Short answer: The UK will face AI cyberattacks on critical infrastructure by 2028. Businesses must invest in cybersecurity to prevent major disruptions. Protect your systems by keeping them updated and backed up.
TL;DR
- AI will be used for cyberattacks in the UK by 2028.
- China and Russia are the main threats.
- Critical infrastructure like power plants could be targeted.
- Businesses need to invest in cybersecurity.
What happened?
The UK is expecting AI cyberattacks on critical infrastructure by 2028. This means that artificial intelligence will be used to target important systems like power plants and water facilities. The UK's National Cyber Security Center (NCSC) warns that businesses must invest in cybersecurity to prevent major disruptions. China and Russia are seen as the main threats, using AI to achieve their geopolitical goals. Basic cybersecurity measures like keeping systems updated and backed up are crucial.
- Vulnerability
- A mistake or weakness in software that an attacker can misuse.
Key facts
| Reported by | SecurityWeek |
|---|---|
| Date reported | 03 Nov 2026 |
How it works
AI can help hackers find and exploit old software vulnerabilities. AI tools can automate the discovery of weaknesses, allowing cybercriminals to launch large-scale attacks more efficiently. For example, AI can identify unpatched systems and then exploit them to gain unauthorized access.
Timeline
| Date | Event | Source |
|---|---|---|
| 2026-11-03 | Reported by SecurityWeek | SecurityWeek |
| 2026-11-06 | This Skillmate explainer published | Skillmate |
How to fix it
- Keep the operating system, browser and security software updated.
- Do not open unexpected attachments or install software from unofficial sources.
- Report suspicious files or pop-ups to your IT or security team.
How to detect it
Signs to watch for:
- Unknown programs starting at boot, or new scheduled tasks.
- Security software that was turned off without a reason.
- Unusual outbound connections from a workstation.
What is confirmed
- Reported by SecurityWeek
Why it matters
Companies must invest in cybersecurity to avoid service disruptions and financial losses.
Learn the skills behind this story
Want to understand attacks like this and defend against them? Join Skillmate cybersecurity training or practise hands-on in Skillmate Labs.
FAQ
What are the main cybersecurity challenges mentioned?
The main challenges are AI-powered cyberattacks on critical infrastructure by 2028, and state actors like China and Russia using AI for cyber operations.
How much does cybercrime cost UK organizations?
Cybercrime costs UK organizations nearly $20 billion annually.
What are the key threats mentioned by the UK NCSC?
The key threats are AI-assisted cyberattacks, particularly from China and Russia, and recent attacks on critical infrastructure like energy grids.
What are some basic cybersecurity measures recommended?
Basic measures include keeping devices updated, limiting administrator access, and backing up important data.
Related Skillmate posts
Sources
- UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028 (SecurityWeek)
How we wrote this: facts come from the sources above. An on-prem AI model drafted the plain-English parts and every sentence was checked against the sources; unsupported sentences were removed. MITRE mapping is our own judgement.
