NCSC UK Warns of Escalating AI-Driven Cyber Threats Through 2028
The UK's National Cyber Security Centre (NCSC) has released a critical assessment projecting a significant increase in AI-enabled cyber intrusions by 2028, with nation-states poised to leverage these capabilities for geopolitical aims.
The UK's National Cyber Security Centre (NCSC) has issued a stark warning regarding the escalating threat posed by artificial intelligence in cyber intrusions. Their latest assessment, "Artificial intelligence and cyber intrusion," outlines projected trends and potential scenarios through 2028, emphasizing the growing sophistication and scale of AI-driven attacks.
The report highlights that by 2028, it is highly likely that Russia, China, and other nation-states will routinely employ AI-cyber capabilities to achieve geopolitical objectives. This will translate into an increased volume and speed of sophisticated cyber attacks targeting the UK. The NCSC's analysis suggests that AI will significantly lower the barrier to entry for complex cyber operations, enabling adversaries to act with less caution due to the reduced cost of replacing compromised access.
Furthermore, the assessment predicts that many systems will remain vulnerable to AI-cyber tools capable of identifying and exploiting weaknesses. This includes a likely application of AI-cyber capabilities against known vulnerabilities in critical national infrastructure (CNI) legacy technology. The increasing deployment of AI tools within CNI itself is also expected to create new attack surfaces that threat actors will exploit.
A particularly concerning prediction is the high likelihood that between now and 2028, AI-powered malware will be used in a ransomware attack against UK CNI. This underscores the urgent need for enhanced defenses and proactive strategies to protect essential services.
The NCSC identifies five key drivers influencing this evolving threat landscape: geopolitical tensions, the UK's CNI cyber defense posture, the pace of AI technology development, the availability of AI-cyber capability, and the development of an AI-literate workforce. These factors collectively shape the potential trajectories of AI-driven cyber threats.
Three plausible scenarios are presented: a baseline scenario of increased global threat, a pessimistic scenario where AI-cyber capability proliferation far outstrips the UK's defensive abilities, and an optimistic scenario where AI development slows, allowing for robust countermeasures. The baseline scenario, considered highly likely, sees nation-states leveraging AI for power projection and strategic objectives, with state-sponsored actors from China and Russia remaining primary threats.
While defensive AI tools are emerging, the report cautions that their implementation often lags behind offensive capabilities. The NCSC stresses the need for organizations to adapt their internal patching and testing processes to keep pace with the accelerating discovery of vulnerabilities. The report serves as a critical call to action for governments and organizations to invest in cyber resilience and develop proactive strategies to counter the growing AI-enabled cyber threat.