- The UK NCSC warned AI could accelerate ransomware attacks on critical infrastructure by 2028
- The NCSC received 1,831 reports of cyberattacks during its latest reporting year
- China, Russia and other nation-state actors are “highly likely” to expand their use of AI-enabled cyber capabilities
The U.K. National Cyber Security Centre, or NCSC, has warned that the country’s critical national infrastructure could face increased ransomware threats involving artificial intelligence-powered malware by 2028, according to its State of the Cyber Nation 2026 report.
The NCSC, part of the Government Communications Headquarters, said Tuesday that hostile actors are “highly likely” to integrate AI to scale and streamline cyber operations. Potential threats include ransomware attacks, social engineering campaigns and vulnerability exploitation.
What Did the NCSC Chief Highlight About the UK’s Cybersecurity Weaknesses?
In his speech launching the NCSC’s annual review, CEO Dr. Richard Horne warned that years of underinvestment in technology and cybersecurity have left U.K. organizations and supply chains vulnerable to increasingly sophisticated attacks.
Horne said organizations have historically prioritized cost efficiency over security, allowing end-of-life systems to remain operational, postponing necessary upgrades and procuring technology services based primarily on price rather than security and resilience. He also highlighted inadequate monitoring and excessive access privileges as persistent weaknesses.
What Does the NCSC’s Latest Cyber Incident Data Reveal?
During the reporting period from Sept. 1, 2025, through Aug. 31, 2026, the agency’s Incident Management Team received 1,831 reports of cyberattacks affecting organizations across the country.
Of these, 337 incidents required direct support from the team, including 80 classified as nationally significant. The NCSC also used its Early Warning service to notify approximately 8,500 organizations about potential compromises involving their systems.
For large organizations, 88 percent of incidents originated from four initial access methods: exploitation of external public-facing applications, phishing, misuse of valid accounts and exploitation of external remote services.
Which Nation-State Actors Pose the Greatest Cybersecurity Risks?
The agency identifies China as the U.K.’s most sophisticated and sustained adversarial cyber challenge, citing the country’s technological development and ability to use cyber capabilities to acquire information and advance strategic objectives.
According to the report, Russia represents the U.K.’s most audacious cyberthreat, while Iran-linked groups continue to demonstrate capabilities for large-scale and indiscriminate disruption.
By 2028, the agency considers it highly likely that China, Russia and other nation-states will routinely use AI cyber capabilities to advance their geopolitical objectives.
What Is the Economic Impact of Cyberattacks on UK Organizations?
The NCSC’s assessment also highlights the financial and operational consequences of cyber incidents affecting businesses and critical industries.
According to U.K. government research cited in the annual review, malicious cyber activity costs U.K. organizations an estimated $19.8 billion annually.
The agency points to the 2025 cyberattack affecting Jaguar Land Rover as an example of how an incident involving one major manufacturer can disrupt a broader industrial supply chain.
What Is the UK Government Investing in Cyber Defense?
The warning comes as the U.K. government advances initiatives to strengthen national security and protect essential services against cyber threats.
Chancellor of the Exchequer John Healey recently announced investments in October intended to expand the country’s AI and cybersecurity capabilities, allocating approximately $80 million to the National Cyber Shield and $94 million to the National Exposure and Real-Time Vulnerability Centre. The NCSC will lead the establishment of the AI Cyber Security Centre of Excellence in Manchester to develop advanced AI security expertise within government.
Security Minister Dan Jarvis has also called for greater collaboration between government and technology companies to develop AI-powered cyber defense capabilities. In April, Jarvis introduced the voluntary Cyber Resilience Pledge, which encourages companies to make cybersecurity a board-level priority, enroll in the NCSC’s Early Warning program and require Cyber Essentials certification across their supply chains.
How Is the UK Expanding AI Across Defense and Government?
Beyond cybersecurity, the U.K. is pursuing broader AI initiatives involving government procurement, military modernization and domestic technology development.
In September, the government launched four competitions under its $135 million Sovereign AI research and development procurement scheme.
The U.K. is also accelerating the operational deployment of AI across its armed forces through the Rapid AI Delivery Taskforce, or Taskforce RAID, established in June. Its initial priorities include machine-augmented intelligence fusion, automated operational planning, operations in denied and degraded environments, and AI-enabled swarms.
