The U.S. government has scuttled a French push for the G7 to coordinate on advanced AI safety, with a White House official calling it “unnecessary bureaucracy.”

France’s digital minister Anne Le Hénanff told a French Senate hearing on Wednesday that she held two ministerial meetings in September and October to secure G7 commitments to a high-level working group to test frontier AI — the most advanced models — and share information about risks and incidents.

That effort “did not reach a successful conclusion” because the U.S. wanted to pursue its own approach, the French minister said.

“They are not prepared, at this stage, to issue a joint statement with the other six G7 nations, and have asked us to wait for the findings of their own assessment,” said Le Hénanff. “Naturally, we regret this, but we are continuing to move forward as Europeans on this issue.”

A White House official, granted anonymity to speak candidly, said that the French government proposed a “poorly defined body” to cooperate on AI that the administration feared would “create unnecessary bureaucracy.” 

The official pointed to U.S. President Donald Trump’s Super Intelligence Force, saying it brings government and industry together to accelerate innovation and ensure the safe deployment of models.

France, which holds the rotating presidency of the G7 for 2026, issued a chair’s summary statement after the Oct. 20 virtual G7 tech ministerial, which noted that ministers considered closer coordination on identifying risks and sharing incident information, as well as a dedicated high-level group. It was not a joint statement endorsed by all G7 members.

Le Hénanff has proposed resuming talks in December.

SI acceleration

Trump began promoting “super intelligence” as a replacement for “artificial intelligence” at the U.N. General Assembly in late September. A week later, he ordered federal agencies to use the new term.

G7 ministers in May agreed to discuss secure AI and risk assessment, which was followed by the G7 leaders meeting the following month in Évian.

But the stakes have risen as advanced AI systems gain unprecedented cyber capabilities that can be used for both attack and defense. In July, Hugging Face disclosed an intrusion driven by an autonomous AI agent. OpenAI later said models used in an internal cybersecurity test had bypassed controls and compromised parts of its own research infrastructure and Hugging Face’s systems.

Le Hénanff said France would keep pushing the issue, citing INESIA, France’s national AI evaluation and safety institute, and Inria, its public research institute for digital science and technology, as resources for the work.

The White House official said: “Under President Trump’s leadership, America will continue to lead the world in SI innovation.”

France’s blood collection service confirmed that its refrigerators were hit by cyberattacks at the same time as supermarket fridges across the EU — though blood supplies were not affected.

The French Blood Establishment said Tuesday that monitoring and control systems for cold storage rooms deployed at three of its sites were affected, with temperature and defrosting thresholds raised to “very high levels.”

It was not the direct target of the cyberattacks and no blood samples or products were compromised, the EFS said. 

The incident appears linked to a fresh wave of cyberattacks on supermarket refrigerators across Europe, which forced stores to throw out spoiled food. That wave came just weeks after French supermarkets were first hit by a cyberattack that also hit refrigerators.

French media reports said refrigeration company Coolworld is the supplier to EFS. The company said in a statement that it’s aware of the incident and that it “concerns a component supplied by a third-party provider and not directly controlled by Coolworld.” It said only a “limited number” of its units were affected.

In the attacks on supermarkets, refrigerator defrost settings were manipulated so the coolers reached very high temperatures, mirroring the EFS’s experiences. The blood stored in the affected equipment, which included plasma bags for transfusions, has been “transferred or secured,” the EFS said.

French digital minister Anne Le Hénanff said in the country’s Senate today that the recent attacks on the country’s refrigerators “have directly targeted our economy and our supply chain.”

“I would even go so far as to say that, beyond that, their objective may potentially be to undermine the unity of our country and to create anxiety among the population,” she said.

Emile Marzolf contributed to this report.

BRUSSELS — The European Commission will assess how well supermarkets are prepared to handle cyberattacks after refrigerators in dozens of stores across at least six EU countries were taken offline.

EU Agriculture and Food Commissioner Christophe Hansen told POLITICO that the attacks would be discussed at the next meeting of its Security College to assess retailers’ contingency plans and their ability to respond to incidents.

