European Geopolitical & Hybrid Threat Monitor
Q1 2026 Intelligence Synthesis | Open-Source Intelligence
LIVE
Updated: 29 Mar 2026 20:00 GMT
Situation Overview
Q1 2026Threat Landscape
Threat Actors Tracked
4
RU · CN · US · IL
FIMI Incidents (EEAS)
540
▲ +259% AI use YoY
States at Capture Risk
6
HU · GE · SK · RS · AT · CY
Elections Under Threat
4
Hungary 12 Apr (critical)
EU Legislation Targeted
12
Across all 4 actors
EU FIMI Blind Spot
2/4
US + IL not tracked
Strategic Response
NATO Members at 2%
32/32
★ First time in history
EU Defence Mobilisation
€150B
SAFE disbursing
Lagrange Point Progress
~35%
From 0% in 2021
Democratic Health (avg)
3.0
UK, IT, FR declining
Ukraine Ceasefire Prob.
1%
Talks stalled
QMV Foreign Policy
0
No progress. 9 HU vetoes
⚠ STRUCTURAL INTELLIGENCE GAP
The EU’s FIMI framework (EEAS) formally tracks only Russia and China. Despite documented US interference at comparable institutional scale (NSS doctrine, tariff blackmail, Big Tech regulatory capture, 66 multilateral withdrawals) and Israeli operations of comparable budget ($725M hasbara, Black Cube election interference, ELNET lobbying), neither the United States nor Israel has a formal FIMI tracking mechanism. CIDOB (Barcelona) has formally identified this as a critical gap. This dashboard monitors European-theatre FIMI operations across all four actors. For global campaign attribution, actor doctrine, commercial cognitive warfare operators, and cross-jurisdictional framework tracking, see the Global FIMI & Cognitive Warfare Monitor — the dedicated hub for FIMI intelligence across this suite.
Ukraine War Monitor
ACTIVE CONFLICT~1.3M
Russian Casualties
▲ 1,000–1,700/day
€283B
EU Total Aid Committed
▲ +67% military aid 2025
36
Coalition of the Willing
26 pledged troops
1%
Ceasefire Probability
Talks stalled
4.38M
Refugees in EU
DE: 1.33M | PL: 995K
CRITICAL
Air Defence Status
Patriot PAC-3 depleting
◉ Frontline Assessment
Russia controls ~20% of Ukrainian territory. February 2026 was the first month since 2024 where Ukraine recaptured more territory than it lost (~400 km² recovered).
Ukraine has nearly cleared Kupyansk and is advancing in the Hulyaipole/Zaporizhzhia sector. ISW assesses Russia is conducting mechanised reconnaissance-in-force in preparation for a Spring-Summer 2026 offensive targeting the Kramatorsk-Slovyansk "Fortress Belt."
Key dynamic: Russia is now losing more soldiers per month (~40K) than it recruits (~35K). The drone-dominated kill zone means 60-65% of Russian losses are killed rather than the historical 20-25%.
◉ Peace Negotiations
The Trump-Witkoff 28-point plan — co-drafted with Russian envoy Kirill Dmitriev without European consultation — demands Ukraine cede Crimea, Luhansk, and all of Donetsk, cap military at 600K personnel, and constitutionally bar NATO membership.
Europe produced a counterproposal modifying key provisions. Multiple rounds (Paris Jan 6, Geneva Feb 27) have yielded no breakthrough. Lavrov: "We have no deadlines. We have tasks."
Ceasefire probability by spring: 1% (Polymarket). Trump wants war ended by summer 2026. Russia calls Coalition of the Willing an "axis of war" and all European forces "legitimate military targets."
Theatre Status Assessment
| Theatre | Status | Trend | Risk | Key Intelligence |
|---|---|---|---|---|
| Frontline | UA recaptured 400 km²; RU preparing spring offensive | → Contested | HIGH | Russia's Fortress Belt offensive targeting Kramatorsk-Slovyansk |
| Energy Grid | Worst winter of war — 15 major attacks Dec-Feb; 217 in 2026 | ↓ Critical | CRITICAL | ~9GW destroyed (half pre-war capacity). EBRD cut growth to 2.5% |
| Air Defence | International F-16 squadron operational; Patriot stocks critical | ↓ Vulnerable | HIGH | US-Iran war consuming global Patriot PAC-3 supply |
| Black Sea | Russia lost ~1/3 of fleet; grain corridor functioning | ↑ UA advantage | MODERATE | 100M+ tonnes exported via Ukrainian Maritime Corridor |
| Sanctions | Russian oil revenue -24% (2025); price cap failing | ↑ Tightening | MODERATE | Urals at $56.6 vs $44.10 cap. 63 shadow vessels active |
| Nuclear Risk | Elevated rhetoric; New START expired; Oreshnik deployed | → Stable (elevated) | ELEVATED | Russia pre-notifying US of nuclear movements (de-escalatory signal) |
| EU Accession | All 6 clusters informally opened; Hungary vetoes formal process | → Slow | MODERATE | 2027 target universally considered unrealistic. Informal workaround active |
Russian Equipment Losses (Ukrainian Gen. Staff, 11 Mar 2026)
Personnel~1,275,980
Tanks11,763
AFVs24,177
Artillery38,263
Aircraft435
Helicopters349
UAVs170,966
Ships/Boats31
Vehicles82,791
Cruise Missiles4,403
DPRK involvement: ~11,000 troops in Kursk; ~6,000 casualties. China remains "critical enabler" (ISW).
European Military Aid — Top Donors
Germany
$23.5B
UK
$16.8B
Norway
$14.1B
Netherlands
$11.7B
Denmark
$11.7B
Sweden
$10.9B
US aid fully withdrawn since March 2025. No new US military assistance.
Denmark leads on GDP share: 3.25% | Estonia: 3.01%
◉ Ukrainian Deep Strike Campaign
5 MAR Admiral Essen frigate damaged at Novorossiysk; 6/7 oil berths destroyed
10 MAR Storm Shadow strike on Kremniy El — Russia's largest military microelectronics factory
16 MAR Labinsk oil depot — 18 storage tanks destroyed (~$20M loss)
ONGOING 7M drone production target for 2026; 75% of RU casualties by UA drones
◉ Energy Infrastructure Crisis
Most destructive winter of the war: 15 major attacks Dec–Feb, 3x the average of previous winters
217 attacks on energy infrastructure since start of 2026. Feb: 288 missiles (highest monthly total since 2023)
~9GW generating capacity destroyed (half of pre-war levels). Millions with electricity only a few hours/day at -20°C
Russia's strategy: "islanding" — severing grid along Dnieper to hollow out industrial/military capacity before summer offensive
☢ Nuclear Risk Assessment: ELEVATED — NO OPERATIONAL INDICATORS
New START expired 5 February 2026 without renewal — the most significant structural deterioration in strategic stability since 2022. Oreshnik intermediate-range hypersonic missile deployed. Russia's nuclear doctrine threshold lowered (Nov 2024) to include conventional attacks "deemed to pose a critical threat." However, Russia has pledged to pre-notify the US of any nuclear weapon movement near Ukraine — assessed as a de-escalatory signal. No credible intelligence of operational nuclear planning. The nuclear threat serves primarily as a deterrence tool against NATO direct involvement.
Intelligence Timeline
24 EVENTS19 Mar 2026
EU Rapid Alert System activated for Hungary ELECTION
Alert system triggered ahead of 12 April Hungarian elections over confirmed Russian Social Design Agency operations at Budapest embassy.
17 Mar 2026
EEAS Counter-FIMI Conference launches "FIMI Sword" strategy INSTITUTIONAL
Strategic shift from defensive monitoring to offensive counter-FIMI operations announced at Brussels conference.
16 Mar 2026
4 individuals sanctioned for Russian interference SANCTIONS
EU designates 4 more individuals, bringing total to 69 individuals and 17 entities sanctioned for foreign interference.
