Canonical text (the exact bytes fingerprinted)

TRUVACE RECORD VERSION
record: TRV-2026-2346
version: 1
kind: certified
reason: Certified into the record
timestamp: 2026-11-03T06:01:22.872355Z
status: published
lens: p_space
sector: crime
headline: AI-powered malware ‘highly likely’ to be used to hack UK infrastructure by 2028
dek: AI-powered malicious software is “highly likely” to be used in hacking attacks against the UK’s power stations, airports and hospitals by 2028, according to the state cybersecurity body. The National Cyber Security Centre (NCSC) said AI will probably enable a ransomware attack against critical national infrastructure [CNI] between now and 2028. The UK’s definition of CNI covers a range of facilities and services across sectors including energy, transport, defence, food, health and finance. The warning from the N…
gain_title: (none)
problem_title: The NCSC judges that AI-powered malware will very likely be used in a ransomware attack on UK critical infrastructure by 2028, as AI helps attackers find targets, locate network weaknesses and write malicious code.
trace_subject: (none)
gain_reading: (none)
gain_evidence: (none)
problem_reading: The NCSC judges that AI-powered malware will very likely be used in a ransomware attack on UK critical infrastructure by 2028, as AI helps attackers find targets, locate network weaknesses and write malicious code.
problem_evidence: It is … highly likely that between now and 2028, AI-powered malware will have been used in a ransomware attack on UK CNI | AI is set to enhance the ransomware threat by helping attackers with tasks such as scouting targets, locating weaknesses in IT networks and writing malicious code
quick_read: The UK's National Cyber Security Centre, part of GCHQ, said in its annual review that AI-powered malware is highly likely to be used in a ransomware attack on critical national infrastructure such as energy, transport and health services between now and 2028. It also warned that Russia and China will begin using AI routinely in cyber-attacks.

The warning matters because ransomware already hits British organisations, and AI could make it faster and easier to find weaknesses. It is a forecast rather than a measured outcome, and the report's chief executive's speech points to a possible rise in incidents but gives no figures.
limitation: The central claim is a forecast of what is likely by 2028, not an observed attack, and the article gives no figures on how many incidents to expect.
tag: Evidence-backed problem
key_points: The NCSC says AI will probably enable a ransomware attack on UK critical national infrastructure by 2028. | The agency expects Russia and China to use AI routinely in cyber-attacks. | AI is expected to help attackers scout targets, find network weaknesses and write malicious code. | AI recently helped discover a critical weakness in PHP, used by almost 70% of the world's websites. | A cybersecurity professor argues defenders need access to advanced AI to find and patch flaws first.
rundown: The NCSC's annual review defines critical national infrastructure broadly, covering energy, transport, defence, food, health and finance. Past UK ransomware victims named include Royal Mail, Capita and various councils.

NCSC chief executive Richard Horne is due to say the UK faces a real prospect of an unprecedented rise in cyber incidents in the coming months. He attributes this to AI's ability to uncover long-tolerated weaknesses in IT systems.

The article also notes the dual-use nature of the technology. AI helped find the PHP flaw, and companies such as OpenAI and Anthropic have given some firms advanced access to their strongest models to help identify serious IT flaws.
sources:
- journalism | The Guardian | https://www.theguardian.com/technology/2026/nov/03/ai-powered-malware-artificial-intelligence-hacking-critical-uk-infrastructure | 2026-11-03
prev: 0000000000000000000000000000000000000000000000000000000000000000

sha256

30d4d0ccae339c2bedf9608360c61f7209b5a2b9936c8ed21773c21e75952160

previous

0000000000000000000000000000000000000000000000000000000000000000