The United Kingdom is anticipated to encounter AI-driven cyberattacks targeting its critical infrastructure by the year 2028. This prediction comes as both criminal entities and state actors, notably China and Russia, are increasingly employing artificial intelligence in their cyber operations, according to Britain’s leading cyber official.
Potential AI-Powered Malware Threats
The potential use of AI-enhanced malware for executing ransomware attacks is a significant concern. This technology could uncover and exploit longstanding vulnerabilities on an unprecedented scale, stated Richard Horne, head of the UK’s National Cyber Security Center (NCSC). He emphasized the urgent need for businesses and organizations to invest in cybersecurity to prevent severe disruptions such as empty store shelves and power outages.
Global Cyber Challenges from China and Russia
The NCSC report highlights China’s cyber activities as the most sophisticated threat to the UK, with both China and Russia expected to leverage AI for their geopolitical ambitions. Russia’s cyber campaigns are designed to remain below the threshold of warfare, while Iran focuses its attacks on individuals opposing its regime.
The integration of AI by these states and criminal groups is likely to amplify the scale and effectiveness of their hostile actions. However, the report suggests that AI will primarily be used to enhance existing cyber tactics rather than discover entirely new vulnerabilities.
Recent Vulnerability Discoveries and Infrastructure Risks
Recently, urgent security updates were necessitated after AI identified vulnerabilities in a programming language critical to 70% of global websites. These flaws could potentially grant unauthorized access to control servers remotely.
AI’s role in automating vital physical processes, such as electricity and water management, highlights the risks to infrastructure. Past cyberattacks, like those on French supermarket refrigeration systems, demonstrate how easily these systems can be targeted.
Russia’s history of attacking European infrastructure, including a major threat to Poland’s energy grid in 2025, underlines the severity of this issue.
Call to Action for Enhanced Cybersecurity
In the UK, cyber threats are costing organizations nearly $20 billion annually. Notably, a 2025 cyberattack on Jaguar Land Rover resulted in significant financial losses.
Anne Keast-Butler, director of GCHQ, urged UK organizations to fortify their cybersecurity measures, emphasizing this as a crucial component of national defense. The NCSC advises implementing fundamental security practices, such as updating devices, restricting system access, and backing up data.
As AI technology continues to evolve, maintaining robust cybersecurity protocols is essential to safeguarding national infrastructure and economic stability.
