Latest
Deal Heidi cuts headcount by 18% and co‑founders leave after $475 million raiseDeal What buyers look for when they acquire an AI companyGlobal Chainalysis breach exposes credentials of all usersGlobal OpenAI valued at $1.25 trillion after $11 billion funding roundGlobal Meta expands Muse AI with real‑time voice and video chat in the USGlobal What is an AI agent? A plain guide for business operators
United States edition
Saturday, 7 November 2026
Infercline.
Advertise
United Kingdom · The Economics of AI

UK warned of AI‑driven ransomware attacks on critical infrastructure by 2028

The NCSC says hostile AI tools could target essential services within two years, urging urgent investment in cyber resilience.

The Infercline Desk · Saturday, 7 November 2026 Sign in to save
a night view of a city with a lot of lights
Photo by Clark Gu on Unsplash

The National Cyber Security Centre (NCSC) has warned that AI‑powered ransomware attacks on the UK’s critical national infrastructure are likely by 2028, according to its State of the Cyber Nation report published on 3 November. The report says hostile actors will use AI to scale and speed up ransomware, social engineering and vulnerability exploitation within the next two years.

NCSC chief Dr Richard Horne told a launch speech that cheap‑tech practices have left organisations exposed, and that new AI tools will expose long‑standing weaknesses at unprecedented speed. He called the moment a “choice” for leaders to invest urgently in cyber resilience, adopt existing frameworks such as Cyber Essentials, and avoid merely treating security as an afterthought.

Why it matters to your business

Operators of utilities, transport, health and other essential services face higher risk of disruption and financial loss if AI‑driven attacks succeed. The warning highlights the need to strengthen defenses now, before threats become more automated and widespread.

The government is backing the push with new funding, £60 million for a national Cyber Shield, £70 million for a National Exposure and Real‑Time Vulnerability Centre, and an AI Cyber Security Centre of Excellence in Manchester. These programmes aim to give businesses the tools and expertise to detect and respond to AI‑enhanced attacks.

What to do on Monday

  1. Review your cyber‑security posture this week and ensure you meet Cyber Essentials as a baseline.
  2. Map any internet‑exposed assets and isolate non‑essential connections to reduce attack surface.
  3. Engage with the new NCSC resources, the Cyber Shield and NERV Centre, to benchmark vulnerabilities and plan remediation.

More on this topic: AI agent news

Sources

Also reported by Holyrood, Computer Weekly, Daily Mail, Euronews (English).