AI Surge Set to Fuel More Cyberattacks on the UK, Minister Warns

The rapid adoption of artificial intelligence is expected to intensify the volume and sophistication of cyberattacks targeting the United Kingdom, according to a senior government minister. Pat McFadden, Cabinet Office Minister responsible for UK cyber security, delivered the stark warning at the National Cyber Security Centre’s (NCSC) CyberUK 2025 conference on Wednesday.

A Rising Threat Landscape

In his remarks, McFadden announced the declassification of a new intelligence assessment indicating that AI-driven tools and techniques are likely to both increase the frequency and severity of cyberattacks in the years ahead.

“Our security systems will only remain secure if they keep pace with what our adversaries are doing,” Pat McFadden stated.

The warning comes amid a spate of high-profile attacks on British businesses in recent weeks. Major retailers Marks & Spencer, the Co-op Group, and Harrods have all reported cyber incidents, with M\&S still unable to process online clothing orders as a result. While details of these breaches remain scarce, multiple reports suggest ransomware attacks are to blame — where attackers encrypt a company’s systems and demand payment for their release.

Escalating Numbers, Escalating Severity

According to NCSC data shared at the conference, the agency received nearly 2,000 reports of cyberattacks in the past year. Of those, almost 90 were classified as “significant,” and 12 reached “the very top end of severity.” Notably, that’s a threefold increase in severe attacks compared to the previous year.

“Cyber security isn’t a luxury, it’s an absolute necessity,” McFadden emphasized, urging both the public and private sectors to treat the issue with heightened urgency.

The UK government plans to release a new national cyber security strategy later this year. Additionally, the upcoming Cyber Security and Resilience Bill will empower authorities to compel regulated organisations to strengthen their digital defences.

A Shift in Ransomware Tactics

NCSC CEO Richard Horne also addressed the conference, outlining his ambition to see ransomware business models dismantled entirely. “We need to move toward a future where paying ransoms isn’t an option — where the attackers’ business model no longer works,” he said.