MI5 Says Iran and Russia Are Expanding Hybrid Campaigns in Britain
MI5 Director General Ken McCallum said Iran and Russia are ramping up hybrid campaigns in Britain. He gave the assessment in an annual speech on wide-ranging threats to Britain reported on Oct. 13, 2026. Reuters
MI5 posted the address on a page titled 'MI5 Director General Delivers Annual Threat Update'. MI5 The page discusses impacts of threats faced at scale in 2026 including arson.
Earlier warnings
That update follows earlier published threat updates. MI5's website hosts a page titled 'Director General Sir Ken McCallum gives threat update' referring to threats from China, Russia, Iran or others. MI5 The BBC, in an article titled "MI5 operating in new era of terror and state threats, says chief", reported the chief saying state threats from Russia, China and Iran are escalating. BBC MI5 also hosts a page titled 'Director General Ken McCallum gives latest threat update' mentioning Iran-backed plots presenting potentially lethal threats to British citizens. MI5
The Iran strand has been public for several years. The BBC reported in November 2022 MI5 speaking of at least 10 potential Iranian threats to kidnap or kill British or UK-based people. BBC In July 2025, the BBC reported a UK committee raised concern over a sharp increase in physical threats against opponents of Iran's regime in the UK. BBC MI5's State threats news category lists a Director General Sir Ken McCallum threat update with published date 16 Oct. MI5
What to watch next
The broader context here is convergence. State threats and terrorism no longer sit in separate lanes for British counterintelligence. Hybrid campaigns is shorthand for espionage, sabotage, arson, coercion and proxy action kept below the level of armed conflict, like entries in one playbook rather than separate problems. At scale means persistent and frequent, not isolated incidents.
In my view, the language choices carry operational weight. Framing separate arson cases as impacts of threats faced at scale treats them as doctrine rather than aberration. That framing shifts countermeasures toward disruption networks, protective security and prosecution pathways. It also conditions private sector and local policing audiences to report low level fires or vandalism as potential state activity. The signal is bureaucratic as much as public.
Looking at what this means for diplomacy and deterrence, the public annual format does distinct work. It sets expectations without exposing sources and methods. It signals to adversaries that activity is tracked. It provides allied services a citable baseline. The 2026 emphasis on Iran and Russia, after the 2025 formulation that included China alongside Russia and Iran, gives specialists a textual change to parse for tasking and resourcing cues. For experts, the next questions concern prosecution volumes, disruption claims and any allied coordination that follows.
