The cyberattack last week that hit hundreds of French supermarket refrigerators had Europeans wondering if the nonstop warnings about AI risks had finally landed in the real world.

They hadn’t — at least, not yet.

Experts say the attack, which forced hundreds of retailers to throw away defrosted food and spoiled milk, was mostly a reminder of the importance of old-school cybersecurity in safeguarding essential goods and services.

The attack is a “typical example” of how “low-key cyber-enabled sabotage can affect very crucial supply for society,” said Ferdinand Gehringer, hybrid threats lead at FTI Consulting. 

It’s arguably the most consequential hack in the European Union this year, with tangible, disruptive real-world repercussions. France’s Prime Minister Sébastien Lecornu personally managed the fallout, which prompted coordination and information-sharing at the EU level. 

The perpetrators, whose identity and motives are currently unknown, hacked into digital systems to remotely raise the temperature of refrigerators in supermarkets including Intermarché and Carrefour.

One cybersecurity expert working with Lecornu’s office said the French government held meetings after the attack to try to map all the potentially affected sectors, beyond supermarkets. “We’re in the middle of the flu vaccination campaign,” he said, referring to vaccine storage, which also relies on temperature control solutions, though no such attacks have been registered.

To add to the fear and confusion, supermarkets in the Netherlands and Belgium experienced unrelated cyber incidents that same week. Though there was limited impact in those cases, they were a good example of “how big our reliance is in the food supply chain on IT and network systems,” Dutch food security minister Silvio Erkens told POLITICO. 

The attacks come after citizens and policymakers have spent months being bombarded with warnings about scenarios in which unpredictable advanced artificial intelligence models escape human control.

While most good and bad actors on the internet are increasingly using AI models to increase speed and capacity, cyber experts say the hackers in question in the French case most likely used traditional methods to take advantage of devices needlessly exposed to the internet.

Connecting devices to the internet in this way is “an old-fashioned bad practice,” said Amir Preminger, chief technology officer at Claroty, a cybersecurity company that identified a software flaw in a product made by Danfoss, one of the refrigeration companies targeted by the French hacks. Danfoss fixed that flaw in 2025. 

Food systems

The attacks come at a time when Europe’s food security is already under considerable pressure due to geopolitical insecurity and climate change. The continuing disruptions in the Strait of Hormuz are pushing up fuel and fertilizer prices at a time where farmers struggle with the fallout of extreme drought that caused lower yields in many parts of Europe. These problems are compounded by the blockade of the Black Sea which is fueling the rise of global food prices.

“It is very serious that cyber criminals attack our food systems,” said Else Groen, director general of trade body Independent Retail Europe. She nonetheless stressed that food supply chains are resilient, which reduces the chances that consumer food supply would be endangered — even if such attacks are already a “major blow” for retailers operating on razor-thin margins.

The incidents bring to the fore a long-running problem with so-called operational technology, meaning industrial devices with physical outputs, like refrigeration systems. Critical sectors are packed with these kinds of devices, many of which are old, poorly protected, unnecessarily connected to the Internet, or some combination of the three. They’re also obscure and sometimes forgotten, despite the ramifications if they’re tampered with.  

And last week’s problems are far from solved. French and German cyber authorities warned that attacks were probably still ongoing, and the Greek cyber agency and an industry tracker said after the attack that there were hundreds of devices still connected to the internet.

Preminger too said there are still devices exposed, though he added that the number is declining, and not all are necessarily vulnerable to attack. Another research group found that the number of exposed Danfoss devices had significantly decreased.

Finding a fix

What’s changed with the widespread diffusion of advanced AI models is that cyber attacks are now faster and easier to replicate. Claroty reproduced the original flaws in Danfoss products in 28 minutes at a cost of $6, it said. 

In broad terms, AI makes it easier to carry out many types of cyberattacks and enables attackers to pounce on software flaws more quickly. Financially motivated cybercriminals — who have already spent years extorting businesses and disrupting essential services like hospitals — can use AI to simultaneously launch attacks on multiple targets.

Though the motive for the attacks on French supermarkets remains unknown, it is notable that there was no reported attempt at extortion. The strike did come as Russia ramps up its campaign of hybrid warfare against Europe, and senior EU and European leaders have consistently warned that Moscow could use cyberattacks to disrupt real-world services. Beyond food supplies, AI-enhanced targeting could be aimed at banking, hospitals and the functioning of the internet itself.

Still, these fears of bad human actors using AI should be distinguished from the science-fiction scenarios pushed by so-called AI doomers, in which bots themselves are motivated and able on their own to wipe out humanity.

Digital security experts, including the EU’s own in-house cyber team, are also turning to AI for defense. But it’s not a silver bullet, said Rémi Enjolras, a chief technology officer at Splunk, part of Cisco. Critical industries need to stop “seeing AI as a magical tool that will solve everything and go back to the fundamentals,” he said.

The EU has passed laws intended to force critical industries and product manufacturers to get those fundamentals right. But France, for example, is lagging in implementing such national regulations, and there are few other incentives to get companies to do that difficult and costly work.

Still, the images of empty supermarket shelves could provide a new incentive. “It should serve as a kind of a wake-up call,” Enjolras said.

Émile Marzolf contributed to this report.

DUBLIN — The Irish capital, which doubles as Europe’s de facto tech capital, hosted two very different AI summits in the past week.

Most eyes were on the International AI Summit, the signature tech event of Ireland’s six-month presidency of the Council of the EU, where top brass from the world’s biggest tech firms discussed ways to harness artificial intelligence and minimize safety risks.

But the weekend before, a very different conversation was taking place at the Workers’ AI Counter Summit, as Ireland’s tech workers demanded a say in how the burgeoning technology reshapes the workplace and society.

Ireland’s lucrative tech sector has been rattled by waves of AI-driven layoffs — and the country’s fledgling tech union has seen an exponential spike in sign-ups from workers who are worried about their future.  

There’s an “awakening” happening right now among workers in Ireland’s tech sector, and a growing “awareness that they’re not bulletproof,” said Sinéad Gibney, a social democrat lawmaker who previously worked for Google.  

“I do think what we will see is that parts of roles will be automated, which means that people will be competing more heavily for the same roles,” she said. “They won’t have the same labor power and therefore we’re going to see a drop in quality of work, we’re going to see more zero-hour contracts, in more places than we already see it.”

The labor movement brewing in Ireland, where many of the world’s tech giants have their EU bases, is part of a wider trend among tech workers globally, who have seen their work disrupted by rapidly evolving AI.

Rise in layoffs

Ireland’s dedicated union for tech workers, the Digital and Techworker Alliance (DATA), has seen a five-fold increase in membership since it was first founded in 2023.  

In its first year and a half of existence, membership hovered around 270 people. In the past year-and-a-half, it’s jumped to more than 1,350 members, DATA organizer John Bohan told POLITICO.  He added that this number tends to spike around layoffs and other actions.

“The tech industry was founded on the idea that it would never have a union, because they’re making people rich, and treat them really well,” Bohan said.  “But post-Covid, workforce adjustments happened again and again, with layoffs and declining conditions in the sector. We started to see more people wanting to get organized around redundancies.”  

The spike in sign-ups coincides with a wave of layoffs in Ireland’s tech bubble (and the tech sector globally), as companies corrected pandemic-era overhiring, and diverted investment to AI.  

Ireland hosts the EU headquarters of most of the world’s largest tech companies, and more than 170,000 people are employed in the tech sector, according to the country’s statistics institute.

Social media giant Meta has roughly halved its workforce in Ireland since the pandemic, axing well over 1,000 roles to offset AI investment and boost efficiency. Separately, Meta subcontractor Covalen also announced massive layoffs earlier this year, cutting more than 700 people.  

