Skip to content
NewA calmer, faster ZeroHour

NCSC warns AI-powered ransomware could hit UK infrastructure by 2028

Original title: NCSC Chief Warns of Imminent AI Ransomware Threat to UK Critical Infrastructure

Infosecurity Magazineby Kevin Poireault ()4 min read1
Part of a story covered by 7 sourcesNCSC warns AI-powered ransomware likely on UK critical infrastructure by 2028Merged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

The UK also announced Cyber Shield, NERV, AISI and agent-security funding plus cheaper Cyber Essentials for smaller firms.

NCSC chief Richard Horne said on November 3 that AI-powered malware is highly likely to be used by financially motivated attackers against UK power stations, airports and hospitals by 2028. The annual report also says Russia and China will routinely use AI in cyber activity. Horne argued AI mainly scales discovery and exploitation of long-tolerated weaknesses, citing 110,000 NCSC notifications over PHP2Shell. The government detailed prior investments including a Cyber Shield, a NERV centre, more AISI funding and a National Agentic Security Unit.

Unconfirmed: The 2028 AI-ransomware claim is an NCSC likelihood assessment, not a confirmed attack.

Key facts
  • Cyber Shield’s first phase includes a £25 million Challenge Fund within a £60 million package.
  • A further £120 million goes to the AI Security Institute and £40 million to an agentic security unit.
  • Cyber Essentials for micro and SME firms is discounted 75 percent, to £80–£125 plus VAT.
  • More than 230 businesses signed a Cyber Resilience Pledge; 14 Software Security Ambassadors were named.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

4 min read at infosecurity-magazine.com

The UK’s cyber chief has warned that AI-powered malware is highly likely to feature in ransomware attacks targeting British critical infrastructure by 2028

Infosecurity Magazine

By Kevin Poireault · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.