Loading signal...
Signal
Submitted
Feb 5, 2026, 19:29 UTC
Recorded Future forecasts an escalation of Russian hybrid threats around the 2025 NATO Summit, endangering European critical infrastructure, especially submarine cables and energy systems.
The 2025 NATO Summit in The Hague is projected to be a focal point for Russian hybrid threat escalation targeting critical infrastructure across Europe. Recorded Future’s report details a broad spectrum of hybrid tactics including sabotage of submarine cables, weaponized migration to destabilize societies, coercive energy export manipulation, and cyberattacks. Countries bordering Russia such as Estonia, Finland, Latvia, Lithuania, and Poland are at particular risk, with sabotage of submarine cables in the Baltic and North Seas seen as especially likely. The Finnish Defence Forces confirm expectations of increased hybrid hostile actions by Russia, including disinformation and influence operations aimed at dividing NATO allies. Additionally, Russia’s efforts will likely include cyber espionage to gather summit-related intelligence and discredit NATO. The report warns that Russia and China both plan to intensify digital and influence operations to undermine the alliance's cohesion and credibility during the summit. Recorded Future stresses the importance of coordinated cyber defense and intelligence-sharing among allies to mitigate these multi-domain threats. Analysts caution about potential DDoS attacks, extortion campaigns, and misinformation aiming to erode public trust and disrupt communications during the summit. This threat environment reflects the tensions stemming from the ongoing war in Ukraine and the strategic importance of NATO unity in response to Russian aggression.
Confidence: High
The article explicitly describes planned Russian hybrid hostile actions targeting NATO member states and critical infrastructure, fully meeting criteria for aggressor classification. It also details the expected need for heightened digital hygiene and coordinated defenses by NATO and partners around the 2025 Summit, constituting defense preparation activities.
Source URL
https://industrialcyber.co/reports/russian-hybrid-threats-likely-to-escalate-around-2025-nato-summit-putting-european-critical-infrastructure-at-high-risk
Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "e8e15bbe-a8d1-4259-ba00-deaae4a2fb04",
"url": "https://industrialcyber.co/reports/russian-hybrid-threats-likely-to-escalate-around-2025-nato-summit-putting-european-critical-infrastructure-at-high-risk",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Information Operations",
"incident_type": "Propaganda & disinformation campaigns",
"country": "Netherlands",
"source_reliability": "A",
"info_credibility": "2",
"tags": [
"Russian hybrid threats",
"2025 NATO Summit",
"Critical Infrastructure",
"Cyberattacks",
"Submarine cables",
"Energy weaponization",
"DDoS",
"Extortion",
"Disinformation",
"Weaponized migration",
"Finland Defence Forces",
"Recorded Future",
"european union",
"baltic sea region",
"NATO",
"offensive cyber operations",
"China influence operations"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Netherlands"
],
"where_text": "Cyberspace",
"headline": "Russian hybrid threats likely to escalate around 2025 NATO Summit, putting European critical infrastructure at high risk",
"description": "Recorded Future warns that Russian hybrid threats, including sabotage of critical infrastructure, weaponized migration, and military intimidation, are likely to intensify around the 2025 NATO Summit. These threats target European countries with Baltic states, Poland, and Germany facing the highest risks. The report highlights threat actors using hybrid cyber-kinetic operations like submarine cable attacks and extortion, as well as ongoing influence operations and energy weaponization. Finland’s Defence Forces expect Russia to increase hostile hybrid activity, including cyberattacks, energy_exports coercion, weaponized migration, and intelligence operations. Several countries neighboring Russia – Estonia, Finland, Latvia, Lithuania, Poland – are at heightened risk. The threat of sabotage against submarine cables is very high in the North and Baltic Seas. Recorded Future stresses the need for careful summit security, emphasizing coordinated defense against digital and physical hybrid threats, including DDoS, extortion, disinformation, and cyber espionage during the NATO Summit in The Hague in 2025. Russia may employ disinformation and fabricated intelligence to disrupt NATO unity. Both Russia and China are expected to escalate influence operations around the summit. The analysis comes amidst heightened geopolitical tensions caused by the Ukraine war and ongoing military conflicts.",
"summary_short": "Recorded Future forecasts an escalation of Russian hybrid threats around the 2025 NATO Summit, endangering European critical infrastructure, especially submarine cables and energy systems.",
