UK will face AI cyberattacks on critical infrastructure by 2028, official says

In a bustling supermarket in downtown Rochester, a mother stands in the refrigerated aisle, her cart filled with fresh produce and dairy. She glances at the temperature display on the fridge, contemplating the safety of her family's food supply. Little does she know, the very systems designed to keep her groceries fresh are under threat from an invisible enemy—cybercriminals wielding artificial intelligence. This unsettling reality was underscored by Richard Horne, the head of the UK's National Cyber Security Center, who recently warned that the United Kingdom will likely face AI-driven cyberattacks on its critical infrastructure by 2028.

The Growing Threat of AI Cyberattacks

In his speech marking the release of the annual cyber report, Horne painted a vivid picture of a future where AI-powered malware could exploit vulnerabilities that have long been tolerated in critical systems. He stated that these attacks could disrupt essential services, leaving grocery shelves bare and lights dimmed. The chilling prospect of AI-enhanced cyberattacks is not just a distant concern; it is a looming reality that organizations must confront now.

According to Horne, the sophistication of cyber threats has increased dramatically, particularly from state actors like China and Russia. He emphasized that these adversaries are not just using traditional methods but are increasingly leveraging AI to enhance their operations. The UK is already witnessing the ramifications of such threats, as highlighted by a recent incident in France where hackers targeted refrigeration units, raising temperatures and causing food to thaw. The implications of such attacks extend far beyond individual businesses; they threaten the very fabric of society.

The report underscores the urgent need for organizations across the UK to invest in cybersecurity. Horne warned that leaders who have “got away with tech on the cheap” will have to answer for any failures that lead to widespread disruptions. The message is clear: the time for complacency is over. Organizations must prioritize cybersecurity to protect their customers and the critical infrastructure that supports daily life.

Understanding the Vulnerabilities

As Horne elaborated on the vulnerabilities present in many operational technologies, he pointed to outdated systems that remain connected to the internet with default passwords. These weaknesses have become a playground for cybercriminals, enabling them to exploit long-standing gaps in security. The recent attacks on refrigeration systems in France serve as a stark reminder of how easily these vulnerabilities can be exploited, compromising not just businesses but also public safety.

The NCSC reported that malicious cyberactivity is costing organizations in the UK nearly $20 billion annually. This staggering figure highlights the importance of proactive measures to safeguard against potential attacks. In 2025, the car manufacturer Jaguar Land Rover faced losses exceeding $260 million due to a cyberattack that disrupted operations and affected suppliers, sending ripples through the UK economy.

Horne's insights reveal that while AI is likely to enhance existing tactics, it may not necessarily uncover new vulnerabilities. This means that organizations must focus on strengthening their defenses against known threats rather than waiting for the next big breach to occur. The time for action is now, as the consequences of inaction could be dire.

The Role of AI in Cybersecurity

Interestingly, the very technology that poses a threat can also serve as a powerful ally in the fight against cybercrime. Last week, urgent security updates were initiated following the AI-assisted discovery of critical vulnerabilities in a widely-used programming language. These flaws could potentially allow bad actors to gain unauthorized access to web servers without needing a password, underscoring the dual-edged nature of AI.

As organizations grapple with the implications of AI in cybersecurity, they must also recognize the importance of implementing basic yet effective security measures. The NCSC emphasizes the need for organizations to keep devices updated, restrict administrator access to systems, and regularly back up important data. These foundational steps are essential for building a robust cybersecurity posture that can withstand the evolving threat landscape.

Community Impact and Responsibility

The ramifications of cyberattacks extend far beyond the business world; they touch the lives of everyday citizens. In Rochester, where families rely on local businesses for their daily needs, the potential for disruption is a cause for concern. If grocery stores are forced to close due to cyberattacks, families may find themselves scrambling to secure basic necessities—a scenario that could have devastating effects on community stability.

Moreover, the interconnected nature of modern society means that a cyberattack on one sector can have a cascading effect on others. For instance, an attack on a food supply chain could impact transportation, logistics, and even healthcare systems. As such, the responsibility for cybersecurity falls not only on individual organizations but also on the community at large. Everyone has a role to play in safeguarding the systems that underpin daily life.

As Richard Horne aptly stated, “We need every organization in the U.K. to take action now.” This call to action resonates deeply within the Rochester community, where families are built on strong foundations of commitment and resilience. By prioritizing cybersecurity, we can protect not only our businesses but also the families that depend on them for their livelihoods.

What's Next for Cybersecurity?

Looking ahead, the landscape of cybersecurity will continue to evolve as technology advances and new threats emerge. The NCSC's report serves as a wake-up call for organizations to reassess their cybersecurity strategies and take proactive measures to mitigate risks. As AI becomes increasingly integrated into our daily lives, it is crucial for organizations to stay ahead of potential threats and invest in the necessary resources to fortify their defenses.

Community engagement will be essential in this endeavor. Workshops, seminars, and educational initiatives can empower local businesses and families to understand the importance of cybersecurity and the steps they can take to protect themselves. By fostering a culture of awareness and responsibility, we can collectively build resilience against cyber threats.

In Rochester, the spirit of community is strong, and as we face the challenges of the digital age, it is imperative that we come together to safeguard our future. The stakes are high, but with commitment and collaboration, we can navigate the complexities of cybersecurity and emerge stronger on the other side.