Government and intelligence officials in Germany and the United Kingdom report that Russia is conducting daily hybrid warfare attacks across Europe. Western security services warn that these small-scale, deniable operations rarely cause deaths, leading authorities to categorize them as a manageable problem. However, officials emphasize that the campaign is becoming far more serious and demands a coordinated response from NATO and the European Union.
Earlier this month, security workers discovered a drone packed with explosives near a Ukrainian cargo plane at Leipzig-Halle Airport in Germany. The airport serves as a major logistics hub for North Atlantic Treaty Organization support sent to Ukraine. Intelligence sources noted that the device failed to explode only because of a faulty detonator. Subsequent investigations by German authorities reportedly uncovered a third drone carrying explosives connected to the plot, while United States intelligence officials believe Russian operatives were involved.
Leipzig-Halle Airport is located in eastern Germany between the cities of Leipzig and Halle. As one of Europe's major air cargo hubs, the airfield plays a central role in civil freight and military supply logistics across Central Europe.
Surveillance flights over European military bases
The failed Leipzig bombing forms part of a wider pattern of Russian aerial probing. Research compiled by the International Institute for Strategic Studies shows that 144 drone incidents occurred across 12 European nations and Britain between August 2024 and February 2026. While not every sighting represents a security threat, drones have repeatedly violated sensitive airspace over major Western military installations. Uncrewed aircraft have flown directly over Ramstein Air Base in Germany, Lakenheath Air Base in Britain, and the Ile Longue nuclear submarine base in France.
The International Institute for Strategic Studies is a global security think tank based in London that tracks military capability and strategic developments. Ramstein Air Base, situated in southwestern Germany, serves as the headquarters for United States Air Forces in Europe. Royal Air Force Lakenheath in Suffolk hosts American fighter wings, while the Ile Longue peninsula in Brittany houses France's fleet of nuclear-powered ballistic missile submarines.
In another incident, Swedish forces spotted a drone flying near the French aircraft carrier Charles de Gaulle while the vessel was anchored off Malmo. Swedish authorities linked the aircraft to a Russian intelligence vessel operating nearby. Elsewhere this month, Spanish F-18 fighter jets intercepted and shot down an uncrewed aircraft over Romania.
The Charles de Gaulle is the flagship of the French Navy and the only nuclear-powered aircraft carrier built outside the United States. Malmo is a major port city located in southern Sweden across the Oresund strait from Denmark. The F-18 Hornet is a supersonic twin-engine combat jet used by several Western air forces for air defense missions.
Escalation from reconnaissance to physical sabotage
Security analysts state that prior to the Leipzig airport discovery, Russian drones appeared focused primarily on surveillance. Physical damage across Europe had previously been inflicted through other hybrid methods, including underwater cable cuts in the Baltic Sea, arson, railway sabotage, and targeted cyberattacks. However, officials warn that the introduction of explosive drones suggests Moscow may be preparing for more aggressive actions. Earlier this week, Central Intelligence Agency Director John Ratcliffe made an unannounced visit to Moscow, which observers believe was an effort to deter further Russian provocations.
The Central Intelligence Agency is the principal foreign intelligence agency of the United States government, responsible for providing national security intelligence to senior US policymakers. John Ratcliffe serves as the director of the agency.
Technical challenges in countering uncrewed aircraft
Defending against Russian hybrid tactics presents complex operational hurdles for Western security agencies. Traditional electronic jamming equipment often proves ineffective against modern uncrewed systems. Jamming signals can disrupt civilian communications, while drones operated through 5G mobile networks may not rely on a direct local radio link to their pilot. Furthermore, shooting down drones over populated areas creates a risk of falling debris. The financial structure of hybrid warfare also gives Moscow an asymmetric advantage, as Russian operatives can cheaply hire local intermediaries to conduct arson or launch inexpensive drones that require sophisticated military countermeasures to neutralize.
Fifth-generation mobile network technology, known as 5G, provides high-speed wireless data transmission with low latency, allowing remote equipment to communicate through commercial cellular networks.
Deterrence and rules of engagement
Security experts argue that passivity from Western governments will only invite further intrusion. To counter the threat, European nations require rapid, multi-layered air defense systems around airports, maritime ports, and logistics hubs. Effective defenses must combine detection radar, electronic warfare, network jamming, and physical interception capabilities. European Union and NATO leaders face criticism for moving too slowly and with minimal coordination to address a threat that changes month by month.
Allies are also urged to establish clearer rules of engagement for military commanders on the ground. NATO launched Operation Baltic Sentry and Operation Eastern Sentry following damage to undersea communications cables in the Baltic Sea and drone incursions into Polish airspace. These operations demonstrated that the alliance can deploy naval vessels and aircraft quickly. However, national restrictions often prevent fast responses by requiring pilots to obtain permission from distant national capitals before taking action. Analysts advise granting full operational authority to NATO's Supreme Allied Commander during such incidents.
The North Atlantic Treaty Organization is a political and military alliance of 32 North American and European nations committed to collective defense under the North Atlantic Treaty. Its operational forces are overseen by the Supreme Allied Commander Europe.
Financial pressures and transatlantic security
To deter future attacks, analysts recommend that Western governments publish full technical details of every hybrid incident within days of occurrence, while reserving formal legal attribution until evidence meets agreed standards. Public reporting would expose superficially isolated events as part of a single campaign designed to divide Western allies. Governments are also encouraged to crack down on Russia's shadow fleet of commercial tankers. Enforcing strict sanctions against these vessels limits Moscow's ability to fund its military actions in Ukraine while denying Russia potential offshore platforms for launching drones.
Finally, security experts emphasize that the United States must not view Russian hybrid warfare as solely a European concern. Russian surveillance flights have repeatedly targeted bases hosting American personnel and facilities connected to US nuclear weapons. Analysts warn that failing to respond forcefully undermines American credibility, and they urge Washington to supply Ukraine with essential air defense interceptor missiles to demonstrate allied resolve. Moscow is testing how much NATO will tolerate and how strong its internal bonds remain, making it imperative for Western allies to ensure the outcome of those tests is not encouraging for Russia.
