Estonia is automatically diverting emails using Russia’s .ru internet domain into quarantine for additional security checks before they reach state institutions connected to the country’s secure government network, Justice and Digital Affairs Minister Liisa Pakosta told Estonia's public broadcaster ERR.

The measure is intended to protect Estonian government computer systems amid a post-2022 surge in cyberattacks that officials link to Russia. It applies only to institutions operating inside the secure state network, leaving local governments and some state bodies outside.

Many Estonian residents, particularly Russian speakers, still use .ru email services, ERR noted. Because the filter is triggered solely by the address ending, legitimate messages will be screened alongside potentially malicious ones and may take longer to arrive.

Pakosta said the safeguard was necessary because cyberattacks against Estonia had increased “exponentially” since 2022 and that many were linked to Russia. She said such attacks had not succeeded against Estonia, while major public-sector cyberattacks had succeeded in both Latvia and Lithuania.

The rerouting is automatic and handled centrally, so agencies do not need to take any action, Pakosta said. A large proportion of state institutions have already moved behind the government’s unified cyber shield, while the transition continues.

Pakosta described the quarantine as one small measure within Estonia’s wider cybersecurity work. Estonia’s courts have gone further, saying they will ask parties in legal proceedings to stop using .ru addresses for official communication, according to ERR.

How the Baltic states are hardening against Russia

Estonia's email quarantine forms part of a broader Baltic effort to limit Russian influence and strengthen defenses against military, cyber, and covert threats.

Estonia, Latvia, and Lithuania are constructing a Baltic Defense Line, a planned network of bunkers, anti-tank ditches, and other barriers, along their borders with Russia and Belarus. Latvia has also banned imports of Russian and Belarusian books, clothing, toys, and other goods.

The threat extends beyond cyberattacks: an Estonian court found that Russia’s military intelligence agency, the GRU, ordered the 2024 firebombing of a Ukrainian restaurant in Tallinn, part of a wider Russian sabotage campaign targeting European supporters of Ukraine.

A fire at a Polish plant that makes drone parts for Ukraine's and Poland's militaries is being investigated as possible sabotage by a foreign intelligence service, Militarnyi reported. Poland's National Prosecutor's Office opened the case on two counts: foreign-intelligence activity against the country and a terrorist offense.

Fires and break-ins like this fit a widening pattern — the factories and supply lines that keep Ukraine armed are increasingly targets far from the front line. Across the continent, prosecutors keep opening the same kind of arson case against plants tied to Ukraine's defense.

A masked intruder and a two-hour fire

The fire started shortly after midnight on 31 August in the assembly hall of the WB Electronics plant in Skarżysko-Kamienna and spread to the storage rooms. Five crews put it out in under two hours. No one was hurt, but the storage rooms were destroyed, leaving at least 15 million zloty ($4 million) in damage. The plant had no permanent guards on site; a security company monitoring it remotely reported the fire.

Prosecutors say the blaze was set deliberately with a planted charge of flammable material, and no one has been charged. Security cameras recorded a masked person who climbed a fence and got onto the site.

Why Poland is looking at Moscow

Czesław Mroczek, deputy head of Poland's Interior Ministry, told RMF FM radio that many signs point to arson, and that a Russian trail is the obvious inference. An attack on the defense industry can suggest Russian involvement, he said, since European states have faced sabotage for years while backing Ukraine. Mroczek said protection plans for key defense plants must be richer than what this site had. No one has been detained, and investigators are still tracing how the intruder got in and who may have ordered it.

Explore further

After CIA head’s visit to Moscow, Poland’s PM warns Russia is preparing to escalate war. He puts critical window at seven or eight months

What the plant actually makes

WB Electronics is the core of WB Group, Poland's biggest private arms holding, whose firms build reconnaissance and strike drones such as the FlyEye and the Warmate. The Skarżysko-Kamienna site itself makes drone components for unmanned systems, used by both Polish and Ukrainian forces. Ukraine received FlyEye drones back in 2022 under its Army of Drones program, and in 2025 WB Group launched drone production inside Ukraine.

