British intelligence has issued a grave alert: more than 100 countries now control advanced commercial spyware capable of infiltrating smartphones and laptops to extract sensitive personal data.
The National Cyber Security Centre (NCSC) will unveil these findings on Wednesday, underscoring how access to such invasive technology has become far easier in recent years. This development raises serious concerns for UK citizens, businesses, and essential infrastructure, which could increasingly fall prey to foreign governments and cybercriminals.
The number of nations with these capabilities has jumped 25% from the 80 estimated by UK experts in 2023. Reports from organisations like Citizen Lab and Amnesty International paint a similar picture, documenting widespread proliferation driven by dozens of private vendors.
Tools such as NSO Group’s Pegasus and Paragon’s Graphite exploit hidden flaws in device software for undetected access. While authorities claim they target only terrorists and major criminals, evidence shows frequent misuse against journalists, activists, and rivals. UK assessments now reveal an expanded range of victims, including bankers and business leaders in the City of London.

Speaking at the CYBERUK conference in Glasgow, NCSC head Richard Horne warned that “British companies are failing to grasp the reality of today’s world.” He attributed most significant cyberattacks on the UK to adversarial states rather than criminal gangs.
Persistent threats from China-linked groups, including the Salt Typhoon operation, compound the risks. These incursions have hit telecom networks and even voter databases, potentially paving the way for disruptions amid tensions over Taiwan.
Cybercriminals pose another danger after the recent DarkSword exploit leak, which exposed vulnerabilities in iPhones and echoed past incidents like the NSA’s EternalBlue tool that fuelled global ransomware waves.
As cybersecurity firms like Mandiant and Recorded Future predict ongoing market growth, experts call for urgent patching and stronger defences to counter this escalating spyware menace.