The UK’s critical infrastructure faces a likely increase in AI-assisted cyberattacks by 2028, according to a warning from National Cyber Security Centre chief Richard Horne reported by SecurityWeek. The report did not identify a current UK outage or a specific affected community.
Horne said AI could help attackers find and exploit long-tolerated vulnerabilities at much greater scale. SecurityWeek reported that the assessment expects AI to enhance existing tactics rather than routinely create entirely new vulnerabilities. Potentially affected systems include electricity switching, water-control equipment, dam operations, manufacturing lines, and heating and refrigeration controls.
The immediate response described by the NCSC is basic cyber hygiene: keep devices up to date, limit administrator access, and back up important files and data. The warning also places responsibility on organizations that have deferred technology upgrades, rather than announcing a new emergency measure for residents or utilities.
A separate SecurityWeek report on proposed UK supply-chain rules describes a policy response aimed at a different part of the risk: technology suppliers connected to critical infrastructure. The report said amendments tabled in August 2026 would give ministers powers to restrict critical-sector organizations from using suppliers considered high risk. It also described a reported four-day outage at a small UK energy facility, but that incident was not independently documented in the fetched material and should not be treated as confirmation of a nationwide impact.
Together, the reports point to two distinct resilience measures: operators are being urged to address outdated systems and access controls now, while proposed legislation would add government oversight of suppliers. Neither source establishes that AI has already caused a UK critical-infrastructure disruption.