Threat video1:00
NCSC Annual Review 2026 AI Exploits: Detection & IOCs
NCSC expects AI-enabled attacks on legacy UK critical infrastructure by 2028. 9 detection rules, 9 IOCs and a free Splunk SPL rule.
Read the full threat intel for NCSC Annual Review 2026 AI Exploits: Detection & IOCs →
Chapters
- 0:00The hookAbout attackers positioning for AI ransomware strikes.
- 0:04The storyAttackers establish footholds in UK CNI.
- 0:12Attack pathState actors adopt AI for scanning edge devices and legacy infrastructure.
- 0:27AttributionNo threat actor is attributed.
- 0:32Indicators of compromiseNo malicious indicators were published.
- 0:37MITRE ATT&CK techniques5 ATT&CK techniques, from reconnaissance to impact.
- 0:42Remediation3 steps now: Inventory internet-exposed and legacy systems in CNI environments and prioritise.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00About attackers positioning for AI ransomware strikes.
0:05Attackers establish footholds in UK CNI.
0:08AI accelerates legacy system exploitation.
0:12State actors adopt AI for scanning edge devices and legacy infrastructure.
0:17Weaponised vulnerabilities exploit unmanaged edge devices.
0:22Lateral movement spreads across CNI infrastructure.
0:28No threat actor is attributed. Confidence: low.
0:32No malicious indicators were published.
0:375 ATT&CK techniques, from reconnaissance to impact.
0:423 steps now: Inventory internet-exposed and legacy systems in CNI environments and prioritise.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.