May 15, 2025
May 15, 2025
The UK’s National Cyber Security Centre (NCSC) warns that critical national systems face increasing cyber risks due to a growing "digital divide"—the disparity between organizations that can adapt to AI-driven threats and those that cannot. In its latest report released during the CYBERUK conference, the NCSC emphasizes that AI is accelerating the exploitation of software vulnerabilities, shrinking the window between vulnerability disclosure and attack. By 2027, AI is expected to enhance threat actors' ability to automate and scale cyberattacks, especially targeting under-secured systems and operational technology.
While advanced AI capabilities are currently limited to highly resourced state actors, the broader availability of open-source AI tools is lowering barriers for cybercriminals and hacktivists. AI-assisted techniques will likely expand victim targeting, malware generation, and vulnerability research, with a rise in AI-enabled tools offered "as-a-service." The report underscores that poor cybersecurity—such as weak encryption, poor identity management, and insecure AI integration—will significantly increase the risk of compromise.
The NCSC urges all organizations to adopt robust security practices and follow its AI Cyber Security Code of Practice to prepare for an AI-driven threat landscape. Keeping pace with AI development will be essential for national cyber resilience through 2027 and beyond.