UK Cyber Agency Warns Against 'Tech on the Cheap' Amid AI Threat

The UK's National Cyber Security Centre (NCSC) has warned that AI-powered malware is "highly likely" to be used in ransomware attacks targeting Britain's critical national infrastructure by 2028, according to reporting from The Register.

In his announcement of the agency's annual review, NCSC CEO Dr. Richard Horne stated that organizations have spent decades "doing tech on the cheap." Horne is now calling for leaders to treat security and resilience as a fundamental requirement rather than an afterthought, urging them to "invest with urgency."

The NCSC noted that attackers are already repurposing open-source AI security tools. The Register reports that researchers have seen widespread abuse of ARTEX, a Chinese-made AI red-teaming platform, in attacks against Microsoft 365 and UK registrar 123 Reg since July. The NCSC's pessimistic 2028 scenario includes a rise in the sophistication of global attacks and the possibility of autonomous attackers that can self-replicate and operate without human control.

To combat these threats, the UK government is implementing several initiatives:

* **Project DROMOS:** A collaboration between the Government Cyber Coordination Centre (GC3), the AI Security Institute, and other departments to analyze code repositories for vulnerabilities. * **Cyber Shield:** An agentic cyber defense system being delivered over five years in partnership with the Department for Digital, Culture, Media and Sport (DCMS). * **Funding:** The government has allocated £60 million for Cyber Shield, £70 million for the National Exposure and Real-Time Vulnerability (NERV) Centre, £40 million for a National Agentic Security Unit, and £24 million for public sector defenses.

Additionally, the government is offering a 75 percent discount on Cyber Essentials certification for first-time applicants among micro, small, and medium-sized businesses.