NCSC
Latest
UK warned AI will speed up ransomware attacks on critical infrastructure
The NCSC's State of the Cyber Nation report says AI adoption by hostile actors is highly likely to increase the scale and efficiency of ransomware, social engineering and vulnerability exploitation against UK critical national infrastructure within two years. The report expects AI to speed up existing attack methods rather than run fully autonomous end-to-end attacks. It names China and Russia as the main state-linked threats and says up to 88% of attacks start from phishing, exploitation of public-facing applications, misuse of valid accounts, or exploitation of external remote services.
UK NCSC warns AI-powered ransomware could hit critical infrastructure by 2028
The NCSC, in its annual review, says AI-powered malware is highly likely to feature in a ransomware attack on UK critical national infrastructure by 2028. It notes that open source AI security tools built for researchers are already being repurposed by attackers, and that an autonomous attacker operating beyond its operator's control is a realistic possibility. The report also outlines Cyber Shield, a staged agentic defence programme, and urges organisations to invest more in security.
NCSC annual review warns AI will speed up ransomware attacks on UK critical infrastructure
The NCSC's 2026 Annual Review reports 80 nationally significant incidents and 337 cases needing its support over September 2025 to August 2026. It says AI is helping attackers with research, phishing and exploit development, but mainly to improve existing methods, and that AI-powered malware is highly likely to feature in a ransomware attack on UK critical national infrastructure by 2028. It also warns of a coming 'patch wave' from AI-discovered flaws.
UK cyber chief warns of AI-powered attacks on critical infrastructure within two years
The NCSC warns that UK organisations relying on low-cost technology are exposed to AI tools that can uncover and exploit long-standing security weaknesses. It expects AI-powered attacks on critical infrastructure within two years and calls for urgent investment in resilience.
NCSC assessment examines AI-enabled cyber intrusion trends and threats to 2028
An NCSC assessment reviews current trends in AI-enabled cyber intrusion and projects how the threat landscape may develop to 2028. The extract provided gives no specific technical findings or recommendations.
NCSC warns AI-powered malware is highly likely to target UK critical infrastructure by 2028
The National Cyber Security Centre (NCSC) judges it highly likely that AI-powered malware will be used against UK critical national infrastructure by 2028, including power stations, airports and hospitals. It also assesses that AI will probably enable ransomware attacks on these facilities over the same period. The UK's definition of critical infrastructure spans energy, transport, defence, food, health and finance.
UK faces unprecedented rise in cyberattacks, NCSC chief warns
The chief of the NCSC has warned of an unprecedented rise in cyberattacks against the UK in the coming months. The warning will accompany the agency's annual report, and it says long-tolerated vulnerabilities can now be discovered and exploited at a scale once thought unimaginable.