NATO reports sharp rise in Russian hybrid attacks, over 200 incidents last year

September 15, 2026 at 05:52 PM2 min

This digest was compiled by AI from multiple sources — links to the originals are below.

NATO has recorded a significant increase in the number, severity, and riskiness of hybrid attacks by Russia, with more than 200 such incidents last year alone, excluding regular cyberattacks. The alliance's headquarters faces thousands of cyberattacks monthly, while physical sabotage attempts are also rising. The discovery of a drone with explosives at Leipzig/Halle Airport in Germany is cited as an example, with the use of Semtex indicating Russian intelligence involvement.

Key Facts

NATO recorded more than 200 hybrid attacks by Russia last year, excluding regular cyberattacks.
NATO headquarters faces thousands of cyberattacks every month, according to an unnamed alliance representative in Brussels.
A drone with explosives was discovered at Leipzig/Halle Airport in Germany, and the use of Semtex points to Russian intelligence involvement.
NATO and the German government consider the Leipzig/Halle drone incident a hybrid attack, even though the device did not detonate.
Russia's main goal is to undermine political and practical support for Ukraine and prepare for possible further escalation, according to NATO.

Hybrid Attack Surge

NATO has observed a significant increase in the number, severity, and riskiness of hybrid attacks by Russia. More than 200 such incidents were recorded last year alone, excluding regular cyberattacks. The alliance's headquarters in Brussels faces thousands of cyberattacks every month, according to an unnamed NATO representative cited by dpa. Beyond virtual threats, the number of physical sabotage attempts is also growing.

Leipzig/Halle Drone Incident

A drone with explosives was discovered at Leipzig/Halle Airport in Germany. The use of the professional explosive Semtex directly indicates the involvement of Russian intelligence, as such materials are not available to randomly recruited perpetrators. NATO and the German government consider the incident a hybrid attack, although the device did not detonate.

Russian Objectives

NATO believes the main goal of such Russian actions is to undermine political and practical support for Ukraine. Russia is also preparing for possible further escalation of the conflict. To this end, the Russian side conducts reconnaissance of European critical infrastructure, studies logistics chains, and implants malicious software into industrial control systems.