“Europe’s food supply chain must be prepared for new and evolving threats,” Hansen said. “The repeated cyberattacks on supermarkets are deeply concerning, causing economic losses for retailers and empty shelves for consumers.”

The announcement follows dozens of supermarkets across Europe reporting disruptions to their refrigeration and freezing systems on Monday.

Incidents were reported in at least six EU countries — Belgium, Luxembourg, Sweden, Ireland, the Netherlands and Estonia — with some retailers reporting that refrigerator temperatures had suddenly surged to as high as 50 degrees Celsius.

Commission President Ursula von der Leyen set up the Commission’s Security College in March 2025 to discuss strategic developments and threats to the EU’s internal and external security.

The Security College format lets commissioners examine attacks beyond their immediate impact on retailers. It also places the disruptions in the broader context of Europe’s vulnerability to hybrid warfare, where attacks on essential supply chains can be used to undermine public confidence.

The Security College meets periodically, separately from the Commission’s regular weekly meetings. On Friday, the Security College discussed the timing of its next meeting, but no date has been set, although heads of cabinet attending the planning meeting agreed it should take place soon, according to an EU official granted anonymity to discuss the behind-closed-door gathering.

The Security College is chaired by von der Leyen and attended by all her commissioners.

The latest disruptions follow a series of cyberattacks in France in October, when hackers appeared to remotely manipulate refrigeration systems by activating their defrosting mechanisms, causing temperatures to rise sharply and food to spoil.

In October, Commission agriculture officials met retailers affected by cyberattacks to take stock of the situation as part of the EU’s food security contingency and preparedness efforts. “We must work at every level to strengthen our preparedness and resilience,” Hansen said.

The commissioner stressed that Europe’s food security is not at risk, but warned that these incidents exposed vulnerabilities in the food supply chain, with consequences for businesses, food waste and consumer confidence.

“These are a deliberate attempt to disrupt our food supply chain and undermine consumers’ confidence in it — a warning that we must take seriously,” Hansen said.

BRUSSELS — Refrigerators in dozens of supermarkets in at least five EU countries were out of service on Monday, local news outlets reported, in what appears to be a repeat of cyberattacks that hit French stores last month.

As of Monday afternoon, there were news reports of incidents affecting supermarkets in Belgium, Luxembourg, Sweden, Ireland, the Netherlands and Estonia. 

Several store managers told local media that refrigerator temperatures suddenly spiked to up to 50 degrees Celsius. This mirrors the French incidents last month, in which attackers appeared to remotely manipulate the fridges’ defrosting mechanisms so that they overheated.

It’s not confirmed that the attacks are connected or used the same software vulnerabilities that hit French chains, though one supermarket spokesperson said the incident is a cyberattack “similar to the one in France.”

Ken Munro, a cybersecurity researcher, said in an interview that supermarkets should have disconnected their refrigerators and the devices used to monitor and remotely manage them from the Internet. “I don’t accept any other excuse … particularly in light of the earlier [attacks in France],” he said.

Inti De Ceukelaire, another cyber researcher, also said the incident suggests supermarkets did not take the necessary steps even after the France attacks. “It seems that some of them simply did not get patched, which is quite ridiculous,” he said.

Belgian media reported on Monday morning that temperatures in supermarket refrigerators had suddenly spiked, forcing them to throw food away. A spokesperson for the Centre for Cybersecurity Belgium said the agency is “closely” following the incident, adding that the attackers are unknown and that it “may never be possible to identify them.”

John Billow, director of Sweden’s National Cyber Security Centre, told POLITICO that there are “similarities” to the French incidents and that the agency is in touch with affected organizations. A European Commission spokesperson said it’s aware of the incidents and is using the EU-Cyclone network to coordinate and share information.

Following France

French supermarkets were hit with a wave of similar incidents in mid-October, when attackers targeted refrigerators by Danfoss, a Danish manufacturer of store fridges. Danfoss did not immediately respond to a request for comment. The attacks in France triggered a response from the country’s prime minister and its cybersecurity agency.

Belgian supermarket chain Delhaize alerted its store managers early on Monday morning of problems with refrigerators, and Belgian broadcaster RTBF cited a store manager as saying that the problems were due to a cyberattack like those in France.

