BRUSSELS — Centrist parties backing European Commission President Ursula von der Leyen clashed at Thursday’s European Parliament plenary over whether to hold artificial intelligence firms accountable for harm.

The EU executive had considered specific liability rules for AI in 2022, but withdrew these last year as part of the EU’s major simplification effort to make the bloc more competitive.

“To withdraw the AI liability directive was a big mistake,” said Alex Agius Saliba, a Maltese vice-president of the Socialists and Democrats, part of the majority coalition. “We strongly urge the Commission to bring forward this important piece of legislation.”

Thursday’s plenary debate, in which discussions centered on a global framework to regulate AI, showed strong tensions inside Europe between the centrist coalition backing von der Leyen. While the center-left pushed for new rules to address a series of AI-fueled hacking incidents, the center-right doubled down on simplification to ensure European companies can compete in the global AI race.

Socialist and Green lawmakers called for a new AI Liability Act in a bid to hold AI companies liable for harm done by their models, as with more traditional manufacturers’ products.

OpenAI CEO Sam Altman floated a similar idea for a new liability framework for companies whose models are capable of autonomous cyberattacks in the wake of this summer’s hack by autonomous OpenAI agents into another AI platform, Hugging Face.

“If a phone charger explodes in your house, we never call it innovative. We call it cheap, dangerous junk, and we hold the manufacturer liable for damages,” said Dutch Green European Parliament lawmaker Kim van Sparrentak.

She urged the Commission to “stop scrapping rules to please [U.S. President Donald] Trump” and come up with a “strong new liability act that covers the testing and the development of AI.”

The debate quickly descended into a fierce back-and-forth between key AI-focused lawmakers from von der Leyen’s centrist coalition.

“It feels [to] me like the Greens and the Socialists are living [on] a completely different planet than the rest of us when they are screaming for more regulation,” said Swedish center-right lawmaker Arba Kokalari, who led the work on the AI omnibus, which delayed a core section of the EU’s flagship AI law.

She said the EU already had a comprehensive regulatory framework — the AI Act — of which some parts are not even into force, and said the EU should focus on avoiding falling behind in the global AI race instead. She called for “less bureaucracy, more private investments, better access to data and computing infrastructure.”

Italian Social Democrat Brando Benifei, who led work on the AI Act in the previous mandate, snapped back that Europe should lead with new liability rules, “or we will need to wait for the next blogpost of a CEO to know what is happening.”

German Green lawmaker Sergey Lagodinsky also fired back at Kokalari: “What planet do you live on? Not on the planet where [AI] agents break out.”

International Partnerships Commissioner Jozef Síkela pointed out at the end of the debate that the rules were withdrawn because EU countries and European Parliament lawmakers couldn’t reach an agreement on them.

Cyberattackers have made “millions” of attempts to take advantage of a critical hole in a building block of the internet, a key cybersecurity provider said early Thursday.

Two top European cyber officials later told POLITICO that hackers have so far struggled to exploit the vulnerability.

Cybersecurity agencies worldwide continue to scramble to respond to the public revelation Wednesday of a flaw in PHP, a foundational computer programming language used to underpin 70% of the internet. 

Matthew Prince, the CEO of Cloudflare, an internet services company that is widely used by websites to block cyberattacks — giving it a high level of visibility over what hackers are doing — said in a post on X that it’s seen “millions” of “attempts to exploit” the flaw.

Cloudfare saw thousands in the 10 hours before the flaw was publicly announced, meaning information must have leaked, then tens of thousands in the 45 minutes after the announcement, hundreds of thousands within two hours, and now millions, Prince said.

Amazon’s cloud division also said the flaw is “now being broadly exploited in the wild.”

But Thomas Caspers, vice president of Germany’s cyber agency BSI, said in an interview that though his agency has also seen attacks, it has not seen any successful use of the flaw by hackers. 

“It seems a little bit more complicated than expected to exploit,” he said. “When we had the planning process before the release of the patch, we were expecting a much faster track of the attackers.” 

Caspers is not certain why this is the case at this stage, but said it appears that successfully making use of the flaws is harder than expected. Global cyber officials were part of a process coordinated by OpenAI, to find and fix the flaws. “An ad hoc exploitation seems a little more difficult than expected,” he said.

The challenge for bad actors may also be linked to the major AI providers building guardrails so their tools can’t be used to exploit flaws, he said. When a POLITICO reporter as a test asked ChatGPT and Claude, models from OpenAI and Anthropic respectively, how to exploit the PHP vulnerabilities, both chatbots declined to provide the information. The two companies did not immediately respond to requests for comment. 

Numerous European government departments took their websites offline as a precaution to Wednesday’s developments. As of Thursday morning, key French websites such as the justice ministry and the data protection authority still featured a message they were undergoing maintenance. 

Matthijs van Amelsfort, the head of the Dutch cybersecurity agency, told POLITICO that his agency has no indication that the flaw is “actively being misused” but said that can change, particularly because AI makes it easier to exploit flaws. The agency took its website offline on Wednesday, but it is now back up.

This article has been updated.

BRUSSELS — The European Union is beefing up its presence in the Arctic to catch up with neighboring powers carving new trade lanes and drilling for resources under the melting ice.

On Tuesday, the EU unveiled a new plan called Northern Neighborhood. It’s meant to prepare for rising military and commercial activity in the north driven by climate change, and calls for new transport, research and security infrastructure in the region.

“The Arctic is one place where the tectonic plates of geopolitics are colliding. And it’s not someone else’s frontier. It’s part of the European Union,” Commission President Ursula von der Leyen declared as she unveiled the strategy.

She pointed to Russia’s expanding military footprint and the race for emerging shipping routes and critical resources as forces reshaping Europe’s security and economic future.

Climate change is dramatically affecting the Arctic. Planet-warming emissions are making the ice melt faster, disrupting the region’s fragile ecosystems. But where the ice is disappearing, countries like China, Russia and even Canada see an opportunity.

The EU is now scrambling to update its existing policies on the Arctic — once largely focused on environmental protection — to give more importance to security, shipping and extracting resources.

The strategy calls for a rebranding of the EU’s existing partnerships with Norway, Iceland, Canada and the U.K., backed by regular summits to set joint priorities and launch projects.

Here are five things Brussels wants to change about its Arctic policy.

