UK National Cyber Security Centre Warns of Increasing Cyberattacks from Russia and China by 2028

Image: Kavit Majithia · Source

The UK's National Cyber Security Centre warns that by 2028, state actors like Russia and China are expected to launch faster and more sophisticated AI-driven cyberattacks targeting the UK, posing significant threats to national infrastructure.

The UK's National Cyber Security Centre (NCSC), part of the intelligence agency GCHQ, has issued a stark warning about the future of cyber threats facing the country. According to its annual cybersecurity report released in late 2026, the UK is anticipated to experience a significant increase in the frequency, scale, and sophistication of cyberattacks in the coming two years.

The report specifically highlights Russia and China as primary state actors likely to escalate their cyber operations targeting the UK. It emphasizes the accelerating influence of emerging technologies such as artificial intelligence (AI), automation, and enhanced computing power. These technological advances are expected to enable adversaries to identify vulnerabilities faster, target victims more efficiently, and conduct operations with greater speed and complexity.

By 2028, the NCSC projects it will be common for nation-states including China and Russia to deploy AI-powered cyber tools in pursuit of geopolitical objectives, with the UK facing heightened threats from sophisticated attacks. The agency flags a critical risk that AI-enhanced malware could be utilized in ransomware attacks against the UK’s critical national infrastructure within this timeframe.

In addition to AI, the growing use of space-based technologies is expanding the cyber threat landscape. The NCSC warns that this will create new vulnerabilities and opportunities for exploitation by hostile actors over the next decade.

Reflecting this challenging environment, the NCSC has reported 1,831 cyberattacks in 2026 affecting UK organizations across various sectors, with 80 incidents deemed nationally significant. The increasing volume and severity of these attacks underscore the urgency for the UK to bolster its cyber resilience.

The report concludes by stressing that the UK operates in a "more congested, competitive and technologically accelerated cyber environment." To mitigate these evolving threats, the NCSC calls for immediate strengthening of defensive measures while proactively preparing for future cyber challenges involving advanced AI and other emerging technologies.