AI-powered malware ‘highly likely’ to be used to hack UK infrastructure by 2028 - The Guardian
AI-powered malicious software is highly likely to be used in hacking attacks against the UK's power stations, airports and hospitals by 2028, according to the National Cyber Security Centre.
The National Cyber Security Centre (NCSC), part of the GCHQ spy agency, issued the warning in its annual review, noting that AI will probably enable a ransomware attack against critical national infrastructure [CNI] between now and 2028. The UK's definition of CNI covers facilities and services across energy, transport, defence, food, health and finance sectors.
Ransomware Evolution
Ransomware has become a cornerstone of criminal hackers' repertoire, particularly for gangs operating from former Soviet Union states. These attackers encrypt victims' IT systems with bespoke malware and demand cryptocurrency payments to unlock crippled systems and return stolen data. Recent UK victims include Royal Mail, outsourcing firm Capita, and various public bodies including councils.
AI is set to enhance the ransomware threat by helping attackers with tasks such as scouting targets, locating weaknesses in IT networks, and writing malicious code more efficiently.
Government Response
Last month, the government urged Britons to stock up to nine litres of bottled water and three days' worth of food to prepare for weather, cyber or other serious emergencies. Defence secretary Wes Streeting emphasized the need to prepare for state-sponsored terrorism by Russia or other hostile powers targeting everyday infrastructure.
In the coming months, we face a real prospect of an unprecedented rise in the number of cyber incidents.
International Threats
The NCSC warned that Russia and China will start using AI routinely in cyber-attacks. Communications networks used by the British military face daily persistent and sustained attacks, with Russia identified as one perpetrator. These attacks deliberately avoid crossing into warfare, with Moscow carrying out notable campaigns that intentionally fall below the threshold of armed conflict as part of hybrid warfare tactics.
Recent cyber-attacks on supermarket fridges in Europe, where hackers raised temperatures to more than 50C, serve as a warning for companies to invest in cyber resilience. Horne will criticize how for decades we have collectively got away with tech on the cheap. Professor Alan Woodward stressed that while AI can help find flaws, if we don't get the access the bad guys will beat them to it.
Related
