Guides
Every guide to AI Attack Guidance
Start with the main guides, then go deeper on the parts that apply to you.
Last reviewed against National Cyber Security Centre, SecurityWeek and Cyber Security News. Sources
Start here
The main guides
Who is affected
Which UK organisations the NCSC's AI warning points at, from critical infrastructure to small businesses, and how to tell where you sit.
Read the guide
Key dates
The dates that matter in the NCSC's AI warning, from the May patch wave advice to the 3 November review and the 2028 horizon.
Read the guide
What to do
A practical order of work for UK organisations preparing for AI-assisted ransomware, based on the NCSC's advice. Start with what you expose.
Read the guide
Questions
Short, sourced answers on the NCSC's warning of AI-powered ransomware against UK critical infrastructure by 2028 and what organisations should do.
Read the guide
About this site
AI Attack Guidance is published by CyPro Consulting Ltd, a UK cyber security consultancy, to explain the NCSC's AI warning with linked sources.
Read the guideIn depth
Your product or situation
AI ransomware
What the NCSC says about AI-powered malware in ransomware attacks on UK critical infrastructure, what is a forecast and what has been observed.
Read the guide
The assessment
The NCSC's four key judgements and three scenarios for AI and cyber intrusion to 2028, summarised for UK security and risk leads.
Read the guide
Patch wave
The NCSC expects AI to uncover a wave of software flaws and fixes. Its advice on patch priorities, exposure and automatic updates, explained.
Read the guide
Annual review
What the NCSC Annual Review 2026 reports: 80 nationally significant incidents, 337 needing NCSC support, 1,831 reports and how to read them.
Read the guide
Four routes
Public-facing apps, phishing, valid accounts and external remote services: the four routes behind 88% of incidents at large organisations.
Read the guide
Shadow AI
Unapproved AI services can expose company data, and agentic AI adds access risk. What the NCSC says organisations should do about both.
Read the guide
Cyber Essentials
The NCSC chief calls Cyber Essentials the starting point against AI-assisted attacks. What that means and the 75% first-certificate discount.
Read the guide
Funding
Cyber Shield, the NERV Centre, a National Agentic Security Unit and an AI Cyber Security Centre: what was announced alongside the NCSC warning.
Read the guide
Legacy systems
AI makes known weaknesses in old systems easier to exploit. The NCSC's advice on unsupported technology and the cost of tech on the cheap.
Read the guide
Response plan
The NCSC's priorities include protected backups and rehearsed incident response. How to test yours before AI-assisted ransomware arrives.
Read the guideHow CyPro can help
Need a hand getting ready?
Reading the rules is one job. Mapping them to your organisation, closing the gaps and showing the evidence are several more. CyPro's consultants can take any of them off your plate.
Fractional CISO for the board
A senior security lead who advises the board on what to fix first, what to accept and what to tell customers, and owns the decision record.
More on cypro.co.uk
Penetration testing
A focused test of your systems and the controls around them, so you know they hold before an attacker finds out for you.
More on cypro.co.uk
Hardening and segmentation
Our consultants put the controls in place that limit the damage when something is missed: firewall rules, network isolation and tighter admin access.
More on cypro.co.uk
24/7 security monitoring
Our SOC analysts watch your systems day and night for the signs of an attack in progress: unexpected processes, new outbound connections, logins that do not fit.
More on cypro.co.uk
Incident response
If you may already be compromised, our responders contain it, preserve the evidence, find out what was touched and get you running again safely.
More on cypro.co.uk
Vulnerability scanning
Find every internet-facing system you run, including the forgotten ones, and see which are still on a vulnerable build.
See the scanning service
Get ready
Need to know what this means for you?
The NCSC expects ransomware to get faster and cheaper to run. CyPro can help you plan and rehearse your response before an attack and take charge of containment and recovery if one happens.