Iran joint statement: hybrid threats explained

In a statement published by the Foreign, Commonwealth and Development Office on 12 October, foreign ministers from 32 countries condemned what they described as Iran's use of violent and covert attacks beyond its borders. The UK Government said those acts included lethal plots, arson, sabotage, cyber-attacks and other hostile activity aimed at states and their partners. If that sounds like dense diplomatic language, it helps to slow it down. This is not only a political rebuke. It is also a security warning, written in the formal language governments use when they want the public and other states to understand that they see a pattern, not a one-off event.

One of the key phrases in the statement is 'hybrid activity'. In plain English, that means harmful action carried out by mixed methods. Some of it may happen online, some in the physical world, and some through secretive networks that are hard to track. So when you hear the term 'hybrid threats', think less about open warfare and more about a combination of hacking, sabotage, intimidation and covert pressure. These acts can fall into the space between crime, espionage and military confrontation, which is one reason they are so hard for the public to follow in real time.

The statement also says the signatories recognise the United Kingdom's attribution of Iran's involvement in the incident at RAF Fairford on 27 September. 'Attribution' matters because it is the moment when a government moves from private suspicion to a public accusation. **What this means:** attribution is not just a dramatic word for a press release. It is a formal judgement that officials believe they have enough evidence to say a state was involved, even if all of that evidence is not released publicly. That is why attribution usually carries diplomatic and legal weight.

The UK Government statement goes further by saying the incident showed the IRGC's continued willingness to project hostile activity beyond Iran's borders through covert networks and proxy actors. A proxy actor is a person, group or network that acts for a state, or in a state's interests, without that state always appearing openly at the scene. This matters because proxies can blur responsibility. If an attack is carried out through others, the state accused of backing it may hope for distance and deniability. For readers, the useful question is not only who physically carried out an act, but who may have directed, supported or encouraged it.

The ministers linked their warning to recent attacks across Europe aimed at Jewish communities, Iranian journalists and US interests. According to the statement, those attacks were claimed by Harakat Ashab al-Yamin al-Islamiya, or HAYI. That detail widens the story. The issue here is not presented as a dispute taking place only between governments. The targets named in the statement include community groups and journalists, which tells us these security concerns can spill into everyday civic life, media freedom and public safety.

The political message from the 32 signatories is direct. They say any attempt by Iran to threaten, silence, intimidate, harass, harm or coerce people on their territory is unacceptable, whether it happens directly or through proxies. They also say those carrying out hostile acts on behalf of Iran, or any other state, should expect efforts to identify, investigate, disrupt and prosecute them. **A useful reading tip:** when many governments sign one statement together, they are doing more than sharing a view. They are showing unity, warning against further action and signalling that future incidents may trigger a more coordinated response.

There is also a media literacy lesson in this story. Official statements like this are carefully built, and each term does a job. 'Condemn', 'attribute', 'proxy' and 'hybrid' are not filler words. They shape how responsibility is described and how the public is asked to understand a threat. So if you are trying to make sense of this kind of foreign policy news, start with three plain questions. What is being alleged? Who is said to be behind it? And what does a government seem confident enough to say in public? That approach will usually take you further than the diplomatic wording on its own.