12 Mar 2026
EEAS 4th Annual FIMI Threat Report FIMI
540 incidents tracked. 259% increase in AI-generated content year-over-year. Russia responsible for majority of operations.
12 Mar 2026
NATO SG Rutte BEDEX 2026 speech DEFENCE
NATO "more European-led" framing. Emphasis on European pillar strengthening within Atlantic alliance.
9 Mar 2026
ECFR "Borrowed Mouths" report FIMI
Documents Chinese FIMI playbook with 5 key techniques including influencer laundering and CRI network amplification.
6 Mar 2026
ECFR "From Shield to Sword" report INSTITUTIONAL
Proposes strategic shift from defensive hybrid response to proactive counter-measures framework.
5 Mar 2026
Alliance of Sovereign Nations launched INTERFERENCE
Turning Point Action launches ASN with 23 EU far-right politicians. Network includes members with documented Russian connections.
2 Mar 2026
Macron Île Longue speech DEFENCE
"Forward deterrence" doctrine, nuclear posture shift, increased warheads, Rafale deployments to European allied bases.
Feb 2026
Paragon spyware dashboard leaked SURVEILLANCE
Dashboard leaked on LinkedIn showing Czech surveillance operations. Raises questions about European spyware oversight.
Feb 2026
2 Chinese spies arrested in France ESPIONAGE
French intelligence arrests 2 operatives targeting Starlink satellite data and military communications.
Feb 2026
Poland charges former intelligence chiefs SURVEILLANCE
2 former intelligence chiefs charged for Pegasus spyware use against opposition and journalists.
Feb 2026
TikTok found in DSA breach REGULATION
Commission determines TikTok in breach of Digital Services Act for addictive design targeting minors.
Feb 2026
US withdraws from Hybrid CoE Helsinki INSTITUTIONAL
Formal US withdrawal from European Centre of Excellence for Countering Hybrid Threats in Helsinki.
Feb 2026
State Dept orders diplomats to fight GDPR globally INTERFERENCE
Internal cable directs US diplomats worldwide to lobby against European data protection standards.
Jan 2026
SAFE Wave 1 approved — €38B first tranche DEFENCE
First wave of Security Action For Europe scheme approved. €38B initial disbursement to member states.
Jan 2026
EU Cybersecurity Act mandates Huawei/ZTE phase-out REGULATION
Mandatory 3-year removal of high-risk vendors from 18 critical sectors across all EU member states.
Jan 2026
6 Baltic Sea cable sabotage incidents SABOTAGE
6 incidents in 6 days targeting undersea cables. Pattern consistent with deliberate hybrid operations.
Jan 2026
US withdraws from 66 international organisations INSTITUTIONAL
Executive order (7 Jan 2026) formalises withdrawal from 66 international bodies including Hybrid CoE.
Jan 2026
Druzhba pipeline shut down ENERGY
Final Druzhba pipeline flows halted, completing European energy decoupling from Russian supply.
Jan 2026
ECFR survey — only 16% see US as ally PUBLIC OPINION
Survey of 25,949 respondents across EU: only 16% view the US as an ally. Historic low in transatlantic trust.
Dec 2025
US NSS calls for "cultivating resistance" in Europe INTERFERENCE
National Security Strategy document frames EU regulatory capacity as threat to US interests. Calls for "cultivating resistance" among European actors.
Dec 2025
€120M DSA fine on X REGULATION
First major DSA enforcement action. X fined €120M for algorithm transparency failures and inadequate content moderation systems.
Dec 2025
Visa bans on Breton + 4 EU officials INTERFERENCE
US imposes visa restrictions on former Commissioner Thierry Breton and 4 additional EU officials involved in tech regulation.
Nov 2025
European Democracy Shield launched INSTITUTIONAL
Commission launches comprehensive framework with ~50 action points to counter foreign interference in democratic processes.
Weekly Intelligence Brief
W/E 29 MAR 2026Top 10 developments across all monitored dimensions. Updated weekly. Sorted by strategic significance.
1. Hungary Election: Mass Voter Intimidation Documented + Russian Interference Confirmed
ELECTIONS
BBC documentary "The Price of the Vote" (26 Mar) alleges Fidesz voter intimidation across 53 of 106 electoral districts, potentially affecting 600,000 voters (10% of expected turnout). Vote-buying at 50-60K forints (~GBP 110-133). Separately, European intelligence agencies confirmed Russian "political technologists" operating in Budapest under Sergei Kiriyenko (Putin's deputy chief of staff). Social Design Agency (SDA) -- EU/US-sanctioned -- engaged to run Moldova-style disinformation. Fidesz now trailing Tisza by up to 20 points in independent polls. Election 12 April.
2. NATO Annual Report: European Defence Spending Up 20%
DEFENCE
NATO Secretary General Rutte presented 2025 Annual Report (26 Mar): European Allies and Canada increased defence spending by 20% in real terms vs 2024. All Allies met 2% GDP for first time. Total NATO spending exceeds $1.4 trillion. Rutte: "For too long, European Allies and Canada were over-reliant on US military might. But there has been a real shift in mindset." Hague Summit 5% target reaffirmed.
3. Slovenia Election: Black Cube Interference, Razor-Thin Result
ELECTIONS
Slovenia's 22 March election produced a near-tie: Golob's Freedom Movement 28.5% vs Jansa's SDS 28.1%. No majority -- kingmaker parties will decide. The election was overshadowed by confirmed Israeli Black Cube interference (4 visits, met Jansa, compromising videos released via SDS-linked media). Golob asked EU to investigate; Macron confirmed "third country" interference. Commission received Golob's letter and confirmed it will reply.
4. Putin Offers Europe Energy Amid Iran Crisis -- Strategic Trap
ENERGY
Putin publicly offered to resume gas/oil supply to Europe as US-Iran war closes Strait of Hormuz and oil exceeds $100/barrel. Orban immediately called for lifting EU Russian energy sanctions. Putin simultaneously instructed government to explore redirecting remaining flows away from Europe before EU ban takes effect. Classic coercive diplomacy -- offer and threat simultaneously. Tests European resolve on energy de-Russification.
5. Russia Spring-Summer Offensive Underway -- Mobilised Troops Deploying 1 April
UKRAINE
ISW confirms Russian forces have begun anticipated Spring-Summer offensive against Fortress Belt (Kramatorsk-Slovyansk). Ground attacks intensified across all axes. Senior Ukrainian official: mobilised personnel deploying 1 April. Ukrainian counterattacks in Zaporizhzhia forcing Russian reserves into defensive posture. Russian logistics described as "practically nonexistent" within 15km of frontline due to drone interdiction.
6. Czech Drone Warehouse Arson -- 3 Arrested on Terrorism Charges
SABOTAGE
Three suspects (Czech and US nationals) arrested on terrorism charges after arson at LPP Holding drone warehouse in Pardubice (20 Mar). Company supplies drones and was developing cruise missile for Ukraine. "Earthquake Faction" claimed attack on Telegram linking it to Israeli weapons production. Note: new Czech government under Babis has rejected Ukraine aid, joining Orban/Fico bloc.
7. CPAC Budapest + Patriots Grand Assembly -- 45 Speakers, 51 Countries
NETWORKS
Orban keynote ("Make Europe Great Again"). Trump video. Netanyahu endorsement. Le Pen, Weidel, Salvini, Wilders, Kickl, Abascal, Milei, Georgian PM Kobakhidze in person. 10K+ at Grand Assembly. Yair Netanyahu attended. Notably: Georgia's PM appearing alongside EU far-right confirms alignment of Russian-captured Georgia with the autocratic network. CSIS describes April 12 as "the most consequential election in Europe this year."