Video-sharing platform TikTok announced this year it would shed around 300 Irish jobs, mostly from its trust and safety team, shifting the work to other countries, outsourced vendors or automated AI solutions.  

A report by the IMF earlier this year warned that Ireland’s labor market is “relatively more exposed” to AI than many advanced economies, partly due to its concentration of tech workers.  

The AI race is also creating new jobs on the Irish market – as AI firms like Anthropic and OpenAI are setting up Irish bases and trying to lure Big Tech workers with even bigger salaries.  

Amid the uncertainty and volatility of the AI boom, tech workers are turning to unions for the first time as a safety net. One tech worker who used to work in trust and safety at a big tech firm told POLITICO that there used to be a feeling that as a “pampered” tech worker you “can’t ask for your rights, because you already have it so much better.” 

But as layoffs continue and teams get leaner, workers in fields like trust and safety “now have to deal with these issues with fewer and fewer resources”, and face a “constant threat of being chopped,” the worker said.  

That’s causing an “undoing of a certain perspective that we have of ourselves as tech sector workers,” they said, “because of undeniable experiences that now put us in situations where we clearly see our rights being violated, even if we may have it so much or somewhat better than most people.” 

A different tech worker who currently works for Covalen told POLITICO that there is a sense that “if they believe they can replace you with AI, they will do that.”  

“All these Big Tech firms only care about profit, and what I have realized is the Irish government protects that Big Tech capital [rather than workers],” the Covalen worker said. “But the question is, what’s the government going to do when the tech bros change their mind and move elsewhere?”  

Workers at the center

The speaker list at this week’s AI summit was a flex of the country’s strength as a tech hub, as top names from the world’s biggest companies like Google and Microsoft took to the stage.

Fionnuala Ní Bhrógáin, head of organizing and campaigning at Ireland’s Communications Workers’ Union (DATA’s parent union), was the only union voice on the line-up.

“The fact that 36 executives and industry bosses featured on the program, compared with just one trade union speaker — invited at the last minute after attention was drawn to the absence of workers’ voices — says a lot about the value the Irish government places on AI’s impact on workers,” she told POLITICO.

“The reality is that a meaningful conversation about AI’s future can only happen through genuine engagement with workers and collective bargaining,” Ní Bhrógáin added. “Without that voice, we risk deepening mistrust and resistance rather than creating the conditions for workers to shape these changes collectively.”

DATA organized its counter-AI summit the previous weekend, to put “workers at the center of the debate about power, AI, technology and the future of work.” 

The event cut through the “hype and futurism of politicians and industry figures to focus on the real present harms faced by ordinary workers and communities,” DATA’s Bohan said.  

The union is pushing for stronger legal protections for tech workers caught up in AI-driven layoffs in Ireland, including making it mandatory for employers to recognize unions during collective bargaining. It is also calling for a ban on cooling-off clauses that prevent laid-off workers from moving between Big Tech subcontractors.  

A spokesperson for Ireland’s department for enterprise told POLITICO in a written statement that the government is “committed to strengthening collective bargaining and industrial relations” and has published an action plan to do so between now and 2030.  

They said that employers already have to comply with obligations under Irish employment law, including consultation and notification procedures for collective redundancies, and workers who feel those rules have been broken can complain to the Workplace Relations Commission. 

Firefighting to future-proofing 

Naoise Ó Cearúil, a center-right Fianna Fáil lawmaker who chairs the AI committee, pointed out that while there have been high-profile job cuts in Ireland’s tech sector, “the actual net is that there has been an increase [in jobs], particularly over the past year and even five years.” 

According to Ireland’s central statistics office, total employment in tech and related sectors surpassed 177,000 in the second quarter of this year, up from around 144,000 at the same time in 2021.  

Ó Cearúil pointed out that many job losses were in trust and safety jobs like content moderation that are “very difficult mentally,” and now tech firms are able to “utilize AI and software to be able to do a lot of detection, rather than using humans.”  

He has called for a national program to be established, to support workers whose jobs are at risk due to AI and automation.  

A spokesperson for Ireland’s department of enterprise acknowledged that the country’s tech sector has “experienced significant adjustment in recent years,” but said the changes were generally part of wider global restructuring “rather than reflecting any Ireland-specific weakness.” 

They said the Irish government is currently focused on “ensuring workers and businesses are equipped to adapt to technological change through investment in education, training, lifelong learning and digital skills.”  

BRUSSELS — There is “no logic” to U.S. President Donald Trump’s recent moves to take Russia’s side in the Ukraine war, and he should remember his true allies lie in Europe, Finland’s prime minister said Thursday. 

In an exclusive interview with POLITICO, Petteri Orpo summed up the shock and dismay among Ukraine’s allies after Trump announced a diesel deal with Russia’s leader, Vladimir Putin, and reportedly imposed limits on Kyiv’s access to the military intelligence and technology needed to counter Russian attacks.

“My message to him [Trump] is that we are allies,” Orpo said on the sidelines of the European Council summit in Brussels. “We are in NATO. And what is the biggest threat against NATO? It’s Russia — and that is why there is no logic. I don’t have answers. I have many questions.” 

Trump alarmed European leaders and horrified Ukrainian President Volodymyr Zelenskyy this week by announcing a deal to release Russian diesel onto the market, apparently in an attempt to lower fuel costs for American consumers. Ukraine’s allies fear the move will boost Russia’s revenue from fuel sales, giving it more money to spend on war. 

Trump also said Ukraine should stop hitting Russian fossil fuel facilities — as part of what he said was a ceasefire on energy infrastructure — and should replace Zelenskyy. 

Finland is an influential voice among Ukraine’s European allies: The country has the EU’s longest land border with Russia, at 1,300 km, and its president, Alexander Stubb — a talented sportsman — won Trump’s respect on the golf course, giving him leeway to try to influence White House policy.

Orpo said if he were in Trump’s position “I would not trust Putin.” Zelenskyy has said he fears Ukraine is losing the U.S. to Russia’s side in the war, warning the Americans and their president are on “the wrong side of history”. Orpo said he agreed: “I think he is, and they are.” 

Ukraine now faces grave danger, he said. “The sky is open for Russia, there are missiles. They need more military support, air defense,” Orpo said. “Also, the situation is dangerous because of the latest deal between Trump and Putin.”

Midterms move

One possible reason Trump turned against Ukraine with that diesel deal is the U.S. midterm elections on Nov. 3. “I think it is because of domestic reasons — elections are coming,” Orpo said. “But we need to get them back.” Nonetheless, he said the amount of Russian diesel that could be sold to the U.S. is too small to make much of a difference for American consumers. 

Whatever happens, EU leaders must equip Ukraine with weapons and cash, whether or not they can rely on the U.S., he said. “Today, we need to find a solution [on] how to support Ukraine, how to finance Ukraine in this winter, but also in next year,” Orpo said. “It’s crucial.”

Finland and Sweden are among the countries pushing the European Commission to reopen the fractious debate over how to use Russia’s financial assets currently frozen in European banks, especially in Belgium, which blocked a deal to raid the funds last year over legal concerns. 

“The best solution would be that we will have a solution on how to use frozen assets,” he said. “We have to try again,” Orpo said. 

Finland has asked the Commission “to continue work with Belgium, and the other member states, to find a solution.” He said he hoped to hear an update from the Commission during the summit. “It’s a better solution than using our own money.”

Budget blues

European leaders are arguing this week over their long-term budget, which Brussels officials want to finalize by the end of the year. Many diplomats do not expect a deal this year, and some leaders say they’re in no hurry. 

But others want the budget, worth around €2 trillion, signed off by December because they fear next year’s European elections — especially if far-right leader Marine Le Pen wins the French presidency — will derail negotiations. 

