In brief
Britain’s National Cyber Security Centre has issued a stark warning that an AI‑powered cyberattack on critical infrastructure could occur within two years, citing China as the most likely actor. The report highlights long‑standing supply‑chain weaknesses and draws parallels to recent attacks on European supermarkets, urging urgent defensive measures. Analysts note the heightened risk from Russia and Iran, and the potential for a ransomware surge by 2028.
Britain’s National Cyber Security Centre (NCSC) said on Tuesday that the nation should be prepared for an AI‑powered cyberattack on its critical national infrastructure within the next two years, naming China as the most likely adversary, Reuters reported.
Richard Horne, chief executive of the NCSC, said the warning is not about new kinds of attacks unleashed by artificial intelligence, but about “long‑lived vulnerabilities” that have been tolerated for too long and are now discoverable at scale.
“In the coming months, we face a real prospect of an unprecedented rise in the number of cyber incidents,” Horne said, adding that the advanced capabilities of AI would allow hostile actors to exploit these weaknesses more rapidly.
The annual NCSC report stated it was “highly likely” that AI‑powered malware would deliver a ransomware attack on critical infrastructure by 2028. It also warned that hostile use of AI would improve the scope and efficiency of attacks, urging immediate protective measures across supply chains.
Horne highlighted Russia’s sustained attempts to penetrate UK military networks and Iran’s global malicious operations, including attacks against the UK. “We know that China highly likely has the intent and is best positioned to use AI for operations against our critical national infrastructure and other strategic targets,” he said, noting that Moscow, Beijing, and Tehran had repeatedly denied such accusations.
Context and Recent Shocks
In the weeks before the report, a ripple of concern followed a cyberattack on hundreds of French supermarkets that forced refrigeration units to fail, exposing a blind spot in retail cybersecurity. The incident highlighted how quickly supply‑chain vulnerabilities can be turned into disruptive operational crises, a pattern mirrored in the UK’s own supermarkets that faced similar attacks earlier in the year.
These incidents underscore the NCSC’s claim that “doing tech on the cheap” has left many organisations in Britain exposed. The report calls for urgent action: “when food isn’t on shelves, lights aren’t on, businesses have gone under…that we saw the warning signs, understood the risks and still didn’t make the right choices.”
Security firms are stepping up to help fill the gaps. NCC Group, a global cyber‑security solutions provider, offers continuous surface, deep, and dark‑web monitoring, digital footprint reviews, and incident‑readiness services designed to reduce the risk, impact, and cost of attacks. While the group’s website currently displays a maintenance page, its service catalogue lists solutions for application security, penetration testing, and hardware and embedded systems hardening.
Industry analysts note that the NCSC’s warning adds urgency to the growing consensus that AI will radically change the threat landscape. The report’s focus on supply‑chain exploitation lines up with recent findings that many vendors in critical sectors still rely on legacy systems or unpatched software, giving attackers a larger attack surface to target with algorithmically generated exploits.
Open questions remain about how quickly public and private sectors can harden their systems and how government policy—such as mandatory reporting of critical incidents—should evolve to keep pace with AI‑driven tools. The NCSC’s speech later on Tuesday is expected to outline specific defensive frameworks, but the precise scope of protective measures remains to be detailed.
For now, the UK’s government faces a looming, potentially catastrophic new type of cyber threat. Whether capacity building in supply‑chain security and AI‑aware defenses will keep pace with hostile advances remains an ongoing concern that will shape the next few years of national cyber‑strategy.
