Säpo notes in its latest report on the threats facing Sweden that it has handled a series of different security threats over the past six months.
"This includes both cases stemming from the actions of state actors, but also those related to terrorist activity," Säpo chief Charlotte von Essen told the TT news agency.
Among other things, cases linked to espionage, right-wing extremism and violent Islamist extremism have led to several prosecutions and detentions.
Von Essen said that the terror threat and the state security threat are increasingly intertwining.
"In the sense that we see state actors making use of proxies to carry out attacks, and such an attack can, in certain cases, constitute a terrorist attack," she said.
Previously, incidents at Israeli embassies and the Israeli company Elbit Systems in Gothenburg have been linked to Iran. Recently, a boy was also convicted of attempted murder against a well-known expert on Iran based in Sweden.
"We see that this is ongoing. Threats against American, Jewish, and Israeli interests have increased, as well as against individuals who are prominent within the Iranian diaspora," says von Essen.
Russia continues to be singled out as the greatest threat to Sweden. Säpo notes that Russia has also begun using proxies to carry out hostile acts.
"There are many clear examples from other parts of Europe where digital means have been used to target young people to act as proxies to carry out various types of sabotage."
In Sweden, Säpo has seen examples of attempted destructive cyberattacks that can be linked to Russia. One cyberattack was directed at a heating plant in western Sweden in the spring of 2025, and the fact that it was specifically "destructive" is highlighted as a sign of altered and more risk-tolerant Russian behaviour.
Säpo also notes that Russia has been mapping out operations vital to national security, but declined to specify what these were.
"The mapping can be used at a later date; it can be part of war-preparatory measures," said von Essen.