Key Points
- Britain's cyber agency said an AI-enabled attack on critical national infrastructure is likely by 2028.
- NCSC named China as best positioned, with Russia targeting military networks and Iran operating globally.
- Warning follows hacking attacks on European supermarkets that exposed weaknesses in IT systems.
The latest:
An AI-powered ransomware attack on Britain’s critical national infrastructure is highly likely by 2028, the National Cyber Security Centre said Tuesday in its annual report. The agency, part of the GCHQ spy agency, said China was likely the best equipped to run such operations. Chief executive Richard Horne said decades of underinvestment had left organisations and supply chains exposed.
Details:
- The assessment: The NCSC said in its annual report it was highly likely a ransomware attack involving AI-powered malware would hit national critical infrastructure by 2028. Over the same period, it warned the use of AI by hostile actors would enhance both the scale and the efficiency of their operations.
- The China finding: Horne was due to say China highly likely has the intent and is best positioned to use AI against British critical national infrastructure and other strategic targets, describing Beijing’s activity as the most sophisticated and sustained cyber challenge the United Kingdom faces.
- Russia and Iran: Horne was also expected to say Russia was making sustained attempts to penetrate UK military networks, and that Iran was carrying out malicious cyber operations globally, including against Britain and against individuals it regards as a threat.
- The denials: Moscow, Beijing and Tehran have all repeatedly denied similar accusations of malevolent cyber activity in the past, according to Reuters. The agency did not say it had received any response from the three governments to its latest assessment.
- The root cause: Horne said far too many organisations and supply chains in Britain had spent decades “doing tech on the cheap”, leaving them vulnerable. He was expected to argue the coming surge comes not because AI has invented new attacks, but because long-tolerated vulnerabilities can now be exploited at unimaginable scale.
- The near-term outlook: Horne was due to say Britain faces a real prospect of an unprecedented rise in the number of cyber incidents in the coming months. The NCSC did not publish a figure for how many additional incidents it expects, or a breakdown by sector.
- The trigger: The report and the speech follow hacking attacks on supermarkets across Europe that exposed vulnerabilities in IT systems. The NCSC did not name the affected retailers or attribute those incidents to a specific actor in the material released with its assessment.
- The demand: Horne said organisations needed to take urgent action now, or be ready to explain themselves when food is not on shelves, lights are not on and businesses are disrupted. The agency set no compliance deadline and named no enforcement mechanism.
Background:
The NCSC sits inside GCHQ, Britain’s signals intelligence agency, and publishes an annual assessment of threats to national networks. Its reports shape government guidance to operators of energy, water, health and transport systems, the sectors grouped under critical national infrastructure.
Between the lines:
The agency’s framing shifts the burden from technology to procurement. By arguing AI exploits existing weaknesses rather than inventing new ones, Horne locates the problem in decades of cheap IT spending rather than a novel class of threat. That makes the two-year window less a forecast about attackers than a deadline for British operators, which is why the speech pairs the China assessment with a warning about empty shelves.
What’s next
Watch for Horne’s full speech on Tuesday, any response from Beijing, Moscow or Tehran, and whether the government attaches funding or regulatory requirements to the NCSC’s two-year window.
