# UK Warns of AI-Driven Ransomware Threats by 2028 National Cyber Security Centre outlines risks of autonomous malware and defensive AI infrastructure. - **Source:** [www.theregister.com - Articles (theregister.co.uk)](https://brifing.si/source/e6d4ec13-4d0e-407a-b96d-39609d76c3b1) - **Published:** 2026-11-03 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/40cfd74e-5a42-4a75-b626-cb4d148fbc83 ## Rising AI Malware Risks The National Cyber Security Centre warns that AI-powered malware will likely target critical infrastructure by 2028. While specific technical forms remain undisclosed, the agency highlights the dangerous repurposing of open source AI security tools. Attackers are already exploiting platforms like ARTEX to compromise entities including Microsoft 365 and registrar 123 Reg. ## Attribution and Geopolitical Complexity Future cyberattacks may involve autonomous entities operating beyond human control, capable of self-replication and independent action. This shift complicates geopolitical relations, as AI-driven automation makes it significantly harder to attribute attacks to specific state actors. The NCSC suggests that China may facilitate these tools, allowing adversaries to mask activities within digital noise. ## Project DROMOS Vulnerability Analysis The government has launched Project DROMOS to leverage AI in identifying security vulnerabilities within code repositories. During a four-week pilot, the initiative successfully uncovered hundreds of potential security issues, including critical vulnerabilities. This effort, led by the GC3 and the AI Security Institute, marks a shift toward proactive, AI-assisted defense mechanisms. ## Cyber Shield Defensive Framework Cyber Shield is an agentic defense system designed to bolster national resilience through automated data sharing. Scheduled for phased deployment over five years, the system provides defensive agents to participating organizations. The NCSC acknowledges that widespread adoption requires building trust, as automated defensive activity currently exceeds the risk tolerances of many organizations. ## Strategic Funding and Infrastructure The government has allocated substantial funding to secure national infrastructure, including £60 million for Cyber Shield and £70 million for the new NERV Centre. The NERV Centre will maintain a real-time understanding of vulnerabilities across the economy. Additionally, £40 million supports a National Agentic Security Unit tasked with managing uncontrolled bot activity. ## Manchester AI Security Hub A new NCSC-managed AI Cyber Security Centre is being established in Manchester to cultivate specialized expertise across government departments. This facility aims to bridge the gap in AI security knowledge, ensuring that public sector defenses remain robust against emerging threats. The initiative represents a long-term commitment to developing internal capabilities for national security. ## Urgent Call for Investment NCSC CEO Dr. Richard Horne emphasizes that organizations must stop treating technology security as a secondary concern. He urges leaders to invest with urgency, moving away from historical trends of cheap, inadequate tech implementations. Security and resilience must now be treated as fundamental requirements for all organizations regardless of their operational size. ## Scaling Organizational Resilience The NCSC recommends Cyber Essentials certification as a foundational step for all businesses. To encourage adoption, the government is offering a 75 percent discount on certification for micro, small, and medium-sized enterprises. Organizations are advised to scale their resilience efforts proportionally based on their specific complexity, risk profiles, and overall operational scale. ## Sources covering this story - https://www.theregister.com/security/2026/11/03/britain-on-notice-ai-powered-ransomware-attacks-to-arrive-by-2028/5307200 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._