← All writing

MI5 sets up an AI threat centre as Kyiv is hit without warning

Morning Brief · Wednesday 14 October 2026

morning-brief ai-generated

MI5’s Director General, Sir Ken McCallum, used his annual security update to announce an AI Threat Assessment Centre. He also said that hostile state activity now absorbs as much of the service’s effort as counter-terrorism, and that Iran-linked plots against British military sites and Jewish communities have produced more than 50 arrests in a year. The centre’s staffing and budget are not yet public.

In Ukraine, Russian ballistic missiles struck Kyiv on consecutive days before sirens sounded, and President Zelensky tied this to intelligence sharing. Ukraine says it has paused refinery strikes to test Donald Trump’s “energy ceasefire”, while Russia’s behaviour is reported inconsistently. The US Army has created a three-star command for autonomy, and Anduril has won a contract worth up to $1.8bn for Pacific command software. The IMF has named an AI market correction as a leading threat to financial stability, and the DRC Ebola outbreak has passed 9,000 confirmed cases.

MI5 creates an AI Threat Assessment Centre

McCallum announced the centre in London on 13 October. Its job, as he described it, is to assess emerging AI risks and separate bluster from genuine capability (Politico Europe, BBC News). He said the service is working with the AI Security Institute, GCHQ and MI6 to stress-test frontier models, including against biological and chemical weapons risks (Politico Europe).

The bioweapons concern was the part he stressed most. He described it as unrealised but serious: AI could lower the barriers to creating or using biological weapons if developer guardrails fail (The Guardian, Politico Europe). That is a statement about trajectory, not evidence of an incident. The nearer-term uses he cited are more mundane: extremists and others trying to use AI for individualised radicalisation, reconnaissance and the integration of software with drones (The Guardian, BBC News). The sources describe these as attempts, with no assessment of how successful they have been.

The wider picture he drew is of a service stretched. State threats have quadrupled over a decade and now take resources equal to counter-terrorism (The Guardian, BBC News). Nearly 1,000 Russian intelligence officers have been expelled since the invasion of Ukraine, which McCallum says has pushed Moscow towards hired criminal proxies (BBC News). The same pattern applies to Iran: he cited more than 50 Iran-linked arrests in the past year, including over RAF Fairford (The Guardian, BBC News). Reporting differs on how many people were arrested over the 27 September Fairford incident, five or seven.

The new centre matters institutionally. It places AI capability assessment inside the domestic security service, rather than leaving it only with the AI Security Institute, which tests models but has no operational mandate. Whether it has its own technical staff or relies on secondments will determine how much it adds. Nothing published says.

Kyiv struck by ballistic missiles with no warning

Russian ballistic missiles hit Kyiv shortly after 10pm on 12 October, before air raid sirens sounded, damaging railway infrastructure and a warehouse, according to Mayor Vitali Klitschko (Kyiv Independent). Al Jazeera reports that Kyiv was hit again the next day, again without warning (Al Jazeera). Zelensky said intelligence sharing helps prevent casualties, following reports that Ukraine had no advance notice (Politico Europe). Evidence here is thin: the detailed account is one Kyiv Independent report, and the others are brief summaries.

Ballistic missiles reach a target within minutes, so warning depends on detecting launches early, typically through space-based infrared sensing and long-range radar. Much of that capability is supplied by allies, chiefly the United States. The sources do not say whether the failures were technical, operational or a matter of policy. That distinction matters, because the Kyiv Independent reported last week that US envoys had threatened to cut targeting intelligence if refinery strikes continued. Nothing in today’s material shows that any such cut has happened, and linking the two would be speculation. But it is the first question the missing warnings raise.

Overnight into 13 October, Russia launched five ballistic missiles, nine Banderol missiles and 108 drones, including 74 jet-powered Shahed variants. According to the Ukrainian Air Force, 88 drones were shot down or suppressed (Kyiv Independent). Across the country, regional authorities reported at least 10 dead and more than 80 injured over the period (Kyiv Independent). Jet-powered Shaheds are faster than the propeller models and harder for gun-based defences to catch, which is why they matter in a mixed salvo.

The energy truce: a pause on one side, contested reporting on the other

Zelensky said on 13 October that Ukraine had paused strikes on Russian refineries and energy infrastructure for two days to test the truce Trump announced on 11 October (Kyiv Independent). He said Russia had not reciprocated, citing a strike on Kharkiv’s CHP-5 power plant on the evening of 11 October and continued attacks on the grid that caused blackouts and water disruption in Kyiv (Kyiv Independent). He also claimed more than 200 strikes on electricity and transmission targets over the past week, with more than 150 deaths and 700 injuries (Kyiv Independent).

Reuters, however, reported that Russia hit no Ukrainian energy targets on 13 October, the first such day since the declaration (Reuters). The two accounts can both be true: Zelensky’s figures cover a week, and Reuters covers one day. But the discrepancy shows how little there is to verify against. No monitoring mechanism has been announced, and Kremlin spokesman Dmitry Peskov said only that Moscow wants long-term peace, not that it accepts the truce terms (Al Jazeera).