"summary_extended": "The 2025 NATO Summit in The Hague is projected to be a focal point for Russian hybrid threat escalation targeting critical infrastructure across Europe. Recorded Future’s report details a broad spectrum of hybrid tactics including sabotage of submarine cables, weaponized migration to destabilize societies, coercive energy export manipulation, and cyberattacks. Countries bordering Russia such as Estonia, Finland, Latvia, Lithuania, and Poland are at particular risk, with sabotage of submarine cables in the Baltic and North Seas seen as especially likely. The Finnish Defence Forces confirm expectations of increased hybrid hostile actions by Russia, including disinformation and influence operations aimed at dividing NATO allies. Additionally, Russia’s efforts will likely include cyber espionage to gather summit-related intelligence and discredit NATO. The report warns that Russia and China both plan to intensify digital and influence operations to undermine the alliance's cohesion and credibility during the summit. Recorded Future stresses the importance of coordinated cyber defense and intelligence-sharing among allies to mitigate these multi-domain threats. Analysts caution about potential DDoS attacks, extortion campaigns, and misinformation aiming to erode public trust and disrupt communications during the summit. This threat environment reflects the tensions stemming from the ongoing war in Ukraine and the strategic importance of NATO unity in response to Russian aggression.",
"actor_primary": "Russia",
"target_primary": null,
"location_text": "NATO Summit, The Hague",
"location_region": null,
"location_coordinates_lat": null,
"location_coordinates_lon": null,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "DEFENSE_PREP_SIGNAL",
"is_hybrid_war_signal": false,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article explicitly describes planned Russian hybrid hostile actions targeting NATO member states and critical infrastructure, fully meeting criteria for aggressor classification. It also details the expected need for heightened digital hygiene and coordinated defenses by NATO and partners around the 2025 Summit, constituting defense preparation activities.",
"event_time_utc": "2025-06-23T09:21:41.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-02-05T19:29:00.388Z",
"updated_at": "2026-11-09T06:58:21.434Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
2
Event time
Jun 23, 2025, 09:21 UTC
Event time confidence
pm24h
Location
NATO Summit, The Hague
Primary actor
Russia
Country
Netherlands
Countries
Netherlands
Tags
Russian hybrid threats, 2025 NATO Summit, Critical Infrastructure, Cyberattacks, Submarine cables, Energy weaponization, DDoS, Extortion, Disinformation, Weaponized migration, Finland Defence Forces, Recorded Future, european union, baltic sea region, NATO, offensive cyber operations, China influence operations
Nodes
Node 1: Borders, Node 2: 5th Column
Signal
Submitted
Feb 5, 2026, 19:29 UTC
Recorded Future forecasts an escalation of Russian hybrid threats around the 2025 NATO Summit, endangering European critical infrastructure, especially submarine cables and energy systems.
The 2025 NATO Summit in The Hague is projected to be a focal point for Russian hybrid threat escalation targeting critical infrastructure across Europe. Recorded Future’s report details a broad spectrum of hybrid tactics including sabotage of submarine cables, weaponized migration to destabilize societies, coercive energy export manipulation, and cyberattacks. Countries bordering Russia such as Estonia, Finland, Latvia, Lithuania, and Poland are at particular risk, with sabotage of submarine cables in the Baltic and North Seas seen as especially likely. The Finnish Defence Forces confirm expectations of increased hybrid hostile actions by Russia, including disinformation and influence operations aimed at dividing NATO allies. Additionally, Russia’s efforts will likely include cyber espionage to gather summit-related intelligence and discredit NATO. The report warns that Russia and China both plan to intensify digital and influence operations to undermine the alliance's cohesion and credibility during the summit. Recorded Future stresses the importance of coordinated cyber defense and intelligence-sharing among allies to mitigate these multi-domain threats. Analysts caution about potential DDoS attacks, extortion campaigns, and misinformation aiming to erode public trust and disrupt communications during the summit. This threat environment reflects the tensions stemming from the ongoing war in Ukraine and the strategic importance of NATO unity in response to Russian aggression.
Confidence: High
The article explicitly describes planned Russian hybrid hostile actions targeting NATO member states and critical infrastructure, fully meeting criteria for aggressor classification. It also details the expected need for heightened digital hygiene and coordinated defenses by NATO and partners around the 2025 Summit, constituting defense preparation activities.