A spokesperson for the company said it is aware of an “IT incident affecting the refrigeration systems in a number of Delhaize stores.” A spokesperson for Colruyt, which operates Spar stores in Belgium, said in a statement that fridges in “around five” Spar stores have been affected. “We are currently doing everything we can to resolve the issue,” they said, adding that no Colruyt stores have been affected. 

A Carrefour spokesperson confirmed that 15 of its 700 stores have been affected, and that none of its larger “hypermarket” stores are among them. All stores remain open, they said.

Stores in Sweden have also been hit. A spokesperson for supermarket chain ICA confirmed an “incident overnight affecting a small number of ICA stores operating outside ICA’s central network” which affected its fridges and freezers. 

A Coop spokesperson said seven of its 800 stores were affected but the situation, which is “contained and under control.” In one case, a refrigeration system began to generate heat, they said. Last month in France, the attacks caused at least one fire.

Like the public authorities, cyber researchers are looking for signs of who may be responsible. The fact that the attacks have happened again is evidence to suggest a hostile nation could be behind the attacks rather than young hacker pranksters, De Ceukelaire said. Munro, however, said he believes a “copycat” is behind Monday’s attacks.

“This won’t be the end of it,” Munro added. “There will be more.”

This article has been updated.

MONTREAL — Prime Minister Mark Carney is positioning Ottawa’s C$1.6 billion investment in Canadian artificial intelligence company Cohere as a downpayment on his country’s national security. 

“We’re not waiting for the future of AI to be decided somewhere else by those we don’t know or … don’t trust,” Carney said Thursday in Montreal ahead of the start of the Canada-EU summit.

Carney framed the upcoming congress, which includes meetings Friday with European Commission President Ursula von der Leyen and European Council President António Costa, as a shared endeavor to build a stronger transatlantic alliance in the face of global disruption.

“Sovereignty now requires secure access to semiconductors, critical minerals, payment systems, clean energy technology, vaccines, space-based communications and artificial intelligence,” Carney said. “Canada is taking a major step forward in artificial intelligence.”

In a pre-summit speech earlier Thursday in Montreal, von der Leyen cited April’s multi-billion dollar merger between Cohere and German counterpart Aleph Alpha as a key piece of the deepening Canada-EU cooperation that is set to unfold at Friday’s talks on AI.

“Both Canada and Europe believe this technology should serve people. So we will work together to tackle head-on the safety and security issues of runaway AI. We will develop together rules and standards and strong global governance,” she said.

Carney said Canada was making a commercial investment alongside private investors including Nvidia, Bell and Germany’s Schwarz Group.

Cohere co-founder and CEO Aidan Gomez announced the initial close of its Series E funding round on Thursday, which is targeting up to C$7 billion at a C$35.7 billion valuation.

Gomez joined Carney at Mila, the Quebec Artificial Intelligence Institute, for the Canadian portion of the funding announcement. 

“We believe that artificial intelligence would become one of the defining technologies of this century, and that Canadians should help build it, shape it and benefit from it,” Gomez said, standing next to the Canadian leader. 

The Canada-EU summit is unfolding against the backdrop of economic threats by U.S. President Donald Trump against both transatlantic partners.

Carney dismissed suggestions Thursday that the summit could draw reprisals by Trump against the participants. “This is a process which we’re doing absolutely in the interest of the Canadians, but ultimately the U.S. will see that,” he said.

LONDON — Britain’s intelligence agency GCHQ cannot account for the whereabouts of thousands of storage devices which could contain sensitive material, according to an official watchdog.

A report by the Investigatory Powers Commissioner (IPCO) — which polices how Britain’s intelligence agencies use their spying powers — on Thursday found that a significant number of devices including USB sticks, hard drives and memory cards are unaccounted for.

Brian Leveson, the Investigatory Powers Commissioner, said that GCHQ “still cannot tell me what has happened to removable media that may hold sensitive data, years after I first raised it with them.”

He noted that the devices “may contain IPA-related data” — which has a high level of sensitivity.