The longer budget negotiations last, the “more difficulties we will have,” Orpo said. “So we have to work to find a solution this year. I understand very well that it is difficult, a huge challenge, but I cannot see how it would be easier next year, because in France elections are coming, for example.”

Finland also has an election coming up in April 2027. Orpo’s center-right National Coalition Party is struggling in the polls. “This time has been very difficult,” he said. “But, finally, our economy is growing.”

Orpo’s Swedish sister party, the Moderates, mounted a late surge in last month’s election. Although that seems unlikely to keep them in office, Sweden’s Moderates still have a slim chance, even though many commentators had written them off long before the vote.

“They did excellent campaign work, and in the end of the day, people vote Moderates, not populist or socialist,” Orpo said. “I would like the same in Finland.”

An Israeli surveillance technology firm has run a large-scale operation to infect mobile phones with spyware using online advertisements to hack the devices, researchers said on Thursday.

An investigation by the University of Toronto’s Citizen Lab and cybersecurity firm Confiant Threat Intelligence laid bare an ad-based infection technique developed by an Israeli company that researchers named “AdFection.” The hacks weaponized legitimate online ad systems for espionage purposes, allowing spyware manufacturers to connect to millions of devices and identify, track and target victims.

“Plugging into the online ads ecosystem provides the mercenary spyware industry a stealthy delivery system,” said Bill Marczak, senior researcher at The Citizen Lab. He said the findings were “surely just the tip of the iceberg” of how online ads are abused for espionage.

Researchers discovered critical details of the hacking tools by analyzing devices belonging to journalists and staff at the Al Jazeera media network, finding that 45 devices of journalists and staff were targeted and some infected with Israeli-made spyware known as Candiru.

At the heart of the hacking campaign is the Israeli company Discover-Tech that describes itself as an advertising business. Citizen Lab researchers said the company facilitated surveillance for commercial spyware operators. Its platform, called Controlium, allegedly allowed spyware makers like Candiru — which in 2025 was acquired by Integrity Labs — to identify, track and target devices by loading advertisements on websites and apps.

Discover-Tech and Integrity Labs did not immediately respond to a request for comment.

The scale is striking: An analysis of four billion advertising records found that Discover-Tech’s ads appeared across nearly 200,000 websites and mobile apps in dozens of countries over four months. Among the websites that featured the ads were institutional sites of NATO, the United Nations, the European Parliament, European Commission and Council of the EU.

The technique exploits real-time bidding — the automated system used by platforms such as Google to sell advertising space and target users. Rather than persuading victims to click a malicious link, attackers can exploit advertisements to identify and potentially infect devices without any interaction from the user — a technique known as “zero-click” infections.

Discover-Tech’s advertisements directed millions of devices to servers associated with Candiru, potentially enabling large-scale surveillance and reconnaissance, researchers said. That does not mean all those devices were infected.

Citizen Lab, based in Toronto, is a globally recognized research group that previously uncovered spyware scandals targeting Catalan political figures, a member of the European Parliament and the inner circle of murdered Saudi journalist Jamal Khashoggi.

The findings triggered calls for further investigation on Thursday. “The possibility that EU institutions have been exposed should set off alarm bells across Brussels,” said Hannah Neumann, a German European Parliament lawmaker of the Greens group. Neumann herself was the victim of a cyber-espionage operation by an Iranian hacking group.

“Europe cannot claim to defend democracy while leaving its own democratic institutions vulnerable to spyware,” Neumann said.

Ukraine’s strikes on data centers inside Russia aimed to disrupt military planning and communication services. There were also reports of another kind of disruption: to customers waiting for their dinner from food-delivery apps.

Kyiv’s drone strikes on three Yandex data centers in Sasovo, Kaluga and Vladimir saw delays and interruptions for thousands of businesses and households that rely on Yandex’s cloud infrastructure, including e-commerce, digital payment platforms and apps of food delivery and car services. Ukrainian drones on Wednesday targeted a major Sberbank data center in Russia’s Saratov region, though a senior company executive said it hadn’t affected operations.

After the strikes on Russian data centers, Kyiv noted that Moscow has already repeatedly targeted its digital infrastructure. “Ukrainians wanted to show Russians that two can play this game,” a senior official familiar with the operation told POLITICO, granted anonymity to discuss sensitive matters.

The attacks and counter-attacks point to a new frontline in war: the infrastructure powering the digital economy.

The attacks on the buildings that supply compute power are akin to striking a power plant supplying the electricity, heating and fuel that both militaries and civilians depend on. It may weaken an enemy’s war effort but can also bring everyday life to a standstill.

Experts say the cost of rebuilding in Russia will be particularly high as the centers require scarce materials that must be imported. “Obtaining a large amount of equipment to replace what was destroyed is not going to be easy,” said Oleg Shakirov, a cyber policy and international security researcher, noting that most hardware needs to be imported and that is complicated by high global demand and sanctions on Russia.

“To be honest, no one really knows what’s the actual damage. Since two data centers are still offline, we can assume that it’s significant,” said Shakirov.

Joseph Jarnecki, a senior research fellow at the Royal United Services Institute, warned that normalizing strikes to data centers could have a new set of dangerous consequences.

“These strikes likely breach International Humanitarian Law and it’s a big risk when global populations increasingly rely on digital services,” he told POLITICO.

When servers become targets

Data centers have entered the crosshairs of other recent armed conflicts. During the U.S.-Israeli conflict with Iran earlier this year, drone strikes hit three Amazon Web Services (AWS) facilities in the United Arab Emirates and Bahrain.

Since data centers can serve civilian and military purposes simultaneously, the legal status of targeting them is far from straightforward.

Kubo Mačák, an expert on international humanitarian law, said a data center must meet two conditions to qualify as a military objective under the Geneva Conventions: it must make an effective contribution to military operations and destroying it must offer a “definite military advantage.”

“If you know that they are storing military intelligence or that they’re using the data center to power military artificial intelligence tools,” Mačák said, there could be grounds to consider it a military objective.

Following the most recent strikes of the Yandex data centers, users on social media platform X reported a sudden drop in automated bot activity, including from accounts associated with pro-Russian, pro-Trump and Germany’s far-right Alternative for Germany (AfD) narratives.

Ukrainian President Volodymyr Zelenskyy seized on the reports to boast that the strikes had made social media less toxic, even as independent researchers and national research institutes found no evidence they specifically disrupted any Russian disinformation campaigns.

Mačák said that even if a data center is being used to “let’s say, run some trolls or these bot farms to interfere with elections abroad … that would not be sufficient.” In other words, hosting propaganda bots does not, by itself, make a data center a lawful military target.

The dual-use quandary has often focused on the targeting of energy infrastructure, which has been frequent in the Russia-Ukraine war. On Saturday, U.S. President Donald Trump urged Ukraine to stop striking Russian oil refineries, blaming the attacks for rising fuel prices. He has since called for both sides to halt attacks on energy infrastructure, although the existence of any ceasefire agreement remains disputed.

As data centers become increasingly central to national economies, they will become more consequential targets. A senior NATO official granted anonymity to discuss the matter told POLITICO that data centers are already considered potential targets and that the alliance is factoring their vulnerability into its planning.

NATO allies recognize that their data centers could come under attack in a conflict, the official said: “We would get it in a fight.”

Veronika Melkozerova in Kyiv contributed to this report.

LONDON — The Mayor of London Sadiq Khan and U.S. tech company Palantir have agreed to drop legal proceedings relating to a blocked £50 million police contract.

Palantir brought a claim against the Mayor’s Office for Policing and Crime in the High Court in June after Khan’s deputy mayor refused to sign off on the £50 million contract with the Metropolitan Police for the provision of an AI and data analysis service.

