UK warns AI-driven ransomware on critical infrastructure “highly likely” by 2028 — what crypto firms should watch Britain’s National Cyber Security Centre (NCSC) has warned that a ransomware attack using AI-powered malware against the UK’s critical national infrastructure is “highly likely” to occur by 2028. The assessment appears in the NCSC’s 2026 State of the Cyber Nation report, published November 3, and reflects a broader judgement that hostile actors will increasingly use AI to scale and speed up cybercrime over the next two years. The NCSC—part of the UK signals intelligence service GCHQ—says the danger comes less from fundamentally new attack techniques than from AI amplifying long‑standing weaknesses. “It’s not because AI has invented new ways to attack us,” NCSC chief executive Richard Horne said when launching the report. “But vulnerabilities that have been tolerated for far too long can now be discovered and exploited at a scale that was once unimaginable.” He added blunt advice for organisations: stop connecting systems to the internet unnecessarily, properly invest in technology, and treat the government’s Cyber Essentials certification as a starting point, not an endpoint. The report carries an urgent policy backdrop. The UK government last week announced initial funding to bolster national cyber defences: £60 million (about $80 million) for phase one of a national “Cyber Shield,” £70 million ($93 million) to create a National Exposure and Real‑Time Vulnerability Centre to map weaknesses across critical infrastructure, and a new AI Cyber Security Centre of Excellence in Manchester run by the NCSC. Signs of AI already being used in the wild are growing, the report notes. In May, Google’s Threat Intelligence Group reported that cybercriminals used an AI model to find and weaponize a previously unknown flaw that allowed them to bypass two‑factor authentication in a popular open‑source administration tool — the first confirmed AI‑assisted zero‑day exploited in the wild. At the same time, a Cambridge University analysis of 90,000+ cybercrime forum threads found most criminal uses of AI so far have been for spam and phishing rather than sophisticated operations — but the NCSC warns that capacity can evolve rapidly. UK officials have repeatedly urged international action on AI risk. In July, Foreign Secretary Yvette Cooper warned governments must agree on AI safeguards before frontier systems reshape warfare, crime, and society, famously adding: “We cannot afford to wait for an AI equivalent of Hiroshima before we act.” What this means for crypto platforms and users - Expanded attack surface: AI‑augmented attackers could speed discovery of unpatched vulnerabilities in legacy systems that underpin exchanges, custodial services, payment rails and other finance infrastructure. - Social engineering and credential theft: AI can scale highly convincing phishing and spear‑phishing campaigns aimed at staff, developers, or customers, increasing the risk of compromised keys or admin access. - Smart contract and oracle risk: While AI doesn’t invent new classes of bugs, it can help attackers identify exploitable patterns faster; decentralised finance (DeFi) projects should assume reconnaissance will become more automated and targeted. - Practical steps echo NCSC guidance: enforce strict patching and asset inventories, reduce unnecessary internet exposure for critical systems, adopt Cyber Essentials as a floor (not a ceiling), strengthen multi‑factor authentication and employee training, and build incident response playbooks. For crypto firms and investors, the takeaway is clear: AI raises the speed and scale of opportunistic exploitation. The NCSC’s funding boosts and new centres will aim to improve vulnerability discovery and national resilience, but organisations must accelerate investments in basic hygiene and defensive controls now — or risk being caught out when automated attacks arrive at scale. Read more AI-generated news on: https://app.chaingpt.org/news