INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

NCSC Chief Warns of AI Ransomware Threat to UK via Internet

| 2026-11-03 11:45 CRITICAL HIGH AI-ENABLED ATTACK · AUTONOMOUS RANSOMWARE & EXTORTION CRITICAL INFRASTRUCTURE & OT
JSON
Executive Summary
AI-generated
security Britain on notice: AI-powered ransomware attacks to arrive by 2028 Cyber agency warns critical infrastructure is a likely target as chief urges bosses to stop doing 'tech on the cheap' The UK's National Cyber Security Centre (NCSC) says AI-powered malware is "highly likely" to be a part of a future ransomware attack on Britain's critical national infrastructure between now and 2028. The warning accompanies its annual review and a separate assessment exploring how AI could change cyber threats over the next two years.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
CN FR GB IR PL RU US
governmentgovernment healthhealth aviationaviation
Incident Timeline
‎2026/11/03
The UK's National Cyber Security Centre has warned that AI-powered malware is "highly likely" to be a part of future ransomware attacks on Britain's critical national infrastructure between now and 2028.
organisation NCSC
AI-powered malware is strongly expected to feature in ransomware attacks on the UK’s critical national infrastructure by 2028, the country’s National Cyber Security Centre (NCSC) has warned.
…notice: AI-powered ransomware attacks to arrive by 2028 Cyber agency warns critical infrastructure is a likely target as chief urges bosses to stop doing 'tech on the cheap' The UK's National Cyber Security Centre (NCSC) says AI-powered malware is "highly likely" to be a part of a future ransomware attack on Britain's critical national infrastructure between now and 2028.
In a speech marking the publication of the NCSC’s annual cyber report , Horne said the leaders of businesses and organizations of all sizes who have “got away with tech on the cheap” will have to explain why “food isn’t on the shelves, lights aren’t on, businesses have gone under,” if they fail to invest in cybersecurity or update out-of-date technology.
organisation National Cyber Security Centre
AI-powered malware is strongly expected to feature in ransomware attacks on the UK’s critical national infrastructure by 2028, the country’s National Cyber Security Centre (NCSC) has warned.
…notice: AI-powered ransomware attacks to arrive by 2028 Cyber agency warns critical infrastructure is a likely target as chief urges bosses to stop doing 'tech on the cheap' The UK's National Cyber Security Centre (NCSC) says AI-powered malware is "highly likely" to be a part of a future ransomware attack on Britain's critical national infrastructure between now and 2028.
organisation Cyber Shield
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
The review also reaffirms plans for Cyber Shield, an agentic cyber defense system first teased in July.
organisation Cyber Essentials
More than 230 businesses have also signed up to the government's Cyber Resilience Pledge , which will allow participating organizations to refer SMEs in their supply chains for free Cyber Essentials certification, with selected businesses also receiving support from a free cyber security advisor.
Horne said organizations should treat the NCSC's Cyber Essentials certification as the starting point, but scale up resilience efforts in line with organizational size, complexity, and risk.
organisation Early Warning
He noted that his agency has issued 110,000 proactive notifications and Early Warning alerts to UK organizations in response to the PHP vulnerabilities.
organisation Challenge Fund
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
financial £60 m
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
financial $80.4 m
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
financial £25 m
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
financial $33.5 m
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
financial £70 m
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
financial $93.8 m
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
organisation Cyber Security
Alongside these investments, Cyber Security Minister, Baroness Lloyd, announced in a speech at the NCSC Annual Review event that the UK government is offering a 75% discount on Cyber Essentials certification for micro, small and medium-sized businesses, bringing the cost down to between £80 ($107) and £125 ($168), plus VAT.
organisation Cyber Essentials certification
Alongside these investments, Cyber Security Minister, Baroness Lloyd, announced in a speech at the NCSC Annual Review event that the UK government is offering a 75% discount on Cyber Essentials certification for micro, small and medium-sized businesses, bringing the cost down to between £80 ($107) and £125 ($168), plus VAT.
financial £80
Alongside these investments, Cyber Security Minister, Baroness Lloyd, announced in a speech at the NCSC Annual Review event that the UK government is offering a 75% discount on Cyber Essentials certification for micro, small and medium-sized businesses, bringing the cost down to between £80 ($107) and £125 ($168), plus VAT.