1. Defense and security 

The strategy warns that Russia is rebuilding its military presence in the Arctic and that China has growing strategic ambitions in the region.

The EU plans to set up a pilot research project using satellite and maritime observation in 2027 and share ship-tracking data to help identify Russian shadow fleet vessels.

In the longer term, it wants EU countries to lead on a maritime security hub to pool intelligence on threats ranging from undersea cable sabotage to illegal fishing. It also calls for setting up an Arctic Cable Hub alongside NATO to monitor and protect subsea cables in the North Atlantic and the Arctic. The strategy lacks any information on funding for these projects, however.

Finnish MEP Mika Aaltola of the European People’s Party said the new focus on the Arctic is long overdue.

“Europe hasn’t been thinking about [the Arctic] enough,” Aaltola said. “Because of the ice melting and climate change, it’s becoming kind of the next great game. And if that happens, then what are the European positions when it comes to Russia, China and also the United States?”

2. Access to energy resources

The new policy sticks with EU promises not to drill for fossil fuels in the Arctic.

“The EU remains committed to ensuring that oil, coal and gas stay in the ground, including in Arctic regions,” it reads. Instead, Brussels promises to develop renewable energy projects in the region but drops an old commitment to convince the rest of the world to follow its lead. 

“It is good that the Commission maintains its opposition to oil and gas drilling in the Arctic,” said Delara Burkhardt, a Socialist MEP, but not pressing for a global ban “weakens the EU’s ability to push for stronger international protection and leaves the door open for other countries to exploit one of the world’s most fragile ecosystems.”

The EU’s former Arctic policy — drafted in 2021 — committed the bloc to pursuing an international moratorium on Arctic oil and gas extraction. 

Norway — which supplies a lot of energy to the EU — has made it clear it would still drill in the Arctic regardless of the bloc’s position.

3. Critical raw materials 

The EU is under pressure to secure new supplies of critical raw materials to reduce its dependency on China.

The new strategy says it will continue working with Canada, Greenland, Norway and the United States to develop critical raw materials projects in the region, but insists it will do so while following the “highest social, environmental and governance standards,” and work to the “benefit of local communities in respect of Indigenous Peoples’ rights.” 

Brussels has already labeled several critical raw materials projects, including the Sokli project in Finland and the Per Geijer rare earth deposit in northern Sweden, as “strategic” under EU law, which means they could benefit from faster permitting procedures.  

But some of these projects face serious local resistance from local and indigenous communities, who say the mining plans threaten reindeer herding and protected ecological sites. 

4. New trade routes

Melting ice is opening up new shipping routes in the far north, and the EU is worried that it could be sidelined from the region. But the strategy offers little on that front; its only action is a study on new shipping lanes.

The number of vessels operating in the area covered by the Polar Code — international regulations covering shipping in the Arctic and Antarctic — rose by 40% between 2013 and 2025, while the total distance sailed nearly doubled, said Michael Kingston, a special adviser on polar issues to the Arctic Council on marine protection.

Recent transits by Chinese and South Korean container ships using the Northern Sea Route running along Russia’s Arctic coast show the appeal of a route that is about 20 days faster than conventional routes, he added. 

“Russia builds the infrastructure, China facilitates and funds some of it,” Aaltola said, calling it part of a “grand bargain” between the two.

He complained that the EU is left on the sidelines. “When it comes to the Arctic, there is a vacuum of interest, and there’s also a vacuum of resources and institutions participating.” 

The route is still mostly seasonal for Russian oil and gas tankers, said Ksenia Vakhrusheva, project manager and Arctic project adviser at the environmental group Bellona. Ice, unpredictable weather, increased insurance costs and Moscow’s control over the route make it unlikely to become a mainstream commercial corridor anytime soon, she added.  

Europe also has leverage as the final customer for Chinese shipments, Vakhrusheva said.

“If the EU sends a strong message to China that they do not want goods shipped via NSR, China won’t use this route for transit,” she said. “For NSR to become a valid transit route you need two sides,” she said, “a seller on one side and a buyer on the other.” 

5. Environmental protection 

The strategy is light on measures to shield the Arctic from the impact of global warming. However, it does warn that increased shipping in an “inherently harsh and poorly charted environment” raises the risk of “catastrophic accidents, severe marine pollution” and hybrid interference.  

“Increased shipping in the Arctic both exploits this vulnerability and exacerbates it,” said Dave Walsh, an adviser at the Clean Arctic Alliance NGO, citing carbon emissions, wastewater discharge and noise as some of the impacts of more traffic.

Safety and the environment have not been a priority for Moscow, said Vakhrusheva, and a shortage of high ice-class ships combined with the need to sell oil and gas “to whoever is ready to buy it” raises the risks. 

Protections such as a ban on heavy fuel oil are still negotiated at the International Maritime Organization, where the EU is a key player, she said, adding that such measures will push up the cost of Arctic shipping. 

The strategy says Brussels will push at the IMO to turn measures to limit black carbon — soot emitted by ships that falls on snow and ice and accelerates melting — from voluntary guidelines into binding rules.

It also calls for expanding the definition of Arctic waters to everything north of 60 degrees latitude, replacing the current boundary, which excludes much of the waters around Iceland and Norway from special Arctic shipping rules.

It also promises to keep pressing for compliance with the Polar Code through tools such as an IMO regulation that involves national maritime authorities inspecting foreign-flagged ships in Arctic ports to verify compliance with international safety, environmental and crew-qualification standards. 

The document includes non-binding commitments on biodiversity loss and plans to boost ocean and Arctic research programs. It also promises to launch an “initiative to promote local public and private investment in the Arctic around blue economy sectors.” 

Jakob Weizman contributed reporting.

A Serbian prosecutor investigating alleged corruption surrounding a Trump real estate project in Belgrade was targeted with Israeli-made Pegasus spyware after speaking out about political interference and abuses of power, according to research made public Monday.

Rade Bajić, a member of Serbia’s Public Prosecutor’s Office for Organized Crime, is reported to be the latest target identified in a growing spyware scandal that has engulfed the country’s political opposition, civil society and institutions.

The research is the latest by Toronto University’s Citizen Lab in collaboration with Serbian digital rights organization, SHARE Foundation, including the discovery that Bajić received an Apple Threat Notification iMessage on Aug. 13.

