UK cyber chief warns AI-driven strikes on critical infrastructure imminent

The United Kingdom’s National Cyber Security Centre expects an AI-powered cyberattack on critical national infrastructure within the next two years. Richard Horne, the center’s chief executive, stated on Tuesday that the threat is not theoretical but a matter of timing.

Horne, who leads the NCSC as part of the GCHQ spy agency, identified China as the best-equipped nation to conduct these operations. He described Chinese activity as the most sophisticated and sustained cyber challenge facing the UK. The center’s annual report assigns a high probability to a ransomware attack involving AI malware hitting critical infrastructure by 2028.

The warning follows recent hacking incidents at supermarkets across Europe, which exposed gaps in IT systems. Horne argued that organizations have spent decades prioritizing cost over security in technology purchases. He called this practice of doing tech on the cheap a primary reason for current vulnerability.

In a speech delivered Tuesday, Horne clarified that AI has not created new attack methods. Instead, it allows existing vulnerabilities to be found and exploited at a scale previously impossible. He noted that hostile actors are using AI to increase the efficiency and scale of their operations.

The NCSC identified specific state threats. Horne said Russia is making sustained attempts to penetrate UK military networks. He added that Iran is conducting malicious cyber operations globally, targeting the UK and individuals it views as threats. Moscow, Beijing, and Tehran have previously denied similar accusations of malevolent cyber actions.

The center urged immediate action from private and public sectors. Horne stated that organizations must either fix their weaknesses now or be prepared to explain their inaction. He warned that if lights go out, food shelves empty, and businesses fail, the public will ask why warning signs were ignored despite known risks.

The report marks a shift in how UK authorities assess digital threats. The focus has moved from preventing intrusions to managing the speed at which AI can identify and weaponize long-standing technical flaws in critical supply chains.