UK Warns of AI-Driven Ransomware Threats by 2028
National Cyber Security Centre outlines risks of autonomous malware and defensive AI infrastructure.
1Escalating AI Cyber Threats
The UK's National Cyber Security Centre warns that AI-powered malware will likely target critical infrastructure by 2028. While specific technical forms remain undisclosed, the agency highlights the dangerous repurposing of open-source security tools. Attackers are already exploiting platforms like ARTEX to conduct malicious operations against major registrars and Microsoft 365 environments.
2Attribution and Autonomous Risks
Future cyber threats involve autonomous entities capable of self-replication without human intervention. The NCSC notes that widespread AI adoption complicates attribution, allowing state actors to hide activities within digital noise. This shift creates significant geopolitical tension, as nations can more easily deny involvement in sophisticated, AI-driven attacks on foreign critical infrastructure.
3Defensive AI Pilot Programs
Project DROMOS, launched earlier this year by the Government Cyber Coordination Centre, utilizes AI to identify vulnerabilities within government code repositories. The pilot successfully uncovered hundreds of potential security issues, including critical flaws. This initiative serves as a foundational step toward integrating automated defensive measures into broader national operational environments.
4Cyber Shield Implementation Strategy
The NCSC plans to deploy Cyber Shield, an agentic defense system, in stages over the next five years. This initiative provides defensive agents to participating organizations to bolster national resilience. However, the agency acknowledges that automated defense currently exceeds many organizations' risk tolerances, necessitating efforts to build trust before mainstream adoption.
5Government Funding and Infrastructure
The UK government has allocated £60 million for Cyber Shield and £70 million for the new National Exposure and Real-Time Vulnerability Centre. Additionally, £40 million supports a National Agentic Security Unit to manage uncontrolled bots. A new Manchester-based AI Cyber Security Centre will further develop specialized expertise across the public sector.
6Urgent Investment in Resilience
NCSC CEO Dr. Richard Horne emphasizes that organizations must move away from low-cost security models. He urges leaders to treat resilience as a fundamental requirement rather than an afterthought. Organizations are encouraged to use Cyber Essentials certification as a starting point, scaling their defensive efforts according to their specific size and risk.
7Support for Smaller Businesses
To improve national security posture, the government is offering a 75 percent discount on Cyber Essentials certification for micro, small, and medium-sized businesses. This incentive aims to lower barriers to entry for smaller entities, ensuring that even organizations with limited resources can establish a baseline of security against evolving AI-driven cyber threats.
8Strategic National Security Outlook
The integration of AI into both offensive and defensive cyber operations marks a critical turning point for national security. By proactively funding vulnerability centers and agentic defense units, the UK aims to mitigate risks posed by autonomous attackers. Long-term resilience depends on collective investment and the systematic adoption of advanced security frameworks.
Original article: www.theregister.com - Articles — UK Warns of AI-Driven Ransomware Threats by 2028