8. EU Sanctions Renewed to September Despite HU/SK Obstruction
SANCTIONS
~2,600 individuals/entities extended to 15 September. Hungary/Slovakia veto overcome after concessions (2 delistings, 5 deceased removed). Costa criticised US for easing Russian oil restrictions. Orban called for lifting energy sanctions. Dutch national Niels Troost delisted (Russian oil trade). CSIS notes Orban may deploy security forces against alleged "Ukrainian interference" in April election.
9. Russian Hybrid Attacks: 41 New Incidents Since Summer 2025
HYBRID
Updated CCD data: 151 total Russian-linked hybrid attacks across Europe since Feb 2022, with 41 new incidents from summer 2025 to February 2026 alone. Includes sabotage, arson, attempted bombings across EU and NATO states. RUSI analysis: recruitment is financial/criminal, not ideological -- a deliberately scalable, deniable system using crypto payments and Telegram recruitment of disposable "gig-economy" agents.
10. Czech Republic Joins HU/SK Anti-Ukraine Bloc Under Babis
CAPTURE
The new Babis government has rejected financial aid for Ukraine and EU loan guarantees, joining Orban (Hungary) and Fico (Slovakia) in opposing EU backing for Ukraine. This is a significant shift -- the previous Czech government was one of Ukraine's strongest EU supporters. Combined with Babis's CPAC appearance and populist posture, Czech Republic is moving toward the captured-state pipeline. V-Dem had flagged Slovakia and Czech Republic on its 2025 watchlist.
Cross-Monitor Signals
6 MONITORSSignals from sibling Asymmetric Intelligence monitors where developments in adjacent domains materially affect this monitor's assessments. Updated each cycle.
Global FIMI & Cognitive Warfare Monitor — Hungary SDA Pre-Op + Alliance of Sovereign Nations
STRUCTURAL
The FIMI Monitor confirms Russia's Social Design Agency operating from the Budapest Embassy ahead of the April 12 Hungarian election (EEAS RAS activated 19 Mar), and independently tracks Turning Point Action's Alliance of Sovereign Nations as an assessed-active near-state US information operation targeting European far-right parties and MEPs. From our perspective, these converge on Hungary as a single theatre where Russian, US (MAGA-adjacent), and Israeli FIMI operations are simultaneously active — reinforcing our P-EU-002 (Hungary Veto Weapon) and P-US-001 (NSS Interference Doctrine) assessments. Structural.
Democratic Integrity Monitor — Hungary State Capture + Georgia Civil Society Collapse
STRUCTURAL
The Democratic Integrity Monitor rates Hungary at Severity 5 (Rapid Decay) with Tisza leading Fidesz by 23 points (Medián), but flags that electoral redistricting requires a 3–5 point national vote margin for opposition majority. Georgia's March 2026 law package (criminalising foreign grants, 8-year political bans for civil society professionals) is assessed as completing its civil society capture architecture — CIVICUS downgraded to ‘Repressed.’ From our perspective, both feed directly into our state capture tracker and networks section: Georgian PM Kobakhidze's CPAC appearance confirms alignment with the autocratic network; a Fidesz loss would materially alter our P-EU-002 veto weapon assessment. Structural.
AI Governance Monitor — AI-Generated Election Content + EU AI Safety Independence Deficit
ACTIVE
The AI Governance Monitor documents NewsGuard-confirmed coordinated AI-generated TikTok content promoting pro-Orbán messaging ahead of Hungary's election, and flags Armenia as a high-probability FIMI target ahead of its June 2026 elections (Russia-attributed deepfakes already circulating). It also identifies a structural AI safety independence deficit where oversight is concentrating among the same actors being overseen. From our perspective, AI-enabled FIMI is a force multiplier for the state actors we track; the Digital Omnibus weakening of the AI Act (our P-US-002) compounds this vulnerability. Active — escalating with election cycle.
Environmental Risks Monitor — Critical Mineral Dependencies + AMOC Early Warning
STRUCTURAL
The Environmental Risks Monitor independently tracks the same EU rare earth vulnerability we assess in P-CN-001 and P-EU-003 (Materials 25%): 97% magnesium from China, only 19/141 REE licence applications approved, zero domestic heavy REE processing. Its AMOC freshwater flux anomaly — third consecutive week at WATCH advisory, the strongest sustained signal since the metric was established — represents a long-horizon European agricultural and infrastructure risk that would compound existing strategic vulnerabilities. From our perspective, critical mineral dependency is the shared structural condition; AMOC is a background escalator. Structural.
Macro Monitor — Hormuz Oil Premium + System Stress Elevation
ACTIVE
The Macro Monitor reports system stress at ELEVATED→HIGH with a $15–20 Hormuz oil premium and zero bullish asset class scores. From our perspective, this intersects with our P-EU-003 energy score (Russian gas down to 13% but US LNG at 60%) and our transient entry on Putin's energy offer: elevated oil prices increase European vulnerability to Russian energy coercion and test sanctions resolve. Russia's gasoline export halt (Apr–Jul) adds a supply-side dynamic. Active — transient unless Hormuz closure persists.
Strategic Conflict & Escalation Monitor — Sudan Displacement Cascade
MONITORING
The Conflict & Escalation Monitor rates Sudan as the highest escalation signal this week (RSF capture of Kurmuk, 73,000 displaced in a single event). From our perspective, sustained Sahel-Horn instability is a background driver of migration pressure on Southern and Central Mediterranean EU states — a vector historically instrumentalised by Russia (Wagner/Africa Corps) and exploited in European far-right political narratives. No immediate escalation to our core assessments, but monitoring for migration-FIMI interaction. Monitoring.
Threat Actor Assessment
4 ACTORS
△
EEAS tracking gap: The EEAS formally tracks Russia and China only. US and Israeli operations are documented here from non-EU sources (Carnegie, ECFR, IJ4EU/Mediapart, CIDOB, DW Fact Check, national intelligence). For full actor doctrine, campaign attribution, and infrastructure detail on all six FIMI actors — including Iran and Gulf states — see the Global FIMI & Cognitive Warfare Monitor.
🇷🇺 Russia
CRITICAL
KEY: 320 hybrid incidents in Germany (2025)
Active Operations
Doppelganger
Storm-1516
Portal Kombat
Pravda Network
Matryoshka
Latest: Social Design Agency operating from Russian Embassy Budapest targeting April 12 Hungary elections. EU Rapid Alert System activated 19 March.
Political
€660M+ opaque donations to EU parties 2019–2022; Voice of Europe paid MEPs across 6 countries
Sabotage
6 Baltic Sea cable incidents in 6 days (New Year 2026)
🇨🇳 China
HIGH
KEY: €305.8B trade deficit · 57% of Hungary FDI
Active Operations
Borrowed Mouths
CRI Networks
Influencer Laundering
Latest: 2 spies arrested in France (Feb 2026) targeting Starlink/military satellites. ECFR "Borrowed Mouths" report published March 2026.
Econ.
19/141 rare earth licence applications approved
Tech
Mandatory Huawei/ZTE 3-year phase-out across 18 EU sectors
🇺🇸 United States
HIGH — ESCALATING
KEY: Only 16% of EU citizens view US as ally (ECFR, n=25,949)
Active Operations
NSS Doctrine
Musk/X Interference
ASN Network
Latest: December 2025 NSS frames EU as threat to European sovereignty. 16 new Section 301 investigations March 2026.
Political
Visa bans on EU officials (Breton + 4), CPAC Budapest, Alliance of Sovereign Nations (5 Mar, 23 politicians)
Instit.
Withdrew from 66 international organisations (7 Jan 2026), incl. Hybrid CoE
🇮🇱 Israel
HIGH
KEY: $725M hasbara budget (20× pre-war levels)
Active Operations
YouTube/X Ad Campaigns
ELNET Lobbying
Clock Tower X AI
Latest: IJ4EU/Mediapart investigation (March 2026) exposes ELNET taking 100+ Bundestag members on undisclosed trips. Paragon spyware leaked dashboard Feb 2026.
