According to Blockonomi, the National Cyber Security Centre (NCSC) has stated in its Annual Review 2026 that an AI‑powered ransomware attack on critical national infrastructure is “highly likely” to occur by 2028. The warning emphasizes that state‑backed actors from China, Russia and other nation‑states will employ “AI cyber” tools to advance geopolitical objectives. These actors are targeting politicians and related entities.
The NCSC’s assessment identifies AI‑enabled malware as a factor that could be used against essential services covered by the definition of critical infrastructure. The agency does not provide specific timelines beyond the 2028 horizon or quantify likelihood.
