NHS England rushes to hide software over AI hacking fears

Editor's take

NHS England is now restricting access to its internally developed software, reversing a long-standing open-source policy. This shift stems from concerns that sophisticated AI models, such as those reportedly capable of exploiting vulnerabilities learned from publicly available code, could be used to compromise sensitive health systems.

The implications are twofold. Firstly, it raises questions about the balance between fostering innovation through open collaboration and safeguarding critical infrastructure. Secondly, it highlights the growing cybersecurity challenges posed by advanced generative AI, forcing institutions to re-evaluate their security postures beyond traditional threat vectors. This move affects developers within the NHS, the broader open-source community, and ultimately, the security of patient data.

Future developments to monitor include the specific types of AI threats NHS England is preparing for and whether other public sector organizations will follow suit. The effectiveness of the new restrictions against determined AI-driven attacks will be a key indicator, as will any subsequent policy adjustments that aim to reconcile transparency with enhanced security.