Ukrainian partisans say they have sabotaged the railway signaling that keeps Russian troops supplied on the Lyman front. The ATESH movement reports that its agents disabled four relay cabinets on a line through Voronezh Oblast that carries military cargo to Russian forces there, delaying ammunition to three regiments.

The strike was timed to help Ukraine's Operation Vivaldi, the counteroffensive the Third Army Corps is running near Lyman in northern Donetsk. In its first phase, the operation cleared 75 square kilometers of Russian infiltrators and de-occupied another 10.

Cutting the rail line that feeds the Russian units facing that offensive is, by ATESH's account, part of the same fight, targeting the supply line rather than the front.

Four cabinets go dark

The sabotage hit a rail corridor running through the Voronezh, Novovoronezh, Liski, and Ostrogozhsk areas of Voronezh Oblast, a route ATESH says Russia uses to move military cargo toward the Lyman axis.

Relay cabinets house the switching gear that runs a line's automatic signals. Knocking them out can freeze traffic on a stretch of track without a single explosion, and ATESH says its agents disabled four of them. As with the movement's other claims, the account could not be independently verified.

Ammunition backs up

By ATESH's telling, the signaling failure delayed shipments of ammunition and engineering materiel to the 1st and 15th Guards regiments and the 254th Motor Rifle Regiment. Russian commanders, it said, had to rush in repair crews and divert resources to guard the infrastructure. A delayed shipment, far behind the front, can be felt at it, where an assaulted position waits for the ammunition that does not arrive.

ATESH hunts the supply lines

ATESH is a network of pro-Ukrainian agents operating inside Russia and Russian-occupied territory, and it has increasingly gone after the rail and power infrastructure that sustains Moscow's war. This month, the group also said it knocked out the power supply of a plant in Voronezh that makes components for Russian missiles.

Investigators found what they believe is explosives meters from a crashed drone near the Bundeswehr's Wunstorf air base in Lower Saxony, Germany, and the device matches the construction of drones used in the GRU-attributed Leipzig airport attack, Süddeutsche Zeitung, NDR, and WDR reported on 22 September. Germany's federal prosecutor and the Federal Criminal Police Office (BKA) have taken over the investigation, and the same reporting traced one of the Leipzig suspects to a sanctioned GRU colonel who directs sabotage against countries arming Ukraine.

Russia's sabotage campaign against countries supporting Ukraine has escalated from arson packages and recruited proxies to explosives-laden drones targeting military infrastructure inside NATO. Germany's military counterintelligence has attributed repeated sabotage on German soil to Russia, while Finnish President Stubb called the broader alarm about Russian threats an "overreaction"—a position the accumulating evidence from Germany and Poland does not support.

Explosives found days after the drone crash

A farmer discovered the drone, broken into several pieces, on the evening of 14 September, about one kilometer from the Wunstorf air base, Militarnyi reported. Days later, police found a suspicious substance just meters from the crash site. Security sources told SZ, NDR, and WDR they believe it is an explosive, though forensic analysis has not yet been completed.

The drone's design is similar to the devices used in the Leipzig airport attack on 4 August, when attackers tried to destroy Ukrainian cargo planes with explosives-laden drones. At least one component was manufactured using a 3D printer, the reporting found. Investigators believe the drone may have been near the military airfield for a long time—possibly up to two years.

Wunstorf air base houses the Bundeswehr's entire A400M transport fleet. The facility is Germany's central hub for moving troops and materiel worldwide. An explosives-laden drone near this base would represent a direct threat to the Bundeswehr's central global logistics hub.

The Wunstorf find was discussed at the weekly intelligence briefing in the Chancellery on 22 September, the outlets reported.

Leipzig suspect linked to sanctioned GRU colonel

The federal prosecutor's investigation connects the Wunstorf case to the Leipzig attack. In that case, Germany's government has officially blamed Russia. Two suspects were identified: Oleg L., a Latvian with a Russian passport, and Andrei K., a dual Belarusian-Russian citizen whose DNA was found at the Leipzig scene.

SZ, NDR, and WDR reported that Oleg L. maintained years-long contacts with GRU Colonel Denis Smolyaninov. The EU sanctioned Smolyaninov for directing sabotage operations against countries supporting Ukraine. Andrei K. had previously been noticed for minor offenses in the Baltic states and Finland and entered Germany on an Italian tourist visa. Moscow denied involvement in the Leipzig attack.

A drone violated the no-fly zone around NATO's missile shield base in Poland

The Wunstorf case came to light in the same week that a drone violated the no-fly zone around the US-operated Aegis Ashore missile defense base in Redzikowo, northern Poland, on 15 September.

Polish troops guarding the facility called civilian emergency services instead of neutralizing the drone, TVP World reported. Poland's defense ministry said the drone was a civilian device that "posed no threat" and remained under military surveillance, but Defense Minister Władysław Kosiniak-Kamysz ordered a full report into the incident.

Russia is trying to "scare Europe" through hybrid attacks so that it provides less support to Ukraine, but Moscow has neither an interest in nor the capability to escalate to a full-scale military confrontation with NATO, Finnish President Alexander Stubb told Politico on 21 September during an interview on the sidelines of the UN General Assembly—even as other European leaders warn that Russian strikes on NATO territory could come within months.

Ukraine critically needs Western support as Russia's full-scale invasion continues. NATO's PURL program has provided about 75% of all Patriot battery missiles and 90% of the missiles used in other air defense systems since its launch last summer, according to NATO Secretary General Mark Rutte on 3 February. Some countries are also hubs for defense companies that produce weapons for Ukraine. Russia is trying to pressure such countries, including through hybrid attacks. Polish Prime Minister Donald Tusk and the head of the Czech security service have warned that Russia could strike NATO territory within months. The Finnish president says his own intelligence sees activity but no imminent military threat, and calls it an "overreaction" when intelligence services tell their neighbors they are next for a Russian invasion.

Finnish intelligence sees Russian activity but no imminent military threat, Stubb says

Stubb calls claims by some intelligence services that Europe is next for a Russian invasion an "overreaction" and says he sees no evidence of this.

"We think we have to be vigilant and awake. But, you know, we have the longest border in NATO with Russia, it's half the border. In our intelligence we see that there is activity but no imminent military threat right now," Stubb added.

He says Russia will continue hybrid attacks, so Europe must be prepared and support Ukraine

Europe should prepare for Russia's "continued hybrid and sabotage attacks," but should not "overreact" to them, as Russia wants to scare its allies so that they slow down their support for Ukraine, the Finnish president said.

"And any time we overreact to a hybrid attack, they have actually won the battle in that particular way," Stubb told Politico.

Europe should remain "cool, calm and collected" during such Russian intimidation, the Finnish president said.

Germany's recent decision to officially hold Russia responsible for an attempted drone attack in Leipzig is "exactly what you need to do," Stubb said.

"You need to point the finger and say, we know what you're doing, and these are the consequences," he added.

A pro-Kremlin group, Global Citizens Against War 1984, issued an ultimatum to Latvia, Poland, and Portugal to stop supplying weapons to Ukraine by 7 October, threatening to disrupt defense companies in those countries.

Warnings from Warsaw and Prague paint a different picture

Russia could carry out "accidental" drone or missile strikes against NATO countries supporting Ukraine in an attempt to weaken the Alliance's integrity and persuade members that Article 5 is more theoretical than practical, Polish Prime Minister Donald Tusk said in parliament on 17 September, citing NATO, Ukrainian, and Polish intelligence assessments.

"There is a real risk that drones or other types of missiles could enter the territory of one or several NATO countries on the eastern flank," Tusk said.

The head of the Czech security service warned separately that Russia could undertake a limited incursion, false-flag provocations, and a massive influence campaign in a matter of months rather than years.

Illia Bilyk, a 21-year-old Ukrainian national, admitted five counts of racially and religiously aggravated criminal damage on 17 September over graffiti at five Muslim institutions in east London, the BBC reported.

The BBC and Hope Not Hate linked Bilyk’s attacks to the same Russian network behind arsons targeting properties connected to former UK Prime Minister Keir Starmer. The network operated Direct Action UK, a fake British far-right group that recruited people through Telegram and shared images of the resulting vandalism. Investigations have documented the same recruitment model across Europe for surveillance, sabotage, and other criminal assignments.

The Metropolitan Police said Bilyk sprayed offensive graffiti at three mosques, Noor Ul Islam Primary School, and the Islamic Shariah Council on 23 and 25 January 2025. Images then appeared in a Direct Action UK Telegram group. Russian operators created the group to pose as a British far-right movement, the BBC reported. Bilyk will be sentenced on 19 October.

The handler, known as EL or “El Money,” also recruited through Telegram groups used by Ukrainians seeking work, the BBC found. Ukrainian builder Roman Lavrynovych was paid in cryptocurrency and steered from posters and graffiti to arson.

In May 2025, Lavrynovych set fire to a car and properties connected to Starmer. Nobody was injured. Lavrynovych was jailed for seven years, while Ukrainian-born Romanian national Stanislav Carpiuc was also convicted.

The BBC identified EL as Yevgeny Lyukshin, a 23-year-old Russian diplomat and son of a senior Foreign Ministry official. It cited matching personal details, his presence in the Direct Action UK chat, family connections, and information-warfare training from Rybar, a sanctioned pro-Kremlin Telegram outlet.

However, the BBC could not conclusively establish that Lyukshin was EL, while British police said they had no evidence the attacks were state-sponsored. Lyukshin did not respond. The Russian Embassy denied any connection between Russia or its Foreign Ministry and unlawful activity.

Paid local recruits make Russia-linked attacks look homegrown

The London operation is one of several cases across Europe and other continents.

UK intelligence warned that Moscow increasingly relies on non-state actors, meaning hired civilians and criminals outside its formal services, for espionage, sabotage, assassination, and information operations.

This month, US prosecutors alleged that another Russian network recruited local residents for surveillance, sabotage, and murder-for-hire.

Three men were found guilty on July 8 in connection with an arson attack on Ukraine-linked businesses in London, which British authorities say was orchestrated by Russia's Wagner mercenary group, Reuters reported.

The alleged ringleader, Dylan Earl, 21, had already pleaded guilty to aggravated arson over the 2024 blaze targeting companies that were supplying Elon Musk's Starlink satellite equipment to Ukraine, according to Reuters.

The systems are considered vital to Ukraine's communications and defense against Russia's ongoing invasion.

Earl also became the first person convicted under the U.K.'s National Security Act after admitting to a separate plot to attack a wine shop and restaurant in London’s upscale Mayfair district and to kidnap its owner, a prominent critic of Russian President Vladimir Putin.

Two others, Jake Reeves, 23, and Earl’s associate, also pleaded guilty to aggravated arson, with Reeves admitting to a charge under the National Security Act for receiving a material benefit from a foreign intelligence agency.

A jury at London's Old Bailey court convicted three additional men, Nii Kojo Mensah, 23, Jakeem Rose, 23, and Ugnius Asmena, 20, of aggravated arson. They had denied the charges. A fourth man, Paul English, 61, was acquitted.

Two other defendants, Ashton Evans, 20, and Dmitrijus Paulauskas, 23, were charged with failing to disclose knowledge of terrorist activity. Evans was convicted on one count and cleared of another. Paulauskas was acquitted of both charges and reportedly broke down in tears as the verdict was read.

Commander Dominic Murphy of the London Metropolitan Police reportedly said he was confident the Wagner Group and the Russian state were behind the attacks.

The U.K. has designated the Wagner Group as a terrorist organization.

Earl had exchanged hundreds of encrypted messages with a supposed Wagner handler using the alias "Privet Bot" on Telegram. According to reporting by the Organized Crime and Corruption Reporting Project (OCCRP), the account was previously advertised by Grey Zone, a Wagner-affiliated channel.

Prosecutors said Earl expressed interest in fighting for Wagner and was encouraged to recruit contacts from British soccer hooligan networks, Irish republican groups, and organized crime circles, Reuters reported. He and Evans also admitted to unrelated charges of dealing cocaine.

The Russian Embassy in London has denied any involvement in the warehouse attack and accused the British government of blaming Russia for domestic issues.

The Kremlin has consistently rejected accusations of sabotage and espionage, despite growing evidence and convictions tied to Russian-linked operations across Europe.

