At the Munich Security Conference 2025, global defense paradigms began to shift, placing cybersecurity at the heart of Europe’s quest for strategic autonomy. The EU faced the urgent tasked of reducing its reliance on the US and asserting a stronger, more independent voice, as NATO navigates its most defining challenge since WWII.
It is said that to truly appreciate an Impressionist painting, the viewer must stand seven to ten meters away. If you get too close, all you can see are blurred strokes, the details remain unrevealed. The same seems to be happening in the current debate on European security -and even on the emerging international order. We are still too close to discern its full colors; what we need is a certain distance that will allow us to grasp the reality of the whole painting.
The Evolving Landscape of International Security
In the two months following the Munich Security Conference (MSC), the global defense landscape has experienced profound transformations. The security framework established after WWII, which allowed Europe to reap the so-called peace dividends, is now being challenged by its main guarantor, the United States. The concept of European defence, which faltered early in the process of European integration and has since advanced only slowly, is re-emerging in the wake of a new crisis shaping the future of Europe with a war on its doorstep. Geopolitical dynamics are evolving at a rapid pace, demanding a reassessment of existing structures and potentially the emergence of a new world order.
The intervention of the US Vice President J.D. Vance at the MSC triggered a new awakening in Europe that is affecting the concept of security in its broadest spectrum, including cyber defense capabilities, as already foreseen in the Joint White Paper for European Defence Readiness 2030.
Cybersecurity at the Heart of Europe’s Defense Debate: Lessons from the 2025 Munich Security Conference
n an era where digital threats have become a substantial part of hybrid wars, it comes as no surprise that cybersecurity tops agendas- from EU defense debate to Spain´s latest industrial and tech plan where it ranks as the second-largest investment priority.
The 2025 MSC underscored this reality, highlighting the growing geopolitical risked posed by tech dependencies. The discussions in Munich made it clear that addressing cybersecurity is key to safeguarding Europe’s digital sovereignty and achieving EU strategic autonomy.
At the Munich Security Conference 2025, global defense paradigms began to shift, placing cybersecurity at the heart of Europe’s quest for strategic autonomy
NATO’s security umbrella
But where does this leave us? As the main security provider of the Euro-Atlantic region, NATO has played an ’increasingly crucial role in developing cyber resilience in the EU. After the cyber-attacks against Estonia, the Alliance recognized that large-scale cyberattacks could trigger Article 5[1] thereby underscoring the evolving nature of warfare. However, this reliance on NATO and, by extension, U.S. capabilities, has after the opening speeches at MSC, highlighted a significant vulnerability for European nations in the new security context.
As the Georgetown Journal of International Affairs[2] has put it: “NATO ensures its cyber security through collective action among its permanent members who respond based on the depth of the attack or vulnerability.” The debate on the need to develop cybersecurity capabilities within NATO began more than two decades ago with the Prague Summit Declaration. The 2014 Wales Summit ratified its inclusion within the parameters of Article 5, understanding that the impact on cyberspace could have consequences equivalent to a conventional attack. Two years later, cyberspace became the fourth operational domain alongside air, land, and sea (space would follow later during the 2019 London Summit). NATO’s main capabilities in cyber defense include:
1. Cyber Defense Policy and Strategy
2. NATO Cyber Rapid Reaction Teams (CRRTs)- teams that can be deployed to help allies after a cyberattack.
3. Cooperative Cyber Defense Centre of Excellence (CCDCOE)- a training centre in Estonia that carries out the world’s largest cyber defence exercises.
4. Cyber Operations Integration- since 2018 it is integrated into military planning.
5. Allied Joint Force Command (JFC) Cyber Integration- cyber operations are also coordinated at strategic commands.
At his first meeting of NATO foreign ministers, U.S. Secretary of State Marco Rubio dismissed doubts about U.S. commitment to the Alliance, calling them “hysteria.” However, the current international climate and the aggressiveness of U.S. trade policy raise the need for Europe to regain strategic autonomy in all areas related to security. It is crucial for Europe to fully understand its technological dependencies on security when setting new investment priorities.
