Mesiac: marec 2026

The post-Russia energy architecture was never post-geopolitical. It was just geopolitical in a different direction.

Institute for Central Europe — Mini-Brief | 30 March 2026

On 4 March, five days into the US-Israeli strikes on Iran, ICE published an assessment of the conflict’s energy implications for Europe. The brief identified five risks: commercial paralysis of the Strait of Hormuz through insurance repricing and self-deterrence.

A sustained spike in European gas and oil prices; a dangerous starting position in EU gas storage; macroeconomic damage to the eurozone’s fragile recovery; and a dual supply squeeze on Central Europe from the Druzhba pipeline disruption.

Four weeks later, every one of these has materialised. Several have been exceeded.

 

 

What We Said, What Happened

The Strait of Hormuz has been effectively closed for 29 days. Maritime traffic is down approximately 90 percent (CBS). Roughly 150 vessels have transited since the war began. That is one normal day’s traffic (Al Jazeera).

The Iranian Revolutionary Guard Corps (IRGC) runs what amounts to a checkpoint: ships submit cargo manifests and crew lists, receive a clearance code, and are escorted through under supervision. Lloyd’s List Intelligence reported on 23 March that at least two vessels paid approximately $2 million each for passage. Iranian lawmakers are drafting legislation to make the fees permanent (CNN).

Iran did not close the strait with a navy. It closed it with a drone, an insurance premium, and a registration form.

The March 4 ICE brief projected TTF gas prices sustained above 50–60 EUR/MWh under its baseline scenario. As of 28 March, TTF stands at approximately €54.5/MWh, with the 52-week high at €69.35. March-to-date gains exceed 70 percent, the strongest monthly move since September 2021 (S&P Global).

Goldman Sachs has revised its Q2 forecast upward twice, now projecting €72/MWh in the base case, €89 in an adverse scenario, and above €100 if Hormuz flows remain depressed beyond ten weeks (Euronews).

On oil, the brief cited JPMorgan’s warning that Brent could breach $100. Brent crossed that threshold on 8 March, peaked at $119.50, and closed on 27 March around $105–112. The physical Dubai crude price hit $126. Goldman Sachs estimates a $14–18 per barrel geopolitical risk premium in current futures. The EIA forecasts Brent above $95 for the next two months (EIA STEO).

EU gas storage stood at 28.4 percent as of 24 March (Kyos/AGSI+). The Netherlands is at 6.0 percent, less than a third of last year’s level. Germany sits at 22.3 percent, France at 22.1 percent.

The ECB responded exactly as the brief predicted. On 19 March, the Governing Council held rates unchanged, revised 2026 headline inflation to 2.6 percent from 1.9 percent in December, and cut GDP growth to 0.9 percent (ECB). The OECD followed with a global growth downgrade to 2.9 percent (CNN).

On 11 March, the IEA announced a coordinated release of 400 million barrels from strategic reserves, the largest in its 52-year history (CNBC, Euronews). The 400 million barrels cover roughly 20 days of normal Hormuz flows. KPMG’s Angie Gildea: “There is simply no substitute for restoring access through the Strait of Hormuz” (NPR). Macquarie was blunter: crude will “continue to trade like a meme stock until the solution is peace” (Axios).

 

What We Underestimated

Three developments exceeded the assessment’s scope.

First, Iran’s monetisation of the blockade. The brief described Hormuz closure as a wartime measure. What has emerged is something different — a selective-access regime that sorts the world’s shipping into friendly and hostile categories, extracts payment for passage, and is being legislated into permanence.

China, Russia, India, Pakistan, and Malaysia have been granted transit. Western-linked vessels are excluded. US Secretary of State Marco Rubio called the tolling “illegal, unacceptable, dangerous” (CNN). Tehran has added a new ceasefire demand: recognition of Iranian sovereignty over the strait (NPR).

If this hardens into a negotiating position, the strait ceases to be an open international waterway and becomes a contested sovereign asset.

Second, the speed of Gulf-wide infrastructure targeting. Bahrain’s Bapco refinery was struck. A fuel storage tank at Oman’s Duqm port was damaged. Kuwait International Airport was hit on 25 March, closing all commercial traffic. QatarEnergy reported “extensive damage” at Ras Laffan (Newland Chase). Qatar’s energy minister said normal LNG deliveries would take “weeks to months” to resume (S&P Global). That was before the latest damage reports.