In July, lawyers working on behalf of MOPAC in turn accused the Met Police and Palantir of coordinating to fix the outcome of the procurement process in breach of the rules. Palantir claimed Khan’s office had unlawfully blocked the contract over the company’s “values and ethics,” based on media reporting.

A full trial was expected in January but on Wednesday both sides agreed to “settle their differences” and drop the allegations without admitting liability. They will each cover their own legal costs.

In an agreed statement, the two sides said MOPAC’s decision to block the Palantir contract was “not based on Palantir’s values or ethics or any wider reporting about the company,” though MOPAC said it “recognizes Palantir’s concerns that media reporting of a statement from the Mayor’s spokesperson before the decision was taken could have incorrectly created the impression that an assessment of the company’s values had been a factor in that decision.”

“MOPAC’s consideration was based upon its statutory role of examining spend proposals, against the appropriate legal tests and the relevant guidance on procurement, governance, affordability and ensuring value for money for Londoners and in doing so it focussed on the available information at the time,” the statement said.

The settlement also notes that MOPAC is working with Metropolitan Police Service to re-run a competitive procurement for the relevant service, which Palantir will be eligible to bid for.

“MOPAC does not have, and has never had, any policy of not contracting with Palantir,” the statement confirms, while noting the mayor’s duty is to ensure “all procurements are lawful, fair, transparent and deliver value for money.”

“London is the technology capital of Europe, and I am proud that leading software firms choose the city as their home. Palantir makes a significant contribution to jobs and investment in the capital, employing a large number of Londoners whose services have been procured legally by organizations across the U.K. and beyond,” Khan said.

BRUSSELS — The European Commission’s cybersecurity division is rolling out a plan to use artificial intelligence to respond to high-risk cyberattacks, according to a document obtained by POLITICO.

The undated document, written by the Commission’s IT department, sets out how to prepare the EU executive’s cyber defenses for “emerging AI-driven threats.” It proposes an action plan to shore up defenses in light of AI, with the most urgent move being the speed of response to attacks.

Governments have rushed to grapple with the rising threat brought by AI’s ability to expose and exploit cybersecurity vulnerabilities. Incidents like OpenAI’s accidental intrusion into Hugging Face have prompted calls, including at the highest political level, to be more wary of advanced AI models.

Being able to respond quickly to cyberattacks is most crucial in “high-risk scenarios,” the EU executive’s internal cyber defenders warned, saying that the ability to detect an attack is “not sufficient if containment measures cannot be taken quickly enough.”

Officials at the in-house IT department, DG DIGIT, are planning to use automated “protective measures” in specific high-risk scenarios, it said. Those scenarios were redacted in the document, which was provided to POLITICO in response to a freedom of information request.

The plan does not amount to “uncontrolled automation” and there will be strict controls in place including human oversight, according to the document.

As well as laying out the response plan, the document sets out the cybersecurity challenges the Commission faces from AI.

The most advanced AI models are expected to “significantly increase the speed, scale and adaptability of cyberattacks” and the Commission must therefore have defenses in places for an environment where “attacks are likely to become faster, more frequent and more scalable,” it said.

Risks include situations where “malicious activity occurs outside EC [European Commission] normal working hours, spreads more rapidly across systems, or results in large-scale exfiltration or operational disruption before manual intervention can be organized by EC,” they said.

The Commission’s cyber division has sought approval internally to move ahead with the plans, it said, though it’s not clear whether the plans have yet been put in place.

The Commission didn’t respond to a request for comment.

BRUSSELS — As the U.S. and China compete to train the world’s most advanced artificial intelligence models, Europe is stepping back.

European politicians and tech executives have in recent weeks shifted their focus away from frontier AI as it becomes clear the bloc has no artificial intelligence models that can compete with top American or Chinese models, and Europe’s leading contender Mistral faces questions over its performance.

Instead, a new mantra has emerged: Europe doesn’t need to own the models as long as it can put them to work.

“Striving to build a competitive frontier lab right now feels like very wishful thinking,” said Max Junestrand, CEO of Swedish AI company Legora, a €6 billion company that provides an AI tool for law firms. “I would rather see us put more thinking cycles into how do we capitalize on the technology rather than how do we try to catch up.”

The suggestion that frontier AI models are now out of reach for European AI labs comes as the most advanced models become a major global security issue.

American leaders OpenAI and Anthropic this summer had to disclose incidents in which AI agents broke out of testing. This led the companies to slow-walk and tread cautiously with the release of their latest models, just as Chinese open-source models are emerging as a credible alternative to U.S. proprietary models.

For Europe, relying on U.S. or Chinese models is not without risk, as the bloc is already dependent on both for all the technology underpinning AI, such as chips and cloud services.

But leaders, including European Commission President Ursula von der Leyen, say Europe should focus more on helping its industrial and corporate base benefit from AI. They argue that building homegrown tech champions that can deliver those tools is a smart strategy that could help Europe win this next phase as America remains focused on staying ahead of China.

As politicians and industry meet Wednesday in Dublin for an international AI summit, the Irish governmental organizers have sought to focus the talks largely on how AI is used.

“It’s the trigger that interests everybody most: how are we going to adopt this new technology that we have … [and] how are we going to encourage business to adopt it,” Niamh Smyth, the Irish minister in charge of AI, said.

Not everyone is on board with the direction of travel.

“The idea that Europe should step back from frontier AI and settle for applications is a strategic mistake,” said a spokesperson from Mistral, Europe’s leading contender in frontier AI development. “A great part of the value is retained by those who build the frontier, not only by those who build on top of it.”

Slow acceptance

A move in Brussels to reorientate the bloc’s leadership has been building gradually throughout the past weeks.

Both the European Commission and the Council of the EU, which represents national governments, have indicated that the focus should shift to how to apply the technology.

“We do not need to be the ones who develop the frontier technology to be the ones who draw the greatest value from it,” von der Leyen said in mid-September during her State of the European Union speech, which sets the agenda in Brussels for the coming year.

That followed a Sept. 4 seminar at which the Commission’s AI envoy, Siemens chair Jim Hagemann Snabe, told 27 commissioners that the EU should focus less on winning the race to build AI and more on how to use it to turn around the bloc’s productivity, two Commission officials said.

The scale of the challenge is clear: At the end of last year, only 1 in 5 European businesses used AI in their activities, with Denmark as the frontrunner (42%) and Romania at the bottom of the pack (5.2%), according to Eurostat.

The bloc’s poor showing is mainly because of small and medium-sized companies that make up the lion’s share of Europe’s economy. Last year, 55% of Europe’s large companies used AI, compared to only 17% among small companies — who, according to a recent OECD report — limit themselves to off-the-shelf AI tools for specific tasks.

Companies that considered using AI but decided against it cited a lack of expertise as their top concern, even before regulatory concerns. American business leaders have also said that regulatory and political uncertainty is holding them back.

Over the next few weeks, the European Commission will make several efforts to boost adoption rates. On Nov. 16, it organizes an “Apply AI summit” to “accelerate AI implementation in strategic industries.” Von der Leyen name-checked health, transport, agrifood, advanced manufacturing, defense and space as areas with the “biggest potential.”

Some in Brussels are quick to push back on the idea that Europe has given up entirely on the underlying models. 

“We haven’t given up frontier AI; we are now accelerating the development of our AI systems,” the Commission’s tech chief Henna Virkkunen said in an interview when asked about von der Leyen’s stance. “It’s very important for Europe that we have our models … because it’s risky to be totally dependent on other countries.”

Yet Virkkunen pointed to Europe’s lack of compute power as a major bottleneck to building its own frontier AI. 

