UK must expect AI-powered attack on critical infrastructure within two years, report says

Live updates

1. 1h ago

   UK Cyber Chief Warns of AI Attacks on Critical Infrastructure by 2028

   The UK National Cyber Security Centre (NCSC) warns that AI-powered malware will likely target critical national infrastructure by 2028. GCHQ expects AI cyberattacks from Russia and China to become routine by that date, with China identified as the best positioned to act. The NCSC chief states that longstanding security weaknesses are now being discovered and exploited at an unimaginable scale due to AI. Businesses are warned that failure to prepare for these attacks could lead to severe supply chain disruptions, including empty supermarket shelves.

   Why it matters

   The NCSC is part of GCHQ and manages the protection of UK online services and devices. This warning follows recent cyberattacks on supermarket refrigeration systems across Europe. The government is calling for urgent investment in resilience to counter the rise of AI-driven threats.

   What is confirmed

   • The UK National Cyber Security Centre warns of AI-powered attacks on critical infrastructure by 2028.
   • GCHQ states that AI cyberattacks from China and Russia will be routine by 2028.
   • The NCSC describes the use of AI-powered malware to hack UK infrastructure as highly likely by 2028.
   • The NCSC warns that AI is uncovering and exploiting longstanding cyber security weaknesses.

   Still unconfirmed

   • China is the best placed actor to launch AI-powered attacks on UK critical infrastructure.
   • Businesses face empty shelves if they do not prepare for cyber attacks.
   • UK firms are willfully blind to hacking risks.

   What to watch next

   • Evidence of AI-powered malware targeting UK energy or water grids
   • Government announcements regarding specific funding for infrastructure resilience
   • Official reports on the scale of the European supermarket refrigeration attacks
   Sources used for this update (17)

   1. Reuters — UK must expect AI-powered attack on critical infrastructure within two years, report says
   2. Sky News — Prepare for cyber attacks or face empty shelves, businesses warned
   3. The Guardian — AI-powered malware ‘highly likely’ to be used to hack UK infrastructure by 2028
   4. AP News — UK cyber chief says the UK will face AI cyberattacks on critical infrastructure by 2028
   5. Financial Times — Chinese and Russian AI cyber attacks will be routine by 2028, says GCHQ
   6. The Times — UK will be hit by ‘unprecedented rise’ in AI cyberattacks
   7. Reuters — COMMENTARY: Fridge hacks and finance attacks flag AI insecurity
   8. Bloomberg — UK Cyber Chief Warns Firms ‘Willfully Blind’ to Hacking Risk
   9. jen.jiji.com — Atyrau oil refinery introduces AI-powered system to monitor hazardous work
   10. jen.jiji.com — Bomb threats on planes, who is the mastermind of the group terrorizing Europe: supremacist, anti-feminist and anti-Ukraine (2)
   11. shattered.io — EFS Wasn’t the Target: 3 Sites, 1 Vendor [2026]
   12. www.ncsc.gov.uk — Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years
   confidence 95%