UK NCSC: AI cyber tools will 'almost certainly' leave many systems exploitable through 2028, and AI-powered malware has 'highly likely' hit UK critical infrastructure with ransomware by then
The practical message is speed: shorten time-to-patch for internet-facing and legacy OT systems, assume found-and-exploited faster than before, and invest in recovery for critical services rather than only prevention.