An explosives-laden drone aimed at a Ukrainian cargo aircraft at Leipzig/Halle Airport was part of a Russian state operation, Interior Minister Alexander Dobrindt said on 1 September.

Germany has moved from suspecting foreign sabotage to formally blaming Russia for the Leipzig attack. The finding has prompted diplomatic and security measures against Moscow while the criminal investigation continues.

Police investigations, the attack pattern, and intelligence findings established Russian responsibility, Dobrindt said. The drones' configuration, components, explosives, and detonation systems resembled those used in other Russian hybrid operations—covert sabotage and disruption below the threshold of open war—and in Russia's war against Ukraine, Foreign Minister Johann Wadephul said.

The first drone, carrying explosives, was found near a Ukrainian cargo aircraft on the evening of 4 August and defused. Investigators believe a DHL freighter may have collided with a second drone while aborting its landing after the airport closed; that drone was never recovered. A third drone was found on 14 August in a field at Kabelsketal, where investigators subsequently discovered roughly 50 grams of suspected military explosive.

Leipzig/Halle is an international freight hub used by Ukrainian Antonov aircraft and NATO's strategic airlift program, through which allies charter heavy transport aircraft to move oversized military cargo.

Berlin will close the Bonn consulate on 18 September, end the operating agreement for the Russian House, a Moscow-backed cultural center, tighten entry controls for Russian nationals, seek to add more targets to EU sanctions lists, and pressure Russia's shadow fleet—opaquely owned tankers used to move Russian oil outside Western restrictions. Wadephul also summoned the Russian ambassador. Russia's Berlin embassy will remain open.

Russian Foreign Ministry spokesperson Maria Zakharova told Interfax that Moscow would respond to Germany's “anti-Russian action,” without specifying how.

NATO Secretary General Mark Rutte said the alliance stood in full solidarity with Germany, and European Commission President Ursula von der Leyen described Berlin's measures as a strong response.

Dobrindt said Germany expects further Russian hybrid attacks. The Leipzig incident follows a widening campaign of suspected Russian sabotage across Europe, including a 2024 incendiary-device attack at the same airport that Western security officials suspected Russian intelligence organized.

How the Leipzig attack unfolded

Euromaidan Press reported on 12 August, citing Die Zeit, that footage showed an explosives-laden quadcopter striking the wing of a parked Ukrainian Antonov An-124 before falling without detonating. The article also noted that a US Defense Department official told CNN that Washington assessed the drone belonged to Russian intelligence.

On 25 August, EP reported, citing Tagesschau’s NDR/WDR/SZ investigation, that investigators had expanded the case to three drones and found the third with suspected military explosive nearby in Kabelsketal, 10 days after the original attempt.

Wolfgang Kubicki, chair of Germany’s pro-business liberal Free Democratic Party (FDP), proposed that Berlin summon Russia’s ambassador and use the prospect of Taurus missiles for Ukraine as leverage against further hybrid attacks during an appearance on German broadcaster ntv.

Kubicki’s proposal does not change German policy. The FDP has no seats in the Bundestag, Germany’s federal parliament, while Chancellor Friedrich Merz has ruled out supplying the missiles. However, it recasts military aid to Ukraine as a potential cost Moscow would face for hybrid attacks inside Germany. Berlin has since formally blamed Russia for the Leipzig/Halle operation that prompted his remarks.

Kubicki said “a reasonable person” would tell the ambassador that Germany had so far withheld Taurus missiles. If the hybrid threat continued, Berlin should do everything possible to ensure Ukraine received the weapons it needed to defend itself against Russia, he added.

Taurus, the weapon Kubicki spoke about, is a German-Swedish cruise missile launched from military aircraft, with a range exceeding 500 kilometers. Ukraine has sought it for years to strike military targets far behind Russian lines.

