UK Cyber Chief Warns AI Attacks Will Hit Critical Infrastructure by 2028

Richard Horne, head of the UK's National Cyber Security Center, stated that the country will face artificial intelligence cyberattacks on critical infrastructure by 2028. He delivered the warning on Tuesday during a speech marking the publication of the NCSC's annual cyber report. Horne identified China and Russia as primary actors who are increasingly integrating AI into their cyber operations.

The NCSC report projects that AI-powered malware will facilitate ransomware attacks. The technology will allow attackers to discover and exploit vulnerabilities that have been tolerated for years. Horne described the resulting scale of exploitation as once unimaginable.

The report identifies Chinese cyber activity as the most sophisticated and sustained challenge facing the UK. Both Russia and China are expected to routinely use AI to achieve geopolitical goals. Russia is intentionally conducting cyber campaigns that remain below the threshold of armed conflict. Iran is also targeting individuals who pose a threat to its regime.

The report notes that AI will likely enhance the scale and efficiency of hostile operations. Attackers are more likely to use AI to scale existing tactics rather than find brand new vulnerabilities. Last week, governments and corporations implemented urgent security updates after AI-assisted discovery of flaws in a programming language used by 70% of global websites. These critical flaws could allow unauthenticated remote control of web servers.

Horne emphasized that technology underpins the automation of vital physical processes. These include electricity switching, water facility sluice gates, dam operations, and manufacturing lines. He cited recent cyberattacks on refrigeration systems in French supermarkets as evidence that hostile actors can easily exploit civilian infrastructure.

The UK and EU member states have attributed a December 2025 attack on Poland's energy grid to Russia's FSB security service. If successful, the attack would have left 500,000 people without electricity during winter. Russia has already attacked critical infrastructure in Europe, according to these assessments.

Malicious cyber activity costs UK organizations nearly $20 billion annually, according to the NCSC. In 2025, Jaguar Land Rover suffered direct losses exceeding $260 million following a cyberattack. The incident also affected suppliers and impacted the UK economy.

Anne Keast-Butler, director of GCHQ, called for immediate action from every organization in the UK. She stated that cybersecurity is now part of the front line defense of the nation. The NCSC recommends implementing basic measures such as updating devices, limiting administrator access, and backing up important files.

Business leaders who have relied on cheap technology will face scrutiny if systems fail. Horne warned they will have to explain why food is missing from shelves, lights are off, or businesses have failed. The NCSC report urges organizations to update out-of-date technology to prevent these disruptions.