The spyware revelation comes amid mounting controversy over plans to redevelop the former Yugoslav military headquarters in Belgrade into a luxury Trump Tower skyscraper. The project, associated with Jared Kushner, U.S. President Donald Trump’s son-in-law, has faced allegations of political interference and irregularities surrounding the removal of the site’s protected heritage status.

Bajić’s targeting follows revelations in September that at least 14 people in Serbia, including student activists and opposition figures, had received warnings indicating they may have been targeted with sophisticated spyware. Researchers at Toronto University’s Citizen Lab confirmed a Pegasus infection in at least one case. 

“In Serbia, spyware surveillance has steadily expanded from civil society and journalists to student activists, politicians and now university and judicial representatives,” said Andrijana Ristić, a policy advisor at SHARE Foundation. “This escalation is fueled by perceived impunity and state inaction, even in cases where criminal complaints have been filed.”

Another prominent figure caught up in the surveillance scandal is Vladan Đokić, rector of the University of Belgrade, whose phone was infected with Pegasus, according to the same report.

Đokić has emerged as a prominent figure in Serbia’s protest movement after refusing to facilitate a government crackdown on student demonstrators. He has faced sustained pressure from authorities, including a police raid on his university offices on March 31, during which computers and servers were reportedly seized.

Until September, Đokić was also frequently mentioned as a potential leader of the student-backed electoral list ahead of Serbia’s planned Oct. 25 parliamentary snap elections.

The identity of those responsible for deploying Pegasus against Bajić and Đokić has not been established.

“NSO has spent a decade claiming to turn over a new leaf each time an abuse surfaces. But there is no hiding the truth: Pegasus is a technology for repression,” said John Scott-Railton, a senior researcher at Citizen Lab. “It’s no accident that people standing up for freedom in the face of corruption keep getting hacked with NSO’s products.”

The cyberattack last week that hit hundreds of French supermarket refrigerators had Europeans wondering if the nonstop warnings about AI risks had finally landed in the real world.

They hadn’t — at least, not yet.

Experts say the attack, which forced hundreds of retailers to throw away defrosted food and spoiled milk, was mostly a reminder of the importance of old-school cybersecurity in safeguarding essential goods and services.

The attack is a “typical example” of how “low-key cyber-enabled sabotage can affect very crucial supply for society,” said Ferdinand Gehringer, hybrid threats lead at FTI Consulting. 

It’s arguably the most consequential hack in the European Union this year, with tangible, disruptive real-world repercussions. France’s Prime Minister Sébastien Lecornu personally managed the fallout, which prompted coordination and information-sharing at the EU level. 

The perpetrators, whose identity and motives are currently unknown, hacked into digital systems to remotely raise the temperature of refrigerators in supermarkets including Intermarché and Carrefour.

One cybersecurity expert working with Lecornu’s office said the French government held meetings after the attack to try to map all the potentially affected sectors, beyond supermarkets. “We’re in the middle of the flu vaccination campaign,” he said, referring to vaccine storage, which also relies on temperature control solutions, though no such attacks have been registered.

To add to the fear and confusion, supermarkets in the Netherlands and Belgium experienced unrelated cyber incidents that same week. Though there was limited impact in those cases, they were a good example of “how big our reliance is in the food supply chain on IT and network systems,” Dutch food security minister Silvio Erkens told POLITICO. 

The attacks come after citizens and policymakers have spent months being bombarded with warnings about scenarios in which unpredictable advanced artificial intelligence models escape human control.

While most good and bad actors on the internet are increasingly using AI models to increase speed and capacity, cyber experts say the hackers in question in the French case most likely used traditional methods to take advantage of devices needlessly exposed to the internet.

Connecting devices to the internet in this way is “an old-fashioned bad practice,” said Amir Preminger, chief technology officer at Claroty, a cybersecurity company that identified a software flaw in a product made by Danfoss, one of the refrigeration companies targeted by the French hacks. Danfoss fixed that flaw in 2025. 

Food systems

The attacks come at a time when Europe’s food security is already under considerable pressure due to geopolitical insecurity and climate change. The continuing disruptions in the Strait of Hormuz are pushing up fuel and fertilizer prices at a time where farmers struggle with the fallout of extreme drought that caused lower yields in many parts of Europe. These problems are compounded by the blockade of the Black Sea which is fueling the rise of global food prices.

“It is very serious that cyber criminals attack our food systems,” said Else Groen, director general of trade body Independent Retail Europe. She nonetheless stressed that food supply chains are resilient, which reduces the chances that consumer food supply would be endangered — even if such attacks are already a “major blow” for retailers operating on razor-thin margins.

The incidents bring to the fore a long-running problem with so-called operational technology, meaning industrial devices with physical outputs, like refrigeration systems. Critical sectors are packed with these kinds of devices, many of which are old, poorly protected, unnecessarily connected to the Internet, or some combination of the three. They’re also obscure and sometimes forgotten, despite the ramifications if they’re tampered with.  

And last week’s problems are far from solved. French and German cyber authorities warned that attacks were probably still ongoing, and the Greek cyber agency and an industry tracker said after the attack that there were hundreds of devices still connected to the internet.

Preminger too said there are still devices exposed, though he added that the number is declining, and not all are necessarily vulnerable to attack. Another research group found that the number of exposed Danfoss devices had significantly decreased.

Finding a fix

What’s changed with the widespread diffusion of advanced AI models is that cyber attacks are now faster and easier to replicate. Claroty reproduced the original flaws in Danfoss products in 28 minutes at a cost of $6, it said. 

In broad terms, AI makes it easier to carry out many types of cyberattacks and enables attackers to pounce on software flaws more quickly. Financially motivated cybercriminals — who have already spent years extorting businesses and disrupting essential services like hospitals — can use AI to simultaneously launch attacks on multiple targets.

Though the motive for the attacks on French supermarkets remains unknown, it is notable that there was no reported attempt at extortion. The strike did come as Russia ramps up its campaign of hybrid warfare against Europe, and senior EU and European leaders have consistently warned that Moscow could use cyberattacks to disrupt real-world services. Beyond food supplies, AI-enhanced targeting could be aimed at banking, hospitals and the functioning of the internet itself.

Still, these fears of bad human actors using AI should be distinguished from the science-fiction scenarios pushed by so-called AI doomers, in which bots themselves are motivated and able on their own to wipe out humanity.