Germany refused to supply Taurus missiles in 2025 while funding hundreds of Ukrainian-made long-range systems. Merz again ruled out a transfer in March, arguing that Ukrainian weapons were more effective.

Leipzig sharpens Germany’s hybrid-war debate

Germany formally blamed Russia on 1 September for the attempted drone attack at Leipzig/Halle Airport and said it would close the Russian consulate in Bonn and terminate the agreement under which the Russian House cultural center operates in Berlin, DW reported. Interior Minister Alexander Dobrindt cited evidence from German and allied intelligence services, as well as investigations across Europe. Russia has denied involvement.

The operation that prompted Kubicki’s warning involved an explosives-laden drone that struck the wing of a Ukrainian Antonov An-124 heavy cargo aircraft on the evening of 4 August but failed to detonate, Die Zeit reported. The airport handles civilian freight and NATO logistics, while Ukraine’s Antonov Airlines uses it as a base.

Investigators later found evidence that three drones were involved and discovered about 50 grams of suspected military explosive near the runways.

Three men were found guilty on July 8 in connection with an arson attack on Ukraine-linked businesses in London, which British authorities say was orchestrated by Russia's Wagner mercenary group, Reuters reported.

The alleged ringleader, Dylan Earl, 21, had already pleaded guilty to aggravated arson over the 2024 blaze targeting companies that were supplying Elon Musk's Starlink satellite equipment to Ukraine, according to Reuters.

The systems are considered vital to Ukraine's communications and defense against Russia's ongoing invasion.

Earl also became the first person convicted under the U.K.'s National Security Act after admitting to a separate plot to attack a wine shop and restaurant in London’s upscale Mayfair district and to kidnap its owner, a prominent critic of Russian President Vladimir Putin.

Two others, Jake Reeves, 23, and Earl’s associate, also pleaded guilty to aggravated arson, with Reeves admitting to a charge under the National Security Act for receiving a material benefit from a foreign intelligence agency.

A jury at London's Old Bailey court convicted three additional men, Nii Kojo Mensah, 23, Jakeem Rose, 23, and Ugnius Asmena, 20, of aggravated arson. They had denied the charges. A fourth man, Paul English, 61, was acquitted.

Two other defendants, Ashton Evans, 20, and Dmitrijus Paulauskas, 23, were charged with failing to disclose knowledge of terrorist activity. Evans was convicted on one count and cleared of another. Paulauskas was acquitted of both charges and reportedly broke down in tears as the verdict was read.

Commander Dominic Murphy of the London Metropolitan Police reportedly said he was confident the Wagner Group and the Russian state were behind the attacks.

The U.K. has designated the Wagner Group as a terrorist organization.

Earl had exchanged hundreds of encrypted messages with a supposed Wagner handler using the alias "Privet Bot" on Telegram. According to reporting by the Organized Crime and Corruption Reporting Project (OCCRP), the account was previously advertised by Grey Zone, a Wagner-affiliated channel.

Prosecutors said Earl expressed interest in fighting for Wagner and was encouraged to recruit contacts from British soccer hooligan networks, Irish republican groups, and organized crime circles, Reuters reported. He and Evans also admitted to unrelated charges of dealing cocaine.

The Russian Embassy in London has denied any involvement in the warehouse attack and accused the British government of blaming Russia for domestic issues.

The Kremlin has consistently rejected accusations of sabotage and espionage, despite growing evidence and convictions tied to Russian-linked operations across Europe.

‘Neither side wasted time’ — Ukraine’s economy minister on minerals deal negotiations with Trump’s ‘business-oriented’ administration

Ukraine’s Economy Minister Yuliia Svyrydenko says her task is simple — to get the investment fund behind the closely watched minerals deal with the U.S. off the ground, and prove its detractors wrong. “There are so many criticisms from different parties that this fund is just a piece of paper we can put on the shelves — that it won’t be operational,” Svyrydenko, who is also Ukraine’s first deputy prime minister, tells the Kyiv Independent at Ukraine’s Cabinet of Ministers on July 4, the morning

The Kyiv IndependentLiliane Bivings

BRICS summit participants condemned recent attacks on Russia’s railway infrastructure, according to a joint declaration on July 6 from Rio de Janeiro.

