© Eduardo Munoz/Reuters
© The New York Times
© Doug Mills/The New York Times
© Daniel Berehulak/The New York Times
French President Emmanuel Macron said French services received no CIA warning about a possible Russian drone attack from Mediterranean merchant ships, pushing back on an El Mundo report that US intelligence had alerted France, Italy, and Spain, RTL reported.
Macron’s denial comes amid drone attacks and sabotage cases that European governments have linked to Russia. France is preparing stronger defenses against that wider threat, even as Macron says its services received no specific CIA warning. Italy’s defense minister has also cautioned against fueling alarm over an unconfirmed report.
Asked about the report during a televised interview on 24 September, Macron said: “The CIA did not inform French services of such an attack.” He said Russia was multiplying hostile and sometimes criminal acts against European countries. Covert acts such as sabotage and cyberattacks are often described as hybrid warfare. Asked whether France itself could be attacked, Macron answered yes.
Italian Defense Minister Guido Crosetto separately wrote on X that El Mundo’s alert “finds no confirmation.” He said it served no one to add “more fuel to the fire” at an already tense time.
The Spanish newspaper reported that the possible operation would use Gerbera drones, small Russian aircraft capable of carrying several kilograms of explosives. The drones would be hidden in shipping containers aboard merchant ships and launched toward targets along Europe’s southern coast. El Mundo cited a source close to Lithuania’s Defense Ministry, and analysts familiar with a CIA report said to have circulated among European foreign ministries. Euromaidan Press covered the account on 24 September. Bythe time of publication, neither Spain’s government nor the CIA had publicly addressed it.
Macron pointed to the failed attack at Leipzig/Halle Airport in eastern Germany in August. A drone carrying explosives was found near a Ukrainian cargo aircraft. German officials attributed the attempt to Russia. Macron said France had not experienced a comparable incident.
Beyond the disputed Mediterranean alert, authorities have investigated other incidents throughout Europe as possible Russian sabotage.
Germany followed its accusation over Leipzig with diplomatic measures against Moscow. Berlin ordered Russia’s last consulate in Germany closed and ended an agreement permitting a Russian cultural center. German investigators also identified two suspects, including a Russian man they linked to military intelligence. Moscow denied involvement.
Poland’s justice and interior ministers said Russian intelligence ordered the May 2024 arson of Warsaw’s Marywilska 44 shopping center.
Finnish President Alexander Stubb said Russia would continue such attacks to frighten Ukraine’s allies into reducing support. He urged vigilance without overreacting, saying Finnish intelligence saw no imminent military threat.
The Institute for the Study of War (ISW) published a map in its analytical report on 24 September that contrasts the claimed Russian encirclement with the location of Russian forces as assessed by the experts. Based on the evidence observed by ISW, the nearest area where Russian forces are present is 10.2 kilometers from the southeastern outskirts of Dobropillia.
Russia has been spreading disinformation about its successes around Dobropillia as part of what ISW calls a cognitive warfare effort to portray Ukrainian defenses as on the verge of collapse. Russia's Defense Ministry published a map claiming the city was surrounded. ISW's own map challenges it. The Ukrainian military says the city remains under its control.
Units of Russia's Center Grouping of Forces continue combat operations against encircled Ukrainian forces in the Dobropillia area of Donetsk Oblast while simultaneously advancing toward Oleksandrivka, the Russian Defense Ministry claimed. ISW analysts, meanwhile, said they have not observed evidence supporting Russia's claim that the city is encircled. They also noted that Ukrainian officials "directly refute" the claim.
ISW observed evidence that Russian infiltrators, small groups, were operating east and northeast of Dobropillia on 19 and 20 September. The institute did not assess that these infiltrators had consolidated their positions.
Ukrainian forces maintain positions south and northeast of Dobropillia, military observer Kostiantyn Mashovets said on 20 September, according to ISW.
Russian forces have not made major gains in the Dobropillia direction, the chief of staff of an artillery reconnaissance battalion said on 22 September, according to the institute. On the same day, a Russian milblogger described the "alleged Russian encirclement of Dobropillia" as potentially meaning not the direct presence of infantry, but only the establishment of fire control over Ukrainian logistics, including roads west of Dobropillia and toward Sviatohorivka, according to ISW.
ISW noted that Russia's pervasive military culture of lying—what Russian milbloggers themselves call "beautiful reports"—has degraded the Defense Ministry's own ability to understand the battlefield and enabled inflated claims like the Dobropillia encirclement.
In its statement, the Russian Defense Ministry itself described Dobropillia as a "strongly fortified settlement" whose seizure would threaten key Ukrainian supply lines running from Dnipropetrovsk Oblast toward the Fortress Belt—the Sloviansk-Kramatorsk-Druzhkivka urban agglomeration.
Russia has recently renewed its attempts to break through toward Dobropillia.
Third Army Corps Commander Andrii Biletskyi said that Russian forces sought to bypass the fortified cities through Dobropillia and link up with troops advancing from north of Lyman, rather than launch a direct assault. ISW noted on 16 September that the Vivaldi operation disrupted Russia's two-pronged plan. In its 24 September report, ISW said Russia's claims about Dobropillia were partly intended to divert attention from Ukraine's elimination of the Russian salient north of Lyman, which has likely forced Russia's command to rethink its wider encirclement plans.
Several recent incidents across Europe were conducted by Russia or are likely attributable to Russia, ISW assessed in its 24 September report, though authorities have not officially linked the Polish and German incidents to Moscow.
Russia's full-scale war against Ukraine has expanded into a parallel campaign of provocations against European defense and logistical infrastructure. The Kremlin is using drones, arson, and undersea cable sabotage to degrade Europe's will and ability to support Ukraine, while deliberately intensifying the frequency of airspace violations to erode the boundary between hybrid and kinetic war.
Four Russian drones flew over Bukovyna and targeted an energy facility and border crossings with Moldova and Romania, Chernivtsi Oblast Military Administration head Ruslan Osypenko reported. Ukrainian forces shot down three. The fourth flew toward Suceava County in northeastern Romania.
A drone crashed in Cernița, Florești district, Moldova—preliminarily identified as a Russian Gerbera type, the first such device found in the country. It carried an onboard camera, hit a tree, and exploded, Moldovan police said. Romania's Defense Ministry reported a second aerial vehicle entered Romanian airspace for four minutes and crashed near Solca in the same border region; geolocated footage confirmed it was also a Gerbera, ISW noted. Poland evacuated the Hrubieszów and Dorohusk border crossings for 30 minutes, Prime Minister Donald Tusk said. Three countries were put on alert by a single night of Russian strikes.
"Intentional and accidental Russian drone incursions into NATO and Moldovan airspaces are likely part of the Kremlin's efforts to normalize airspace violations by intensifying their frequency," ISW assessed.
A fire engulfed the power system and backup generator at a Starlink ground station in Wola Krobowska, central Poland, on the evening of 23 September. Deputy Prime Minister Krzysztof Gawkowski confirmed it was sabotage aimed at cutting internet access, including for Ukraine's military. Authorities have not identified who was responsible, but the act aligns with Russia's "new" doctrine of attacks, Gawkowski said. The station is now operating normally.
German authorities suspended operations at Berlin-Brandenburg airport for 45 minutes the same evening after staff reported a drone sighting, Die Zeit reported. Federal police could not confirm it. ISW assessed both incidents fit Russia's wider pattern of sabotage against European defense assets, though neither has been officially attributed to Russia.
A Lithuanian Defense Ministry source reported on 23 September that Russia could launch Gerbera drones from a shipping container in the Mediterranean against Spain, France, and Italy. Danish Defense Intelligence assessed on 24 September that Russia will intensify its hybrid war in coming months, including destructive cyber attacks and sabotage carrying a high risk of casualties, and that there is a low but growing risk of a limited Russian military attack on a NATO border state. It sees no indications of an outright invasion. The CIA reportedly warned Poland that Russia may sabotage underwater cables to disrupt its banking system, according to Newsweek Polska journalists.
NATO tracked and confronted Russian submersibles rehearsing deployment of a new cable-disabling weapon near Svalbard in spring 2026—no cables were damaged, but the operation demonstrated Moscow's intent, Reuters reported. Shadow fleet vessels likely served as drone-launch platforms for incursions into NATO airspace, ISW noted.
"The increasing frequency of such warnings suggests that Western intelligence agencies are picking up indicators that the Kremlin is looking to diversify its platforms and means for conducting attacks against NATO and European states and is considering conducting such attacks," ISW assessed.
ISW said it has not yet seen evidence that Russia has conducted the attacks the warnings describe.
Denmark's assessment—that a limited Russian military strike on a NATO border state could come in the coming months—suggests the boundary between hybrid provocations and military action is narrower than European policy has assumed. ISW's synthesis reframes what governments have treated as separate incidents into one campaign.
"Intentional and accidental Russian drone incursions into NATO and Moldovan airspaces are likely part of the Kremlin's efforts to normalize airspace violations by intensifying their frequency," ISW assessed.
"The increasing frequency of such warnings suggests that Western intelligence agencies are picking up indicators that the Kremlin is looking to diversify its platforms and means for conducting attacks against NATO and European states and is considering conducting such attacks," ISW assessed.
© Baraa Anwer/Associated Press
© Lexi Parra/The New York Times
Indian police arrested the foreigners on terrorism allegations in March but later downgraded the charges
© AFP/Getty
© AFP/Getty
Russian President Vladimir Putin has again told US officials that Russia can capture Ukraine’s Donetsk Oblast within several months, according to Ukrainian President Volodymyr Zelenskyy.
Speaking to the UN General Assembly on 24 September, Zelenskyy said this was the latest in a long series of similar promises as Russia has spent nearly five years trying to seize the region. He said Putin has made such promises 17 or 18 times, repeatedly pushing the deadline further back.
He contrasted those promises with Russia’s heavy battlefield losses and relatively limited territorial gains.
Zelenskyy said Russian forces suffered 248,964 troops killed or severely wounded between January and August 2026.
He said Russia had captured only slightly more than 1,000 square kilometers of Ukrainian territory this year, while Ukraine had already liberated a significant portion of those gains.
Zelenskyy presented the figures as the human cost of Putin’s continued attempt to seize Donetsk, arguing that Russia is paying an enormous price for relatively limited territorial gains.
“Always the same: ‘Just a few more months,’” Zelenskyy said, adding that Putin would again fail to meet his latest deadline.
The Russian offensive is also facing a recent setback in northern Donetsk. Ukraine launched Operation Vivaldi in September to clear Russian infiltrators and retake ground near Lyman, disrupting Russia’s plan to encircle the fortified cities of the Donetsk “Fortress Belt.”
Ukrainian forces have reported retaking several settlements and clearing up to 125 square kilometers in the operation, although the full scope of the offensive remains undisclosed.
Zelenskyy also warned that Russia’s ambitions extend beyond Donetsk. After saying Putin would again fail to capture the region, he said Russia would continue seeking other Ukrainian cities, naming Odesa, Kharkiv and Dnipro, while also pointing to Russian pressure on Moldova and threats toward Poland and the Baltic states.
The battlefield campaign has been accompanied by a sustained Russian long-range attack campaign against Ukrainian cities and infrastructure.
Since the beginning of 2026, Russia has launched more than 2,100 missiles against Ukraine, including more than 950 ballistic missiles, according to Zelenskyy.
Ballistic missiles are particularly difficult for Ukraine to counter because it has a limited supply of interceptors capable of engaging them. Russia’s heavy use of ballistic weapons is therefore contributing directly to civilian deaths and infrastructure destruction.
Over the first eight months of the year, Russia also used 63,000 attack drones of various types, Zelenskyy said. More than 7,700 were jet-powered Geran drones, which he described as particularly destructive and dangerous.
The newer jet-powered drones are faster and more advanced than earlier Shahed-type models, making them harder to intercept and adding to the pressure on Ukraine’s air defenses as Russia attacks cities and infrastructure.
Zelenskyy said Russia was using the drones continuously to disrupt economic activity and normal life in Ukrainian cities, including by making it harder for children to attend school.
The figures show the scale of the Russian campaign beyond the front line. Alongside its ground offensive, Russia is using sustained missile and drone strikes to kill civilians, destroy infrastructure, and exhaust Ukraine’s air-defense resources.
Zelenskyy also highlighted North Korea’s direct involvement in Russia’s war, saying its troops have suffered heavy losses while gaining battlefield experience alongside Russian forces.
He said North Korea’s military capabilities were also benefiting from its cooperation with Russia, pointing to improvements in its ballistic missiles and drone capabilities.
Ukraine recently transferred two North Korean prisoners of war to South Korea. Zelenskyy said capturing the soldiers alive had been difficult and described one prisoner’s attempt to take his own life after realizing he was about to be captured.
He said the soldiers had been conditioned to believe they had to die rather than surrender.
“Do you really want to give such a force more time to learn how to fight?” Zelenskyy asked.
Zelenskyy separately warned that Russia could again target Ukraine’s energy and heating infrastructure this winter.
Russia has already intensified attacks on Ukraine’s energy system ahead of the cold season.
Russia has also explicitly threatened to “freeze” Ukraine this winter, with its Defense Ministry linking the threat to attacks on Ukrainian infrastructure. The country spent much of the previous winter dealing with the consequences of Russian strikes on power and heating infrastructure, including blackouts and disruptions to heat supplies.
Zelenskyy said Ukraine expects the coming winter to be difficult but warned that if Russia continues attacking Ukraine’s energy and heating systems, Ukraine will make the winter painful for Russia as well.
He called for steps toward de-escalation before winter, saying that diplomacy and military strength were both needed to end the war.
Within 24 hours of claiming Ukrainian troops were surrounded near Dobropillia, Russia’s Defense Ministry and pro-war channels expanded the narrative to several supposed encirclements in northern Kharkiv Oblast. Evidence supports none of that, the Institute for the Study of War (ISW) has said.
The claims come as Ukrainian forces make gains in several frontline sectors, according to ISW. Near Dobropillia, Russian bloggers described the ability to fire on supply roads rather than troops surrounding the town. At the same time, Ukrainian forces said they had prevented Russia from physically cutting the routes.
