Several recent incidents across Europe were conducted by Russia or are likely attributable to Russia, ISW assessed in its 24 September report, though authorities have not officially linked the Polish and German incidents to Moscow.

Russia's full-scale war against Ukraine has expanded into a parallel campaign of provocations against European defense and logistical infrastructure. The Kremlin is using drones, arson, and undersea cable sabotage to degrade Europe's will and ability to support Ukraine, while deliberately intensifying the frequency of airspace violations to erode the boundary between hybrid and kinetic war.

Drones over Moldova and Romania

Four Russian drones flew over Bukovyna and targeted an energy facility and border crossings with Moldova and Romania, Chernivtsi Oblast Military Administration head Ruslan Osypenko reported. Ukrainian forces shot down three. The fourth flew toward Suceava County in northeastern Romania.

A drone crashed in Cernița, Florești district, Moldova—preliminarily identified as a Russian Gerbera type, the first such device found in the country. It carried an onboard camera, hit a tree, and exploded, Moldovan police said. Romania's Defense Ministry reported a second aerial vehicle entered Romanian airspace for four minutes and crashed near Solca in the same border region; geolocated footage confirmed it was also a Gerbera, ISW noted. Poland evacuated the Hrubieszów and Dorohusk border crossings for 30 minutes, Prime Minister Donald Tusk said. Three countries were put on alert by a single night of Russian strikes.

"Intentional and accidental Russian drone incursions into NATO and Moldovan airspaces are likely part of the Kremlin's efforts to normalize airspace violations by intensifying their frequency," ISW assessed.

Sabotage in Poland and Germany

A fire engulfed the power system and backup generator at a Starlink ground station in Wola Krobowska, central Poland, on the evening of 23 September. Deputy Prime Minister Krzysztof Gawkowski confirmed it was sabotage aimed at cutting internet access, including for Ukraine's military. Authorities have not identified who was responsible, but the act aligns with Russia's "new" doctrine of attacks, Gawkowski said. The station is now operating normally.

German authorities suspended operations at Berlin-Brandenburg airport for 45 minutes the same evening after staff reported a drone sighting, Die Zeit reported. Federal police could not confirm it. ISW assessed both incidents fit Russia's wider pattern of sabotage against European defense assets, though neither has been officially attributed to Russia.

Western intelligence warnings

A Lithuanian Defense Ministry source reported on 23 September that Russia could launch Gerbera drones from a shipping container in the Mediterranean against Spain, France, and Italy. Danish Defense Intelligence assessed on 24 September that Russia will intensify its hybrid war in coming months, including destructive cyber attacks and sabotage carrying a high risk of casualties, and that there is a low but growing risk of a limited Russian military attack on a NATO border state. It sees no indications of an outright invasion. The CIA reportedly warned Poland that Russia may sabotage underwater cables to disrupt its banking system, according to Newsweek Polska journalists.

NATO tracked and confronted Russian submersibles rehearsing deployment of a new cable-disabling weapon near Svalbard in spring 2026—no cables were damaged, but the operation demonstrated Moscow's intent, Reuters reported. Shadow fleet vessels likely served as drone-launch platforms for incursions into NATO airspace, ISW noted.

"The increasing frequency of such warnings suggests that Western intelligence agencies are picking up indicators that the Kremlin is looking to diversify its platforms and means for conducting attacks against NATO and European states and is considering conducting such attacks," ISW assessed.

ISW said it has not yet seen evidence that Russia has conducted the attacks the warnings describe.

Denmark's assessment—that a limited Russian military strike on a NATO border state could come in the coming months—suggests the boundary between hybrid provocations and military action is narrower than European policy has assumed. ISW's synthesis reframes what governments have treated as separate incidents into one campaign.

"Intentional and accidental Russian drone incursions into NATO and Moldovan airspaces are likely part of the Kremlin's efforts to normalize airspace violations by intensifying their frequency," ISW assessed.

"The increasing frequency of such warnings suggests that Western intelligence agencies are picking up indicators that the Kremlin is looking to diversify its platforms and means for conducting attacks against NATO and European states and is considering conducting such attacks," ISW assessed.

