UK NCSC Warns AI-Driven Malware May Target Critical Infrastructure by 2028
Enterprise AI · Smart operations
The UK NCSC warned that attackers are highly likely to deploy AI-driven malware in ransomware attacks against critical infrastructure by 2028. AI accelerates vulnerability exploitation and lowers costs, increasing risks across legacy systems and new AI deployments.
The UK National Cyber Security Centre (NCSC) released an assessment warning that attackers are highly likely to deploy AI-driven malware for ransomware attacks against UK critical infrastructure by 2028. According to the NCSC, while AI may not introduce entirely novel attack techniques, it allows threat actors to identify and exploit vulnerabilities faster, amplifying the speed, scale, and cost-efficiency of cyber operations. Critical infrastructure faces heightened exposure from legacy systems harboring unpatched flaws, as well as expanded attack surfaces introduced by newly deployed AI tools. The NCSC outlined baseline, pessimistic, and optimistic scenarios for 2028, noting that while AI can assist defenders, organizational patching and governance workflows must keep pace.
Key takeaways
- The NCSC assesses AI-driven malware will likely target critical infrastructure by 2028, boosting exploitation speed and scale.
- Critical infrastructure faces compounded threats from legacy systems with unpatched flaws and expanded attack surfaces from new AI tools.
- The NCSC outlined baseline, pessimistic, and optimistic scenarios, noting defensive AI benefits rely on agile remediation processes.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.