The EU is highly dependent on the US and NATO, especially in terms of high-end technology and strategic capabilities. NATO is the guarantor of European defense, and its capabilities are led by the United States, especially in terms of intelligence, surveillance, missile defense, interoperability, and more advanced technology (satellite systems, next-generation drones, AI applied to defense equipment, etc.). If we focus on cybersecurity, however, this dependence lessens, although the EU remains deficient in real-time joint response capabilities, cyber tools, and digital infrastructure (for example, chips and cloud services are dominated by American technologies such as Microsoft, Google, and Amazon).
NATO’s motto says that “the NATO 2030 initiative is about making sure that our Alliance remains ready today to face tomorrow’s challenges” but NATO is already facing those challenges today.
EU attempts at strengthening its strategic autonomy
The EU has become increasingly active in promoting its strategic autonomy and prioritizes reducing its dependence on external actors. These efforts have recently multiplied following the vulnerabilities exposed during the pandemic, the outbreak of the war in Ukraine, or Trump’s arrival at the White House.
One of the major milestones in defense has been the launch of the European Defense Fund (EDF), with an endowment of €8 billion (2021-2027). The primary purpose of this fund is to support investments in R&D with key projects in drones, cyber defense, AI, and space. Another major achievement has been the launch of the Strategic Compass (2022), considered the first white paper on defense and which sets a series of objectives for 2030 (but so far, these efforts have led to few tangible achievements).
The EU has also taken small steps in cybersecurity and digital sovereignty. This effort began as early as 2004, with the creation of the European Union Cybersecurity Agency (ENISA), the EU’s Rapid Response Force (made up of experts from participating countries to respond in the event of a significant cyber incident), the Cybersecurity Act (standardized cybersecurity certification framework), the GAIA-x project (cloud services), and directives such as NIS2 to strengthen the resilience of its digital services in eighteen critical sectors. In the last few months, the pace has quickened, and the MSC was a turning point.
Conclusion
For several years, the world has been witnessing the return of great power competition, with technology as the main battlefield. As shown at the MSC 2025, the rules and alliances in the field of security has dramatically changed, with the rise of hybrid warfare extending the domain of defense to the cyber realm. In this changing landscape, actors are forced to reassess their capabilities and relative position on the global stage. The EU is one of those in need to seek a new voice, space, and leadership. In her first term, Von der Leyen already raised the need for a geopolitical Europe; the former EU High Representative, Josep Borrell, spoke of the importance of speaking the language of power; and the debate on strategic autonomy has spread to all areas. The shadows in the transatlantic relationship explicitly raised by the MSC are leading the EU to consider its dependencies: in the field of defense, dependence is very high on key issues, while in cybersecurity it can be described as moderate. For now, perspective is needed as when we look at impressionistic paintings. The coming months will be crucial to clarifying the contours of this fundamental debate, both in Brussels and in the capitals, and to understanding possible progress and investment priorities. Indeed, the EU budget is finite, and reshuffling investment priorities is a delicate exercise that EU members are battling with. Ultimately, the way in which Europe manages these dilemmas related to security and tech dependences will determine its global influence and shape the future of the transatlantic alliance.
Lucia de Luca is an executive and strategist operating at the intersection of outreach, policy, and societal impact with a focus on economic and social equality. She partners with diverse international stakeholders to enhance reputation and deliver actionable solutions, integrating geopolitical insights to guide decision-making in complex global environments. Former Managing Director of Women Political Leaders (2019–2021), Lucia currently serves as Global Chair for Pay Parity & Corporate Transformation at G100, where she champions inclusive leadership and systemic change.
Arantza Caballero González Rojas is a journalist and international affairs specialist with a deep focus on diplomacy, global governance, and strategic communication. Trained in multilingual and multicultural environments, she brings sharp analytical skills and narrative insight to complex global issues. Her work bridges policy, storytelling, and cross-border understanding.
Be First to Comment