Source URL
https://industrialcyber.co/reports/russian-hybrid-threats-likely-to-escalate-around-2025-nato-summit-putting-european-critical-infrastructure-at-high-risk
Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "e8e15bbe-a8d1-4259-ba00-deaae4a2fb04",
"url": "https://industrialcyber.co/reports/russian-hybrid-threats-likely-to-escalate-around-2025-nato-summit-putting-european-critical-infrastructure-at-high-risk",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Information Operations",
"incident_type": "Propaganda & disinformation campaigns",
"country": "Netherlands",
"source_reliability": "A",
"info_credibility": "2",
"tags": [
"Russian hybrid threats",
"2025 NATO Summit",
"Critical Infrastructure",
"Cyberattacks",
"Submarine cables",
"Energy weaponization",
"DDoS",
"Extortion",
"Disinformation",
"Weaponized migration",
"Finland Defence Forces",
"Recorded Future",
"european union",
"baltic sea region",
"NATO",
"offensive cyber operations",
"China influence operations"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Netherlands"
],
"where_text": "Cyberspace",
"headline": "Russian hybrid threats likely to escalate around 2025 NATO Summit, putting European critical infrastructure at high risk",
"description": "Recorded Future warns that Russian hybrid threats, including sabotage of critical infrastructure, weaponized migration, and military intimidation, are likely to intensify around the 2025 NATO Summit. These threats target European countries with Baltic states, Poland, and Germany facing the highest risks. The report highlights threat actors using hybrid cyber-kinetic operations like submarine cable attacks and extortion, as well as ongoing influence operations and energy weaponization. Finland’s Defence Forces expect Russia to increase hostile hybrid activity, including cyberattacks, energy_exports coercion, weaponized migration, and intelligence operations. Several countries neighboring Russia – Estonia, Finland, Latvia, Lithuania, Poland – are at heightened risk. The threat of sabotage against submarine cables is very high in the North and Baltic Seas. Recorded Future stresses the need for careful summit security, emphasizing coordinated defense against digital and physical hybrid threats, including DDoS, extortion, disinformation, and cyber espionage during the NATO Summit in The Hague in 2025. Russia may employ disinformation and fabricated intelligence to disrupt NATO unity. Both Russia and China are expected to escalate influence operations around the summit. The analysis comes amidst heightened geopolitical tensions caused by the Ukraine war and ongoing military conflicts.",
"summary_short": "Recorded Future forecasts an escalation of Russian hybrid threats around the 2025 NATO Summit, endangering European critical infrastructure, especially submarine cables and energy systems.",
"summary_extended": "The 2025 NATO Summit in The Hague is projected to be a focal point for Russian hybrid threat escalation targeting critical infrastructure across Europe. Recorded Future’s report details a broad spectrum of hybrid tactics including sabotage of submarine cables, weaponized migration to destabilize societies, coercive energy export manipulation, and cyberattacks. Countries bordering Russia such as Estonia, Finland, Latvia, Lithuania, and Poland are at particular risk, with sabotage of submarine cables in the Baltic and North Seas seen as especially likely. The Finnish Defence Forces confirm expectations of increased hybrid hostile actions by Russia, including disinformation and influence operations aimed at dividing NATO allies. Additionally, Russia’s efforts will likely include cyber espionage to gather summit-related intelligence and discredit NATO. The report warns that Russia and China both plan to intensify digital and influence operations to undermine the alliance's cohesion and credibility during the summit. Recorded Future stresses the importance of coordinated cyber defense and intelligence-sharing among allies to mitigate these multi-domain threats. Analysts caution about potential DDoS attacks, extortion campaigns, and misinformation aiming to erode public trust and disrupt communications during the summit. This threat environment reflects the tensions stemming from the ongoing war in Ukraine and the strategic importance of NATO unity in response to Russian aggression.",
"actor_primary": "Russia",
"target_primary": null,
"location_text": "NATO Summit, The Hague",
"location_region": null,
"location_coordinates_lat": null,
"location_coordinates_lon": null,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "DEFENSE_PREP_SIGNAL",
"is_hybrid_war_signal": false,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article explicitly describes planned Russian hybrid hostile actions targeting NATO member states and critical infrastructure, fully meeting criteria for aggressor classification. It also details the expected need for heightened digital hygiene and coordinated defenses by NATO and partners around the 2025 Summit, constituting defense preparation activities.",
"event_time_utc": "2025-06-23T09:21:41.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-02-05T19:29:00.388Z",
"updated_at": "2026-11-09T06:58:21.434Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
2
Event time
Jun 23, 2025, 09:21 UTC
Event time confidence
pm24h
Location
NATO Summit, The Hague
Primary actor
Russia
Country
Netherlands
Countries
Netherlands
Tags
Russian hybrid threats, 2025 NATO Summit, Critical Infrastructure, Cyberattacks, Submarine cables, Energy weaponization, DDoS, Extortion, Disinformation, Weaponized migration, Finland Defence Forces, Recorded Future, european union, baltic sea region, NATO, offensive cyber operations, China influence operations
Nodes
Node 1: Borders, Node 2: 5th Column