The UK’s National Cyber Security Centre (NCSC) has warned that AI-powered malware is highly likely to be used in a ransomware attack against the country’s critical national infrastructure by 2028.
The assessment, published in its 2026 Annual Review, identifies growing risks to essential services as cybercriminals and state-backed attackers increasingly incorporate artificial intelligence into their operations.
The NCSC said AI is accelerating reconnaissance, social engineering, vulnerability discovery and exploit development, allowing attackers to operate at greater speed and scale. It warned that AI-assisted vulnerability discovery could enable attackers to exploit weaknesses before organizations deploy patches.
The annual review recorded 1,831 reported cyberattacks between September 2025 and August 2026, including 337 incidents requiring NCSC assistance and 80 classified as nationally significant.
The agency emphasized that most successful compromises still exploit familiar weaknesses, including unpatched vulnerabilities, stolen credentials and social engineering, while AI is making those existing techniques more efficient.
ㅤDarin Fredde, Sr. Director of Technical Marketing Engineering, Ridge Security
“The NCSC’s warning isn’t that ransomware has suddenly developed a mind of its own. It’s that AI is making familiar attack methods faster, more scalable, and potentially more accessible. An attacker doesn’t need to invent a new vulnerability when existing weaknesses, stolen credentials, and poorly understood trust relationships still provide opportunities.
“For critical infrastructure, the concern goes beyond compromised systems. It’s the potential disruption of services that communities depend on every day. I’ve spent much of my career examining the difference between controls organizations believe are protecting them and what those controls withstand when tested. AI could make that gap increasingly consequential.
“We should be careful not to confuse AI-assisted attacks with fully autonomous threats. We should also recognize that AI offers defenders opportunities to discover vulnerabilities, correlate evidence, and prioritize remediation. But capability is different from verification. An AI system reporting that a vulnerability has been fixed is not proof that the attack path has been eliminated.
“The challenge is to use automation to continuously test our assumptions, independently validate outcomes, and strengthen our ability to contain and recover from disruption.
“The question isn’t whether attackers will get faster. It’s whether we can make verified resilience move faster than the threats we’re preparing to face.”
ㅤ
John Strand, Owner, Black Hills Information Security
“More and more organizations are sounding the alarm about AI-powered attacks, and I cannot help but feel we’re being caught flat-footed. A lot of organizations have discussed these attacks as some nebulous problem for the future. For many governments and organizations, that problem is here right now. And it’s only escalating.
“We have no time to waste. Every organization needs to reduce its external attack surface and use deception wherever possible to create tripwires for attackers. Those steps need to happen now as we prepare for the next wave of AI-powered attacks.”
ㅤ
Jacob Krell, Senior Director, Secure AI Solutions & Cybersecurity, Suzu Labs
“The UK’s National Cyber Security Centre (NCSC) put a date on it. Its 2026 Annual Review assesses it as highly likely that AI-powered malware will feature in a ransomware attack on UK critical national infrastructure (CNI) by 2028. Last week’s funding announcement, £60 million for Cyber Shield and £70 million for a National Exposure and Real-Time Vulnerability (NERV) Centre, points at discovery. Discovery was never the hard part.
“CNI runs under-patched and under-tested for a rational reason, a patch that bricks a controller at a water treatment works is a service outage, so operators defer. Every operational technology (OT) engineer I’ve met wants to patch. AI-assisted discovery is compressing the window between a published bug and a working exploit, and the people who can safely test those systems, the ones who know which pumps tolerate a five-minute stop, rarely come at public sector pay.
“The same availability fear is what ransomware monetizes. Immutable backups, copies an attacker cannot alter or delete, turn a total-loss event into a recovery exercise. The Cyber Security and Resilience Bill should make them a requirement for CNI operators.”
ㅤ
Joshua Marpet, Senior Product Security Consultant, Finite State
“While much critical infrastructure is primarily a nation-state target, much of it is also a target for commercial cybercrime.
“As AI tokens are still fairly inexpensive, and even a small inference infrastructure can create phishing emails that pluck heartstrings or push a false sense of urgency, it’s relatively trivial to build that route into a company or agency. Once you build the way in, getting someone to click a malicious link is pretty easy.
“This is not “huge ai writes incredibly complex formerly unseen zero-day vulnerability!!!”. This is “tiny AI writes an email to elicit an emotional reaction of sorrow, pity, or urgency”.
“So rather than spending $10k to build a new zero day, I can spend 20 minutes to write an email and some shell code. For free. From hugging face or evilgpt.
“But if you feel the need to build some revolutionary malware, you can always spend about 120k and build your own high end ai infrastructure, with a free Chinese model such as Kimi, Qwen, or deepseek. 120k?!?? One or two good hits on the ransomware, and you’ll make your money back.
“Either way, it’s relatively simple to use AI to find vulnerabilities, or to build phishing emails to deploy malware.
AI is going to be a big problem for you right now. The question is will you answer the call and defend your organization against AI?
ㅤ
“So a warning it may happen? No, I’m sorry. It’s already happening. The horse has left the barn.”
