NCSC annual review warns AI-powered malware is likely to hit UK infrastructure by 2028
Published · Updated
What happened
The National Cyber Security Centre released its 2026 Annual Review on 2026-11-03 and stated that AI-powered malware is highly likely to be used in a ransomware attack on UK critical national infrastructure by 2028. The review says AI is lowering barriers for cyber operators and increasing the pace and scale of hostile activity, while also pointing to risks from employees using unsanctioned AI tools inside organisations.
Why it matters
A same-day threat assessment from the UK's cyber agency can change departmental priorities, board-level risk decisions and operator guidance for sectors that run essential services. It gives public and private owners of infrastructure an official basis for accelerating controls on identity, patching, network segregation, backup recovery and AI tool governance.
The National Cyber Security Centre published its 2026 Annual Review on 2026-11-03, including a new official assessment that AI-powered malware is highly likely to be used in a ransomware attack on UK critical national infrastructure by 2028. The review also highlights wider risks from AI-enabled intrusion and the use of ungoverned "shadow AI" inside organisations. The publication is a discrete same-day government threat assessment that can shape near-term resilience priorities across energy, health, transport and finance.
Watch for
Cabinet Office or DSIT publication by 2026-11-06 of updated resilience guidance or a named cross-government action following the NCSC review NCSC advisory or blog by 2026-11-06 that sets sector-specific controls for AI use, ransomware resilience, or shadow-AI governance Ofgem, NHS England, the Department for Transport, or the FCA acknowledgement by 2026-11-06 of review findings with new compliance expectations for regulated operators National Audit Office or Parliamentary committee notice by 2026-11-06 opening evidence requests or hearings on cyber resilience of critical national infrastructure
Sources
Researched and written by AI from the sources listed, under published rules. How V³ Aware is made