LONDON (AP) — The United Kingdom is anticipated to encounter artificial intelligence (AI)-powered cyberattacks targeting its critical infrastructure by 2028. This forecast comes as both state and criminal actors, including significant actors such as China and Russia, increasingly harness AI for cyber operations. Richard Horne, the head of the U.K.'s National Cyber Security Centre (NCSC), issued this warning during a speech that coincided with the release of the NCSC’s annual cyber report.

Horne highlighted the potential for AI-driven malware to facilitate ransomware attacks, enabling the discovery and exploitation of previously unaddressed vulnerabilities. He emphasized that these vulnerabilities could be exploited on an unprecedented scale, which could lead to devastating consequences for businesses and public services.

He urged leaders across various sectors, many of whom have previously opted for cost-saving measures in technology, to reconsider their cybersecurity investments. Inaction could lead to severe disruptions, such as empty supermarket shelves, power outages, and economic downturns. The report identifies Chinese cyber operations as the "most sophisticated and sustained cyber challenge facing the U.K." It suggests that both China and Russia will consistently leverage AI to pursue their geopolitical interests. Additionally, Russia's cyber campaigns are designed to operate below the threshold of armed conflict, while Iran engages in attacks targeting individuals perceived as threats to its regime.

The report warns that while the use of AI will likely enhance and intensify existing cyber tactics, it may not necessarily uncover entirely new vulnerabilities. This perspective reflects a broader understanding of how AI is reshaping cyber warfare and the strategies employed by malicious actors.

Recently, governments and corporations rushed to implement security updates after AI-assisted discovery revealed critical vulnerabilities in a widely used programming language that supports around 70% of global websites. These vulnerabilities could allow unauthorized access to websites, enabling cybercriminals to take control of web servers without requiring credentials.

Horne elaborated on the undeniable role of technology in automating essential physical processes that underpin modern life. He cited critical areas like electricity management, water facility operations, dam controls, and manufacturing processes. The cyberattacks targeting refrigeration systems in French supermarkets serve as a stark reminder of how vulnerable civilian infrastructure can be to cyber threats.

Moreover, the report mentions prior attacks attributed to Russian operatives, including an incident in December 2025 that targeted Poland's energy grid. If successful, this attack could have left half a million people without electricity during the winter months, showcasing the potentially catastrophic implications of such cyber operations.

The economic toll of cyber threats in the U.K. is significant, with estimated costs nearing $20 billion annually for affected organizations. A notable example includes a cyberattack on Jaguar Land Rover in 2025, which resulted in direct losses exceeding $260 million, primarily affecting suppliers and the broader U.K. economy.

Anne Keast-Butler, the director of GCHQ, Britain’s signals intelligence agency and the NCSC’s parent organization, called on all U.K. organizations to take proactive steps in their cybersecurity measures. She stressed that cybersecurity is now integral to national defense, advocating for simple yet effective practices: keeping software updated, limiting administrator access, and regularly backing up vital data.

The NCSC's report underscores the critical need for heightened vigilance and action in cybersecurity as the landscape evolves with the integration of AI technologies.