Multiple commercial flights across at least six European countries received bomb threats on Thursday, triggering unscheduled landings, military escorts, and full-spectrum security responses. An Aer Lingus Airbus A320 flying Dublin to Rome was diverted to the Evreux military airbase near Paris, escorted by French air force jets. Finnair, Wizz Air, Ryanair, and LOT Polish Airlines all confirmed affected flights, with diversions or heightened-alert landings in Vienna, Brussels, Sofia, Plovdiv, and Prague. Bulgaria reported three Ryanair flights — from Copenhagen, Madrid, and London Stansted — landing under emergency protocols, two in Sofia and one diverted to Plovdiv. Czech police prepared Prague airport for four threat-related landings, publicly assessing the relevance of the threats as "low" while activating all necessary security measures. Poland's LOT confirmed a Brussels landing with no concrete threat found after cabin inspection. This is the second wave in a single week. Tuesday's threats, targeting airlines including LOT, SAS, Wizz Air, and Ryanair, turned out to be hoaxes. Thursday's incidents follow the same pattern — no dangerous materials have been found so far. The repetition is the point. Each hoax call costs the perpetrator essentially nothing but forces governments to mobilize military jets, sweep aircraft, reroute flights, and delay thousands of passengers. The economics are brutally asymmetric. A single anonymous threat can commandeer a French air force escort, shut down a military airbase for commercial diversion, activate bomb-disposal teams in six countries, and generate international headlines. The marginal cost of each additional threat is near zero. The marginal cost of each response — jet fuel, personnel, airport disruption, passenger delay, intelligence triage — is substantial and non-recoverable. The threats coincide with apparent cyberattacks on freezer units in European supermarkets and French blood banks, a pattern that intelligence analysts associate with hybrid warfare — maximum disruption through minimal, deniable actions designed to stress civilian infrastructure without crossing conventional military thresholds. No attribution has been confirmed, but the operational signature — cheap, distributed, targeting civilian logistics — fits a playbook Europe has seen before. Every country responded correctly by treating each threat as real. That is also the trap. Democracies cannot afford to ignore bomb threats, and adversaries know this. The result is a ratchet: each wave normalizes the disruption, each response validates the tactic, and the only exit is either perfect attribution and deterrence or accepting a permanently elevated threat baseline that slowly degrades public confidence in air travel security. The story is developing, and no perpetrators have been identified. But the structural lesson is already legible. European aviation security is resilient enough to handle individual incidents but faces a systemic vulnerability to serial, low-cost disruption campaigns that exploit the obligation to respond. The question is not whether Thursday's threats are real — they almost certainly are not. The question is what the response architecture looks like after the twentieth wave.
