State-backed hostile activity has expanded significantly beyond traditional espionage, forcing a structural recalibration within the service. Sir Ken noted that countering state threats and traditional terrorism now occupy roughly equal shares of operational capacity, marking what he termed a massive shift in recent years. The warning arrives amid mounting concern across European security agencies regarding coordinated efforts to test Western resolve through non-conventional sabotage, cyber operations, and proxy actions.
Russia’s Hybrid Campaign and Reliance on Proxies
According to the BBC, Sir Ken identified Moscow as the primary aggressor state, waging a campaign of hybrid warfare designed to unsettle European nations. This strategy unfolds while Russia’s conventional military campaign in Ukraine remains slow and exceptionally costly. Rather than engaging in direct military confrontation with NATO, the Kremlin relies on sub-threshold disruption, including cyber-attacks targeting critical infrastructure across Europe and attempted sabotage at logistics hubs.
British intelligence operations have severely degraded traditional Russian espionage networks within the UK. Sir Ken reported that nearly 1,000 Russian intelligence officers operating under diplomatic cover have been expelled since the full-scale invasion of Ukraine began. Deprived of its conventional covert footprint, Moscow has become increasingly dependent on paying criminal proxies to execute hostile acts on British soil. “With its traditional covert footprint eviscerated by almost 1,000 expulsions since the invasion, the Kremlin’s global toolkit is weak,” Sir Ken said, adding that such reliance on criminal hirelings demonstrates that Russia lacks the strategic upper hand.
Addressing historical interference, the MI5 chief commented on recent remarks by Prime Minister Andy Burnham regarding Russian meddling in the 2016 Brexit referendum. Sir Ken clarified that while attempts by Russian media, trolls, and bot farms to influence public debate are a matter of public record, a clear distinction must be maintained between interference attempted and outcome achieved, emphasizing that the referendum result is not in dispute.
Expanding Iranian Operations and Domestic Security Incidents
Alongside Russian aggression, MI5 highlighted a sharp escalation in hostile activities linked to Iran. Intelligence assessments indicate that Tehran is expanding its hybrid campaign inside the United Kingdom, focusing heavily on Jewish communities and high-value installations.
ProtoThema reported that counter-terrorism authorities recorded 50 arrests over the past year in connection with Iran-linked plots. The domestic threat environment was underscored by security alerts surrounding sensitive military installations, including an incident near the Royal Air Force base at Fairford in Gloucestershire. Seven individuals were arrested by counter-terrorism police following the discovery of suspicious vehicles near the perimeter, with local leadership attributing the directive to Iran’s Islamic Revolutionary Guard Corps. Sir Ken declined to comment directly on the ongoing Fairford investigation but confirmed that Iranian interest in military sites across the UK is not an isolated occurrence.
Artificial Intelligence and the Acceleration of Extremism
The security briefing placed heavy emphasis on the transformative impact of artificial intelligence, which Sir Ken described as supercharging both cyber-offences and extremist capabilities. MI5 has already intervened against domestic extremists attempting to integrate machine learning systems with unmanned drone technologies.
Of primary concern to intelligence planners is the potential exploitation of generative and analytical AI tools by extremist networks to design or acquire biological weapons and novel pathogens. While digital defense mechanisms evolve rapidly alongside cyber threats, intelligence officials warn that the barrier to entry for developing CBRN-adjacent capabilities is lowering dangerously as automated systems become more widely accessible.
Reporting source: bbc.com.