The NCSC published an assessment on AI and cyber intrusion. It judges it highly likely that AI-powered malware will be used in a ransomware attack on UK critical national infrastructure by 2028, and almost certain that many systems will stay vulnerable to AI tools that find and exploit flaws. It also points to the new attack surface created by deploying AI inside critical infrastructure. The scenarios are described as not predictions.