In the U.K., AI minister Kanishka Narayan said in September that training frontier models is effectively illegal because of the country’s copyright laws. “Britain does not, as a matter of regulation and energy, currently have a position where we can build superintelligence in this country: it is illegal to do so,” he said.

But Narayan has also acknowledged the national security concerns. “We want the world’s leading companies investing here, but we will not accept dependence as the price of that investment,” he said Monday.

U.K. tech companies aren’t counting themselves out of frontier AI just yet. Cosine, a British AI research lab, has pushed back on the idea that American companies dictate the rules of the road. “Britain should not let OpenAI define what a ‘responsible’ frontier lab looks like in a way that just happens to resemble OpenAI,” said Cosine co-founder Yang Li.

Sovereignty fight

French company Mistral released a new model, Large 4, last week, which far-right National Rally President Jordan Bardella said “puts France (and Europe) back in the race for artificial intelligence.”

That came after the CEO of a Berlin-based search engine used by government services said it was dropping Mistral in favor of open-source models, including from China. In an interview, Ecosia founder and CEO Christian Kroll cited poor performance as one of the concerns — as well as sovereignty, given that Mistral has non-European investors.

“With Mistral Large 4, we have significantly narrowed the gap with the best models in the world, using far less compute than our competitors,” the Mistral spokesperson said.

The company’s CEO Arthur Mensch has also pushed back against the idea that Europe should not have its own models, warning the continent could end up with “an extractive economy” dependent on foreign providers.

Yet the state of the race is forcing European companies to accept that is the status quo.

U.S. frontier models have already proven capable of finding and exploiting cyber vulnerabilities. Asked whether it’s a competitive disadvantage not to have access to those, Legora’s Junestread said: “Yes … absolutely.”

Zoya Sheftalovich and Frank Hersey contributed reporting.

KYIV — Russia caught the Ukrainian capital off guard with its latest attack, hitting the country with over 100 drones and five ballistic missiles, President Volodymyr Zelenskyy said Tuesday.

“Intelligence on Russian ballistic missile launches helps save lives, and this is one of the most critical issues. This is precisely what helps prevent people from being killed — when there is an early warning about ballistic missiles,” Zelenskyy said.

He added: “Regarding this strike, unfortunately, there was no warning from partners.”

Kyiv usually receives a tip-off about impending Russian missiles via the Battlespace Command and Control Center system, which is operated and controlled by the United States’ military and NATO members, among others.

However, Ukrainian Foreign Minister Andrii Sybiha said at the Warsaw Security Forum Tuesday that intelligence sharing through the platform is ongoing.

“They [Americans] told Ukrainians no warning happened because of bad weather conditions, which is seen as not an adequate reason in Kyiv. Thus many are getting increasingly worried this might not have been the case,” an official familiar with the matter told POLITICO on condition of anonymity.

The missile warning system has malfunctioned before. “At times this information doesn’t get through. This isn’t the first instance … If there were specific technical issues this time, I think the specialists will sort it out. And they will resolve this problem together with our partners,” Ukrainian Air Force spokesperson Yurii Ignat said Tuesday.

The U.S. reportedly threatened to cut intelligence sharing once again last week if Kyiv does not stop stricking Russian oil refineries. Zelenskyy did not publicly confirm the threat, but has backed down.

“Ukraine has not carried out strikes on Russian oil refineries or the energy sector in general for the two days since the American President announced an energy ceasefire. But Russia did not heed the American President,” Zelenskyy said, appealing to the U.S. to lead peace negotiations.

“The Russians have attacked both our energy facilities and our critical infrastructure, sending absolutely clear signals that they have no intention of refraining from strikes on Ukraine. Nineteen regions of our country have come under attack in these two days alone,” he added.

U.S. President Donald Trump claimed Monday that both Russia and Ukraine had agreed to an energy ceasefire because he said so — “and if it was violated, they both violated it.”

“Actually [Russian President Vladimir Putin] wants to make a deal, and we have to get Zelenskyy to want to make a deal,” Trump said.

During a press briefing on Tuesday, Katie Zacharia, the president’s new press secretary, demurred when asked if the U.S. has stopped sharing intel with Ukraine.

“I’ll have to get back to you on that,” she said.

Speaking to reporters at the White House later on Tuesday, President Donald Trump said the U.S. has not stopped sharing intel with Ukraine.

“But we are really helping them get to a final answer,” Trump said. “We are helping them, and we are sharing intel. We want the war to end.”

He reiterated that he is helping to broker a deal between Putin and Zelenskyy. “There is a lot of hatred there between the two of them. They both want it to end, they don’t know how to get there. We’re gonna get them there,” he said.

Russia has not yet commented on the ballistic strikes, but issued a general statement saying it had struck military and weapons production facilities across Ukraine.

However, Russian Foreign Minister Sergei Lavrov said Monday that Zelenskyy did not deserve a pause in fighting in response to the energy ceasefire: “I don’t think that he deserves a break. I don’t think that we will buy assurances and promises again,” he said.

This article was updated with comments from the White House and Donald Trump. Elleiana Green and Casey He contributed reporting.

LONDON — Britain’s spies will have a leading role in Britain’s preparation for AI threats, the head of MI5 announced on Tuesday, after warning the technology could enable terrorists to access bioweapons.

Ken McCallum, director general of the U.K.’s domestic intelligence agency has established the AI Threat Assessment Centre to help determine how the government views potential threats.

Giving his annual threat update from MI5 headquarters in London, McCallum said: “Human history has given us no experience of facing an actor which is smarter than we are, is capable of outthinking us.”

He stressed the “real” risks of AI, saying MI5 has caught terrorists seeking to use AI to “improve their reconnaissance and attack methodologies,” in addition to the danger of AI-enabled drones.

Though it has not yet been “realized,” he said he attaches “the greatest weight” to AI’s potential to “change the stakes on existing or even new bioweapons.”

He said “low-capability” terrorists may get a “capability” uplift if the safety guardrails in AI models don’t work as intended. 

He added that for a long time “many terrorists would dearly love” access to chemical, biological or radiological weapons, but that it has been hard for them to achieve.

“One risk is that AI could enable dangerous knowledge to get into the hands of people who […] didn’t have that knowledge.”

McCallum added that “sober attention” must be given to the risk that “AI could generate novel pathogens not previously seen.” He noted that the government is taking “additional steps” on bioweapons. 

One thing that “does trouble me”, McCallum said, is the pace at which the world is evolving. He noted that the “weird bits inside MI5” that focus on how Britain’s adversaries will act in five years from now are seeing those timelines shortening due to AI.

He said it is now his responsibility to “drag my organization forwards at a faster pace than human beings generally want to be dragged.”

Sifting threats from hype

The new threat assessment centre, known as AITAC, will bring together expertise from bodies including Britain’s AI Security Institute, National Crime Agency, and the National Cyber Security Centre to “separate the bluster from the realities” of AI’s threat to the British public.

This is the third center of its kind MI5 has set up, after creating similar units dedicated to analyzing terrorism and state threats.

Asked how the agency would work, McCallum said it would look at emerging trends and how the U.K. can best think about and prioritize the various manifestations of AI threats. 

Though the government, rather than AITAC, will decide the response to AI, McCallum said it was partly set up to avoid “competitive analysis, slightly conflicting and confusing messages that otherwise might exist, where you have different departments offering their own opinion” on the issue.

He said that it would enable everyone to have “a single version of the truth, a single understanding, a single lexicon, typography.”

McCallum also said MI5 will now give national resilience — such as protecting critical infrastructure, countering cognitive warfare, and addressing technology threats — “front-rank mission status” alongside its twin roles of countering state threats and terrorism.

