Skip to content
Live Intelligence
Clash Report
World

Europe Debates NATO-Style Action Against Russian Hybrid Warfare

An EU emergency security proposal would coordinate responses to sabotage, cyberattacks and drone incursions, as European capitals question whether existing measures deter Moscow and warn against duplicating NATO.

Clash Report
Military armored vehicles in Baltops 2024 exercise in Baltic Sea region, June 16, 2024 - AP
28 Sept 2026 · 10:03 GMT · 2 MIN READ
Google Search

Choose Clash Report as a preferred source and see our reporting first in Top Stories.

European governments are weighing a new framework to respond collectively to Russian sabotage, as doubts grow about their ability to deter attacks that remain below NATO’s threshold for war.

The debate centers on whether Europe can impose credible costs on Moscow without creating another layer of security consultations.

Most EU countries favor reviewing the current approach, but they remain divided over what a stronger response should involve.

EU defense ministers are due to examine the European Commission’s proposed Emergency Security Protocol in Brussels on Monday, according to the Financial Times.

The mechanism would help coordinate action when member states face attacks falling short of armed aggression.

A Gap Below Article 5

The proposal addresses incidents that threaten national security but do not reach the threshold for NATO’s Article 5 mutual defense clause.

Its consultation function would resemble Article 4, which allows allies to raise threats to their security.

European countries have attributed cyberattacks, an attempted armed drone attack on Leipzig/Halle airport, a railway explosion in Poland and fires at industrial facilities to Moscow.

Those incidents have drawn condemnation without producing a clear collective response.

Andrius Kubilius, the EU defense commissioner, argued that Europe needed to develop consequences commensurate with the damage inflicted.

“Very simply, if we are facing painful hybrid threats or actions, our answer should be painful in a similar way,” he told the Financial Times.

“Russia needs to know that there will be answers, and they can be painful,” he added.

Concern Over Competing Mechanisms

The proposed protocol has also exposed uncertainty about how EU institutions would work alongside NATO during a security crisis.

Several European diplomats told the FT that the mechanism’s purpose remained unclear. They cautioned that parallel procedures could complicate decisions and slow a response.

“I’m not sure that anyone thinks the way to fight back against the Russians is to hold more meetings,” one diplomat said.

Commission President Ursula von der Leyen has presented the initiative as a complement to NATO’s Article 4.

She also proposed a European counter-hybrid playbook, arguing that institutions and decision-making procedures had failed to adapt to the growing threat.

The question for ministers is whether that framework would strengthen Europe’s ability to act or add consultations without resolving disagreements over retaliation.

NATO Points to Existing Options

NATO has already expanded its operational response. Baltic Sentry followed damage to undersea cables in 2023 and 2024, while Eastern Sentry began after last year’s drone incursion into Poland.

European governments have also combined police and intelligence efforts to investigate sabotage and pursue suspects.

NATO Secretary-General Mark Rutte said this week that the alliance had response options available, although some could not be discussed publicly.

He said its actions were not necessarily symmetrical and that Russia was aware of them.

An alliance official welcomed European efforts to assume greater responsibility for shared security and emphasized the importance of EU-NATO cooperation.

Pressure for a reassessment nevertheless continues. Denmark’s intelligence service warned this week that Russia could mount a limited military attack against a NATO member within months.

Some officials also want governments to abandon the hybrid label for assaults involving explosives, arson and other potentially lethal methods, questioning whether the terminology adequately reflects their severity.

About the Author

Ahmet Koçak

Clash Report

Ahmet Koçak is a news editor at Clash Report based in Istanbul. He previously served as Deputy Managing Editor at Türkiye Today, helping launch the digital news platform in 2023, and spent three years as Senior Editor at Daily Sabah. His work focuses on breaking news, geopolitics, international affairs, and digital journalism.

Google Search

Choose Clash Report as a preferred source and see our reporting first in Top Stories.

0:00
0:00
Now playing · ClashPoint
EP 147

When the front line moves overnight

Guest: Daniel Reyes
0:00
0:00