The National Cyber Security Centre (NCSC) has issued a stark forecast, suggesting that by 2028, AI-driven malware is highly likely to be utilized in cyberattacks targeting the UK's vital infrastructures, including power stations, airports, and hospitals. This insight comes from the NCSC’s annual report, which indicates an impending threat to critical national infrastructure (CNI) across multiple sectors such as energy, transportation, defense, food, healthcare, and finance.
The NCSC, an entity under the auspices of the GCHQ spy agency, warns that advancements in artificial intelligence will facilitate ransomware attacks aimed at these crucial facilities within the next five years. The report highlights that adversaries, particularly from nations like Russia and China, are expected to integrate AI more routinely into their cyber operations.
According to the NCSC, "It is … highly likely that between now and 2028, AI-powered malware will have been used in a ransomware attack on UK CNI." The rise of ransomware has been a prominent strategy among cybercriminals, particularly those operating from former Soviet states. In such attacks, hackers infiltrate a victim’s systems, encrypt sensitive data using tailored malicious software, and subsequently demand a ransom in cryptocurrency to restore access and data.
The application of AI is poised to elevate this ransomware threat by assisting malicious actors in identifying targets, pinpointing vulnerabilities within IT infrastructures, and crafting sophisticated malware, as noted by the NCSC.
Recently, the UK government advised citizens to stockpile emergency supplies, including up to nine liters of water and three days' worth of food, to prepare for various emergencies, including severe weather and cyberattacks. Defense Secretary Wes Streeting emphasized the importance of preparation against potential state-sponsored threats from Russia and other antagonistic forces aimed at civilian infrastructure.
In his forthcoming speech aligned with the annual review, NCSC chief Richard Horne is set to alert the public to the imminent surge of cyber incidents. He will declare, “In the coming months, we face a real prospect of an unprecedented rise in the number of cyber incidents,” attributing this risk to the ability of AI to reveal long-ignored vulnerabilities in IT frameworks.
A recent instance showcasing AI's capability to uncover security weaknesses was the identification of a critical flaw in PHP, a programming language employed by approximately 70% of global websites. Alan Woodward, a cybersecurity expert from Surrey University, emphasized the significance of the NCSC's warning, advocating for nations and businesses to utilize state-of-the-art AI technologies to mitigate these risks.
“AI can assist in identifying and fixing these vulnerabilities, but without access to these tools, the bad actors will outpace us,” he cautioned. Top AI firms, including OpenAI and Anthropic, have started granting select organizations early access to their advanced models to address serious IT vulnerabilities.
In his address, Horne will also point out that the communications systems utilized by the British military are subjected to ongoing, aggressive cyber intrusions. While Russia has been implicated in these attacks, they have deliberately stopped short of crossing into open conflict, opting instead for targeted campaigns that fall below the threshold of warfare as part of their hybrid warfare strategy.
Horne will reference recent cyber incidents affecting supermarket refrigeration systems in Europe, where hackers manipulated temperatures to exceed 50°C, serving as a stark reminder for businesses to prioritize cybersecurity resilience. “For decades, we have collectively operated with technology that is too inexpensive,” he will remark, underscoring the urgent need for better cybersecurity measures.
