Cyberattacks on European Infrastructure Highlight Vulnerabilities

In December 2025, Poland's power grid was targeted with DynoWiper malware, risking electricity for approximately 500,000 people. The EU and UK took seven months to respond, issuing sanctions against 24 individuals and entities linked to the attack. This incident reflects a broader issue in Europe, where a lack of an intermediate defense layer leaves critical infrastructure vulnerable to hybrid attacks. Sweden also reported a thwarted attack on a thermal power plant in early 2025, indicating a shift from denial-of-service to destructive operations. The International Institute for Strategic Studies noted a nearly fourfold increase in attacks on critical infrastructure since 2023. Europe struggles with the challenge of classifying such incidents as military attacks, complicating responses under Article 5 of NATO. The need for a rapid-response framework similar to Ukraine's Sky Fortress network is emphasized, as Europe currently relies on police and intelligence services for post-incident investigations rather than real-time prevention.

Key Points: • Poland's power grid was attacked with DynoWiper malware, risking electricity for 500,000 people. • The EU and UK took seven months to respond with sanctions against 24 individuals and entities. • Europe lacks an effective intermediate defense layer to protect critical infrastructure during hybrid attacks.