evolving capabilities of criminal hackers and hostile state actors.

AI-powered malware is highly likely to target UK critical infrastructure like power stations and hospitals by 2028.

According to the NCSC, which operates as part of the GCHQ spy agency, artificial intelligence is set to significantly enhance the effectiveness of cyber-attacks. By automating tasks such as scouting targets, identifying vulnerabilities in IT networks, and generating malicious code, AI allows attackers to exploit weaknesses that have been overlooked for years. Richard Horne, the NCSC’s chief executive, noted that the technology is poised to trigger an unprecedented rise in cyber incidents in the coming months.

The rise of AI-powered malware

The threat is particularly acute for sectors defined as critical, including energy, transport, defense, food, health, and finance. Ransomware, a signature tactic of criminal gangs often based in former Soviet Union states, involves encrypting a victim's files and demanding cryptocurrency payments for their release. Recent high-profile victims in the UK have included Royal Mail and the outsourcing firm Capita. The NCSC predicts that Russia and China will begin incorporating AI into their cyber-offensive operations on a routine basis.

In a recent example of the technology's dual-edged nature, AI was used to discover a critical flaw in PHP, a programming language powering a vast majority of the world's websites. Cybersecurity experts, such as Professor Alan Woodward of Surrey University, emphasize that while AI can help patch vulnerabilities, companies must gain access to cutting-edge tools before malicious actors do. Currently, leading firms like OpenAI and Anthropic are providing some organizations with access to advanced models to identify potential IT glitches.

Beyond criminal activity, the NCSC highlighted persistent, sustained attacks on British military communications. While these campaigns have not escalated into open armed conflict, they represent a form of hybrid warfare. Organizations have been urged to invest in stronger cyber resilience, with officials noting that past reliance on cheap, outdated technology has left systems exposed.

Why it matters

This warning signals a shift in the global threat landscape, necessitating urgent upgrades to the digital defenses of essential services like hospitals and power grids. For the public, it underscores the importance of government-led preparedness campaigns, which have recently advised households to maintain emergency supplies of food and water to withstand potential infrastructure disruptions.