UK Cyber Chief Warns AI-Enabled Attacks on Critical Infrastructure Likely by 2028
Summary
The UK cyber chief warns that AI-enabled attacks on critical infrastructure are likely by 2028, as states and criminals scale cyber operations. The NCSC urges organizations to update devices, restrict admin access and back up data.
Key points
- NCSC head Richard Horne says the UK will likely face AI-enabled cyberattacks on critical infrastructure by 2028.
- The NCSC says AI is more likely to scale existing tactics and techniques than uncover entirely new vulnerabilities.
- The report describes Chinese cyber activity as the UK’s most sustained and sophisticated challenge; Horne also cited Russian and Iranian cyber activity.
- Horne pointed to attacks on refrigeration systems in French supermarkets as an example of hostile actors exploiting civilian infrastructure.
- The NCSC recommends updating devices, limiting administrator access and backing up important files and data.
- The NCSC says malicious cyber activity costs UK organizations almost $20 billion annually; Jaguar Land Rover reported more than $260 million in direct losses after its 2025 cyberattack.
Article Details
- Event Type
- Warning about the anticipated use of AI in cyberattacks against critical infrastructure
- Impact
- The NCSC warned that AI could increase the scale and efficiency of hostile cyber operations and enable faster discovery and exploitation of vulnerabilities. The article says attacks could disrupt essential services, including electricity, water, food refrigeration, and manufacturing. It cites more than $260 million in direct losses to Jaguar Land Rover following a 2025 cyberattack, and says a December 2025 attack on Poland’s energy grid could have left 500,000 people without electricity if successful. The NCSC estimates malicious cyber activity costs U.K. organizations almost $20 billion annually.
People
Threat Actors
Countries
Chinaintelligence cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber activity, Britain’s cyber chief warned Tuesday.IranRussia is intentionally conducting cyber campaigns which fall below the threshold of armed conflict while Iran is carrying out attacks against the U.K.Polandand EU member states that said Russia’s FSB security service was behind an attack on Poland’s energy grid in December 2025.Russiacyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber activity, Britain’s cyber chief warned Tuesday.United Kingdomto be discovered and exploited “at a scale that was once unimaginable,” Richard Horne, the head of the U.K.’s National Cyber Security Center said.
Industries
Critical infrastructurewill likely face artificial intelligence cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber activity, Britain’s cyber chief warnedEnergyand EU member states that said Russia’s FSB security service was behind an attack on Poland’s energy grid in December 2025.ManufacturingThat includes, he said, electricity switching, sluice gates in water facilities, dam operations, manufacturing lines, heating and refrigeration controls.