Hostile state actors, including Russia and China, are expected to significantly increase their use of artificial intelligence to conduct cyberattacks on the UK's critical national infrastructure within the next two years, according to Richard Horne, head of the National Cyber Security Centre (NCSC).
In its annual State of the Cyber Nation report, the NCSC highlights that the UK's current resilience to cyber threats is inadequate, with technological advancements outpacing defensive capabilities. Horne stated that AI makes cyber attacks easier, faster, cheaper, and scalable, posing a growing risk to sectors such as defense, energy, emergency services, and transportation.
"The cyber threat has increased faster than our defensive capabilities, leaving too many organisations vulnerable to attacks that could – and should – be prevented," Horne said. He emphasized that organizations must take urgent action to address existing weaknesses, such as unpatched software and poor password management, to avoid exploitation.
The NCSC report projects that by 2028, it is "highly likely" that nations like China and Russia will routinely employ AI in cyber operations to achieve geopolitical objectives, leading to an increase in the scale and sophistication of attacks against the UK. Experts also believe that AI-powered malware will likely be used in a ransomware attack targeting UK critical national infrastructure before 2028.
Horne issued a call to action for organizations across the UK, stating they face a "moment of choice." He urged leaders to prioritize and invest in cybersecurity and resilience, framing it as a fundamental requirement rather than an afterthought. "We can be a nation where leaders of all organisations actively choose to invest with urgency... And where all organisations make security and resilience a fundamental requirement, not an afterthought," he stated.
This warning comes amid a backdrop of significant global cyber incidents, including a major breach at cryptocurrency firm Binance and disruptions to refrigeration systems across Europe that impacted food supply. Last year, Jaguar Land Rover experienced a crippling attack that halted vehicle production.