Third, cascading effects beyond energy. The UN negotiated a humanitarian corridor through Hormuz on 27 March to address fertiliser supply disruption during the spring planting season. RWE warned of delays to North Sea offshore wind projects because components manufactured in UAE fabrication yards are trapped behind the blockade. The green transition and the hydrocarbon crisis share supply chains.

 

The Real Crisis and the Manufactured One

There are two energy crises in Europe right now. One is real. The other is politically useful.

The real crisis originates in the Strait of Hormuz. Europe diversified away from Russian pipeline gas after 2022 and moved toward LNG. Qatar, the United States, Australia. That diversification worked. But it shifted Europe’s exposure from a supplier risk to a transit risk.

Qatar’s force majeure removed roughly one-fifth of global LNG export capacity. Asian buyers are now competing for Atlantic basin cargoes that would otherwise flow to Europe. The 2022 dynamic returns: fewer molecules, more bidders, spiralling prices. And Europe enters this competition with storage at its lowest seasonal level in years.

The second crisis — the Druzhba pipeline dispute — is not an energy emergency. It is a political instrument.

Though Slovakia and Hungary would gladly use Russian oil delivered by pipeline, the European Commission’s Oil Coordination Group confirmed on 26 February that there is “no immediate risk” to the EU’s security of supply (European Commission DG Energy). Both Hungary and Slovakia have begun releasing strategic reserves.

Non-Russian crude is flowing via Croatia’s Adria pipeline (JANAF), which has sufficient annual capacity to cover both countries’ needs (Euronews). MOL Group confirmed seaborne crude shipments began arriving at Omišalj in early March (MOL Group).

Slovakia released 250,000 tonnes from state reserves to the Slovnaft refinery against a bank guarantee, at the oil’s recorded book value, well below current market prices. Hungary released reserves equivalent to three months of domestic consumption. Slovakia’s emergency stocks have since dropped below the IEA-mandated 90-day minimum.

Both governments are drawing down stockpiles meant for genuine emergencies to cushion MOL’s refineries from the full cost of rerouting supplies.

The real issue is price, not supply. Adria transit fees are reportedly three to five times higher than Druzhba’s, according to a joint Hungarian-Slovak submission to the EU Council. MOL filed a complaint with DG Competition, accusing JANAF of abusing its dominant position.

Slovnaft’s refinery is configured for Russian Urals-grade crude, and alternative blends require processing adjustments. MOL is making the transition. The refinery expects full loading from April. But the technical friction is being used as a political stalling tactic, not reported as an engineering timeline.

Switching supply routes is neither free nor instant. But it is feasible, it is happening, and it does not justify blocking sanctions on the country that bombed the pipeline. Croatia’s economy minister: “No EU country has any technical justification to stay tied to Russian oil.”

Yet Fico and Orbán have parlayed this price differential into a series of vetoes and retaliatory measures. They blocked the EU’s 20th Russia sanctions package and the €90 billion Ukraine aid loan. Slovakia suspended emergency electricity exports to Ukraine during winter, at a time when Ukraine’s grid was under sustained Russian bombardment.

Orbán threatened on 25 March to suspend gas supplies to Ukraine until Druzhba oil resumes. Slovak police have opened a high-treason investigation into Fico over the emergency electricity cut-off, following what has been described as the largest criminal complaint in Slovak history (Kyiv Independent).

Druzhba is not the problem right now. It serves as an excuse. The pipeline dispute gives Budapest and Bratislava a grievance framework to block sanctions enforcement and obstruct Ukraine aid disbursement. Whether by design or by incentive, the effect is the same.

If this were only a Budapest-Bratislava problem, the EU could manage it. It is not. Belgian Prime Minister Bart De Wever told francophone media in mid-March that the EU should “normalise relations with Russia” and “regain access to cheap energy.” EU Energy Commissioner Dan Jorgensen rebuked this directly: the EU will “not import one molecule” of Russian energy in future (Belga News Agency).

But De Wever said out loud what seven EU governments have been doing quietly. According to a Reuters analysis of CREA data, France increased the value of its Russian energy imports by 40 percent in 2025. The Netherlands by 72 percent. Belgium, Croatia, Romania, Portugal, and Hungary all raised their imports. In January 2026, 23 of 25 Yamal LNG cargoes went to European ports (Kyiv Independent). The EU postponed its planned 15 April proposal for a permanent Russian oil ban (Euronews).

The Iran crisis did not cause this fracture. It made it harder to deny.

 

What Comes Next

The brief’s original scenario of a short conflict with Hormuz reopening within two to three weeks is expired.

A negotiated partial reopening remains the most likely near-term outcome. Trump has extended his deadline for Iran to reopen Hormuz to 6 April. A 15-point US ceasefire proposal has been transmitted via Pakistan (NPR). If something like this holds, Hormuz traffic might recover to 30 or 40 percent of pre-war levels. TTF would settle in the 45–55 EUR/MWh range. Brent would drift toward $85–95.

A prolonged standoff with selective access is equally plausible. Iran formalises the toll regime. Western shipping remains excluded. Goldman Sachs projects a summer TTF average above €89/MWh in this case. SEB analyst Ole Hvalbye told Montel News that prices could reach €115–155/MWh under a three-month disruption. The November 90-percent storage target becomes unreachable.

Escalation to sustained Gulf-wide infrastructure targeting remains a tail risk, but the tail is getting fatter. The US has struck military facilities on Iran’s Kharg Island, which handles 90 percent of Iranian crude exports. Oil-trade sites were spared, but Trump has warned they could be next. If QatarEnergy’s infrastructure damage proves long-term, a temporary disruption becomes a structural deficit.

 

The Argument That Writes Itself

On 4 March, this brief closed with a sentence: “This crisis is the strongest argument yet for accelerating clean-energy deployment as a hard security imperative.”

One month of evidence has made that sentence harder to argue with and easier to ignore. Europe replaced a supplier dependency with a transit dependency and discovered that every barrel transits somewhere, and every transit route is someone’s leverage.

The Hormuz closure demonstrated that asymmetric tools can achieve what carrier groups cannot: cheap drones, insurance repricing, commercial self-deterrence. The Druzhba dispute demonstrated that even a manufactured crisis can fracture EU solidarity if member states lack the political will to use available alternatives.

No diversification within hydrocarbons eliminates geopolitical exposure. It only shifts its geography.

Europe secured its gas pipelines and hardened its electricity grids. It left the last mile of heat delivery — the municipal layer that keeps 100 million people warm — virtually undefended.

Institute for Central Europe — Policy Mini Brief | 17 March 2026

Executive Summary

Russia has demonstrated across four winters that centralised district heating infrastructure is a high-yield strategic target — through repeated kinetic and cyber strikes.

On 29 December 2025, this threat reached EU territory. A coordinated cyberattack attributed to an FSB-linked actor targeted a Polish CHP plant serving nearly half a million customers. The plant survived because it had endpoint detection software. Most European municipal heating operators do not.

The NIS2 and CER Directives classify district heating as critically important. But the regulatory perimeter does not match operational reality: most municipal suppliers in Central and Eastern Europe fall below NIS2’s size threshold, transposition is incomplete, and no tested crisis doctrine exists at the municipal level where heat is delivered.

Ukraine has built an operational resilience model under fire — decentralised cogeneration, rapid-deployment modular capacity, municipal emergency doctrine — that is directly transferable. On 3 March 2026, Ukraine’s National Security and Defense Council formally approved regional energy resilience plans institutionalising this model nationwide. The institutional frameworks for knowledge transfer exist. The transfer pace does not match the threat.

 

The Threat Demonstrated

The targeting of Ukraine’s heating infrastructure has followed a discernible operational logic since 2022. Russia systematically struck nodes where thermal energy is generated and networks through which it is distributed — concentrating on assets whose destruction produces cascading civilian impact.

The IEA’s October 2025 pre-winter assessment quantified cumulative damage: 18 CHP plants, 800+ boiler houses, and 354 kilometres of heating pipes attacked by end of 2024 (IEA). The UN Human Rights Monitoring Mission assessed these operations as “widespread and systematic” (UN).

The 2025–2026 heating season brought further escalation: near-daily strikes across seventeen regions in January 2026, with Kyiv’s Darnytsia CHP plant hit repeatedly, each strike severing heat to approximately 6,000 residential buildings. Indoor temperatures of 8–9°C were recorded in affected districts while ambient temperatures reached minus 19 (Kyiv Independent).

On 13 March, Energy Minister Denys Shmyhal told the Verkhovna Rada that Russia had damaged more than 9 GW of generation capacity since the start of the heating season — making this, in his words, “the most difficult winter in Ukraine’s history” (Ministry of Energy of Ukraine).

The cyber dimension compounds the kinetic one. In January 2024, attackers deployed FrostyGoop — ICS-specific malware communicating via Modbus TCP — against Lvivteploenergo, a municipal heating company in Lviv. The malware manipulated temperature controllers to feed cold water into apartment buildings, cutting heat to 600+ residential blocks for 48 hours.

Dragos identified it as the first confirmed Modbus exploitation achieving real-world heating disruption — and found internet-exposed Modbus controllers in Lithuania and Romania, confirming the attack surface extends beyond Ukraine (Dragos).

Centralised district heating — a single plant serving thousands of apartments through shared pipes — is high-value, difficult to defend, and slow to repair. A successful strike in January can kill.

 

Adversaries Crossed into EU Territory

On 29 December 2025, Poland’s national CSIRT documented a coordinated destructive operation targeting a large CHP plant supplying heat to nearly half a million customers, more than 30 wind and photovoltaic installations, and a manufacturing company. The objective was purely destructive — CERT Polska compared it to deliberate arson (CERT Polska).

The forensic timeline revealed patient, long-term preparation. Investigators traced initial network penetration to March 2025 — nine months before the attack was triggered. The actor mapped industrial control systems, captured screenshots of operational interfaces, harvested credentials, and ultimately deployed a bespoke wiper malware (designated DynoWiper by ESET) through the plant’s own software update mechanism (Balkan Insight).

CERT Polska attributed the operation, with high confidence, to the activity cluster tracked as Static Tundra (Cisco) / Berserk Bear (CrowdStrike) / Ghost Blizzard (Microsoft) — an FSB-linked group historically associated with espionage, not sabotage.

The report explicitly noted this was “the first publicly described destructive activity attributed to this activity cluster” — marking a qualitative escalation in which an intelligence-collection actor pivoted to operational disruption.

The implication is significant: the same actor infrastructure previously used to conduct long-term reconnaissance of Western energy networks has now demonstrated the intent and capability to destroy them.

The CHP plant survived because its endpoint detection and response (EDR) software identified and blocked the wiper before execution. The US Cybersecurity and Infrastructure Security Agency subsequently issued an advisory noting that the attackers had exploited internet-facing FortiGate devices lacking multi-factor authentication and OT control devices running default passwords — a vulnerability profile that is endemic across municipal heating utilities in Central and Eastern Europe and beyond (CISA).

 

The Protection Gap

The EU’s legislative architecture formally recognises district heating’s criticality. The NIS2 Directive lists it as a sector of high criticality; qualifying operators face mandatory cybersecurity risk management and incident reporting. The CER Directive adds physical resilience requirements (NIS2, CER).

In practice, this perimeter misses the operational centre of gravity. Central and Eastern Europe’s district heating is dominated by small municipal operators — many serving populations of tens of thousands through Soviet-era infrastructure.

A substantial share fall below NIS2’s size cap, are not subject to its obligations, and have no pathway to the cybersecurity baselines it mandates. Even among qualifying operators, transposition is incomplete — multiple member states missed the October 2024 deadline to enact the required national legislation.

Many municipal heating operators are perpetually underfunded, running ageing SCADA and industrial control systems with limited network segmentation, no dedicated IT security staff, and incident response plans that have never been tested under realistic conditions. The Polish incident is instructive in both directions: the one operator that invested in EDR survived; the vulnerability profile that enabled nine months of undetected reconnaissance is shared by the majority of its counterparts across the region.

The 2026 Munich Security Report frames this in strategic terms: cyberattacks rank as the top G7 security risk, with Russian operations “increasingly blending cyber and kinetic tactics” against energy infrastructure (Munich Security Report). The Preparedness Union Strategy sets out 30 key actions — none operationalise heating-specific resilience at the municipal level.

 

Ukraine’s Operational Model

Under sustained bombardment, Ukrainian heating operators developed a resilience model that no peacetime planning exercise could have produced. Its core elements are:

Decentralised generation. Municipal cogeneration units capable of producing both electricity and heat independently of the national grid. By November 2025, the Ukrainian district heating sector was operating 182 cogeneration units (83 at full capacity, combined output 147 MW) and 239 block-modular boilers (~635 MW), forming autonomous “energy islands” around hospitals, water utilities, and residential heating networks (New Eastern Europe).

Compressed deployment cycles. Modular units installed and commissioned in days — a tempo European procurement measures in months or years.

Rapid repair doctrine. Pre-positioned spare parts, emergency communication systems, and standing repair crews trained to restore service under ongoing threat.

Municipal-level decision authority. Operational autonomy at city and utility level to act without waiting for national coordination — essential when centralised command is disrupted.

This model has now been formally institutionalised. On 3 March 2026, President Zelenskyy chaired a meeting of the National Security and Defense Council at which comprehensive energy resilience plans for all of Ukraine’s regions and cities were approved.

Deputy Prime Minister Oleksii Kuleba confirmed that the plans were developed together with local communities and are explicitly aimed at ensuring that “settlements decentralise their water and heat supply systems and are as resilient and adaptable as possible to enemy attacks” (President of Ukraine). What began as improvised wartime adaptation is now codified national doctrine — and a directly exportable framework.

The IEA’s lessons-learned framework identifies these capabilities as among the most transferable pillars of Ukraine’s energy resilience. European institutions have taken note — but the knowledge has not reached the municipal operators who would implement it (IEA).

 

Four Steps Before Next Winter

The EU has identified district heating as critical, documented the hybrid threat, and begun developing preparedness frameworks. The challenge is that the municipal utilities delivering heat remain outside the effective reach of these frameworks.

Recent analysis has examined Russia’s infrastructure campaign from the perspective of air defence provision (RUSI), European energy market spillovers (Atlantic Council, October 2025), and Ukraine’s broader infrastructure resilience as a transferable model (Atlantic Council, December 2025). None has addressed the specific dimension this brief focuses on: the sub-threshold operators, the cyber-specific exposure, and the gap between directive-level classification and operational readiness where heat is actually delivered.

The challenge is not diagnosis. The challenge is that the municipal utilities delivering heat remain outside the effective reach of the frameworks designed to protect them.

1. Extend the Preparedness Union Strategy’s minimum criteria explicitly to district heating operators below the NIS2 size threshold. Baseline requirements for cybersecurity hygiene and physical crisis preparedness should apply to any operator serving a defined population threshold, regardless of firm size.
2. Mandate operationally tested crisis protocols for municipal heat suppliers. Member states should require heat suppliers above a defined capacity to conduct annual crisis exercises coordinated with civil protection agencies and municipal authorities — modelled on NATO readiness exercises but adapted for civilian critical infrastructure.
3. Establish a structured Ukraine–EU knowledge transfer programme through the Energy Community Secretariat and the emerging energy Ramstein format. Ukraine has proposed a new ministerial-level coordination architecture — the “energy Ramstein” — with the first meeting scheduled in Brussels in mid-March, and plans to attract over €5 billion from international partners for next-season preparation (Ministry of Energy of Ukraine).

The Energy Community Secretariat’s Ukraine Energy Support Fund, which has already signed memoranda on district heating coordination, provides the sub-ministerial delivery channel. Together, these two frameworks should deliver systematic operational training — rapid repair doctrine, modular deployment protocols, emergency communication — to municipal operators in Poland, Slovakia, Romania, and the Baltics (Energy Community).

4. Commission an honest assessment of municipal heating cyber exposure. ENISA, in coordination with national CSIRTs, should survey OT security posture across European district heating operators — including Modbus-enabled controllers exposed to the internet, default-credential prevalence, and EDR deployment rates. The Polish incident demonstrated that one operator with EDR survived; the CISA advisory demonstrated that the vulnerability profile is widespread. Without baseline data, remediation cannot be calibrated.

 

 

Conclusion

Russia has spent four winters demonstrating that centralised district heating is a strategically productive target — and as of December 2025, has extended that campaign to EU territory. The EU has built the legislative framework but has not closed the gap between directives and the operational reality of hundreds of underfunded municipal utilities.

Ukraine’s operators built a resilience model that works. And as of 3 March 2026, that model is formal national doctrine, not improvised adaptation. The channels to transfer that knowledge exist and are becoming more structured by the week. The question is whether Europe activates them at the pace the threat demands.

This analysis examines public opinion on migration in France, Germany and the Visegrad countries between 2014 and 2024 using Eurobarometer survey data. It traces how the salience of migration, perceptions of non-EU immigration and support for EU migration governance have changed in response to major political and geopolitical events.

The findings highlight a persistent divide between Western and Central Europe, while also showing that the perceived importance of migration does not always correspond to the actual number of migrants in a country. By mapping these trends, the study offers insight into how public attitudes continue to shape migration debates and policymaking across Europe.

 

Read the analysis

 

Europe diagnosed the problem correctly — but prescribed a three-year treatment for a condition that can become acute overnight.

Institute for Central Europe — Policy Mini Brief | 8 March 2026

Executive Summary

The US-Israeli war on Iran (Operation Epic Fury, launched 28 February 2026) has consumed hundreds of high-value air defence interceptors in under a week, with at least one Gulf ally already requesting emergency resupply.

Production of replacement missiles will take over a year at current capacity. European NATO allies — especially Central European states on the eastern flank — depend on the same constrained US production pipeline for their own deterrence.

Europe has correctly identified Ukraine’s battle-proven counter-drone model as the solution to the cost asymmetry between cheap attack drones and expensive interceptors, and has launched multiple institutional initiatives to adopt it.

But implementation timelines stretch to 2027–2030 — while the Iran war has just demonstrated that magazine depth crises unfold in 96 hours. The timeline is the vulnerability.

 

The Interceptor Crisis in Real Time

On 28 February 2026, the United States and Israel launched Operation Epic Fury — a joint campaign targeting Iran’s nuclear infrastructure, missile production, naval forces, and proxy networks. Within 36 hours, Tehran retaliated with hundreds of ballistic missiles and one-way attack drones targeting not only Israel but also US military installations and civilian infrastructure across Bahrain, Kuwait, Qatar, the UAE, Saudi Arabia, Jordan, and Iraq.

As Sinem Cengiz of Qatar University’s Gulf Studies Center noted, for the first time in history all Gulf Cooperation Council (GCC) states were targeted by the same actor within 24 hours — “their long-standing nightmare scenario” (Breaking Defense).

A week into the conflict, the defence economics has been already unsustainable. Iran’s Shahed-136 drones cost approximately $20,000 each. Each Patriot PAC-3 interceptor used to shoot them down costs between $3.7 and $4 million (Japan Times). At least one Gulf ally has requested emergency interceptor resupply from Washington after its stockpiles ran critically low within 96 hours of fighting (CNN).

The Pentagon acknowledged in a closed-door congressional briefing on 4 March that Shahed drones represent a major challenge and that US air defences will not be able to intercept them all (The War Zone, CNN).

The production math is punishing. Lockheed Martin produced 620 PAC-3 MSE missiles in all of 2025. An estimated 800 or more interceptors may have been expended in the first days of this war alone, according to Defence Express calculations — potentially requiring over 15 months of uninterrupted production to replace at current capacity. THAAD interceptors, critical against Iran’s most capable ballistic missiles, are in even shorter supply. Planned production increases to 2,000 PAC-3 missiles per year remain years from realisation (Defense Express/United24, Defense Security Monitor).

Iran’s strategy is deliberate. By launching mixed salvos — cheap drones as screening assets alongside ballistic missiles as the lethal punch — Tehran collapses the defender’s ability to match the right interceptor to the right threat. In compressed engagement windows, sensor uncertainty and saturation make reliable discrimination between a $20,000 Shahed and a cruise missile operationally difficult, and the consequences of a single leak through the defensive layer are catastrophic enough that expensive interceptors get burned regardless.

