RISK OF ATTACK AND SABOTAGE IN DUBLIN AHEAD OF THE EUROPEAN POLITICAL COMMUNITY (EPC) SUMMIT; ENHANCED MONITORING AND SECURITY PERSONNEL COORDINATION NEEDED
Basma Aamri, Hermione Goux, Rebecca Davis, Gehad Ahmed, Vanessa Neubauer, WATCH/GSOC Team
Chloe Pentz, Editor; Elena Alice Rossetti, Senior Editor
October 30, 2026
Convention Centre Dublin, Ireland[1]
The Counterterrorism Group (CTG) is issuing a FLASH ALERT to local law and security enforcement, international governments, and EU leaders attending the European Political Community (EPC) summit and the EU leaders’ informal meeting scheduled for November 12 and 13 in Dublin, Ireland, following An Garda Síochána’s security threat warning.[2] Gardai’s threat assessment outlined a “strong possibility” of an attack during these two upcoming events, such as potential drone incursions, sabotage, or cyber threats.[3] The scale of the events and the presence of leaders like Ukraine’s President, Volodymyr Zelensky, prompted numerous security measures in the city, including the initiation of Operation Cuspoir Stair, which involves an increased Garda presence at Shannon Airport and around the event venues such as Convention Centre Dublin.[4] Ireland’s Tánaiste, Simon Harris, stated that the security of these events has been taken “extraordinarily seriously,” highlighting the country’s increased defense capabilities, including sonars and radars.[5] The gathering of over 50 government leaders, all 27 EU heads of state and European Parliament staff, represents a considerable security risk. Intelligence analysts designate this threat climate as “substantial,” reflecting significant protection needs across Dublin.[6]
CTG is on HIGH alert for an organized attack following an An Garda Síochána security threat assessment. Hostile foreign and domestic actors will VERY LIKELY search for logistical and labor fractures to exploit gaps and to conduct disruptive hybrid actions against visiting delegations. Commercial enterprises, supply chain, and commuter networks across the city center will VERY LIKELY experience operational friction, transit shutdowns, and localized cordons through November 14, with structural defense dependencies LIKELY persisting after the diplomatic events conclude. Potential work-to-rule over Garda working conditions and strained operational capacities under emergency surge mandates will VERY LIKELY compound security liabilities, with a ROUGHLY EVEN CHANCE of prompting internal police friction and staffing shortages.
Introduction
On October 30, 2026, Ireland's national police and security service, An Garda Síochána, announced heightened concerns about the EPC summit in Dublin on November 12 and a subsequent meeting of EU leaders, including Ukraine’s president Volodymyr Zelensky, on November 13.[7] All An Garda Síochána leave between November 10 and 14 is cancelled to support the security operation, Operation Cuspoir Stair, with deployments concentrated around Dublin’s Convention Centre, the designated venue for both events, and Shannon Airport.[8] Operation Cuspoir Stair aims to mitigate cyber and physical threats.[9] Potential sabotage, specifically cyber-attacks targeting critical infrastructure and event operations, is a primary concern, alongside the risk of drone attacks and other physical security incidents.[10]
Analysis
Drone Incursion Risks
Adversarial actors seeking to disrupt the EPC summit and additional meetings will very likely use drone incursions as a tool for reconnaissance and overwhelming officials. The lack of technological sophistication required to operationalize and launch drones will have a roughly even chance of allowing threat actors to survey high-priority locations, including Shannon Airport and the Dublin Convention Center. Increased surveillance and intimidation operations will very likely impact routine airspace and transportation activities, likely delaying government leaders’ transit to the summit. An enhanced drone presence will very likely pressure state officials, security forces, and infrastructure operators, likely increasing the potential for disruptions to the operational consistency of summit proceedings. A surge in drone use as officials travel between sensitive locations will very likely aim to overwhelm the Gardai’s deployed counter-unmanned aircraft systems, likely expanding the scale at which security forces expect signal jamming and plan tracking capabilities to identify and intercept rogue threats. Strained anti-drone capabilities among partnered security personnel, including the An Garda Síochána and the Irish Defense Forces, will likely reveal gaps in detection and defense preparation, likely enabling threat actors to exploit weaknesses exposing international government targets. Unidentifiable drone operations will very likely contribute to a volatile security environment, likely challenging the Gardai’s ability to promptly identify legitimate threats, including civilian drones near the no-fly zone and airport ground equipment lights, hindering timely response and amplifying the threat actors' disruptions.
