Britain faces a growing threat of artificial intelligence-powered cyberattacks against its critical national infrastructure, with the country’s cybersecurity authorities warning that a major
incident could occur within the next two years.
The National Cyber Security Centre (NCSC), part of the UK intelligence agency GCHQ, said on Tuesday that the rapid development of artificial intelligence was making it easier for hostile actors to identify and exploit weaknesses in digital systems. China, according to the agency, is considered the country best equipped to use AI in sophisticated cyber operations against Britain.
The warning comes as the UK faces mounting pressure to strengthen the security of essential services, including energy, transport, communications and food supply chains.
Richard Horne, chief executive of the NCSC, said decades of underinvestment in technology and cybersecurity had left too many British organisations exposed to potentially devastating attacks.
He criticised businesses and institutions for relying on inexpensive technology solutions without adequately addressing the security risks, arguing that such decisions had created vulnerabilities that could now be exploited on an unprecedented scale.
In remarks prepared for delivery on Tuesday, Horne was expected to warn that Britain could experience a significant increase in cyber incidents in the coming months.
He stressed that artificial intelligence was not necessarily creating entirely new methods of cyber warfare. Instead, its growing capabilities were allowing attackers to identify existing weaknesses much faster and exploit them across a far greater number of systems.
“Vulnerabilities that have been tolerated for far too long can now be discovered and exploited at a scale that was once unimaginable,” Horne said in the prepared remarks.
AI could transform the scale of cyber warfare
The NCSC’s annual assessment warned that a ransomware attack involving AI-powered malware against the UK’s critical infrastructure was highly likely to occur by 2028.
The agency also highlighted the growing potential for hostile states and other malicious actors to use AI to increase the speed, efficiency and reach of their cyber operations.
Artificial intelligence could help attackers automate reconnaissance, identify vulnerable systems, develop malicious software and conduct operations with fewer resources than previously required.
Such developments could pose particular challenges for organisations operating essential services, many of which depend on interconnected digital networks and third-party technology providers.
The NCSC’s assessment suggests that the threat is not limited to a single sector. A successful attack on critical infrastructure could disrupt electricity supplies, telecommunications, transport networks or other services essential to everyday life and the functioning of the British economy.
China, Russia and Iran identified as major cyber threats
The report identified China as the most sophisticated and persistent cyber challenge facing the UK, particularly because of its capabilities and strategic interest in critical infrastructure.
Horne was expected to say that Beijing was highly likely to possess both the intention and the technical capacity to use artificial intelligence against British infrastructure and other strategic targets.
The NCSC also warned that Russia was continuing efforts to penetrate UK military networks, while Iran was conducting malicious cyber operations internationally, including against Britain and individuals it regards as threats.
These activities reflect a broader pattern of state-linked cyber operations targeting government institutions, defence systems, businesses and individuals.
China, Russia and Iran have repeatedly rejected accusations of malicious cyber activity made against them by Western governments.
Recent attacks expose weaknesses in European supply chains
The NCSC’s warning follows a series of cyber incidents affecting businesses across Europe, including attacks on supermarket operators that have highlighted the vulnerability of interconnected IT systems.
The disruption caused by cyberattacks on essential businesses has raised concerns about the potential consequences of a broader assault on critical infrastructure.
For the UK, the risks extend beyond direct attacks on government departments or major infrastructure operators. Vulnerabilities within suppliers, contractors and technology providers could provide attackers with indirect access to strategically important systems.
Horne warned that organisations could no longer afford to postpone investments in cybersecurity or ignore known weaknesses.
He called on businesses and public institutions to take immediate action to strengthen their defences, arguing that the consequences of failing to act could extend far beyond financial losses.
The NCSC chief was expected to challenge organisations to consider how they would justify failing to address known risks if cyberattacks left supermarket shelves empty, disrupted electricity supplies or forced businesses to close.
The warning places renewed emphasis on the need for stronger cybersecurity standards, investment in resilient technology and closer cooperation between the government and private sector.
As AI continues to evolve, British authorities are increasingly concerned that the gap between identifying a vulnerability and exploiting it could become dangerously narrow.
The NCSC’s message is that the country’s cyber resilience must improve before attackers exploit weaknesses that have remained unaddressed for years. Photo by Jernej Furman from Slovenia, Wikimedia commons.