IPA-related data refers to information collected or held under the Investigatory Powers Act 2016. That could include intercepted communications such as emails, texts and telephone calls, as well as information extracted from people’s computers or phones.

The report added that GCHQ currently estimates the number of devices “to be in the thousands” and is currently undergoing work so it can report how many of the devices have been confirmed as lost.

“We remain very concerned about this issue and are disappointed with the time it has taken GCHQ to investigate,” the report notes.

Last year IPCO disclosed that GCHQ and fellow intelligence agency MI5 had been unable to locate considerable numbers of storage devices, some of which potentially containing information classified as “TOP SECRET.”

A GCHQ spokesperson said: “As IPCO have reported, our management system for removable media was previously not sufficiently robust to effectively track the items that were registered for use. IPCO are right to note the flaws in the data the system produced, and we have taken action against all their recommendations.

“We recognise the importance of security of removable media in our systems, and have a range of measures to mitigate the risks posed by these items. The findings in the report have been addressed comprehensively and all necessary steps to correct this issue have been taken.”

SpaceX’s Starlink and Starshield satellite communications services have been restored in Ukraine, allowing the country’s forces to operate drones at high speed, Defense Minister Yevhenii Khmara said on Saturday.

“The Ministry of Defense’s monitoring systems indicate that Starlink/Starshield speeds have been restored,” Khmara told reporters in WhatsApp messages. “We are recording speeds exceeding 400 km/h, and the connection is stable.”

Since last week, Kyiv had been reporting speed limits on Starshield, Starlink’s military-grade service, affecting Ukraine’s ability to use drones and carry out defensive strikes. The throttling came amid growing tensions between Washington and Kyiv, with Trump blaming President Volodymyr Zelenskyy for the continuation of the war with Russia.

On Friday, Ukrainian officials told POLITICO that drones continued to lose signal at speeds above 160 km/h, despite U.S. President Donald Trump saying on Thursday that SpaceX CEO Elon Musk had “put it back.” British Prime Minister Andy Burnham raised the issue in a phone call with Trump on Friday.

“This outcome is of primary importance for the front line, our military personnel, the operation of drones, logistics, and communications,” Khmara said.

He added that the ministry of defense would continue to “monitor and track the performance of Starlink/Starshield.”

The exposure was immense, with AI multiplying the risks — and yet time-tested global cybersecurity procedures appeared to be functioning. Then suddenly, it all broke down.        

The decision by a cybersecurity company on Wednesday to prematurely release information about a flaw in the popular PHP computer programming language left much of the web exposed to hackers, triggering a panic that brought to life months of warnings of how the AI-powered era could cause widespread damage.

The flaws in PHP, discovered using AI tools through a months-long process coordinated by OpenAI, caused cyber agencies across Europe, the U.S., the U.K., Australia and Canada to post urgent warnings Wednesday. Numerous governments took websites offline as a precaution.

While no major hacking damage was immediately apparent, the way the incident unfolded over 72 hours showed how easily cybersecurity processes can break down and the outsized consequences of cyber risks in the AI era.

The man who set off the chain reaction with the early release — Chainguard’s CEO Dan Lorenc — quickly apologized in a LinkedIn post. But on Thursday, in an interview with POLITICO, Lorenc said he’d shared the information ahead of time because the flaw was already being exploited. Though others disputed that, Lorenc said he believed he’d seen enough evidence to invalidate an embargo set up to allow time to find a fix for the flaws. 

While he disputed that his actions would have caused problems for other defenders, Lorenc conceded that the evidential threshold in these coordinated cyber defense systems is a “grey area.” 

The revelation of the PHP flaw brings out into the open what cyber officials have been bracing for since the arrival of the most powerful tools of artificial intelligence, which not only can be used to discover vulnerabilities but also to exploit them at scale. 

The cybersecurity world’s long-established protocols helped prevent disaster scenarios, in which hackers would have successfully exploited the vulnerabilities to take control of numerous websites and access their data. But now the scale and end-of-days potential of AI-driven cyber risks are visible for the world to see. 

This “is what happens when AI turns up a flaw that’s been hiding for years,” said Eylam Milner, co-founder and chief technology officer at cybersecurity start-up Echo. The vulnerabilities, he added, are “about as serious as it gets for the web.”

