NCSC says AI ransomware highly likely against UK infrastructure by 2028

The UK NCSC assesses it is highly likely AI-powered malware will hit critical national infrastructure ransomware by 2028.

The UK National Cyber Security Centre's 2026 Annual Review assesses it is highly likely that AI-powered malware will be used in ransomware attacks on UK critical national infrastructure by 2028. The centre describes AI as a force multiplier for reconnaissance, social engineering, and exploitation, and says organizations should prepare for faster vulnerability discovery and larger attack volumes. Cyble reports the review treats Europe as a testing ground and attributes Russia's FSB Centre 16 for a December 2025 attack on Poland's energy grid, while calling China best positioned to use AI against strategic targets. Dark Reading reports that only 22% of MPs are confident in the UK's CNI posture and that 51% say it is not keeping pace, alongside government investment in AI-driven cybersecurity, including £200 billion.