Russia’s Defense Ministry claimed its forces had captured Krasnyi Yar and Potykhonove northeast of Kharkiv. Pro-war bloggers then claimed Russian troops threatened to trap Ukrainian units near Riznykove and had already surrounded others near Rublene. One asserted that roughly 1,500 Ukrainian soldiers were encircled across 460 square kilometers.
ISW found no evidence for those claims. A Ukrainian brigade spokesperson said Russian forces were still shelling settlements they claimed to hold and described positions in the area as heavily intermingled, with no clear front line.
Around Dobropillia, the Kremlin-linked Rybar channel claimed Russian troops were infiltrating toward nearby settlements and making tactical gains south of the town. It did not claim Russian forces had secured those settlements or show an encirclement on its map, ISW noted.
Another Russian blogger said neither side currently had the forces needed to establish and sustain a genuine encirclement.
Russia’s Defense Ministry had claimed on 22 September that its troops surrounded Dobropillia, a transport hub on the approach to Ukraine’s fortified cities in Donetsk Oblast.
ISW found no evidence for that claim and linked its timing to the UN General Assembly and Ukraine’s recent battlefield gains. A Ukrainian officer said Russian troops had made no major advances near the town.
Russian assaults continue despite that setback. A Ukrainian staff sergeant reported a sharp increase in the number of small groups trying to reach Dobropillia. On 23 September, Ukraine’s 1st Azov Corps said its forces had prevented Russian troops from physically cutting supply routes toward Dobropillia and Druzhkivka.
The US has arrested the CEO of Virginia-based digital forensics company Oxygen Forensics and a Russian national over allegations that they concealed the company’s Russian ownership and the fact that its software was developed in Russia while selling it to US government agencies, according to the US Justice Department.
The case highlights a potential route through which Russian-linked networks could seek access to sensitive US institutions: concealing Russian ownership and influence behind seemingly legitimate American companies.
Lee Reiber, 55, and Oleg Sergeyevich Davydov, 52, are charged with conspiracy to commit wire fraud. The US Justice Department alleges that five Russian nationals, including Davydov, owned and controlled Oxygen Forensics through a Cyprus-based holding company, while its software was developed by a team in Russia.
According to the criminal complaint, Oxygen Forensics presented itself to US agencies as an independent American company with no foreign ownership or control.
The company sold digital forensic software used to recover and analyze data from electronic devices to the US Department of War and three Department of Homeland Security components: the Secret Service’s National Computer Forensics Institute, Homeland Security Investigations, and the DHS Office of Inspector General.
The National Computer Forensics Institute awarded Oxygen Forensics a five-year contract in September 2024. The award file included a certification from Reiber stating that the company had no immediate or highest-level owner, according to the affidavit.
The Justice Department alleges that this was false. The Russian owners allegedly continued to make significant company decisions, set Reiber’s compensation, control payments and retain signatory authority over bank accounts after their names were removed from public corporate filings.
The complaint says the same five Russian nationals also owned a Russian company founded by Davydov in 2000, previously known as Oxygen Software and now called MKO Systems.
According to the affidavit, the Russian company developed the software used by Oxygen Forensics, with developers working in Russia under Davydov’s direction. MKO Systems also sold its software in Russia under different product names to customers that reportedly included the Federal Security Service (FSB), the Russian Investigative Committee and the Russian Ministry of Internal Affairs.
After the US expanded sanctions against Russia in 2022 following Russia’s full-scale invasion of Ukraine, the Russian owners allegedly agreed with Reiber to conceal both the company’s ownership and its Russian development operations.
Reiber was installed as CEO, president and chairman in March 2022, while the Russian owners were removed from the company’s public filings, according to the Justice Department.
The complaint alleges that the arrangement did not end the Russian owners’ control. One of them was later appointed to the company’s board using a Turkish identity, according to the affidavit.
Militarnyi separately reported that OSINT investigators from InformNapalm had previously traced corporate and technological links between Oxygen Forensics and Russia’s Oxygen Software, now known as MKO Systems.
According to Militarnyi, the Russian company’s products were supplied to Russian security and law-enforcement agencies, including the FSB and Ministry of Internal Affairs. The investigation traced a common corporate and technological origin between the Russian and US software ecosystems.
The Justice Department says Reiber repeatedly certified to US authorities that the company had no foreign ownership or control.
In March 2026, he allegedly told DHS personnel that no Russian was involved in developing Oxygen Forensics’ software and that no one in Russia had access to its development environment. Days later, he published a statement saying the company had no development presence in any restricted jurisdiction.
The complaint alleges that the software was in fact written and managed by a team in Russia, using a cloud environment administered by one of the Russian owners.
The affidavit also describes a November 2023 exchange in which Reiber allegedly told the Russian owners that public reporting about the company’s Russian connections could jeopardize a pending US government contract.
Reiber was arrested in Idaho on 20 September and released on bond after appearing in federal court. Davydov was arrested the same day at London Heathrow Airport before boarding a flight to Istanbul. The US says it will seek his extradition.
Separately, a federal judge authorized the seizure of Oxygen Forensics’ corporate bank accounts, around 57 domains and other cyber infrastructure allegedly used in the scheme. The domains and related infrastructure were seized on 20 September.
The case is being investigated by the US Department of Commerce’s Bureau of Industry and Security, with assistance from the Department of War Office of Inspector General’s Defense Criminal Investigative Service.
Each could face up to 20 years in federal prison if convicted.
Moldova’s Defense Ministry reported four drone incursions, Romania’s Defense Ministry confirmed a drone crash, and Poland’s Operational Command scrambled fighters twice during Russia’s 24 September attack on Ukraine.
The strike wave forced Moldova to close part of its airspace, Romania to warn residents and launch F-16 fighter jets, and Poland to activate aircraft, air defenses, and radar. No casualties were reported in the two confirmed crashes, and Poland detected no incursion during its first deployment. Moldova has recorded dozens of Russian drone incursions this year.
The drones approached from Ukraine’s Vinnytsia, Odesa, and Chernivtsi oblasts, according to Moldova’s Defense Ministry. Authorities temporarily closed part of the country’s northern airspace.
Near Cernița in northern Moldova, one drone struck a tree, fell into a field beside a farm, and exploded, police said. No casualties were reported.
Investigators preliminarily identified the camera-equipped wreckage as a Gerbera, a low-cost Russian drone often used during attacks on Ukraine. Police said it was the first device of that type found in Moldova.
Police also reported a resident’s account of another explosion near Vadul Rașcov, but said they were still investigating the location.
Romanian radar first tracked an aerial target over Ukraine near the border before it entered northern Romania, the Defense Ministry said. Romania launched two F-16s and sent emergency alerts to residents’ phones in the area. The drone remained in Romanian airspace for about four minutes before crashing near Solca, the ministry said. Officials reported no casualties or damage and had not identified the drone’s origin.
Poland’s Operational Command launched fighters twice in response to Russian strikes on western Ukraine. The first Polish deployment ended around 08:00 with no airspace violation detected; the command announced a second at 09:07. It also activated ground-based air defenses and radar.
The incursions came amid a wider assault. Ukraine’s Air Force said Russia launched 282 drones of various types, along with ballistic and other missiles, overnight into 24 September. Ukrainian officials reported detecting four drones over Chernivtsi Oblast, the Ukrainian region bordering Moldova and Romania, and shooting down three.
The latest incident followed several breaches in August. An unidentified drone exploded near Crocmaz on 9 August. Another object exploded near Talmaza on 17 August after Moldova briefly closed part of its airspace.
President Maia Sandu said Russian drones had entered Moldovan airspace 39 times in 2026, compared with 17 times throughout 2025. Moldova has portable air-defense weapons and electronic warfare equipment, but Sandu said these chiefly protect individual sites. Her government is working with partners to expand air-defense coverage and speed up threat warnings.
A court in Pula ruled that Ukrainian diving instructor Volodymyr Zhuravliov may be extradited to Germany over the September 2022 blasts that damaged the Nord Stream gas pipelines between Russia and Germany and caused major leaks in the Baltic Sea, RBC-Ukraine reported, citing his lawyers.
A Polish court refused to extradite Zhuravliov last year, but its ruling did not cancel Germany’s EU-wide arrest warrant. Croatia could therefore arrest him and decide Germany’s request for itself. The pipelines at the center of the case were built to carry Russian gas to Germany while bypassing Ukraine.
The firm Katerynchuk, Moor & Partners said it expected to receive the written ruling shortly and was preparing to challenge it in Croatia’s appellate court and before international judicial bodies. Zhuravliov also plans to announce an indefinite hunger strike. His lawyers said the Croatian court had disregarded the earlier Polish decision.
The Warsaw court refused to surrender Zhuravliov in October 2025, finding that the pipelines could be treated as a legitimate military target during an armed conflict. It released him from custody.
His Polish lawyer, Tymoteusz Paprocki, said Zhuravliov understood that the ruling applied only within Poland: under a European arrest warrant, the country where a suspect is arrested decides whether to send them to the country seeking them.
Germany amended the warrant in early September to add a war-crime classification, according to Zhuravliov’s lawyers. The change prompted the Croatian court to postpone an earlier hearing. The lawyers’ account of the amendment has not been independently confirmed.
Nord Stream 1 and 2 were built to carry Russian gas directly to Germany while bypassing Ukraine. Explosions on 26 September 2022 damaged three of their four lines; Nord Stream 2 had never entered service.
Germany issued a warrant for Zhuravliov in 2024. German prosecutors say he helped place explosives on the pipelines near Denmark’s Bornholm island. He denies involvement. Croatian police arrested him in Pula on 19 August 2026 under the European warrant.
Another Ukrainian suspect, Serhii Kuznietsov, was arrested in Italy in 2025 and later sent to Germany, where prosecutors have charged him over the explosions. He denies involvement. No court has established who ordered the attack.
US intelligence has warned Spain, France, and Italy that Russia may be preparing to launch drones at one of them from merchant ships in the Mediterranean, El Mundo reported on 23 September, citing sources familiar with the alert. Neither the CIA nor the three governments have confirmed it.
Russia has intensified a campaign of sabotage, airspace incursions, and other provocations against European states supporting Ukraine while keeping its actions below the threshold of open conflict with NATO. A maritime drone attack would extend that campaign into southern Europe, turning the Mediterranean into a launch zone for deniable strikes on civilian or military infrastructure.
El Mundo based its account on a source close to Lithuania's Defense Ministry and analysts familiar with a CIA report circulated among European foreign ministries. The reported plan would hide small Russian Gerbera drones inside shipping containers aboard merchant ships and launch them from the Mediterranean.
According to El Mundo, a Gerbera drone can travel up to 600 kilometers depending on payload and wind, potentially putting targets along NATO's southern coast within reach of a ship offshore.
The Gerbera drone's reported 4–5 kilogram explosive payload would be unlikely to destroy a large facility, the newspaper said, but could start a fire, damage exposed equipment, or temporarily close an airport or port.
All three countries hold elections in 2027 and have political forces capable of exploiting fear and fatigue with Ukraine, with connections to Kremlin interests especially visible in France and Italy, El Mundo reported. Keir Giles, a British defense analyst, said frontline states are not necessarily the targets—the target will be wherever Europe's weakest point is, naming the UK and Spain as countries that have not invested in air and missile defense adequate to the Russian threat.
El Mundo placed the warning alongside earlier Russian drone incidents on NATO territory. In September 2025, 19 unarmed drones strayed into Polish airspace. German authorities later attributed an explosive-carrying drone incident at Leipzig airport to Russia.
Russia's oil shipments and naval presence, alongside reported Ukrainian operations, have brought the conflict into the region in several ways.
A source cited by Ukrainian media said Ukraine's Security Service struck a Russian shadow-fleet tanker there in December 2025. Such vessels carry Russian oil outside Western sanctions, making the sea a route for Moscow's war revenue and a target for Kyiv.
The French outlet RFI later reported that Ukraine may have established a drone launch site in Libya for strikes on Russian shipping. Kyiv has not confirmed the reported site.
Russia's military position in the region has also shifted. British intelligence assessed in January 2025 that its Mediterranean naval force lacked access to its Syrian base at Tartus after Bashar al-Assad's fall.
A new bilateral security agreement puts Australia's support for Ukraine on a long-term footing, the Australian government said. The pact bundles fresh money for Kyiv, wider sanctions on Russia, and a new role for Australia in a multinational effort to rebuild Ukraine's Navy.
Australia sits half a world from the front, yet it wants what Ukraine has learned. The deal runs both ways—Australia sends money and equipment, and treats more than four years of Ukrainian war-fighting as a lesson for its own forces. One-off aid packages are giving way to long-term security pacts as Ukraine's partners lock in support—and, more and more, ask to learn from the force that has spent years fighting Russia.
Prime Minister Anthony Albanese and President Volodymyr Zelenskyy signed the agreement on 24 September. Albanese pledged an additional A$60 million ($42 million) in support. It splits into A$45 million ($32 million) of Australian Defence Force equipment, A$10 million for Ukraine's Energy Support Fund, and A$5 million in humanitarian aid. That lifts Australia's total contribution to almost A$1.9 billion ($1.3 billion). Australia also widened its sanctions on Russia to almost 1,900 measures and listed nearly 300 shadow-fleet vessels—the aging tankers Moscow uses to move oil around Western price caps.
Australia will also join the Maritime Capability Coalition for Ukraine, a UK- and Norway-led group building up Ukraine's Navy. The government cast the move as another two-way exchange: it helps Ukraine at sea while giving Australian planners insights into advanced maritime capabilities and their operational use.
The agreement frames the partnership as a trade in know-how, not just aid. Deputy Prime Minister Richard Marles said that through deeper cooperation Australia could "lend our strengths and insights to help grow Ukraine's defence industrial base, and likewise learn from the hard-fought lessons of Ukraine's resistance in developing our future capabilities." Ukraine has shown what an innovative, agile force can do in a drone-heavy war, and Canberra wants the lessons. Australia has already supplied 49 retired M1A1 Abrams tanks and 120 Bushmaster protected vehicles, hardware Ukrainian crews took straight into frontline use. Two Australian companies are also developing Arrow interceptor drones for delivery to Ukraine.