‘Neither side wasted time’ — Ukraine’s economy minister on minerals deal negotiations with Trump’s ‘business-oriented’ administration

Ukraine’s Economy Minister Yuliia Svyrydenko says her task is simple — to get the investment fund behind the closely watched minerals deal with the U.S. off the ground, and prove its detractors wrong. “There are so many criticisms from different parties that this fund is just a piece of paper we can put on the shelves — that it won’t be operational,” Svyrydenko, who is also Ukraine’s first deputy prime minister, tells the Kyiv Independent at Ukraine’s Cabinet of Ministers on July 4, the morning

The Kyiv IndependentLiliane Bivings

BRICS summit participants condemned recent attacks on Russia’s railway infrastructure, according to a joint declaration on July 6 from Rio de Janeiro.

"We condemn in the strongest possible terms the attacks on bridges and railway infrastructure deliberately targeting civilians in the Bryansk, Kursk and Voronezh regions of the Russian Federation on May 31, and June 1 and 5 2025, which resulted in the deaths of several civilians, including children," the document says.

Bryansk, Kursk, and Voronezh oblasts are all located near Ukraine’s northeastern border and have played a central role in Russia’s war effort, serving as key logistical hubs and launch sites for missile and drone attacks on Ukrainian cities–often targeting civilian infrastructure and causing casualties.

In their declaration, BRICS leaders also called for a negotiated peace agreement between Russia and Ukraine.

“We recall our national positions concerning the conflict in Ukraine as expressed in the appropriate forum, including the UN Security Council and the UN General Assembly,” the document said. “We expect that current efforts will lead to a sustainable peace settlement.”

The statement comes a few days after a phone call between U.S. President Donald Trump and Russian President Vladimir Putin on July 3, in which Putin said "Russia will continue to pursue its goals" in the war against Ukraine, Kremlin aide Yury Ushakov said.

Russian Foreign Minister Sergey Lavrov attended the summit in person, while Russian President Vladimir Putin participated via video link.

Brazil is a member of the ICC and a signatory to the Rome Statute, meaning it is obliged to arrest Putin if he enters the country.

The ICC issued a warrant for the Russian leader's arrest in March 2023 over the illegal deportation of Ukrainian children during Russia's full-scale invasion of Ukraine.

The BRICS declaration also condemned recent U.S. and Israeli airstrikes on Iranian nuclear facilities as violations of international law and criticized the presence of foreign forces in Syria and Gaza, calling for Israeli withdrawal from Syrian territory.

BRICS, originally composed of Brazil, Russia, India, China, and South Africa, has expanded in recent years to include Iran, Egypt, the UAE, Ethiopia, and Indonesia.

Lavrov meets Iranian counterpart Abbas Araqchi at BRICS summit, reiterates Russia’s offer to mediate disputes over nuclear program

Russia reiterated its offer to mediate the conflict over Iran’s nuclear program during a meeting between Foreign Minister Sergey Lavrov and his Iranian counterpart at the BRICS summit in Rio de Janeiro, Reuters reported on July 6.

The Kyiv IndependentSonya Bandouil

The Atesh partisan group set fire to a signal cabinet that helps control traffic on a railway line near the Russian-occupied city of Yasynuvata in Donetsk Oblast, a route used for Russia's military logistics, the group claimed on Telegram on June 28.

Yasynuvata lies some 22 kilometers (12.5 miles) from the occupied city of Donetsk and is considered to be a major railway junction in the region.

According to the group, the sabotaged section is located near Russian military units, warehouses, and industrial facilities.

Atesh said the attack disrupted the delivery of a train carrying fuel for Russian forces.

"On Ukraine's Constitution Day, we remind the occupiers that this is an independent and free country. And Donetsk will always be Ukrainian," the statement read.

The Kyiv Independent could not verify these claims.

The Atesh partisan group regularly conducts sabotage attacks in Russia and Ukraine's Russian-occupied territories.

In early June, Atesh claimed to have destroyed a signal cabinet on the new Volnovakha-Mariupol railway, which had been recently built by occupying Russian forces.

