# UK Warns of AI-Driven Cyber Threats to Critical Infrastructure by 2028

*Published November 4, 2026*
*Source: [https://www.securityweek.com/uk-cyber-chief-says-the-uk-will-face-ai-cyberattacks-on-critical-infrastructure-by-2028/](https://www.securityweek.com/uk-cyber-chief-says-the-uk-will-face-ai-cyberattacks-on-critical-infrastructure-by-2028/)*

## Executive Summary

The UK is expected to face AI-driven cyberattacks targeting critical infrastructure by 2028, driven by state and criminal actors such as China and Russia. The National Cyber Security Center urges organizations to invest in robust cybersecurity measures to prevent potential disruptions and protect national security.

## Article

The United Kingdom is bracing for a wave of cyberattacks targeting its critical infrastructure, likely driven by artificial intelligence, by the year 2028. This warning comes from Richard Horne, the head of the UK’s National Cyber Security Center (NCSC), who highlighted the increasing use of AI by both criminals and state actors like China and Russia. AI-powered malware could be used for ransomware attacks, exploiting long-standing vulnerabilities at an unprecedented scale.

During a speech accompanying the release of the NCSC’s annual cyber report, Horne emphasized the need for businesses of all sizes to bolster their cybersecurity measures. He warned that those relying on outdated technology might face dire consequences, such as disrupted supply chains or compromised services. The report highlighted Chinese cyber activities as the most sophisticated challenge for the UK, noting that both China and Russia use AI to further their geopolitical objectives while Iran targets individuals opposed to its regime.

The use of AI is expected to enhance existing cyber tactics rather than uncover entirely new vulnerabilities. However, the efficiency and scale of these operations will likely increase. A recent example was the AI-assisted identification of security flaws in a programming language essential to 70 percent of global websites, potentially allowing unauthorized access to web servers.

Horne also pointed out the critical role technology plays in automating essential services, from electricity management to water facilities. Recent cyberattacks on French supermarket refrigeration systems illustrate the vulnerability of civilian infrastructure. In Europe, Russia’s FSB has been linked to an attack on Poland’s energy grid in 2025, which could have left half a million people without power in winter.

The NCSC estimates that malicious cyber activities cost UK organizations nearly $20 billion annually. A notable incident in 2025 saw Jaguar Land Rover suffer over $260 million in losses due to a cyberattack. Anne Keast-Butler, director of GCHQ, stressed the importance of proactive cybersecurity measures to protect not only individual organizations but also national security. Basic steps such as updating devices, restricting system access, and backing up data are advised by the NCSC to mitigate these risks.