The two soldiers were captured by Ukrainian forces in Russia’s Kursk region in January last year
© Getty
Russia's propaganda center Rybar ran a covert filming operation across multiple European countries, Ukraine's Center for Countering Disinformation (CCD) reported, citing a Czech investigation by Seznam Zprávy. The founder of the project, Mykhailo Zvinchuk, has been under sanctions by the European Union and the UK.
The EU's sanctions justification states that Rybar is a member of a working group established by Vladimir Putin in December 2022 to coordinate Russia's mobilization efforts in connection with the war against Ukraine.
Moscow has recently escalated covert influence operations and disinformation across Europe, yet years of sanctions have not stopped its operatives from working inside the EU. The Rybar case shows how thin the enforcement of those measures remains.
Russians moved freely within the Schengen Area, holding residence permits for EU countries, particularly Germany. They traveled to Prague posing as documentary filmmakers and attempted to record interviews with local experts and politicians. The stated pretext was a documentary series on Europe's sociopolitical situation.
When Seznam Zprávy journalists confronted the film crew at the meeting location, the propagandists fled. The investigation identified Boris Dvorkin as the Moscow-based producer of the operation. One of his projects received funding from the History of the Fatherland Foundation, established by Putin's decree and headed by Sergei Naryshkin, chief of Russia's Foreign Intelligence Service (SVR).
Similar filming operations were allegedly planned or already carried out in Czechia, Slovakia, Austria, Hungary, Serbia, France, and other countries, the CCD said.
The UK sanctioned Rybar and Zvinchuk in December 2025, citing the network's interference in elections in Moldova and Armenia. It added ten more Rybar staff members in July 2026 for their role in destabilizing Ukraine. In 2024, the US State Department offered a $10 million reward for information on Zvinchuk and eight others tied to the project.
Russia’s Defense Ministry claimed on 22 September 2026 that it had surrounded Dobropillia, but the Institute for the Study of War (ISW) found no evidence to support the announcement. Dobropillia is a small town in Donetsk Oblast, known as the "pearl of the Donbas" for its coal industry, which has helped make Ukraine's Fortress Belt cities, holding the region from Russians since 2014, per RBC Ukraine.
Ukraine’s Vivaldi counteroffensive in Donetsk Oblast broke the northern arm of Russia’s plan to surround the fortified cities. ISW says Moscow’s Dobropillia claim diverts attention from that setback and portrays Ukrainian defenses as collapsing during the 81st session of the UN General Assembly, held on 21-28 September. The institute says Russia is likely spreading such claims to support its push for Ukraine’s capitulation.
Meanwhile, Ukrainian officers say Russian assault groups are still trying to break through toward Dobropillia, but have made no major gains.
Russia’s Ministry of Defense has claimed its troops were advancing toward Oleksandrivka, a village northwest of Dobropillia, but published no map to support its account.
At the same time, Ukrainian military observer Kostyantyn Mashovets said Ukrainian troops still held positions south and northeast of the city, which the experts said was inconsistent with the claimed encirclement.
ISW reported that a Ukrainian artillery reconnaissance battalion chief of staff said on 22 September that Russia had made no major advances near Dobropillia. He said Russian commanders kept postponing deadlines because of heavy losses and a gap between their plans and battlefield conditions.
A Ukrainian battalion officer said Russian troops were still trying to slip through Ukrainian lines in small groups.
Dobropillia is a transport hub on the southwestern approach to Ukraine’s “fortress belt,” which includes Kostiantynivka, Druzhkivka, Kramatorsk, and Sloviansk. These cities have anchored Ukraine’s defense in Donetsk Oblast since 2022.
Ukraine’s Third Army Corps commander, Andrii Biletskyi, whose corps is conducting the Vivaldi counteroffensive north of Lyman, explained that Russian forces advancing through Dobropillia were meant to join another force coming from north of Lyman, behind the fortified cities, encircling them rather than attacking them head-on.
ISW had already assessed on 16 September that Vivaldi had made the two-sided plan infeasible. In its 22 September report, ISW said Russia’s false claim about Dobropillia partly aims to divert attention from those Ukrainian gains.
The setback north of Lyman has not stopped Russia’s push toward Dobropillia. Ukrainian staff sergeant Dmytro Davydenko reported on 14 September a sharp increase in assault groups moving toward the city, sometimes more than his unit could engage. He said Ukrainian troops had mined, blocked, or destroyed the main approaches.
ISW reported that Russia was preparing armor and drone support for possible assaults using armored vehicles this fall. A Ukrainian battalion officer said fog might help Russia move that equipment, although Ukrainian reconnaissance and drones would make it difficult. He said Russian glide bombs continued to strike infrastructure in the area.
Ukraine's Vivaldi counteroffensive rolled back a Russian advance north of Lyman in Donetsk Oblast. However, Moscow shifted part of its forces south, Roman Pohorilyi, co-founder of the Ukrainian battlefield mapping project DeepState, told Radio NV. Russian troops are now infiltrating Mykolaivka, a key strongpoint on the approach to the fortress city of Sloviansk, Pohorilyi said.
The halted advance was one arm of Russia's plan to encircle Ukraine's Donetsk fortress belt—the fortified cities of Sloviansk, Kramatorsk, Druzhkivka, and Kostiantynivka. Pohorilyi warned that losing Mykolaivka would create serious problems for Sloviansk's defenders. Russia is still pressing toward Dobropillia on the belt's southwestern flank.
Pohorilyi said Russia formed a "claw" north of Lyman by exploiting Ukrainian brigades short of personnel and pushing small groups into their lines. Ukraine's Third Army Corps stabilized the area, built up forces, and counterattacked. The push "multiplied all [Russia's] previous efforts by zero," he said.
Russian forces had repeatedly tried to capture or bypass Lyman, Pohorilyi said. Russian groups still infiltrate the approaches to the city, although Ukrainian forces have stabilized the situation there.
The corps says Vivaldi's first two phases regained control of 125 square kilometers, including 50 that had been under Russian occupation. It reported liberating Shandryholove and Derylove, securing Drobysheve, and inflicting more than 3,000 Russian personnel losses. Those battlefield figures have not been independently verified.
Pohorilyi noted that the area around Mykolaivka had, until recently, been under the responsibility of Ukraine's 11th Army Corps and is now under the Third Army Corps.
Ukrainian troops must now find and stop infiltrating Russian groups before they establish control, he said. Personnel shortages on the Lyman axis persist, although he said reinforcements are being distributed more evenly.
The Third Army Corps first disclosed Operation Vivaldi on 15 September after conducting the counteroffensive north of Lyman under information silence. Commander Andrii Biletskyi said the announced gains were only the first phase; the corps said its attacks had disrupted Russian supply routes.
A 60th Mechanized Brigade captain said Ukrainian units quietly assembled near Derylove and Drobysheve, then struck Russian drone launch sites at planned times so infantry could advance. The corps disclosed a second phase on 20 September.
Farther southwest, Dobropillia faces even heavier pressure, Pohorilyi said. Russia has concentrated large forces there and is pushing with relentless infantry across a wide front, backed by thousands of drones each month—reconnaissance, strike, FPV, and Lancets—with numbers still rising. Russian troops are moving on settlements south of Dobropillia to establish a strongpoint and push deeper into Donetsk Oblast.
The pressure is not new: Biletskyi said Ukrainian troops halted a Russian incursion there last year. After Moscow claimed on 22 September to have encircled the town, the Institute for the Study of War found no evidence to support the claim.
Russian missile strikes shut down or damaged four of Ukraine's largest steel plants in August and September, halving steel output and prompting the operator of the country's largest plant to call on the government to pass a dedicated rescue plan, RBC-Ukraine reported.
Russia's full-scale war has already cost Ukraine the Azovstal plant in Mariupol, one of its largest steel mills, and more than two years of disrupted production across the sector. The latest strikes hit plants that produce the bulk of remaining capacity, concentrated in a single month, in what the industry describes as a deep crisis for a sector that supplies 6% of the country's GDP.
The 11 August strike on Zaporizhstal killed seven workers and injured 21 as they headed for a shelter, Metinvest said; a second ballistic strike on the plant followed on 27 August. Two died and 13 were injured at ArcelorMittal Kryvyi Rih, and five were killed at Kametstal. Russia also hit the Dnipro Metallurgical Plant. On 12 September, Russia struck both Zaporizhstal and ArcelorMittal Kryvyi Rih again with ballistic missiles.
Zaporizhstal and Kametstal, both part of the Metinvest group, stopped entirely. ArcelorMittal Kryvyi Rih—Ukraine's largest steel plant—partially shut down. Zaporizhstal and ArcelorMittal alone produce more than 70% of Ukraine's steel.
August steel production fell to 277,000 tons, down 57.3% year on year and 39.4% from July, according to Ukrmetalurhprom data cited by GMK Center. Rolled-metal output dropped to 270,000 tons.
The strikes came on top of a Black Sea port blockade that has shut down maritime exports of iron ore and steel since late July. A 30% increase in rail tariffs took effect on 1 August. Alternative routes—rail through western border crossings, Danube ports, and roads—can carry at most 50% of what the Black Sea ports handled, GMK Center analyst Andrii Hlushchenko said. Steelmakers also have to compete with farmers for that limited rail capacity.
Rail exports of iron ore and metals dropped 2.5 times in the first 15 days of September compared with the same period last year, Ukrzaliznytsia said. Shipping iron-ore pellets through European ports costs $50–60 per ton, making many deliveries unprofitable.
The steel sector generated 6% of Ukraine's GDP last year, brought in 13% of all foreign-currency earnings, and paid UAH 27 billion (about $606 million) into budgets between January and July. Deputy chair of the parliamentary economic committee Dmytro Kysylevskyi called the situation "a perfect storm."
Meanwhile, Türkiye re-rolls Russian slabs and sells the resulting steel on Ukraine's domestic market. China uses cheap Russian energy to undercut Ukrainian prices.
"We are effectively importing Russian metal in the form of finished products," Ukrmetalurhprom President Oleksandr Kalenkov said.
ArcelorMittal Kryvyi Rih CEO Mauro Longobardo said the government should pass a dedicated Cabinet resolution assigning specific tasks and deadlines to multiple agencies at once.
"No single agency can solve the full set of problems. Without a single document with assigned responsibilities and deadlines, each issue is dealt with in isolation and stalls," ArcelorMittal Kryvyi Rih representatives said.
The resolution should cover EU negotiations on deferring the carbon border tax (CBAM) until at least the end of martial law plus one year, restoring steel quotas to last year's level, stabilizing rail tariffs, securing long-term electricity contracts for industry, and launching anti-dumping investigations against Turkish and Chinese imports, Longobardo said.
Ukraine's Economy and Environment Ministry said it is in talks with the European Commission on easing CBAM and expanding quotas. A Cabinet source told the outlet that Black Sea trade negotiations with Russia are possible in October, after the Duma elections that ended on 20 September.
We have come to know the Kremlin's energy playbook well: "Europe will freeze without Russian gas," "sanctions hurt Europe more than Russia," "a managed, indefinite return to Russian supply is simply pragmatic." The respected European project EUvsDisinfo has repeatedly exposed these false narratives, carried by Russian state media, proxy outlets, and paid commentators. But Kremlin-friendly energy narratives do not travel only through obvious propaganda channels. They also enter policy debate through expert commentary, think tanks, media quotes, and institutional platforms, where they are far harder to see.
None of the apocalyptic forecasts came true. Europe cut Russian gas imports from 45% in 2021 to 13% by 2025 without blackouts or economic collapse. Yet the narratives predicting ruin kept circulating, sometimes from unexpected addresses. One of them, in my view, is worth a closer look: the work of Katja Yafimava, of the Oxford Institute for Energy Studies.
Across nearly two decades, in my reading, her analysis has landed with remarkable consistency where Gazprom would want it. Gazprom's trading arm was once among the sponsors of her program. The record is public, and it is worth reading in full.
The most effective version of Kremlin-friendly energy messaging does not shout. It hedges, reframes, and omits. It raises "legitimate concerns" about sanctions costs, stresses the "legal complexities" of an LNG ban, and warns of "supply disruption risks" from moving too fast, without weighing Ukrainian lives or the cheaper, homegrown clean-energy alternative. Real concerns about European energy security did exist. What is worth noting is how reliably certain voices amplified concerns and how rarely they weighed counter-evidence.
This is not abstract. Surging oil and gas prices since the Iran war have handed Russia windfall revenues averaging, according to the Centre for Research on Energy and Clean Air, €604 million a day, money that funds the missiles falling on Ukrainian cities. Every argument for delay has a price, and Ukrainians pay part of it.
Katja Yafimava is a Senior Research Fellow at the OIES, which she joined in 2006. The institute is an independent charity rather than a department of the University of Oxford, which recognizes it as a separate independent research center. It carries the Oxford name, and its researchers appear regularly as authoritative, independent voices in UK and European media.
That independence has been questioned. Democracy for Sale, an investigative outlet, has documented the proximity between Russian oil and gas industry money and OIES, which previously received funding from Gazprom and its subsidiaries. OIES's own website and annual reports up to 2020 list Gazprom Marketing and Trading among over 20 organizations that sponsored equally its Natural Gas Research Programme, where Yafimava works, alongside Nord Stream 2 financiers Shell, OMV, Uniper, and Wintershall.
None of that, on its own, tells you what any individual researcher believes. What makes it worth raising is the alignment between that funding context and a published record that, across nearly two decades, has been remarkably convenient for Gazprom's positions.
Energy Ireland 2022
— Energy Ireland (@energyireland) April 14, 2022Croke Park, Dublin
29-30 June
Meet the speakers
Dr Katja Yafimava
Senior Research Fellow@OxfordEnergy
Register onlinehttps://t.co/mrGfdZJ5bw#EnergyIreland pic.twitter.com/wdc7LwXAEf
Consider the pattern. In 2017, Yafimava argued that Poland's legal challenge to the European Commission decision widening Gazprom's access to the OPAL pipeline risked letting political objectives override regulatory rules, a framing that would sit comfortably in Gazprom's own filings. She framed the EU's Gas Directive amendment as an instrument "aimed primarily at Nord Stream 2" in a 2019 paper. Russian state media have quoted her approvingly in pieces casting Brussels or Washington as acting in bad faith.