FIMI Gap
EEAS framework has NO formal tracking mechanism for Israeli operations despite comparable scale to Russian FIMI
Weaponise
IHRA definition challenged in EP (Feb 2026); Germany detained Jewish Israeli critics 5 times
Elections Under Threat
4 ACTIVE| Election | Date | Primary Threat | Risk | Key Intelligence |
|---|---|---|---|---|
| Hungary | 12 Apr 2026 | Russia (SDA) + Israel | CRITICAL | Kremlin's Social Design Agency confirmed at Russian Embassy Budapest. "Gamechanger" staged assassination plot. EU Rapid Alert activated 19 March. Netanyahu explicitly endorsed Orbán at CPAC Budapest (22 Mar). Orbán's ICC withdrawal triggered by Netanyahu visit. Israel views election as critical to retaining its last EU ally. |
| Germany (state) | 2026 | Russia + US | HIGH | BfV assessment "extremely serious". AfD receiving dual Musk/MAGA + Russian support. |
| Slovenia | 2026 | Russia + Israel (Black Cube) | HIGH | Israeli private intelligence firm Black Cube (ex-Mossad/IDF) confirmed by Slovenian Intelligence Agency to have visited 4 times and met opposition leader Janša. Compromising videos released via Janša-linked media. PM Golob asked EU to investigate; Macron confirmed interference by "third countries." Slovenia also pressured not to join ICJ genocide case due to dependence on Israeli cyber defence systems. |
| Bulgaria | 2026 | Russia | MODERATE | Ongoing Russian information operations. |
| Armenia | Jun 2026 | Russia | MODERATE | Russian pressure ahead of elections. |
| France (presidential) | 2027 | RU + US + CN | PRE-ASSESSMENT | Early campaigning phase. National Rally documented Russian + MAGA ties. |
Convergence Analysis
KEY INSIGHTUS–Russian Convergence
Alliance of Sovereign Nations (Turning Point Action) includes politicians with documented Russian connections. AfD receives dual MAGA + Russian support. Shared institutional targets: EU sovereignty, multilateral frameworks.
Platform Convergence
X under Musk carries 88% of EU-targeted disinfo (Russian), serves as US political interference tool, and is primary Israeli hasbara vector — while contesting DSA enforcement via 3 CJEU cases.
Chinese Exploitation
Transatlantic rift enables bilateral commercial accommodation (Merz, Starmer, Orpo Beijing visits). Hungary functions as dual Russian–Chinese capture state with 57% FDI from China.
Institutional Weakening
US NSS + Israeli lobbying both benefit from weakened EU capacity to enforce international law. Hungarian ICC withdrawal initiated under Israeli influence creates dangerous precedent.
Foreign State Capture Tracker
12 STATES ASSESSEDState Capture Risk Assessment
Foreign state capture: the process by which external powers achieve structural influence over a country’s institutions, economy, media, or political system to the point where that state consistently acts in the foreign power’s interest within EU institutions. The “reverse Trojan horse” (ECFR).
| Country | Score | Primary Captor(s) | Trend | Key Mechanism | EU Impact |
|---|---|---|---|---|---|
| Hungary | 5 | Russia + China + Israel | ↑ Deepening | 51% of FDI from China. Paks II (Rosatom, €10B, 70% electricity). ICC withdrawal for Netanyahu. MCC Brussels (€6M+) | 9 vetoes since Oct 2023. Blocks sanctions, Ukraine loan, foreign policy. Functions as proxy for all three captors inside EU institutions |
| Georgia | 4 | Russia (Ivanishvili) | ↑ Rapid | Ivanishvili = 24.8% of GDP. Foreign Agents Law (5yr prison). US-sanctioned Dec 2024 | EU accession frozen Oct 2024. Russian-style legislation. Potential loss of entire South Caucasus to Russian sphere |
| Slovakia | 3.5 | Russia | ↑ Deepening | Fico pro-Kremlin alignment. RTVS public media abolished Jul 2024. Demands Fridman/Usmanov delisting | Blocked 18th-20th sanctions packages with Hungary. Threatens individual sanctions list renewal. Second veto weapon in Council |
| Serbia | 3 | Russia (intel) + China (infra) | ↑ Deepening | 28K+ Russian cyber intrusions via SVR/GRU. Huawei Safe City (3,500 cameras). Budapest-Belgrade railway (opened Feb 2026) | EU candidate state. If joins EU in current state, becomes third captured veto. Russian intelligence bridgehead inside Europe |
| Austria | 2 | Russia (intel) | ↑ Rising | ~500 Russian diplomats, ~1/3 intel. FPÖ-United Russia pact (auto-renewed to 2026). Only 4 diplomats expelled post-2022 | FPÖ in government. Vienna as Russian intelligence hub. Risk of third sanctions-blocker emerging |
| Cyprus | 2 | Russia (financial) | ↓ Reducing | Historic Russian money laundering hub. Golden passports (abolished). Banking sector cleanup underway | V-Dem near-miss for autocratisation. Financial legacy influence on sanctions enforcement |
| Italy | 1.5 | Israel (arms/surveillance) | → Stable | Paragon spyware on journalists/NGOs. Blocking minority on EU-Israel Association Agreement. RAI state media capture | Part of DE/IT/HU blocking minority on Israel. V-Dem new autocratiser. Association Agreement non-suspension |
| Greece | 1.5 | China (COSCO) | → Stable | Piraeus port (COSCO majority). Predatorgate. V-Dem confirmed autocratiser. RSF 88th (last in EU) | Has blocked EU statements critical of China. COSCO controls EU's third-largest port |
| Germany | 2 | Israel (arms) + China (econ) | ↑ Deepening (IL) | Arrow 3 (€4.6B, Israel's largest-ever arms deal) + 2nd deal ($3.1B). Heron TP drones ($1.2B). Spike missiles ($2B). 100+ MPs on ELNET trips. €7B+ invested in China. Verfassungsblog: "structural dependence" constraining foreign policy | Part of DE/IT/HU blocking minority on Israel. Israel arms dependency constrains Gaza/ICC policy. Arrow is centrepiece of European Sky Shield Initiative (23 countries) |
| France | 1 | Russia (RN) | → Stable | National Rally documented Russian bank loan (€9M). Bolloré media empire. Total/Russian energy ties | RN could win 2027 presidential. If so, second-largest EU state moves toward Russia alignment. Currently contained |
| Netherlands | 0.5 | Minimal | → Stable | ASML semiconductor leverage point. Wilders foreign policy shifts. Strong institutions contain risk | Minimal current EU institutional impact. ASML export controls to China functioning |
The Veto Weapon: How Capture Becomes EU Policy
EU foreign policy requires unanimity. A single captured state can paralyse the entire Union. Hungary has demonstrated this with 9 vetoes since October 2023 — blocking sanctions, Ukraine aid, and foreign policy positions that serve Russian, Chinese, and Israeli interests simultaneously.
Slovakia is now the second veto weapon. Austria (FPÖ government) could become the third. Serbia, if admitted to the EU in its current state, would be the fourth.
The structural fix — QMV on foreign policy — has made zero progress. This means every additional captured state exponentially increases the leverage of external powers inside EU decision-making.
Backsliding → Capture Pipeline
Democratic backsliding creates the conditions for foreign capture. The pipeline runs: media capture → judicial erosion → electoral manipulation → institutional capture → EU veto weaponisation.
Hungary completed this cycle in ~12 years (2010-2022). Slovakia is in stages 2-3. Georgia completed it in ~2 years under accelerated conditions. Austria is at stage 1.
The V-Dem finding that Italy, the UK, and other Western democracies are now autocratising means the capture pipeline is no longer limited to post-communist states. France under a National Rally presidency would represent the first capture of a founding EU member by Russian-aligned interests.
