UK warns AI ransomware attack on infrastructure ‘highly likely’ by 2028

What happened: The UK National Cyber Security Centre warned that AI-powered malware is highly likely to be used in a ransomware attack on UK critical national infrastructure by 2028, per its Annual Review 2026. Key numbers: Target window is between now and 2028. Why it matters: The NCSC says AI will increase the scale and efficiency of ransomware, social engineering and vulnerability exploitation, and warned that China, Russia and other nation-states will use AI cyber capabilities to pursue geopolitical goals.

The UK National Cyber Security Centre warned that AI-powered malware is highly likely to be used in a ransomware attack on UK critical national infrastructure by 2028, per its Annual Review 2026.

The NCSC says AI will increase the scale and efficiency of ransomware, social engineering and vulnerability exploitation, and warned that China, Russia and other nation-states will use AI cyber capabilities to pursue geopolitical goals.