MI5 Chief Warns Russia, Iran and AI Are Reshaping UK's Threat Landscape

The head of Britain's domestic intelligence agency has disclosed that MI5 now commits more resources to countering state threats than it did at any point during the Cold War, describing a dramatic transformation in the security landscape facing the United Kingdom.

In his annual address delivered at MI5's headquarters in central London, Sir Ken McCallum said foreign-sponsored threats have grown roughly fourfold over the past ten years. He identified Russia as the foremost aggressor, while also pointing to an expanding campaign linked to Iran and the emerging dangers posed by artificial intelligence.

Sir Ken characterised Moscow's approach as hybrid warfare, a catch-all term covering cyber-attacks, sabotage operations and disinformation campaigns intended to pressure and destabilise rival nations. Such operations are frequently carried out through proxies, and the Kremlin routinely denies any involvement despite accumulating evidence to the contrary. The MI5 chief said Russia has deliberately avoided direct conventional conflict with Nato, opting instead to sow instability across Europe while its full-scale invasion of Ukraine yields only "minimal and horrifically costly" gains.

The intelligence chief revealed that nearly 1,000 Russian operatives have been expelled from the UK since the invasion of Ukraine began, effectively dismantling Moscow's traditional espionage network on British soil. According to Sir Ken, this attrition has forced the Kremlin to rely on paid criminals to carry out attempted attacks, a development he described as uncharacteristic of a genuine great power holding the strategic advantage.

His warnings echoed growing unease among European leaders, many of whom have publicly cautioned that Russia may be preparing provocative actions designed to test their resolve in continuing to back Kyiv. The speech comes at a moment of heightened tension between Moscow and Western capitals, with sabotage incidents and suspected arson attacks reported across several European countries in recent months.

Addressing the politically sensitive question of Russian meddling in the 2016 Brexit referendum, Sir Ken said it was already a matter of public record that Russian media outlets, troll farms and automated bot networks had sought to influence the debate. However, he drew a careful distinction between attempts at interference and any achieved outcome, noting that the referendum result itself is not in dispute. He expressed unease that continued speculation could inadvertently magnify the influence of such actors, warning against making "these trolls look 10ft tall" and playing into adversaries' hands. His remarks followed recent comments by Prime Minister Andy Burnham claiming that Russia had interfered in the referendum.

Turning to Iran, Sir Ken disclosed that approximately 50 arrests have been made in the past year in connection with Iran-linked activity in the UK. Much of this aggression has been directed at Jewish communities, he said, though Iranian operatives have also targeted harder objectives such as military installations. While he did not specifically name RAF Fairford during his formal remarks, he told journalists afterwards that the incident there was "not unique" and that Iranian interest extends well beyond that single site. Three suspicious vans were reportedly observed near the Gloucestershire airbase, leading counter-terrorism police to arrest and subsequently bail seven individuals. Burnham has stated that the episode was almost certainly directed by Iran's Islamic Revolutionary Guard Corps.

The MI5 director general pledged an uncompromising response to anyone seeking to cause mayhem on British streets, whether hired criminals operating domestically or the foreign paymasters directing them from abroad. He also noted that the National Security Act, legislation introduced in 2023 to prosecute individuals working on behalf of hostile foreign powers, is being used extensively, with cases spanning threats from China as well as Iran and Russia.

On the subject of artificial intelligence, Sir Ken offered a sobering assessment of how the technology is altering the balance between attackers and defenders. He said AI is "supercharging the cyber-security contest" and can generate propaganda and radicalising content tailored to specific individuals. MI5 has intercepted terrorists attempting to leverage AI to refine their reconnaissance and attack methods, including by pairing the technology with drones, which he said adds a dangerous new dimension.

The most alarming long-term concern, according to the MI5 chief, involves extremist groups potentially using AI to develop or enhance biological weapons. While he stressed that this threat has not yet materialised, he cautioned that the technology has the potential to fundamentally change the stakes. He confirmed that MI5, GCHQ and MI6 are collaborating closely with the UK's AI Security Institute to confront these risks.

Sir Ken acknowledged the inherent difficulty of preparing for threats that have no historical precedent, observing that humanity has never before confronted an actor more intelligent than itself. To address this gap, he announced the creation of an AI Threat Assessment Centre within MI5, tasked with evaluating sources and distinguishing credible dangers from exaggerated claims.

The address also touched on the broader terrorism picture. In April, the UK's terrorism threat level was raised to severe for the first time in five years, indicating that an attack is considered highly likely. Sir Ken noted that Islamist groups such as Al Qaeda continue to feature prominently in the threat matrix, while also flagging the persistent danger from extreme right-wing terrorism.

Perhaps most striking was his assessment that counter-terrorism work and state threat operations are now "pretty much of equal scale," a situation he described as a huge shift in recent years. The admission underscores how profoundly the priorities of Britain's security services have been reshaped by an era defined by hostile state activity, technological disruption and the constant evolution of extremist tactics.