MI5 chief calls Russia "aggressor number one" for Britain, flags Iran and AI threats

Why it matters

It is the most senior public assessment of threats to Britain in MI5's annual address, framing Russia as the foremost state aggressor and tying that to Russian hybrid operations against Ukraine's European backers. It places the recent suspected plot against RAF Fairford in a wider pattern of Iranian activity on UK soil, while acknowledging that Iran's domestic capabilities remain limited by the proxies it relies on. McCallum quantified the scale of the challenge, saying state threats have quadrupled in a decade and now absorb more resources than during the Cold War, and elevated artificial intelligence as a new frontier of concern, including for use by extremists in biological-weapons research. He also linked the timing of Russian attempts to destabilise other European countries to limited and costly Russian progress on the battlefield in Ukraine.

What happened

MI5 director-general Ken McCallum delivered his annual threat speech on 13 October, using it to set out a picture of escalating state threats facing Britain. He described Russia as "aggressor number one" for the UK, said Russian hybrid warfare — including sabotage, cyberattacks and bomb threats directed at countries backing Ukraine — is intensifying, and noted that Russia's battlefield progress in Ukraine remains "minimal and horrifically costly." He endorsed assessments from other European intelligence services that Russian tactics now "barely fall short of becoming a conventional conflict," and cited a drone attack attempt on a cargo plane at a German airport and a cyberattack on Polish energy infrastructure as examples.

On Iran, McCallum said Tehran's ambitions on UK soil have shifted toward harder targets, including military facilities, and that Iran-related operations in Britain have led to more than 50 arrests over the past year. He placed the recent suspected plot against RAF Fairford in this broader pattern, saying the incident was not unique, and noted that Iran has previously targeted Jewish communities in the UK. He added that Iran's capabilities in Britain are constrained by the limited training of the criminal and proxy networks it relies on, even though the IRGC has significant experience in more aggressive hybrid operations in countries closer to Iran.

On the scale of the challenge, McCallum said state threats had quadrupled over the past decade and that MI5 now devotes more resources to countering state threats than it did during the Cold War. He also flagged artificial intelligence as a growing frontier of risk, saying terrorists are already using AI for reconnaissance and drone-attack planning, and that his gravest concern is the unrealised possibility of extremists using AI to develop biological weapons. MI5 has set up a dedicated centre to assess AI risks.

How Ukrainian sources describe it

All three supplied outlets — Yevropeiska pravda, NV and Babel — are Ukrainian-language and frame McCallum's speech as a confirmation of the threat Russia poses to the West. They lead with Russia's status as "aggressor number one" and the intensification of Russian hybrid warfare, and highlight McCallum's observation that Russian attempts to destabilise other European countries coincide with minimal and costly Russian advances in Ukraine, tying the British intelligence assessment directly to the war. The suspected plot against RAF Fairford is presented as part of a broader Iranian and Russian pattern rather than as a standalone criminal case.

Background

On 12 October, UK Prime Minister Andy Burnham said the suspected plot against RAF Fairford was most likely coordinated from Iran and almost certainly directed by the IRGC, and both police and the prime minister pointed to possible foreign-state involvement. Five men detained over the alleged plot were released on police bail without charges under strict conditions, and two further detainees, including a dual British-Iranian citizen, were also released; investigators found petrol in seized vans but no usable explosive devices. McCallum cited a drone-attack attempt on a cargo plane at a German airport and a cyberattack on Polish energy infrastructure as examples of Russian hybrid tactics, and said the RAF Fairford incident is not unique. Iran-related operations in Britain over the past year have led to more than 50 arrests, and MI5 says Iran has previously targeted Jewish communities in the country.