EU Debates Emergency Protocol to Counter Russian Hybrid

The European Commission President has proposed an 'Emergency Security Protocol' modeled on NATO’s Article 4 to counter hybrid threats from Russia. Ursula von der Leyen called for a new 'counter-hybrid playbook' in her recent State of the Union address, acknowledging Europe’s institutions have failed to keep pace with Moscow’s escalating campaign of gray zone aggression.

Von der Leyen framed the protocol as Europe's own version of NATO’s Article 4, which allows a member to call for talks with allies when it believes its security is under threat. Estonian Prime Minister Kaja Kallas said the discussion will examine how EU institutions can work with member countries to determine which tools in the EU's arsenal could be used in the protocol response. She stated the protocol would apply to 'everything that is under the threshold of armed aggression,' including drone incursions, sabotage, and cyberattacks, once responsibility is clear.

Diplomats say the details of the protocol are still vague on what it could entail in theory. The proposal has raised fears among EU countries over a potential turf war with NATO. Kallas said it is still unclear whether there is a majority of member countries in favor of the protocol.

Hybrid attacks from Russia are rising across Europe

Drone incursions, sabotage, and cyberattacks linked to Russia have increased dramatically, with near-daily incidents in Eastern Europe and growing fears of expansion westward. Over the summer, hybrid activity linked to Russia increased dramatically. Drone overflights, crashes, and explosions have become almost daily occurrences in some parts of Eastern Europe, particularly in countries bordering Ukraine.

Tensions between Germany and Russia reached a peak this month after Berlin accused Russia of being behind a drone attack at Leipzig airport earlier this year. Finnish Defense Minister Antti Häkkänen said Russia is not gaining success on the battlefield, so it is increasing pressure and hybrid actions toward countries supporting Ukraine. In Estonia, authorities are still investigating a suspected mid-August 2026 arson attack on defense contractor Milrem Robotics as a potential act of Russian sabotage.

Officials say a key issue determining the EU response is the need to move faster on gathering strong evidence to attribute hybrid attacks. The response in Brussels remains focused on reacting to Russian actions rather than establishing credible deterrence.

EU debates extending air and maritime defenses to deter Russia

Officials are discussing ways to strengthen deterrence, including expanding air defense into western Ukraine and taking stronger action against Russia’s shadow fleet. Europe requires a bolder approach to Russian gray zone aggression that imposes costs on the Kremlin. One option is to help close the strategic gap between NATO air defenses and Ukrainian airspace. Waiting for Russian missiles and drones to cross into EU territory before reacting grants Moscow the tactical initiative.

European countries could consider extending the existing European Sky Shield Initiative to cover parts of western Ukraine. This could be framed as a direct response to increasing Russian violations of NATO airspace. Previous calls to extend air defense coverage inside Ukraine have faced opposition due to European concerns over possible escalation. The Kremlin has warned that intercepting Russian drones and missiles over Ukraine would risk direct conflict.

Framing air defense support inside Ukraine as a response to Russia’s escalating hybrid warfare could send a clear message that missile and drone incursions carry specific costs and will not be tolerated. European deterrence should also include stricter enforcement of measures targeting Russia’s shadow fleet of oil tankers, which serves as a key financial lifeline for Vladimir Putin’s war machine.

European countries could become more assertive in boarding vessels and detaining crews operating without valid certification or insurance. They could explore legal options to move from temporary detention to outright seizure of vessels. The debate over frozen Russian assets has recently been revived, with a number of countries calling for new efforts to find a legal solution to allocate the funds to Ukraine. Any move to seize rather than freeze Russian assets would be strongly opposed by Moscow and could destabilize Europe’s wider financial system.

Steps to expand airspace interception and maritime interdiction would bring a sharper risk of escalation. Inaction also brings inevitable risks and will further embolden Russia. A true counter-hybrid strategy should seek to identify Europe’s leverage over Russia and convert it into retaliatory consequences the Kremlin actually fears.

Poland advocates for stronger role in Ukrainian air defense

Poland’s foreign and defense ministers support intercepting Russian missiles and drones in Ukrainian airspace to prevent them from reaching NATO territory. Poland’s Foreign Minister Radoslaw Sikorski argued it is better to shoot down Russian missiles and drones while they are still in Ukrainian airspace rather than waiting until they cross the Polish border. Defense Minister Wladyslaw Kosiniak-Kamysz commented that it is in Poland’s national interests to back Ukraine "so that missiles can be intercepted there and do not reach Poland."

Unanimity requirements in the EU have repeatedly stalled sanctions against Russia since 2022, and a single captured government can block collective EU action. EU defense ministers will continue discussing how to align the protocol with existing tools and determine which measures can be used in response to hybrid attacks.