What MI5 Means by Hybrid Threats to Britain

What does MI5 mean by hybrid threats?

Hybrid threats are hostile activities that can put pressure on a country without taking the form of a declared war. MI5 chief Ken McCallum said Russia was waging hybrid warfare while avoiding a move that would trigger a joint response from Nato. ²

The public material provided here does not give a complete definition or list of methods. It does describe Russian media coverage and online troll accounts as attempted interference in the Brexit referendum. ¹ Those examples show that influence efforts can be part of the discussion, but they do not establish that every misleading post or foreign news report is directed by a state.

What has MI5 said about Russia and Britain?

McCallum called Russia the leading state threat in his remarks, according to the BBC, and said the service was facing a much larger state-threat workload than in the past. ² He also said Russia was trying to unsettle European countries while stopping short of conventional conflict with Nato. ²

On the Brexit referendum, McCallum said Moscow had attempted to interfere through anti-EU coverage on RT and Sputnik and through online trolls. He said there was no evidence that those efforts swayed the result, and did not present new evidence publicly. ¹ Attempted interference and a proven effect on a vote are different claims.

What has MI5 said about Iran and AI?

MI5's chief warned of rising threats from Iran, as well as from Russia and extreme right-wing terrorism. ² The source material does not describe specific Iran-linked incidents, identify targets, or explain how the threat is changing, so those details should not be assumed.

McCallum also said MI5 had caught terrorists seeking to exploit artificial intelligence, or AI, including by combining it with drones. He warned that violent groups might develop new bioweapons. ² These are warnings about risks and activity identified by the service, not evidence in the supplied sources of a particular attack in Britain.

How might these threats affect people and institutions?

The examples in the sources point to possible pressure on public debate and national security, including attempted online influence and concerns about drones or bioweapons. ¹² They do not say that any particular person, organisation, or local community is currently being targeted.

For readers, the clearest practical distinction is between a warning about a type of threat and proof that a specific event is part of one. McCallum cautioned that debate about alleged interference can itself be exploited to divide people. ¹ The supplied sources do not offer individual safety instructions or a way to verify suspected foreign activity.

What is still unknown?

The public accounts cited here provide limited detail about the evidence behind MI5's assessments, the scale of particular operations, or what measures are being taken in response. ¹² The Brexit remarks specifically included no new evidence, and the available account does not quantify the claimed effects of the online efforts. ¹

The sources also do not explain the specific Iran-related concerns or describe a completed AI-assisted attack in Britain. ² These gaps matter: warnings can identify areas of concern without answering how likely a particular event is or what its direct impact would be.