Retired Lt. Gen. Dan Karbler, former commander of US Space and Missile Defense Command, acknowledged that short-range air defence assets are needed precisely to avoid expending scarce Patriot missiles on drones (ABC News).

The resulting cost-exchange ratio — running from 14:1 to more than 100:1 in the attacker’s favour — is not a battlefield anomaly. It is a strategy of systemic attrition aimed at the adversary’s industrial base (Washington Times).

 

Europe’s Exposure

The Iran war is unfolding in the Middle East, but its consequences cascade directly into European security. Every Patriot round fired over Abu Dhabi is one fewer round available for NATO’s eastern flank. Every THAAD interceptor consumed in the Gulf degrades the stockpile that was meant to underwrite extended deterrence from the Baltic to the Black Sea.

The US defence industrial base does not maintain separate production lines for separate theatres — it runs a single, constrained pipeline that now faces competing demands from an active war, ongoing Houthi interdiction operations, and the standing requirements of European and Indo-Pacific deterrence (Defense Security Monitor).

European NATO allies enter this moment from a position of pre-existing weakness. Stockpiles have been significantly drawn down by donations to Ukraine since 2022. Replenishment has been slow.

On 17 February — eleven days before the Iran war began — German Foreign Minister Johann Wadephul stated bluntly that Berlin has exhausted its own air defence missile stocks: “We simply don’t have any left” (Euromaidan Press).

National procurement timelines remain measured in years (CNBC). If Europe’s largest economy and defence spender has already emptied its reserves before the Iran war even started, the position of smaller Central European states is self-evidently worse.

Central European states — Slovakia, the Baltic states, Romania, Poland — are the most exposed: closest to the Russian threat, thinnest in organic air defence capacity, and most dependent on US-sourced systems and munitions that are now being consumed at wartime rates in a theatre 3,000 kilometres away.

The war has already demonstrated that the threat is not geographically contained. On 4 March, NATO air and missile defence assets in the eastern Mediterranean intercepted an Iranian ballistic missile heading toward Turkish airspace — the first time the alliance has defended a member state from an Iranian projectile since the conflict began (Bloomberg, France 24).

Earlier, on 2 March, a Shahed-type drone struck RAF Akrotiri in Cyprus — a British sovereign base on EU member territory — in what Cypriot officials confirmed was a Hezbollah attack launched from Lebanon, not from Iran directly (TIME, Middle East Eye). Two additional drones heading toward the base were intercepted the same day. Azerbaijan reported Iranian drone strikes injuring civilians (CNBC). NATO’s Aegis Ashore sites in Romania and Poland — systems originally developed with an Iranian ballistic missile threat in mind — are now on full alert (Stars and Stripes).

The proxy dimension makes the threat harder, not easier, to defend against. Destroying Iranian launchers does not neutralise a dispersed network of militia launch sites across the Levant.

Analysis of the Akrotiri wreckage revealed a Russian-made Kometa-M anti-jamming GNSS receiver — identical to components found in Russian drones and missiles used against Ukraine — indicating that Iran’s drone fleet now carries electronic countermeasures that render simple GPS jamming ineffective (Ukrainska Pravda, United24).

The Kometa-M finding also confirms an operational reality Central European defence planners cannot ignore. The same Russian-Iranian technology chain that targets Ukraine and the Gulf can reach European territory through proxy networks — and Moscow’s calculus on its own western flank may shift as it observes US interceptor stockpiles being consumed thousands of kilometres away.

 

None of this is wrong. But all of it is too slow.

Europe has correctly identified both the problem and the direction of the solution. Ukraine’s four-year experience of defending against massed Russian drone attacks produced a body of operational knowledge that is directly transferable: low-cost FPV interceptor drones that destroy drones at a fraction of the cost of a missile; decentralised mobile teams combining electronic warfare with kinetic intercept; compressed innovation cycles that adapt to new threats in weeks rather than years.

European states are already adopting Ukrainian-proven systems and tactics in counter-drone warfare, electronic warfare integration, and long-range strike methods (Jamestown Foundation).

