英国网络安全中心警告：2028年前关键基础设施“极可能”遭AI勒索软件袭击
英国伦敦消息，英国国家网络安全中心 11 月 3 日星期二发布年度报告《国家网络状况》，判断到 2028 年，针对英国关键国家基础设施的勒索软件袭击中“极可能”出现 AI 驱动的恶意软件。这是一项预测，不是已经发生的袭击报告。
该中心是英国政府通信总部下属的网络安全机构。中心负责人理查德·霍恩（Richard Horne）说，太多机构与供应链几十年来一直在“廉价凑合做技术”，留下了弱点；AI 不会凭空发明新的攻击方式，但会让已有的攻击更快、规模更大，包括勒索软件、社会工程与利用软件漏洞。他说，未来几个月英国面临网络事件数量空前上升的现实前景。
报告点名中国与俄罗斯等国日益在网络行动中使用 AI。霍恩说：“我们知道，中国极可能有意图、且最有条件利用 AI 对我们的关键国家基础设施与其他战略目标采取行动，其活动是我们面临的最复杂、最持续的网络挑战。”报告同时说，到 2028 年，俄罗斯、中国与其他国家“极可能”常规性地使用 AI 网络手段实现地缘政治目标。
报告覆盖该中心第十个工作年度，即 2025 年 9 月 1 日至 2026 年 8 月 31 日。报告期内的事件管理数据显示，该中心收到 1,831 起网络攻击报告，实际支援处理 337 起，其中 80 起被列为国家级重大事件。英国政府同时宣布配套投入：6,000 万英镑用于“国家网络盾牌”第一阶段、7,000 万英镑用于国家暴露与实时漏洞中心，并在曼彻斯特设立新的 AI 网络安全卓越中心。
UK Cyber Centre Warns AI Ransomware Attack on Critical Infrastructure Is "Highly Likely" by 2028
LONDON — Britain should be prepared for an AI-powered cyberattack on its critical national infrastructure within the next two years, the UK's National Cyber Security Centre (NCSC) said on Tuesday, in its annual report, "The State of the Cyber Nation." The centre judges it "highly likely" that AI-powered malware will be used in a ransomware attack on UK critical national infrastructure (CNI) by 2028. That is a forecast, not a report of an attack that has already happened.
The NCSC is part of GCHQ, the UK's signals-intelligence agency. Its chief executive, Richard Horne, said far too many organisations and supply chains in Britain had got away with "doing tech on the cheap" for decades, leaving them vulnerable. AI will not invent new kinds of attack, he said, but will make existing ones faster and larger in scale, including ransomware, social engineering and the exploitation of software weaknesses. He warned of "a real prospect of an unprecedented rise in the number of cyber incidents" in the coming months.
The report names China and Russia among states increasingly using AI in cyber activity. "We know that China highly likely has the intent and is best positioned to use AI for operations against our critical national infrastructure and other strategic targets with their activity representing the most sophisticated and sustained cyber challenge the UK faces," Horne said. The report also judges it highly likely that Russia, China and other states will routinely use AI in cyber operations to pursue geopolitical goals by 2028.
The report covers the NCSC's tenth year, from September 1, 2025 to August 31, 2026. Over that period its incident management team received 1,831 reports of cyber attacks, supported 337 incidents and classed 80 as nationally significant. Alongside the report, the UK government announced £60 million for the first phase of a National Cyber Shield, £70 million for a National Exposure and Real-Time Vulnerability (NERV) Centre, and a new AI Cyber Security Centre of Excellence in Manchester run by the NCSC.
来源：英国国家网络安全中心
发布：GSM·美国（发布链接）
图片来源：英国政府通信总部（GCHQ）切尔滕纳姆总部航拍，英国国家网络安全中心隶属该机构。Aerial view of GCHQ in Cheltenham, of which the UK National Cyber Security Centre is a part. 摄影 Photo: Adrian Pingstone，公共领域 Public domain，经 Wikimedia Commons
GSM Global · 本篇英文版 English edition of this story
