AI Is Accelerating Cyber Threats: New UK Security Assessment Warns Businesses of Rising Risks Through 2028

Artificial intelligence is rapidly changing how cyberattacks are developed and executed, raising concerns about whether businesses can keep pace with increasingly sophisticated threats. As organizations integrate AI into everyday operations, cybersecurity experts warn that the same technology could enable attackers to exploit vulnerabilities faster, automate malicious activities, and target critical business systems more effectively.

On November 3, 2026, the United Kingdom’s National Cyber Security Centre (NCSC) released a new assessment examining how AI could influence cyber threats through 2028. The agency warned that AI-enabled attacks are likely to become faster and more widespread, particularly as sophisticated capabilities become accessible to more threat actors.

The assessment highlights a growing concern for organizations operating critical infrastructure, including energy, manufacturing, transportation, and essential services. Many of these industries depend on interconnected technologies and legacy systems that may contain vulnerabilities difficult to address without disrupting operations.

According to the NCSC, attackers are expected to increasingly use AI to identify and exploit existing security weaknesses. The agency also considers AI-powered malware in ransomware attacks against critical infrastructure highly likely within its assessment period. These developments could create additional challenges for businesses already struggling with outdated systems and limited cybersecurity resources.

A November 4 advisory from Northern Ireland’s Cyber Security Centre reinforced these concerns, emphasizing that AI is improving the speed and efficiency of activities such as social engineering, vulnerability discovery, and exploit development. The advisory also identified unauthorized employee use of AI tools as an additional security concern.

For business leaders, these warnings demonstrate why cybersecurity strategies must evolve alongside technological innovation. Organizations need stronger visibility into their digital environments, continuous vulnerability monitoring, effective access controls, and incident-response plans capable of addressing rapidly developing threats.

Businesses should also establish clear AI governance policies to ensure employees understand how AI tools can be used safely without exposing confidential information or creating unnecessary security risks.

Directpath Global Technologies (DGT) supports organizations through cybersecurity services including Extended Detection and Response (XDR), Vulnerability Assessment and Penetration Testing (VAPT), Vulnerability Risk Management as a Service (VRMaaS), and Operational Technology (OT) Security. DGT’s advanced Artificial Intelligence Division also helps organizations develop tailored AI solutions that support cybersecurity and improve broader business operations.

As AI capabilities continue to advance, organizations must recognize that cybersecurity readiness requires more than responding to threats after they occur.

Businesses that strengthen their defenses today will be better positioned to protect sensitive information, maintain operational continuity, and manage emerging risks. Waiting until AI-enabled attacks become more sophisticated could leave organizations facing disruptions that are increasingly difficult to contain.

Sources: UK National Cyber Security Centre (NCSC) & Northern Ireland Cyber Security Centre.