Media365
The NCSC said it was highly likely that Britain would face a ransomware attack involving AI-powered malware by 2028, potentially targeting critical national infrastructure
China is emerging as Britain’s biggest cybersecurity concern as artificial intelligence makes it easier for hostile actors to identify and exploit weaknesses in critical infrastructure, the UK’s National Cyber Security Centre has warned.
The warning comes as artificial intelligence (AI) makes it easier for hostile actors to identify and exploit weaknesses in computer systems at a scale that was previously difficult to achieve. Britain’s cybersecurity agency said the threat was growing not necessarily because AI had created entirely new methods of cyberattacks, but because it had made existing vulnerabilities easier and faster to exploit.
In its annual report released on Tuesday, the NCSC said it was highly likely that Britain would face a ransomware attack involving AI-powered malware by 2028, potentially targeting critical national infrastructure.
Richard Horne, chief executive of the NCSC, said organisations across Britain and their supply chains had spent decades underinvesting in technology and cybersecurity, leaving systems exposed to increasingly sophisticated threats.
He warned that the country could face an unprecedented increase in cyber incidents in the coming months.
“In the coming months, we face a real prospect of an unprecedented rise in the number of cyber incidents,” Horne was expected to say in a speech on Tuesday.
More from Tech“But we must be clear that is not because AI has invented new ways to attack us, but because vulnerabilities that have been tolerated for far too long can now be discovered and exploited at a scale that was once unimaginable.”
Why China is emerging as Britain’s biggest cyber threat
The NCSC identified China as the country most capable of using AI to conduct cyber operations against Britain’s critical national infrastructure and other strategic targets.
Horne said Beijing had both the intent and the technological capabilities to pose a significant threat to Britain’s national security.
“We know that China highly likely has the intent and is best positioned to use AI for operations against our critical national infrastructure and other strategic targets, with their activity representing the most sophisticated and sustained cyber challenge the UK faces,” he was expected to say.
The NCSC also highlighted cyber threats from Russia and Iran, although their activities were described in different contexts.
According to Horne, Russia has continued attempts to penetrate British military networks, while Iran has conducted malicious cyber operations around the world, including against Britain and individuals it considers threats.
China, Russia and Iran have repeatedly denied accusations of conducting malicious cyber operations.
Britain’s critical infrastructure faces growing risks
The NCSC warning extends beyond government computer networks and military systems. Critical national infrastructure includes essential services and systems that support the functioning of the economy, including electricity, communications, transport and other vital operations.
A successful cyberattack on such systems could disrupt essential services, affect businesses and create wider economic consequences.
Ransomware attacks are particularly concerning because they can prevent organisations from accessing their own computer systems and data until a payment is made. When such attacks involve critical infrastructure, the consequences can extend well beyond financial losses.
The growing use of AI could make it easier for attackers to identify weaknesses across interconnected systems, including those operated by suppliers and third-party service providers.
The NCSC said hostile actors were likely to use AI to improve the scale and efficiency of their operations during the same period.
Horne argued that organisations could no longer afford to treat cybersecurity as an expense that could be postponed or minimised.
He criticised businesses and other organisations for having spent years relying on cheaper technology without adequately addressing the security risks associated with it.
Recent supermarket cyberattacks highlight vulnerabilities
The warning comes after hacking attacks targeting supermarkets in Europe exposed weaknesses in information technology systems.
The incidents have renewed concerns about how cyberattacks can affect businesses and everyday services, particularly when organisations depend on interconnected digital systems and external suppliers.
Horne warned that organisations must act on existing cybersecurity risks rather than wait for a major incident to expose the consequences of inadequate investment.
He said businesses and other institutions would eventually have to explain why they failed to address known vulnerabilities if attacks disrupted essential services.
“That when food isn’t on shelves, lights aren’t on, businesses have gone under … that we saw the warning signs, understood the risks and still didn’t make the right choices,” he was expected to say.
The NCSC’s assessment highlights a growing challenge for Britain: protecting essential infrastructure against cyber threats at a time when AI is increasing the speed and scale at which existing weaknesses can be exploited.
