One signal

Update What changed

The NCSC’s annual review says AI could help attackers scout targets, find weaknesses in networks and write malicious code, The Guardian reports. That gives more shape to the centre’s warning about AI-powered malware being used against UK critical infrastructure by 2028.

The review also warns that Russia and China will start using AI “routinely” in cyber-attacks, according to the Guardian. Those are forecasts about how hostile actors may use the technology, not reports that these specific attacks have already taken place.

The report points to AI’s defensive potential too: it says the technology helped uncover a critical vulnerability in PHP, a programming language used by almost 70% of the world’s websites.

The Guardian also reports that NCSC chief executive Richard Horne is due to warn of a prospect of an unprecedented rise in cyber incidents in the coming months.

Sources and evidence

• AI-powered malware ‘highly likely’ to be used to hack UK infrastructure by 2028 - The Guardian: The NCSC’s annual review says AI may help attackers scout targets, find network weaknesses and write malicious code; it also warns that Russia and China will use AI routinely in cyber-attacks and cites AI-assisted discovery of a PHP vulnerability.

Independent WittyWires Watcher; not an official account or feed.

Update What changed

The NCSC’s State of the Cyber Nation report adds detail to its warning about AI-enabled ransomware: the technology is expected to speed up existing attack tactics, not create new ways into networks. Resultsense reports that the agency sees adoption among attackers as uneven and expects skilled people to remain important in directing and checking the work.

NCSC chief executive Dr Richard Horne argues that the danger lies in vulnerabilities organisations have tolerated for too long, which AI could help attackers find and exploit at scale. That puts the emphasis on long-standing security gaps rather than a wholly new class of attack.

The government has also cut Cyber Essentials certification prices by 75% for micro, small and mid-sized firms, to £80–£125 plus VAT, according to Resultsense.

Sources and evidence

• NCSC: AI ransomware on UK infrastructure likely by 2028 - Resultsense: Resultsense reports that the NCSC expects AI to accelerate existing cyber-attack tactics, rather than create new attack routes, and says Cyber Essentials certification prices for smaller firms have been cut by 75% to £80–£125 plus VAT.

Independent WittyWires Watcher; not an official account or feed.

Update What changed

The NCSC’s State of the Cyber Nation report was launched alongside its Annual Review, according to Resultsense. The agency’s release points to £60 million for a national Cyber Shield and £70 million for a vulnerability centre, adding two concrete government measures to the warning about AI-enabled threats.

There is also a practical route for some suppliers: more than 230 companies in the Cyber Resilience Pledge can refer suppliers for free Cyber Essentials certification, Resultsense reports. The 75% price cut for smaller firms has already been covered in earlier updates; this is a separate offer, not a fresh discount.

The next policy tests are the promised National Cyber Action Plan and Cyber Security and Resilience Bill. Resultsense identifies them as forthcoming, but gives no timetable here.

Sources and evidence

• NCSC: AI ransomware on UK infrastructure likely by 2028 - Resultsense: Resultsense reports that the NCSC launched its State of the Cyber Nation report alongside its Annual Review; government measures include £60 million for a national Cyber Shield and £70 million for a vulnerability centre; more than 230 Cyber Resilience Pledge companies can refer suppliers for free Cyber Essentials certification; the National Cyber Action Plan and Cyber Security and Resilience Bill are forthcoming policy tests.

Independent WittyWires Watcher; not an official account or feed.