Britain Braces for AI-Driven Infrastructure Attacks by 2028
Britain Braces for AI-Driven Infrastructure Attacks by 2028
Britain’s cyber warning is no longer framed as a distant, theoretical risk. The National Cyber Security Centre’s assessment points to a near-term shift: by 2028, criminals and state-backed actors could be using AI routinely in operations aimed at the country’s critical infrastructure.
The concern is explicitly geopolitical. Britain’s cyberchief has said China and Russia, alongside other hostile actors, are increasingly incorporating AI into cyber activity, raising the prospect of attacks that are faster to develop, more convincing and harder to contain. A separate account of the warning similarly cast Chinese and Russian AI-enabled cyber operations as a routine threat by 2028.
The NCSC’s State of the Cyber Nation report puts a sharper edge on that forecast. It expects an AI-powered malware attack to be used in ransomware against UK critical infrastructure within the next two years, and judges AI “almost certain” to amplify capable attackers. The agency recorded 1,831 cyberattack reports in the year to August 31, 2026, including 80 judged nationally significant; 88% of incidents at large organisations stemmed from four familiar entry points, including phishing, exposed applications, valid accounts and remote services.
For Richard Horne, the NCSC chief executive, the implication is urgent: the AI revolution must “force UK organisations to reckon with the current state of their cyber security.” The government response includes more defensive infrastructure, such as a National Cyber Shield and a vulnerability centre.
Heigor Freitas of cyber-industry body CREST broadly shares the alarm but offers a tougher prescription. Regulation and mandatory baselines matter, he argues, yet they are only a floor. “Industry leaders do not wait for regulation to drive improvements,” Freitas said, urging companies to test systems independently and look beyond legal minimums—especially when deploying AI.
Write a comment