Bomb threats today on planes and hacker attacks in Europe | Tajani: hybrid warfare, the G7 in Paris should address the issue. Eurocontrol: “Alerts on 35 European flights over three days”. Cyberattack on the Brenner Tunnel company

Across three days, alerts affected 35 European flights. The source describes bomb warnings in European skies, including new threats sent by email. It does not say that explosives were found or that every warning was confirmed as genuine.

Separately, the company operating the Brenner Tunnel was hit by a cyberattack. The article does not explain which systems were accessed, whether tunnel traffic was interrupted, or what damage occurred. It identifies the target as a company responsible for a major transport link.

The combination matters because it involves both physical safety fears and digital disruption. Italian officials described the broader pattern as possible hybrid warfare. European services were also reported to be investigating a possible Russian connection, but the source presents that as an investigative lead, not an established conclusion.

The figure reported by Eurocontrol is 35 European flights. The alerts occurred over three days, according to the source. This is the clearest measure of the episode’s scale and shows that warnings were spread across multiple flight operations rather than limited to one aircraft.

The source links the alerts to bomb threats, including threats sent by email. It does not provide a breakdown by airline, airport, country, route, or whether individual aircraft were searched. It also does not say how many alerts proved false or unverified.

Even without those details, 35 cases in three days can place pressure on aviation systems. Each warning may require assessment and coordination. Authorities must balance caution with the need to keep flights moving. The figure also helps explain why officials discussed the issue as a European security matter and raised it in connection with hybrid warfare.

A cyberattack is an intentional effort to gain unauthorized access to, damage, manipulate, or disrupt digital systems. A company operating a tunnel may depend on networks for administration, communications, monitoring, maintenance, and coordination. If those systems are compromised, staff may lose reliable access to information or services.

The mechanism can vary. Attackers might steal access credentials, overload systems, encrypt data, alter information, or interfere with connected equipment. Any response must protect people first. Operators may isolate affected networks, switch to manual procedures, and investigate what happened. The article reports a cyberattack against the Brenner Tunnel company but does not identify the technique or its operational effects.

That uncertainty is important. A cyberattack does not automatically mean the tunnel stopped operating. It does mean a critical operator had to treat its digital environment as a security problem. The incident therefore highlights how transport safety now depends partly on trustworthy computer systems.

Hybrid warfare generally means combining military and non-military tools to pressure an opponent. These tools can include cyber operations, disinformation, coercion, sabotage, and threats that create fear or confusion. The aim may be to weaken confidence, strain institutions, or test responses while keeping responsibility difficult to prove.

Bomb threats can disrupt aviation even when no device is found. Cyberattacks can target the digital systems of critical infrastructure. Together, they can create simultaneous physical and digital pressure. The source reports both kinds of incident and quotes Tajani describing the issue as “guerra ibrida.” Crosetto called it a “perfect crime” without naming a culprit.

That label remains a political and analytical assessment, not proof of one coordinated operation. The source says European services are investigating a Russian lead. Until investigations establish links, the safest conclusion is that officials are examining whether separate incidents form part of a broader campaign.

A bomb alert can trigger checks, evacuations, route changes, delays, cancellations, and extra communication. Repetition magnifies those effects. Passengers may miss connections or lose confidence in travel. Airlines and airports must deploy staff, coordinate with security services, manage aircraft and passengers, and explain uncertainty to the public.

For public authorities, every warning creates a difficult choice. Ignoring a credible threat could endanger people, while treating every unverified message as genuine can overwhelm emergency systems. False alerts may also impose costs and give senders influence without needing to cause physical damage. The article identifies threats sent by email but does not list specific disruptions.

The reported total—35 European flights in three days—shows why the issue can become systemic. Authorities may need shared assessments and faster attribution. Airlines and airports may strengthen procedures, but excessive responses can also compound disruption. The source does not say which consequences actually occurred, so these are likely effects rather than documented outcomes.

Authorities investigating digital threats usually preserve affected systems, examine logs, trace message and network infrastructure, and compare techniques with known campaigns. They may also analyze the wording, timing, targets, and distribution of emails. Intelligence agencies can add information from other investigations, while police work to identify suspects and support legal action.

Attribution is difficult because attackers can hide behind compromised computers, false identities, or infrastructure in other countries. Investigators therefore look for several independent clues rather than relying on one address or one message. They also assess whether the threats and the Brenner Tunnel cyberattack share technical or operational links.

The source gives only a limited update: the Financial Times reported that European services were investigating a Russian lead. That wording signals an avenue of inquiry, not a confirmed finding. Further evidence would be needed to connect Russia, a specific group, or the separate incidents. The article does not report a final attribution.

Modern transport depends on connected systems, from communications and scheduling to monitoring and administrative control. That connectivity improves efficiency but creates more points that attackers may try to access or disrupt. Transport infrastructure is also highly visible. A threat aimed at one operator can affect travelers, workers, businesses, and government agencies.

The source illustrates this exposure through two targets: 35 flights received alerts over three days, and the Brenner Tunnel operating company faced a cyberattack. The incidents involve different mechanisms, but both can force organizations to verify information, coordinate responses, and manage uncertainty. The article does not identify the tunnel systems affected or report flight cancellations.

These targets matter in modern conflicts because disruption can produce effects without a conventional attack on physical structures. It may test defenses, consume resources, and undermine confidence. Tajani and Crosetto framed the wider concern as hybrid warfare, while European services examined a possible Russian link. The investigation’s outcome remains unknown.