Ukrainian President Volodymyr Zelenskyy announced that Ukraine has agreed on a new package of Patriot interceptor missiles with an unnamed partner, Suspilne reported. He made the announcement on 24 September during a meeting with the Ukrainian community in the United States. Zelenskyy did not reveal the partner's identity, the quantity, or the delivery timeline.

Russia's aerial campaign against Ukrainian cities is heading into its most dangerous winter yet, with ballistic strikes on hospitals, power stations, and residential buildings pushing monthly civilian casualties to their highest level since the war's opening weeks. The gap between the interceptors Ukraine needs and what allies have so far committed has become a central factor in both the defense of Ukrainian cities and the diplomatic standoff.

What Zelenskyy said

Zelenskyy made the announcement during a broader address to the diaspora about diplomacy, the peace effort, and cooperation with US President Donald Trump's team.

"We agreed today—I won't say with whom—on a package of [interceptor] missiles for Patriot systems. This is an important decision," Ukrainian President Volodymyr Zelenskyy told the Ukrainian diaspora in New York.

He gave no further details. Zelenskyy said ending the war was the most important question facing Ukraine and awarded decorations to community members who had contributed to the country's defense.

Before the New York trip, the interceptor question had been raised with several partners. After meeting Trump on 22 September, Zelenskyy said he had asked Washington for a winter package of Patriot interceptors. That same week, he pitched Japan's Prime Minister Sanae Takaichi on air-defense cooperation, noting that Mitsubishi Heavy Industries runs the only plant outside the US licensed to assemble PAC-3 missiles. Suspilne noted the issue had also been discussed with other partners Zelenskyy did not name.

Intercepting more, but not enough

On 24 September, air defenses intercepted 60% of the ballistic missiles Russia fired at Kyiv—a figure the president called significant.

"It was 60%—not 10% and not zero. And this year we had moments when it was zero. Not because someone lacks experience, but because someone lacks missiles," Zelenskyy told journalists in New York.

Since 12 August, Ukraine's Air Force has stopped publishing detailed figures on how many missiles Russia launches, reporting only what it downs—which makes Zelenskyy's percentage a rare public benchmark. By that count, Russia has fired at least 794 ballistic missiles at Ukraine since January, about 43% of all missiles used this year, with July's 174 the monthly high.

The overnight attack

Hours after Zelenskyy spoke in New York, Russia launched 295 drones at Ukraine overnight on 24–25 September. In Odesa, Russian drones killed two people—a 40-year-old woman and a 51-year-old man—and injured two others. In Kyiv, Shaheds struck high-rises in Solomianskyi district, and strikes across the broader region killed a 14-year-old boy.

Romania scrambled jets as drones drifted toward its airspace. A woman was injured in Dnipropetrovsk Oblast, and the morning brought further Russian strikes on Zaporizhzhia and Poltava, injuring two more people.

The interceptor crisis

Zelenskyy's announcement lands in the middle of a worsening shortage. In August, he told CNN that Ukraine held roughly 1% of American Patriot stocks and that 5% would get Kyiv through the winter. ISW assessed the same month that the interceptor shortage was one reason Russia saw no incentive to negotiate.

The EU has moved to fill the gap. Brussels cleared Ukraine to spend loan money on Patriot missiles and later released €6.1 billion ($7.1 billion) for interceptors and drones. But Ukraine's air force commander warned that newly ordered missiles would arrive too late for this winter and asked the Ramstein coalition to open existing stockpiles.

At least one partner has now moved from discussion to commitment. The quantity and delivery date remain unknown, and Russia produces ballistic missiles faster than Ukraine's allies have so far been willing to part with the interceptors that stop them.

"We agreed today—I won't say with whom—on a package of [interceptor] missiles for Patriot systems. This is an important decision," Ukrainian President Volodymyr Zelenskyy told the Ukrainian diaspora in New York.

"It was 60%—not 10% and not zero. And this year we had moments when it was zero. Not because someone lacks experience, but because someone lacks missiles," Zelenskyy told journalists in New York.