AI-powered malware ‘highly likely’ to be used to hack UK infrastructure by 2028
National Cyber Security Centre expects attacks on critical facilities such as power stations, airports and hospitals AI-powered malicious software is “highly likely” to be used in hacking attacks against the UK’s power stations, airports and hospitals by 2028, according to the state cybersecurity body. The National Cyber Security Centre (NCSC) said AI will probably enable a ransomware attack…
The National Cyber Security Centre (NCSC) predicts that malicious software powered by artificial intelligence (AI) is likely to be used for cyber attacks on essential UK facilities such as power stations, airports, and hospitals by 2028. The UK's definition of critical national infrastructure (CNI) encompasses a wide range of sectors, including energy, transport, defence, food, health, and finance. The NCSC, which is a part of the GCHQ spy agency, made this warning in its annual review.
Ransomware attacks, which involve encrypting files using malware and demanding payment in cryptocurrency for their release, have become a primary tactic for criminal hackers. Recent targets in the UK have included Royal Mail, outsourcing firm Capita, and various public bodies, such as councils. AI is expected to intensify the ransomware threat by assisting attackers in identifying vulnerabilities in IT networks, locating potential targets, and writing malicious code.
The UK government recently urged citizens to stockpile nine liters of bottled water and three days' worth of food to prepare for emergencies, including weather, cyber threats, or other crises. Defence Secretary Wes Streeting emphasized the need to prepare for state-sponsored terrorism by Russia or other hostile powers, targeting everyday infrastructure.
NCSC's Chief Executive, Richard Horne, will further warn the public in a speech accompanying the review that AI is poised to unleash a wave of cyber-attacks in the near future. Horne attributes this threat to AI's ability to uncover hidden weaknesses in IT systems that have been ignored for too long. He cited a recent example in which AI helped discover a critical vulnerability in PHP, a programming language used by nearly 70% of the world's websites.
Cybersecurity expert Alan Woodward, from Surrey University, noted that while AI can help identify and patch vulnerabilities, malicious actors will exploit AI to discover flaws before anyone else. Leading AI companies like OpenAI and Anthropic have provided some businesses with advanced access to their most potent models to aid in identifying critical IT issues.
Horne will also highlight that UK military communications networks are constantly under persistent and sustained attacks from various actors, with Russia being one of the main perpetrators. These assaults, which have not crossed into warfare, are part of what the government calls "hybrid warfare." Additionally, recent cyber-attacks on European supermarket refrigerators, which raised temperatures to over 50°C, serve as a warning for companies and organizations to prioritize cyber resilience.
Horne will conclude by stating that nations have been relying on technology on a shoestring budget for decades.
Written by urgent.news from Guardian Technology's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
