UK warns of AI-powered cyberattack on critical infrastructure within two years

The UK's National Cyber Security Centre (NCSC) has issued a stark warning that an AI-powered cyberattack targeting critical national infrastructure could occur within the next two years. China is identified as the country most capable of carrying out such operations, according to the agency's annual report. The NCSC predicts a high likelihood of a ransomware attack involving AI-powered malware against critical infrastructure by 2028, as well as the use of artificial intelligence to amplify the scale and efficiency of cyber operations over the same period.

NCSC chief executive Richard Horne highlighted decades of underinvestment in technology as the primary reason for the vulnerabilities that now exist. He emphasized that the rise in cyber incidents is not due to AI inventing new attack methods, but rather the exploitation of long-neglected weaknesses at an unprecedented scale. Horne expects to detail this concerning outlook in an upcoming speech.

China is described as having the intent and capability to use AI against the UK's critical national infrastructure and other strategic targets, making it the country's most formidable cyber challenge. Russia is also suspected of persistently attempting to breach UK military networks, while Iran conducts malicious cyber operations globally, including against the UK and its perceived adversaries. Both Russia, China, and Iran have denied these allegations, however.

The warning comes in the wake of recent hacking attacks on supermarkets across Europe, which exposed weaknesses in their IT systems. Horne urged organizations to take immediate action to address their vulnerabilities, warning that failure to do so could result in serious consequences, including disruptions to food supplies, power outages, and business failures. He emphasized that organizations must explain why they ignored known risks despite being aware of the warnings.