Buyuk Britaniya 2028-yilga qadar o'zining muhim infratuzilmasiga sun'iy intellekt (AI) kiberhujumlari bilan duch kelishi mumkin, chunki jinoyatchilar va davlatlar, jumladan Xitoy va Rossiya, o'zlarining kiber faoliyatida AI dan tobora ko'proq foydalanmoqda, deb ogohlantirdi Buyuk Britaniyaning kiber rahbari seshanba kuni.
Bu AI bilan quvvatlangan zararli dasturlarni ransomware hujumlari uchun o'z ichiga olishi mumkin, chunki texnologiya "juda uzoq vaqt davomida chidab kelingan zaifliklar"ni aniqlash va "bir paytlar tasavvur qilib bo'lmaydigan miqyosda" foydalanish imkonini beradi, dedi Richard Horne, Buyuk Britaniyaning Milliy Kiberxavfsizlik Markazi (NCSC) rahbari.
NCSC ning yillik kiber hisobotini e'lon qilish munosabati bilan qilgan nutqida Horne, "arzon texnologiya bilan o'zini qutqargan" barcha o'lchamdagi biznes va tashkilotlar rahbarlari, agar ular kiberxavfsizlikka sarmoya kiritmasalar yoki eskirgan texnologiyani yangilamasalar, "oziq-ovqat javonlarda yo'q, chiroqlar yonmaydi, bizneslar bankrot bo'ladi" deb tushuntirishlari kerakligini aytdi.
Xitoyning kiber faoliyati Buyuk Britaniyaga duch keladigan "eng murakkab va doimiy kiber tahdid" bo'lib, Rossiya va Xitoy o'zlarining geosiyosiy maqsadlariga erishish uchun muntazam ravishda AI dan foydalanadilar, deyiladi hisobotda. Rossiya ataylab qurolli to'qnashuv chegarasidan past bo'lgan kiber kampaniyalarni olib bormoqda, Eron esa Buyuk Britaniyaga qarshi hujumlar amalga oshirmoqda va Eron rejimiga tahdid soladigan shaxslarni nishonga olmoqda, dedi Horne.
Davlatlar va jinoyatchilar tomonidan AI dan foydalanish dushman operatsiyalarining miqyosi va samaradorligini oshirishi ehtimoli yuqori, ammo AI yangi zaifliklarni topishdan ko'ra, mavjud taktika va usullarni kuchaytirish va kengaytirish uchun ko'proq ishlatilishi mumkin, deyiladi hisobotda.
O'tgan hafta hukumatlar va korporatsiyalar dunyo bo'ylab 70% veb-saytlar uchun muhim bo'lgan dasturlash tilidagi zaifliklarni AI yordamida aniqlashdan so'ng shoshilinch xavfsizlik yangilanishlari ustida ishladilar. AI tomonidan aniqlangan ikkita muhim kamchilik yomon niyatli shaxslarga saytlarga autentifikatsiyasiz kirish imkonini berishi mumkin, bu nazariy jihatdan ularga parolsiz veb-serverni masofadan boshqarish imkonini beradi.
"Texnologiya zamonaviy hayot uchun muhim bo'lgan jismoniy jarayonlarning avtomatlashtirilishini ta'minlaydi," dedi Horne. Bu, uning aytishicha, elektr energiyasini almashtirish, suv inshootlaridagi shlyuz darvozalari, to'g'on operatsiyalari, ishlab chiqarish liniyalari, isitish va sovutish nazorat tizimlarini o'z ichiga oladi. Fransuz supermarketlaridagi sovutish tizimlariga yaqinda qilingan kiberhujumlar dushman aktyorlar fuqarolik infratuzilmasini qanchalik oson ekspluatatsiya qilishi mumkinligini ko'rsatdi, dedi Horne.
Rossiya allaqachon Yevropadagi muhim infratuzilmaga hujum qilgan, Buyuk Britaniya va Yevropa Ittifoqi a'zo davlatlari Rossiyaning FSB xavfsizlik xizmati 2025-yil dekabr oyida Polshaning energiya tarmog'iga hujum ortida turganini aytishdi. Agar hujum muvaffaqiyatli bo'lganida, qishda 500 000 kishi elektr energiyasidan mahrum bo'lishi mumkin edi.
