IISS report warns Europe’s critical infrastructure is vulnerable due to outdated security and lack of investment, with hybrid attacks by Russia and others continuing despite some slowdown in 2024.

The International Institute for Strategic Studies (IISS) released a report highlighting that Europe's critical infrastructure is inadequately maintained and runs on outdated security systems vulnerable to penetration. This vulnerability is attributed to insufficient investment from both governments and private entities and complicated regulation due to cross-border infrastructure. Despite documented hybrid attacks, especially from Russia, China, and Iran, European governments have been reluctant to explicitly blame Russia, likely encouraging ongoing strikes. The report criticizes European governments for avoiding decisive action fearing escalation with Russia, including overt military confrontation. It notes that major confirmed hybrid attacks in the first half of 2024 amounted to about one-third of that year's total, indicating a slowdown, yet also suggests many attacks remain unconfirmed. Furthermore, the report speculates Russia tempered attacks early 2024 to avoid alienating former US President Trump upon his inauguration in January.