A second wave of alerts affected aircraft in Portugal, France, Italy and elsewhere; the sustained campaign pattern has led ENISA and NATO aviation security to treat the incidents as a coordinated threat rather than isolated events.

AVIATION SECURITY  ·  EUROPE  ·  ARC: NOV 6 FIRST WAVE

Bomb threats continued to disrupt European passenger flights on Saturday, with additional alerts affecting aircraft in Portugal, France, Italy, and other European countries, Euronews reported. The November 7 wave follows the initial multi-country threat pattern reported in the November 6 article, confirming that the incidents represent a sustained campaign rather than a single-day event. European aviation security authorities, NATO aviation intelligence, and national law enforcement agencies across the affected countries have now elevated their assessment from coincidental incidents to a coordinated threat pattern.

Euronews reported that the November 7 wave affected a different geographic cluster than the November 6 incidents, with Portugal, France, and Italy seeing the heaviest concentration of threats compared to the Germany, Netherlands, UK, and Swedish focus of the previous day. The geographic rotation suggests either multiple threat actors coordinating their activity or a single actor deliberately varying the target geography to maximize disruption and complicate the law enforcement response. No explosive devices were found on any of the affected aircraft, with all threats assessed as hoaxes after thorough security searches.

The Operational Pattern

The two-day consecutive bomb threat campaign against European aviation is unprecedented in its scale and geographic breadth in the post-9/11 aviation security era. Euronews cited European aviation security officials who noted that prior bomb threat campaigns against aviation had typically involved a single country or a single airline, rather than the multi-country, multi-airline pattern seen across November 6 and 7. The sustained nature of the campaign — threats continuing on a second consecutive day despite the full activation of European aviation security response protocols — indicates an actor with resources and planning capacity beyond individual or small-group threat behavior.

The cumulative cost of two days of flight disruptions across Europe is significant: Euronews estimated that more than 40 flights had been affected across the two days, with hundreds of hours of passenger delay, multiple diverted aircraft requiring security searches at alternate airports, and the sustained engagement of fighter jet escort capacity across NATO airspace. The resource cost to European aviation security of maintaining heightened response protocols is also substantial and was designed by whoever is conducting the campaign to be sustained.

“Two days. Multiple countries. Dozens of flights. This is not random. This is designed to hurt us, and it is working.” — Senior European aviation official quoted by Euronews

Investigation Status

European law enforcement agencies are pursuing digital forensics investigations of the threat transmission channels, including analysis of email metadata, anonymous tip line call records, and social media posting patterns. Euronews reported that Europol had been activated to coordinate the cross-border investigation, given that the multi-country nature of the threat pattern falls within the Europol mandate for serious organized crime and terrorism. No arrests had been made as of the Saturday report, and no attribution had been established publicly.

WHAT HAPPENS NEXT

► Europol-coordinated investigation to pursue digital forensics across all November 6-7 threat channels

► European aviation authorities to assess whether enhanced pre-flight screening can reduce threat effectiveness

► NATO Aviation Intelligence Committee to publish formal coordinated threat assessment

► Third day of threats possible if actor continues campaign; contingency protocols being prepared

CONFIDENCE: HIGH

Euronews confirmed second wave of European flight bomb threats with direct reporting on affected countries and flights. Single outlet for the November 7 follow-up, but strong corroboration from the November 6 established pattern. Euronews has authoritative European aviation security coverage.

Bias Check
Left-Lean	Center	Right-Lean
Threat campaign framed as state-sponsored attack on European democratic societies; Iran or Russia suspected.	Reports confirmed threat pattern and investigation status factually; notes attribution uncertainty.	Threat campaign cited as validation of need for stronger European security posture and spending.

SOURCES

► Euronews — European flight bomb threats continue second day, Portugal, France, Italy affected, November 7, 2026