# UK Warned of Imminent Surge in Cyberattacks Due to Exploited Vulnerabilities

*Published November 4, 2026*
*Source: [https://therecord.media/uk-ncsc-predicts-rise-cyberattacks-coming-months](https://therecord.media/uk-ncsc-predicts-rise-cyberattacks-coming-months)*

## Executive Summary

The UK is preparing for a rise in cyberattacks due to the exploitation of long-standing vulnerabilities, accelerated by AI capabilities. The NCSC is investing in AI-driven defensive measures to counter these threats and safeguard critical infrastructure.

## Article

The United Kingdom is bracing for a significant increase in cyber incidents in the coming months, according to Richard Horne, the Chief Executive of the National Cyber Security Centre (NCSC). This surge is not attributed to new attack methods but rather to the exploitation of long-standing vulnerabilities, now being discovered and utilized at an unprecedented scale. The NCSC's annual report highlights that while artificial intelligence has not created these weaknesses, it is accelerating the identification and exploitation of existing vulnerabilities. Major technology providers are patching numerous vulnerabilities, with the Linux kernel project alone addressing over a thousand last month. This rapid pace of discovery is due to AI's capabilities in both offensive and defensive cybersecurity. Despite these advancements, the risk from attackers using AI remains substantial. The NCSC projects that AI-powered malware could target the UK's critical infrastructure by 2028, with nations like China and Russia expected to integrate AI into their cyber operations. Horne emphasizes that the persistence of vulnerabilities is due to years of technical debt and inadequate cybersecurity measures. Many breaches occur because patches for known vulnerabilities are not implemented promptly. In response, the UK government is exploring the possibility of holding technology companies accountable for breaches caused by insecure products. The NCSC is also investing in AI for defensive purposes, initiating projects like Project DROMOS to identify weaknesses and the £70 million NERV Centre aimed at safeguarding critical infrastructure. An additional £60 million is allocated to the Cyber Shield project, which will deploy AI agents for national cybersecurity defense. The NCSC believes that defenders will retain the upper hand if they invest in and adopt AI strategically, maintaining control over their environments.