Autocratic & Far-Right Networks
EU + FOREIGN SUPPORTERSFramework: The Power Playbook of the Right — coordinated cross-border networks backed by state actors, billionaires, and institutional vehicles capturing democratic institutions from within.
European Parties & Foreign Supporter Network
| Party / Bloc | Country | EP Group | Foreign Links | Q1 2026 Key Development |
|---|---|---|---|---|
| Fidesz | Hungary | PfE (chair) | RU + IL + US + CN | CPAC Budapest hosted (21–23 Mar). Netanyahu endorsement (22 Mar). Trump video. MCC Brussels €6M+. ICC withdrawal Jun 2026 |
| AfD | Germany | ESN | RU + US (Musk) | 152 Bundestag seats (20.8%). Court blocked "extremist" label (26 Feb). Musk livestream + rally. FPÖ €2.35M donation. ASN summit speaker (5 Mar) |
| RN / National Rally | France | PfE | RU (€11M loans) + IL | Le Pen appeal trial (Jan–Feb). €4.3M EPPO probe. Netanyahu PfE meeting (25 Jan). 200+ Doppelgänger fake sites targeting France |
| FdI / Brothers of Italy | Italy | ECR (chair) | IL (Paragon) + US | Meloni in power. Paragon spyware on journalists. RAI captured. V-Dem new autocratiser. Part of IL blocking minority |
| FPÖ | Austria | PfE | RU (UR pact to 2026) | Kickl in government. FPÖ-United Russia pact auto-renewed. €2.35M donated to AfD. ~500 Russian diplomats remain in Vienna |
| Vox | Spain | PfE | IL + US | Abascal at CPAC Budapest + Patriots Grand Assembly. Netanyahu PfE delegation (25 Jan) |
| SMER | Slovakia | Non-inscrit | RU | Fico blocking sanctions 18th–20th packages. Demands oligarch delistings. RTVS abolished. Second veto weapon |
| AUR | Romania | ECR/ESN | RU + US | Simion at ASN summit (5 Mar, DC). Romanian election crisis (2024 annulment) linked to Russian interference |
| Chega | Portugal | PfE | IL | Ventura at Patriots Grand Assembly (23 Mar). Netanyahu PfE delegation (25 Jan) |
| Lega | Italy | PfE | RU | Salvini photographed with Russian ambassador (Sep 2025). EPPO €4.3M investigation. Disavowed UR pact (2024) |
| Patriots for Europe | EP 3rd largest group | IL (Likud observer) | First legislative win (migration returns, 9 Mar). Likud observer since Feb 2025. Netanyahu delegation (25 Jan). Grand Assembly (23 Mar, 10K+ attendees) | |
| Alliance of Sovereign Nations | Turning Point Action (US) | US (MAGA) | Launched 4–6 Mar 2026 in DC. 23 European far-right politicians. Speaker Johnson attended. AfD, FPÖ, AUR, VB represented | |
◉ Foreign State Supporters
Russia / Kremlin: $300M+ in financial flows to European parties (2014–2022). RT clone network (37+ domains, 5.5M DE visits/quarter). Doppelgänger: 200+ fake French sites. Voice of Europe €1M/month to MEPs. Druzhba pipeline as veto leverage.
Israel / Likud: Likud = PfE observer member (Feb 2025). Netanyahu met PfE delegation 25 Jan 2026 (RN, FPÖ, Vox, Fidesz, Chega, VB). "Patriots of Jerusalem" institutional branch established. Black Cube election ops (Slovenia). Netanyahu endorsed Orbán at CPAC (22 Mar). Son Yair at CPAC Budapest.
US / MAGA: Trump NSS (Dec 2025) backs "patriotic European parties." ASN summit (4–6 Mar, DC) with Speaker Johnson. Heritage/Project 2025 European outreach. Visa bans on 5 EU digital officials. Trump video at CPAC Budapest.
◉ Billionaire & Tech Actors
Elon Musk / X: Platform = political infrastructure for EU far-right. Weidel livestream (Jan 2025). AfD rally address. X carries 88% of EU-targeted disinfo. €120M DSA fine (Dec 2025). 3 CJEU cases filed. Removed state-media labels (RT +100% engagement).
Peter Thiel / Palantir: £670M+ UK state contracts. £240M MoD deal without tender (Dec 2025). 4-person MoD-to-Palantir revolving door. Data infrastructure for European security states.
Koch / Atlas Network: 500+ partner organisations in 100+ countries. Anti-regulation, climate denial, anti-government ideology. Structural influence on EU policy through funded think tanks (1/3 of Brussels think tanks US-funded).
Paul Marshall / GB News: UK far-right media infrastructure. Links to Israeli and US conservative networks. Platform for Farage, Reform UK. European expansion signals.
Coordination Events — Q1 2026
21–23 MAR
CPAC Budapest + Patriots Grand Assembly — 45 speakers, 51 countries. Orbán keynote ("Make Europe Great Again"). Trump video. Netanyahu endorsement. Le Pen, Salvini, Wilders, Kickl, Abascal, Weidel, Milei in person. Yair Netanyahu in person. 10K+ at Grand Assembly (MVM Dome).
4–6 MAR
Alliance of Sovereign Nations (Washington DC) — Turning Point Action. 23 European far-right politicians. Speaker Mike Johnson attended. AfD (Frohnmaier), AUR (Simion), FPÖ, Vlaams Belang confirmed. US institutional embrace of European far-right.
25 JAN
Netanyahu – Patriots for Europe Delegation (Jerusalem) — First formal meeting between sitting Israeli PM and EU far-right bloc. RN, FPÖ, Vox, Fidesz, Chega, Vlaams Belang MEPs. Likud observer status in PfE formalised. "Patriots of Jerusalem" branch established.
DEC 2025
US National Security Strategy — Explicitly backs "patriotic European parties." Calls for "cultivating resistance" within Europe. First US security document to frame the EU as a threat. Doctrinal foundation for MAGA–EU far-right alliance.
Financial Flows — Follow the Money
RUSSIA → EU PARTIES
$300M+
2014–2022 documented
RN €11M · VoE €1M/mo
OPAQUE EU DONATIONS
€664M+
2019–2022 undisclosed
Source unknown
ID GROUP SCANDAL
€4.3M
EPPO investigation
RN + Lega + others
FPÖ → AfD
€2.35M
Largest foreign donation
to any German party
360° Research & Intelligence Tiers
5 TIERSGeopolitical Security & Hybrid Warfare Analyst framework. Each tier represents a distinct analytical lens — from official government positions through technical data, investigative ground truth, infrastructure monitoring, to strategic foresight. Cross-referencing across tiers exposes attribution gaps where institutional and investigative findings diverge.
TIER 1 Institutional & Diplomatic | The ‘Official’ View
Official attributions, security policy, and formal intelligence assessments from EU/NATO institutions.
540 incidents, FIMI Deterrence Playbook, AI in 1-in-4 operations. [PDF] 12 Mar 2026
IIAF tested against real Russian campaigns. Evidential thresholds for DSA-grade attribution. 12 Feb 2026
4,875 incidents analysed. DDoS 77% of attacks. Russia/China-nexus groups intensified EU targeting. Oct 2025
Classified products (EU SECRET). Public hub covers drone incursions, cyber, FIMI, subsea cables. Updated 19 Mar 2026
TIER 2 Real-Time Threat Data | The ‘Technical’ View
Kinetic incidents, disinformation campaign tracking, and infrastructure anomaly detection in near real-time.
204,605 conflict events tracked. Ukraine/Palestine 40%+ of global events. Real-time dashboards. Dec 2025
Real-time global news monitoring. Event tracking and information environment analysis. [Visual Dashboard]
First interactive FIMI dashboard mapping operations, channels, and the FIMI "galaxy." 17 Mar 2026
TIER 3 Investigative & Forensic Media | The ‘Ground Truth’
Digital forensics, follow-the-money investigations, and grey-zone activity exposure. Often ahead of institutional attribution by months or years.