In September 2021, as suspicion grew that Gazprom was deliberately holding back gas to squeeze Europe before winter, she told Bloomberg she did not subscribe to that view, insisting the company "has not abused" the tight market and "has not manipulated it," and had "honored all of its contractual supply obligations to Europe." Within months, Russia's supply cuts had become the opening move of an energy war. In January 2022, the head of the IEA said Russia's cuts were creating "artificial tightness" in European markets.
Each judgment is defensible in isolation. It is the direction of the whole series that is striking: over years and across cases, the analysis lands where Gazprom would want it to land.
Through 2022 and 2023, Yafimava warned that cutting Russian gas too fast risked "unavoidable" blackouts in Central and Eastern Europe. The blackouts never came. In a 2025 paper, she and two OIES colleagues accepted that the phase-out would be manageable for markets, but argued that the EU's proposed ban risked undermining the commercial and legal positions of European importers, and that it was "not obvious" the risk was worth taking to end modest volumes of Russian gas after 2027. A competing Forum Energii report concluded that full EU independence from Russian fuel by 2027 is feasible, and that Russia needs EU markets more than the EU needs Russian supply. In early 2026, she wrote that no complete phase-out "will happen either by 2027 or by 2028."
A forecast is not a crime. But the forecasts, like the analyses, keep pointing one way.
She has also stepped beyond technical commentary. On 27 January 2026, responding to a Financial Times report on US security guarantees for Ukraine, she posted on X that "reliable security guarantees could only be achieved via common European security architecture that would have to include Russia," a framing that mirrors a longstanding Kremlin strategic goal.
The US won't provide *any* security guarantees before peace is reached not to risk its forces to be drawn in combat. Moreover, reliable security guarantees could only be achieved via common European security architecture that would have to include Russia https://t.co/LrY6713dqF
— Katja Gresko-Yafimava (@katyafimava) January 27, 2026
Katja Yafimava's current position as Vice-Chair of the UNECE Group of Experts on Gas gives her a visible role in a UN forum that helps shape discussion on European gas policy, security of supply, and the energy transition. In January 2026 she co-opened and concluded the Group's workshop on implementation of the EU Methane Regulation. The arguments she repeatedly advances can have policy effects closely aligned with Russian commercial and strategic interests. At a UNECE/OIES workshop in 2025, for example, she explicitly examined the possibility of a "limited return" of Russian gas to Europe via Ukraine, while her subsequent OIES paper argued that the EU ban on Russian gas could undermine European importers and security of supply and questioned whether ending the remaining Russian imports after 2027 was worth the associated risks.
The alignment is a matter of record. Why independent analysis, over nearly twenty years, has tracked so reliably the interests of a company that once helped fund her program is a question that deserves an answer.
Here is what the arguments for delay leave out: the alternative to Russian energy is not economic ruin. It is cheaper renewable power. The International Renewable Energy Agency found that in 2024, 91% of new renewable projects were cheaper than any fossil-fuel alternative; solar came in 41% below fossil power, and onshore wind 53% below. Renewables saved $467 billion in fossil-fuel costs in 2024 alone, and battery storage has fallen more than 93% in price since 2010.
This is the point that "supply disruption" warnings tend to bury, and it is why the warnings matter. Every year of delay, justified by the risks of moving too fast, is a year of continued payments to Moscow when a cheaper, domestic, un-weaponizable alternative already exists. Renewables reached 47% of the EU electricity mix in 2025; EU gas demand fell more than 17% between 2022 and early 2025; and the gas import ban agreed in December 2025 phases out Russian pipeline gas and LNG by the end of 2027, precisely the direction the delay arguments have worked against. The transition is not the risk. The delay is.
Editors, producers, and conference organizers could apply to energy analysts the conflict-of-interest standards already routine for pharmaceutical research: prior employment or program funding from Gazprom, Sberbank, or Russia-linked entities disclosed clearly every time such an analyst is presented as independent. UNECE could ask whether agenda-setting roles over European energy policy are well placed with analysts whose published record aligns so consistently with Kremlin positions. And Europe could close the transparency gaps that let think tanks with Russian-adjacent funding operate without disclosure requirements.
Every euro Russia earns from energy funds the war against Ukraine. The least we can do is know who is arguing for delay, and who once funded the programs they work in.
Disclosure: the author was involved in a March 2026 Razom We Stand research concerning the Oxford Institute for Energy Studies and Katja Yafimava, and works as a strategic advisor to the organization. Euromaidan Press reached out to Dr. Yafimava for a comment, but received no answer at publication date.
Editor's note. The opinions expressed in our Opinion section belong to their authors. Euromaidan Press' editorial team may or may not share them.
Submit an opinion to Euromaidan Press
Russia is trying to "scare Europe" through hybrid attacks so that it provides less support to Ukraine, but Moscow has neither an interest in nor the capability to escalate to a full-scale military confrontation with NATO, Finnish President Alexander Stubb told Politico on 21 September during an interview on the sidelines of the UN General Assembly—even as other European leaders warn that Russian strikes on NATO territory could come within months.
Ukraine critically needs Western support as Russia's full-scale invasion continues. NATO's PURL program has provided about 75% of all Patriot battery missiles and 90% of the missiles used in other air defense systems since its launch last summer, according to NATO Secretary General Mark Rutte on 3 February. Some countries are also hubs for defense companies that produce weapons for Ukraine. Russia is trying to pressure such countries, including through hybrid attacks. Polish Prime Minister Donald Tusk and the head of the Czech security service have warned that Russia could strike NATO territory within months. The Finnish president says his own intelligence sees activity but no imminent military threat, and calls it an "overreaction" when intelligence services tell their neighbors they are next for a Russian invasion.
Stubb calls claims by some intelligence services that Europe is next for a Russian invasion an "overreaction" and says he sees no evidence of this.
"We think we have to be vigilant and awake. But, you know, we have the longest border in NATO with Russia, it's half the border. In our intelligence we see that there is activity but no imminent military threat right now," Stubb added.
Europe should prepare for Russia's "continued hybrid and sabotage attacks," but should not "overreact" to them, as Russia wants to scare its allies so that they slow down their support for Ukraine, the Finnish president said.
"And any time we overreact to a hybrid attack, they have actually won the battle in that particular way," Stubb told Politico.
Europe should remain "cool, calm and collected" during such Russian intimidation, the Finnish president said.
Germany's recent decision to officially hold Russia responsible for an attempted drone attack in Leipzig is "exactly what you need to do," Stubb said.
"You need to point the finger and say, we know what you're doing, and these are the consequences," he added.
A pro-Kremlin group, Global Citizens Against War 1984, issued an ultimatum to Latvia, Poland, and Portugal to stop supplying weapons to Ukraine by 7 October, threatening to disrupt defense companies in those countries.
Russia could carry out "accidental" drone or missile strikes against NATO countries supporting Ukraine in an attempt to weaken the Alliance's integrity and persuade members that Article 5 is more theoretical than practical, Polish Prime Minister Donald Tusk said in parliament on 17 September, citing NATO, Ukrainian, and Polish intelligence assessments.
"There is a real risk that drones or other types of missiles could enter the territory of one or several NATO countries on the eastern flank," Tusk said.
The head of the Czech security service warned separately that Russia could undertake a limited incursion, false-flag provocations, and a massive influence campaign in a matter of months rather than years.
The EU locked in its sanctions on Russia for an unprecedented three years this week, and paid for it by letting two of the country's richest men off the list. Alisher Usmanov and Mikhail Fridman were delisted at the insistence of Slovakia, France, and Luxembourg, DW reported.
France pushed to remove Usmanov, a Kremlin-linked metals and telecoms magnate, as part of a secret deal to free prisoners held in Azerbaijan, and Luxembourg pushed to remove Fridman, who is pursuing the country for about $16 billion in arbitration over the losses his sanctions caused, the Financial Times reported.
Kyiv's reaction was immediate and furious
Foreign Minister Andrii Sybiha called the decision shameful and unjustified and urged EU states to impose their own national sanctions on the pair.
"In Moscow, they celebrate, because they got what they wanted: a sense of impunity, humiliation of the European Union, and division among Europeans," he wrote on X.
President Volodymyr Zelenskyy, who raised the issue with European Commission chief Ursula von der Leyen in New York, called the delisting "suicidal and counterproductive."
"Wars end with resolve and strength, not concessions to the aggressor's cronies," he said, thanking von der Leyen for agreeing to work on adding more Russian names to the lists.
At the same time, he stated that he "is grateful to Ursula for her willingness to work on adding more Russian individuals to the EU sanctions lists."
The step was a bargain of durability for names. Rather than roll the sanctions over for the usual six months, the EU previously extended them to 22 September 2029, keeping some 2,600 Russians and companies, including President Vladimir Putin, frozen out for three years, after weeks of deadlock that at one point nearly let the whole regime lapse.
The deal came only after the bloc pushed its deadline back a week to buy time, and its Irish presidency called the result a difficult compromise.
More than two-thirds of the Russian soldiers holding the Zaporizhzhia front carry criminal records. Ukraine's "South" grouping says a third of them enlisted to escape prosecution, most are over 30, and no fresh reinforcements are arriving, spokesperson Anastasia Shevchenko told Ukrinform.
The reasons they signed up track with that: 31 percent enlisted to dodge criminal liability, 24 percent for money, 26 percent on ordinary contracts, and 13 percent through mobilization. It is Russia's prison pipeline in a single snapshot, a model that has pulled well over 100,000 inmates into the war with pardons and suspended sentences and thrown many of them at Ukrainian lines in disposable assault waves.
"It is worth noting that 69 percent of the Russian personnel have a criminal record," Shevchenko said.
The model dates to Wagner's prison recruiting in 2022 and has run under the Defense Ministry since.
A middle-aged force holds the line
The men are not young. More than a third, 36 percent, are between 31 and 40; another 24 percent are 41 to 50; 31 percent are 21 to 30; and just 9 percent are 20 or under.
This is a force of grown men with records, not fresh conscripts, and it points to who Russia can still find willing to fight in the south: people with little to lose and a sentence to escape among Ukrainian civilians, women and children.
The prison pipeline runs dry
What Shevchenko did not report is any sign of that force being rebuilt. Russia has enough men and equipment to keep fighting on the Zaporizhzhia front, she says, but no substantial replenishment is coming.
That fits a wider problem for Russia: its supply of convict recruits is thinning as word of the front's lethality spreads through the prisons, with some inmates now signing military contracts only to bolt on the way to the front, in one case killing their escort to get away.
Russia's practice of replenishing its ranks from prisons is breaking down, and officials are resorting to ever more coercive measures to keep the flow going.
Ukrainian drones struck Rosneft's Kuibyshev refinery in Samara overnight on 22 September, hitting two primary crude-processing units and triggering a large fire, Ukrainian drone and missile maker Fire Point confirmed. The strike is part of Ukraine's ongoing campaign against the fuel infrastructure that sustains Russia's war—the same plant had to halt crude processing after a drone attack in June. The attack came one day after US President Donald Trump for the second time in a week urged Ukraine's leader, Volodymyr Zelenskyy, to stop the refinery campaign.
Fire Point said its FP-1 drones struck the Kuibyshev refinery, hitting the AVT-4 and AVT-5 atmospheric-vacuum distillation units—the plant's primary crude-processing installations. A large fire broke out on the refinery grounds. The Kuibyshev refinery is part of Rosneft and has a designed processing capacity of about 7 million tons of crude oil per year. It is located more than 900 km from the war zone in Ukraine.
Samara, moment of attack pic.twitter.com/U47yrene3z
— Exilenova+ (@Exilenova_plus) September 22, 2026
Ukrainian Telegram channel Exilenova+ began reporting explosions and air defense activity in Samara Oblast at 3:50 a.m. By 4:24 a.m., the channel posted videos showing a night fire at the refinery. OSINT channel World Militaries identified the AVT-5 unit as the initial fire site.
Russian news Telegram channel Astra separately confirmed the fire at the Kuibyshev refinery.
By morning, the fire was still burning. The smoke plume stretched about 100 km across Samara Oblast, Exilenova+ reported.
Smoke from the Kuibyshev Oil Refinery in Samara has already stretched for 100 km across Russian territory. pic.twitter.com/U5KQ0v1eTW
— Exilenova+ (@Exilenova_plus) September 22, 2026
The Kuibyshev refinery stopped processing crude in June 2026 after Ukrainian drones hit its AVT-4 and AVT-5 units—the same pair now struck again. Each unit processes about 10,000 tons of crude per day, or roughly 73,000 barrels. The refinery had also suspended operations after a drone attack in August 2025.
Exilenova+ also reported that Ukrainian forces struck a military base in the city of Pochep in Bryansk Oblast overnight, with fire observed at the site. Residents of Tolyatti in Samara Oblast reported explosions, and witnesses suggested the Tolyattikauchuk synthetic rubber plant had been hit, Suspilne reported.
Samara Oblast Governor Vyacheslav Fedorishchev confirmed the attack, claiming Russian air defenses intercepted "dozens of drones." He said drones "targeted industrial enterprises" but did not name which ones. Russia's Defense Ministry claimed 297 Ukrainian drones were intercepted over 14 oblasts and occupied Crimea.
Ukraine's General Staff confirmed strikes on both the Bashneft-UNPZ refinery in Ufa and the Kuibyshev refinery in Samara, with fire observed at both sites. Ukraine has been striking Russian refineries continuously for months—hitting targets in Saratov and Volgograd on 11 September, Slavyansk-na-Kubani on 14 September, Syzran on 15 September, Yaroslavl on 17 September, and Ufa on 21 September, the night before the Kuibyshev strike. Earlier, the General Staff said the campaign has disabled 45% of Russia's oil-refining capacity. The strikes have also pushed Russia's fuel crisis into Central Asia, where shortages forced Kazakhstan to seek emergency supplies.
Trump urged Zelenskyy to stop the campaign for the second time in a week during their 21 September call, telling him "don't hit diesel fuel" and blaming Ukrainian strikes—not the Iran conflict—for rising US diesel prices.
