SecOraLens
CriticalRansomware

NCSC Warns AI Could Accelerate Ransomware Attacks on Critical Infrastructure

Cyber Security News·Source published ·1 min read

What happened?

The UK’s National Cyber Security Center handled 80 nationally significant cyber incidents during its latest reporting year, warning that artificial intelligence is making attacks faster, cheaper and easier to carry out. Its 2026 Annual Review records 1,831 attack reports, with 337 incidents requiring support from its Incident Management Team. The review covers 1 September 2025 to 31 August 2026, marking the NCSC’s tenth year as part of GCHQ.

Key details

  • NCSC handled 80 nationally significant incidents in latest reporting year.
  • AI helps attackers research targets and produce convincing social engineering messages.
  • 88% of incidents across large organizations involved four initial access routes.
  • AI-powered malware likely to feature in ransomware attack against UK critical national infrastructure by 2028.
  • China, Russia and other states expected to routinely use AI cyber capabilities by 2028.
  • Employees using unapproved AI services can expose sensitive company information.
  • AI-assisted flaw discovery could create growing workload of security updates.

Affected

  • Large organizations covered by NCSC incident data.
  • UK critical national infrastructure.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.