Cyber

Security

Shield

Britain’s cyber agency has warned that AI may soon help criminals disrupt essential services. On November 3, the National Cyber Security Centre (NCSC)&nbsp;<a href="https://www.ncsc.gov.uk/news/cyber-chief-uk-facing-ai-powered-attacks-on-critical-infrastructure-in-two-years" rel="noopener noreferrer nofollow">sa</a>id AI-based malware could be used&nbsp;in ransomware attacks against UK critical infrastructure by 2028.
The warning has not been confirmed yet. The warning covers how quickly criminals could take advantage of vulnerabilities that were tough for operators to fix.
<h3 class="wp-block-heading" id="strong-why-the-danger-is-speed-not-a-new-kind-of-attack-strong">Why the danger is speed, not a new kind of attack</h3>
AI is helping hackers carry out familiar attacks faster. The NCSC describes it as a <a href="https://www.ncsc.gov.uk/collection/annual-review-2026/understanding-threat/ai-impact-cyber-threat" rel="noopener noreferrer nofollow">force multiplier</a>. It allows attackers to identify targets, create phishing messages, uncover vulnerabilities, and develop exploits more quickly. But humans still guide these operations. The <a href="https://internationalaisafetyreport.org/publication/international-ai-safety-report-2026" rel="noopener noreferrer nofollow">International AI Safety Report</a> confirms that no fully autonomous cyberattack, carried out from start to finish without human involvement, has been documented.
NCSC chief Richard Horne pointed to years of neglected security:
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 “Vulnerabilities that have been tolerated for far too long can now be discovered and exploited at a scale that was once unimaginable.”
</blockquote>
Britain has committed <a href="https://www.gov.uk/government/news/chancellor-unveils-britains-ambitious-plan-for-ai" rel="noopener noreferrer nofollow">£60 million</a> to a Cyber Shield and £70 million to the NERV vulnerability-scanning centre. A new AI Cyber Security Centre of Excellence is planned for Manchester. The NCSC also considers China particularly well positioned to target strategic infrastructure with AI.
<h3 class="wp-block-heading" id="strong-ai-assisted-intrusions-are-already-documented-strong">AI-assisted intrusions are already documented</h3>
There are already signs of what faster attacks look like. In October, <a href="https://www.crowdstrike.com/en-us/blog/vapor-panda-uses-artex-to-scale-global-campaign/" rel="noopener noreferrer nofollow">CrowdStrike documented</a> China-linked Vapor Panda using ARTEX against more than 200 organisations across at least 14 countries. But it confirmed post-exploitation at only nine. Being targeted does not mean being breached, as <a href="https://www.cryptopolitan.com/ai-powered-hacking-goes-global-as-chinese-groups-use-artex-to-automate-cyber-espionage/" rel="noopener noreferrer nofollow">Cryptopolitan reported</a>.
Ransomware groups are also turning to AI to carry out attacks. <a href="https://www.sophos.com/en-us/blog/ai-used-in-aur0ra-ransomware-testing-and-execution" rel="noopener noreferrer nofollow">Sophos found</a> that Aur0ra operators used Cursor and other AI models to gain deeper access to compromised networks. The attackers provided stolen credentials and identified their targets. AI then helped them explore the networks and gain administrator privileges with little human supervision.
The results indicate the ability of AI to improve current hacking methods. This conclusion was also made by <a href="https://redcanary.com/threat-detection-report/trends/ai-cybersecurity/" rel="noopener noreferrer nofollow">Red Canary</a>, which states that attackers are able to hack systems more quickly in known ways using AI instead of developing new methods. According to <a href="https://www.crowdstrike.com/en-us/global-threat-report/" rel="noopener noreferrer nofollow">CrowdStrike’s 2026 threat report</a>, the problem is getting worse as the number of attacks carried out by hackers made possible by AI increased by 89% in 2025.
<h3 class="wp-block-heading" id="strong-who-sells-the-shovels-when-everyone-starts-digging-strong">Who sells the shovels when everyone starts digging</h3>
The growing threat comes as companies prepare to spend more on AI cybersecurity. <a href="https://www.gartner.com/en/newsroom/press-releases/2026-09-16-gartner-forecasts-worldwide-ai-spending-to-grow-49-point-5-percent-in-2026" rel="noopener noreferrer nofollow">Gartner forecasts</a> global spending of $51.3 billion in 2026, rising to $86 billion in 2027. Our calculations show that AI cybersecurity accounts for just 1.9% of total projected AI spending in 2026, up from 1.5% in 2025.
Cybersecurity concerns are growing worldwide. A <a href="https://www.weforum.org/publications/global-cybersecurity-outlook-2026/executive-summary-6efae97d74" rel="noopener noreferrer nofollow">World Economic Forum survey</a> found that 87% of respondents saw AI-related vulnerabilities as the fastest-growing cyber risk in 2025. Another 94% expected AI to have the greatest impact on cybersecurity in the coming year. These findings show how seriously organisations view the threat, although they do not measure actual attacks. Gartner’s spending forecasts were also released before the NCSC’s November 3 warning.
<figure class="wp-block-image size-large">
 <figure style="width: 100%" class="wp-caption alignnone"><img src="https://www.cryptopolitan.com/wp-content/uploads/2026/11/UKs-2028-AI-cyber-warning-1024x576.png" alt="NCSC warns AI-powered ransomware likely to hit UK infrastructure by 2028" width="1024" height="576">
 <figcaption>
 UK AI Cyber Threat Warning 2028: NCSC Ransomware Risks and Cybersecurity Spending
 </figcaption>
 </figure>
</figure>
<h3 class="wp-block-heading" id="strong-can-defenders-patch-faster-than-attackers-exploit-strong">Can defenders patch faster than attackers exploit</h3>
But spending more on cybersecurity does not automatically make critical infrastructure safer. Britain’s Cyber Shield and NERV centre could help organisations identify vulnerabilities sooner. Fixing them is another challenge. Operators still need money, skilled workers and time to upgrade ageing systems. The <a href="https://www.ncsc.gov.uk/report/artificial-intelligence-and-cyber-intrusion" rel="noopener noreferrer nofollow">NCSC warns</a> that older infrastructure could remain vulnerable as AI makes attacks faster and cheaper. For essential services already struggling with limited budgets, that creates a serious problem. The question now is whether they can fix vulnerabilities before attackers exploit them.
If you're reading this, you’re already ahead. <a href="https://www.cryptopolitan.com/newsletters/?utm_source=cp&amp;utm_medium=web&amp;utm_campaign=inlineAds" rel="noopener noreferrer nofollow">Stay there with our newsletter</a>.

NCSC warns AI-powered ransomware likely to hit UK infrastructure by 2028

Table of Contents

Cryptopolitan_News

Other articles published on Nov 3, 2026

Join our free newsletter for daily crypto updates!