Digital security experts, including the EU’s own in-house cyber team, are also turning to AI for defense. But it’s not a silver bullet, said Rémi Enjolras, a chief technology officer at Splunk, part of Cisco. Critical industries need to stop “seeing AI as a magical tool that will solve everything and go back to the fundamentals,” he said.

The EU has passed laws intended to force critical industries and product manufacturers to get those fundamentals right. But France, for example, is lagging in implementing such national regulations, and there are few other incentives to get companies to do that difficult and costly work.

Still, the images of empty supermarket shelves could provide a new incentive. “It should serve as a kind of a wake-up call,” Enjolras said.

Émile Marzolf contributed to this report.

BRUSSELS — The European Union is under pressure to keep Ukrainian troops fully online after Elon Musk’s Starlink was restricted amid volatile U.S. support for Kyiv.

“It was a very dangerous and unpleasant surprise,” Ukrainian President Volodymyr Zelenskyy told reporters after EU leaders met in Brussels, referring to Starlink speed limitations experienced by military troops in recent days. “We were using Starlink to intercept jet-powered Shaheds [combat drones] that are attacking our civilian infrastructure and killing our families … When the speed limits were lowered, we became incapable of shooting [them] down.”

Ukraine has long relied critically on Musk’s satellite constellation for wartime efforts. Reuters reported Friday that the order to slow Ukraine’s military-grade Starshield service came from the White House, days after Washington pressed Kyiv to halt strikes on Russian refineries, amid soaring energy prices and ahead of November’s midterm elections.

“It is unacceptable for Ukraine’s defense — and therefore Europe’s security — to depend on the goodwill of a single American billionaire or on Donald Trump’s decisions,” French centrist Member of the European Parliament Christophe Grudler told POLITICO.

Ahead of Thursday’s high-level meeting, European lawmakers had been calling on the EU executive to fast-track Kyiv’s access to satellite capabilities already pooled under the bloc’s Govsatcom program — which gives participating governments secure communications capabilities.

Negotiations between the EU executive and Ukraine over this access have been ongoing since March, with no breakthrough. Norway and Iceland secured such an agreement earlier this year.

“What I don’t understand is why the European Commission and the Member States have not done everything possible to quickly reach an agreement that would allow Ukraine to benefit from it,” added Christophe Grudler, who wrote to EU leaders.

He also called on them to speed up work on IRIS² — the EU’s in-house, planned satellite network and full-fledged match to Starlink, which is only expected to come online in 2030.

Commission spokesperson Thomas Regnier confirmed in a statement that it is “currently in talks with Ukraine to fully associate” the country with the EU’s Govsatcom program. “The war in Ukraine shows that our security also depends on space. And the EU has been doing quite a lot. We are ready to support Ukraine where we can support Ukraine,” he added.

Calls to crack down on dependence on foreign providers and boost alternatives to Starlink also come at a time when legislators are negotiating a series of laws that could tame Musk’s ambitions in Europe.

“Ukraine’s dependence on Starlink highlights the vulnerability of European defence systems that rely on U.S. technology, Another reminder that Europe must reduce its dangerous technological dependencies — ASAP,” center-right Finnish lawmaker Aura Salla said on social media.

Policymakers across Europe have been joining forces to curb Starlink’s dominance in low-Earth orbit, where satellites fly close to Earth to deliver faster connections.

“As legislators, we must ensure that European operators are well positioned in the market and limit the dominance of foreign players,” German center-left lawmaker Matthias Ecke said. In Brussels, lawmakers, including Ecke, are backing European telcos gunning for prized satellite frequencies, currently licensed to U.S. operators until next year and eyed by Starlink.

Meanwhile, Zelenskyy said Ukraine was working bilaterally with EU countries to secure more capabilities, citing France. He also expressed hopes that Starlink restrictions could be lifted. “My partners told me there were signals from the White House that they would return these capabilities.”

SpaceX — Starlink’s parent company — didn’t respond to POLITICO’s request for comment.

An Israeli surveillance technology firm has run a large-scale operation to infect mobile phones with spyware using online advertisements to hack the devices, researchers said on Thursday.

An investigation by the University of Toronto’s Citizen Lab and cybersecurity firm Confiant Threat Intelligence laid bare an ad-based infection technique developed by an Israeli company that researchers named “AdFection.” The hacks weaponized legitimate online ad systems for espionage purposes, allowing spyware manufacturers to connect to millions of devices and identify, track and target victims.

“Plugging into the online ads ecosystem provides the mercenary spyware industry a stealthy delivery system,” said Bill Marczak, senior researcher at The Citizen Lab. He said the findings were “surely just the tip of the iceberg” of how online ads are abused for espionage.

Researchers discovered critical details of the hacking tools by analyzing devices belonging to journalists and staff at the Al Jazeera media network, finding that 45 devices of journalists and staff were targeted and some infected with Israeli-made spyware known as Candiru.

At the heart of the hacking campaign is the Israeli company Discover-Tech that describes itself as an advertising business. Citizen Lab researchers said the company facilitated surveillance for commercial spyware operators. Its platform, called Controlium, allegedly allowed spyware makers like Candiru — which in 2025 was acquired by Integrity Labs — to identify, track and target devices by loading advertisements on websites and apps.

Discover-Tech and Integrity Labs did not immediately respond to a request for comment.

The scale is striking: An analysis of four billion advertising records found that Discover-Tech’s ads appeared across nearly 200,000 websites and mobile apps in dozens of countries over four months. Among the websites that featured the ads were institutional sites of NATO, the United Nations, the European Parliament, European Commission and Council of the EU.

The technique exploits real-time bidding — the automated system used by platforms such as Google to sell advertising space and target users. Rather than persuading victims to click a malicious link, attackers can exploit advertisements to identify and potentially infect devices without any interaction from the user — a technique known as “zero-click” infections.

Discover-Tech’s advertisements directed millions of devices to servers associated with Candiru, potentially enabling large-scale surveillance and reconnaissance, researchers said. That does not mean all those devices were infected.

Citizen Lab, based in Toronto, is a globally recognized research group that previously uncovered spyware scandals targeting Catalan political figures, a member of the European Parliament and the inner circle of murdered Saudi journalist Jamal Khashoggi.

The findings triggered calls for further investigation on Thursday. “The possibility that EU institutions have been exposed should set off alarm bells across Brussels,” said Hannah Neumann, a German European Parliament lawmaker of the Greens group. Neumann herself was the victim of a cyber-espionage operation by an Iranian hacking group.

