MI5 Chief Warns Russia, Iran and AI Are Reshaping UK's Security Landscape

MI5 is now allocating more resources to countering state threats than it did at any point during the Cold War, according to the head of the UK's domestic intelligence service. Sir Ken McCallum, who delivered his annual address at the agency's central London headquarters, said foreign adversaries have become dramatically more active over the past ten years, with the scale of hostile activity having roughly quadrupled in that period. His remarks underscore a broader strategic shift in which espionage, sabotage and cyber-offensive operations have moved from the margins of national security planning to its very centre.

In his speech, Sir Ken identified Russia as "aggressor number one," describing Moscow's campaign against the UK and its allies as a sustained programme of hybrid warfare. Rather than engaging in what he called conventional conflict with Nato, Russia is instead pursuing tactics designed to unsettle European nations while its full-scale invasion of Ukraine continues to yield what he characterised as minimal and horrifically costly gains. The MI5 chief's assessment aligns with warnings from a growing number of European leaders who believe Moscow may be preparing further attacks to test their resolve in supporting Kyiv.

Hybrid warfare, as described by security officials, typically involves non-military methods such as cyber-attacks, sabotage operations and disinformation campaigns intended to pressure and destabilise an opponent. These operations are frequently carried out through proxies, and Russia routinely denies any involvement despite accumulating evidence to the contrary. According to Sir Ken, the UK's success in identifying and removing Russian intelligence officers has significantly degraded the Kremlin's ability to operate covertly on British soil, with nearly 1,000 expulsions recorded since the invasion of Ukraine began. This, he argued, has forced Moscow to rely on paying criminal proxies to carry out attempted attacks, a development he described as inconsistent with the behaviour of a great power holding the strategic advantage.

The MI5 chief's comments came in response to questions about recent remarks by Prime Minister Andy Burnham, who suggested that Russia had interfered in the 2016 Brexit referendum. Sir Ken said it was already a matter of public record that Russian media outlets, so-called internet trolls and bot farms had sought to influence the Brexit debate. However, he drew a careful distinction between interference that was attempted and any outcome that may have been achieved, noting that the result of the referendum itself is not in dispute. He also expressed anxiety about the ongoing public debate on the issue, cautioning against exaggerating the influence of such actors and thereby playing into the hands of adversaries.

Turning to Iran, Sir Ken warned that Tehran is expanding its own hybrid campaign inside the UK. He revealed that approximately 50 arrests have been made over the past year in connection with Iran-linked activities, with much of the aggression directed at Jewish communities as well as at harder targets including military installations. While he did not specifically mention the incident at RAF Fairford in Gloucestershire during his formal address, he told reporters afterwards that the episode was not unique and that Iranian interest extends beyond that single site. Three suspicious vans were reportedly seen parked near the airbase, leading to seven arrests and subsequent bail by counter-terrorism police. Prime Minister Burnham has stated that the incident was almost certainly directed by Iran's Islamic Revolutionary Guard.

The MI5 director general also addressed the rapidly evolving challenge posed by artificial intelligence, warning that the technology is supercharging the cyber-security contest between attackers and defenders. He said that AI can be used to generate propaganda and radicalising material tailored to specific individuals, and that MI5 has already apprehended terrorists attempting to exploit the technology to improve their reconnaissance and attack methodologies. The integration of AI with drones, he noted, adds a new dimension to the threat landscape, creating capabilities that were not available to hostile actors even a few years ago.

Beyond cyber and drone applications, Sir Ken highlighted the potential for AI to be misused in the development of biological weapons. While he stressed that this particular threat has not yet been realised, he warned that the technology has the potential to fundamentally change the stakes. He explained that the UK Intelligence Community, comprising MI5, GCHQ and MI6, is working closely with the UK's AI Security Institute to confront these emerging risks. In a particularly striking observation, he noted that human history offers no precedent for facing an actor that is smarter than we are, underscoring the profound uncertainty that AI introduces into the security environment.

To address these challenges, Sir Ken announced the creation of an AI Threat Assessment Centre within MI5. This new unit will be responsible for evaluating sources of information and distinguishing credible threats from exaggeration. The announcement reflects a broader recognition within the intelligence community that AI is not merely a tool for improving existing capabilities but a transformative force that could reshape the nature of espionage, terrorism and warfare in ways that are difficult to predict.

The MI5 chief also drew attention to the persistent danger of extreme right-wing terrorism, which he said continues to pose a significant threat. In addition, he noted that Islamist groups remain a serious concern, though his remarks on that subject were cut short in the published account of his speech. The combined effect of these varied threats has led to a substantial rebalancing of MI5's priorities, with counter-terrorism and counter-state-threat work now described as being of roughly equal scale, a situation he characterised as a huge shift in recent years.

The context for these warnings is a heightened national threat level. In April, the UK's terrorism threat level was raised to severe for the first time in five years, meaning that authorities consider an attack to be highly likely. Sir Ken's address also highlighted the heavy use of the National Security Act, a 2023 law designed to target individuals working against UK interests on behalf of foreign powers. The legislation has been employed to tackle threats from China as well as from Iran and Russia, signalling that the UK government now views state-sponsored hostility as a permanent and multifaceted feature of the security landscape.

Sir Ken's speech reflects a security establishment grappling with a rapidly changing world in which traditional distinctions between espionage, terrorism and cyber-warfare are blurring. The combination of aggressive state actors, emerging technologies and persistent ideological extremism presents a complex web of threats that requires constant adaptation. His decision to devote more resources to state threats than at any time since the Cold War suggests that the UK intelligence apparatus is undergoing one of its most significant strategic realignments in decades. With Russia actively seeking to undermine Western unity, Iran extending its reach into British domestic affairs, and AI opening new frontiers for both attackers and defenders, the challenges outlined in his address are unlikely to diminish in the years ahead.