He noted that MI5 is now devoting more resources to countering state threats than it was during the Cold War, noting an uptick in anti-immigration cases tipping into terrorist intent, while Iran has shifted its ambitions to hit harder targets such as military sites.

PARIS — French center-right presidential candidate Edouard Philippe accused his far-right rival Marine Le Pen of trying to force a Frexit in disguise with her euroskeptic campaign promises.

“There is something in Marine Le Pen’s proposals that has the potential to blow Europe up, or let’s say to crack it open,” Philippe said at POLITICO’s Paris Competitiveness Summit on Tuesday.

The former prime minister — who is currently the best-placed centrist candidate to challenge the front-running Le Pen, according to recent polls — said Le Pen’s plan to unilaterally demand a drastic cut to France’s contribution to the EU budget was akin to “saying you want out of Europe” without openly advocating for leaving the bloc. Le Pen had previously called for a referendum in France on leaving the EU but dropped the proposal after her crushing defeat to Emmanuel Macron in the 2017 presidential election. Her party, the National Rally, now says it wants to change the EU from within.

Philippe, a fiscal conservative who has been pitching himself as the voice of reason in a campaign dominated by populist rivals, also slammed budget plans Le Pen unveiled last week as “grotesque,” accusing her of pitching “fantasy” savings.

Le Pen’s fiscal plans have faced serious scrutiny since being presented, with many observers saying they either lack key details or overestimate savings on major proposals like immigration. Progressive think tank Terra Nova wrote in a note out Tuesday that Le Pen’s budget presentation was “riddled with errors and contradictions” as well as “botched estimates.”

“She isn’t even able to estimate the cost of the pension reform she is proposing,” Philippe said.

Le Pen said in August that her plan to bring France’s legal retirement age back down to 62 for most workers would cost €9 billion a year, and last week she said she would lay out at a later stage how she intends to fund her flagship pledge. However, the Institut Montaigne, a fiscally conservative think tank, estimated the proposal would cost €34.7 billion a year.

Philippe is hoping to convince voters that his fiscally conservative agenda is the right path in a country burdened by a ballooning public debt and a budget deficit still above 5% of gross domestic product, in breach of EU rules.

Philippe said France needed to get its finances back on track to regain credibility on the European stage after a “loss of influence” over the past few years.

Though he currently leads a crowded field of centrist candidates, Philippe’s campaign has struggled in recent weeks to gain momentum — and far-left candidate Jean-Luc Mélenchon is now challenging the former PM for second place in the polls. France’s presidential election goes to a runoff if no candidate receives more than 50% of the vote, and Le Pen’s strong poll numbers all but guarantee her a spot in the second round.

Tough on China

The former prime minister pitched a pragmatic European agenda with less regulatory burden, more focus on investment and a tougher approach to China.

Philippe had some harsh criticism for an already embattled flagship measure of the EU’s green deal, saying the 2035 combustion engine ban has been “disastrous.”

There was “a great naiveté toward China,” which ultimately benefited from Europe’s push on electric vehicles, Philippe said.

“We need to much better protect our market,” he added. “If one wants access to the European market, one has to manufacture in Europe. If a carmaker doesn’t manufacture here, then we have to slap high tariffs.”

The EU is in the process of drawing up new “Made in Europe” rules that would favor European producers over those outside the bloc, in response to trade practices by competitors like China and the United States.

Shortly before Philippe took the stage, European Commissioner for Industry Stéphane Séjourné said at the POLITICO event that a Franco-German deal trading stronger protections on the definition of Made in Europe in exchange for a loosening of combustion engine rules should be finalized “in the next few hours or in the next few days.”

On artificial intelligence, Philippe aligned himself with Macron, advocating for European sovereignty in the field and the need to regulate what he described as “an instrument of power.”

“What I see is an AI world making money for the U.S. with European savings and European data, and that bugs me,” he said.

European Commission President Ursula von der Leyen on Monday pitched using artificial intelligence to streamline administrative procedures for European businesses as part of a broader push to simplify commerce and boost the EU’s competitiveness.

Speaking at a behind-closed-doors meeting of the European People’s Party in Taormina, Sicily, on Oct. 12, von der Leyen said the Commission would introduce an “only once” approach to business reporting. This would let companies submit information once, with AI helping public administrations use the data.

Von der Leyen argued that European companies repeatedly have to report the same information to public authorities, wasting time that businesses — and Europe — cannot afford, according to a copy of her speech seen by POLITICO.

“And this is why we will introduce ‘Only Once’, to report data only once – and with the help of AI the administration will ensure efficient use,” she said.

The speech marks the first time von der Leyen has explicitly pitched using AI specifically to reduce businesses’ administrative workload.

The “only once” principle itself is not new. The Commission already included it in its EU Inc. proposal presented in March 2026, which aims to create a harmonized corporate framework allowing companies to establish and operate businesses more easily across the bloc.

Under the EU Inc. proposal, companies could submit information once through an EU-level digital interface, with relevant data automatically transmitted between authorities. However, the proposal does not specifically envisage using AI to carry out that process.

Von der Leyen did not provide details on how the AI-supported system would operate, whether it would apply to all businesses or when the Commission intends to introduce it.

In her speech, the Commission president also encouraged governments to get on board with simplification efforts by signing a pact not to add extra requirements when transposing EU-mandated legislation into national regulations.

The central principle, von der Leyen wrote in a letter to EU leaders sent Oct. 12, is that “a rule agreed at European level cannot become more complex when transposed or implemented nationally.”

Under the proposed pact, capitals would have to identify and justify additional national requirements that go beyond EU legislation, including assessing their impact on businesses and the single market.

Zoya Shefatlovich contributed to reporting

European organizations have to reckon with how to keep up with the modern world without sacrificing sovereignty. Geopolitical instability, tightening regulatory expectations and the rapid adoption of artificial intelligence (AI) mean that, for many organizations, sovereignty now sits alongside resilience and business continuity in board-level risk discussions. The question they can no longer defer is how to harness the opportunities of the modern cloud without surrendering control over their own data. Answering it requires honesty about what sovereignty means, and about where it can actually be found.

A definition Europe can trust

The European Commission’s forthcoming Cloud and AI Development Act (CADA) is the right vehicle for that honesty: giving Europe a shared, enforceable definition of what “sovereign” actually means. Without such a definition, the market is filled with commercial offerings that claim the sovereignty label without delivering the substance, a practice described as “sovereignty washing.” This gap has led some organizations to treat open source as the answer. But open source software is a licensing model, not an operating model, and it doesn’t settle questions about infrastructure or jurisdiction or even reliability and access. It’s not a route out of dependency, it’s a different dependency on project sponsors and code maintainers. A definition gives policymakers a way to properly assess claims of sovereignty against a consistent standard rather than taking marketing at face value.

Europe should not wait for CADA to take effect before acting, though. European cloud service providers (CSPs) have been partnering with established technology providers to deliver real sovereign capability, without rebuilding the entire technology stack from scratch.

The best time to plant the sovereign tree was 10 years ago

If Europe wants to grow its industrial base, it has to support the ecosystem as it is now, not as it may in 10 years’ time. CADA’s own roadmap assumes roughly five to seven years to triple the EU’s data-center capacity. Providers who have already built capacity by blending EU capabilities with proven non-EU technologies would have to spend the intervening years relinquishing their growth. It is scale, not a shortage of skills or innovation, that is the biggest practical obstacle facing a stronger European cloud market. This is precisely why partnership with proven technology sources deserves a central place in the sovereignty debate rather than being treated as a second-best option.

Partnership shortens that timeline considerably, letting European CSPs deliver sovereign, scaled services now instead of waiting for domestic capacity to catch up organically. In Italy, IPZS, owned by the Italian Ministry of Economy and Finance, is using this model to build a modern Digital Application Platform for the Italian EUDI wallet, a foundational EU digital identity initiative. It provides a live example of that model working in Europe today, at the scale and speed the policy window demands.