“Europe cannot claim to defend democracy while leaving its own democratic institutions vulnerable to spyware,” Neumann said.

Ukraine’s strikes on data centers inside Russia aimed to disrupt military planning and communication services. There were also reports of another kind of disruption: to customers waiting for their dinner from food-delivery apps.

Kyiv’s drone strikes on three Yandex data centers in Sasovo, Kaluga and Vladimir saw delays and interruptions for thousands of businesses and households that rely on Yandex’s cloud infrastructure, including e-commerce, digital payment platforms and apps of food delivery and car services. Ukrainian drones on Wednesday targeted a major Sberbank data center in Russia’s Saratov region, though a senior company executive said it hadn’t affected operations.

After the strikes on Russian data centers, Kyiv noted that Moscow has already repeatedly targeted its digital infrastructure. “Ukrainians wanted to show Russians that two can play this game,” a senior official familiar with the operation told POLITICO, granted anonymity to discuss sensitive matters.

The attacks and counter-attacks point to a new frontline in war: the infrastructure powering the digital economy.

The attacks on the buildings that supply compute power are akin to striking a power plant supplying the electricity, heating and fuel that both militaries and civilians depend on. It may weaken an enemy’s war effort but can also bring everyday life to a standstill.

Experts say the cost of rebuilding in Russia will be particularly high as the centers require scarce materials that must be imported. “Obtaining a large amount of equipment to replace what was destroyed is not going to be easy,” said Oleg Shakirov, a cyber policy and international security researcher, noting that most hardware needs to be imported and that is complicated by high global demand and sanctions on Russia.

“To be honest, no one really knows what’s the actual damage. Since two data centers are still offline, we can assume that it’s significant,” said Shakirov.

Joseph Jarnecki, a senior research fellow at the Royal United Services Institute, warned that normalizing strikes to data centers could have a new set of dangerous consequences.

“These strikes likely breach International Humanitarian Law and it’s a big risk when global populations increasingly rely on digital services,” he told POLITICO.

When servers become targets

Data centers have entered the crosshairs of other recent armed conflicts. During the U.S.-Israeli conflict with Iran earlier this year, drone strikes hit three Amazon Web Services (AWS) facilities in the United Arab Emirates and Bahrain.

Since data centers can serve civilian and military purposes simultaneously, the legal status of targeting them is far from straightforward.

Kubo Mačák, an expert on international humanitarian law, said a data center must meet two conditions to qualify as a military objective under the Geneva Conventions: it must make an effective contribution to military operations and destroying it must offer a “definite military advantage.”

“If you know that they are storing military intelligence or that they’re using the data center to power military artificial intelligence tools,” Mačák said, there could be grounds to consider it a military objective.

Following the most recent strikes of the Yandex data centers, users on social media platform X reported a sudden drop in automated bot activity, including from accounts associated with pro-Russian, pro-Trump and Germany’s far-right Alternative for Germany (AfD) narratives.

Ukrainian President Volodymyr Zelenskyy seized on the reports to boast that the strikes had made social media less toxic, even as independent researchers and national research institutes found no evidence they specifically disrupted any Russian disinformation campaigns.

Mačák said that even if a data center is being used to “let’s say, run some trolls or these bot farms to interfere with elections abroad … that would not be sufficient.” In other words, hosting propaganda bots does not, by itself, make a data center a lawful military target.

The dual-use quandary has often focused on the targeting of energy infrastructure, which has been frequent in the Russia-Ukraine war. On Saturday, U.S. President Donald Trump urged Ukraine to stop striking Russian oil refineries, blaming the attacks for rising fuel prices. He has since called for both sides to halt attacks on energy infrastructure, although the existence of any ceasefire agreement remains disputed.

As data centers become increasingly central to national economies, they will become more consequential targets. A senior NATO official granted anonymity to discuss the matter told POLITICO that data centers are already considered potential targets and that the alliance is factoring their vulnerability into its planning.

NATO allies recognize that their data centers could come under attack in a conflict, the official said: “We would get it in a fight.”

Veronika Melkozerova in Kyiv contributed to this report.

BRUSSELS — European leaders came for the budget. They’re staying for everything else.

A two-day European Council starting Thursday was supposed to be all about the money. Instead, leaders of the 27 EU member countries are heading into one of their most crowded summits in years, with a succession of geopolitical crises threatening to hijack the EU’s carefully laid plans.

European Council President António Costa originally wanted the gathering to accelerate negotiations on the bloc’s next seven-year budget, hoping to seal a deal before elections in France, Italy and Poland in 2027 make an already difficult agreement even harder.

But the world had other plans. Soaring energy prices, tensions with China, Russia’s war in Ukraine (and U.S. President Donald Trump’s ambiguity over it), migration and turmoil in the Middle East have all elbowed their way onto the agenda.

The result is a two-day marathon covering virtually every major challenge facing the EU, from keeping European factories competitive to ensuring the world’s most important shipping lanes stay open.

For anyone trying to follow the action without spending 48 hours glued to Brussels, here’s your guide to what matters.

With the usual warning: EU leaders are notorious for letting discussions drag on or reshuffling the agenda — that’s what our liveblog is for.

Thursday at dawn: The pre-match warm-up

Before the summit even starts, Europe’s political families will gather at the crack of dawn.

The European People’s Party meets from 7:30 a.m. at the Sofitel Brussels Europe — the place to be if you can get in, given how many center-right leaders will be at the summit table.

The Socialists gather from 8:30 a.m. at PES headquarters, with Costa, Spain’s Pedro Sánchez and Denmark’s Mette Frederiksen expected.

Renew kicks off at 8 a.m. at the Palais d’Egmont, with French President Emmanuel Macron and top EU diplomat Kaja Kallas among those expected.

Even without leaders in the summit room, the far-right Patriots got a head start Wednesday, with Marine Le Pen delivering a scathing attack on the state of the EU.

Thursday morning: The energy blame game and China

Leaders kick off with discussions on Europe’s struggle for economic competitiveness, starting with energy — potentially the most politically explosive debate.

Governments want immediate relief from soaring energy prices as a result of the war in Iran, and will push the Commission to introduce new measures on top of the wide-ranging but somewhat toothless package it announced back in March.

Expect finger-pointing between capitals and Brussels over who should act, and for climate policies like the upcoming Emissions Trading System on heating and transport to come under fire.

Next comes China. European Commission President Ursula von der Leyen will brief leaders on efforts to tackle the EU’s enormous trade imbalance with Beijing, following trade chief Maroš Šefčovič’s negotiations with Chinese officials.

Leaders are expected to renew their demand for Brussels to “urgently” tool up with further trade defenses to prevent further deindustrialization of the bloc and to shield further industrial sectors from Chinese competition.

There’s also time for the familiar fight over EU red tape, with calls for Brussels to stop legislating.

Thursday afternoon: Costa’s budget gamble

This was supposed to be the main event. Leaders will discuss Ireland’s negotiating proposal for the EU’s 2028–2034 budget slashed by €159 billion from the Commission’s original proposal.

The positions are well known: The self-styled “modernists” — essentially the old frugals in disguise — want to contain costs, while countries benefiting from EU spending are determined to defend their allocations, under the less glamorous banner of “friends of cohesion.” Positions on new EU-wide taxes are similarly entrenched.

But the real story is timing.

Governments have watered down a commitment to secure an agreement by December, according to draft conclusions seen by POLITICO. Costa wants a deal before a series of high-stakes elections in 2027 complicate negotiations; capitals fear a deadline could weaken their bargaining power.

Most importantly, Costa is moving into the driving seat as budget talks enter their most politically sensitive stage. Watch for clues about a possible extraordinary summit in late November — and whether December remains a credible deadline or leaders quietly start preparing for negotiations to spill into 2027.

Thursday dinner: Making room for new members

Over dinner, leaders will tackle enlargement and the EU reforms needed to accommodate new members — after all, October’s summit has historically been devoted to the bloc’s hopefuls.

Montenegro is edging closer to completing accession negotiations, while progress elsewhere raises questions about whether the bloc is institutionally and financially ready to grow.

The Commission has outlined proposals to prepare the EU for enlargement, and leaders will discuss how internal reforms should accompany the accession process. Watch for a positive signal to Montenegro and commitments on reforming the bloc itself.

Friday morning: Ukraine’s wish list

The second day begins with Ukraine and an expected appearance by President Volodymyr Zelenskyy. Declarations of European solidarity are all but guaranteed. The more interesting question is what leaders are actually prepared to do.

Kyiv needs air defense systems, interceptors and financing as Russian attacks intensify. Leaders could discuss tougher action against Moscow’s shadow fleet and visa restrictions for Russians. And while EU financing for Ukraine has already been agreed for 2026, the country’s needs beyond that remain an increasingly pressing issue.

Could this mean reopening the debate on using frozen Russian assets to plug future funding gaps? That remains a question mark — although no immediate breakthrough is expected.

Friday pre-lunch: Defense and three dangerous waterways

Before breaking for lunch, leaders will turn to Russian hybrid attacks, maritime security and the Middle East.

In the Black Sea, recent attacks on civilian shipping threaten Ukraine’s crucial grain export route. Turkey has floated new protected shipping corridors, while countries including Romania and Bulgaria are pushing to give the issue more attention.

Will leaders back concrete measures or stop at condemnation? That’s the question.

Discussions then turn to the Middle East and two other critical shipping routes: the Strait of Hormuz and the Red Sea. The fallout from the Iran–U.S. war, increased Iranian attacks around Hormuz and renewed Houthi threats in the Red Sea have disrupted global trade and energy flows.

The EU’s Aspides naval mission is short of vessels, and Kallas wants governments to contribute more. Watch whether leaders put ships behind their promises.

The broader Middle East discussion will also touch on Iran, Yemen, the West Bank and Lebanon.

Friday lunch: The migration showdown

Spain’s Pedro Sánchez, Italy’s Giorgia Meloni and Denmark’s Mette Frederiksen are worth watching as leaders discuss migration over lunch, following the crisis in Spain’s North African exclave of Ceuta.

Irregular arrivals have been declining, but disagreements remain over border crises, solidarity and tougher migration controls.

And with an election looming in Spain on Nov. 29, this could be Sánchez’s last tango — and a final chance to defend his government’s handling of the crisis while venting his frustration over the lack of European solidarity.

Watch whether the debate produces agreement or another political clash, as happened last time.

Bonus: Two pressers are better than one

With such a packed agenda, leaders won’t wait until the end of the summit for the usual joint press conference by von der Leyen and Costa. An additional one is planned for Thursday, after the budget debate.

On Thursday, watch Costa’s language on the budget deadline and whether von der Leyen offers any concrete measures on energy prices.

On Friday, look for promises of additional support for Ukraine, whether commitments on maritime security come with actual ships and resources — and commentary on how the migration showdown over lunch went.

Martina Sapio contributed to reporting.

BRUSSELS ― Political pressure is leaving Emmanuel Macron and Friedrich Merz poorly placed to break the deadlock over the EU’s next seven-year budget.

As EU leaders gather for a two-day summit in Brussels from Thursday, the heads of the bloc’s two largest countries hold the keys to breaking the impasse between capitals that has persisted for months, as a Germany-led group advocating a smaller budget clashes with those like France which are resisting reductions.

“Delays and persisting divisions in the Council [representing EU governments] are worrying,” said Siegfried Mureșan, co-leading the European Parliament’s work on the MFF, the multiannual financial framework. “The EU budget can only be built through compromise … The faster we adopt the budget, the faster we can implement it and become more competitive, safer, help farmers and researchers and protect our borders and cyberspace.”

Sealing agreement on the EU’s long-term central budget, worth approximately €2 trillion, is the biggest challenge over the next few months facing leaders, all of whom must sign up to the final numbers. While it isn’t just up to Macron and Merz, getting the chiefs of the bloc’s two most powerful countries to overcome their differences would be a massive step in making all the pieces of the jigsaw slot into place.

But with Macron soon to leave office and Merz under severe pressure domestically, officials and diplomats in Brussels, Paris, and Berlin are playing down hopes of a Franco-German breakthrough this week.

“If the French and German leaders come hand in hand, I think that could change the game,” an EU diplomat, granted anonymity to speak frankly, said. “You need [Italian Prime Minister Giorgia] Meloni and [Polish Prime Minister Donald] Tusk, but it starts with Merz and Macron.”

While Merz and Macron may talk bilaterally during the summit, according to an Elysée official, there were no firm plans for a more formal sit-down, two EU diplomats said, adding they were expecting them to use the two-day meeting to hash out positions.

