UK National Cyber Security Centre warns AI-powered ransomware attacks on critical infrastructure highly likely by 2028

According to Decrypt, the UK’s National Cyber Security Centre (NCSC) stated that an AI‑powered ransomware attack targeting critical infrastructure is highly likely to occur by 2028. The NCSC said artificial intelligence will expose security flaws that have been tolerated for far too long and called time on “tech on the cheap.”

The warning reflects concerns about emerging capabilities of AI in identifying and exploiting vulnerabilities within essential services such as energy, water supply, transport and emergency response systems. The NCSC emphasized that current practices allowing certain weaknesses to remain unaddressed are no longer sustainable given advances in automated attack tools.