Science & Tech · Cybersecurity · 4 hrs ago
UK cyber chief warns of sharp rise in attacks in coming months
The UK’s cyber chief warns attacks could rise sharply in the coming months.
The National Cyber Security Centre says artificial intelligence is making it possible to find and exploit software weaknesses at a much greater scale.
The technology has not created these weaknesses; many stem from old systems, delayed upgrades and basic protections that were not put in place.
Technology providers are fixing hundreds of vulnerabilities in some updates, and the Linux kernel project patched more than a thousand last month.
The NCSC says AI-powered malware is highly likely to be used in a ransomware attack on UK critical infrastructure by 2028, while China and Russia are expected to routinely use AI in cyber operations by then.
The UK government is testing AI to find weaknesses in its own networks as a way to strengthen cyber defences.
The head of the UK’s National Cyber Security Centre will warn of an unprecedented rise in cyber incidents in the coming months.
Richard Horne says AI is helping vulnerabilities be found and exploited at a scale that was previously unimaginable.
The NCSC says basic security weaknesses and delayed software updates are contributing to the risk.
It assesses that AI-powered malware is highly likely to be used in a ransomware attack on Britain’s critical infrastructure by 2028.
The NCSC also warns that China and Russia will routinely use AI in cyber operations by 2028.
- Who
- Richard Horne, chief executive of the UK’s National Cyber Security Centre, will issue the warning.
- What
- He will warn of a possible unprecedented rise in cyber incidents in the coming months, as AI helps vulnerabilities be found and exploited at scale.
- When
- The warning is due on Tuesday, 3 November 2026. The rise is expected in the coming months.
- Where
- Britain.
- Why
- AI is enabling vulnerabilities to be discovered and exploited at greater scale, while many organisations have delayed basic protections and software updates.
This story does not have two clearly opposing sides.
The NCSC publicly called for a strategic policy agenda after efforts to address insecure technology had stalled.
The Five Eyes intelligence alliance warned that AI would fundamentally transform offensive and defensive cyber capabilities.
The Linux kernel project patched more than a thousand vulnerabilities, according to Horne’s planned remarks.
Horne is due to launch the NCSC’s annual report and warn of a possible rise in cyber incidents.
The NCSC assesses that AI-powered malware is highly likely to be used in a ransomware attack on Britain’s critical infrastructure.
- Warning
- An unprecedented rise in cyber incidents in the coming months
- Speaker
- Richard Horne, NCSC chief executive
- Linux kernel
- More than 1,000 vulnerabilities patched last month
- Critical infrastructure
- AI-powered malware use in a ransomware attack by 2028 is assessed as highly likely
- China and Russia
- Expected to routinely use AI in cyber operations by 2028
What people are saying
The timeline is not years, it is months
For decades, we have collectively got away with doing tech on the cheap
AI has the potential to be one of the greatest opportunities in cyber defence