Privacy & Information Security Law Blog

On January 24, 2024, the UK National Cyber Security Centre (“NCSC”) announced it had published a report on how AI will impact the efficacy of cyber operations and the cyber threats posed by AI over the next two years. The report concludes that AI “will almost certainly increase the volume and heighten the impact of cyber attacks over the next two years.” The report also notes that all types of cyber threat actors, including state and non-state, and of varying skill level, already use AI to some degree. The report further notes that AI provides capability uplift in reconnaissance and social engineering, which will likely make both more effective and harder to detect, and that AI “lowers the barrier” for novice cyber criminals, hackers-for-hire and hacktivists, which likely will contribute to the threat of ransomware on a global scale.