EU Unveils Coordinated Strategy to Counter Hybrid Threats Including Cyber Attacks, Sabotage

EU Strengthens Defenses Against Hybrid Threats with New Strategic Framework

The Council of the European Union has formally approved a comprehensive set of conclusions designed to bolster the bloc’s ability to counter hybrid threats targeting member states and partners. In unusually direct language for an EU policy document, the Council condemned coordinated malicious activities that operate below traditional warfare thresholds, including infrastructure sabotage, cyberattacks, disinformation campaigns, and migration weaponization.

The document explicitly singles out Russia and its proxies for conducting “sustained hybrid campaigns” against European democracies, marking a significant hardening in the EU’s official stance on foreign interference.

“Hybrid threats are increasingly used to test our resilience and undermine our democratic institutions,” said Constantinos Kombos, Cyprus’s Foreign Affairs Minister, in a statement released Monday. “With these conclusions, the EU sends a clear message: we will act together to further strengthen our preparedness, protect our societies and respond firmly to those who seek to destabilise us.”

The new framework centers on making the EU’s existing “hybrid toolbox” and cyber diplomacy mechanisms more responsive and effective in the face of evolving threats. Member states have committed to enhancing protections for critical infrastructure, safeguarding democratic processes, and countering election interference through coordinated action.

A key element of the strategy involves strengthening the EU’s partnerships with international organizations, the private sector, academic institutions, and civil society groups to create a more comprehensive defense against hybrid campaigns. The Council also emphasized support for EU candidate countries facing similar threats, reflecting concerns about external actors attempting to erode support for Ukraine and other nations in the EU’s neighborhood.

The Council’s conclusions represent a response to increasingly sophisticated hybrid tactics deployed by both state and non-state actors. These coordinated activities are specifically designed to remain below thresholds that could constitute an act of war, making them particularly difficult to detect and counter effectively.

Following the adoption of the Strategic Compass for Security and Defence in March 2022, the EU established its hybrid toolbox, comprising preventive measures, cooperative actions, stability-building initiatives, restrictive measures, and support mechanisms as outlined in the June 2022 Council conclusions.

The new framework places particular emphasis on accelerating implementation of key EU directives, including the NIS2 cybersecurity directive and the Critical Entities Resilience directive. It also highlights the importance of the Cyber Blueprint in enabling rapid, coordinated responses to large-scale cyber incidents.

Maritime and air domains receive special attention in the document, with calls for enhanced situational awareness and protection of subsea infrastructure. The Council urged member states to intensify efforts against threats in the air domain, including violations of airspace, disruption of airport operations, and drone-enabled espionage.

To support these defensive measures, the EU recently introduced an ICT Supply Chain Security Toolbox, establishing a coordinated framework to identify and mitigate risks across critical technology supply chains. The toolbox recommends tighter scrutiny of suppliers, multi-vendor strategies, and reduced reliance on high-risk vendors.

The Council’s conclusions reflect the growing understanding within European security circles that hybrid threats rarely manifest as isolated incidents. Instead, they typically form part of broader, coordinated campaigns designed to exploit systemic vulnerabilities and fracture social cohesion.

By adopting this more strategic, collective approach, the EU aims to raise the costs for actors engaging in hybrid operations against member states. The framework makes clear the bloc’s determination to deploy its full range of instruments—from legislation to restrictive measures—against those responsible for hybrid campaigns targeting European democracies.

As geopolitical tensions continue to evolve, particularly regarding Russia’s ongoing war in Ukraine, the EU’s new strategic framework represents a significant step toward building greater resilience against the hybrid threats that have become a central feature of modern conflict.