The U.K.’s top spy says the window to stay ahead of China and Russia is narrowing and cybersecurity needs to become ‘10 times more urgent’

GCHQ director Anne Keast-Butler warned Wednesday that the U.K. and its allies face a "narrowing window" to stay ahead of Russia and China, as both nations escalate espionage and hybrid warfare against the West. Speaking at Bletchley Park on the 80th anniversary of the UK-USA signals agreement, Keast-Butler said cybersecurity must become "10 times more urgent" as adversaries weaponize AI and target critical infrastructure, democratic processes, and supply chains. The warning follows recent convictions and charges in the U.K. and U.S. linked to Chinese and Russian intelligence operations.

Russia and China are amping up their espionage on Western nations, and there is a “narrowing window for the U.K. and allies to stay ahead,” according to Britain’s spy chief. In a rare speech https://www.gchq.gov.uk/speech/gchq-annual-lecture-2026-as-delivered Wednesday at Bletchley Park https://www.bletchleypark.org.uk/our-story/who-were-the-codebreakers/ , an estate in Buckinghamshire, England, that was the center of Allied code-breaking efforts during World War II, Anne Keast-Butler, the director of GCHQ, the U.K.’s intelligence and cybersecurity agency, warned of a renewed threat to the West from newly emboldened adversaries. Part of this threat has to do with AI and its transformation on warfare. “Warfare is being reconfigured; increasingly data-driven, AI-enabled, and automated in conflicts from Ukraine to Iran,” she said, adding “China is now a science and tech superpower with sophisticated capabilities across their intelligence, cyber, and military agencies.” At the same time, Russia is increasing its aggression abroad, she added. “Russia is scaling up its daily hybrid activity against the U.K. and Europe, stretching from the seabed to cyberspace—relentlessly targeting critical infrastructure, democratic processes, supply chains and public trust,” she said. Keast-Butler’s speech, delivered on the 80th anniversary of the formation of the 1946 UK-USA signals agreement—the precursor for the Five Eyes intelligence sharing alliance https://www.dni.gov/index.php/ncsc-how-we-work/217-about/organization/icig-pages/2660-icig-fiorc between the U.S., U.K., Australia, New Zealand, and Canada, comes as both China and Russia have become more daring in their efforts to carry out surveillance. In the U.K. earlier this month, a border officer and a former Hong Kong trade official were found guilty https://www.theguardian.com/uk-news/2026/may/07/two-men-guilty-spying-for-china-uk-wai-yuen of spying on dissidents for China in the first case of its kind. In the U.S., two Chinese nationals were charged https://www.aljazeera.com/news/2025/7/2/two-chinese-nationals-charged-for-trying-to-recruit-spies-in-us-military last summer with allegedly working for China’s intelligence agency, the Ministry of State Security, and for allegedly attempting to recruit spies from within the U.S. military. Meanwhile, U.S. intelligence assessments warn both China and Russia have increased the amount of surveillance equipment in Cuba that could be used to spy on America. They have also roughly tripled their personnel on the island since 2023, the Wall Street Journal reported https://www.wsj.com/politics/national-security/u-s-warns-of-growing-russian-and-chinese-spying-in-cuba-a99059dd . The Trump administration has recently increased pressure on Cuba, partly by indicting 94-year-old revolutionary leader Raúl Castro for conspiracy to kill U.S. nationals among other charges last week https://www.npr.org/2026/05/20/nx-s1-5827010/cubas-raul-castro-indicted-over-1996-fatal-downing-of-two-aircraft . Given this increase in espionage activity on the part of Western adversaries, both companies and individuals need to make cybersecurity “10 times more urgent,” Keast-Butler said. For the U.K. government, that means strengthening ties with allies and forging new partnerships. For citizens, “that means taking important action now to switch from passwords for passkeys,” she said. Still, Keast-Butler stopped short of calling for foreign IT infrastructure to be banned. She noted that while other countries have taken this approach, it doesn’t work, in her view. Instead, the U.K. should back its homegrown tech companies, encourage strong encryption, and protect its supply chains, she argued. “Sovereignty doesn’t have to mean ‘made in the U.K., so long as we carefully manage our supply chains, dependencies, and data,” she said. Fortune Brainstorm Tech has been the place where bold ideas collide. From June 8–10 , we will return to Aspen —where it all began—to mark 25 years of Brainstorm.