Central Europe. Named GRU Special Tasks Dept as architect of 2024 parcel explosions across 5 EU states. Sep 2025
70 journalists, 14 outlets. 1M+ covert tracking ops via EU telecoms. SS7 exploitation. No EU enforcement action. Oct 2025
87 vessels with fraudulent papers. False flags enabling Russian sanctions evasion near EU waters. 19 Feb 2026
Russian TikTok influence ops propelled far-right Georgescu to first place. Election annulled. Dec 2024
Leaked Cabinet Office docs: UK Ambassador appointed despite Russian board ties + Palantir conflicts. Also: Farage–Manafort crypto link. Mar 2026
TIER 4 Infrastructure & Technical Oversight | The ‘Accountability’ View
Sabotage, cyber-attacks, maritime/energy security, and real-time infrastructure disruption monitoring.
Real-time internet disruption monitoring with technical evidence. Live alerts at @netblocks.
Live AIS vessel tracking, pre-centred on Baltic subsea cable corridors. AIS-off and proximity alerts for critical infrastructure zones.
500K+ hours of investigations. Mean exploit time now -7 days (before patch). Russia-nexus persistence in EU networks. 23 Mar 2026
280+ adversaries tracked. 89% increase in AI-enabled attacks. FANCY BEAR deploying LLM-enabled malware. 29-min breakout time. 24 Feb 2026
TIER 5 Strategic Defence Analysis | The ‘Expert’ View
Strategic foresight on hybrid warfare, NATO/EU coordination, and long-term European security architecture.
Helsinki. Only 29% of NATO/EU states have counter-disinfo strategy. Post-US withdrawal (Feb 2026). Oct 2025
Financial infrastructure of hybrid sabotage. Crypto payments, Telegram recruitment, gig-economy agents. 14 Jan 2026
Berlin. Hybrid warfare legal gaps, shadow fleet surveillance, critical infrastructure protection. Feb 2026
⚠ Critical Friction Notes — Attribution Gaps
Where investigative outlets (Tier 3) have identified incidents or attributions that institutional sources (Tier 1) have not yet formally acknowledged. These gaps expose the political and evidentiary thresholds that delay official action.
Gap 1: GRU Parcel Bomb Network — 18-month attribution lag
Vsquare named the GRU in September 2025 — identifying the ringleader, Telegram command structure, and logistics route of 2024 parcel explosions across 5 EU states. Eurojust only confirmed publicly in March 2026, approximately 18 months after the incidents. No EEAS, Hybrid Fusion Cell, or NATO body issued formal attribution in between.
Gap 2: Romania Election Interference — vague institutional attribution
Politico and investigative outlets documented Russian + Iranian + internal Romanian actors. The EEAS 4th FIMI Report references Romania only tangentially as "Russian-linked" without naming specific services. The EU never issued a formal Article 29 attribution. The investigative record is substantially more detailed than the institutional record.
Gap 3: EU Telecom Surveillance Exploitation — zero institutional response
Lighthouse Reports (70 journalists, 14 outlets) exposed 1M+ covert tracking operations exploiting a European telecoms network via SS7 — with sales to authoritarian governments. As of March 2026, no EU institution has issued a formal enforcement action, investigation, or acknowledgment. Regulatory silence persists 5 months after publication.
Foreign Influence in EU Legislation
12 ACTIVE VECTORSLegislative Battles with Documented Foreign Interference
| Legislation / Policy | Foreign Actor | Method | Outcome |
|---|---|---|---|
| DSA / DMA Enforcement | US | Section 301 threats; Lutnick tied digital deregulation to tariff relief; Vance threatened NATO support cuts over X regulation; Big Tech allied with far-right MEPs | PARTIALLY WEAKENED Digital Omnibus delayed AI Act, weakened GDPR |
| AI Act Implementation | US | Digital Omnibus (Nov 2025) delayed penalties for high-risk AI by 1 year; permitted AI training on personal data without consent. 127 civil orgs called it "most significant rollback of digital rights in EU history" | DELAYED Enforcement pushed to Aug 2027 |
| Russia Sanctions (19th-20th packages) | Russia via HU/SK | Hungary vetoed 20th package on 4th war anniversary. Slovakia demands Fridman/Usmanov delisting. Hungary blocked €90B Ukraine loan despite exemption from contributing | BLOCKED Maritime services ban stalled |
| EU-China EV Tariffs | China | Minimum-price lobbying; French brandy retaliation threat; German automaker alignment (VW submitted proposals to Commission). Chinese plug-in hybrid sales up 14x to circumvent | PARTIALLY CIRCUMVENTED |
| IHRA Definition / Anti-BDS | Israel | ELNET lobbying ($7M+ US donor funding, 1,061 MPs surveyed); €130K covert BDS monitoring contract; B'nai B'rith 18-page memo to Ireland on Occupied Territories Bill | 25/27 EU STATES ADOPTED |
| EU-Israel Association Agreement | Israel + DE/IT/HU | Blocking minority (DE, IT, HU) prevented suspension despite 17/27 ministers supporting review. Israel barred 2 MEPs from entry at Tel Aviv airport (Feb 2025) | NOT SUSPENDED |
| ICC Compliance | Israel + US | Hungary ICC withdrawal (triggered by Netanyahu visit). US sanctions on ICC judges. Trump EO authorising asset freezes on ICC officials | HU WITHDRAWING Effective Jun 2026 |
| Rare Earth / CRMA | China | Export controls on 12 REEs as coercive leverage; only 19/141 EU licence applications approved. EU imports 97% of magnesium from China | EU DEPENDENT 2030 targets "unlikely" |
| Corporate Due Diligence (CSDDD) | US + Qatar | US and Qatar lobbied to weaken. Thresholds raised from 1,000 to 5,000 employees, removing most companies from scope | GUTTED |
| EU Energy De-Russification | Russia via HU/SK | Hungary calling to ease oil sanctions (Mar 2026). Druzhba pipeline dispute used as pretext. France/Belgium still importing Russian gas (12% of EU imports) | DELAYED 2028 target at risk |
| Taiwan Resolutions | China | Active lobbying to distort UN Res 2758 interpretation. Threats of "red lines" after each EP resolution. Economic retaliation threats | EP RESISTING 432 votes in favour (Oct 2024) |
| EU Space Act | US | US State Dept 13-page submission opposing draft, claiming it "contradicts the spirit" of EU-US trade agreement | UNDER PRESSURE |
◉ MEP Corruption & Foreign Payments
Voice of Europe (Russia): Up to €1M/month to far-right politicians in 5+ EU countries. 16 MEPs implicated. Guillaume Pradoura arrested May 2024. EU-wide sanctions imposed.
Huaweigate (China): 5 MEPs under investigation, 8 charged incl. senior Huawei exec (Mar-May 2025). Investigated for paid signatures on pro-Huawei 5G letter to Commissioners. EPP blocking immunity waivers.
ELNET (Israel): $7M+ from US pro-Israel donors. 100+ Bundestag members on undisclosed trips. ELNET CEO claimed credit for EP Gaza resolution. 1,061 MPs surveyed across 35 countries.
Qatargate: €1.5M cash found. 3 years later: no final judgments. European Ethics Body agreed May 2024 but still non-operational (EPP + far-right boycott).
Opaque party funding: €660M+ in undisclosed donations to EU parties (2019-2022). Third-Country Lobbying Directive passed EP Nov 2025 (392 votes) — now in inter-institutional negotiations.
◉ Structural Influence Channels
US think tank capture: Over 1/3 of Brussels think tanks funded by US philanthropies or multinationals, providing structural leverage over EU policymaking.
Chinese United Front: 2,000+ organisations with UFWD connections identified in democracies. Belgian VSSE documented China creating "groups of decision-makers" to influence EU processes. 16+1 forum as elite capture mechanism.
