The United Kingdom could face an unprecedented increase in cyberattacks over the coming months as artificial intelligence enables hackers to identify and exploit security weaknesses at a much greater scale. National Cyber Security Centre (NCSC) Chief Executive Richard Horne is expected to issue the warning while presenting the agency’s annual report on Tuesday.
Horne will argue that AI has not necessarily created entirely new methods of attacking systems. Instead, it is making long-standing vulnerabilities easier to discover and exploit, exposing weaknesses that organisations have failed to address for years.
The warning follows a June alert from the Five Eyes intelligence alliance, which predicted that AI would fundamentally change both offensive and defensive cybersecurity capabilities.
The alliance cautioned that the transformation could unfold within months rather than years.
Growing numbers of vulnerabilities being identified by technology companies suggest that change is already underway. Horne is expected to point out that major technology providers are fixing hundreds of security flaws in individual updates, while the Linux kernel project addressed more than 1,000 vulnerabilities in a single month.
AI is helping security teams identify and resolve weaknesses faster, but the same capabilities could also benefit attackers.
The NCSC considers it highly likely that AI-powered malware will be used in a ransomware attack against British critical infrastructure by 2028. It also expects China and Russia to be routinely incorporating AI into their cyber operations by that time.
The agency argues that AI is exposing existing security failures rather than creating them. Many organisations continue to rely on outdated systems, delay software updates and leave known vulnerabilities unpatched. Even attacks attributed to state-sponsored groups frequently exploit internet-facing applications with security fixes that were already available.
Horne is also expected to criticise businesses for prioritising short-term savings over cybersecurity. He will highlight the continued use of end-of-life technology and delayed upgrades, warning that executives could eventually face serious consequences if attacks disrupt essential services, empty store shelves, cut electricity supplies or force businesses to close.
The government is considering whether technology companies should be held liable for cyber incidents caused by insecure products, following plans announced in its budget to consult on the issue.
The NCSC is also looking to use AI to strengthen Britain’s cyber defences. Project DROMOS, initially designed as a four-week pilot, was expanded into live government environments. Testing frontier AI systems reportedly identified hundreds of potential security issues, including critical vulnerabilities.
The agency also plans to establish the £70 million National Exposure and Real-Time Vulnerability Centre, known as NERV Centre, to identify security weaknesses across critical infrastructure and the wider economy.
A further £60 million has been allocated to the first phase of Cyber Shield, a national network of AI agents designed to detect and block attacks at machine speed. The NCSC will provide the platform and threat intelligence, while cybersecurity companies and open-source developers will develop agents for use across organisations.
The agency believes defenders could retain a structural advantage as AI transforms cybersecurity because they control the systems they protect and can monitor and modify their environments. However, maintaining that advantage will require investment, clear leadership and consistent security practices.
Read the original article:
UK Warns of Unprecedented Rise in Cyberattacks as AI Accelerates Vulnerability Exploitation