“Our latest assessment shows that by 2028, it is highly likely that AI-cyber capabilities will be used by attackers against known vulnerabilities in legacy technology in our critical national infrastructure.”
Said Jun 17, 2026Deadline Dec 31, 2028RUSI Annual Security Lecture, London, and NCSC news release, 17 June 2026
Deadline is end-2028. Horne made the claim in the same speech in which he disclosed the NCSC handled more than 200 incidents affecting UK critical national infrastructure in the year to May 2026, around 75% of them linked to state actors (Russia, China and Iran named).