Hungarian MCC Brussels: Funded with ~$1.7B from Orbán government. Brussels office "very visible and effective" since 2024. Hybrid state-linked think tank pushing Eurosceptic narratives inside EU policy circles.
Big Tech + far-right MEP alliance: CCIA, DigitalEurope, Dot Europe aligned with far-right MEPs to push Digital Omnibus deregulation package. Positions directly match industry lobbying submissions.
VSSE assessment: Belgian intelligence explicitly documented all four actors (RU, CN, US, IL) conducting influence operations targeting EU institutions. China and Russia assessed as most systematic; US as most structurally embedded; Israel as most targeted on specific legislative files.
Interference Footprint by Actor
RUSSIA
Sanctions veto
MEP payments
Energy leverage
Via HU/SK proxies
CHINA
Trade coercion
MEP bribery
REE weaponisation
2,000+ UFWD orgs
UNITED STATES
Regulatory capture
Tariff blackmail
Think tank funding
1/3 of Brussels think tanks
ISRAEL
Targeted lobbying
IHRA weaponisation
Black Cube ops
$7M+ via ELNET alone
Democratic Health Tracker
15 COUNTRIES74%
World in Autocracies
Highest since 1978 (V-Dem)
7%
World in Liberal Democracies
Lowest in 50+ years
20th yr
Consecutive Freedom Decline
Freedom House 2026
6/10
New Autocratisers in Europe
Incl. Italy, UK, USA
-24%
US Democracy Index Drop
20th → 51st in one year
€18B
EU Funds Frozen (Hungary)
€1B permanently forfeited
Democratic Health Scorecard
Sources: V-Dem Democracy Report 2026, Freedom House FIW 2026, RSF Press Freedom Index 2025, EU Rule of Law Report 2025. Scale: 1 = severe backsliding, 5 = strong democracy.
| Country | Speech | Protest | Judiciary | Elections | Media | Avg | Status | Key Concern |
|---|---|---|---|---|---|---|---|---|
| Turkey | 1 | 1 | 1 | 1 | 1 | 1.0 | AUTOCRACY | Worst due process score globally (FH). RSF 157th. 90%+ media gov-controlled |
| Georgia | 1 | 1 | 1 | 1 | 1 | 1.0 | AUTOCRACY | Russian-style Foreign Agents Law. EU accession suspended. Ivanishvili capture |
| Hungary | 1 | 1 | 1 | 2 | 1 | 1.2 | HYBRID AUTOCRACY | EU Art.7 triggered. €18B frozen. 80% media captured. FH: 65/100 (-28 since 2005) |
| Serbia | 2 | 2 | 2 | 2 | 2 | 2.0 | SEVERE | FH -3pts (2025). Teacher/student protest retaliation. Vučić consolidation |
| Greece | 2 | 3 | 2 | 3 | 1 | 2.2 | CONFIRMED AUTOCRATISER | V-Dem confirmed autocratiser. Predatorgate convictions. RSF 88th (last in EU) |
| Slovakia | 2 | 3 | 2 | 3 | 2 | 2.4 | WATCHLIST | V-Dem watchlist. RTVS public media captured. Fico pro-Russian alignment |
| Romania | 3 | 3 | 3 | 2 | 3 | 2.8 | VULNERABLE | 2024 election annulled (Russian interference). Crisis resolved but vulnerabilities exposed |
| UK 🇬🇧 | 3 | 2 | 3 | 4 | 3 | 3.0 | NEW AUTOCRATISER | V-Dem new autocratiser. Public Order Act criminalises protest. Online Safety Act. Investigatory Powers Act |
| Italy 🇮🇹 | 3 | 3 | 3 | 4 | 2 | 3.0 | NEW AUTOCRATISER | V-Dem new autocratiser. RAI state media captured. FH -2pts. RSF 48th. Paragon spyware on journalists |
| France 🇫🇷 | 3 | 2 | 4 | 4 | 2 | 3.0 | DECLINING | Protest crackdowns (49.3 bypass). Bolloré media empire. FIDH/OMCT report on democratic erosion |
| Spain | 3 | 3 | 2 | 4 | 3 | 3.0 | MIXED | "Constitutional hardball" (Verfassungsblog). Amnesty Law controversy. Venice Commission critical |
| Poland | 3 | 4 | 2 | 4 | 3 | 3.2 | RECOVERING | Democratising under Tusk but judicial repair stalled by PiS president. V-Dem: on recovery path |
| Germany | 3 | 4 | 5 | 5 | 4 | 4.2 | STRONG | Strong institutions. AfD BfV-designated as suspected extremist. Speech score lower due to IHRA/protest restrictions |
| Netherlands | 4 | 4 | 3 | 5 | 5 | 4.2 | STRONG | FH 97/100. RSF 3rd. Wilders emergency-powers attempt noted by V-Dem as near-miss |
| Sweden | 5 | 5 | 5 | 4 | 5 | 4.8 | STRONGEST | FH 99/100. RSF 4th. Primary risk: Russian foreign interference ahead of 2026 elections |
Western Europe: The New Erosion Pattern
V-Dem 2026 identifies Italy, the UK, and the USA as newly autocratising countries — a qualitative shift. The decline is driven by:
▸ Speech — UK Online Safety Act, Italy SLAPP environment
▸ Protest — UK Public Order Act, France crackdowns
▸ Media — France Bolloré empire, Italy RAI capture
Not collapse but cumulative degradation — each step individually defensible, collectively producing democratic deficit.
EU Enforcement Gap
▸ Article 7 (Hungary) — Triggered 2018. 8 Council hearings. Zero sanctions imposed. Requires unanimity minus target — effectively paralysed.
▸ Conditionality Mechanism — More effective. €18B frozen. €1B permanently forfeited. EU Court ruled Commission wrongly released €10B in 2023.
▸ ECHR compliance — Hungary has highest non-compliance rate in EU. Turkey under Article 46 enhanced supervision.
▸ Freedom of expression is the most targeted metric globally over 25 years (V-Dem) — and the most common entry point for democratic erosion.
Defence Spending — % GDP
32/32 AT 2%🇪🇺 SAFE / ReArm Europe
€150B
Waves 1–2 approved, first payments March 2026. Poland €43.7B largest recipient.
🇫🇷 France — Forward Deterrence
Île Longue
Macron's 2 March speech: "forward deterrence," increased warheads, Rafales to European bases.
🇩🇪 Germany — Rearmament
€108B
2026 spend, debt brake reform, path to €162B / 3.5% by 2029.
EU Response Tracker
7 MEASURESACTIVE
European Democracy Shield
Launched 24 Feb 2026. ~50 action points. EP rapporteur criticises as insufficient.
DISBURSING
SAFE / ReArm Europe
€150B scheme. Waves 1–2 approved. First payments March 2026.
NEAR ACTIVATION
Anti-Coercion Instrument
Multiple qualifying triggers from US. Not yet formally activated.
ACTIVE
DSA Enforcement
€120M fine on X (Dec 2025). X filed 3 CJEU cases. Code of Practice now binding.
PARTIAL
Niinistö Implementation
63 actions adopted. Year-one deliverables on track. Intelligence-sharing incomplete.
LAUNCHED
FIMI Deterrence Playbook
March 2026. Shift from defensive to offensive hybrid strategy.
→ Global FIMI & Cognitive Warfare Monitor
Full actor attribution, campaign tracking, platform responses, and doctrinal frameworks -- covering Russia, China, Iran, Gulf states, United States, and Israel globally. Hub monitor for FIMI intelligence across the asym-intel.info suite.
ACTIVE
EU Cybersecurity Act
Jan 2026. Mandatory 3-year Huawei/ZTE phase-out across 18 sectors.
Strategic Autonomy Scorecard
LAGRANGE POINT: ~35%Lagrange Point Progress — European Strategic Independence
From effectively 0% in 2021 to ~35% in March 2026. The architecture is being built but critical vulnerabilities could be weaponised before the scaffolding is complete.
