Russia conducting daily attacks on UK 'from seabed to cyberspace,' spy chief warns

BLETCHLEY PARK, England — The head of Britain's cyber and signals intelligence agency delivered a stark warning Wednesday that Russia is conducting daily hybrid attacks against the United Kingdom and Europe, stretching “from the seabed to cyberspace.”

Anne Keast-Butler, director of GCHQ, called on businesses, government and allies to treat cybersecurity with ten times greater urgency, warning “we are at a moment of consequence where the actions we take and the partnerships we build are ever more critical.”

She spoke at Bletchley Park, birthplace of both GCHQ and modern computing, where a wartime team — three quarters of them women — “changed the arc of technological innovation and altered the course of history” by cracking Nazi Germany's ciphers.

Britain and its allies face a comparable moment today, she said, playing out in undersea cables, corporate networks and the algorithms shaping public opinion — all below the traditional thresholds of war.

Russia is targeting “critical infrastructure, democratic processes, supply chains and public trust,” she said — prompting a range of countermeasures from the agency, including defending subsea cables and energy pipelines in British waters, disrupting Russian networks smuggling sanctioned technology and countering “reckless sabotage and assassination attempts.”

Last month, Britain disclosed it had tracked and forced the retreat of a Russian submarine operation near critical seabed infrastructure, with the vessels “having failed to complete their operation in secrecy.” On shore, numerous amateur saboteurs and spies remotely operated by the Kremlin have been identified and arrested.

Keast-Butler said the National Cyber Force — GCHQ's offensive cyber unit established in partnership with the military and other parts of the British intelligence community — is tackling state threats, terrorist networks and criminal actors including child sex offenders.

“We deliver high-impact cyber operations every single day,” said Keast-Butler.

Moment of consequence

Her speech repeatedly stressed the urgency that society needed to adopt in response to the challenges it faced: “The risk of miscalculation is as high as I have ever seen it.”

The lecture — planned to be the first of an annual address — was delivered at Bletchley Park to emphasize the urgency and innovation with which the country responded to the Nazi threat. Keast-Butler noted that Alastair Denniston, who founded what was then the Government Code and Cypher School, began recruiting for Bletchley Park before the war started.

The machines built for the country house — the Bombe and the Colossus, widely regarded as the world's first programmable electronic digital computer — impacted not just on the war itself but laid the foundations for the entire computing age. That legacy of innovation, she argued, needed to be applied to threats of the present.

Among the plans to meet that need is a new national cyber defense capability embedding agentic AI into systems able to detect and respond to attacks faster than human operators.

Although only at a blueprint stage at the moment, the agency hopes that the capability — to be delivered by the National Cyber Security Centre — would provide a critical advantage to defenders as AI capabilities accelerate the pace of activity in the cybersecurity sector.

Earlier this year, documents reviewed by Recorded Future News detailed a Chinese system to develop AI capabilities for offensive cyber attacks targeting the critical infrastructure of the country’s closest neighbors.

“China is now a science and tech superpower with sophisticated intelligence, cyber and military capabilities,” said Keast-Butler, echoing the tone of the Dutch military intelligence services who last month publicly warned China had drawn level with the United States in its offensive cyber capabilities.

“The AI revolution is now fully upon us, with ever-faster face of model releases, increasingly sophisticated agents, and greater system autonomy transforming the world with both promise and peril,” she added.

“The ground beneath our feet is shifting, and shifting fast, which means cybersecurity has never been more important. That message may sound familiar… but I’m now saying it with utmost urgency. Cybersecurity is a critical priority for all businesses,” she warned.

Keast-Butler invoked Denniston's 1941 decision to share British codebreaking secrets with American officials at Bletchley ten months before the attack on Pearl Harbor and the U.S. entry into the war. This was a “leap of trust” she credited with paving the way for the creation of the Five Eyes intelligence-sharing alliance, “our most critical partnership and the one most feared by our adversaries.”

Quantum computing presents a longer-term but urgent reckoning, she added. Once operational, quantum machines will break the traditional encryption protecting government secrets, financial systems and military communications, including those relating to Britain's nuclear deterrent. Businesses were urged to begin transitioning to quantum-resistant systems now.

“In this volatile world, there are steps we can all take to protect our communities and our loved ones,” she said, including switching passwords for passkey, but also “standing together to reinforce alliances and forge new partnerships.”

“Whether that’s shoring up international resilience against China’s widespread cyber operations or working together to counter Russian aggression, it’s quite clear that the strength and depth of our own partnerships are our greatest asset.”