A string of warehouse fires in Britain and Poland. Severed fiber-optic cables running beneath the Baltic Sea. Mysterious drone flights over critical military installations in Germany, and widespread GPS disruptions that have forced commercial airliners to reroute. Across Europe, intelligence officials say these are not random accidents. They are symptoms of an escalating, covert campaign orchestrated from Moscow.
For months, the Kremlin has operated in the gray zone between peace and overt war. The playbook relies on ambiguity, deniability, and fear. By hiring low-level local criminals or operating through shadowy cutouts, Russian security agencies aim to sow public anxiety, test Western resolve, and weaken political appetite for funding Ukraine’s defense.
Now, European capitals face an uncomfortable reality: ignoring the attacks invites more of them, but hitting back carries huge risks.
The Article 5 Dilemma
Moscow’s hybrid operations are calibrated to do maximum damage while staying beneath the threshold of NATO’s Article 5, the collective defense clause that treats an armed attack against one member as an attack against all. Arson at a suburban shopping center or a temporary communication blackout along a coastline causes chaos, but neither qualifies as an outright invasion.
That deliberate ambiguity has left NATO allies divided over how to respond. Western intelligence agencies have grown adept at tracing these operations back to Russia’s military intelligence agency, the GRU. Proving it to the public, however, often takes weeks. By then, the news cycle has moved on, and the perpetrator has vanished into the shadows.
Frontline states in Eastern Europe, including Poland and the Baltic nations, argue that Western hesitation has only emboldened Moscow. They want swift, collective measures. Western European powers, meanwhile, remain cautious, wary of triggering an escalation cycle that could draw NATO into a direct clash with a nuclear-armed state.
Searching for Leverage
Security officials and diplomats across the continent are currently debating several concrete ways to strike back. None of them are simple, but governments are rapidly running out of patience.
- Diplomatic crackdowns: Several nations have moved to sharply restrict the travel of Russian diplomats, limiting them to the cities where they are officially accredited. The goal is to curb their ability to run operational networks across neighboring borders.
- Offensive cyber strikes: Some intelligence services are pushing for reciprocal cyber operations against Russian logistics and state-controlled digital assets, signaling that gray-zone tactics cut both ways.
- Naming and shaming: Publicly exposing Russian operatives and declassifying intelligence rapidly can disrupt active plots and raise the political costs for Moscow.
- Direct retaliation via Kyiv: Another proposal gaining traction is linking hybrid attacks directly to Western military aid. Under this approach, every confirmed act of sabotage inside Europe would be answered by lifting restrictions on Ukrainian strikes deep inside Russian territory.
A Shifting Red Line
Until recently, European leaders preferred to handle sabotage quietly, fearful of alarming voters or signaling panic. That strategy is unraveling as the incidents grow bolder and closer to home.
In private discussions, European officials concede that purely defensive measures—guarding pipelines, hardening power grids, and deploying extra patrol ships—are not enough. Defensive actions yield the initiative to the attacker, who can choose the time and place of every strike at minimal cost.
The central question now circulating in Brussels, Berlin, and London is no longer whether Europe should retaliate, but how hard. Striking too softly tells Moscow it can push further without consequence. Striking too hard risks a dangerous confrontation that neither side can easily control. Finding the space in between has become Europe’s most urgent security challenge.
About the Author