Origin story

Understanding how this week’s emergency unfolded offers a glimpse at how companies and authorities are working to stave off attacks — and how much risk they face going forward. 

The origins of the incident can be traced back as far as April when top frontier AI firm Anthropic unveiled Mythos, leading some in the cybersecurity world to worry that systems would quickly be overrun by advanced artificial intelligence, with potential for catastrophic events to ensue.

But while researchers did find more flaws in computer systems in the months after Anthropic and other AI firms like OpenAI released those models, they had little impact in the real world. Even the Hugging Face incident, a widely discussed hack that saw OpenAI’s autonomous AI agents go rogue during an internal security evaluation, related more to the level of control AI companies exert over their models than their power to break into systems worldwide. 

That changed this week after researchers unveiled the vulnerability in PHP, a coding language estimated to be integrated into some 70% of the web.

The process by which information about flaws is released among cybersecurity officials and affiliated companies is crucial. Through a longstanding practice known as coordinated disclosure, researchers and companies that identify flaws can find a fix and share it confidentially with agencies and others before releasing to the public, meaning they don’t hand malicious hackers the gift of a hole without a fix.

In the case of the PHP flaw, that process worked well, but not perfectly. Information about the bugs started to circulate ahead of the planned release time. Then, according to the PHP Foundation, Chainguard “unilaterally broke the embargo,” which “disregarded weeks of work by many parties toward a coordinated disclosure.” PHP Foundation executive director Elizabeth Barron told POLITICO by email that while it was “disappointed” with Chainguard, it hopes to “rebuild trust with them in the future to ensure we can continue to collaborate effectively.”

After the leak— which meant information about the bugs was in the open before the fix was ready — confusion quickly ensued, with government bodies and private companies choosing to temporarily shut down their websites rather than risk potentially damaging breaches to their data and the sites themselves.

Early Thursday, Matthew Prince, the CEO of Cloudflare, an internet services company that is widely used by websites to block cyberattacks, giving it a high level of visibility over what hackers are doing, said in a post on X that it had seen “millions” of attempts to exploit the flaw.

Cloudflare saw thousands in the 10 hours before the flaw was publicly announced, then tens of thousands in the 45 minutes after the announcement, hundreds of thousands within two hours, and now millions, Prince said.

Amazon’s cloud division also said the flaw is “now being broadly exploited in the wild.”

One senior U.S. government cyber official said that federal authorities have been overwhelmed — and not just by PHP. The same day the world was racing to address PHP, they were also dealing with bugs in node.js, a widely used JavaScript framework, Fortinet, GitHub and Oracle.

“The fire department is fighting multiple fires at once,” the official said, adding: “The good news is they’re all one-story structures on fire, which the fire department deals with all day, every day.”

More to come

Dauntingly, OpenAI said there’s more on the way. “These bugs are among several significant vulnerabilities we’ve already found and are working to fix, and we expect similar findings to increase sharply in the coming months,” the company said Wednesday in a statement.

Matthijs van Amelsfort, head of the Dutch cybersecurity agency, said in an interview that the job of keeping computer systems safe has been transformed by the advancement of AI. “As soon as the frontier models came out, that’s exactly what we said, this will be the trend,” he said. “And actually that’s happening now.”

Thomas Caspers, vice president of Germany’s cyber agency BSI, concurred: “We expect that [to be] happening more and more during the coming months.” 

AI also ramps up the risks once the flaws are out in the open. Cyber agencies’ recommendation that organizations take their websites offline was “really a drastic measure,” Caspers said. “We wouldn’t have done that a few years ago or so.” But because AI has made it quicker and easier to exploit flaws, “we had to do that,” he said. 

At the same time, the use of advanced AI to detect the flaws may create a new level of protection against malicious hackers looking to take advantage of them. Caspers said that though his German agency has also seen attacks, it has not seen any successful use of the flaw by hackers.

“It seems a little bit more complicated than expected to exploit,” he said. 

