GCHQ warns Chinese and Russian AI cyber attacks will be routine by 2028

Britain's GCHQ and National Cyber Security Centre warn that China, Russia, and other state actors will routinely deploy AI-powered cyberattacks against critical UK infrastructure by 2028. With malicious cyber activity already costing UK organizations nearly $20 billion annually, officials urge immediate defense upgrades to prevent widespread disruption to essential power, food, and industrial supply systems.

Artificial intelligence in cyber operations

• ▪Governments and corporations issued urgent security updates after AI assisted in identifying two critical flaws, discovered last week, in a programming language vital to 70% of global websites, potentially allowing remote server takeover
• ▪By 2028, China, Russia, and other nation-states will routinely use artificial intelligence cyber operations to achieve geopolitical goals against the U.K., according to the National Cyber Security Centre's annual review released on November 3, 2026
• ▪The National Cyber Security Centre reported that hackers currently use artificial intelligence to conduct reconnaissance, tailor phishing exercises, and identify software vulnerabilities rather than fully automate attacks
• ▪The National Cyber Security Centre expects AI-powered ransomware attacks against U.K. critical infrastructure within two years, with AI enhancing existing tactics to discover and exploit vulnerabilities at unprecedented scale

State-sponsored cyber threats to the U.K.

• ▪Iran is conducting cyberattacks against the U.K. and targeting individuals who pose a threat to the Iranian regime, according to National Cyber Security Centre chief executive Richard Horne
• ▪The National Cyber Security Centre designated Russia as the most audacious cyber threat facing the U.K., intentionally conducting cyber campaigns below the threshold of armed conflict
• ▪Chinese cyber activity represents the most sophisticated and sustained cyber threat facing the U.K., according to the National Cyber Security Centre's annual cyber security report published on November 3, 2026

Cybersecurity recommendations for U.K. organizations

• ▪The National Cyber Security Centre recommended organizations maintain up-to-date devices, restrict administrator privileges, back up critical data, and disconnect non-essential infrastructure technology from the internet
• ▪GCHQ Director Anne Keast-Butler urged all U.K. organizations to implement baseline cyber defenses, calling cybersecurity a frontline component of national defense

Economic cost of cyberattacks

• ▪Attacks on cryptocurrency exchange Binance resulted in the theft of $6.3 billion, representing the largest cyber robbery in history
• ▪Automaker Jaguar Land Rover suffered over $260 million in direct losses from a 2025 cyberattack that disrupted suppliers and impacted the U.K. economy
• ▪Malicious cyber activity costs U.K. organizations almost $20 billion annually, according to figures released by the National Cyber Security Centre