UK Cyber Chief Warns AI Attacks Will Target Infrastructure by 2028

The United Kingdom expects to face artificial intelligence-driven cyberattacks on critical infrastructure by 2028, according to a warning issued Tuesday by the head of the National Cyber Security Center. Richard Horne stated that criminals and foreign states, specifically China and Russia, are increasingly integrating AI into their cyber activities to target essential services.

The NCSC annual report identifies Chinese cyber operations as the most sophisticated and sustained challenge currently facing the country. The document notes that both Russia and China plan to use AI routinely to achieve geopolitical objectives. Russia is conducting cyber campaigns designed to stay below the threshold of armed conflict, while Iran is targeting individuals who threaten its regime.

Horne warned that AI will allow attackers to discover and exploit vulnerabilities that have been tolerated for too long at a previously unimaginable scale. He cautioned that business leaders who have relied on cheap, outdated technology will need to explain failures in power, food supply, and business continuity if they do not invest in better security. The report suggests AI will likely enhance and scale existing tactics rather than create entirely new types of vulnerabilities.

Recent events have demonstrated the speed at which AI can identify weaknesses. Last week, global governments and corporations released urgent security updates after AI-assisted tools found two critical flaws in a programming language used by 70% of websites. These flaws could allow unauthorized remote access to web servers without passwords.

The financial impact of hostile cyber activity in the UK is substantial, costing organizations nearly $20 billion annually. In 2025, Jaguar Land Rover lost more than $260 million directly from a cyberattack that also disrupted its supply chain and affected the broader UK economy. The NCSC highlighted recent attacks on refrigeration systems in French supermarkets as an example of how easily civilian infrastructure can be exploited.

The threat is already active in Europe. UK and EU officials attribute a December 2025 attack on Poland’s energy grid to Russia’s FSB security service. Had that attack succeeded, 500,000 people would have lost electricity during the winter. Horne noted that technology underpins vital physical processes, including electricity switching, water sluice gates, dam operations, and manufacturing lines.

Anne Keast-Butler, director of GCHQ, emphasized that cybersecurity is now part of the front line of national defense. She called on every UK organization to take immediate action to protect customers and livelihoods. The NCSC recommends basic measures such as keeping devices updated, limiting administrator access, and backing up important files.