One of Britain’s top spooks is set to warn that Russia is “relentlessly targeting” the country’s critical infrastructure as businesses have been urged to take action on cyber security. 

GCHQ director Anne Keast-Butler will deliver a speech on Wednesday where she will warn the public about cyberattacks by Russia and other hostile actors targeting the UK’s infrastructure. 

She will say that Moscow is “scaling up its daily hybrid activity against the UK and Europe”, adding that the Cheltenham-based cyber spy agency was “working tirelessly” to combat the threat. 

She will address Brits across all areas of the UK economy – “from boardrooms to living rooms” – to look after their own cyber security by switching passwords to passkeys, adding security measures on new technologies and making cyber safety “10 times more urgent”. 

Keast-Butler will refer to China as a “science and tech superpower – with sophisticated capabilities across their intelligence, cyber and military agencies”. She will add that there is a “narrowing window for the UK and allies to stay ahead” in an AI race. 

The speech will be delivered from Bletchley Park, where Alan Turing deciphered the German Naval Enigma. 

Keast-Butler’s rare comments come before the publication of the government’s Defence Investment Plan (DIP), which could reportedly be unveiled as soon as next week after months of delays. 

The DIP is set to provide a blueprint for funding on the armed forces and other security measures, giving procurement firms some clarity over investment on equipment, software and other priorities for the government. 

The DIP’s delay has also left spy agencies in a state of limbo amid questions over funding for security. 

Russia and China’s threat to UK

Several top UK firms have faced large-scale cyberattacks in recent years, namely Marks & Spencer, which is still reeling from the consequences of a £300m hit. 

Jaguar Land Rover’s shutdown also damaged growth at the end of last year, according to several economists, while airports have also reported ransomware attacks. 

A childcare company, Kido International, also suffered from a mass data breach last year, with hackers claiming Russian origin. 

Keast-Butler was appointed as GCHQ’s director in 2023, having previously worked at MI5. 

Her predecessor Sir Jeremy Fleming labelled China as the “real long-term threat” to the UK’s national security.