UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028

Britain's cybersecurity chief predicts the country will face AI-powered cyberattacks targeting critical infrastructure by 2028, potentially from China, Russia, and other states. Richard Horne, head of the National Cyber Security Center (NCSC), warned that AI will uncover and exploit ignored vulnerabilities at an unprecedented scale.

AI-enhanced malware could lead to "vulnerabilities that have been tolerated for far too long" being discovered and exploited, with the potential to disrupt essential services such as food supply, electricity, and manufacturing. The Chinese cyber threat is described as the "most sophisticated and sustained" facing the UK, while Russia and China will use AI to achieve their geopolitical goals.

Horne also highlighted Russia's intentional cyber campaigns and Iran's attacks on the UK and individuals deemed threats to the Iranian regime. The report emphasized the growing likelihood of AI being used to enhance and scale existing tactics rather than discover entirely new vulnerabilities. The discovery of AI-assisted vulnerabilities in a programming language vital to 70% of websites last week underscores the urgent need for cybersecurity investments.

Critical infrastructure, such as electricity switching, dam operations, and heating controls, is increasingly reliant on technology. Recent attacks on refrigeration systems in French supermarkets demonstrated how adversaries could exploit civilian infrastructure. Russia has already targeted critical infrastructure in Europe, potentially causing widespread power outages during winter, and the U.K. faces annual cyber-related losses of nearly $20 billion.

Organizations must act now to protect their customers, services, and livelihoods, implementing basic cybersecurity measures like updating devices, limiting administrator access, and backing up data, according to the NCSC.