A Kremlin-backed program aimed at primary-school children claims 10,154 participants in occupied Zaporizhzhia, nearly 30 times Yunarmia's 355 members—Russia's uniformed military youth organization—Petro Andryushchenko, head of the Center for the Study of Occupation, said. Cadet classes in the same region account for another 387, according to Andryushchenko.
Yunarmia may represent only a fraction of Moscow’s system for militarizing Ukrainian children under occupation. Movement of the First, a Kremlin-backed mass youth group covering ages 6 to 18, claims about 65 times Yunarmia's membership in occupied Zaporizhzhia—over 23,000 by the end of 2025, up from about 14,000 a year earlier, according to Andryushchenko's breakdown of the series. A separate infographic in the same series puts the figure at over 19,000. Moscow has sustained the broader campaign throughout the full-scale invasion, combining classroom indoctrination, Kremlin youth movements, military games, and weapons training.
Andryushchenko explains why: Movement of the First is not a military organization, and that is precisely its function—a mass base that enrolls children without their joining any military-patriotic structure, then moves some into specialized programs. Through it, Zarnitsa stopped being a school game and became part of Russia's military-patriotic system. The movement functions as a gateway, not an endpoint.
In Kherson Oblast, the pattern repeated: over 2,700 children and young people passed through Movement of the First events in 2024, and by spring 2025, the registered count had reached 6,200, with primary cells growing from about 70 to 114–115.
Andryushchenko said Eaglets of Russia, a program aimed at primary-school children aged 6 to 10, claims 10,154 participants across 97 schools and 626 class-teams in occupied Zaporizhzhia, while more than 2,000 children aged 11 to 17 have passed through the Zarnitsa 2.0 military game. In May 2026, children from all four occupied oblasts appeared at a federal Eaglets session alongside children from Russian regions—a sign the occupied territories are already integrated into the system.
He said military-applied instruction now fills about half of the OBZR course, Russia’s “Fundamentals of Security and Defense of the Motherland” subject, in occupation schools. He described a broader system stretching from kindergarten and mass children's organizations through military games and cadet structures to practical training in drones, tactics, weapons, and military medicine.
Beyond Zaporizhzhia, Andryushchenko said the Russian military-sports training center VOIN claims 14,450 trained cadets across four occupied Ukrainian territories in his overview post. A later infographic in the series gives 10,381 for the same four territories, suggesting the figures may count differently.
That cannot be read as a count of children because VOIN programs accept participants aged 14 to 35, according to the Center's own website, and no age breakdown was provided. VOIN says it has trained more than 100,000 cadets across 21 Russian regions overall.
Andryushchenko's post opened a six-part series tracing the system "from first grade to cadet"—though the series itself showed the pipeline actually begins in kindergarten, with "Conversations about Important Things" starting at age 5. Part two, published on 22 September, broke down Movement of the First's role as a gateway, with Zarnitsa 2.0 next. The participation totals cited in his post are claims by Russian-run organizations relayed by the Center. They may overlap, have not been independently verified, and do not show how many individual children participated or whether children move from one program to another.
These latest participation claims are the newest snapshot of a campaign that has expanded steadily throughout Russia’s full-scale invasion. In 2023, occupation schools were already teaching children to use assault rifles and provide battlefield first aid.
By late 2024, Putin had ordered the expansion of military-sports camps and youth indoctrination programs.
Reports published in 2025 and 2026 described mandatory “patriotism” lessons from first grade and documented Ukrainian orphans who entered cadet schools and later appeared in Russian military uniforms.
Expulsion of general who was second only to Xi in military hierarchy ‘marks one of the most dramatic purges’
© AFP/Getty
Russian drones have entered Moldovan airspace 39 times since the start of 2026, against 17 in all of last year, President Maia Sandu said after a meeting of the country's National Security Council, Liga reported. Moldova's military can defend individual sites and little more, and Sandu said the country has to speed up building air defenses it spent three decades without. The council also ordered better protection for the energy facilities the country runs on, drones included.
Moldovan forces hold portable anti-aircraft missiles, anti-aircraft machine guns, and electronic warfare equipment, Sandu said. Their capabilities are mostly limited to protecting individual pieces of critical infrastructure. Three decades of ignoring air defense will not be paid off in five, she said, and Moldova is working with partners to speed the process up.
The military is now working to extend the range its air defenses cover. Moldova received €120 million from the EU to buy a medium-range system, and it is looking with international partners for more modern and cheaper ways to bring drones down.
Chișinău is also deepening cooperation with countries in the region to receive and pass on threat data faster. Interception is the part Moldova cannot yet do: Romania has shot down drones that reached it after crossing Moldovan territory, while Moldova mostly records them.
The pace has picked up this month. A drone tracked over Moldova on 8 September held up seven flights, among them Volodymyr Zelenskyy's plane as it took off for King Harald V's funeral in Norway.
Three days later, Moldova temporarily withdrew its staff from three border crossings on Ukrainian territory because of the threat of Russian strikes, after Russia hit at least five of Ukraine's western crossings since late August.
On the morning of 18 September, a loud explosion went off near Chișinău and police found drone wreckage at the site. In August, a blast near the village of Talmaza marked the country's third airspace breach in nine days.
Moldova is still building the system that would tell people a drone is overhead. MD-Alert needs more time to implement and is costed at €5 million, Sandu said, and until it works the government will use whatever notification mechanisms it already has.
The council that produced the drone count was convened on energy, and its decisions ran from gas reserves and fuel stocks to cyber vulnerabilities. Among them, Sandu wrote, were measures to better protect the facilities the country's energy supply depends on from hostile action, including the danger of drones.
Russia wants to build 14,000 of a new cruise missile next year, enough to fire them at Ukrainian cities by the thousand. The weapon, the Dan-T, is a cheap air-launched jet missile that flies hundreds of kilometers on its own, RBC-Ukraine reported.
The danger is volume, not finesse. Russia aims to produce up to 2,000 Dan-T missiles by the end of this year and scale it drastically, RBC-Ukraine's sources say. Fired in large numbers, it would add a fresh layer to the Gerans and the cruise and ballistic missiles that already saturate Ukraine's skies on the worst nights.
Numbers make the threat
The experts are less worried about any single Dan-T than about the swarm. High speed, long range, and the ability to launch the missiles by the thousand would stretch Ukraine's air defense further with every strike, forcing crews to spend scarce interceptors on yet another cheap target.
The missile flies to its objective autonomously, and Russia claims a special flight profile designed to make it harder for air defense to spot and shoot down.
A target drone becomes a weapon
The Dan-T has an unusual pedigree. It began as the Dan-M, a jet-powered target drone Russia's Sokol bureau built in the early 1990s and imitated US Tomahawk cruise missiles for air-defense practice, now planned to be stripped of its recovery parachute, fitted with a warhead, and fired at Ukrainian cities. Like Russia's other new cruise weapons, it carries no operator link, steering itself by satellite and inertial navigation.
The Banderol joins the list
The Dan-T is not the only new weapon unsettling Ukraine's military. The experts named it alongside the S8000 Banderol, a separate cheap cruise missile that Russia already builds at up to 80 a month and has used in some of its heaviest strikes on Kyiv. The Dan-T closely resembles the Banderol and, being cheaper, may end up replacing it.
Russian authorities left residents in and around Moscow without air raid sirens or phone alerts during Ukraine's largest combined strike on Moscow Oblast, apparently to guard turnout at Russia's parliamentary elections, the Institute for the Study of War (ISW) said. The silence angered residents and even pro-war commentators as a major oil refinery burned.
For most of this war, Russia has handled strikes on its cities as a routine to be announced, warned about, and waited out. Withholding warnings during the heaviest raid yet, in the middle of a national vote, suggests authorities will trade residents' safety for the look of a calm election when a political milestone is on the line.
Ukraine hit strategic sites across the Moscow area overnight on 19-20 September, the last day of Russia's State Duma vote. Moscow Oblast officials did not switch on air alert sirens or send the SMS warnings they had used during far smaller attacks. They quietly restricted mobile service without major public notice. Ukraine struck oil and logistics targets, not polling stations, according to the experts, and authorities appeared to place high turnout above protecting civilians.
Moscow Oblast residents complained that no alert reached them, some posting on the Telegram channel of regional Governor Andrei Vorobyov before it closed comments. A prominent Kremlin-linked military blogger attacked the official response, saying it erodes public trust and that cutting mobile service does "not really help."
Ukraine's General Staff reported striking the Gazpromneft-Moscow Oil Refinery in the city's Kapotnya district, one of Russia's largest plants, causing a large fire. Ukrainian manufacturer Fire Point said its FP-1 drones completely shut down the refinery, with all primary processing units damaged.
Governor Andrei Vorobyov claimed air defenses countered 249 drones across 17 municipal districts. The strike was part of Ukraine's widening campaign against the fuel sector funding Russia's war, with about a fifth of Russian refining capacity offline.
Russia is quietly moving to expand the capacity of the plant behind its long-range attack drones, a step that could sharply raise how many it launches at Ukraine, according to Politico. The plan turns on a single carbon fiber factory in Russia's Tatarstan region and runs to the end of the decade.
These files add something narrower than Russia's known intent to fight on: they identify carbon fiber as a critical material capping how many drones it can build. To break that cap, the Kremlin is funding production lines that will not run until the decade's end—a bet on winning by out-building Ukraine, even as the strikes grind on.
Politico obtained internal documents from Russian state nuclear corporation Rosatom showing its Alabuga-Volokno plant would add 500 tons of military-grade aerospace carbon fiber a year by 2029. Rosatom declined to comment. Weapons expert David Albright, who heads the Institute for Science and International Security, estimated that volume could yield airframes for about 28,000 more attack drones a year—a 78% jump.
Ukraine already estimates Russia can build more than 36,000 Shahed/Geran kamikaze drones a year. Carbon fiber is the choke point: it keeps the airframes light and strong, and Russia has no cheap substitute.
"Without the carbon fiber, they can't make the drone. Can't substitute for the carbon fiber in the drone and keep its weight down," Albright said.
Moscow is investing in the raw material, not just more assembly halls—the fiber, not floor space, is what caps output.
Documents gathered by the Ukrainian Security and Cooperation Center describe a new factory on the site designed to produce UMT42S-3K aerospace-grade fiber. Satellite images from May to July show land cleared for construction. Albright's own August imagery shows foundations going in. He said the stated 2027 completion date "requires rapid construction." Russia has spent the past year adding new assembly halls at the same site.
The plant and its parent, Rosatom's Umatex Group, already sit under US, UK, and other Western sanctions. The US House Select Committee on China and the Ukrainian government both verified the documents, officials told Politico.
The push comes as Russia leans harder on jet-powered Shaheds, which Ukraine's Air Force says are hard to down with conventional defenses. Kyiv has fielded its first jet interceptor and tested a new one in September—but the plant is a bid to out-build those defenses faster than Ukraine can scale them.
Cities around the country are ditching Flock’s automatic license plate reader (ALPR) cameras, and replacing them with equivalent cameras from law enforcement contracting giant Axon. That move in large part comes in response to 404 Media’s coverage of how local cops performed lookups in Flock for Immigration and Customs Enforcement (ICE), and how a cop in Texas searched Flock cameras nationwide to look for a woman who self-administered an abortion.
That brings up questions: what are cities and law enforcement agencies using Axon ALPRs for? And who are they in turn sharing that data with? 404 Media has started to find out, but needs the help of local residents and community members to figure out what is happening across the country.
Over the last few weeks, 404 Media has filed requests with various cities and police departments for Axon “activity reports” and “sharing reports.” These show in granular detail when a police officer searched Axon’s ALPRs, the name of the officer, their badge number, the license plate they reached, and, most importantly, the stated reason why. These activity reports are essentially Axon’s version of Flock’s “network audits,” which has been the basis of much of 404 Media’s Flock reporting, and local and national media outlets’ around the country. You can see an example of one here:
So far, 404 Media has obtained activity reports from the Benton County Sheriff's Office, WA; Falmouth Police Department, ME; Johns Creek Police Department, GA; Ocean Shores Police Department, WA; Pleasanton Police Department, TX; and Red Wing Police Department, MN.
But we need your help. Has your local police department or city switched to Axon ALPR cameras? Were they already using Axon? And do you want to know what they’re using those cameras for?
We’re asking interested readers to file the below public records request. You can simply copy this language, tweak it a little if necessary to apply to your state, then file the request with the relevant agency. You can do this by finding their relevant public records request email address, or by filing it through Muckrock. This is the platform we use for sending and organizing our records requests.
The Internal ALPR Activity report is the one shown above. The Network ALPR Activity report shows what other agencies the police department or city shares their data with. The ALPR Data Sharing report provides a history of when other agencies were invited, or removed, to receive the data. And the ALPR Hostlist Management Audit report details changes made to alerts the agency may receive.
If you file a request and get data back, please feel free to email it to us at joseph@404media.co. We’ve seen with the nationwide conversation about Flock that local residents can do a lot to reveal how surveillance technology is being used in their own communities. We hope we can find out a bit more about how agencies are using Axon’s cameras too.
To Whom It May Concern:
Pursuant to the [YOUR STATE’S PUBLIC RECORDS LAW], I hereby request the following records:
1. Internal ALPR Activity report in Axon.
The report should include data logged from the period of January 1, 2025, to the date this request is processed. Per Axon's documentation, the Internal ALPR Activity report is available within the LPR > ALPR Search > LPR Audit menu. You can find instructions to locate this here: https://www.axon.com/help/fusus/software/fusus/alpr/alpr-audit.htm
2. Network ALPR Activity report in Axon.
The report should include data logged from the period of January 1, 2025, to the date this request is processed. Per Axon's documentation, the Network ALPR Activity report is available within the LPR > ALPR Search > LPR Audit menu. You can find instructions to locate this here: https://www.axon.com/help/fusus/software/fusus/alpr/alpr-audit.htm
3. ALPR Data Sharing report in Axon.
The report should include data logged from the period of January 1, 2025, to the date this request is processed. Per Axon's documentation, the ALPR Data Sharing report is available within the LPR > ALPR Search > LPR Audit menu. You can find instructions to locate this here: https://www.axon.com/help/fusus/software/fusus/alpr/alpr-audit.htm
4. ALPR Hotlist Management Audit report in Axon.
The report should include data logged from the period of January 1, 2025, to the date this request is processed. Per Axon's documentation, the ALPR Hotlist Management Audit report is available within the LPR > ALPR Search > LPR Audit menu. You can find instructions to locate this here: https://www.axon.com/help/fusus/software/fusus/alpr/alpr-audit.htm
The requested documents will be made available to the general public, and this request is not being made for commercial purposes.
In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.
Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response within the time period that the statute requires.
Sincerely,
[YOUR NAME]
For years, Ukraine’s air defenses blunted Russia’s attempts to terrorize its cities from the sky. Now, after four years of adaptation, Moscow is fielding faster drones, massing ballistic missiles, and finding new ways to overwhelm a Ukrainian air-defense network running short of the interceptors needed to stop them.
Russia’s aerial campaign is becoming harder to contain just as its attacks are killing more Ukrainian civilians. July recorded at least 437 civilian deaths, the highest monthly toll since the early months of the full-scale invasion, with UN monitors pointing to Russian missile and drone attacks as a key factor.
That shift is visible most clearly in Russia’s rapidly expanding use of jet-powered Geran drones. These drones can exceed 400 km/h, making them significantly harder to intercept than the slower, propeller-driven Shaheds Ukraine has spent years learning to counter. Russia reportedly launched as many as 2,850 jet-powered drones in August alone.
Ukrainian President Volodymyr Zelenskyy has warned that Russia’s escalation with the new drones is becoming “increasingly terrorist” and called for urgent efforts to develop defenses against them.
While Ukraine’s Western partners have taken steps to strengthen its air defenses, Russia has spent the same period adapting and expanding its ability to attack from the air. The gap is becoming increasingly visible in the skies over Ukrainian cities.
Russia has increasingly turned its ability to strike deep inside Ukraine into a weapon against civilian life itself: hitting residential areas, fuel stations, railways, energy infrastructure and other sites across cities far from the front.
Since late August, Kyiv has faced near-continuous Russian drone attacks, with Russia increasingly sending waves of drones against the capital throughout the day and night. The shift has made air-raid alerts, explosions and disruptions to daily life a near-constant reality.
For Ukrainians, Russia’s evolving aerial campaign is measured in destroyed homes, injuries, deaths, and lives permanently changed.
In Kyiv, it has also changed everyday life: explosions interrupt sleep and work, people run for shelter as strikes unfold overhead, and the threat of another attack is never far away.
And the pressure is no longer confined to Kyiv. Kharkiv, Odesa, Sumy and Zaporizhzhia are all facing increasingly sophisticated combinations of drones and missiles.
The danger is not simply that Russia is launching more weapons. It is that Moscow has spent years learning which weapons can penetrate Ukraine’s defenses, how to combine them, and how to force Ukraine to spend its most valuable interceptors.
Zelenskyy’s warning captures the urgency: “You cannot simply wait for Russia to perfect its repertoire of killings.”
The jet-powered Geran is only one part of the problem.
Russia has also dramatically increased its use of ballistic missiles. Reuters reported that 228 ballistic and hypersonic missiles were launched in July and the first eight days of August, with more than half being inaccurate RM48U training missiles repurposed for combat.
Ukraine has virtually exhausted its US-made Patriot interceptors, the only systems in its arsenal capable of reliably intercepting Russia’s ballistic missiles, while Moscow continues launching them at a high tempo.
The result is a more complex aerial threat: fast drones that are difficult to intercept, ballistic missiles that are extremely difficult to stop, and large waves of cheaper weapons that can force Ukraine to expend scarce defensive ammunition.
Ukraine is developing new ways to counter them, including interceptor drones specifically designed to hunt down the jet-powered Gerans. But Ukraine is developing these systems as Russia is already deploying its new weapons at scale.
Western countries have continued providing air-defense assistance. Canada, for example, announced a C$350 million package for interceptors earlier this month. But Ukrainian officials continue to say that deliveries remain far below what is needed to protect the country from Russia’s expanding aerial campaign.
Russia has spent years expanding the weapons it can use against Ukraine, while Ukraine and its partners are still racing to develop and supply the systems needed to stop them.
Some of Ukraine’s Western partners are now confronting a threat Russia has spent years developing over Ukraine: an increasingly sophisticated aerial arsenal that could eventually be turned against them.
European officials and defense analysts are increasingly warning that NATO countries themselves lack enough air and missile defenses to deal with a large Russian attack.
Latvia’s President Edgars Rinkēvičs recently said Europe is not sufficiently prepared for the kind of drone and aerial warfare Russia has developed in Ukraine, including because of delays in supplying Ukraine with critical air-defense systems.
Those concerns are no longer hypothetical. On 14 September, an Italian NATO fighter jet shot down a Russian-made Geran-2 drone over Lithuania after it entered the country from Belarus. Poland and Romania have also faced Russian drone incursions since 2025.
This creates a problem that is partly of Europe’s own making. Russia has had more than four years to refine its drones, missiles, production lines and tactics while Ukraine’s partners have often been too slow to provide enough weapons to counter those systems as they were developed and deployed at scale.
In that same period, many European countries continued trading with Russia, particularly in fossil fuels, allowing Moscow to keep generating revenue from European markets even as those same governments were providing military aid to Ukraine.
The result is a Russian aerial arsenal that is more capable than the one Ukraine faced in 2022 – while some of the countries now worried about a future Russian threat lack the air defenses needed to protect themselves.
Western governments helped Ukraine fight Russia’s air war, but not at a scale or speed sufficient to prevent Russia from adapting.
Ukrainian civilians are paying the price for the time Russia was given to expand and refine its aerial warfare. Now, Europe is having to prepare for the possibility that those capabilities could one day be used against it.
Ukraine launched a massive long-range drone attack on Moscow and Moscow Oblast overnight on 20 September, striking a major Russian oil refinery and a logistics facility, according to Ukrainian President Volodymyr Zelenskyy.
Ukraine is increasingly targeting Russian oil refineries, logistics hubs, and other strategic infrastructure that helps generate the fuel, revenue, and supplies Russia needs to sustain its war against Ukraine. Striking them allows Kyiv to put pressure on Russia’s war economy and military logistics far beyond the front line.
The Moscow Oil Refinery was among the facilities hit. Moscow Mayor Sergei Sobyanin confirmed that an object at the refinery was damaged, while OSINT analysis by ASTRA of eyewitness footage also identified the refinery as one of the attack’s targets.
Zelenskyy said the strikes were carried out using a range of Ukrainian long-range weapons and targeted infrastructure that generates revenue for Russia’s war effort.
The attack took place on the second day of Russia’s three-day State Duma elections, with voting taking place across the country from 19 to 21 September.
Zelenskyy said Ukrainian forces struck “one of the key enterprises of the Russian oil industry” in the Moscow region, along with a logistics facility.
The Moscow Oil Refinery is operated by Gazprom Neft and is located in Moscow’s Kapotnya district. According to information cited by ASTRA, it can process 11 million tons of oil annually and supplies about 40% of Moscow’s fuel market and 70% of the Moscow region’s gasoline and aviation fuel needs.
Sobyanin said an object on the refinery’s territory was damaged and that there were no casualties there.
Zelenskyy said Ukraine used FP-1, RZ-100, MICH-2000, Palianytsia, Vendetta, Liutyi, Bars, Flamingo, Sich, and Pelican systems in the operation.
He thanked the Security Service of Ukraine, Unmanned Systems Forces, Special Operations Forces, military intelligence, and Foreign Intelligence Service for their involvement.
“The billions of dollars” generated by such facilities help sustain Russia’s military machine, Zelenskyy said, framing the strikes as part of Ukraine’s effort to reduce Russia’s ability to finance and wage its war.
He also said Moscow should end its war rather than build layered air defenses using systems taken from other Russian regions.
Russian officials claimed the overnight attack caused two deaths and six injuries across Moscow Oblast.
Governor Andrei Vorobyov claimed Russian air defenses and electronic warfare systems intercepted or suppressed 249 drones across 17 municipal districts between 3 and 5 a.m.
Vorobyov also claimed that a drone strike in Sofyino damaged six apartments in a three-story building, killing a 44-year-old woman and injuring five people. Another person was reportedly killed in a private house in the Orekhovo-Zuyevsky district.
In Ramenskoye, Russian authorities reported a fire at a 21-story apartment building and said about 400 people were evacuated.
Sobyanin separately claimed that the attack was intended to disrupt Russia’s State Duma elections, which were taking place on 20 September. Ukrainian authorities did not say that this was the purpose of the strikes.
Russia has begun using large numbers of a missile originally designed as a training target for air-defense crews, despite the weapon being significantly less accurate than the ballistic missiles Russia normally uses for precision strikes. The RM48U is now being launched against targets in Ukraine from S-400 air-defense systems.
The development comes as Russia has sharply increased its use of ballistic missiles against Ukrainian cities in recent months, while Ukraine faces a critical shortage of the interceptors needed to defend against them. Russian forces had more than tripled their monthly ballistic missile launches between April and July, according to Ukrainian military intelligence, as Ukraine's stocks of Patriot interceptors have dwindled.
More than half of the 228 ballistic and hypersonic missiles Russia launched in July and the first eight days of August were RM48Us, according to Ukrainian data reviewed by Reuters in an investigation published on 18 September.
The RM48U was originally developed as a training target to help Russian air-defense crews practice intercepting incoming threats. It was not designed as a precision ground-attack missile.
Ukrainian investigators told Reuters that the missile is less powerful and less accurate than the Iskander, Russia's main short-range ballistic missile. They estimate that RM48Us deviate from their intended targets by around 300 meters on average.
The missiles nevertheless follow a high-speed ballistic trajectory when used in combat, making them difficult for Ukrainian air defenses to intercept.
Russia launches the RM48U from S-400 systems, repurposing part of its air-defense arsenal for offensive strikes.
The number of RM48U launches increased sharply during the summer.
Russia launched 158 ballistic and hypersonic missiles against Ukraine in July, according to Ukrainian data reviewed by Reuters. Of those, 87 were RM48Us.
Russia then launched another 36 RM48Us among 70 ballistic and hypersonic missiles fired during the first eight days of August.
July was the highest month for Russian ballistic and hypersonic missile launches since the start of the full-scale invasion, according to the Ukrainian data.
The surge in RM48U use also coincided with a major decline in Russia's use of Iskanders. Russia launched more than 100 Iskanders in June but only 38 in July.
The shift indicates that Russia is using the less capable RM48U to sustain its ballistic missile campaign to continue causing indiscriminate destruction in Ukrainian cities while conserving more capable weapons.
RUSI analyst Sidharth Kaushal told Reuters that this allows Russia to preserve missiles such as Iskanders, as well as other more advanced weapons, for future attacks.
The RM48U's poor accuracy has already had deadly consequences.
Ukrainian investigators concluded that an RM48U struck a railway platform in the Brovary district of Kyiv Oblast on 5 August, killing eight people.
According to Ukrainian prosecutors cited by Reuters, the missile's warhead also scatters metal fragments over a wide area.
The attack illustrates the danger of Russia using a weapon that was never designed for precision strikes in populated areas. Even when the missile misses its intended target, its large deviation can leave civilians and civilian infrastructure within the affected area.
Russia denies deliberately targeting civilians and says it strikes military and other strategic targets.
Ukraine's military intelligence told Reuters that Russia plans to produce 480 RM48U missiles in 2026, more than twice the 200 produced last year.
That would give Russia a growing supply of a relatively simple ballistic weapon that can be used alongside its more sophisticated missiles.
The large-scale deployment of the RM48U represents a new development in Russia's ballistic campaign: a missile built to serve as a training target for air-defense crews is now being used as an offensive weapon against Ukraine.
At a time when Ukraine is struggling to replenish the scarce interceptors needed to stop Russia’s ballistic missiles, Moscow is expanding the range of weapons it can use to strike Ukrainian cities, killing more civilians and destroying more civilian infrastructure with each escalation.
Illia Bilyk, a 21-year-old Ukrainian national, admitted five counts of racially and religiously aggravated criminal damage on 17 September over graffiti at five Muslim institutions in east London, the BBC reported.
The BBC and Hope Not Hate linked Bilyk’s attacks to the same Russian network behind arsons targeting properties connected to former UK Prime Minister Keir Starmer. The network operated Direct Action UK, a fake British far-right group that recruited people through Telegram and shared images of the resulting vandalism. Investigations have documented the same recruitment model across Europe for surveillance, sabotage, and other criminal assignments.
The Metropolitan Police said Bilyk sprayed offensive graffiti at three mosques, Noor Ul Islam Primary School, and the Islamic Shariah Council on 23 and 25 January 2025. Images then appeared in a Direct Action UK Telegram group. Russian operators created the group to pose as a British far-right movement, the BBC reported. Bilyk will be sentenced on 19 October.
The handler, known as EL or “El Money,” also recruited through Telegram groups used by Ukrainians seeking work, the BBC found. Ukrainian builder Roman Lavrynovych was paid in cryptocurrency and steered from posters and graffiti to arson.
In May 2025, Lavrynovych set fire to a car and properties connected to Starmer. Nobody was injured. Lavrynovych was jailed for seven years, while Ukrainian-born Romanian national Stanislav Carpiuc was also convicted.
The BBC identified EL as Yevgeny Lyukshin, a 23-year-old Russian diplomat and son of a senior Foreign Ministry official. It cited matching personal details, his presence in the Direct Action UK chat, family connections, and information-warfare training from Rybar, a sanctioned pro-Kremlin Telegram outlet.
However, the BBC could not conclusively establish that Lyukshin was EL, while British police said they had no evidence the attacks were state-sponsored. Lyukshin did not respond. The Russian Embassy denied any connection between Russia or its Foreign Ministry and unlawful activity.
The London operation is one of several cases across Europe and other continents.
UK intelligence warned that Moscow increasingly relies on non-state actors, meaning hired civilians and criminals outside its formal services, for espionage, sabotage, assassination, and information operations.
