NCSC chief warns UK faces ‘unprecedented rise’ in cyberattacks as AI exposes old flaws
Richard Horne says AI is not inventing new attack methods but letting both attackers and defenders exploit long-tolerated vulnerabilities at unprecedented scale.
What to know
- NCSC chief Richard Horne says AI is not creating new attack methods but letting both hackers and defenders find and exploit long-standing, unpatched vulnerabilities at far greater scale.
- The agency assesses it is highly likely AI-powered malware will hit UK critical infrastructure via ransomware by 2028, with China and Russia routinely using AI in operations by then.
- The warning lands alongside UK budget plans to consult on making tech companies liable for breaches caused by insecure products, and follows a June Five Eyes alert that AI's cyber impact is 'months,' not years, away.
“Major technology providers are now fixing hundreds of vulnerabilities in a single update … and the Linux kernel project alone patched more than a thousand vulnerabilities last month.”
Richard Horne, NCSC Chief Executive · The Record ↗ · Nov 2
Richard Horne NCSC Chief ExecutiveOllie Whitehouse NCSC Chief Technology OfficerNCSC (National Cyber Security Centre) UK cybersecurity agency, part of GCHQFive Eyes alliance Intelligence-sharing alliance (UK, US, Canada, Australia, New Zealand)
How it unfolded 2 developments, newest first · click a bar or a number to jump articles
-
background
Horne blames decades of 'doing tech on the cheap' for exposure — Horne argues the vulnerability crisis stems from business practices prioritizing cost savings over security, and warns executives will have to explain failures to stakeholders if critical services fail.
-
2
NCSC says AI-powered ransomware on UK infrastructure 'highly likely' by 2028
The annual report assesses it is highly likely AI-powered malware will be used in a ransomware attack on Britain's critical infrastructure by 2028, and that China and Russia will routinely use AI in cyber operations by then.
-
1
NCSC launches annual report, Horne warns of unprecedented attack surge
NCSC Chief Executive Richard Horne, launching the agency's annual report, warns Britain faces a real prospect of an unprecedented rise in cyber incidents, attributing the risk to AI accelerating exploitation of long-neglected vulnerabilities rather than new attack techniques.
“[V]ulnerabilities that have been tolerated for far too long can now be discovered and exploited at a scale that was once unimaginable.”
— Richard Horne -
first by The Record, 5d ago · also The Record from Recorded Future News
-
-
background
UK budget floats holding tech firms liable for insecure products — Britain's official budget revealed plans to consult on whether technology companies should be held liable for cyber breaches caused by insecure products, setting context for the NCSC's report.
-
background
Five Eyes alliance warns AI will transform cyber capabilities within months — The intelligence alliance issued an alert saying AI would fundamentally reshape both offensive and defensive cyber operations, stating the shift was imminent rather than years away.