Buyuk Britaniyada zararli kiber faoliyat tashkilotlarga har yili deyarli 20 milliard dollar zarar keltirmoqda, dedi NCSC. 2025-yilda avtomobil ishlab chiqaruvchi Jaguar Land Rover kiberhujumdan so'ng 260 million dollardan ortiq to'g'ridan-to'g'ri yo'qotishlarga duch keldi, bu hujum yetkazib beruvchilarga ham ta'sir qildi va Buyuk Britaniya iqtisodiyotiga zarba berdi.
"Biz Buyuk Britaniyadagi har bir tashkilot hozir harakat qilishini talab qilamiz. Faqat o'z mijozlari, xizmatlari va tirikchiliklarini himoya qilish uchun emas, balki kiberxavfsizlik endi millatimizning oldingi mudofaa chizig'ining bir qismi bo'lgani uchun ham," dedi Anne Keast-Butler, Buyuk Britaniyaning signallar razvedkasi agentligi GCHQ direktori, NCSC ham uning tarkibiga kiradi.
Bu qurilmalarni yangilab turish, tizimlarga administrator kirishini cheklash va muhim fayl va ma'lumotlarni zaxiralash kabi asosiy, ammo samarali kiberxavfsizlik choralarini amalga oshirishni o'z ichiga oladi, dedi NCSC.
Bog'liq: Buyuk Britaniya Huquqiy Yordam Agentligi Xakerlik Doirasi Sud-Tibbiy Ko'rikdan So'ng Kengaydi
Bog'liq: AQSh, Buyuk Britaniya, Niderlandiya Agentliklari Eronning "Chosen Brick" Kuzatuv Zararli Dasturini Fosh Qildi
Bog'liq: Buyuk Britaniya Muhim Infratuzilmadan Yuqori Xavfli Texnologiya Yetkazib Beruvchilarni Bloklashga Harakat Qilmoqda
The U.K. will likely face artificial intelligence cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber activity, Britain’s cyber chief warned Tuesday.
That could include AI-powered malware for ransomware attacks as the technology will allow “vulnerabilities that have been tolerated for far too long” to be discovered and exploited “at a scale that was once unimaginable,” Richard Horne, the head of the U.K.’s National Cyber Security Center said.
In a speech marking the publication of the NCSC’s annual cyber report, Horne said the leaders of businesses and organizations of all sizes who have “got away with tech on the cheap” will have to explain why “food isn’t on the shelves, lights aren’t on, businesses have gone under,” if they fail to invest in cybersecurity or update out-of-date technology.
Chinese cyber activity is the “most sophisticated and sustained cyber challenge facing the U.K.” while both Russia and China will routinely use AI to achieve their geopolitical goals, the report said. Russia is intentionally conducting cyber campaigns which fall below the threshold of armed conflict while Iran is carrying out attacks against the U.K. and targeting individuals who are a threat to the Iranian regime, Horne said.
The use of AI by states and criminals is highly likely to increase the scale and efficiency of hostile operations, but AI is more likely to be used to enhance and scale existing tactics and techniques rather than find brand new vulnerabilities, the report said.
Last week, governments and corporations worked on urgent security updates after the AI-assisted discovery of vulnerabilities in a programming language vital to 70% of websites globally. The two critical flaws identified by AI could allow bad actors to get unauthenticated access to sites which, in theory, could allow them to control a web server remotely without needing a password.
Technology “underpins the automation of physical processes that are vital to modern life,” Horne said. That includes, he said, electricity switching, sluice gates in water facilities, dam operations, manufacturing lines, heating and refrigeration controls. The recent cyberattacks on refrigeration systems in French supermarkets showed how easily hostile actors could exploit civilian infrastructure, Horne said.
Russia has already attacked critical infrastructure in Europe, according to the U.K. and EU member states that said Russia’s FSB security service was behind an attack on Poland’s energy grid in December 2025. If the attack had been successful, 500,000 people could have lost electricity during winter.
In the U.K., malicious cyber activity is costing organizations almost $20 billion every year, the NCSC said. In 2025, the carmaker Jaguar Land Rover suffered more than $260 million in direct losses following a cyberattack which also hit suppliers and dented the U.K. economy.
“We need every organization in the UK to take action now. Not only to protect their customers, services and livelihoods, but because cybersecurity is now part of the front line defense of our nation,” said Anne Keast-Butler, director of GCHQ, Britain’s signals intelligence agency, which the NCSC is part of.
That includes implementing basic but effective cybersecurity measures such as making sure devices are up to date, limiting administrator access to systems and backing up important files and data, the NCSC said.
Related: UK Legal Aid Agency Hack Scope Widens After Forensic Review
Related: US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware
Related: UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure
