Standfirst: Romanian Foreign Minister Oana-Silvia Țoiu has called for stronger NATO deterrence and closer European cooperation as drone incidents linked to the war in Ukraine raise concerns about cyberattacks, sabotage and other forms of hybrid warfare. The warning comes as Bucharest says security risks are spilling beyond Ukraine’s borders and affecting the Black Sea region.
Romania is urging NATO and the European Union to reinforce their response to hybrid attacks, including drone incursions, cyber operations and sabotage. Romanian Foreign Minister Oana-Silvia Țoiu made the appeal in an interview with Euronews published on 2 October 2026.
The warning follows reported Russian drone activity connected to attacks on Ukraine and concerns about incidents affecting Romanian airspace and the wider Black Sea area. Bucharest says the threat should be viewed as part of a broader security challenge rather than as a series of isolated events.
Romania warns of a wider hybrid threat
Hybrid warfare combines conventional military pressure with tactics designed to disrupt public institutions, critical infrastructure and social stability. These methods can include cyberattacks, sabotage, disinformation, interference with communications and the use of unmanned aerial systems.
According to the source report, Romanian officials are concerned that Russian drone attacks on Ukraine are reaching or affecting areas close to Romania. The country’s position on NATO’s eastern flank and along the Black Sea gives it a direct interest in strengthening surveillance, deterrence and coordination among allies.
Țoiu’s intervention also reflects a wider European security debate: how should governments respond when hostile activity remains below the threshold of an openly declared attack but still creates risks for civilians, infrastructure and national sovereignty?
NATO and EU roles are different but connected
NATO and the European Union do not have identical responsibilities. NATO is a military and political alliance focused on collective defence, deterrence and the security of its members. The EU contributes through sanctions, cyber resilience, protection of critical infrastructure, civil protection, foreign policy and support for member states facing hybrid threats.
Romania’s call for closer cooperation therefore concerns coordination across several areas, including:
- Improved monitoring of airspace and the Black Sea region
- Faster information-sharing between national authorities and allied institutions
- Stronger protection for energy, transport and communications infrastructure
- Greater resilience against cyberattacks and disinformation
- Clearer deterrence measures against actions that threaten European security
Any new military deployment or formal NATO measure would require decisions through the alliance’s established processes. Likewise, EU action would depend on the relevant legal and political instruments, which may involve the European Commission, the Council of the European Union or member-state governments.
Why drone incidents matter for the Black Sea
Drones have become a central feature of the war in Ukraine. Their relatively low cost and ability to operate over long distances make them useful for surveillance and attacks, while also creating difficult questions for neighbouring countries about airspace protection and escalation.
For Romania, incidents near its territory have consequences beyond the immediate military risk. Authorities must assess whether objects have entered national airspace, whether debris could threaten communities, and how warnings should be communicated to the public. These decisions require close coordination between civilian agencies, armed forces and international partners.
The Black Sea is also strategically important for shipping, energy infrastructure and regional connectivity. Any sustained increase in security incidents could affect confidence in transport routes and raise the cost of protecting essential infrastructure.
What hybrid attacks can mean for European countries
Hybrid attacks are difficult to attribute and can be designed to exploit legal, political and operational uncertainty. A cyber incident may disrupt services without causing visible physical damage, while sabotage can target infrastructure in ways that initially resemble an accident.
European governments have increasingly focused on resilience, including the ability to continue essential services during an attack. This includes preparing public authorities, private operators and communities to respond quickly and recover from disruption.
The challenge is particularly significant for countries bordering conflict zones or located along important transport and energy corridors. Romania’s concerns are therefore relevant to the wider European security debate, although the source material does not announce a new EU law, NATO operation or formally adopted response.
What happens next?
Romania’s appeal is a political call for stronger action, not evidence in the supplied material of a newly adopted NATO or EU decision. The next steps would depend on discussions among allies and EU member states, as well as assessments of any further incidents.
Areas likely to remain under scrutiny include:
- Whether additional airspace monitoring or regional coordination is proposed
- How NATO members assess the risk to the alliance’s eastern flank
- Whether EU institutions develop further measures on cyber resilience and critical infrastructure
- How governments communicate confirmed incidents without increasing public alarm
For Ireland, which is militarily non-aligned and not part of NATO, the immediate operational implications are limited. However, EU measures on cybersecurity, infrastructure protection and countering hybrid threats can affect Irish public bodies, businesses and essential-service providers.
Conclusion
Romania is pressing NATO and the EU to treat drone incidents, cyberattacks and sabotage as part of a connected security challenge. The central message is that deterrence and resilience must work together: military surveillance may address immediate threats, while European cooperation is needed to protect infrastructure and institutions over the longer term. No new collective decision has been confirmed in the source material, so attention now turns to how allies respond to Bucharest’s warning and any further incidents in the Black Sea region.