Domestic political weakness makes both leaders less likely to yield ground, three EU diplomats said.

Backfiring

For the French president, who leaves office next year, the fear is that making big concessions — like accepting cuts demanded by Berlin — could be weaponized by presidential candidates vying to replace him.

“Macron should not appear too conciliatory” in budget talks, said an ally of the French president. “It would backfire in the presidential campaign.”

Indeed, Macron may be wary of striking a deal that could lead to attacks from far-right leader Marine Le Pen or far-left rival Jean-Luc Mélenchon, both of whom argue that France receives too little value for its contributions to the EU pot.

During a press conference in Brussels on Wednesday evening, Le Pen accused negotiators of speeding up talks as “an attempt to stifle future democratic choices before they even take place” — effectively warning Macron against locking in an agreement before France’s April presidential election and votes in other major EU countries, such as Spain, which goes to the polls next month, and Italy, which is due to hold a poll next year.

“All this is not serious,” Le Pen told reporters on the 26th floor of The Hotel in Brussels.

It’s complicated

Merz faces similar political pressures.

Following humiliating state election defeats to the far-right Alternative for Germany party, the Chancellor is wary of concessions that could be framed as sending more taxpayer money to Brussels. Berlin prefers no deal at all to one that increases the overall budget, Merz said.

But Paris and Berlin’s positions may not be as far apart as public statements suggest.

“It’s complicated because France and Germany both need to step outside of their comfort zone,” said the Macron ally. “But it will end with a deal between France and Germany,”

France’s Europe minister Benjamin Haddad told reporters on Tuesday that discussions should focus on raising money via taxes, or “own resources” as they’re known in the EU —such as online gambling levies—rather than “massive cuts.”

However, Paris also wants to “stabilize national contributions” ― in other words, keep its own payments level.

Berlin was “open to examine new own resources, but we are more skeptical than the French that it will generate enough money,” a German official said.

France is betting that when push comes to shove, Merz will give in to pressure from other countries — and German captains of industry — to abandon his demands for far-reaching cuts.

“I see that there is also a real debate in Germany as well on the fact of having a position that would only be focused on cuts to the detriment of future policies,” an Elysée official said Wednesday. This week, Germany’s industrial lobby BDI and top industry groups urged their government to defend a more ambitious EU budget.

Macron and Merz showed unity earlier this month by jointly urging the European Commission to toughen its stance on China. But they still struggle to agree on another major deal—first reported by POLITICO in July—where Berlin accepts stronger “Made in Europe” rules in exchange for France backing relaxed car emission targets and the 2035 combustion engine ban.

EU Industry chief Stéphane Séjourné told POLITICO on Tuesday he supported the deal to finalize both files. Macron recently called the agreement “imminent,” suggesting progress depended on German coalition talks. But their failure to present an agreement at this week’s Paris car show confirms Paris and Berlin still disagree on terms, with the Elysée confirming negotiations remain ongoing.

Ukrainian frontline soldiers are alarmed that Elon Musk’s Starlink satellite service is reportedly being restricted on fast-moving military platforms, warning of severe operational consequences.

“This is comparable to a nuclear strike against us. All operations are on hold. This will cost many of us our lives,” an experienced Ukrainian officer told POLITICO and the Axel Springer Global Reporters Network.

The officer commands a medium-range drone strike unit in southeastern Ukraine. The unit relies heavily on Starlink for the operation and navigation of its American-made Hornet drones, used to strike targets at a range of up to 150 kilometers.

“Since last night, all Starlink and Starshield terminals used by our forces have been subject to a speed limit of 100 kilometers per hour,” the officer said.

POLITICO talked to three frontline soldiers, who all spoke on condition of being granted anonymity, as well as a Ukrainian defense ministry spokesperson and the EU’s top defense official.

The reported restrictions have revived a question Ukrainian commanders have worried about for years: how much of the country’s battlefield communications can rely on a service controlled by a U.S. company.

Ukrainian soldiers say the restrictions have halted some medium-range drone strikes over Ukraine, disrupting attacks on Russian logistics and leaving frontline Ukrainian troops with less support. The scale of the disruption — and whether it was deliberate — remains unclear.

In a comment on X, Musk said: “Starshield systems are owned and controlled by the US government. Any limits on speed or usage are decided by the US military and ultimately POTUS,” referring to the Starshield division of Starlink that is used for military purposes.

“Starlink is a commercial service owned and controlled by SpaceX,” he added. “Usage of Starlink is limited to civilian or defensive activities and cannot be used for offensive military action, as doing so would be inappropriate for a commercial company.”

Mykhailo Fedorov, Ukraine’s former defense minister who has good contacts in Silicon Valley, said late Wednesday: “Starlink connectivity at speeds of up to 160 km/h is being restored. Removing Starshield’s speed limit entirely is now critical for Ukraine’s defense.”

The White House and the Pentagon did not immediately respond to a request for comment.

The restrictions have brought “all medium-range strike operations to a complete halt,” the officer said, including those using mesh-based systems. These rely on a single Starlink-equipped UAV to receive and relay signals to other drones connected through a mesh network, allowing them to strike targets deep inside Russian-held territory or in areas heavily protected by Russian electronic warfare systems.

Such targets include the Donetsk region, the strategically important Novorossiya highway linking Russia to Crimea, the Crimean Peninsula itself, the Kerch area and the Black Sea.

“We can no longer fight effectively to support our infantry on the battlefield. We can no longer strike multiple-launch rocket systems, North Korean-supplied heavy self-propelled artillery positioned deep behind enemy lines, ammunition depots, command centers and other targets,” the officer said.

“The Ukrainian frontline is very much dependent on Starlink-operated mid-strike drones,” Iryna Terekh, CEO of Ukrainian missile-maker Fire Point told POLITICO.

Ukraine’s devastating campaign

For months, Ukrainian medium-range strike drones have inflicted significant damage on Russian logistics in frontline regions. They have disrupted the supply of fuel, ammunition and other military equipment, slowing Russia’s advance. 

The officer said he feared that the Starlink restrictions will give Russian troops a critical opportunity to strengthen their positions.

“Starting today, the enemy will build up its logistics routes to Crimea to reinforce its forces there,” he warned.