Sabotage and Cyberattack Risk
Hostile state-sponsored Advanced Persistent Threats (APTs) and aligned proxy networks will very likely launch coordinated cyber disruptions against Irish critical infrastructure during the summit. These threat actors will very likely target public transit telemetry, airport flight-management networks at Dublin Airport, and municipal government portals to induce civic paralysis and divert emergency response units. Russian-aligned hacktivist collectives will almost certainly deploy sustained Distributed Denial-of-Service (DDoS) campaigns and website defacements against high-visibility state agencies, very likely to attack pro-Ukraine parties and show security vulnerabilities in Western societies. Criminal syndicates and state proxies have a roughly even chance of deploying disruptive wiper malware and ransomware against third-party logistics and utility vendors supporting the summit perimeter. Dedicated closed-loop communications protocols will likely enable sustained isolated diplomatic command lines, likely avoiding a complete breach. The National Cyber Security Centre (NCSC) and frontline An Garda Síochána command units will very likely experience severe operational friction from these concurrent digital assaults. State-sponsored cyber operatives will likely compromise third-party supply chain contractors servicing the Convention Centre Dublin to establish persistent backdoors into connected municipal networks. Critical infrastructure operators and municipal transit authorities will likely face physical bottlenecks should threat actors compromise automated traffic and scheduling systems. Malicious actors will almost certainly escalate credential-harvesting and targeted phishing campaigns against Irish defense, law enforcement, and civil service personnel throughout the operational window. Compromised accounts will very likely provide adversaries with unauthorized access to restricted diplomatic schedules and confidential inter-agency communications, very likely elevating the risk of physical security breaches and strategic espionage.
Protests
The high-profile summit and informal meetings will very likely attract protests and demonstrations from across political ideologies, including anti-Ukraine, anti-EU, and pro-Palestine sentiments. Anti-Ukraine and far-right groups will very likely exploit the event to push their agendas, likely focusing on sensitive domestic issues, including housing and limited national budgets, to raise public sentiment favoring cutting off European subsidies and support to Ukraine. Anti-EU and pro-nationalist groups will very likely express discontent with the EU Migration Pact and existing defense partnerships, likely using demonstrations during the summit meetings to demand the reevaluation of policies they deem to compromise sovereignty. Pro-Palestine demonstrations will likely involve a wider demographic, including left-wing, human rights activists, and youth, likely questioning EU policy toward Palestine and the Gaza Strip. Across the demonstrating groups, protesters will very likely leverage extensive media coverage for the EPC summit to obtain global attention, likely increasing the number of individuals who congregate in proximity to the summit facilities. Clashes between ideologically and politically opposed groups and confrontational stances between protesters trying to access restricted areas and police officers will very likely increase the chance of peaceful protests turning violent and of acts of vandalism, likely threatening summit attendees and residents. Increased protests will very likely demand a heightened Gardai presence, likely challenging the protection of visiting delegations and stretching security resources thin as police work on mitigating indirect threats.
Gardai
Gardai overstretch will likely become one of the weak internal points in the events’ security operation, likely lowering force readiness in case of attack despite the wider security plans. Cancelled leave and long shifts will very likely produce tiredness that builds up gradually, affecting performance by eroding alertness and judgment during the events, while the need for increased Gardai presence at key locations will likely limit backup forces in case of attack. This pressure will very likely force commanders to prioritize the most prominent venues and delegations, likely moving vulnerabilities to the edges of the operational areas and leaving protection teams and other protection agencies to fill gaps. This situation will likely blur security responsibility in some sectors, very likely weakening coordination across security actors. In this complex multi-agency scheme, some security personnel will have a roughly even chance of mistakenly assuming others will cover the gaps, likely resulting in delayed or insufficient team communication, slow response times, and unwatched areas. Minor failures will very likely appear as major systemic breakdowns to the attendees and public, likely making delegations question Ireland’s control and creating doubt regarding the safety of future gatherings in the long term.
Recommendations
The Counterterrorism Group (CTG) recommends that the Irish government encourage inter-agency cooperation and information sharing across agencies involved in the safeguarding of critical infrastructure, summit facilities, and visiting delegations to ensure optimal awareness of emerging threats.
