Europe must finally hold Russia accountable for hybrid attacks

Europe has recognized the existence of hybrid threats, such as cyberattacks, drones, and misinformation campaigns, but this recognition alone is insufficient for deterrence. European governments routinely investigate, share information, release statements, and implement security measures following each incident, only to repeat the process when another attack occurs.

Russia appears confident that the low cost of these hybrid attacks is worth the spectacular consequences, according to Russian intelligence reports. Resilience and deterrence are distinct concepts; Europe must become a more difficult and expensive target for Russia. Deterrence should be a priority, as resilience alone will not alter the cost of a Russian attack.

Instead of treating each incident as an isolated case, European governments must link them together and consider the broader context. Individual attacks may seem inconsequential, but collectively, they shape Russia's calculus. Determining responsibility after an incident can take weeks, giving Russia an advantage. European governments must evaluate all incidents in a unified manner.

Deterrence should aim to change Russia's calculus and make further aggression an unappealing gamble. Europe should prepare a credible set of potential consequences before another significant incident. By adopting a systemic approach, Europe can address the root of the threat. EU officials emphasize that Europe needs to be better prepared to withstand Russia's pressure and demonstrate that repeated aggression will not be tolerated.