AI-Powered Malware Poses 'Highly Likely' Threat to Infrastructure by 2028

The United Kingdom's National Cyber Security Centre (NCSC) has issued a stark warning that AI-powered malware is "highly likely" to be used in ransomware attacks against critical national infrastructure by 2028. This assessment, published in the NCSC's annual review, highlights the escalating threat to essential services such as power stations, airports, and hospitals. Experts indicate that artificial intelligence will enable attackers to more effectively identify system weaknesses, scout targets, and develop malicious code, significantly increasing the scale and efficiency of cyber operations.

The NCSC, part of the GCHQ intelligence agency, emphasized that hostile state actors, particularly Russia and China, are expected to routinely integrate AI into their cyber activities to advance geopolitical objectives. While no AI-powered ransomware attack on UK infrastructure has been confirmed yet, recent cyber incidents targeting systems across Europe, including supermarket refrigeration units, serve as a stark reminder of existing vulnerabilities.

In response to this growing threat, the NCSC is urging organizations across the UK to make significant investments in cyber resilience and address long-standing security weaknesses, stressing that the era of "tech on the cheap" is over. The warning coincides with the European Union's efforts to develop an action plan to bolster cybersecurity against AI-driven threats to its own critical infrastructure.