Two other Ukrainian frontline soldiers operating ground robots and conventional first-person-view drones in the Donbas confirmed to POLITICO that Starlink services for Ukrainian units were abruptly restricted on Wednesday. 

“On the night of October 14, without prior notice to the Defense Forces, SpaceX unilaterally restricted the operation of Starshield terminals while in motion,” a Ukrainian defense ministry official told reporters in Kyiv. 

The official added that the problems occur at speeds varying from 72 kph to 161 kph, “depending on the specific vehicle and unit.”

The slowdown in Starlink terminals comes as U.S. President Donald Trump exerts fierce pressure on Ukraine to stop attacking Russian refineries. That follows his deal with Russian leader Vladimir Putin to release diesel onto global markets — part of Trump’s effort to reduce fuel prices ahead of next month’s U.S. midterm elections.

“Obviously, this action cannot be a coincidence and is associated with the current political situation,” Ukrainian presidential adviser Serhii Beskrestnov said in a Facebook post.

Asked about the rising American pressure on Ukraine, EU Defense Commissioner Andrius Kubilius said at a POLITICO event on Wednesday: “Political development sometimes makes strange influence. Elections are coming.”

“We are quite dependent on American space capabilities,” Kubilius acknowledged. “The answer to that situation is to develop our own capabilities.”

The Starlink slowdown was condemned by one of Ukraine’s key European allies.

“Hey, @elonmusk, big man, are you playing politics with your products again? As your European customers, we are watching you,” wrote Polish Foreign Minister Radosław Sikorski.

Ukraine depends on Starlink

Since Russia launched its full-scale invasion of Ukraine, Starlink has become central to Kyiv’s war effort. In the spring of 2022, Ukrainian defenders trapped in the besieged city of Mariupol used satellites operated by SpaceX to send messages to the outside world. Ukrainian units relied on the system to coordinate operations during the fierce urban fighting around Bakhmut in 2023.

To this day, soldiers use Starlink to rapidly adjust artillery fire and navigate naval drones during attacks on Russia’s Black Sea Fleet. Ukraine’s former army chief, Valerii Zaluzhnyi, once praised the terminals for their “extraordinary utility.”

That reliance always carried risk. In the early months of the war, Starlink reportedly shut off terminals that were going to be used in a naval attack on the Russian fleet.

But SpaceX has also acted to favor Ukraine. In February, SpaceX shut down access to Starlink terminals being used illegally by Russia, causing immediate chaos. Ukraine then ramped its own use of the terminals.

Kyiv’s armed forces began widely equipping medium-range strike drones with Starlink terminals. Without them, operations would become considerably more complex. The military would, for example, have to calculate terrain elevations and antenna availability itself and install additional communications equipment.

“Starlink allows you not to have to deal with radio physics,” a Ukrainian officer with the call sign Jura said in August. “Starlink allows operators to maintain a live video connection with a drone until shortly before impact.”

Starlink can also provide so-called “synthetic GPS coordinates,” which can help drones navigate when conventional GPS signals are jammed.

But Ukrainian officers feared that decisions made in Washington or in the executive offices of American companies could suddenly weaken Ukraine.

“Many of my colleagues and I myself are very nervous about the question of how we would operate without Starlink,” Jura said. “We have discussed this question several times among our officers: ‘What if Elon Musk or someone at SpaceX switches it off?'”

As Trump has ramped up pressure on Kyiv in recent weeks, Ukrainian officers reported growing problems with Starlink.

One Ukrainian drone pilot, who operates medium-range strike drones, reported severe connectivity problems on Sept. 11 and 12, as well as further disruptions on Sept. 17. He said soldiers from several Ukrainian units had experienced similar problems.

The incidents occurred shortly after U.S. envoys Steve Witkoff and Jared Kushner had concluded visits to Kyiv and Moscow. “After few days, the normal work with Starlink come back. But I believe that was the signal,” the pilot said.

He argued that Russian jamming equipment could not plausibly have produced such geographically consistent disruptions across multiple sectors of the front.

“So that was, I guess, administered from some office,” he said. POLITICO could not independently establish whether the disruptions resulted from deliberate restrictions imposed by the American satellite provider or another technical cause.

The incidents have reinforced concerns among Ukrainian military personnel about their dependence on American-controlled technology.

“The reason is politics and the American option to ‘switch off’ or critically decrease” U.S. systems, the pilot said.

Veronika Melkozerova reported from Kyiv. Daniella Cheslow and Audrey Decker contributed reporting.

This article has been updated.

BRUSSELS — The European Commission’s cybersecurity division is rolling out a plan to use artificial intelligence to respond to high-risk cyberattacks, according to a document obtained by POLITICO.

The undated document, written by the Commission’s IT department, sets out how to prepare the EU executive’s cyber defenses for “emerging AI-driven threats.” It proposes an action plan to shore up defenses in light of AI, with the most urgent move being the speed of response to attacks.

Governments have rushed to grapple with the rising threat brought by AI’s ability to expose and exploit cybersecurity vulnerabilities. Incidents like OpenAI’s accidental intrusion into Hugging Face have prompted calls, including at the highest political level, to be more wary of advanced AI models.

Being able to respond quickly to cyberattacks is most crucial in “high-risk scenarios,” the EU executive’s internal cyber defenders warned, saying that the ability to detect an attack is “not sufficient if containment measures cannot be taken quickly enough.”

Officials at the in-house IT department, DG DIGIT, are planning to use automated “protective measures” in specific high-risk scenarios, it said. Those scenarios were redacted in the document, which was provided to POLITICO in response to a freedom of information request.

The plan does not amount to “uncontrolled automation” and there will be strict controls in place including human oversight, according to the document.

As well as laying out the response plan, the document sets out the cybersecurity challenges the Commission faces from AI.

The most advanced AI models are expected to “significantly increase the speed, scale and adaptability of cyberattacks” and the Commission must therefore have defenses in places for an environment where “attacks are likely to become faster, more frequent and more scalable,” it said.

Risks include situations where “malicious activity occurs outside EC [European Commission] normal working hours, spreads more rapidly across systems, or results in large-scale exfiltration or operational disruption before manual intervention can be organized by EC,” they said.

The Commission’s cyber division has sought approval internally to move ahead with the plans, it said, though it’s not clear whether the plans have yet been put in place.

The Commission didn’t respond to a request for comment.

Flock would not say if CEO Garrett Langley would take a pay cut following the reduction in workforce.