NCSC assesses growing AI cyber risk to critical infrastructure
The UK NCSC considers it highly likely that AI-powered malware will feature in a ransomware attack on UK critical infrastructure by 2028.
PRACTICAL IMPLICATIONS
What does this mean?
Defenders should accelerate known-vulnerability remediation and review legacy-system exposure. Deploying AI tools can also expand attack surfaces.
LIMITS OF THE EVIDENCE
What does this not establish?
This is a probabilistic threat assessment, not a report of an attack that has already occurred. Its scenarios describe possibilities rather than predictions.
Significance: high significance
The assessment connects AI cyber risks with practical protection of essential services.
An editorial judgement, not a numerical threat forecast.
ORIGINAL PUBLICATION
Artificial intelligence and cyber intrusion
NCSC · published 3 Nov 2026
Read the original source ↗Source checked 13 Nov 2026. Summary updated 13 Nov 2026. The original publication date is not necessarily the date of the event. This summary was written with AI assistance using the original source.
← Back to the archive