The U.K. will likely face artificial intelligence cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber activity, Britain’s cyber chief warned Tuesday.
That could include AI-powered malware for ransomware attacks as the technology will allow “vulnerabilities that have been tolerated for far too long” to be discovered and exploited “at a scale that was once unimaginable,” Richard Horne, the head of the U.K.’s National Cyber Security Center said.
In a speech marking the publication of the NCSC’s annual cyber report, Horne said the leaders of businesses and organizations of all sizes who have “got away with tech on the cheap” will have to explain why “food isn’t on the shelves, lights aren’t on, businesses have gone under,” if they fail to invest in cybersecurity or update out-of-date technology.
Chinese cyber activity is the “most sophisticated and sustained cyber challenge facing the U.K.” while both Russia and China will routinely use AI to achieve their geopolitical goals, the report said. Russia is intentionally conducting cyber campaigns which fall below the threshold of armed conflict while Iran is carrying out attacks against the U.K. and targeting individuals who are a threat to the Iranian regime, Horne said.
The use of AI by states and criminals is highly likely to increase the scale and efficiency of hostile operations, but AI is more likely to be used to enhance and scale existing tactics and techniques rather than find brand new vulnerabilities, the report said.
Last week, governments and corporations worked on urgent security updates after the AI-assisted discovery of vulnerabilities in a programming language vital to 70% of websites globally. The two critical flaws identified by AI could allow bad actors to get unauthenticated access to sites which, in theory, could allow them to control a web server remotely without needing a password.
Technology “underpins the automation of physical processes that are vital to modern life,” Horne said. That includes, he said, electricity switching, sluice gates in water facilities, dam operations, manufacturing lines, heating and refrigeration controls. The recent cyberattacks on refrigeration systems in French supermarkets showed how easily hostile actors could exploit civilian infrastructure, Horne said.
Russia has already attacked critical infrastructure in Europe, according to the U.K. and EU member states that said Russia’s FSB security service was behind an attack on Poland’s energy grid in December 2025. If the attack had been successful, 500,000 people could have lost electricity during winter.
In the U.K., malicious cyber activity is costing organizations almost $20 billion every year, the NCSC said. In 2025, the carmaker Jaguar Land Rover suffered more than $260 million in direct losses following a cyberattack which also hit suppliers and dented the U.K. economy.
“We need every organization in the UK to take action now. Not only to protect their customers, services and livelihoods, but because cybersecurity is now part of the front line defense of our nation,” said Anne Keast-Butler, director of GCHQ, Britain’s signals intelligence agency, which the NCSC is part of.
That includes implementing basic but effective cybersecurity measures such as making sure devices are up to date, limiting administrator access to systems and backing up important files and data, the NCSC said.
Related Content
Data Breaches
Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
The Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website.
Artificial Intelligence
Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues.
Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model
Google’s new frontier model scored 88.2% on SEC-bench Pro and is rolling out first to vetted cyber defenders
Government
How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI
Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure.
Data Breaches
Over 41,000 DHS Employee Records Leaked Online
The personal and work information was allegedly stolen from an Okta single sign-on system earlier this year.
Cybersecurity Funding
Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise
The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems.
Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI
Anthropic presents its own initial public offering as a step toward mitigating the risks it believes AI poses.
Stolen AI Reasoning Could Help China Build Cheaper Rivals
Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI.
