The European Union is working on a new mechanism to improve its response to hybrid threats, including sabotage, cyberattacks and drone incidents, as member states seek to react more quickly and coordinate their actions.
The issue was discussed by EU defence ministers in Brussels on Monday, where hybrid threats were included on the agenda alongside military support for Ukraine. The Council is also continuing work through its Horizontal Working Party on Enhancing Resilience and Countering Hybrid Threats.
EU foreign policy chief Kaja Kallas said any new mechanism should complement NATO rather than duplicate the Alliance’s structures.
“Many of them stressed that this mechanism should be complementary to NATO. We are not creating something parallel or additional, but this should work hand in hand,” Kallas said.
The initiative is intended to improve the EU’s ability to respond to activities that fall below the threshold of an overt military attack. Hybrid threats can include cyberattacks, sabotage, foreign information manipulation, interference with democratic processes and other forms of coercive or disruptive activity.
The EU Council has already committed to strengthening its ability to prevent, deter and respond to hybrid campaigns, including through its existing hybrid and cyber-diplomacy toolboxes and cooperation with NATO and other international partners.
Proposed Emergency Security Protocol
European Commission President Ursula von der Leyen proposed an “Emergency Security Protocol” during her State of the Union address in September. The mechanism has been compared with NATO’s Article 4, under which allies can request consultations when they consider their security or territorial integrity to be threatened.
Article 4 is distinct from NATO’s Article 5, which concerns collective defence.
The EU’s approach is expected to focus on improving coordination among member states and EU institutions when hybrid incidents occur, while maintaining clear divisions between EU and NATO responsibilities.
EU-NATO cooperation on hybrid threats already includes exchanges between their respective analytical and security structures, as well as coordination on resilience, critical infrastructure and foreign information manipulation.
Ukraine Air Defence Remains a Priority
The Brussels meeting also focused on Ukraine’s military needs, particularly air defence. Ukrainian Defence Minister Evgeniy Khmara briefed EU defence ministers by videoconference on the situation on the battlefield.
Kallas said strengthening Ukraine’s air-defence capabilities remains a priority as Kyiv seeks additional interceptors for systems including Patriot.
The meeting did not result in new commitments to provide additional Patriot batteries. Spain and Greece have been mentioned as potential contributors but have also raised concerns about their own defence requirements.
The EU is meanwhile examining ways to accelerate the procurement of air-defence equipment for Ukraine. Existing European support includes funding for radars, missiles and ammunition, as part of broader efforts to strengthen Ukraine’s ability to protect its cities and critical infrastructure.
The EU’s broader strategy is also focused on strengthening resilience against hybrid threats. In March, the Council called for a stronger and more coordinated European response to sabotage, malicious cyber activity, election interference and foreign information manipulation, while specifically highlighting cooperation with NATO and support for countries affected by such threats.
