Ransomware · AI Security
UK cyber agency warns of AI-powered ransomware threat by 2028
Britain's National Cyber Security Centre warns that AI-driven ransomware attacks could target critical infrastructure by 2028. The government is investing over £190 million in new defences.
Ross Grant2 min read
The short version
Britain's main cyber agency says that by 2028, criminals could use artificial intelligence to launch more advanced ransomware attacks on important services like the NHS and energy networks. The government is putting over £190 million into new defences. Organisations are being told to take security more seriously and start with basic protections like Cyber Essentials. Even small businesses can now get a big discount on this certification.
By the numbers
- £60 millionfunding for Cyber Shield defence systemThe Register
- £70 millionfunding for National Exposure and Real-Time Vulnerability (NERV) CentreThe Register
- £40 millionfunding for National Agentic Security UnitThe Register
- £24 millionfunding to strengthen public sector defencesThe Register
- 75%discount on Cyber Essentials for first-time micro, small, and medium businessesThe Register
What happened?
The UK's National Cyber Security Centre (NCSC) has warned that AI-powered ransomware attacks are highly likely to target Britain's critical national infrastructure by 2028. The warning comes with the NCSC's annual review and a new government investment of over £190 million in cyber defence projects. Attackers are already abusing open source AI tools, and the NCSC is urging organisations to improve their security.
Who is affected
The UK's National Cyber Security Centre (NCSC) has warned that Britain's critical national infrastructure is likely to face AI-powered ransomware attacks by 2028. Critical national infrastructure includes sectors like healthcare, energy, transport and finance. The NCSC's warning is aimed at organisations running these essential services, but the impact could reach anyone relying on them, including NHS patients and the wider public.
How the attack worked
The NCSC's annual review and a separate assessment highlight that attackers are already abusing open source AI security tools, originally designed to help security researchers. One example is ARTEX, a Chinese-made AI red-teaming platform. Since its launch in July, researchers have seen it used in attacks on UK companies such as 123 Reg and Microsoft 365 users. The NCSC expects that by 2028, AI will make ransomware attacks more frequent and sophisticated, and will make it harder to trace who is behind them. The agency also raises the possibility of autonomous malware that could act without human control, self-replicate, and launch attacks independently.
The response
To counter these threats, the UK government has announced several new initiatives. Over £190 million is being invested: £60 million for the Cyber Shield defence system, £70 million for a National Exposure and Real-Time Vulnerability (NERV) Centre, £40 million for a National Agentic Security Unit, and £24 million to strengthen public sector defences. There will also be a new NCSC-managed AI Cyber Security Centre in Manchester. The NCSC is urging organisations to invest urgently in their own security, starting with the Cyber Essentials certification. Micro, small, and medium-sized businesses can now get a 75% discount on their first Cyber Essentials certificate.
What you should do
The NCSC recommends that all organisations treat Cyber Essentials as a minimum standard, and scale up their security measures according to their size and risk. This includes reviewing how AI tools are used in their environments, monitoring for new types of attacks, and preparing for more advanced threats. For individuals and small businesses, following basic cyber hygiene and keeping systems updated remains important.
Why it matters
AI-powered ransomware could disrupt essential services that everyone relies on, from healthcare to energy. The warning signals a shift in how attackers might use AI to make their attacks harder to stop and trace. The government's response shows how seriously it is taking the threat.
Key points
- NCSC warns AI-powered ransomware attacks could hit UK critical infrastructure by 2028.
- Attackers are already abusing open source AI security tools for malicious purposes.
- The UK government is investing over £190 million in new cyber defence projects.
- Organisations are urged to adopt Cyber Essentials as a minimum standard.
- AI could make attacks harder to detect and attribute.
Sources
The Register
Reference
