AI-powered malware likely to target UK critical infrastructure by 2028, NCSC warns - World news

The UK’s National Cyber Security Centre says AI is likely to enable a ransomware attack on critical national infrastructure before 2028, as the technology helps attackers identify weaknesses and write malicious code.

AI-powered malware is highly likely to be used in a ransomware attack against UK critical national infrastructure by 2028, the National Cyber Security Centre (NCSC) has warned. The assessment was published in the agency’s annual review.

The NCSC said AI would probably enable such an attack between now and 2028. The UK’s definition of critical national infrastructure includes facilities and services in sectors such as energy, transport, defence, food, health and finance, including power stations, airports and hospitals.

According to the NCSC, AI could help attackers scout targets, find weaknesses in IT networks and write malicious code. Ransomware typically involves intruders encrypting a victim’s files and demanding payment to restore access and return stolen data.

The annual review also warns that Russia and China are expected to use AI routinely in cyber-attacks. NCSC chief executive Richard Horne is due to warn that the technology could lead to an unprecedented rise in cyber incidents in the coming months, by exposing vulnerabilities in IT systems that have been left unaddressed.

Cybersecurity professor Alan Woodward said the warning highlighted the importance of governments and companies having access to advanced AI tools. He said AI can help identify and fix flaws, but warned that attackers could find them first if defenders lack access to the technology.

Sources: The Guardian World.