Govind TekaleEuropean and NATO leaders are coordinating a joint response to Russian hybrid attacks after Germany formally attributed an August 4 drone sabotage at Leipzig/Halle Airport to Moscow, shutting down the Russian consulate in Bonn and ordering the Russian House in Berlin closed.
EU Defence Commissioner Andrius Kubilius said at a conference of German ambassadors that “if we are facing hybrid warfare, we need to have hybrid defence.” He told the Financial Times the EU is looking at how to define the means needed to respond, proposing a new Emergency Security Protocol that could be triggered when countries are hit by hybrid attacks — resembling NATO’s Article 4, which has been invoked nine times in alliance history.
European Commission President Ursula von der Leyen and NATO Secretary-General Mark Rutte met in Brussels to discuss the Leipzig incident and broader hybrid threats. Von der Leyen said she would keep the EU unified and that additional sanctions would be prepared by foreign ministers at an upcoming meeting.
Germany’s Interior Minister Alexander Dobrindt said the means used in the Leipzig drone incident match methods seen in prior Russian hybrid operations connected to the war in Ukraine. The German government formally concluded Russia was responsible.
Hybrid attacks have escalated across Europe this year. Countries have blamed Moscow for cyber attacks, the attempted armed drone attack on Leipzig airport, the blowing up of a rail track in Poland, and arson assaults on warehouses and factories. Romanian Foreign Minister Oana Ţoiu reported more than 100 cases of drones or their debris entering Romanian territory during Russian attacks on Ukrainian infrastructure near the Danube and the Black Sea.
Polish Foreign Minister Radosław Sikorski described such actions as not merely threats but real attacks, noting Polish F-16 fighter jets are scrambled almost daily due to approaching drones or missiles.
Danish intelligence warned this week that Russia could launch a limited military attack against a NATO country in the coming months — the most alarming signal in current assessments.
Multiple European diplomats told the FT there is widespread confusion over what the new protocol would do, and wariness over any mechanism that could compete with NATO’s processes. “We need to consider whether our doctrine, our institutions and our decision-making have not kept pace with the new reality,” von der Leyen said.
**Priority PAA: What are hybrid attacks?** Hybrid attacks combine sabotage, cyberattacks, drone incursions, and arson below the threshold of armed conflict. Russia has been blamed for the Leipzig drone attack, the Polish rail explosion, and warehouse arsons across Europe.
EU defence ministers meet in Brussels on Monday to discuss the Emergency Security Protocol. Check back for updates.
The [Leipzig airport drone attack](https://www.karmactive.com/germany-russia-leipzig-airport-drone-attack-2026) coverage details Germany’s formal attribution. [NATO foiled a Russian undersea cable sabotage plot](https://www.karmactive.com/nato-foils-russian-undersea-cable-sabotage-plot-svalbard) near Svalbard earlier in 2026. NATO’s [disrupted Arctic cable operation](https://www.karmactive.com/nato-disrupted-russian-undersea-operation-arctic-cables) shows the pattern of Russian hybrid targeting of critical infrastructure. Von der Leyen’s SOTEU speech transcript and the EC press briefing detail the Emergency Security Protocol proposal. NATO’s Deputy Secretary General remarks on hybrid threats confirm the shifting threat landscape. UK Foreign Secretary’s address to UNSC also cited the Leipzig attack as hybrid aggression.
