AI tools are exposing flaws in IT systems, leading to a surge in cyber incidents, according to the UK’s National Cyber Security Centre (NCSC). Recent attacks include a $6.3bn theft from Binance, the world’s largest cryptocurrency exchange, and a fake nuclear strike alert in Ukraine. Retailers and French blood banks have also been affected by attacks on internet-connected refrigeration units, with similar incidents reported across several European countries.
NCSC leaders warn that AI-powered hacking is likely to increase, with attackers using AI to scout targets, locate weaknesses and write malicious code. The organisation predicts that by 2028, UK power stations, airports and hospitals could be targeted. However, some experts note that many vulnerabilities, such as default passwords in commercial fridges, do not require AI to exploit. The rise in discovered vulnerabilities has not yet led to a proportional increase in successful breaches, according to cybersecurity analysts.
For regulated industries, the exposure of flaws in widely used systems raises operational and reputational risks. The NCSC’s warnings suggest that banks, insurers and healthcare providers should review their defences against both conventional and AI-driven attacks. The sector should expect more regulatory scrutiny and pressure to update legacy systems.
