Iran, Russia Hybrid Threats Raise Europe Risk

The warning matters beyond intelligence circles because hybrid attacks can disrupt transport, energy and defense infrastructure without crossing into open conflict. That raises the cost of security across Europe, keeps pressure on government budgets and adds another layer of risk for companies exposed to critical infrastructure, logistics, cloud networks and defense supply chains.

McCallum said Britain has seen a “major shift” in Iranian ambitions toward harder targets such as military sites, and pointed to incidents outside the UK as well. He declined to comment on the suspected plot against RAF Fairford, which British officials have linked to Tehran, but said the episode was “not unique.”

On Russia, McCallum described Moscow as the “aggressor number one,” citing attempted drone attacks and cyber activity against European infrastructure. His comments echo warnings from other intelligence agencies that the Kremlin is using tactics just short of conventional war while its progress in Ukraine remains limited and costly.

For investors, the implications run from higher demand for cybersecurity and defense to more headline risk for airlines, utilities, industrials and data-heavy businesses that sit on the front line of hybrid attacks. The message is also a reminder that geopolitical volatility remains a live input for markets already sensitive to energy prices, supply-chain shocks and sanctions.

The broader backdrop is a global security environment in which states, proxies and non-state actors increasingly blur the line between war and peacetime disruption. With AI raising fresh concerns about the possible development of bioweapons and novel pathogens, Western governments are likely to keep spending more on intelligence, surveillance, cyber defense and physical protection.