NCSC warns of AI-powered ransomware by 2028
Original title: AI-Powered Ransomware Is Coming for UK Critical Infrastructure, and Europe Is Already the Testing Ground
The UK’s National Cyber Security Centre assesses it is highly likely AI-powered malware will be used in ransomware attacks on UK critical national infrastructure by 2028.
The NCSC's 2026 Annual Review assesses a high likelihood of AI-powered ransomware targeting UK critical infrastructure by 2028. AI acts as a force multiplier for reconnaissance, social engineering, and exploitation. The review notes Europe as a testing ground with Russia's FSB Centre 16 attributed for a December 2025 attack on Poland's energy grid. China is seen as best positioned to use AI against strategic targets. Organizations must prepare for faster vulnerability discovery and larger attack volumes.
Unconfirmed: The 2028 scenario is an illustration of inaction costs, not a guarantee
- AI highly likely in ransomware by 2028
- Russia attributed for Poland energy grid attack
- 88% of incidents start with four vectors
- China most sophisticated AI threat
- Legacy technology preferred targets
- Organizations
- National Cyber Security Centre
- Countries
- UK
From the original article
10 min read at cyble.com
Overview The UK's National Cyber Security Centre (NCSC) has put a date on a threat that security teams across Europe have been bracing for. In its 2026 Annual Review, The State of the Cyber Nation, the agency assesses it is highly likely that AI-powered malware will be used in a ransomware attack on UK Critical National Infrastructure by 2028. That is not a distant, speculative scenario.
By Ashish Khaitan · cyble.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.