The NCSC's annual report found hackers demanding ransom payments are 'highly likely' to use AI to target the UK by 2028