financial $107
Alongside these investments, Cyber Security Minister, Baroness Lloyd, announced in a speech at the NCSC Annual Review event that the UK government is offering a 75% discount on Cyber Essentials certification for micro, small and medium-sized businesses, bringing the cost down to between £80 ($107) and £125 ($168), plus VAT.
financial £125
Alongside these investments, Cyber Security Minister, Baroness Lloyd, announced in a speech at the NCSC Annual Review event that the UK government is offering a 75% discount on Cyber Essentials certification for micro, small and medium-sized businesses, bringing the cost down to between £80 ($107) and £125 ($168), plus VAT.
financial $168
Alongside these investments, Cyber Security Minister, Baroness Lloyd, announced in a speech at the NCSC Annual Review event that the UK government is offering a 75% discount on Cyber Essentials certification for micro, small and medium-sized businesses, bringing the cost down to between £80 ($107) and £125 ($168), plus VAT.
organisation Bridewell
Commenting on the report, Anthony Young, CEO at UK-based critical infrastructure security provider Bridewell, stressed that the NCSC’s two-year warning “feels generous.” “AI is already helping attackers, and vulnerability discovery is accelerating faster than many organizations can test and deploy patches.
organisation Microsoft 365
For example, researchers are increasingly seeing widespread abuse of ARTEX, an open source, Chinese-made AI red-teaming platform, in attacks on UK registrar 123 Reg , Microsoft 365 , and others since its launch in July.
organisation AI Cyber Security Centre
An undisclosed sum will also help establish a new NCSC-managed AI Cyber Security Centre in Manchester to develop AI security expertise across government.
organisation Legal Aid Agency
Related : UK Legal Aid Agency Hack Scope Widens
organisation Forensic Review
After Forensic Review Related : US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware Related : UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure
organisation National Cyber Security Center
That could include AI-powered malware for ransomware attacks as the technology will allow “vulnerabilities that have been tolerated for far too long” to be discovered and exploited “at a scale that was once unimaginable,” Richard Horne, the head of the U.K.’s National Cyber Security Center said.
organisation Horne
In a speech marking the publication of the NCSC’s annual cyber report , Horne said the leaders of businesses and organizations of all sizes who have “got away with tech on the cheap” will have to explain why “food isn’t on the shelves, lights aren’t on, businesses have gone under,” if they fail to invest in cybersecurity or update out-of-date technology.
organisation National Agentic Security Unit
The government has also committed £40m ($53.6m) to establishing a National Agentic Security Unit to monitor and respond to uncontrolled AI bots, alongside a further £24m ($32.1m) to strengthen public-sector cyber defenses using advanced AI technology.
financial £40 m
The government has also committed £40m ($53.6m) to establishing a National Agentic Security Unit to monitor and respond to uncontrolled AI bots, alongside a further £24m ($32.1m) to strengthen public-sector cyber defenses using advanced AI technology.
financial $53.6 m
The government has also committed £40m ($53.6m) to establishing a National Agentic Security Unit to monitor and respond to uncontrolled AI bots, alongside a further £24m ($32.1m) to strengthen public-sector cyber defenses using advanced AI technology.
financial £24 m
The government has also committed £40m ($53.6m) to establishing a National Agentic Security Unit to monitor and respond to uncontrolled AI bots, alongside a further £24m ($32.1m) to strengthen public-sector cyber defenses using advanced AI technology.
financial $32.1 m
The government has also committed £40m ($53.6m) to establishing a National Agentic Security Unit to monitor and respond to uncontrolled AI bots, alongside a further £24m ($32.1m) to strengthen public-sector cyber defenses using advanced AI technology.
Tactical Metrics
Metrics
financial
£60M
Deal Value
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
As reported last week , the government has set aside £60 million to fund the initiative, and an additional £70 million to support a new National Exposure and Real-Time Vulnerability (NERV) Centre.
Metrics
financial
$80.4M
Deal Value
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
Metrics
financial
£25M
Financial Impact
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
Metrics
financial
$33.5M
Financial Impact
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
Metrics
financial
£70M
Financial Impact
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
As reported last week , the government has set aside £60 million to fund the initiative, and an additional £70 million to support a new National Exposure and Real-Time Vulnerability (NERV) Centre.
Metrics
financial
$93.8M
Financial Impact
He also welcomed recent news that the British government has invested £60m ($80.4m) into developing the first phase of a national Cyber Shield, including a £25m ($33.5m)  Challenge Fund supporting UK AI and cyber security innovators, and £70m ($93.8m) for a new National Exposure and Real-Time Vulnerability (NERV) Centre.
