European Union foreign and defense ministers convened in Brussels on Monday, Sept. 28, 2026, to shape a new EU hybrid attack protocol after foreign policy chief Kaja Kallas warned that intelligence shows Russia is planning more sabotage across the continent.
The talks center on an “emergency security protocol” first floated by European Commission President Ursula von der Leyen in her mid-September State of the European Union address. Officials describe it as a NATO Article 4–style trigger that would let any member state call urgent EU coordination when a hybrid threat falls below the threshold of open armed aggression.
EU hybrid attack protocol aims at grey-zone crises
Kallas said arriving for the meeting that Europe must stay vigilant because “we see in the intelligence that Russia is planning more sabotage acts.” She framed the campaign as an effort to divide communities and intimidate voters into cutting support for Ukraine. Irish Foreign Minister Helen McEntee, whose country is outside NATO, said capitals want tools that pre-empt escalation, not only react after the fact.
According to reporting by Euronews and Channel News Asia, Brussels can already dispatch expert teams and funding, but ministers want clearer political machinery for joint responses when drones, arson, cyberattacks, or airspace probes hit critical infrastructure.
Finnish airspace breach sharpens the urgency
Friday’s breach of Finnish airspace over the Gulf of Finland, which prompted Finnish and Swedish fighters to scramble, hung over Monday’s agenda. Finnish Defence Minister Antti Häkkänen said Europe and NATO need “bigger measures” and stronger coordination, adding that air defenses require more money and joint procurements. Swedish Defence Minister Pål Jonson said Moscow seeks to scare Ukraine’s allies but will fail if the EU keeps backing Kyiv and tightening sanctions.
Those incidents sit alongside other European probes of suspected sabotage, including Poland’s investigation of a Starlink hub fire and the joint Finland-Sweden intercept of Russian aircraft covered earlier this week by The Boston Report.
Defence readiness gaps and the 2030 clock
Ministers are also expected to discuss the EU’s first Defence Readiness Report, which Reuters has described as warning that the bloc is not rearming fast enough to deter Russia by 2030—the year several European intelligence services flag as a potential window for armed pressure on NATO allies. Gaps cited include air and missile defense, ground combat systems, naval forces, ammunition, and drones.
Estonia’s Defence Minister Martin Herem said Tallinn’s priority remains supporting Ukraine, including debates over immobilised Russian assets, even as Russian officials threaten European governments that move in that direction. Danish assessments that a limited Russian strike on NATO remains unlikely but no longer unthinkable, previously examined in The Boston Report’s Denmark-NATO warning, continue to color the debate.
What Brussels may deliver next
EU officials say a fuller security strategy document could land next month with more concrete playbooks. For now, Monday’s meetings mark a political test: whether 27 capitals can agree on a shared trigger for hybrid crises without undercutting NATO’s own Article 4 and Article 5 frameworks. Kallas and von der Leyen want the protocol at the center of Europe’s answer to sabotage that is designed to stay just below the line of war.