[AUTO] AI Ransomware Against UK Critical Infrastructure by 2028

The UK’s National Cyber Security Centre assesses that AI-powered ransomware attacks on critical infrastructure are “highly likely” by 2028. The NCSC published concrete timelines and confidence levels in early November, moving beyond speculation to quantified threat assessment. The focus shifts from intent to capability. China’s frontier AI programs will “almost certainly” improve vulnerability discovery and exploitation efficiency at scale, according to the report.

Legacy systems in critical UK infrastructure remain vulnerable to AI-enabled tools. The NCSC’s timeline suggests modeling what frontier models could accomplish against real targets.

The government’s response: £70 million for a vulnerability identification center. This investment signals confidence in the threat’s near-term timing. The assessment reframes the question from “will this happen?” to “when?” Within 24 months, the government expects frontier AI weaponized in ransomware attacks on critical infrastructure.

Sources: Artificial intelligence and cyber intrusion

Coverage: Highly likely AI will be used in ransomware attack on UK critical infrastructure • NCSC warns AI ransomware likely to hit UK infrastructure by 2028