UK cyber agency warns AI-driven malware could target critical sites by 2028

The Guardian reported that the National Cyber Security Centre (NCSC) believes AI‑powered malicious software is "highly likely" to be used in hacking attacks on the United Kingdom’s critical national infrastructure by 2028. The agency said AI could enable a ransomware attack on facilities such as power stations, airports and hospitals within the next few years. The NCSC’s warning covers a broad definition of critical national infrastructure that includes energy, transport, defence, food, health and finance services. Officials said the threat reflects the growing sophistication of cyber tools that can automate attacks and adapt to defenses. The warning comes as governments and industry grapple with how to protect essential services from increasingly automated threats.

Why it matters

If AI‑driven ransomware reaches power, transport or health systems, it could disrupt services that millions rely on, highlighting the need for stronger cyber defenses.

Key details

Location

United Kingdom · Europe

Reported by

The Guardian

First reported

3 Nov 2026, 05:31 IST

Key names

UK, CNI, National Cyber Security Centre, AI-powered

Section

Technology

Sources

This is an independent summary. Read the full, original reporting from the publisher:

• The GuardianAI-powered malware ‘highly likely’ to be used to hack UK infrastructure by 2028 3 Nov, 05:31

Read the full story at The Guardian ↗

Spotted an error? Request a correction · How this summary was produced