The short version

The National Cyber Security Centre says AI‑powered cyber attacks could hit UK targets by 2028. Businesses need to treat this as a new layer of cyber risk.

What happened

The National Cyber Security Centre cautioned that self‑replicating AI might be able to initiate cyber attacks on UK targets at any time by 2028.

The warning came alongside reports of hackers targeting retailers’ fridges across Europe.

In a worst‑case scenario, self‑replicating artificial intelligence could launch cyber attacks at will against UK targets by 2028

National Cyber Security Centre

What it means for owners and operators

Owners must treat AI‑driven attacks as a strategic risk, not just a technical one.

Operators should review incident‑response plans to include scenarios where malware can reproduce itself without human input.

Executives need to allocate budget for AI‑specific detection tools and staff training.

Founders of tech‑focused firms should consider how their products could be misused by such agents.

The numbers

Current data centres in the UK produce roughly 1.5 million tonnes of CO2e annually.

A pledged pipeline of 14.6 GW would increase emissions by roughly 12 million tonnes per year, rising to about 38 million tonnes if the entire capacity is powered by gas.

Our take

Analysis by Infercline · Who carries the risk

AI‑driven attacks could add a fresh cyber‑risk layer for UK firms, demanding immediate mitigation.

What to do in your business tomorrow

  1. Review your cyber‑security policy and add a scenario for AI‑generated, self‑replicating malware.
  2. Train staff to spot unusual patterns that could indicate automated attacks, such as rapid, repeated login attempts.
  3. Audit your software and third‑party tools for any AI‑based features that could be exploited.

Related coverage

Sources