EU Unveils 'Emergency Security Protocol' as NATO Bolsters Defenses Against Russian Hybrid Attacks

European Commission President Ursula von der Leyen has proposed a new European security strategy that includes an “Emergency Security Protocol” – a mechanism designed to respond collectively to hybrid attacks that fall short of armed aggression. The announcement, made during her annual address to the European Parliament on 16 September, marks the most significant institutional response yet to a wave of Russian drone incursions, sabotage, and cyberattacks that have struck across the bloc in recent weeks.

“As the threat level climbs, so must Europe’s preparedness,” von der Leyen said, according to European Pravda. “I believe it is time for Europe’s own Article 4 – or an Emergency Security Protocol. When triggered by one member state, all member states would convene. To coordinate a European response. To deter further escalation. And to mitigate the impact.”

The proposal comes less than a week after NATO fighter jets shot down a suspected Russian drone that entered Lithuanian airspace from Belarus on the night of 14-15 September. Lithuanian President Gitanas Nausėda confirmed the interception, thanking allied personnel for their “swift response,” as reported by Ukrainska Pravda. The drone was later found to be carrying an explosive, according to Lithuanian Defence Minister Robertas Kaunas, who said debris was being examined to determine its origin. An earlier drone believed to be of Russian origin was recovered from the Baltic Sea near the Polish beach of Rusinowo on 13 September, Polish Defence Minister Władysław Kosiniak-Kamysz stated on social media.

The string of incidents has pushed NATO and the EU to accelerate their response. On 13 September, Russian drone strikes hit a passenger train locomotive near the Yahodyn-Dorohusk border crossing in Volyn Oblast, just 2 km from the Polish border. NATO Secretary-General Mark Rutte said the attack “shows how desperate Putin has become” and pledged to increase support for Ukraine, according to Al Jazeera. Rutte added that the alliance would do everything to defend every inch of allied territory. The train hit was on the same route that a delegation of Western politicians, including former British Prime Minister Boris Johnson, had taken minutes earlier, Ukraine’s state rail operator said.

Von der Leyen’s protocol is designed to complement NATO’s Article 4, which allows any ally to request consultations if it feels its territorial integrity is threatened. “We urgently need a consensus on how to respond to certain incidents – those which fall below armed aggression but clearly threaten our national security,” she explained. The proposal follows calls from German lawmakers in August for NATO consultations after a drone was spotted near a Ukrainian cargo plane at Leipzig/Halle Airport. German authorities later blamed Russia for that attack, saying the drone carried “military-grade material” and was operated by Russian operatives, as the BBC reported.

The military buildup is also visible. On 18 September, Germany formally received its first F-35A Lightning II fighter jet from Lockheed Martin in Fort Worth, Texas. Defence Minister Boris Pistorius called it “the beginning of a new era for the German Air Force,” according to Al Jazeera. Germany ordered 35 of the stealth jets in 2022 to replace its ageing Tornado fleet and fulfil NATO nuclear-sharing duties. The delivery is part of a broader European push to raise defence spending, with Berlin agreeing to Trump-era demands to devote 5% of GDP to security by 2035.

However, the EU’s internal unity faces a test. On 2 September, EU ambassadors failed to agree on extending individual sanctions against more than 3,000 Russian individuals and companies, with the restrictions due to expire on 15 September. According to Ukrainska Pravda, Slovakia blocked the one-year extension proposed by the Irish presidency, proposing instead a traditional six-month renewal – and quietly suggesting some Russian names be removed from the list. The decision was postponed to 9 September, but no final agreement has been made public since.

Meanwhile, Russia continues its internal consolidation in occupied territories. The Moscow Times reported, citing a revised federal programme, that Russia plans to build seven “super-prisons” by 2035 – including one in occupied Kherson Oblast. The facilities, combining pre-trial detention and correctional colonies, will hold over 20,000 inmates and are part of a wider effort to reduce costs, according to Ukrainska Pravda.

The combined effect of the drone incursions, the sanctions deadlock, and the new EU security proposal suggests that Europe is now grappling with a new normal of hybrid warfare – one that requires faster, more institutionalised responses than the current patchwork of bilateral and NATO mechanisms can provide.