MI5 Chief Warns of Escalating Hybrid Warfare Threats from Russia and Iran

Sir Ken McCallum, head of the U.K.’s domestic intelligence agency MI5, has issued a stark warning regarding a new era of national security threats. In his annual update, McCallum identified Russia as the primary state aggressor, while highlighting a significant shift in Iranian tactics. These nations are increasingly utilizing hybrid warfare—ranging from sabotage and arson to cyber-espionage—to target businesses, communities, and critical infrastructure across the United Kingdom and Europe, deliberately operating just below the threshold of conventional military conflict.

The scale of these operations is substantial, with over 50 arrests linked to Iranian-backed activities in the U.K. alone over the past year. McCallum emphasized that while Russia remains the most significant strategic threat, Iran has expanded its ambitions to target harder objectives, including military sites and Jewish communities. The group Harakat Ashab al-Yamin al-Islamiya (HAYI), sanctioned by the U.K. and linked to the Iranian Quds Force, has claimed responsibility for a wave of arson and sabotage incidents targeting synagogues and Jewish organizations across Europe.

Russian hybrid tactics have similarly intensified, focusing on destabilization efforts that avoid triggering NATO’s Article 5 collective defense clause. Recent incidents include thwarted assassination plots against defense industry executives in Germany, suspected sabotage attempts on undersea cables near the U.K., and attacks on drone manufacturing facilities in France. These actions reflect a calculated strategy by Moscow to weaken Western resolve and disrupt supply chains supporting Ukraine without engaging in direct, open warfare.

Looking ahead, the U.K. security establishment is pivoting to address these evolving, decentralized threats. McCallum noted that adversaries are no longer just targeting government assets but are increasingly aiming at the fabric of civil society. As these hybrid campaigns continue to blur the lines between criminal activity and state-sponsored aggression, Western intelligence agencies are under pressure to adapt their defensive postures to protect vulnerable civilian targets and critical infrastructure from persistent, low-level, yet highly disruptive attacks.