It is through scale that the local industrial base can deliver sovereign capabilities, compete, capture market share, and invest in developing and integrating home-grown technologies. Hoping for the alternative to happen, that is for a European technological stack to fully emerge and be adopted, is the equivalent of putting the cart before the horse.

The rules need to allow for a model that’s already working

Providers, such as evoila, are now operating well beyond Europe’s borders, alongside Uniserver. This shows the model working at a broader scale, combining local operational and jurisdictional control with proven technology. Sovereignty spans jurisdictional, technological, operational and supply-chain dimensions, and a partnership model can address all four while drawing on technology already proven at scale, rather than asking every layer to be rebuilt from first principles by a single European provider.

Alongside its cloud platform, developed in-house and operated from data centers in Europe under EU jurisdiction, IONOS also offers customers a dedicated VMware-based private cloud. It is also operated within the EU and designed to provide European data sovereignty and operational control.

Broadcom’s role in that model is deliberately narrow. It supplies the VMware cloud software layer to the CSP, while the CSP itself runs the infrastructure and holds the customer relationship, so that no European customer data passes through Broadcom or is subject to its access. Trust, in this model, follows the architecture rather than the brand. If CADA’s tiers implicitly assume that sovereignty can only be delivered by a fully European-built stack, CADA would shut out precisely the route that is already allowing Europe to scale fastest: partnership between local operators and proven technology providers.

The path forward

Europe does not have to choose between moving quickly and building sovereignty. The two are compatible, provided the legislation is calibrated to recognize it. As the European Parliament and European Council work on CADA, the priority should be for it to recognize and reward the partnership models already delivering sovereign capability across Europe today.

The above column is sponsor-generated content.

---

Disclaimer

POLITICAL ADVERTISEMENT

• The sponsor is Broadcom Inc.
• The political advertisement is linked to Broadcom’s software business and advocacy around the Cloud and AI Development Act (CADA).

More information here.

KYIV — Russia’s Vladimir Putin is preparing for a broader confrontation with Europe amid an uptick in the Kremlin’s hybrid attacks on the continent, Ukraine’s former Foreign Minister Dmytro Kuleba has warned.

In an interview with the Axel Springer Global Reporters Network, Kuleba, who was Ukraine’s foreign policy chief from 2020 to 2024, said that Russia’s continued war preparations and anti-European propaganda are signs that Putin is planning attacks on other European countries.

“Anti-European hysteria is being fueled in Russia, which I interpret as the preparation for a broader conflict with the rest of Europe,” said Kuleba, before adding: “We [Ukrainians] don’t have to drag you — Putin will drag you into the war.”

European officials say Moscow has upped its hybrid campaign across the continent in recent months, using cyberattacks, sabotage and disinformation to disrupt critical infrastructure and weaken support for Ukraine.

Kuleba said the failed drone attack on the Leipzig airport in Germany in August was a sign of “growing preparation” for an offensive on the continent. “They see how your intelligence operates. They see how your security forces operate. They see how you react and they draw conclusions,” he added.

In the aftermath of the incident, the German government concluded that Moscow was responsible for the attack, and ordered a review of security around sensitive locations.

However, Kuleba, who stood down as Ukraine’s foreign policy chief in September 2024, does not think Russia is preparing a full-scale offensive beyond Ukraine. In his view, Moscow is more likely to launch an attack on NATO countries involving drones targeting key infrastructure that would test the alliance’s unity and preparedness.

“The truth is that Russia does not need 400,000 more people to wage that war. It needs five drones,” he said, adding that in the event of an attack, “[Europeans] can call for NATO consultations… can call for restraint. But this will only encourage Putin to make the next step … He will always have enough drone and missile capabilities.”

Kuleba no longer believes Putin can be persuaded to end the war through negotiations. “He’s not looking for a solution, for a pause, and there will be no moment when he will start looking for it,” he said, concluding: “Putin is a guarantee of war: anyone after Putin is a chance for peace.”

According to Kuleba, any attempts at negotiating with Putin, or pushing for peace, are a waste of time. “The sooner we come to terms with reality, the better policies we can develop to address it,” he said.

He noted that while Europe’s political culture is based on “a win-win approach” in which both sides can benefit, Putin’s outlook is very different: “For him, a solution that benefits both sides is not the best option. For him, the world works on the principle of victory and defeat. One side has to win and the other has to lose,” said Kuleba.

The former foreign minister also warned that Ukraine would face its worst ever winter as Moscow ups its attacks against civilians in a bid to break their spirit.

In recent months, Russian strikes have hit Ukraine’s energy infrastructure and transport links, including bridges over the Dnipro river, as well as homes and civilian sites such as bus stops, schools, postal depots and internet providers. The attacks have disrupted power, transport and daily life as winter approaches.

On Thursday, at least 33 people were killed in a Russian attack on two buses in Kramatorsk in Ukraine’s Donbas region.

Kuleba explained why he believed Moscow has now sharply escalated its airstrikes: “The bombing of cities is a direct consequence of Russia’s failure to defeat Ukraine on the battlefield.” He continued: “The main target of Russian drones and missiles is the Ukrainians’ will to resist — but also the will of Ukraine’s friends abroad to keep supporting it.”

He added:“They don’t just want to turn out the lights in Ukraine. They want to paralyze the country.”

Kuleba described the worst-case scenario in Ukraine as “the collapse of the systems that make life in a big city possible,” such as electricity, water and drainage services.

Could Russia succeed? “I believe Ukraine is too large, too mobile and too adaptable. That’s why I think we’ll get through this winter,” said Kuleba.

“The price will be much higher than last year’s.”

The Axel Springer Global Reporters Network harnesses the resources of the company’s newsrooms to publish ambitious scoops, investigations, interviews, opinion pieces and analysis. It allows journalists — including those from POLITICO, Business Insider, WELT, BILD, Onet, The Telegraph, and Fakt — to collaborate on major stories for an international audience of hundreds of millions across platforms: online, print, TV and audio. 

BRUSSELS — The European Union’s cybersecurity agency and in-house research center have each begun experimenting with open artificial intelligence models from China, three EU officials have told POLITICO.

The Joint Research Centre (JRC) — the EU’s in-house scientific research center — is evaluating “publicly available open-weight models” originating from China, European Commission spokesperson Maciej Berestecki confirmed. The head of ENISA, the bloc’s agency responsible for cybersecurity, also said in an interview that his team was now testing Chinese AI.

The experiments with Chinese models at the JRC are part of a broader research project to evaluate artificial intelligence that also includes leading models from the United States and Europe, Berestecki said. “Models from different origins are included in a comparative scientific evaluation of their capabilities, performance, limitations and risks,” he said, adding that the JRC is also looking into their potential scientific applications.

AI safety and security — topics currently under intense scrutiny following a series of incidents in which advanced AI models hacked real-world networks during testing activities — are not the core focus of the JRC’s testing activities, according to a different Commission official, who was granted anonymity to discuss sensitive material.

Open-weight models are those whose core components are publicly released, allowing anyone to run the model and study how it works. China’s approach to AI has leaned more towards open models than the United States. Some major U.S. tech and AI companies, including chips giant NVIDIA, are investing in open-weight models.

Forced to choose

The U.S. and China are locked in a race to dominate in the technology, with Europe largely sitting on the sidelines. Without a viable European frontier model, European private and public organizations may be left to choose between American and Chinese providers for advanced AI applications.

In a recent speech, European Commission President Ursula von der Leyen suggested Europe should not try to win the frontier AI race. A top German tech company told POLITICO this week it was dropping Europe’s leading AI lab Mistral in favor of open-source Chinese models.

