Macron Says Russian Hybrid Threat Against Europe Is Intensifying
French President Emmanuel Macron has warned that the Russian hybrid threat facing Europe and France has intensified, citing drone activity, cyber operations and attacks on critical infrastructure. After meeting political leaders in Paris on September 18, Macron said he had ordered a plan to protect infrastructure and defence-industry sites. His remarks came as European governments debated how to support Ukraine without allowing sabotage, intimidation or disinformation to push the continent into a wider war.
“Hybrid” is a broad term. It can include cyberattacks, sabotage, arson, covert influence operations and other actions designed to apply pressure while remaining below the threshold of open armed conflict. The term does not automatically prove who carried out an incident. Attribution requires evidence, and Russia has denied European allegations of involvement.
Why European governments are alarmed
Macron said the threat had intensified in recent weeks and argued that Moscow wanted to intimidate Europe and weaken support for Ukraine. The Irish Times reported that he referred to an attempted drone attack at Leipzig airport that German authorities blamed on Russia. Other European officials have pointed to suspicious fires and cyber incidents affecting transport, defence and public infrastructure.
These cases are difficult because a single event can have several explanations. A fire may be accidental, criminal or politically motivated. A cyber outage may come from a criminal group, a proxy or a state service. Governments must investigate carefully while also protecting vulnerable systems. Announcing blame too early can damage credibility; waiting too long can allow an adversary to repeat the operation.
The security dilemma
Hybrid attacks are designed to create uncertainty. They can force governments to spend money on protection, cause delays at airports or railways, and make citizens question whether authorities can keep them safe. The economic effect may be larger than the physical damage if insurance costs rise, supply chains slow or companies postpone investment.
European governments must respond without treating every technical failure as an act of war. That means improving intelligence sharing, protecting critical systems, preparing the public and using law-enforcement tools where evidence supports prosecution. NATO and the European Union also need clear rules about when a cyber or sabotage incident becomes a collective-security matter.
Poland and Ukraine’s air-defence cooperation
Polish Prime Minister Donald Tusk said Poland had joined a coalition with Ukraine and other allies focused on developing an anti-ballistic-missile system. The group is intended to provide an alternative or complement to expensive systems such as Patriot. Tusk also announced new support for Ukraine without giving full details.
The coalition reflects a broader European effort to strengthen air defence after missile and drone attacks on Ukraine and airspace incidents near NATO members. It does not mean a new system is ready for deployment. Research, procurement, testing, funding and interoperability all take time. The announcement is best understood as a political and industrial commitment.
What Russia says
Russian officials have rejected European accusations of hybrid attacks and described them as anti-Russian hysteria. Moscow has also warned that British or other foreign military facilities in Ukraine used to strike Russian territory could be treated as legitimate targets. Those statements show the escalation risk, but they do not independently establish the facts behind individual incidents.
The next phase will depend on evidence, resilience and proportionality. European governments can protect infrastructure, support Ukraine and expose disinformation without turning every allegation into a claim of proven state responsibility. The most important public test is whether officials explain what is known, what remains uncertain and how citizens are being protected.
Resilience also depends on ordinary organisations. Rail operators can rehearse how to recover from a cyber outage, hospitals can maintain offline procedures, and local governments can ensure residents receive verified information when a network is disrupted. These steps are less dramatic than military announcements, but they reduce the payoff from intimidation. A society that can keep essential services running is harder to coerce.
European policymakers will also need to protect civil liberties. Counter-disinformation work should not become a licence to silence lawful criticism, and stronger infrastructure security should include independent oversight. The aim is to make hostile operations less effective while preserving the open institutions they are intended to weaken. That balance will shape the credibility of Europe’s response.
Sources
- The Irish Times: Macron warns of intensifying Russian hybrid attacks
- BBC programme summary of Macron’s warning
