NCSC Warns UK Critical Infrastructure to Prepare for AI-Powered Ransomware by 2028

The UK’s National Cyber Security Centre warned that critical national infrastructure should prepare for ransomware involving AI-powered malware by 2028. Its State of the Cyber Nation annual review assesses that hostile actors’ adoption of AI is highly likely to increase the scale and efficiency of ransomware, social engineering and vulnerability exploitation within two years. At the report’s launch, NCSC CEO Richard Horne warned that AI could accelerate discovery and exploitation of longstanding weaknesses, driving a sharp increase in incidents where organisations have underinvested in security. He highlighted Russian campaigns, Iranian operations, Chinese capabilities and criminal ransomware as significant threats.

The NCSC urged organisations to reduce unnecessary internet exposure, replace unsupported technology, strengthen access controls and monitoring, and address insecure supply chains, including those supporting operational technology and essential services. It described Cyber Essentials as a baseline, not a complete security strategy, and called for leadership accountability for resilience. The government announced £60 million for the first phase of the national Cyber Shield and £70 million for a National Exposure and Real-Time Vulnerability Centre, alongside a new AI Cyber Security Centre of Excellence in Manchester, to strengthen AI-enabled cyber defence.