The UK NCSC says AI is "transforming cyber operations" and expects China and Russia to "routinely use AI cyber to achieve their geopolitical goals" by 2028

You may need to re-evaluate your organization's defenses against AI-driven cyberattacks within the next four years.

The UK's National Cyber Security Centre (NCSC) stated in its 2026 Annual Review that artificial intelligence is fundamentally changing cyber operations. The agency anticipates that by 2028, China and Russia will routinely employ AI in cyberattacks to advance their geopolitical objectives. This projection is based on the NCSC's analysis of evolving cyber threats and technological advancements over the past decade. The review, published on November 3, 2026, covers the period from September 1, 2025, to August 31, 2026, and highlights key developments and future challenges in cyber security. The NCSC, part of GCHQ, aims to enhance the UK's online safety and provide clarity in the complex digital landscape. This outlook suggests an acceleration in the capabilities and sophistication of state-sponsored cyber operations driven by AI.

The NCSC's prediction indicates a significant escalation in the cyber threat landscape, driven by state actors leveraging AI for geopolitical gain. This implies a future where cyber operations are not only more frequent but also more autonomous and potentially harder to attribute, posing new challenges for defensive strategies. The focus on China and Russia suggests a deepening of existing geopolitical tensions manifested through advanced cyber warfare capabilities.

This shift will likely necessitate a proactive stance on cyber security, moving beyond traditional signature-based detection to more sophisticated, AI-powered defense mechanisms. Organizations and governments will need to invest in understanding and counteracting AI-driven attack vectors, potentially leading to a new arms race in cyber capabilities where AI plays a central role in both offense and defense.