Loading story…
Blaise Metreweli, the new chief of MI6, delivered her first public speech outlining the evolving landscape of intelligence and security threats facing the United Kingdom. She emphasized that advances in artificial intelligence, biotechnology, and quantum computing are fundamentally changing the nature of conflict, with technology now playing a central role in both threats and opportunities for intelligence agencies. Metreweli warned that the UK is operating "in a space between peace and war," where state and non-state actors leverage cyberattacks, disinformation, and emerging technologies to challenge national security. She highlighted the need for society-wide efforts to counter disinformation, including educating children to recognize manipulative algorithms and propaganda.
Metreweli focused particularly on the acute threat posed by Russia, describing its strategy as deliberately exporting chaos through cyberattacks on critical infrastructure, espionage, sabotage, and influence operations. She signaled Britain's intent to increase pressure on the Kremlin, noting that recent UK government sanctions targeted Russia's military intelligence agency and associated cyber officers following a public inquiry into a deadly nerve agent attack. The speech also referenced the broader escalation of hybrid threats from both Russian and Chinese actors, with the UK and its allies responding through sanctions and enhanced intelligence collaboration. Metreweli's appointment and remarks underscore a shift towards integrating advanced technology and traditional human intelligence in the face of increasingly complex security challenges.
TTPs, infrastructure, and targeting history in one profile.
2 events from the most recent confirmed update back to the earliest known activity.
In the same speech, Metreweli said MI6 would deepen its use of AI, data analysis, and other advanced technologies while preserving the central role of human intelligence and judgment. She also emphasized recruiting technical talent such as data scientists, engineers, and linguists and signaled continued public engagement, including secure dark web channels for informants.
In her first public address as head of MI6, Blaise Metreweli warned that the UK faces persistent hybrid threats in the space between peace and war. She highlighted Russia's use of cyberattacks, espionage, sabotage, drones, propaganda, and other 'grey zone' tactics, saying the 'front line is everywhere.'
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See this adversary's TTPs, infrastructure, and targeting history, correlated against your exposure.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The United Kingdom has imposed new sanctions on several Russian and Chinese organizations and individuals accused of conducting cyberattacks and influence operations aimed at undermining Western democracies. Foreign Secretary Yvette Cooper announced these measures, which target Russian influence networks such as the Telegram channel Ryber, Pravfond, and the Centre for Geopolitical Expertise, as well as Chinese technology companies i-Soon and Integrity Technology Group. The sanctions are part of a broader effort to counter hybrid security threats, including disinformation campaigns and cyber operations, with the UK calling for enhanced multilateral cooperation across Europe to address these evolving challenges. In a related address, Cooper emphasized the growing sophistication and democratization of tools used by hostile foreign states, particularly Russia, to conduct information warfare and hybrid attacks targeting critical infrastructure and democratic institutions. She highlighted recent examples of Russian disinformation campaigns, such as the Doppelgänger operation and attempts to undermine political stability in Moldova and Africa through fake news and deepfakes. The UK government is urging European partners to strengthen collaboration and resilience against these persistent and complex threats to national and regional security.
Jun 29, 2026
A recent think tank report warns that the United States is not adequately prepared to counter the persistent and offensive cyber campaigns conducted by China and Russia. The report highlights that both adversaries treat cyberspace as a domain for ongoing national competition, with China in particular focusing on maintaining persistent access to U.S. critical infrastructure for potential coercion or disruption. The analysis criticizes the U.S. for relying on outdated, reactive frameworks and calls for a more aggressive, offensive posture to address the evolving threat landscape. In parallel, the United Kingdom is preparing to announce a refreshed cybersecurity strategy, reflecting on past efforts and emphasizing the need for resilience, especially in critical infrastructure. The U.K. faces challenges in resource allocation and skills gaps, which have hindered the implementation of previous strategies. Both the U.S. and U.K. are reassessing their approaches to cyber deterrence and resilience in light of increasing incidents and the strategic ambitions of state actors like China and Russia.
Jun 29, 2026
UK National Cyber Security Centre CEO Richard Horne said the agency handled more than 200 cyber incidents affecting UK critical national infrastructure and its supporting ecosystem between June 2025 and May 2026, with about **75%** assessed as linked to hostile states including Russia, China and Iran. Speaking at the RUSI Annual Security Lecture, Horne said cyber security must be treated as a continuous contest rather than a static risk-management problem, warning that adversaries are already pre-positioning in infrastructure for possible future disruption and citing **Volt Typhoon** as a prominent example. Horne described the threat across "far," "mid" and "near" digital spaces, arguing that governments and allies must combine intelligence, sanctions, law enforcement and offensive cyber operations while industry and government work together to secure cloud, telecoms and open-source ecosystems. He warned that AI will accelerate vulnerability discovery and attack scaling, with attackers likely to apply AI-enabled capabilities against known weaknesses in legacy critical infrastructure technology, and urged organizations to strengthen foundational controls, improve resilience and recovery, and replace unsupported systems.
Aug 11, 2026