King Charles Warns Cyber Threats Are Growing More Sophisticated as NCSC Marks Ten Years

King Charles III has issued a stark warning about the growing sophistication of hostile actors in cyberspace, cautioning that disinformation campaigns and other malicious online operations pose a serious threat to public trust and national security. In a letter marking the tenth anniversary of the National Cyber Security Centre (NCSC), the monarch said the challenges of the digital age demand constant vigilance and robust defences.

The King's message, published by the NCSC on Saturday, highlighted how "malicious actors" are continually refining their methods, increasingly turning to automated technologies to carry out attacks at greater scale and speed. He described strong cyber security as fundamental to building a safer, more resilient online environment, framing the issue as central to both international stability and the responsible management of emerging technologies.

"From threats to our international order, to the need to balance the risks and opportunities of powerful new technologies, strong cyber security is fundamental to making the online environment safer and more resilient," the King wrote in the letter.

The intervention came just weeks after the King addressed a gathering of artificial intelligence executives at Dumfries House in Ayrshire, where he spoke about the potential for AI to serve security goals but also warned of its darker possibilities. He told those assembled that the technology could be used in ways that are catastrophic if it falls into the wrong hands, describing what he called "existential dangers."

That meeting included Jensen Huang, the chief executive of Nvidia, and Sir Demis Hassabis, the former head of Google DeepMind. The King's remarks followed a string of warnings from within the technology industry itself about the rapid advancement of so-called frontier AI models, and the urgent need for regulation capable of keeping pace with them. In his comments, the King said the industry's own creators were increasingly speaking out about the risks, noting that some warn AI could develop capacities that threaten human life.

"The task before you is not merely to advance technology, but to ensure that it remains firmly in the service of humanity, community and the natural world," he told the executives.

In his letter to the NCSC, the King praised the agency's work over the past decade, citing its role in defending the country against cyber attacks, protecting democratic institutions, and shielding the critical infrastructure that underpins everyday life. He said the NCSC had helped build resilience across public services, businesses, and communities, equipping the nation to function in an ever-changing digital landscape.

The King also acknowledged that much of the NCSC's most important work necessarily takes place out of public view. He said he was "acutely aware" of this, expressing profound gratitude for efforts that cannot be openly celebrated. The remarks underline the often invisible nature of cyber defence, where deterrence depends on capabilities and operations that are rarely disclosed.

The NCSC was established in 2016 as part of GCHQ, the UK's signals intelligence and cyber agency, with a mandate to protect the country from cyber threats. Over its first decade, it has become a central pillar of the UK's national security architecture, advising businesses, government departments, and the public on how to guard against attacks that range from ransomware to state-sponsored espionage.

The timing of the King's letter coincides with a high-profile cyber incident involving the online fashion retailer Asos. Earlier this week, the NCSC offered assistance to the company after customers received a push notification sent through the retailer's own app by hackers. The BBC understands that the notification, which reached potentially millions of users, was delivered via Asos's internal systems.

Asos said it was investigating what it described as "unauthorised activity" involving third-party platforms. The company subsequently told customers that hackers had obtained detailed profiles of potentially millions of users, including names, addresses, phone numbers, email addresses, customer numbers, and dates of birth. That disclosure marked an expansion of an earlier statement in which Asos had said only basic contact details might have been accessed.

The retailer issued the updated warning after BBC News informed it that cyber criminals had made contact claiming the breach went well beyond the limited data initially acknowledged. The episode illustrates a pattern increasingly common in modern cyber attacks, where intruders exploit third-party services and integrated platforms to reach large audiences, often before victims fully understand the scope of the compromise.

For the NCSC's anniversary, the Asos case serves as a timely reminder of the scale and complexity of the threats the agency was created to counter. Analysts note that attacks are no longer solely the work of lone hackers; organised criminal groups and state-linked actors now operate with sophisticated tooling, including automation that allows them to probe for weaknesses continuously and at volume.

The King's letter reflects a broader shift in how national security is discussed. Cyber security is no longer treated as a niche technical concern but as a foundation of economic stability, democratic integrity, and public safety. His framing ties digital resilience directly to the protection of international order, suggesting that online threats are now understood as strategic risks rather than isolated technical incidents.

The monarch's repeated focus on AI also signals growing concern at the highest levels about the intersection of artificial intelligence and security. As AI systems grow more capable, they can be used both to strengthen defences and to supercharge disinformation, fraud, and cyber attacks. The King's message to both the NCSC and the AI industry indicates that the coming decade of cyber defence will be defined by how well governments and companies manage that dual-edged potential.