# UK Warns of AI-Driven Ransomware Threats by 2028 National Cyber Security Centre outlines risks of autonomous malware and defensive AI infrastructure. - **Source:** [www.theregister.com - Articles](https://www.theregister.com) - **Published:** 2026-11-03 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/48bd0423-f1be-4907-9fce-62cff634de41 ## Escalating AI Cyber Threats The UK's National Cyber Security Centre warns that AI-powered malware will likely target critical infrastructure by 2028. While specific technical forms remain undisclosed, the agency highlights the dangerous repurposing of open-source security tools. Attackers are already exploiting platforms like ARTEX to conduct malicious operations against major registrars and Microsoft 365 environments. ## Attribution and Autonomous Risks Future cyber threats involve autonomous entities capable of self-replication without human intervention. The NCSC notes that widespread AI adoption complicates attribution, allowing state actors to hide activities within digital noise. This shift creates significant geopolitical tension, as nations can more easily deny involvement in sophisticated, AI-driven attacks on foreign critical infrastructure. ## Defensive AI Pilot Programs Project DROMOS, launched earlier this year by the Government Cyber Coordination Centre, utilizes AI to identify vulnerabilities within government code repositories. The pilot successfully uncovered hundreds of potential security issues, including critical flaws. This initiative serves as a foundational step toward integrating automated defensive measures into broader national operational environments. ## Cyber Shield Implementation Strategy The NCSC plans to deploy Cyber Shield, an agentic defense system, in stages over the next five years. This initiative provides defensive agents to participating organizations to bolster national resilience. However, the agency acknowledges that automated defense currently exceeds many organizations' risk tolerances, necessitating efforts to build trust before mainstream adoption. ## Government Funding and Infrastructure The UK government has allocated £60 million for Cyber Shield and £70 million for the new National Exposure and Real-Time Vulnerability Centre. Additionally, £40 million supports a National Agentic Security Unit to manage uncontrolled bots. A new Manchester-based AI Cyber Security Centre will further develop specialized expertise across the public sector. ## Urgent Investment in Resilience NCSC CEO Dr. Richard Horne emphasizes that organizations must move away from low-cost security models. He urges leaders to treat resilience as a fundamental requirement rather than an afterthought. Organizations are encouraged to use Cyber Essentials certification as a starting point, scaling their defensive efforts according to their specific size and risk. ## Support for Smaller Businesses To improve national security posture, the government is offering a 75 percent discount on Cyber Essentials certification for micro, small, and medium-sized businesses. This incentive aims to lower barriers to entry for smaller entities, ensuring that even organizations with limited resources can establish a baseline of security against evolving AI-driven cyber threats. ## Strategic National Security Outlook The integration of AI into both offensive and defensive cyber operations marks a critical turning point for national security. By proactively funding vulnerability centers and agentic defense units, the UK aims to mitigate risks posed by autonomous attackers. Long-term resilience depends on collective investment and the systematic adoption of advanced security frameworks. ## Sources covering this story - https://www.theregister.com/security/2026/11/03/britain-on-notice-ai-powered-ransomware-attacks-to-arrive-by-2028/5307200 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._