Metrics
financial
£80
Cost
Alongside these investments, Cyber Security Minister, Baroness Lloyd, announced in a speech at the NCSC Annual Review event that the UK government is offering a 75% discount on Cyber Essentials certification for micro, small and medium-sized businesses, bringing the cost down to between £80 ($107) and £125 ($168), plus VAT.
Metrics
financial
$107
Cost
Alongside these investments, Cyber Security Minister, Baroness Lloyd, announced in a speech at the NCSC Annual Review event that the UK government is offering a 75% discount on Cyber Essentials certification for micro, small and medium-sized businesses, bringing the cost down to between £80 ($107) and £125 ($168), plus VAT.
Metrics
financial
£125
Financial Impact
Alongside these investments, Cyber Security Minister, Baroness Lloyd, announced in a speech at the NCSC Annual Review event that the UK government is offering a 75% discount on Cyber Essentials certification for micro, small and medium-sized businesses, bringing the cost down to between £80 ($107) and £125 ($168), plus VAT.
Metrics
financial
$168
Financial Impact
Alongside these investments, Cyber Security Minister, Baroness Lloyd, announced in a speech at the NCSC Annual Review event that the UK government is offering a 75% discount on Cyber Essentials certification for micro, small and medium-sized businesses, bringing the cost down to between £80 ($107) and £125 ($168), plus VAT.
Metrics
financial
£120M
Deal Value
These announcements , made on October 24, come alongside an additional £120m ($160.8m) investment in the AI Security Institute (AISI) and the establishment of new AI Cyber Security Centre of Excellence, ran by the NCSC in Manchester to provide world leading AI security expertise within government.
Metrics
financial
$161M
Deal Value
These announcements , made on October 24, come alongside an additional £120m ($160.8m) investment in the AI Security Institute (AISI) and the establishment of new AI Cyber Security Centre of Excellence, ran by the NCSC in Manchester to provide world leading AI security expertise within government.
Metrics
financial
£40M
Financial Impact
The government has also committed £40m ($53.6m) to establishing a National Agentic Security Unit to monitor and respond to uncontrolled AI bots, alongside a further £24m ($32.1m) to strengthen public-sector cyber defenses using advanced AI technology.
Per last week's budget, £40 million will fund a National Agentic Security Unit responsible for responding to uncontrolled bots and other agentic mishaps, and £24 million was assigned to strengthen public sector defenses.
Metrics
financial
$53.6M
Financial Impact
The government has also committed £40m ($53.6m) to establishing a National Agentic Security Unit to monitor and respond to uncontrolled AI bots, alongside a further £24m ($32.1m) to strengthen public-sector cyber defenses using advanced AI technology.
Metrics
financial
£24M
Financial Impact
The government has also committed £40m ($53.6m) to establishing a National Agentic Security Unit to monitor and respond to uncontrolled AI bots, alongside a further £24m ($32.1m) to strengthen public-sector cyber defenses using advanced AI technology.
Per last week's budget, £40 million will fund a National Agentic Security Unit responsible for responding to uncontrolled bots and other agentic mishaps, and £24 million was assigned to strengthen public sector defenses.
Metrics
financial
$32.1M
Financial Impact
The government has also committed £40m ($53.6m) to establishing a National Agentic Security Unit to monitor and respond to uncontrolled AI bots, alongside a further £24m ($32.1m) to strengthen public-sector cyber defenses using advanced AI technology.
Metrics
data_breach
14
New Security Ambassadors
The government also announced 14 new Software Security Ambassadors, including Fortinet, Thales, Capgemini and Zscaler, which will work with the government to promote secure software development and encourage wider adoption of its Software Security Code of Practice.
Metrics
infrastructure
‎Microsoft 365
Affected Product
For example, researchers are increasingly seeing widespread abuse of ARTEX, an open source, Chinese-made AI red-teaming platform, in attacks on UK registrar 123 Reg , Microsoft 365 , and others since its launch in July.
Metrics
financial
$260M
Financial Loss
In 2025, the carmaker Jaguar Land Rover suffered more than $260 million in direct losses following a cyberattack which also hit suppliers and dented the U.K. economy.
Metrics
financial
$20B
Cost
In the U.K., malicious cyber activity is costing organizations almost $20 billion every year, the NCSC said.
Intelligence Sources
SecurityWeek 2026-11-03
The Register - CSO 2026-11-03
Infosecurity-Magazine 2026-11-03