Despite the fact that AI offers a new way to discover flaws, the work involved in keeping systems protected is more quotidian, with cyber agencies urging organizations to install the fix shared by the PHP Foundation, in a process known as patching.

“There are three things that you have to do right now,” said van Amelsfort from the Dutch agency. “And that’s patch, patch, and patch.” 

John Sakellariadis contributed to this report.

BRUSSELS — Centrist parties backing European Commission President Ursula von der Leyen clashed at Thursday’s European Parliament plenary over whether to hold artificial intelligence firms accountable for harm.

The EU executive had considered specific liability rules for AI in 2022, but withdrew these last year as part of the EU’s major simplification effort to make the bloc more competitive.

“To withdraw the AI liability directive was a big mistake,” said Alex Agius Saliba, a Maltese vice-president of the Socialists and Democrats, part of the majority coalition. “We strongly urge the Commission to bring forward this important piece of legislation.”

Thursday’s plenary debate, in which discussions centered on a global framework to regulate AI, showed strong tensions inside Europe between the centrist coalition backing von der Leyen. While the center-left pushed for new rules to address a series of AI-fueled hacking incidents, the center-right doubled down on simplification to ensure European companies can compete in the global AI race.

Socialist and Green lawmakers called for a new AI Liability Act in a bid to hold AI companies liable for harm done by their models, as with more traditional manufacturers’ products.

OpenAI CEO Sam Altman floated a similar idea for a new liability framework for companies whose models are capable of autonomous cyberattacks in the wake of this summer’s hack by autonomous OpenAI agents into another AI platform, Hugging Face.

“If a phone charger explodes in your house, we never call it innovative. We call it cheap, dangerous junk, and we hold the manufacturer liable for damages,” said Dutch Green European Parliament lawmaker Kim van Sparrentak.

She urged the Commission to “stop scrapping rules to please [U.S. President Donald] Trump” and come up with a “strong new liability act that covers the testing and the development of AI.”

The debate quickly descended into a fierce back-and-forth between key AI-focused lawmakers from von der Leyen’s centrist coalition.

“It feels [to] me like the Greens and the Socialists are living [on] a completely different planet than the rest of us when they are screaming for more regulation,” said Swedish center-right lawmaker Arba Kokalari, who led the work on the AI omnibus, which delayed a core section of the EU’s flagship AI law.

She said the EU already had a comprehensive regulatory framework — the AI Act — of which some parts are not even into force, and said the EU should focus on avoiding falling behind in the global AI race instead. She called for “less bureaucracy, more private investments, better access to data and computing infrastructure.”

Italian Social Democrat Brando Benifei, who led work on the AI Act in the previous mandate, snapped back that Europe should lead with new liability rules, “or we will need to wait for the next blogpost of a CEO to know what is happening.”

German Green lawmaker Sergey Lagodinsky also fired back at Kokalari: “What planet do you live on? Not on the planet where [AI] agents break out.”

International Partnerships Commissioner Jozef Síkela pointed out at the end of the debate that the rules were withdrawn because EU countries and European Parliament lawmakers couldn’t reach an agreement on them.

Cyberattackers have made “millions” of attempts to take advantage of a critical hole in a building block of the internet, a key cybersecurity provider said early Thursday.

Two top European cyber officials later told POLITICO that hackers have so far struggled to exploit the vulnerability.

Cybersecurity agencies worldwide continue to scramble to respond to the public revelation Wednesday of a flaw in PHP, a foundational computer programming language used to underpin 70% of the internet. 

Matthew Prince, the CEO of Cloudflare, an internet services company that is widely used by websites to block cyberattacks — giving it a high level of visibility over what hackers are doing — said in a post on X that it’s seen “millions” of “attempts to exploit” the flaw.

Cloudfare saw thousands in the 10 hours before the flaw was publicly announced, meaning information must have leaked, then tens of thousands in the 45 minutes after the announcement, hundreds of thousands within two hours, and now millions, Prince said.

Amazon’s cloud division also said the flaw is “now being broadly exploited in the wild.”

But Thomas Caspers, vice president of Germany’s cyber agency BSI, said in an interview that though his agency has also seen attacks, it has not seen any successful use of the flaw by hackers. 

