What changed

E. whereas, in the summer of 2026, the EU witnessed an intensification of physical hybrid activities and attacks across EU territory; whereas this included an attempted explosive drone attack targeting Ukrainian cargo aircraft at Leipzig/Halle Airport in Germany, an attempted attack by an explosive-laden maritime drone against a Romanian offshore gas project, a foiled Russian-directed sabotage and espionage plot targeting military infrastructure and Ukrainian cargo aircraft in Romania, an arson attack targeting a defence contractor in Estonia, deliberate sabotage and arson attacks targeting defence and drone manufacturing facilities in Poland, a Russian cruise missile violating Polish airspace and crashing in the Lublin region, and a foiled arson plot in Slovakia targeting a Ukrainian drone manufacturer; whereas the Leipzig/Halle Airport attack, the targeting of the Romanian offshore gas project and the sabotage plot targeting military infrastructure and Ukrainian cargo aircraft in Romania have been publicly attributed to Russia by the respective national authorities; whereas following the attack on Leipzig/Halle Airport, the German authorities closed the Russian consulate in Bonn and the Russian House in Berlin;

26. Stresses the EU’s added value in helping Member States to connect national capabilities, build common situational awareness and enable faster, more coherent responses to hybrid threats; recommends that the Commission explore proposals for a more unified framework to support Member States in the planning, operational coordination and execution of cyber operations; welcomes the completion of the Permanent Structured Cooperation (PESCO) project on the Cyber and Information Domain Coordination Centre (CIDCC) and the proposalprogress fortowards anits transition into a permanent EU Cyber Defence Coordination Centre (EU CDCC);

31. Stresses that cyber resilience and defensive measures are insufficient to ensure credible deterrence against hybrid threats as highlighted in the Joint White Paper for European Defence Readiness 2030; calls on the Commission and the Member States in cooperation with NATO to examine the legal, procedural and operational prerequisites for proportionate, legally compliant cyber countermeasures; reiterateswelcomes itsthe positionprogress callingmade fortowards the establishment without undue delay of the EU CDCC and calls for theits swift operationalisation and for the implementation of a mandate in line with the Council conclusions on the EU Policy on Cyber Defence, in order to achieve a more credible and capable EU cyber defence;

65. Strongly condemns the assault on the EU’s southern border in the city of Ceuta, carried out on 30 and 31 July 2026, as well as the subsequent invasion of Ceuta, constituting an attack on the territorial integrity and sovereignty of a Member State; deplores the use of irregular migration flows as an instrument of hybrid warfare directed against the stability and security of a Member State, and therefore calls for an independent and comprehensive investigation to clarify responsibility for the planning and execution of this attack and identify the objectives pursued;