NCSC warns AI-powered ransomware likely to hit UK infrastructure by 2028

On November 3, the UK’s National Cyber Security Centre warned that AI-based malware could be used in ransomware attacks on the country’s critical infrastructure by 2028, though it said the warning has not been confirmed. The agency describes AI as a force multiplier that helps attackers identify targets, write phishing messages, find vulnerabilities and develop exploits faster, while humans still direct operations; the International AI Safety Report states that no cyberattack has been carried out entirely without human involvement. Britain has committed £60 million to a Cyber Shield and £70 million to the NERV vulnerability-scanning centre, and plans an AI Cyber Security Centre of Excellence in Manchester. The NCSC says older infrastructure may remain exposed as AI makes attacks faster and cheaper.