UK hunt missions target hackers overseas, but legal questions remain

The UK military is deploying "hunt forces" overseas, including to Asia and Europe, to disrupt hostile hackers before they can launch large-scale attacks on British defence systems. Major General Mike Fayers, commander of the Defence Cyber and Electromagnetic Force, said the Ministry of Defence is now responding to cyber vulnerabilities in minutes because of AI's escalating impact, and described adversaries as "very cunning." The specialist activity often requires approval from defence secretary Wes Streeting.

The shift marks a move from passive cyber defence to pre-emptive operations on foreign soil. That could deter attacks, but it also risks escalation and legal scrutiny. AI is compressing response times and lowering the barrier for adversaries, meaning the window to act is shrinking.

Separately, the National Cyber Security Centre warned that AI-powered ransomware attacks on UK critical national infrastructure are "highly likely" by 2028. The National Cyber Force has appointed a new commander whose identity has not yet been avowed.

Several questions remain unanswered. Which specific countries are hosting UK hunt missions? What legal framework governs these overseas cyber operations? How does the UK measure success or failure of hunt missions? Who is the new National Cyber Force commander, and when will they be avowed? What specific AI-powered threats has the MoD identified?

Those gaps matter. Pre-emptive operations without public accountability mechanisms invite both escalation and domestic legal challenge. The hunters can be hunted. The UK is betting that moving first is safer than waiting. The evidence for that bet is not yet in.