Artificial intelligence-powered malicious software is highly likely to be deployed in ransomware strikes against critical national infrastructure facilities including power stations, airports, and hospitals by 2028, according to the National Cyber Security Centre.
NCSC Warning on AI Threats to UK Infrastructure
The National Cyber Security Centre, operating as part of the GCHQ spy agency, issued the assessment in its annual review. The state cybersecurity body stated that artificial intelligence will probably enable a ransomware attack against critical national infrastructure within the next two years. The UK defines critical national infrastructure to cover facilities and services across energy, transport, defence, food, health, and finance sectors.
Ransomware operates as a signature ploy of criminal gangs typically operating out of former Soviet Union states. Attackers gain access to victim IT systems, encrypt files with bespoke malware, and demand cryptocurrency payments to unlock crippled systems and return stolen data. UK ransomware victims include Royal Mail, outsourcing firm Capita, and various public bodies such as councils, as reported by The Guardian. Artificial intelligence enhances this threat by automating tasks such as scouting targets, locating weaknesses in IT networks, and writing malicious code.
GCHQ Outlook on Chinese and Russian Cyber Attacks
Chinese and Russian AI-powered cyber attacks will become routine by 2028, according to GCHQ assessments reported by the Financial Times. The state bodies warn that hostile nation-states are escalating hybrid warfare attempts through campaigns that intentionally fall below the threshold of armed conflict. A recent demonstration of this capability occurred when the technology helped discover a critical weakness in PHP, a computer language used by nearly 70% of the world’s websites. Recent cyber attacks on supermarket fridges in Europe—where hackers raised refrigerator temperatures to more than 50C—serve as a warning for organizations to invest heavily in cyber resilience, as noted in reporting by The Guardian.
Answering key questions on UK national infrastructure and cyber threats
What facilities fall under UK critical national infrastructure?
The UK definition covers a broad range of facilities and services across sectors including energy, transport, defence, food, health, and finance.
Who publishes the annual review detailing these cyber threats?
The National Cyber Security Centre, which operates as part of the GCHQ intelligence and security agency, publishes the annual review.
What recent technology vulnerability demonstrated AI’s impact?
Artificial intelligence helped discover a critical weakness in PHP, a computer language utilized by nearly 70% of the world’s websites.