Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years
2026-11-04T20:52:10Z•5652e9158d322d126089526252071f288c6b0bed1a00bf55f4d5dc6f39f08bdb
CVE-2026-109618CVE-2026-109619AI-enabled cyber threatsCHOSEN BRICKChina-linked actorsCitrix NetScalerIran-linked actorsOT securityPHPTLSUK NCSCactive exploitationagentic AIartificial intelligencecritical infrastructurecyber resilienceexternal attack surface managementoperational technologypost-quantum cryptographyshadow AIspywarevulnerability management
What happened
UK NCSC RSS roundup covering emerging AI-enabled cyber threats, including projected attacks against critical infrastructure, AI intrusion trends, agentic AI risks, and shadow AI. It also highlights urgent vulnerability mitigation for PHP (CVE-2026-109618 and CVE-2026-109619) and actively exploited Citrix NetScaler ADC/Gateway vulnerabilities, alongside state-linked campaigns targeting sensitive data, dissidents, activists, journalists, and internet-exposed operational technology.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- uk_ncsc_all_rss
- Record identifier
- 5652e9158d322d126089526252071f288c6b0bed1a00bf55f4d5dc6f39f08bdb
- Enrichment time
- 2026-11-04T20:52:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.