UK NCSC: AI will speed up and scale existing cyber attacks, not create new ones

koltregaskes · x · 2026-11-04

The UK's National Cyber Security Centre (NCSC) laid out key judgements on AI's impact on cyber threats in its 2026 Annual Review.

Core finding: AI will accelerate and scale existing attack methods rather than create fundamentally new ones; human operators remain essential, and skilled attackers benefit most.
On vulnerabilities: AI models can now find flaws in large codebases that had gone undetected for years, creating a race for defenders to patch before working exploits emerge.
NCSC expects a widening gap between organizations that can use AI for defense and those that can't.
The report also names China as best positioned to use AI against critical national infrastructure.

More from Safety