The JRC has not entered into any “bespoke access” or licensing negotiations with the relevant Chinese developers, Berestecki said. The models are run on the center’s “secure, on-premises scientific infrastructure” and the Commission is not intending to use Chinese models for its own purposes, he added.

EU cyber agency ENISA — which has gained access to advanced models from top U.S. AI firms Anthropic, OpenAI and Google — is also experimenting with “a couple” of open-weight Chinese models, its executive director Juhan Lepassaar confirmed in an interview on Wednesday. 

JRC and ENISA have been tasked with working together to set up an AI testing platform under a recent EU action plan on AI and cyber, the European Commission’s attempt to respond to the growing concerns after a series of incidents involving AI systems breaking out of testing environments and breaking into other organizations’ digital systems.

August Hanning spent seven years at the top of Germany’s foreign intelligence service, the BND, with access to some of the country’s most closely guarded secrets. Then came a second act: private consulting, corporate intelligence and business stretching across Europe, into Russia and Asia.

Now, the 80-year-old former spymaster is himself at the center of an espionage investigation, after German federal prosecutors arrested him Tuesday on suspicion of treasonous espionage, attempted treason and other espionage offenses. They allege he obtained a stream of secret intelligence from his former chief of staff and used the material to benefit his private consulting business.

“It’s catastrophic for Germany and for Western intelligence services. Everyone is in shock. The scale of it is enormous, especially at a moment like this,” said one EU intelligence official, who — like others in this report — was granted anonymity to discuss a clandestine arena. “And given that investigators stumbled across this while working on an entirely separate case, we’re likely to learn much more.”

For the BND, the case comes at an uncomfortable moment. Just last week, German parliamentarians began debating a new law proposed by Chancellor Friedrich Merz’s government to grant the agency sweeping new authority, as part of an effort to return Berlin’s foreign intelligence service to the top ranks of global espionage. The timing is equally awkward for European intelligence more broadly. With Russian hybrid attacks continuously targeting Europe, governments across the bloc are rewriting decades-old security laws to give their spy agencies greater powers and be taken more seriously.

Prosecutors say Hanning’s former chief of staff, identified under German privacy rules as Manfred D., supplied him with roughly 2,000 BND documents between 2010 and June 2022. Many contained classified information intended exclusively for internal intelligence work, including material used to brief senior German officials.

In comments to German newspaper WELT, a lawyer representing Hanning said some of the allegations against the ex-spymaster were true but that he did not harm Germany.

“He was in possession of confidential documents. Incorrect, however, is the accusation that he had passed on information contained therein to the detriment of the Federal Republic of Germany — let alone [for] payment. Further investigations will show that,” he said.

In one case, prosecutors suspect Hanning used classified material to prepare an analysis for an employee of foreign intelligence service. They also allege he maintained a relationship with a representative of another foreign intelligence service for several years, passing along political information that was partly based on material obtained from Manfred D.

Prosecutors have not publicly identified either foreign service but German media has named Azerbaijan and Kazakhstan. Azerbaijan has denied any connection.

“In intelligence services, everything is logged — who accesses which documents and when. If an analyst working on right-wing extremism suddenly started looking at intelligence on China, that would raise red flags. But the position of chief of staff has access to virtually everything, so it wouldn’t look suspicious because of the seniority of the position,” said a second EU intelligence official.

Chiefs of staff often stay on when directors change, unless they don’t get along with the incoming boss, the official added.

“Every intelligence service will now be looking at what information it shared with the BND and assessing what damage may have been done,” he said.

Revolving door

Hanning led the BND from 1998 to 2005, before serving as state secretary at Germany’s interior ministry until 2009. Once out of government, he wasted little time entering the private sector.

In July 2010, Hanning and his wife established Hanning Consult. It was in the spring of that same year that Manfred D. agreed to provide him with intelligence from inside the BND in exchange for payment, according to the prosecutor’s statement. Hanning then used that information in his private consulting activities, they added.

Roderich Kiesewetter, a Christian Democrat lawmaker on the Foreign Affairs Committee in the German parliament, said that within Germany there is a “very widespread network” of people who use the contacts and knowledge acquired while they were in service to influence Berlin’s policy on behalf of foreign governments like Russia and China.

“It’s not only sad, it’s damaging the reputation of Germany,” Kiesewetter told POLITICO. “You could also say if you want to talk to Russia, take former members of the government or former members of the secret services.”

Hanning also became involved with Samuel Danilowitsch, a German businessman, who led the Swiss corporate intelligence consultancy, Pluteos. There, Hanning eventually became chairman and the two were listed as attending a 2019 Moscow gathering focused on Europe-Russia relations, attended by Russian political and business figures, where the annexation of Crimea was brought up as a “necessity” rather than a choice. Pluteos did not respond to a request for comment.

From around 2014, Hanning joined British consultancy G3 as a senior adviser, according to archived web pages seen by POLITICO. He later oversaw its work involving Russia and the former Soviet republics, according to German media outlet Correctiv. G3 did not respond to a request for comment.

In 2019, Hanning was invited as a “guest of honor” to a gathering organized by Russia’s Security Council of officials and experts from Arctic Council countries. It was chaired by former secretary of the Security Council of Russia, Nikolai Patrushev, one of the most powerful figures in President Vladimir Putin’s security orbit. As part of the cultural program, the group visited the remote Valaam Island monastery where Hanning was pictured next to Patrushev.

Hanning has also publicly ventured into some of the more politically explosive questions surrounding Russia’s war on Ukraine.

In 2024, he told WELT TV that he considered it “very likely” that Ukrainian President Volodymyr Zelenskyy knew about the 2022 operation that destroyed the Nord Stream pipelines. Days later, Hanning went further, suggesting an agreement between senior Ukrainian and Polish figures was behind the attack. Germany has since charged a Ukrainian national it identified only as Serhii K., with his trial due to begin in Hamburg in October.

None of those business relationships, contacts or statements establishes a connection to the espionage case now facing Hanning, though they paint a picture of the influence he continued to amass after leaving the German government. Prosecutors have not accused him of spying for Russia.

The steakhouse heiress

Investigators got onto Hanning’s trail starting with an extraordinary custody dispute involving Christina Block, an heiress to a German steakhouse empire.

Block is accused by the Hamburg Public Prosecutor’s Office of orchestrating the abduction of her two youngest children from their father in Denmark. Prosecutors in that case say Block and two men commissioned an Israeli security team to seize her children, then aged 10 and 13, from their father, Stephan Hensel.

According to the indictment, masked men beat Hensel and took the children across the Danish-German border, to southern Germany. The children were reunited with their father in Denmark four days later, under a court order. Block denies knowing about the abduction.

In September 2025, Hamburg investigators searched Hanning’s home and business premises in connection with the Block case, according to local media. Prosecutors suspected Hanning and a retired police officer had accepted a contract worth more than €100,000 to intercept the children on their way to school in November 2022. The plan ultimately failed as their father noticed suspicious figures and alerted Danish police. 

German broadcaster Taggeschau reported that the investigators, in the search of Hanning’s premises, discovered around 2,000 digital BND documents that ultimately triggered scrutiny of his handling of sensitive government information. Federal prosecutors took over the resulting investigation in May 2026.

Manfred D. had been Hanning’s chief of staff at the intelligence service and subsequently served several of Hanning’s successors, remaining in a senior position until March this year. 

Both men are now in custody.

“He’s reflecting the Germany between 1998 and 2011, so he has not the feeling of having done something evil,” said Kiesewetter. “He was just mirroring [the] state policy of the center-right Christian Democratic and conservative political alliance.”

Hans von der Burchard contributed to this report.