"We condemn in the strongest possible terms the attacks on bridges and railway infrastructure deliberately targeting civilians in the Bryansk, Kursk and Voronezh regions of the Russian Federation on May 31, and June 1 and 5 2025, which resulted in the deaths of several civilians, including children," the document says.

Bryansk, Kursk, and Voronezh oblasts are all located near Ukraine’s northeastern border and have played a central role in Russia’s war effort, serving as key logistical hubs and launch sites for missile and drone attacks on Ukrainian cities–often targeting civilian infrastructure and causing casualties.

In their declaration, BRICS leaders also called for a negotiated peace agreement between Russia and Ukraine.

“We recall our national positions concerning the conflict in Ukraine as expressed in the appropriate forum, including the UN Security Council and the UN General Assembly,” the document said. “We expect that current efforts will lead to a sustainable peace settlement.”

The statement comes a few days after a phone call between U.S. President Donald Trump and Russian President Vladimir Putin on July 3, in which Putin said "Russia will continue to pursue its goals" in the war against Ukraine, Kremlin aide Yury Ushakov said.

Russian Foreign Minister Sergey Lavrov attended the summit in person, while Russian President Vladimir Putin participated via video link.

Brazil is a member of the ICC and a signatory to the Rome Statute, meaning it is obliged to arrest Putin if he enters the country.

The ICC issued a warrant for the Russian leader's arrest in March 2023 over the illegal deportation of Ukrainian children during Russia's full-scale invasion of Ukraine.

The BRICS declaration also condemned recent U.S. and Israeli airstrikes on Iranian nuclear facilities as violations of international law and criticized the presence of foreign forces in Syria and Gaza, calling for Israeli withdrawal from Syrian territory.

BRICS, originally composed of Brazil, Russia, India, China, and South Africa, has expanded in recent years to include Iran, Egypt, the UAE, Ethiopia, and Indonesia.

Lavrov meets Iranian counterpart Abbas Araqchi at BRICS summit, reiterates Russia’s offer to mediate disputes over nuclear program

Russia reiterated its offer to mediate the conflict over Iran’s nuclear program during a meeting between Foreign Minister Sergey Lavrov and his Iranian counterpart at the BRICS summit in Rio de Janeiro, Reuters reported on July 6.

The Kyiv IndependentSonya Bandouil

The Atesh partisan group set fire to a signal cabinet that helps control traffic on a railway line near the Russian-occupied city of Yasynuvata in Donetsk Oblast, a route used for Russia's military logistics, the group claimed on Telegram on June 28.

Yasynuvata lies some 22 kilometers (12.5 miles) from the occupied city of Donetsk and is considered to be a major railway junction in the region.

According to the group, the sabotaged section is located near Russian military units, warehouses, and industrial facilities.

Atesh said the attack disrupted the delivery of a train carrying fuel for Russian forces.

"On Ukraine's Constitution Day, we remind the occupiers that this is an independent and free country. And Donetsk will always be Ukrainian," the statement read.

The Kyiv Independent could not verify these claims.

The Atesh partisan group regularly conducts sabotage attacks in Russia and Ukraine's Russian-occupied territories.

In early June, Atesh claimed to have destroyed a signal cabinet on the new Volnovakha-Mariupol railway, which had been recently built by occupying Russian forces.

Ukraine war latest: Ukrainian drones reportedly strike 4 fighter jets in Russia

Key developments on June 27: * Ukraine war latest: Ukrainian drones reportedly strike 4 fighter jets in Russia * North Korea deployed 20% of Kim’s elite ‘personal reserve’ to fight against Ukraine in Russia, Umerov says * Pro-Palestinian activists reportedly destroy military equipment intended for Ukraine * Zelensky signs decree to synchronize Russia sanctions

The Kyiv IndependentThe Kyiv Independent news desk

Ukraine's security service (SBU) is teaching teenagers how to avoid recruitment by Russian intelligence online, the New York Times (NYT) reported on June 21.

