GCHQ Director Warns of Intensifying Russian Cyber Targeting of UK Critical Infrastructure

On 27 May 2026, Anne Keast-Butler, director of the United Kingdom’s Government Communications Headquarters (GCHQ), delivered the agency’s annual lecture at Bletchley Park. She warned that Moscow is “relentlessly targeting critical infrastructure, democratic processes, supply chains and public trust” across Britain and Europe, calling the activity a “gray-zone” campaign below the threshold of open warfare and urging immediate escalation of cybersecurity measures.

CNN

In the months before the lecture, security services in Sweden, Poland, Denmark and Norway accused Russian-linked hackers of probing or compromising power plants, dams and other essential facilities. The attacks illustrate a sustained pattern of cross-border intrusion against critical infrastructure.

CNN

• Anne Keast-Butler – GCHQ director, overseeing UK signals intelligence and cyber-defence.

CNN

• Richard Horne – NCSC head, coordinating national cyber-defence.

CNN

• Russian state-linked hacking groups – Unnamed actors identified by Sweden, Poland, Denmark and Norway.

CNN

• United States – Cited for its “America First” policy, which Keast-Butler said may strain UK-US security ties.

CNN

Keast-Butler warned that rapid advances in artificial intelligence are altering the underlying environment, narrowing the window for the UK and its allies to retain a defensive edge. She cautioned that insufficiently intensified cybersecurity could expose the United Kingdom to disruption of democratic processes, supply-chain interference and erosion of public trust. She added that strained UK-US relations could further hinder coordinated cyber-defence.

CNN

Keast-Butler urged a whole-society response, from corporate boardrooms to private homes, to strengthen cyber-resilience. She noted that AI advances are reshaping the environment, narrowing the window for the UK and allies to keep a defensive edge, and warned that insufficient cybersecurity could jeopardise democratic processes, supply-chains and public trust. NCSC head Richard Horne said several hostile states, including Russia, China and Iran, drive Britain’s most serious cyber threats and cautioned that involvement in an international conflict could spark a sharp rise in attacks.

CNN

• “relentlessly targeting critical infrastructure, democratic processes, supply chains and public trust” — Anne Keast-Butler, GCHQ Director

CNN

• “the ground beneath our feet is shifting” — Anne Keast-Butler, GCHQ Director

CNN

• “The head of the UK’s National Cyber Security Centre, Richard Horne, warned last month that hostile states including Russia, China and Iran are behind the most serious cyberattacks the country faces.” — Richard Horne, NCSC Head

CNN

Keast-Butler urged accelerated investment in AI-driven cyber-defence, expanded intelligence sharing with European partners and new legislation to embed cybersecurity obligations across public and private sectors. She pledged to convene a joint UK-EU task force within the next quarter to coordinate response strategies.

CNN