“It seems a little bit more complicated than expected to exploit,” he said. “When we had the planning process before the release of the patch, we were expecting a much faster track of the attackers.” 

Caspers is not certain why this is the case at this stage, but said it appears that successfully making use of the flaws is harder than expected. Global cyber officials were part of a process coordinated by OpenAI, to find and fix the flaws. “An ad hoc exploitation seems a little more difficult than expected,” he said.

The challenge for bad actors may also be linked to the major AI providers building guardrails so their tools can’t be used to exploit flaws, he said. When a POLITICO reporter as a test asked ChatGPT and Claude, models from OpenAI and Anthropic respectively, how to exploit the PHP vulnerabilities, both chatbots declined to provide the information. The two companies did not immediately respond to requests for comment. 

Numerous European government departments took their websites offline as a precaution to Wednesday’s developments. As of Thursday morning, key French websites such as the justice ministry and the data protection authority still featured a message they were undergoing maintenance. 

Matthijs van Amelsfort, the head of the Dutch cybersecurity agency, told POLITICO that his agency has no indication that the flaw is “actively being misused” but said that can change, particularly because AI makes it easier to exploit flaws. The agency took its website offline on Wednesday, but it is now back up.

This article has been updated.

BRUSSELS — The European Union is beefing up its presence in the Arctic to catch up with neighboring powers carving new trade lanes and drilling for resources under the melting ice.

On Tuesday, the EU unveiled a new plan called Northern Neighborhood. It’s meant to prepare for rising military and commercial activity in the north driven by climate change, and calls for new transport, research and security infrastructure in the region.

“The Arctic is one place where the tectonic plates of geopolitics are colliding. And it’s not someone else’s frontier. It’s part of the European Union,” Commission President Ursula von der Leyen declared as she unveiled the strategy.

She pointed to Russia’s expanding military footprint and the race for emerging shipping routes and critical resources as forces reshaping Europe’s security and economic future.

Climate change is dramatically affecting the Arctic. Planet-warming emissions are making the ice melt faster, disrupting the region’s fragile ecosystems. But where the ice is disappearing, countries like China, Russia and even Canada see an opportunity.

The EU is now scrambling to update its existing policies on the Arctic — once largely focused on environmental protection — to give more importance to security, shipping and extracting resources.

The strategy calls for a rebranding of the EU’s existing partnerships with Norway, Iceland, Canada and the U.K., backed by regular summits to set joint priorities and launch projects.

Here are five things Brussels wants to change about its Arctic policy.

1. Defense and security 

The strategy warns that Russia is rebuilding its military presence in the Arctic and that China has growing strategic ambitions in the region.

The EU plans to set up a pilot research project using satellite and maritime observation in 2027 and share ship-tracking data to help identify Russian shadow fleet vessels.

In the longer term, it wants EU countries to lead on a maritime security hub to pool intelligence on threats ranging from undersea cable sabotage to illegal fishing. It also calls for setting up an Arctic Cable Hub alongside NATO to monitor and protect subsea cables in the North Atlantic and the Arctic. The strategy lacks any information on funding for these projects, however.

Finnish MEP Mika Aaltola of the European People’s Party said the new focus on the Arctic is long overdue.

“Europe hasn’t been thinking about [the Arctic] enough,” Aaltola said. “Because of the ice melting and climate change, it’s becoming kind of the next great game. And if that happens, then what are the European positions when it comes to Russia, China and also the United States?”

2. Access to energy resources

The new policy sticks with EU promises not to drill for fossil fuels in the Arctic.

“The EU remains committed to ensuring that oil, coal and gas stay in the ground, including in Arctic regions,” it reads. Instead, Brussels promises to develop renewable energy projects in the region but drops an old commitment to convince the rest of the world to follow its lead. 

“It is good that the Commission maintains its opposition to oil and gas drilling in the Arctic,” said Delara Burkhardt, a Socialist MEP, but not pressing for a global ban “weakens the EU’s ability to push for stronger international protection and leaves the door open for other countries to exploit one of the world’s most fragile ecosystems.”

