NewsPublished 3 Nov 2026

UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028

Source SecurityWeek

Description

The UK National Cyber Security Center warns that by 2028, the UK will likely face AI-powered cyberattacks targeting its critical infrastructure. These attacks may be conducted by criminal groups and state actors, including China and Russia, leveraging AI to scale and enhance existing cyberattack techniques. The threat includes AI-assisted discovery of vulnerabilities and AI-powered malware, potentially impacting vital systems such as electricity, water, manufacturing, and refrigeration controls. The UK government emphasizes the need for organizations to improve cybersecurity measures to protect national infrastructure and economic stability.

Impact

The anticipated AI-driven cyberattacks pose a risk of large-scale disruption to critical infrastructure systems, including electricity, water, manufacturing, and refrigeration controls. Such disruptions could lead to outages affecting millions, economic losses (e.g., Jaguar Land Rover's $260 million loss in 2025), and threats to public safety and national security. The use of AI could accelerate vulnerability discovery and exploitation, increasing the frequency and scale of attacks. State actors like China and Russia are identified as primary threats, with ongoing cyber campaigns already impacting European infrastructure. The economic impact on UK organizations is significant, with nearly $20 billion lost annually due to malicious cyber activity.

Defensive guidance

The UK National Cyber Security Center recommends organizations take immediate action to improve cybersecurity, including updating devices, limiting administrator access, and backing up critical data. The government emphasizes that cybersecurity is a frontline defense for the nation and urges investment in robust security measures to protect critical infrastructure. Organizations should prioritize addressing known vulnerabilities and maintaining up-to-date security practices to mitigate the increased risk posed by AI-enhanced cyberattacks.

Summary

According to the UK National Cyber Security Center and statements from the UK cyber chief, AI will be increasingly used by criminals and state actors like China and Russia to conduct cyberattacks on critical UK infrastructure by 2028. AI technologies will enable attackers to discover and exploit vulnerabilities at unprecedented scale, potentially automating attacks on essential services such as power grids, water management, and manufacturing controls. Recent AI-assisted vulnerability discoveries in widely used programming languages highlight the growing risk. The UK government stresses that failure to invest in cybersecurity could lead to severe disruptions, including outages and economic losses. While AI is expected to enhance existing tactics rather than create entirely new attack methods, the scale and efficiency of hostile operations are likely to increase significantly.

References

securityweek.com/uk-cyber-chief-says-the-uk-will-face-ai-cyberattacks-on-critical-infrastructure-by-2028/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 3 Nov 2026, 09:58 UTC

Technical details

References

Community reviews