By Maria Makurat - Cyber Security Desk
Introduction
Recent months and weeks have shown a significant increase in headlines concerning drones, cyber-attacks, and hybrid warfare in the context of the Russia–Ukraine war.
The airports of Berlin, Heathrow and Brussels were reportedly hit by cyber-attacks, causing significant delays and safety concerns for passengers. Then it continued with several drone sightings causing disruption at airports such as Munich. The German Federal Ministry of Interior (BMI) has officially released a statement saying that there is increased concern in the following areas namely: firstly, Russia’s attacks on Ukraine have prompted Germany and other Western countries to strengthen their security agendas, secondly, cyber-attacks have become an increasing threat since the start of the war making Germany the target for disinformation campaigns launched by Russia, thirdly, Germany must better protect its critical infrastructure against sabotage. With these incidents one can ask the following questions: How prepared is the West to face cyber and hybrid attacks? How should countries react in the future and are there serious concerns for drone warfare? Must the west continue to change its cyber-strategy as well as its hybrid warfare strategy?
Germany and the West against drones
We have seen a significant increase in drone sightings in the past months. Headlines of drones and even balloon sightings disrupting airports have caused concern and heated debates amongst civilians and of course government officials. Munich has been in the focus of the recent drone sightings causing the airport to suspend all flights. Twice the airport saw drones over the airport and had to stop all flights causing around 6,500 passengers to be affected. This has caused the German government to activate the German Military to be involved in battling drones more strongly and be trained in such scenarios. As of yet, it is unclear who is responsible for these drone incidents. However, whether it’s private or a state actor, they have managed significant disturbance and caused the EU and NATO to want to act more strongly to be better prepared for hybrid warfare. In addition, AI is also having a significant impact on how countries are developing weapons and defence against threats causing more uncertainty.
In international relations there still remains much scepticism and different view points on whether cyber-attacks can be considered to have a ‘violent impact’ at all. Lucas Kello (2017) discusses in his work “The Virtual Weapon” the point that scholars leaning towards the Clausewitzian school of thought do not believe that “cyber operations are not directly violent. Nor do they create significantly collateral damage.”1 This may be true on some level if we were to discuss whether the drones had a physical impact on civilian lives but when daring to combine international relations with sociological theories, it always depends on the following aspects: What do we understand under violence? When is an act violent? And who decides when an act is violent in hybrid warfare?
Taking the Munich and Belgium drone incident from September 2025 into account – with considering what we know and do not know so far – the following impacts can be identified: it has caused unrest, concern amongst civilians (some surveys by national news outlets indicate that roughly one in two respondents now express concern about foreign drone attacks at home) and officials, a summit in Copenhagen and from the police in Germany to be able to shoot down drones more easily when in sight.
One could argue so far, no physical violence has been caused however, is unrest amongst countries and cities and heightened security measures that cause unrest also a form of violence? Is the uncertainty over who is behind the drone incidents itself a form of disturbance? Will this add to a certain cyber strategy of ramping up defences? Or is it more of a back-and-forth game of cyber and drone attacks happening and the West reacting with closing defence holes?
The Copenhagen Summit and hybrid warfare
The summit showed heated debates amongst the countries. As of this moment, there is no concrete evidence that Russia is behind the drone incidents; however, countries such as Denmark have strongly suggested possible Russian involvement due to the recent MiG-31 jet crossing in Estonian airspace. It can be seen as a form of ‘poking’ NATO to see what kind of reaction can be achieved however, caution is advised when drawing conclusions.
Several other drones were sighted: “Drones have been seen in recent days over Germany's northern state of Schleswig-Holstein, and flights have been delayed in the past week at Vilnius airport in Lithuania and at Oslo airport in Norway because of drone activity.” Western nations may need to strengthen their cybersecurity and defence systems, such as, establishing a “drone wall”.
Perhaps the EU’s plans for AI Gigafactories can contribute to developing such systems in tackling drones more effectively in the near future: “Sectoral flagships including targeted measures to boost AI adoption across 10 key industry sectors and the public sector. The industrial sectors include (…) energy, agri-food; defence, security and space (…).” What Germany plans to invest in anti-drone equipment, which should also be put to use in other countries called “Skyranger”. Furthermore, experts from Universities such as TU Dresden state that one should invest more strongly in protecting critical infrastructure, such as airports, by installing lasers, jammers and radars, to name a few examples, but will this truly help in deterring attacks? Perhaps the aggressor will not see this a true deterrence and defence and will simply continue with ‘probing’ or launching drones just to cause unrest.
The Summit has shown that members of the EU and NATO are concerned and are willing to step up their defence in the cyber and hybrid warfare areas. One cannot deny that the drones have targeted so-called critical infrastructure of the West namely: airports. It would be important to focus on all possible critical infrastructure in relation to drones and cyber-attacks such as hospitals, transportation systems, government buildings and energy structures (to name a few). These should be securely protected against drone disruptions as well as cyber-attacks which seems to be no new statement but should be highlighted nonetheless.

What do we know so far and what do we need to ask ourselves next?
Clausewitzian skeptics are wary of cyber-attacks having a physical or traditional war perspective effect. One can conclude that in the last years the landscape of international relations has changed and states, countries and individuals are rapidly adapting with using technology (also drones) to achieve certain means.
Apparently, reports suggest the drones were targeting specifically critical infrastructure in Germany, checking out important facilities such as energy and even a military site.
As for now, Russia has not claimed responsibility for the recent cyber-attacks and drone incidents,* which adds to the uncertainty* in cyber scenarios. Countries in this new type of ‘warfare’ often act based on suspicion and what is discussed amongst scholars, “tit for tat” and to “coerce the enemy into acting a certain way”. One cannot say for certain at this moment if this is the intention of all the incidents however, it is certain that action needs to be taken to ensure a better defence and quicker reaction time. It also makes it clear that countries have to continue to rapidly adapt their strategy (also their cyber-strategy) in all directions in order to keep up with the changing landscape of conflicts.
At present, it cannot be stated with certainty that the cyber-attacks on the airports or the drone incidents had a physical violent impact however, they have significant delays, disturbance and a renewed debate concerning security. Both cyber-attacks and drones pose a threat to NATO member states and other Western countries and should be taken more strongly into account when investing in defence and a certain ‘cyber-strategy’.
The following questions should guide future consideration: how can the West and the EU defend and react quicker in relation to cyber-attacks and drone incidents? Will the new plans to allow police to shoot down drones have a positive impact or cause further probing? Can AI and the investment in technology allow countries such as Germany to develop defence walls quicker than 2030?
Developing the so-called “drone wall” represents an initial response and could aid in the defence of countries against probing drones however, it should still be critically analysed who is behind the incidents and additional sanctions could be considered once attribution is established, to reduce uncertainty. The more certain one is of who is behind certain actions, the better a preparation can be put into place. This may add to the strategy in a certain ‘hybrid warfare’ but one cannot be for certain how it will develop in the near future since technology is also developing at a rapid speed. Perhaps states will be drawn into an endless “tit-for-tat”2 game with implementing sanctions against cyber-attacks or better defence systems against drones however, these questions merit further analysis and discussion to gain a better understanding of how such potential hybrid conflicts could play out.
When one continues to critically ask these questions, then a good strategy can be developed in order to tackle the emerging challenges in cyber and drone incidents. As Richard P. Rumelt notes a bad strategy would be to mistake the end goals as the strategy itself3. The latter is commonly depicted as being the ends, ways and means and when applying this to the current international political landscape, it must remain fluid and multidimensional to adapt to rapidly changing technologies.