Ukraine war latest: Ukrainian drones reportedly strike 4 fighter jets in Russia

Key developments on June 27: * Ukraine war latest: Ukrainian drones reportedly strike 4 fighter jets in Russia * North Korea deployed 20% of Kim’s elite ‘personal reserve’ to fight against Ukraine in Russia, Umerov says * Pro-Palestinian activists reportedly destroy military equipment intended for Ukraine * Zelensky signs decree to synchronize Russia sanctions

The Kyiv IndependentThe Kyiv Independent news desk

Ukraine's security service (SBU) is teaching teenagers how to avoid recruitment by Russian intelligence online, the New York Times (NYT) reported on June 21.

"Maybe not all of these special operations are reported in the media — but believe me, the enemy is not sleeping... They are working actively and carrying out illegal activities, as strange as it may sound, directly inside your phones," SBU spokesperson Roksolana Yavorska-Isaienko told students.

Approximately 22% of Ukrainians recruited by Russian intelligence to conduct sabotage or terrorist attacks are minors, Artem Dekhtiarenko, SBU spokesperson, said on April 2.

Russian intelligence attempts to recruit Ukrainian civilians online, offering easy money in return for sharing sensitive data or preparing sabotage or terrorist acts.

Russian intelligence finds its recruits using social platforms, including Telegram, Discord, and TikTok.

Unsuspecting teenagers are often offered hundreds or even thousands of dollars to conduct simpler tasks such as delivering packages or taking photos of energy sites, the NYT reports.

More serious tasks are commonly assigned to teenagers once they have been blackmailed for conducting less serious operations beforehand or when their phones are hacked to reveal compromising photos.

Russian intelligence is actively attempting to recruit Ukrainian nationals for illegal operations across the EU, Ukraine's military intelligence agency (HUR) said on June 2.

"The recruitment of Ukrainians for hostile operations in Europe is yet another tool of hybrid aggression that the Russian Federation is waging against Ukraine and the entire European community," HUR said.

The SBU caught a Russian agent as he was filming a military airfield in preparation for a Russian strike, the agency reported on June 15.

The Russian Federal Security Service (FSB) recruited the unemployed 24-year-old via the Telegram messaging app to collect coordinates for air attacks on airfields and logistic depots, the SBU said.

The Russian FSB allegedly offered "easy money" and instructed the recruit to find military facilities and carry out reconnaissance on the ground.

Love, sex, survival — Ukrainian author on how war shapes intimacy in Ukraine

In Ukraine, Russia’s war of aggression has upended not just borders but the country’s cultural landscape. Conversations about identity, gender, and sexuality have gained new urgency. Women are increasingly stepping into combat roles once dominated by men, while relationships can dissolve as quickly as they form. Many people

The Kyiv IndependentKate Tsurkan

Ukraine’s military intelligence (HUR) ignited an electrical substation during a sabotage operation in the Russian city of Kaliningrad, causing $5 million in damage and cutting electricity to a military production site, a source in HUR told the Kyiv Independent.

In the early hours of June 14, Ukrainian agents drained the coolant from the substation’s power transformer before setting the facility on fire. The inferno inflicted major damage on the facility and caused a power cut, impacting nearby Russian military sites.

"We once again remind you that Russia no longer has a rear either in the east, in the west, or anywhere else on the planet. Everything Russian involved in the war against Ukraine will burn, sink, and be destroyed regardless of its level of protection or location," the source said.

Ukraine continues to carry out numerous secretive attacks within Russia and occupied Ukrainian territories, targeting military sites, like airfields, as well as key infrastructure like railways and oil refineries.

The attacks involve HUR, Ukraine’s Security Service (SBU) as well as partisan and sabotage groups.

HUR was behind explosions near Desantnaya Bay in Russia's far eastern Vladivostok on May 30, which reportedly damaged military personnel and equipment. The operations took place approximately 6,800 kilometres from the Ukrainian border, making it Ukraine's furthest incursion into Russian territory, if confirmed.

On June 1, the SBU launched Operation Spiderweb, a game-changing drone attack on four key Russian military airfields, damaging 41 planes, including heavy bombers and rare A-50 spy planes.

Ukrainian drones destroy Russian air defense systems in occupied Zaporizhzhia Oblast, military intelligence says

Ukraine’s military intelligence (HUR) destroyed three Russian air defense systems using drones in the occupied Zaporizhzhia Oblast on June 14, HUR says.

The Kyiv IndependentVolodymyr Ivanyshyn