"Maybe not all of these special operations are reported in the media — but believe me, the enemy is not sleeping... They are working actively and carrying out illegal activities, as strange as it may sound, directly inside your phones," SBU spokesperson Roksolana Yavorska-Isaienko told students.

Approximately 22% of Ukrainians recruited by Russian intelligence to conduct sabotage or terrorist attacks are minors, Artem Dekhtiarenko, SBU spokesperson, said on April 2.

Russian intelligence attempts to recruit Ukrainian civilians online, offering easy money in return for sharing sensitive data or preparing sabotage or terrorist acts.

Russian intelligence finds its recruits using social platforms, including Telegram, Discord, and TikTok.

Unsuspecting teenagers are often offered hundreds or even thousands of dollars to conduct simpler tasks such as delivering packages or taking photos of energy sites, the NYT reports.

More serious tasks are commonly assigned to teenagers once they have been blackmailed for conducting less serious operations beforehand or when their phones are hacked to reveal compromising photos.

Russian intelligence is actively attempting to recruit Ukrainian nationals for illegal operations across the EU, Ukraine's military intelligence agency (HUR) said on June 2.

"The recruitment of Ukrainians for hostile operations in Europe is yet another tool of hybrid aggression that the Russian Federation is waging against Ukraine and the entire European community," HUR said.

The SBU caught a Russian agent as he was filming a military airfield in preparation for a Russian strike, the agency reported on June 15.

The Russian Federal Security Service (FSB) recruited the unemployed 24-year-old via the Telegram messaging app to collect coordinates for air attacks on airfields and logistic depots, the SBU said.

The Russian FSB allegedly offered "easy money" and instructed the recruit to find military facilities and carry out reconnaissance on the ground.

Love, sex, survival — Ukrainian author on how war shapes intimacy in Ukraine

In Ukraine, Russia’s war of aggression has upended not just borders but the country’s cultural landscape. Conversations about identity, gender, and sexuality have gained new urgency. Women are increasingly stepping into combat roles once dominated by men, while relationships can dissolve as quickly as they form. Many people

The Kyiv IndependentKate Tsurkan

Ukraine’s military intelligence (HUR) ignited an electrical substation during a sabotage operation in the Russian city of Kaliningrad, causing $5 million in damage and cutting electricity to a military production site, a source in HUR told the Kyiv Independent.

In the early hours of June 14, Ukrainian agents drained the coolant from the substation’s power transformer before setting the facility on fire. The inferno inflicted major damage on the facility and caused a power cut, impacting nearby Russian military sites.

"We once again remind you that Russia no longer has a rear either in the east, in the west, or anywhere else on the planet. Everything Russian involved in the war against Ukraine will burn, sink, and be destroyed regardless of its level of protection or location," the source said.

Ukraine continues to carry out numerous secretive attacks within Russia and occupied Ukrainian territories, targeting military sites, like airfields, as well as key infrastructure like railways and oil refineries.

The attacks involve HUR, Ukraine’s Security Service (SBU) as well as partisan and sabotage groups.

HUR was behind explosions near Desantnaya Bay in Russia's far eastern Vladivostok on May 30, which reportedly damaged military personnel and equipment. The operations took place approximately 6,800 kilometres from the Ukrainian border, making it Ukraine's furthest incursion into Russian territory, if confirmed.

On June 1, the SBU launched Operation Spiderweb, a game-changing drone attack on four key Russian military airfields, damaging 41 planes, including heavy bombers and rare A-50 spy planes.

Ukrainian drones destroy Russian air defense systems in occupied Zaporizhzhia Oblast, military intelligence says

Ukraine’s military intelligence (HUR) destroyed three Russian air defense systems using drones in the occupied Zaporizhzhia Oblast on June 14, HUR says.

The Kyiv IndependentVolodymyr Ivanyshyn