UK cyber chief says AI ransomware strike on infrastructure likely by 2028
NCSC head Richard Horne warns that long-tolerated vulnerabilities make Britain a target for sophisticated AI-driven attacks within 24 months.
By Michael Collins ·
The UK’s National Cyber Security Centre stated on Tuesday that a ransomware attack using AI-powered malware on the nation’s critical infrastructure is highly likely to occur by 2028.
Richard Horne, the chief executive of the NCSC, which operates under the GCHQ intelligence agency, told a speech audience that Britain faces a real prospect of a surge in cyber incidents in the immediate future. He clarified that this increase is not due to new attack methods invented by artificial intelligence, but rather the ability of AI to find and exploit existing flaws at a massive scale.
Horne criticized decades of organizations and supply chains in the UK for accepting weak technology standards. He described this practice as "doing tech on the cheap," a strategy that has left many systems exposed to modern threats.
The agency’s annual report identified China as the state most equipped to conduct these operations. Horne said China likely has both the intent and the capability to use AI against strategic targets. He characterized Chinese activity as the most sophisticated and sustained cyber challenge facing the United Kingdom.
Horne also pointed to specific threats from other nations. He noted that Russia is making sustained efforts to breach UK military networks, while Iran is conducting malicious cyber operations globally, including against the UK and individuals it views as threats. Representatives from Moscow, Beijing, and Tehran have historically denied such accusations.
The warning comes after recent hacking incidents across European supermarkets revealed weaknesses in IT systems. Horne urged organizations to act now or prepare to justify why they did not when failures occur. He argued that if food is missing from shelves or lights fail, leaders must explain why they ignored warning signs and risks.
The NCSC said it will continue to monitor AI adoption by hostile actors, which it expects will increase the efficiency and scale of their operations in the coming period.
Source: The Jerusalem Post
