On 3 November 2026 the UK’s National Cyber Security Centre, in its Annual Review 2026, judged it almost certain that AI will act as a force multiplier in cyber operations, raising the speed, scale and efficiency of existing tactics. It said AI malware is highly likely to feature in a ransomware attack on UK critical national infrastructure and warned about employees’ shadow AI use. It also flagged a widening gap between organisations that adopt AI for defence and those that cannot.

What it means: The NCSC assessment is UK-focused, but its judgements on social engineering, vulnerability discovery and ransomware also apply to Greek firms under NIS2. For Greek SMEs the practical message is faster patching, phishing training and a policy against shadow AI that leaks data into personal accounts. Organisations with mature SOCs can use AI for defence; those on legacy stacks face more risk. No attack techniques are provided; only defence and governance priorities. For Greek businesses and public bodies this means a practical review of contracts, timelines and compliance duties, and it is not investment or legal advice. IT, finance and compliance teams should document owners, review cycles and fallback processes before wider adoption or a vendor change. For Greek businesses and public bodies this means a practical review of contracts, timelines and compliance duties, and it is not investment or legal advice. IT, finance and compliance teams should document owners, review cycles and fallback processes before wider adoption or a vendor change.

Read the original on UK NCSC

Related service: Custom software

Related stories