The warning signs have been blinking red for months, yet capitals across Europe still treat hybrid warfare like a distant hypothetical threat.
When an arson attack struck the facilities of defense firm Milrem Robotics in Estonia, it wasn't just a localized criminal incident. It was part of an aggressive, coordinated campaign. Estonian Foreign Minister Margus Tsahkna has made it clear that Moscow's shadow operations have entered a dangerous new phase. We are looking at a sustained campaign of organized sabotage and planned disruption across the continent.
Most European policymakers still view these security breaches through a traditional domestic law enforcement lens. That mindset is completely outdated. When hostile foreign intelligence services contract local proxies to burn down military supply hubs, cut fiber-optic cables, or target critical energy grids, you aren't dealing with common vandalism. You are dealing with active gray-zone warfare designed to exhaust public patience and break our collective resolve.
Moving Past the Illusion of Low-Impact Hybrid Attacks
There is a dangerous comfort in calling these incidents "hybrid" threats. The word itself often implies something abstract, bloodless, and ultimately low-impact. Tsahkna rightly rejects that dangerous assumption.
Think about what happens when critical infrastructure fails simultaneously across multiple member states. Coordinated strikes on transport networks, power stations, and communication lines don't just cause temporary inconveniences. They paralyze military reinforcement routes and erode civilian trust in democratic governments.
Moscow knows it cannot win a direct conventional confrontation against a unified alliance. Instead, it relies on plausible deniability. By employing proxies, cyber operations, and covert sabotage units, the Kremlin attempts to inflict maximum damage below the threshold of Article 5. If we keep treating every single derailed train, mysterious warehouse fire, and severed undersea cable as an isolated accident, we are playing right into their strategy.
The High Cost of Strategic Hesitation
Europe's response mechanism suffers from a chronic allergy to early escalation. Governments hesitate to attribute attacks publicly because they fear provoking a wider crisis. But letting hostile actors operate with impunity creates an invitation for worse aggression.
Deterrence doesn't work when there are no tangible consequences for crossing red lines. Tsahkna points out that protection and real accountability must go hand in hand. When a defense facility gets targeted, the response cannot be a quiet diplomatic reprimand behind closed doors. It requires public attribution, harsh sanctions, and a synchronized tightening of security across every vulnerable industrial sector.
Private defense companies and logistics operators are now on the front lines, whether they want to be or not. Expecting these commercial entities to fend off state-backed intelligence agencies with standard corporate cybersecurity and basic perimeter fences is absurd. Governments need to share real-time threat intelligence directly with industry leaders and fund robust physical protection measures.
What Real Resilience Actually Looks Like
Building societal resilience sounds like corporate jargon until you see it in action. In the Baltic states, readiness is a daily reality. Higher defense spending, well-trained ready reserves, and clear public communication channels mean that fear doesn't automatically translate into panic.
The rest of the continent needs to adopt that exact posture. Fear is the primary weapon in this shadow war. If citizens panic or pressure politicians to abandon Ukraine just to buy temporary peace, the sabotage campaign has achieved its objective.
We have to stop treating security as an administrative line item on a yearly government budget. It is the absolute foundation of our continued existence. Secure your supply chains, fund your intelligence services, and call out hostile operations by their real name the moment they happen.
