UK National Cyber Security Centre Warns of AI-Powered Attacks on Critical Infrastructure by 2028
UK NCSC head Richard Horne states that hackers are using AI to automate the discovery and exploitation of legacy industrial control system vulnerabilities, targeting physical facilities like supermarket cooling units.
Richard Horne, head of the UK's National Cyber Security Centre (NCSC), warned on Tuesday that the United Kingdom could face targeted cyberattacks on its critical infrastructure powered by artificial intelligence by 2028. He noted that criminals and state actors are increasingly leveraging AI to scale and enhance their cyber operations.
Horne specifically cited recent incidents where hackers raised temperatures in supermarket freezers across Europe, causing food to thaw. These attacks exposed significant risks in Operational Technology (OT). While not directly initiated by complex AI, they exploited outdated control systems and default passwords. However, AI tools can now automatically scan for and discover these "long-tolerated vulnerabilities," exploiting them at a previously unimaginable scale.
The report highlighted that Chinese cyber activity remains the most complex and persistent threat to the UK, with both Russia and China routinely using AI to pursue geopolitical goals. Beyond digital systems, AI is being used to augment existing tactics such as ransomware. Horne urged companies to stop relying on cheap, obsolete technology and demanded explanations for why they continue operating without adequate cybersecurity investment, warning of potential service disruptions or bankruptcy.