ㅤ
Related
This entry was posted on November 4, 2026 at 7:18 am and is filed under Commentary with tags UK. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
UK warns AI-powered ransomware will likely target critical infrastructure by 2028
The UK’s National Cyber Security Centre (NCSC) has warned that AI-powered malware is highly likely to be used in a ransomware attack against the country’s critical national infrastructure by 2028.
The assessment, published in its 2026 Annual Review, identifies growing risks to essential services as cybercriminals and state-backed attackers increasingly incorporate artificial intelligence into their operations.
The NCSC said AI is accelerating reconnaissance, social engineering, vulnerability discovery and exploit development, allowing attackers to operate at greater speed and scale. It warned that AI-assisted vulnerability discovery could enable attackers to exploit weaknesses before organizations deploy patches.
The annual review recorded 1,831 reported cyberattacks between September 2025 and August 2026, including 337 incidents requiring NCSC assistance and 80 classified as nationally significant.
The agency emphasized that most successful compromises still exploit familiar weaknesses, including unpatched vulnerabilities, stolen credentials and social engineering, while AI is making those existing techniques more efficient.
ㅤDarin Fredde, Sr. Director of Technical Marketing Engineering, Ridge Security
“The NCSC’s warning isn’t that ransomware has suddenly developed a mind of its own. It’s that AI is making familiar attack methods faster, more scalable, and potentially more accessible. An attacker doesn’t need to invent a new vulnerability when existing weaknesses, stolen credentials, and poorly understood trust relationships still provide opportunities.
“For critical infrastructure, the concern goes beyond compromised systems. It’s the potential disruption of services that communities depend on every day. I’ve spent much of my career examining the difference between controls organizations believe are protecting them and what those controls withstand when tested. AI could make that gap increasingly consequential.
“We should be careful not to confuse AI-assisted attacks with fully autonomous threats. We should also recognize that AI offers defenders opportunities to discover vulnerabilities, correlate evidence, and prioritize remediation. But capability is different from verification. An AI system reporting that a vulnerability has been fixed is not proof that the attack path has been eliminated.
“The challenge is to use automation to continuously test our assumptions, independently validate outcomes, and strengthen our ability to contain and recover from disruption.
“The question isn’t whether attackers will get faster. It’s whether we can make verified resilience move faster than the threats we’re preparing to face.”
ㅤ
John Strand, Owner, Black Hills Information Security
“More and more organizations are sounding the alarm about AI-powered attacks, and I cannot help but feel we’re being caught flat-footed. A lot of organizations have discussed these attacks as some nebulous problem for the future. For many governments and organizations, that problem is here right now. And it’s only escalating.
“We have no time to waste. Every organization needs to reduce its external attack surface and use deception wherever possible to create tripwires for attackers. Those steps need to happen now as we prepare for the next wave of AI-powered attacks.”
ㅤ
Jacob Krell, Senior Director, Secure AI Solutions & Cybersecurity, Suzu Labs
“The UK’s National Cyber Security Centre (NCSC) put a date on it. Its 2026 Annual Review assesses it as highly likely that AI-powered malware will feature in a ransomware attack on UK critical national infrastructure (CNI) by 2028. Last week’s funding announcement, £60 million for Cyber Shield and £70 million for a National Exposure and Real-Time Vulnerability (NERV) Centre, points at discovery. Discovery was never the hard part.
“CNI runs under-patched and under-tested for a rational reason, a patch that bricks a controller at a water treatment works is a service outage, so operators defer. Every operational technology (OT) engineer I’ve met wants to patch. AI-assisted discovery is compressing the window between a published bug and a working exploit, and the people who can safely test those systems, the ones who know which pumps tolerate a five-minute stop, rarely come at public sector pay.
“The same availability fear is what ransomware monetizes. Immutable backups, copies an attacker cannot alter or delete, turn a total-loss event into a recovery exercise. The Cyber Security and Resilience Bill should make them a requirement for CNI operators.”
ㅤ
Joshua Marpet, Senior Product Security Consultant, Finite State
“While much critical infrastructure is primarily a nation-state target, much of it is also a target for commercial cybercrime.
“As AI tokens are still fairly inexpensive, and even a small inference infrastructure can create phishing emails that pluck heartstrings or push a false sense of urgency, it’s relatively trivial to build that route into a company or agency. Once you build the way in, getting someone to click a malicious link is pretty easy.
“This is not “huge ai writes incredibly complex formerly unseen zero-day vulnerability!!!”. This is “tiny AI writes an email to elicit an emotional reaction of sorrow, pity, or urgency”.
“So rather than spending $10k to build a new zero day, I can spend 20 minutes to write an email and some shell code. For free. From hugging face or evilgpt.
“But if you feel the need to build some revolutionary malware, you can always spend about 120k and build your own high end ai infrastructure, with a free Chinese model such as Kimi, Qwen, or deepseek. 120k?!?? One or two good hits on the ransomware, and you’ll make your money back.
“Either way, it’s relatively simple to use AI to find vulnerabilities, or to build phishing emails to deploy malware.
AI is going to be a big problem for you right now. The question is will you answer the call and defend your organization against AI?
ㅤ
“So a warning it may happen? No, I’m sorry. It’s already happening. The horse has left the barn.”
ㅤ
Share this:
Like this:
Related
This entry was posted on November 4, 2026 at 7:18 am and is filed under Commentary with tags UK. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.