A caveat: the Kometa-M finding at Akrotiri confirms that even “cheap” drones now carry frequency-agile anti-jamming systems, meaning that effective counter-drone defence will require more sophisticated electronic warfare capabilities than basic GPS jamming alone. Far from weakening the case for learning from Ukraine, this makes it more urgent: Kyiv has been adapting its EW tactics to Russian countermeasures in real time for four years.

European institutions have recognised this. On 11 February, the European Commission published its Action Plan on Drone and Counter-Drone Security, explicitly referencing a Drone Alliance with Ukraine (European Commission).

On 20 February, the E5 nations — France, Poland, Germany, the United Kingdom, and Italy — announced a joint programme to produce low-cost air defence systems and autonomous drones using Ukrainian expertise (AP/PBS). The European Drone Defence Initiative, the Eastern Flank Watch, and the European Air Shield are all moving through institutional channels (European Policy Centre). The analytical logic is sound: build a cheap lower layer to handle drone threats so that expensive conventional interceptors — Patriot, SAMP/T, IRIS-T SLM — are preserved for the ballistic and cruise missile threats that only they can defeat.

The European Drone Defence Initiative targets first operational capabilities by end of 2026 and full functionality in 2027. The broader Defence Readiness Roadmap stretches to 2030. The E5 programme has pledged to cover the investments (Dronelife, AP/PBS).

These timelines were designed under the assumption that Europe would have years of uninterrupted time window to implement its adaptation. The Iran war has just demonstrated that magazine depth crises unfold in four days. That is not a planning assumption, it is already an observed and confirmed fact. The European implementation timeline and the threat timeline are mismatched by orders of magnitude.

The September 2025 incursion of Russian Gerbera one-way attack drones into Polish airspace already illustrated the cost asymmetry: multi-million-dollar Patriot missiles and F-35s were used to intercept drones worth no more than $10,000 each (European Leadership Network). That incident was a warning. The Iran war is the proof.

 

Closing the Gap

The challenge is not conceptual. Europe knows what needs to be built. The challenge is tempo — and tempo cannot be solved by committee. Three immediate steps would narrow the gap between strategy and operational reality.

First, accelerate procurement of fielded Ukrainian counter-drone systems and solutions through emergency acquisition pathways, bypassing standard EU and national procurement cycles. Ukraine is already exporting operational knowledge to Gulf states at British invitation. Central European allies should be first in line, not last. Poland’s existing bilateral drone cooperation with Ukraine provides a template. Slovakia, Romania, and the Baltic states should replicate it immediately.

Second, reframe European counter-drone investment as interceptor conservation, not as a separate capability track. A $4 million interceptor is justified when it prevents a $4 billion catastrophe. But the calculus collapses when finite stocks are depleted on threats that could have been neutralised at a fraction of the cost. Every euro spent on a system that can destroy a $20,000 drone without expending a $4 million missile is a saving that keeps scarce conventional interceptors available for the threats only they can defeat. This reframing matters for political buy-in: it ties cheap drone defence directly to the credibility of NATO’s conventional deterrence posture.

Third, treat the Iran war as the stress test it is and publish honest assessments of national magazine depth. European allies have avoided transparent accounting of interceptor stockpiles for understandable reasons of operational security. But the political urgency required to override procurement inertia depends on democratic publics and parliaments understanding the scale of the gap. If a Gulf states can exhaust their interceptor supply in four days of fighting, European leaders must answer how long their own stocks would last under comparable conditions — and what they intend to do about it before 2027.

 

Conclusion

The Iran war did not create Europe’s air defence vulnerability. It revealed it on an accelerated timeline. Europe diagnosed the problem correctly, identified Ukraine’s experience as the most relevant operational model, and launched institutional initiatives that point in the right direction. But the pace of implementation assumed the time.

That assumption is now empirically proved incorrect. The interceptor stockpiles that European security depends upon are being consumed in real time in a theatre Europe does not control and cannot resupply.

The cheap, adaptive counter-drone layer that would mitigate this dependency exists as a proven concept but not yet as a fielded European capability. The timeline is the vulnerability. The question is no longer what to build, but whether Europe can build it before it needs it.