The United Kingdom is projected to confront artificial intelligence-driven cyberattacks targeting its essential infrastructure by the year 2028, as both organized crime and state actors, particularly China and Russia, increasingly incorporate AI into their cyber operations, a warning issued by the nation's cyber chief indicated on Tuesday.
This shift could lead to the deployment of AI-enhanced malware used in ransomware assaults, with the potential to unearth and exploit "vulnerabilities that have been tolerated for far too long" at an unprecedented scale, according to Richard Horne, the head of the U.K.'s National Cyber Security Center (NCSC).
During a speech that coincided with the release of the NCSC's annual cyber report, Horne highlighted the responsibility of business leaders and organizations that have skimped on technology investments. He cautioned that they will need to justify to the public why crucial resources like food and electricity are unavailable, or why companies are failing, if they neglect updates to their cybersecurity measures or continue using outdated technology.
The report identified Chinese cyber efforts as the "most sophisticated and sustained cyber challenge" facing the U.K., and suggested that both Russia and China would routinely leverage AI to fulfill their geopolitical ambitions. Notably, Russia appears to be conducting cyber operations that intentionally remain below the threshold of armed conflict, while Iran is directly targeting individuals considered threats to its regime.
As malicious actors gain access to AI capabilities, the report predicts a significant boost in the scale and effectiveness of their operations. However, it is suggested that the primary use of AI may involve enhancing existing strategies rather than uncovering entirely new weaknesses.
Recently, governments and private sector organizations scrambled to implement vital security updates after AI identified critical vulnerabilities in a programming language that supports roughly 70% of websites worldwide. These two major flaws have the potential to grant unauthorized access to websites, enabling cybercriminals to remotely control web servers without needing a password.
Horne noted that modern technology is integral to the automation of essential processes underpinning daily life, including electricity management, water facility operations, dam controls, and manufacturing processes. He cited recent cyber intrusions into refrigeration systems in French supermarkets as a stark example of how easily adversarial actors can compromise civilian infrastructure.
The report further referenced past cyber endeavors by Russia, detailing an attack attributed to its FSB security service against Poland's energy grid in December 2025, a breach that could have left 500,000 people without power during winter.
In the U.K., cybercrime has became a significant financial burden, costing organizations nearly $20 billion annually, according to the NCSC. The car manufacturer Jaguar Land Rover faced over $260 million in losses due to a cyberattack in 2025, which affected suppliers and had a negative impact on the U.K. economy.
Anne Keast-Butler, director of GCHQ—Britain's signals intelligence agency, underlining that the NCSC is part of this agency, emphasized the urgency of action from organizations across the U.K. to safeguard not only their customers and services but also to serve as a frontline defense for the nation. She advised the implementation of fundamental yet effective security protocols, such as ensuring that devices are updated, limiting administrative access to crucial systems, and regularly backing up important data.