This month, US prosecutors alleged that another Russian network recruited local residents for surveillance, sabotage, and murder-for-hire.
Russia has placed the Russian assets of French retailer Auchan, Swiss food giant Nestlé, and the former Leroy Merlin chain under temporary management, stripping the companies of effective control over their businesses in the country.
Foreign companies have long been urged to leave Russia because their continued operations generate revenue for a state waging war against Ukraine. They also face growing risks of asset seizure, legal and financial liabilities, and reputational damage as the Kremlin increasingly uses foreign-owned businesses as political leverage.
Russian President Vladimir Putin signed the decree on 17 September, transferring the assets to L.E.V. Management, a little-known Russian company. The decree also covers Russian assets linked to French logistics companies FM Logistic and Bati Logistics.
The measure does not formally change ownership. However, the companies' Russian assets are now controlled by the Kremlin-appointed administrator, and similar temporary-management arrangements have previously preceded forced sales or transfers to Russian buyers.
L.E.V. Management is headed by Andrei Krayushkin, a Russian Interior Ministry major general who previously served as first deputy head of the ministry's migration department.
According to Reuters, the Kremlin justified the move by pointing to the companies' ties to countries Russia considers "unfriendly." Kremlin spokesperson Dmitry Peskov said the countries involved are actively supporting Ukraine and participating in actions against Russia.
The move comes after years of warnings to Western companies that remained in Russia carried an increasing risk of expropriation.
Denys Svyrydenkov, a representative of the B4Ukraine coalition, told Euromaidan Press that the organization had repeatedly contacted Auchan, Nestlé, and Leroy Merlin, warning them that their Russian assets could be seized.
"We repeatedly warned these companies about the serious and growing risks of continuing to operate in Russia, including the possibility of losing their businesses through nationalisation," Svyrydenkov said.
According to Svyrydenkov, the companies defended their continued presence in Russia by arguing that they provided essential goods and protected the livelihoods of Russian employees.
He rejected both arguments, saying Russia is largely self-sufficient in food and that Western sanctions do not prevent food or humanitarian goods from reaching the country. He also pointed to Russia's severe labor shortage and historically low unemployment, arguing that alternative employment opportunities are widely available.
"By staying, they were effectively running businesses that were no longer truly theirs," Svyrydenkov said.
The three companies took different approaches after Russia launched its full-scale invasion of Ukraine in February 2022.
Auchan did not leave Russia and continued operating its large retail network. It currently has around 230 stores across 100 Russian cities. The chain's Russian turnover reached 127 billion rubles ($1.5 billion) in the first half of 2026, according to The Moscow Times.
Nestlé also remained, but reduced its Russian operations. The company halted investments, withdrew some brands including KitKat and Nesquik, and said it did not intend to profit from its Russian business. It still operates six production sites in Russia, making products including coffee, confectionery, baby food, and pet food.
Leroy Merlin's owner announced its departure from Russia in 2023. Its Russian legal entity was renamed Le Monlid, while its stores now operate under the Lemana Pro brand.
Nestlé said on 18 September that it was assessing its options and would take "all necessary steps" to protect its rights and ensure business continuity, particularly for its employees.
The seizure reflects a broader pattern that has emerged since Russia began using temporary administration to take control of Western-owned businesses.
Companies including Danone, Carlsberg and Finnish energy firm Fortum have previously seen their Russian assets placed under state control. Reuters reported that Russia had seized more than $50 billion in foreign assets by 2025.
Svyrydenkov said the latest move was "more than predictable," arguing that Russia has repeatedly used Western companies' exposure to its domestic market as leverage.
"The Kremlin's seizure of the Russian assets of Auchan, Nestle and the former Leroy Merlin reinforces a reality that has been evident for years: Russia is a hostile and unpredictable environment where foreign companies' assets remain at the mercy of an authoritarian regime," he said.
He warned that companies remaining in Russia face the possibility of sudden expropriation while also continuing to generate economic activity inside a country waging war against Ukraine.
"The latest asset seizures should serve as a warning to all companies still operating in Russia: waiting for the Kremlin to decide the fate of your business is not a risk-management strategy," Svyrydenkov said.
Belarus sent tank and mechanized battalions to training grounds near Poland and Lithuania for four-day drills that Minsk says focus on border security, counter-sabotage operations, and defense against drones and light aircraft, Militarnyi reported on 17 September, citing the Belarusian Defense Ministry.
The exercise includes tank and mechanized infantry battalions, units typically used in conventional ground warfare. Minsk says their tasks include guarding checkpoints and infrastructure and defending against drones. Some drills are taking place near the Suwałki Gap, the only land route connecting Lithuania, Latvia, and Estonia to the rest of NATO. The corridor lies between Belarus and Russia’s Kaliningrad region, which is separated from the rest of Russia. Belarus denies any offensive intent.
Belarus’s Western Operational Command is holding the exercises from 15 to 18 September under Chief of the General Staff Pavel Muraveyko, according to the ministry’s schedule outlined by Militarnyi.
The drills are taking place at the Gozha range near Lithuania and at the Brest and Ruzhany ranges near Poland. RBC-Ukraine wrote that mechanized and tank battalions are taking part and that the Brest and Ruzhany sites lie about 15 and 60 kilometers from the Polish border, respectively. Reservists have also been called up to local territorial-defense units, the ministry said.
Militarnyi cited the ministry as saying that one unit guarded a water intake, another directed traffic with police, and a mechanized brigade manned a checkpoint with border guards. The ministry also said truck-mounted fire teams were posted around the clock to defend against drones and practiced firing at targets imitating surveillance drones.
Muraveyko said the army was not considering offensive action and called allegations of preparations for an attack baseless, according to remarks quoted by Militarnyi. Belarus has not disclosed the total number of troops involved, and the exercise’s scale has not been independently verified.
The Moscow Times reported that the ministry also claimed the exercise remained below the notification thresholds set by the 2011 Vienna Document, an international agreement requiring advance notice of large military exercises.
In December 2025, security analyst Taras Zhovtenko warned that Russian propaganda had laid the groundwork to cite an alleged blockade of Kaliningrad to justify a limited incursion and the establishment of temporary checkpoints.
A German war game later modeled Russia staging border incidents before seizing key routes, although Baltic officials said the scenario severely underrated their armed forces.
Separately, French open-source analyst Clément Molin found that defenses along the Polish and Baltic borders with Russia and Belarus remained patchy and shallow, with Lithuania the most exposed. These assessments describe possible vulnerabilities, not evidence that an attack is planned.
ZVS Holding evacuated its ammunition factory in Snina, a town in eastern Slovakia, on 16 September after a fire broke out on the roof of a production building. Work stopped temporarily in the affected section, but nobody was injured, Militarnyi reported.
The Snina plant has an annual capacity of roughly 100,000 shells and plans to triple it, Noviny reported. The blaze briefly disrupted part of a facility under expansion for Europe’s ammunition buildup, although co-owner CSG expects no impact on customer deliveries. Authorities across Europe are investigating suspected Russian sabotage against defense companies, but no evidence links the Snina fire to that campaign.
ZVS Holding is owned equally by the Slovak state and the Czech defense conglomerate Czechoslovak Group (CSG). It makes 155 mm artillery shells, 120 mm tank rounds, and 30/35 mm cannon ammunition.
In December 2025, ZVS signed a seven-year framework agreement with Slovakia’s Defense Ministry to supply EU states. Purchases under the agreement may be financed through the bloc’s SAFE defense-loan program. Its Euro 58 billion ceiling represents the maximum possible value of future orders, not guaranteed purchases.
Firefighters brought the blaze under control during the afternoon. As thick black smoke rose over Snina, town officials advised nearby residents to limit time outdoors, close windows and doors, and switch off ventilation systems drawing in outside air.
Slovak Defense Minister Robert Kaliňák said the fire had not reached the plant’s production equipment and that the affected part of the building was not being used for manufacturing at the time. That section makes metal projectiles, he said.
Kaliňák said welding during the renovation may have sparked the fire, but stressed that investigators had not established the cause.
CSG said the fire started during roof repairs conducted by an external contractor. The company said the damage and cause still had to be assessed, but it did not expect the incident to affect customer deliveries, STVR reported.
The Snina blaze was at least the fourth fire or explosion at a European ammunition facility since 10 August, after two fires struck a Bulgarian company and an explosion hit an Italian factory. No common cause has been established.
Preliminary findings pointed away from outside interference in the first Bulgarian fire. No evidence of sabotage, however, was reported after the Italian blast, and only the second Bulgarian fire remains under investigation for possible sabotage.
Czech authorities are examining a possible Russian trail behind an arson attack on a factory making drones and thermal optics for Ukraine.
Estonia has also probed suspected arson at a military-robot maker after courts documented earlier attacks directed by Russian military intelligence.
Russia launched a large-scale missile and drone attack on Ukraine overnight on 17 September, striking Kyiv, Zaporizhzhia, and Odesa Oblast, among other regions.
The attack damaged civilian infrastructure in Kyiv, including apartment buildings and educational facilities, while water infrastructure was also affected. Kyiv mayor Vitali Klitschko reported 20 people injured, including at least two children.
The overnight strikes affected Kyiv’s water infrastructure, temporarily disrupting water supply on the left bank and reducing pressure in some areas on the right bank.
Kyivvodokanal said its specialists restored operations and that water supply is now fully functioning across the capital.
The damage comes as Ukrainian authorities have warned that Russia could target critical water infrastructure as winter approaches, potentially adding another major threat to civilians alongside attacks on Ukraine’s electricity and heating systems.
Russia has repeatedly used winter strikes to target Ukraine’s critical infrastructure, particularly electricity and heating, leaving civilians without power, heat, and basic services during freezing weather.
This winter is expected to bring a heavier campaign: Russia has intensified its attacks since the summer, increasingly targeting food-related infrastructure and supplies in addition to energy facilities.
Russia launched ballistic and cruise missiles alongside 157 Shahed-type attack drones and decoy drones, according to Ukraine’s Air Force.
The ballistic missiles included Iskander-M, S-400 and North Korean KN-23 missiles launched from Russia’s Bryansk and Voronezh oblasts. Russia also launched four Kalibr cruise missiles and Oniks missiles.
Ukraine’s air defenses reported destroying or suppressing 131 aerial targets, but none of the ballistic weapons were among those intercepted. The 131 targets consisted of seven Bandеrol/Dan-T missiles and 124 Shahed, Gerbera, and other drones.
Once again, Ukraine intercepted none of the Russian ballistic missiles, underscoring the country’s shortage of high-end air-defense interceptors needed to defend against Russia’s increasing ballistic missile attacks.
However, Ukraine’s General Staff reported strikes on two of the S-400 systems that Russia uses to launch ballistic missiles from Bryansk Oblast.
Kyiv police reported damage in the Darnytskyi, Dniprovskyi, and Solomianskyi districts.
Apartment buildings, educational facilities, a municipal building, vehicles, and railway tracks were damaged. Most of the 16 injured people were residents of a damaged 16-story apartment building in Dniprovskyi district.
The victims included a 10-year-old girl and a 12-year-old boy.
Kyiv’s military administration also reported a strike on a warehouse building in Podilskyi district.
Russian attacks on Kyiv have injured 20 people today, with five hospitalized.
— Euromaidan Press (@EuromaidanPress) September 17, 2026
A blast wave damaged apartment buildings in the Dniprovskyi district, while a car caught fire at another location.
Scenes like these are becoming a daily occurrence in the capital.Ukraine’s State… pic.twitter.com/bez0pOPghN
The Air Force said Russian missiles and attack drones hit 36 locations across Ukraine, while debris from intercepted targets fell at five locations.
Russia damaged the Berestyn station building and a Kyiv commuter stop in an overnight strike on the railways
— Euromaidan Press (@EuromaidanPress) September 17, 2026
A Russian drone hit the station at Berestyn in Kharkiv Oblast before dawn on 17 September, and passengers and staff sat out the attack in shelters, Ukraine's national… pic.twitter.com/OaeAaO58eX
Russia’s overnight attack on Odesa Oblast continued for much of the night, injuring seven people, including children aged four and 13, Odesa Oblast Governor Oleh Kiper reported.
One Russian drone struck a high-rise apartment building in Odesa, destroying 10 apartments on the 14th–16th floors and damaging 11 cars. Three people were injured there, including the four-year-old child.
Other strikes damaged at least five residential buildings, a kindergarten, a dormitory, a restaurant’s outdoor area, warehouses, garages, and cars. An elderly woman and the 13-year-old child were among four other people injured.
A Russian overnight attack on Odesa Oblast injured 7 people, including 2 children, after a strike hit a 19-story apartment building.
— Euromaidan Press (@EuromaidanPress) September 17, 2026
A private home in the region was also destroyed, while a kindergarten, cars, garages, and warehouses were damaged.
Once again, Russian strikes… pic.twitter.com/pHZQlDOcKM
Zaporizhzhia was also hit by Russian missiles, with three people injured – a woman and two men. The missiles struck industrial facilities, partially damaging buildings and causing a fire at one site.
Later in the day, Russia attacked the village of Storchove in Zaporizhzhia Oblast with guided aerial bombs. One bomb hit a private house and outbuildings, killing a 51-year-old woman and injuring a 70-year-old man. The strike destroyed property the family had accumulated over decades, according to the Zaporizhzhia Regional Military Administration.
Russia also struck a passenger bus in Zaporizhzhia with an FPV drone near a public transport stop. Five people were injured. A regional official said Russia had “once again chosen not a military target, but people who were simply traveling about their business.”
A Russian FPV drone struck a passenger bus carrying people in Zaporizhzhia, right near a public transport stop. Three people were reportedly injured.
— Euromaidan Press (@EuromaidanPress) September 17, 2026
“Russians once again chose not a military target, but people who were simply going about their daily lives,” a Zaporizhzhia… pic.twitter.com/VRZcch4PRH
Russia's attempt to encircle the fortified cities of Donetsk Oblast has lost its northern pincer, the commander of Ukraine's Third Army Corps, Brigadier General Andrii Biletskyi, said in a television interview reported by Ukrinform. He described where the two Russian pincers were meant to meet, far behind the front line, and what Moscow must do now that one of them is gone. He also named what the Ukrainian operation there is meant to achieve, after declining to do so when he revealed it two days earlier.