An Garda Síochána and the Irish Aviation Authority (IAA) should strictly enforce and update no-fly zones covering low-to-mid-altitude airspace around Dublin’s Convention Centre, Dublin Airport, and Shannon Airport transit corridors to detect and intercept unauthorized unmanned aerial systems (UAS).
An Garda Síochána should establish a unit for monitoring social media and chat platforms to assess where activists and agitators may congregate during the summits and inform localized security personnel of heightened risks of civil disruptions.
An Garda Síochána should organize forces and increase cooperation with other law enforcement personnel to allow security appointees appropriate time to rest and ensure effective threat mitigation and emergency response throughout the summit and meetings through staggered shifts.
Local law enforcement and venue security teams should establish visible vehicle checkpoints and clear standoff perimeters along central transit routes to deter unauthorized access and manage protest bottlenecks without pulling critical static guard personnel from primary diplomatic sites.
Local businesses and non-essential personnel in central Dublin should implement remote work arrangements and reroute supply deliveries away from summit cordons through November 14 to alleviate civilian congestion and preserve emergency access lanes.
International government leaders, EU heads of state, and European Parliament staff should discuss elevated risks to security with their delegations and security details of potential threats to inform contingency plans in case of an emergency.
Foreign security and intelligence agencies should plan to coordinate with Irish services to reinforce protection efforts for their respective nationals.
CTG’s WATCH/GSOC Team assesses that the current threat climate is HIGH due to risks of potential drone incursions, physical sabotage, cyberattacks, law enforcement disruptions, and civil unrest during the Dublin summit. Hostile state actors and intelligence operatives will very likely try to deploy UAS across Shannon and Dublin Airport transit corridors, and the Dublin Convention Centre to conduct surveillance, overwhelm domestic counter-UAS intercept systems, and provoke widespread route delays. State-sponsored APTs and Russian-aligned hacktivist networks will almost certainly launch coordinated cyberattacks, including intense DDoS campaigns and third-party contractor breaches, to paralyze municipal transit operations, disrupt airport flight communications, and divert emergency response teams. Activist factions, such as anti-Ukraine and far-right demonstrators, anti-EU migration opponents, and pro-Palestine demonstrators, will very likely stage disruptive mass rallies, road blockades, and counter-protests. This civil unrest will likely trigger civil disorder, obstruct diplomatic transit routes, and overtax deployed police units across central Dublin. Compounded operational strain from canceled leave, mandatory 16-hour shifts, and force fatigue will likely challenge frontline Garda readiness, diluting rapid backup reserves and shifting security risks to outer perimeters
Analysis indicates that there is a HIGH PROBABILITY that the upcoming EPC summit and subsequent meetings in Dublin will attract a volatile threat environment that will increase security risks to Gardai, security forces, international government leaders, and European Parliament members. The heightened risk of a combination of drone incursions, sabotage of infrastructure, coordinated cyberattacks, and civil protests will VERY LIKELY expose existing security and defense gaps, LIKELY straining the security efforts of partnered Gardai and Irish Defense Forces. Increased strain on existing defense measures will LIKELY limit effective threat mitigation and emergency response capabilities, LIKELY prompting adversarial actors to target critical security and transportation management systems. Disruptions to transportation communications and anti-drone defense systems will LIKELY delay summit proceedings while increasing international and European leaders’ exposure to the risks of successful security breaches. The diversion of security and emergency resources to affected areas will VERY LIKELY dilute effective mitigation of lower-level threats, LIKELY prompting an increase in opportunistic crimes outside of the summit security perimeter and in nearby areas. A potential breach of security measures will LIKELY signal an increasingly robust threat environment facing security personnel, LIKELY requiring enhanced coordination and prompting intelligence agencies to increase information sharing for high-level state officials' protection protocols.
[1] Convention Centre Dublin by Google Street View
[2] Attack 'a strong possibility' as Zelensky heads to Dublin with gardai issuing local warning, DublinLive, October 2026,
[3] Ibid
[4] Ibid
[5] Ireland capable and prepared to protect EU leaders at Dublin summits - Harris, RTE, October 2026,
[6] Attack 'a strong possibility' as Zelensky heads to Dublin with gardai issuing local warning, DublinLive, October 2026,
[7] Ibid
[8] Ibid
[9] Ibid
[10] Ibid
