The United Kingdom is likely to face artificial intelligence-powered cyberattacks targeting its critical infrastructure by 2028, according to Richard Horne, the head of the UK's National Cyber Security Center (NCSC). Horne warned that both criminal organizations and state actors, including China and Russia, are increasingly employing AI in their cyber operations.
These AI-driven attacks could manifest as advanced malware for ransomware, exploiting vulnerabilities that have long been tolerated but can now be discovered and exploited at a scale previously unimaginable. Horne indicated that leaders of businesses and organizations that have deferred investments in cybersecurity or relied on outdated technology may face significant repercussions if these systems fail, potentially leading to disruptions in essential services and supply chains.
The NCSC's annual cyber report highlights China's cyber activity as the "most sophisticated and sustained cyber challenge facing the U.K.," with both Russia and China expected to routinely leverage AI to achieve geopolitical objectives. Russia is reportedly conducting cyber campaigns that fall below the threshold of armed conflict, while Iran is targeting individuals perceived as threats to its regime. The report suggests that AI is more likely to augment and scale existing cyber tactics rather than uncover entirely new vulnerabilities.
This warning follows recent incidents where AI played a role in discovering critical flaws. Last week, governments and corporations scrambled to implement security updates after the AI-assisted identification of vulnerabilities in a programming language essential to a significant portion of global websites. These flaws could have potentially allowed unauthorized access and remote control of web servers without requiring authentication.
Horne emphasized that technological systems underpin vital physical processes, including electricity grids, water management, manufacturing, and climate control. He cited recent cyberattacks on refrigeration systems in French supermarkets as an example of how civilian infrastructure can be easily exploited. Russia has previously been implicated in attacks on European critical infrastructure, with accusations of a cyberattack on Poland's energy grid in December 2025, which could have left hundreds of thousands without power.
Malicious cyber activity is already imposing substantial costs on U.K. organizations, estimated at nearly $20 billion annually. The NCSC also pointed to Jaguar Land Rover's loss of over $260 million following a cyberattack in 2025, which also impacted suppliers and the broader U.K. economy.
Anne Keast-Butler, director of GCHQ, Britain’s signals intelligence agency, stressed the urgency for all U.K. organizations to bolster their cybersecurity measures, stating, "cybersecurity is now part of the front line defense of our nation." Recommended basic cybersecurity practices include ensuring devices are up to date, limiting administrative system access, and maintaining regular backups of critical data.