Ukraine has little refining capacity to protect, while Russia’s strikes on the grid hit civilians as winter approaches. A one-day lull does not change that asymmetry. The likelier test is whether the pause holds through the next Russian mass raid and whether Kyiv resumes refinery strikes if it does not.

The US Army builds a command around autonomy

At the AUSA conference on 13 October, Acting Chief of Staff Gen. Christopher LaNeve redesignated the Army’s Futures and Concepts Command as the Futures and Autonomous Systems Command (FASCOM), a three-star organisation under Lt. Gen. Mac McCurry (Breaking Defense, Defense One). It will act as the Army component to the joint Autonomous Warfare Command proposed by Defense Secretary Pete Hegseth on 30 September, and McCurry will also be the Army’s Portfolio Acquisition Executive for Autonomy, with direct procurement authority over priority systems (Defense News, Defense One).

An internal memo of 1 October directs the Army to integrate autonomy across six warfighting domains by fiscal 2028 and to add drone and robotics specialist positions across units (Defense News). Doctrine keeps humans “on the loop” for lethal decisions, with autonomy handling rapid data processing (Defense One).

The structure is unsettled. The joint command needs congressional legislation, with a target date of 1 October 2027 (Defense News). FASCOM’s parent, the four-star Transformation and Training Command, only absorbed the predecessor command this year, and its relationship to FASCOM is unresolved (Defense News). The significance is the combination of doctrine, development and buying power under one officer, which attacks the usual delay between prototype and fielding. Whether it works depends on funding, which has not been specified.

Anduril wins a corps-level command-and-control contract

On 30 September the Army awarded Anduril an initial $162.8m, with options up to $1.8bn over five years, to move its Next Generation Command and Control (NGC2) software from experiment to fielding (Defense News). The immediate step extends the common data baseline to I Corps, whose area covers the Indo-Pacific (Defense News, DefenseScoop). The baseline builds on Anduril’s Lattice platform, with contributions from Palantir, Raft and Striveworks (Defense News).

The design principle is a common data layer, so that new sensors, applications or weapons can be added without rebuilding the architecture (Defense News). The difficulty is distance and disruption: I Corps commander Lt. Gen. Matt McFarlane stressed the “tyranny of distance” across the Pacific (DefenseScoop). Some equipment evaluated for NGC2 failed in desert heat during the July Project Convergence-Capstone 6 exercise (DefenseScoop). The sources do not identify it. The $1.8bn is a ceiling, and how much is guaranteed is unknown. Commercially, this is a flagship command-and-control programme going to a newer entrant rather than a traditional prime.

The IMF names an AI correction as a stability risk

In its Global Financial Stability Report, the IMF listed an AI asset price correction among three salient near-term risks, alongside rising sovereign borrowing costs and major cyberattacks (The Guardian, Reuters). It noted that the “Magnificent Seven” now make up more than 35% of the S&P 500, against 12% a decade ago (The Guardian). It also cited $300bn of circular financing between hyperscalers and weaker AI firms over three years, and $650bn of debt set against $1.4tn of future commitments (The Guardian).

The mechanism is familiar: capital flows to smaller firms, which spend it on the investors’ own compute, so reported revenue is partly interdependent. The report suggests AI may need less infrastructure spending than planned, and that gains may be smaller than expected. Asia and the US are said to be most exposed, the UK and euro area less so (The Guardian). The Guardian is the main source here, and the underlying IMF tables were not available, so the figures are as reported.

Ebola in the DRC passes 9,000 confirmed cases

The DRC Health Ministry reported 9,066 confirmed cases and 4,381 deaths on 13 October, a fatality rate near 48% (Al Jazeera). The Bundibugyo strain has spread across seven provinces since the outbreak was declared in mid-May. It is the DRC’s deadliest on record, behind only West Africa in 2014–16 (Al Jazeera). No vaccine or specific treatment is approved for Bundibugyo, unlike Zaire ebolavirus, for which licensed vaccines exist (Al Jazeera). That is why the WHO’s planned trial matters, though the candidates have not been named (Al Jazeera).

Fighting between government forces and M23 disrupts supply and surveillance, and community mistrust persists. A local politician who defended the response was beaten to death in September (Al Jazeera). Kenya confirmed a fatal imported case after a traveller transited Uganda (Al Jazeera). Case counts from areas under M23 control are probably undercounts, and the sources give no figure.

What to watch

  • AI Threat Assessment Centre: published detail on staffing, budget and reporting lines, and its relationship to the AI Security Institute.
  • Kyiv warning gap: an explanation of the missing sirens and any confirmation or denial of changes to US intelligence support.
  • Energy truce: a Kremlin statement, any monitoring arrangement, and whether Ukraine resumes refinery strikes.
  • FASCOM and AUTOWARCOM: legislative proposals and the command relationship with T2COM.
  • Ebola: the start and candidates of the WHO vaccine trial, and any secondary Kenyan cases.
  • 28 October: the Budget, with the IMF’s warning as backdrop.

Read further

Morning Brief is generated automatically each morning by an AI pipeline that reads, selects and summarises news reporting. It is published unedited; every factual claim links to its source.