Biletskyi set out the Russian design "to envelop the so-called fortress cities from the north and from the south"—the four cities, Sloviansk, Kramatorsk, Druzhkivka, and Kostiantynivka, that have been the backbone of Ukraine's defense in the oblast since 2022..
"From the south it was an envelopment through Dobropillia, and from the north through this salient, which is now being cut off, it went to the city of Sviatohirsk and further, to the settlement of Barvinkove, where these two claws of the Russian army, the Dobropillia one from the south and the Sviatohirsk one from the north, were supposed to close," the commander said.
Barvinkove sits in Kharkiv Oblast, west of the fortified belt. The distance from there to the current front line shows how far behind Ukrainian lines the ring was meant to close.
Neither pincer got near it. Ukrainian forces stopped the Russian infiltration near Dobropillia last year, Biletskyi said, and the situation there remains difficult but under control. Russian assault groups have kept pushing toward the town in recent weeks, though Ukrainian troops have mined or destroyed the main approaches.
On the northern pincer he was blunt:
"The northern claw has effectively been routed and destroyed," he said.
Holding that result now depends on Russian supply, Biletskyi said. The critical task is "paralyzing logistics, paralyzing the rear areas, not letting the Russians restore this offensive."
He then set out what the failure costs Moscow.
"Then they will have to storm the Sloviansk-Kramatorsk and the Druzhkivka-Kostiantynivka agglomerations head-on," he said. "And storming these cities head-on is a far more painful and costly business for them than trying to envelop them and effectively take them without a fight."
Russia has taken none of them: it has been fighting for Kostiantynivka since October 2025 and has not reached the other three. Ukraine reinforced the sector last month, placing two newly formed groupings under Azov commanders. One of them has since warned that Russia may mobilize up to 600,000 troops for its next offensive.
Two days after the operation was made public without a stated objective, Biletskyi gave one, and it is defensive.
"Our main strategic task for the Armed Forces of Ukraine is defense on the Donetsk and Luhansk axes, the defense of Donetsk and Luhansk oblasts," he said.
Ukrainian forces are not trying to take as much ground as they can, he added.
"We are not fighting there just for tens or hundreds, and at one time thousands, of kilometers. We are fighting first of all for favorable defensive lines."
Vivaldi is meant to put the troops on exactly those lines. That sets a different yardstick than captured settlements: the operation will be judged on the ground Ukraine ends up holding, not on how much of it there is.
The US House of Representatives has approved sweeping new sanctions on Russia and the countries and companies that help finance its war, sending the measure to the president to sign into law, The Hill reported. The vote breaks a nearly two-year stretch in which Congress passed no major measure to back Ukraine. It also hands Washington fresh power to choke the oil money that keeps Moscow's war running.
For most of the full-scale war, US backing for Kyiv came through emergency spending battles, not laws built to cut off Moscow's income. Washington's long wager that negotiations would end the fighting kept its sharpest economic tools on the shelf. That bet has now shifted toward squeezing the customers who keep the Kremlin's oil trade alive.
In the House, 58 Democrats broke from their party's leaders on 16 September to join most Republicans. The bill passed 262-159, with 203 Republicans and one independent also voting yes, and seven Republicans joining 152 Democrats against.
Whether the full weight of the bill lands is now Trump's call. A White House official said he planned to sign it, and the White House had pushed House Republican leaders to move it. The bill directs him to impose the tariffs and mandates sanctions on Putin, senior officials, and Russian banks, though he can waive them by certifying that it serves US national interests, and how far he goes stays uncertain.
His posture on Russia keeps shifting. Days before the vote, he urged Kyiv to stop striking Russian oil refineries. He said the strikes were pushing diesel prices up worldwide. Those same strikes drain the war economy this bill sets out to squeeze.
The bill directs Washington to impose tariffs of up to 100% on the five biggest buyers of Russian crude, the five biggest buyers of its gas, and the five countries doing most to help Moscow evade oil sanctions—a target aimed squarely at China and India. Countries whose Russian gas imports are less than 15% of everything Russia exports in gas, and that take significant steps to cut them, would be exempt from the gas-based tariff. There is no such carve-out for crude.
It also blacklists Russian officials, banks, and the aging tankers of Russia's shadow fleet, the vessels that move sanctioned crude around Western restrictions. The measure also extends US sanctions on Iran's energy and weapons sectors, a piece Trump asked for. That is why the bill's full name is the Lindsey O. Graham Sanctioning Russia and Iran Act.
For more than a year, the package sat frozen. It had a veto-proof majority of co-sponsors, but the White House wanted room to negotiate with Moscow, and the bill never reached a vote. Its author, Senator Lindsey Graham of South Carolina, spent more than a year negotiating the measure before he died in July. Lawmakers in both parties revived and fast-tracked it in his name, and Trump dropped his resistance and signaled he would sign.
Not everyone wanted it. Most House Democrats voted against, saying the bill hands the president broad new tariff powers and lets him waive away the sanctions it claims to impose. Nearly a dozen Republicans privately pressed leaders to strip the new powers out, alarmed they could push up prices at home before the midterm elections. Their leaders moved it through anyway. Ukrainian President Volodymyr Zelenskyy had lobbied for weeks, even watching an early Senate vote from the chamber.
"To Vladimir Putin—we have your number," said Senator Richard Blumenthal, who co-wrote the bill, after the vote. "And to Ukraine—you are not alone."
Ukraine welcomed the vote within hours. Foreign Minister Andrii Sybiha thanked the House for its bipartisan leadership and said Ukraine honors Graham's legacy. Parliament speaker Ruslan Stefanchuk thanked both chambers of Congress and House Speaker Mike Johnson. He singled out Blumenthal for carrying the bill through after Graham's death. What matters for Ukraine, Stefanchuk said, is that pressure on Russia's war funding is turning into concrete decisions.
President Zelenskyy called the timing symbolic: the House voted during another Russian missile and drone attack on Ukraine. The bill and other strong sanctions steps are "an extremely powerful instrument capable of stopping this terrorist war," he said.
A US-based recruit was promised up to $1,500 to surveil a prominent Russian dissident before being offered $40,000 to “eliminate” or “disappear” the target, the US Justice Department (DOJ) said on 15 September.
The charges connect that alleged plot to what prosecutors describe as a wider Russian assassination network operating since at least 2024 against dissidents, defectors, and countries perceived as supporting Ukraine.
A federal grand jury in Manhattan indicted five alleged members of what prosecutors call the “RIS Network”:
Suarez sent the US resident two locations associated with the dissident, according to the indictment. After the resident delivered photographs and videos, prosecutors say, Suarez and Castro made the $40,000 offer. When the resident declined to carry out the killing, they allegedly asked whether he knew “someone [who] can do the work.”
In 2025, the indictment alleges, Kirill Khrameev recruited a US citizen to photograph a target in Lithuania for a promised $200. Yuri Khrameev then offered approximately $25,000 to kill the man. When the recruit refused, Khrameev allegedly proposed a “simpler job”: burning a warehouse or attacking an electrical substation. He said the purpose was to target countries helping Ukraine, according to prosecutors.
Prosecutors also allege that Durruthy coordinated travel and logistics for attacks in Prague, Czechia, in June 2024 and in Lithuania that September. The Justice Department did not specify what either attack involved.
All five defendants are charged with conspiracy to finance terrorism, carrying up to 20 years in prison. Yuri Khrameev, Suarez, and Castro also face a murder-for-hire conspiracy charge carrying up to 10 years.
All five remain at large. Kremlin spokesperson Dmitry Peskov said Moscow saw no need to comment without “credible evidence,” Reuters reported. An indictment is an allegation, and the defendants are presumed innocent.
Since Russia’s full-scale invasion, its covert campaign against Ukraine’s Western allies has combined intelligence gathering with escalating sabotage. CSIS found that suspected Russian attacks in Europe nearly tripled from 2023 to 2024, often using locally recruited agents against infrastructure and industries supporting Ukraine.
In August 2025, US prosecutors charged active-duty soldier Taylor Adam Lee with trying to transmit Abrams tank information and deliver hardware to someone he believed represented the Russian government, allegedly in exchange for Russian citizenship. That case involved an American insider allegedly offering military secrets, not a proven Russian recruitment operation.
After the Russian convoy docked in Tobruk, a column including armored personnel carriers, mine-resistant vehicles, and at least three Tornado-U armored trucks was seen heading west from the port in imagery published by the open-source intelligence project Russia Maritime Watch, as reported by Militarnyi.
The armor delivery comes as Russian forces have lost more than 10,000 armored and protected vehicles in Ukraine since the start of the full-scale invasion, Britain’s defense chief said. Africa Defense Forum reported that Moscow is funding work at six Libyan air bases, some of which support the movement of weapons and personnel toward Sudan and the Sahel. Russia’s Africa Corps already supports military governments in the Sahel, including Mali’s, while a Russian-operated base in Libya has supplied Sudan’s paramilitary Rapid Support Forces.
The cargo ships Anastasiia and Yuriy Arshenevskiy carried the shipment, while the Aleksandr Shabalin, a Russian Navy landing ship capable of transporting vehicles and troops, provided an armed escort, according to Militarnyi.
All three vessels crossed the Mediterranean without broadcasting Automatic Identification System data, the signal normally used to reveal a ship’s position.
Russia’s new foothold in Tobruk?
— Russia Maritime Watch (@RFNOSBlog) September 14, 2026
New imagery appears to show APCs/MRAPs, logistics vehicles and other military equipment being unloaded in Tobruk following the arrival of ANASTASIIA and YURIY ARSHENEVSKIY, escorted by the Ropucha-class ALEKSANDR SHABALIN.
The shipment adds to… https://t.co/clXt2U2t5Q
This was at least the second Russian military shipment to reach Tobruk under naval escort this year. Both cargo ships are under sanctions and have previously carried military cargo. Satellite imagery showed equipment being loaded onto them in August at Baltiysk, a naval base in Russia’s Baltic exclave of Kaliningrad, Militarnyi reported.
In January 2026, the sanctioned Mys Zhelaniya delivered military cargo to Tobruk under escort by a large Russian anti-submarine warship.
Tobruk lies in eastern Libya, which is controlled by forces loyal to commander Khalifa Haftar. The six bases under development host Russian personnel, air defenses, combat aircraft, and drones.
Maaten al-Sarra, one of the six bases, lies near Libya’s borders with Chad and Sudan and supports Russian operations extending toward Sudan and the Sahel, the belt of countries immediately south of the Sahara.
Russian and Libyan authorities have not said who will receive the latest cargo, so there is no confirmation that the vehicles are intended for the Africa Corps, the Russian Defense Ministry-run force that took over much of Wagner’s former role in Africa.
Africa Defense Forum reported that Moscow pivoted toward Libya after the fall of Bashar al-Assad in December 2024, having previously used Syria as a transit hub. Moving the vehicles under naval escort as Russian forces absorb continuing battlefield losses in Ukraine underscores the importance Moscow appears to place on keeping its African corridor supplied.
Libya is one node in Russia’s wider African system. Through the Africa Corps, Moscow supports autocracy-minded military governments and armed groups throughout the continent in exchange for political influence and access to natural resources. Human rights groups and local residents have accused Russian personnel and their partners of killings and other abuses against civilians, including in Mali.
Ukraine’s military intelligence says Kremlin-backed Russian Houses seek to cultivate young Africans with pro-Moscow views. Moscow also invests in education programs and cultural events across the continent to spread a positive image of Russia, its politics, and its culture.
Ukraine’s Foreign Ministry said in August that nearly 500 Africans recruited into Russia’s military had died. Ukrainian drone specialists are also helping forces fighting Russian troops in Mali and operating in Sudan and Libya, CNN reported.
A large-scale police operation is underway after a drone of unknown origin crashed 1 kilometer from a Bundeswehr base, German media outlet Bild reported on 15 September.
Drones have repeatedly flown over German military bases, and German prosecutors are already treating one August find near Ukraine-bound cargo as attempted sabotage. Germany's military counterintelligence has tied repeated sabotage on German soil to Russia, with high probability. Neither the owner nor the origin of this drone is known. Russia has denied involvement in earlier incidents, some of which Germany has officially attributed to it.
Parts of the drone were found east of Lake Steinhude, the media outlet said. The crash site is one kilometer from the Bundeswehr's Wunstorf air base in Lower Saxony, the German military confirmed to the outlet. The drone crashed in an open, uninhabited area, the state criminal police office said. After the debris was discovered, authorities launched a large-scale search operation in the area to find additional parts of the UAV, according to Bild.
The search continues, and the state criminal police office says there are so far no indications of a danger to the public. Investigators learned about the discovery on Monday and want to analyze any other drone parts they find to determine its origin, the media outlet reported. Only then could more be said about the circumstances of the crash, it added.
Since the beginning of the full-scale invasion, the number of reports of drone sightings has "increased significantly" and become "more consistent," a spokesperson for the Bundeswehr Operations Command told RedaktionsNetzwerk Deutschland (RND) in August.
"Overall, several hundred suspected drone overflights have been reported in the area of the German Armed Forces in recent years," the command spokesperson told RND.
Germany is the busiest front in Russia's covert campaign in Europe. A Semtex-laden drone turned up beside a Ukrainian cargo plane at Leipzig/Halle airport in August, and investigators this month named a Russian intelligence operative and a Belarusian petty criminal. Berlin blamed Moscow and ordered Russia's Bonn consulate closed.
Two Bulgarians were arrested over a September arson at a Munich building site between two defense-tech headquarters, a day after two attempts to sabotage the power grid that Germany has not attributed. Germany suspects a planned assassination of a Bavarian drone maker's boss, watched by agents hired for single jobs.
Not every strand leads to Moscow. German military counterintelligence this week attributed part of the drone activity over Bundeswehr sites to Chinese intelligence.
Elsewhere the tempo holds: Polish prosecutors have opened more than a hundred espionage cases in 20 months, and in the Netherlands a former commander of US Army forces in Europe said Russian saboteurs attacked the rail network and tried to kill him, which Dutch Railways said they knew nothing about.
Connexion
