Kyivindependent Russia's Hybrid Attacks in Europe Escalate with 54 Incidents Reported
Article Content
- •54 hybrid attacks linked to Russia reported in Europe from April to October 2026.
- •Attacks increasingly involve physical violence, including drone strikes and sabotage.
- •Poland, Romania, and Latvia are the most affected countries.
A joint investigation by 17 European public broadcasters has identified 54 physical hybrid attacks linked to Russia in Europe between April 1 and October 15, 2026. These incidents include arson, attempted sabotage, drone attacks, and airspace violations, with Poland, Romania, and Latvia being the most affected countries. The attacks have become increasingly violent, with at least two fatalities and ten individuals reported missing due to drone strikes targeting merchant ships in the Black Sea. The European Centre of Excellence for Countering Hybrid Threats noted that these operations aim to undermine Western support for Ukraine. The situation remains critical as European nations prepare for a prolonged confrontation with Russia, which has shifted tactics to include physical violence alongside traditional influence operations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What types of incidents are included in the 54 attacks?
Which countries are most affected by these attacks?
What is the current status of these hybrid attacks?
Continue Reading
China-Linked Hackers Exploit PHP2Shell to Root 25 Servers Cybersecurity firm Dream reported that a China-linked threat actor exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and a Linux kernel privilege escalation flaw (CVE-2026-46300) to gain root access to 25 servers, including three in a U.S. government-affiliated environment. The attackers used…
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…