Energy
52%
↑ Improving
Institutions
35%
→ Mixed
Defence
28%
↑ Fast
Materials
25%
↑ Improving
Finance
22%
↑ Slowly
Tech
18%
→ Stalling
⚡ Energy Independence52%
Russian gas (% of EU imports)45% → 13%
Russian oil (% of EU imports)27% → ~2%
Renewables (% of EU electricity)47.3%
Wind + solar overtook fossil fuels30% (2025)
US LNG share of EU imports60% ↑
Risk: swapping Russian for US energy dependency. IEEFA warns US could supply 75-80% of EU LNG by 2030.
🛡️ Defence Industrial Capacity28%
European arms from US (%)58% (was 64%)
Israeli arms to Europe (2024)54% of IL exports
Arrow 3 (DE) — EU Sky Shield€4.6B + $3.1B
Joint EU procurement18-20% (target: 40%)
SAFE/ReArm Europe€150B disbursing
French nuclear umbrella offer2 Mar 2026
Risk: dual dependency — 58% of arms US-sourced, plus growing Israeli dependency (Arrow, Heron, Spike). Europe bought 54% of Israel's $14.8B defence exports in 2024. Verfassungsblog: this creates "structural dependence" constraining foreign policy on Gaza/ICC.
💻 Tech Sovereignty18%
EU semiconductor market share~8% (target: 20%)
US cloud market share in EU70%+
Huawei/ZTE phase-out30-40%
DSA enforcement (X fine)€120M
Brussels think tanks US-funded33%+
Risk: weakest dimension. Digital Omnibus rolled back AI Act/GDPR under US pressure. GAIA-X effectively defunct.
🏛️ Finance & Institutions22% / 35%
Euro share of global reserves20.3% (USD: 57%)
Frozen Russian assets€210B frozen
Hungary vetoes (since Oct 2023)9 vetoes
QMV reform on foreign policyNo progress
China raw materials dependency97% Mg, 71% Ga
Risk: US secondary sanctions can paralyse EU companies. Single-state vetoes block foreign policy. Capital markets union incomplete.
The Lagrange Point Test
Geopolitical sovereignty and success is defined in the Reckoning series and measured by a single metric: do the United States and China face genuine uncertainty about where Europe will land in a crisis? At 35% strategic autonomy, the answer is still no. Energy has moved furthest (52%), but swapping Russian gas for US LNG at 60% creates a new lever. Defence is the most dangerous blind spot: 58% of arms are US-sourced, and Europe is now Israel's largest weapons customer (54% of $14.8B in 2024 exports). Germany's Arrow 3 (€4.6B + $3.1B) is the centrepiece of the European Sky Shield Initiative across 23 countries — creating structural dependence on Israel that Verfassungsblog warns constrains Berlin's ability to act on Gaza, ICC compliance, or international law. The same dynamic that makes US Patriot dependency dangerous applies to Israeli Arrow dependency, yet it receives almost no strategic autonomy scrutiny. Tech sovereignty at 18% is the weakest link. The institutional architecture (QMV reform, Hungary veto removal) remains the precondition for everything else. Europe has the resources, the market, and the normative capital. The question is whether its leadership class can see that strategic autonomy means independence from all external dependencies — not just the ones it is politically comfortable naming.
Intelligence Sources & Feeds
20 SOURCESPrimary OSINT Sources Feeding This Dashboard
| Source | Type | Niche | Key 2026 Output |
|---|---|---|---|
| Bellingcat | OSINT / Investigation | Conflict verification, geolocation, war crimes evidence | 2,500+ verified civilian harm incidents (Ukraine 4-yr archive) |
| DFRLab | Policy Lab / OSINT | FIMI attribution, platform analysis, election integrity | IMS framework for FIMI technical attribution |
| Freedom House | Democracy Index | Global freedom ratings, democratic decline tracking | FIW 2026: 20th year of decline. Italy/Bulgaria largest Free-country decliners |
| Hybrid CoE | Research Centre | Hybrid threats, resilience, after US withdrawal (Feb 2026) | Report 15: only 29% of NATO/EU states have counter-disinfo strategy |
| ECFR | Think Tank | EU foreign policy, strategic autonomy, public opinion | "Borrowed Mouths" (CN FIMI), "Shield to Sword" (hybrid strategy) |
| Verfassungsblog | Academic / Legal | EU constitutional law, rule of law, democratic backsliding | Spain "constitutional hardball" analysis. Hungary/Poland judicial reform |
| V-Dem Institute | Democracy Index | Autocratisation data, liberal democracy indices | Democracy Report 2026: US drops 24%. 6/10 autocratisers in Europe |
| CTG | Intelligence | Counter-terrorism threat assessment (EU intel services) | EU Terrorism Situation and Trend Report |
| FEPS | Policy Research | Progressive policy, democracy, social Europe | "Democracy Under Pressure" series. European sovereignty research |
| Stanford Cyber Policy / Schaake | Academic / Policy | Tech governance, surveillance, digital threats to democracy | Schaake: "The Tech Coup" framework. EU digital sovereignty analysis |
| Carnegie Europe | Think Tank | European security, Russia, transatlantic, democracy | "Belligerent and Beleaguered" (Mar 2026): Russia emerges more dangerous |
| EU DisinfoLab | Investigation / Research | Disinformation networks, platform accountability | 1 in 3 debunked claims now AI-generated. RT mirror domains in Germany |
| Oxford Internet Institute | Academic | Information environment, computational propaganda | Organised social media manipulation studies |
| Chatham House | Think Tank | European security, Russia, transatlantic, int'l law | "Europe's last chance to stand by Ukraine" (Witkoff plan analysis) |
| IISS | Strategic Studies | Military Balance, strategic dossiers, defence economics | Military Balance 2026: global defence spending analysis |
| RUSI | Defence Research | Defence, security, intel. Russian sabotage financing | RU hybrid attacks tripled 2023→2024. Recruitment is financial not ideological |
| Munich Security Conference | Annual Report | Global security architecture, transatlantic relations | MSR 2026: "Wrecking-ball politics" framework. US order destruction |
| Transparency Int'l EU | Anti-Corruption | EU institutional corruption, foreign influence, lobbying | Qatargate 3-yr reckoning. Ethics Body still non-operational |
| Global Witness | Investigation | Follow-the-money, corporate accountability, conflict resources | CSDDD corporate pushback analysis. Fossil fuel lobbying documentation |
| EUvsDisinfo | Institutional (EEAS) | Russian disinformation database, narrative tracking | Continuous database. 18,000+ disinformation cases catalogued since 2015 |
About This Monitor
The European Geopolitical & Hybrid Threat Monitor (EGHTM) is an open-source intelligence synthesis product designed to provide senior analysts, policymakers, and researchers with a consolidated view of the hybrid threat landscape facing Europe.
This dashboard aggregates and synthesises publicly available intelligence from institutional sources (EEAS, NATO, European Commission), research organisations (ECFR, ICCT, Hybrid CoE), investigative journalism (IJ4EU, Mediapart, EUvsDisinfo), and national security assessments.
Methodology: All data presented is derived from open-source intelligence (OSINT). Assessment judgments are clearly identified as such and distinguished from reported facts. Threat levels are assessed based on capability, intent, recent activity patterns, and institutional impact. This monitor does not rely on classified sources.
Coverage period: Q1 2026 (October 2025 — March 2026), with contextual references to earlier events where necessary for pattern analysis.
Related: World Democracy Monitor — a companion dashboard tracking global democratic health indices, autocratisation trends, and freedom metrics across all regions.
Related: Global FIMI & Cognitive Warfare Monitor — hub monitor tracking FIMI campaigns, actor doctrine, platform responses, and regulatory frameworks globally across all six actors. This monitor's FIMI material cross-links to the hub for depth.