The United Kingdom faces a significant threat of artificial intelligence-driven cyberattacks targeting its critical infrastructure by 2028, according to a warning issued Tuesday by Richard Horne, head of the U.K.'s National Cyber Security Center (NCSC). In a speech marking the release of the agency's annual report, Horne highlighted that both criminal organizations and state actors, specifically naming China and Russia, are increasingly integrating AI into their cyber operations.
Horne cautioned that this technological shift will enable the exploitation of long-tolerated vulnerabilities at an unprecedented scale. He warned that business leaders who have historically relied on inexpensive, outdated technology will face severe consequences if they fail to modernize their systems, potentially resulting in disruptions to essential services such as food supply, power grids, and business operations. The NCSC report characterizes Chinese cyber activity as the most sophisticated and sustained challenge to the U.K., while both China and Russia are expected to utilize AI to further their geopolitical objectives.
Beyond the threat from China and Russia, Horne noted that Iran is actively conducting cyberattacks against the U.K., specifically targeting individuals perceived as threats to the Iranian regime. Russia, meanwhile, is engaging in cyber campaigns that remain below the threshold of armed conflict. The agency's report emphasizes that while AI will likely increase the efficiency and scale of these hostile operations, it is primarily being used to enhance existing tactics rather than to uncover entirely new vulnerabilities.
Evidence of these risks was highlighted last week when governments and corporations initiated urgent security updates following the AI-assisted discovery of two critical flaws in a programming language used by 70% of global websites. These vulnerabilities could theoretically allow unauthorized remote control of web servers without password requirements. Horne stressed that technology underpins vital physical processes, including water facility sluice gates, dam operations, manufacturing lines, and electricity switching. He pointed to recent attacks on French supermarket refrigeration systems as a clear example of how civilian infrastructure is vulnerable to exploitation.
The threat is already manifesting in physical damage, with U.K. and EU officials attributing a December 2025 attack on Poland's energy grid to Russia's FSB security service. That operation could have left 500,000 people without electricity during winter. In the U.K., malicious cyber activity currently costs organizations nearly $20 billion annually, with incidents like the 2025 Jaguar Land Rover attack resulting in over $260 million in direct losses. Anne Keast-Butler, director of GCHQ, urged all organizations to take immediate action to protect services and livelihoods, emphasizing that cybersecurity is now a critical component of national defense. The NCSC recommends that organizations implement basic, effective measures such as maintaining updated devices, restricting administrator access, and ensuring regular data backups.
Related Articles
Mr. Udoy is a professional Web Developer and Blogger with 7+ years of experience in the tech world. He specializes in web architecture and digital storytelling. As the driving force behind worldincidents.com, he focuses on delivering high-quality, well-researched content to a global audience.