UK must expect AI-powered attack on critical infrastructure within two years, report says

Key Points:

• The UK's National Cyber Security Centre (NCSC) warns of a likely AI-powered cyberattack on Britain's critical national infrastructure within the next two years, with China identified as the most capable actor to conduct such operations.
• NCSC CEO Richard Horne criticized many UK organizations for underinvesting in technology, leaving supply chains vulnerable to exploitation through AI-enhanced cyberattacks.
• The NCSC anticipates a significant rise in cyber incidents, including a probable ransomware attack using AI-driven malware by 2028, due to longstanding vulnerabilities being exploited at unprecedented scales.
• Russia and Iran are also actively engaged in cyber operations against the UK, with Russia targeting military networks and Iran conducting global malicious activities, while China poses the most sophisticated and sustained threat.
• The NCSC urges urgent action from organizations to address cybersecurity risks, warning that failure to act could lead to severe disruptions such as food shortages, power outages, and business failures.