Canonical event

UK NCSC publishes 2026 forward-looking AI-enabled critical-infrastructure cyber threat assessment

The UK National Cyber Security Centre's Annual Review published 3 November 2026 assesses AI-enabled malware use in ransomware against critical national infrastructure as highly likely in the coming years, alongside shadow-AI risks. This is an official risk forecast and assessment, not observation of a 2028 attack, evidence of fully autonomous campaigns today or new cybersecurity legislation.