The EU’s former Arctic policy — drafted in 2021 — committed the bloc to pursuing an international moratorium on Arctic oil and gas extraction. 

Norway — which supplies a lot of energy to the EU — has made it clear it would still drill in the Arctic regardless of the bloc’s position.

3. Critical raw materials 

The EU is under pressure to secure new supplies of critical raw materials to reduce its dependency on China.

The new strategy says it will continue working with Canada, Greenland, Norway and the United States to develop critical raw materials projects in the region, but insists it will do so while following the “highest social, environmental and governance standards,” and work to the “benefit of local communities in respect of Indigenous Peoples’ rights.” 

Brussels has already labeled several critical raw materials projects, including the Sokli project in Finland and the Per Geijer rare earth deposit in northern Sweden, as “strategic” under EU law, which means they could benefit from faster permitting procedures.  

But some of these projects face serious local resistance from local and indigenous communities, who say the mining plans threaten reindeer herding and protected ecological sites. 

4. New trade routes

Melting ice is opening up new shipping routes in the far north, and the EU is worried that it could be sidelined from the region. But the strategy offers little on that front; its only action is a study on new shipping lanes.

The number of vessels operating in the area covered by the Polar Code — international regulations covering shipping in the Arctic and Antarctic — rose by 40% between 2013 and 2025, while the total distance sailed nearly doubled, said Michael Kingston, a special adviser on polar issues to the Arctic Council on marine protection.

Recent transits by Chinese and South Korean container ships using the Northern Sea Route running along Russia’s Arctic coast show the appeal of a route that is about 20 days faster than conventional routes, he added. 

“Russia builds the infrastructure, China facilitates and funds some of it,” Aaltola said, calling it part of a “grand bargain” between the two.

He complained that the EU is left on the sidelines. “When it comes to the Arctic, there is a vacuum of interest, and there’s also a vacuum of resources and institutions participating.” 

The route is still mostly seasonal for Russian oil and gas tankers, said Ksenia Vakhrusheva, project manager and Arctic project adviser at the environmental group Bellona. Ice, unpredictable weather, increased insurance costs and Moscow’s control over the route make it unlikely to become a mainstream commercial corridor anytime soon, she added.  

Europe also has leverage as the final customer for Chinese shipments, Vakhrusheva said.

“If the EU sends a strong message to China that they do not want goods shipped via NSR, China won’t use this route for transit,” she said. “For NSR to become a valid transit route you need two sides,” she said, “a seller on one side and a buyer on the other.” 

5. Environmental protection 

The strategy is light on measures to shield the Arctic from the impact of global warming. However, it does warn that increased shipping in an “inherently harsh and poorly charted environment” raises the risk of “catastrophic accidents, severe marine pollution” and hybrid interference.  

“Increased shipping in the Arctic both exploits this vulnerability and exacerbates it,” said Dave Walsh, an adviser at the Clean Arctic Alliance NGO, citing carbon emissions, wastewater discharge and noise as some of the impacts of more traffic.

Safety and the environment have not been a priority for Moscow, said Vakhrusheva, and a shortage of high ice-class ships combined with the need to sell oil and gas “to whoever is ready to buy it” raises the risks. 

Protections such as a ban on heavy fuel oil are still negotiated at the International Maritime Organization, where the EU is a key player, she said, adding that such measures will push up the cost of Arctic shipping. 

The strategy says Brussels will push at the IMO to turn measures to limit black carbon — soot emitted by ships that falls on snow and ice and accelerates melting — from voluntary guidelines into binding rules.

It also calls for expanding the definition of Arctic waters to everything north of 60 degrees latitude, replacing the current boundary, which excludes much of the waters around Iceland and Norway from special Arctic shipping rules.

It also promises to keep pressing for compliance with the Polar Code through tools such as an IMO regulation that involves national maritime authorities inspecting foreign-flagged ships in Arctic ports to verify compliance with international safety, environmental and crew-qualification standards. 

The document includes non-binding commitments on biodiversity loss and plans to boost ocean and Arctic research programs. It also promises to launch an “initiative to promote local public and private investment in the Arctic around blue economy sectors.” 

Jakob Weizman contributed reporting.