London:The United Kingdom is likely to face artificial intelligence-driven cyberattacks on its critical infrastructure by 2028, as criminals and hostile states increasingly exploit the technology for malicious activities, Britain's cyber chief has warned.
According to United News of Bangladesh, Richard Horne, head of the National Cyber Security Centre (NCSC), emphasized that AI could enable hackers to develop malware for ransomware attacks and identify longstanding security weaknesses on an unprecedented scale. In a speech marking the publication of the NCSC's annual cyber report, Horne warned that outdated technology and inadequate cybersecurity investment could disrupt essential services and business operations.
Recent cyberattacks on refrigeration systems in French supermarkets were highlighted as a warning. Hackers exploited vulnerabilities to raise temperatures, causing food to thaw. Similar vulnerabilities have been identified in the UK, prompting NCSC experts to work urgently to alert affected organizations. Although these attacks did not involve AI, they underscored the risks posed by poorly secured systems.
The report described Chinese cyberactivity as the most sophisticated and sustained challenge facing the UK, with expectations that both Russia and China will routinely use AI to advance their geopolitical objectives. Russia has been conducting cyber campaigns below the threshold of armed conflict, while Iran targets the UK and individuals considered threats to its government.
The NCSC indicated that AI is highly likely to increase the scale and efficiency of hostile cyber operations by both state actors and criminals, enhancing existing methods rather than uncovering entirely new vulnerabilities. Horne warned that digital technology now controls essential physical processes, including electricity, water facilities, and manufacturing systems.
Business leaders relying on outdated or inexpensive technology were urged to consider the consequences if essential supplies were disrupted, businesses collapsed, or public services failed due to inadequate cybersecurity investment. The warning follows recent efforts by governments and companies to introduce security updates after AI-assisted discoveries of vulnerabilities, notably in the PHP programming language.
Russia has been accused of targeting critical infrastructure in Europe, with a December 2025 attack on Poland's energy grid attributed to Russia's FSB security service potentially affecting 500,000 people. Malicious cyberactivity reportedly costs UK organizations nearly $20 billion annually, as exemplified by a significant cyberattack on Jaguar Land Rover in 2025.
Anne Keast-Butler, director of GCHQ, urged UK organizations to strengthen cybersecurity, emphasizing its role in protecting customers, services, and livelihoods. The NCSC advised adopting basic safeguards like keeping devices updated, restricting administrator access, and regularly backing up important data.