The UK's National Cyber Security Centre (NCSC) has warned that AI-powered ransomware attacks on critical national infrastructure are "highly likely" by 2028, publishing the assessment in its State of the Cyber Nation report on 3 November. In a speech launching the report, NCSC chief executive Dr Richard Horne said the era of "tech on the cheap at the expense of security" is over, and that organisations must make "significant changes" to avoid a future in which AI is used against the UK economy and society, including more efficient ransomware, social engineering and vulnerability exploitation. The UK government announced investments including £60 million for the first phase of a national Cyber Shield, £70 million for a National Exposure and Real-Time Vulnerability (NERV) centre, and a new AI Cyber Security Centre of Excellence in Manchester. The warning mirrors guidance Australian organisations have already received from ASD on AI-enabled threats and boards' AI risk duties, and reinforces the Five Eyes consensus that AI is shifting attacker economics rather than merely adding new attack classes.

• Source article