This paper examines the European Union’s evolving cyber defence strategy in response to the growing integration of cyber operations into hybrid warfare. It traces the EU’s doctrinal shift from a reactive, resilience-based posture to one that increasingly embraces proactive deterrence, including the potential use of offensive capabilities. By analysing key strategic documents and highlighting the case of France, the study illustrates both progress and limitations. While conceptual advances are evident, practical implementation remains a national competence. The paper concludes that translating strategic ambition into credible cyber deterrence will require legal clarity, interoperability, and coordinated capability development.