Ukraine's new defense minister went to Kherson Oblast days after Russia destroyed the heat of its main city. Yevhenii Khmara visited the region and met the head of the regional military administration, Oleksandr Prokudin, to discuss the region's most urgent needs, the Defense Ministry reported.

Russia hit the Kherson combined heat and power plant with a glide bomb on 26 August, then struck it again overnight with four more, destroying all the heat- and power-generating equipment that remained, Naftogaz said.

Prokudin has urged residents to leave, warning the city may go without heat and power through the winter. He said that Russia has dropped 170 glide bombs on the oblast since 1 July, more than in the entire first half of 2026.

Air defense topped the agenda

Khmara and Prokudin discussed strengthening defenses against various types of drones and protection against aerial bombs, as well as the safety of roads and critical infrastructure, which are being attacked by Russians day and night. They also addressed giving troops in this direction more capacity to strike the Russian targets that threaten civilians and soldiers.

The needs match the threat Prokudin has described. No region of Ukraine currently has the means to shoot down jet-powered Shaheds or glide bombs, he said, and Russia has begun using both more heavily against Kherson's infrastructure.

The minister met marines and the wounded

Khmara spoke with commanders and troops of the 30th Marine Corps operating on the Prydniprovskyi direction, the ministry said. The talks covered financial support for combat units and larger purchases of strike systems.

"We have taken up the soldiers' requests that need Defense Ministry decisions," the ministry said.

Khmara also visited a medical facility treating wounded troops and presented state awards.

The ministry frames it as direct contact

The Defense Ministry said it plans to keep working directly with troops and the leadership of front-line regions to strengthen the Defense Forces and protect Ukrainian lives.

Bulgaria will add seven minehunter ships to its navy under two agreements with Belgium and the Netherlands, Reuters reported. Parliament cleared the acquisition on 26 August, and the vessels are meant for a sea where mines have drifted since Russia invaded Ukraine. They will work within a three-country task force whose mission widened this summer beyond mine clearance.

Russia's invasion turned the Black Sea into hostile water for civilian shipping: mines drift out of the fighting, strikes fall on port after port, and grain leaves through whatever routes are still open. Mine clearance is the slow work that keeps those lanes usable at all, and every hull committed to it widens the area the navies bordering that sea can actually cover.

What parliament approved

Three of the hulls come through a sale the Netherlands agreed with Sofia, and they carry the gear for locating mines and mine-like objects and blowing them up. The remaining four arrive under a three-way handover deal signed by the two donor countries and the recipient, according to Reuters.

Before the three sale ships change hands, the Dutch will put their systems back in working order and raise how much they can do at sea. The bill for the yard work on all seven, up to the level the alliance requires, falls to the buyer. Alongside the ships, a signed memorandum provides for training the crews and supplying spares and extra kit.

Belgium and the Netherlands, together with the UK, handed Ukraine five mine countermeasure vessels in April, described at the time as the core of a future large-scale Black Sea clearance operation. 

A task force that grew

Bulgaria, Romania, and Türkiye signed the agreement creating a joint Mine Countermeasures Task Group in January 2024, and the group began work that summer. Three other states hold coastline on the same sea: Georgia, Russia, and Ukraine.

"Bulgaria is part of the mine countermeasures group established together with our colleagues from Türkiye and Romania, and it is working in excellent coordination to clear the maritime areas of the three countries," Bulgarian Defense Minister Dimitar Stoyanov said.

At a NATO summit in July, the three agreed to expand the force so it also protects critical infrastructure. Romania's national defense strategy had already flagged risks to Black Sea infrastructure.

Russian President Vladimir Putin has made inadequate drone defenses and slow repairs grounds for putting private assets under state management. His 24 August security decree opens a new way to government control over Russia’s economy.

It expands a mechanism Russia has used against foreign-owned businesses since 2023, according to research by Nektorov, Saveliev and Partners (NSP), a Russian law firm that tracks state takeovers.

A business need not lose a facility before the measure can apply. Decree No. 604 allows action over late security measures, safety violations, conduct that endangers normal operations, ineffective counter-drone steps, or delayed restoration.

The text does not specify what counts as “ineffective” drone protection or how quickly a facility must be restored. Covered sectors include energy, industry, communications, utilities, transport, logistics, and life-support infrastructure, plus any sites deemed important to Russia’s security or economic stability.

Foreign controllers are also covered, including foreign organizations and citizens controlling Russian companies. Temporary management can reach all or part of an entity’s Russian property, securities, stakes in Russian companies, and other property rights—the rule is not limited to the damaged or vulnerable facility alone.

“Temporary” control has no deadline

At the same time, the text mentions no automatic return deadline. Putin must instruct the government to begin temporary management and then end it. By default, the Federal Property Management Agency assumes the owner’s powers, except for the right to dispose of the assets. The assets’ costs will be covered from its income.

Interfax published Denis Manturov’s remarks. The first deputy prime minister said the measure would be used selectively for specific security tasks and would leave formal ownership unchanged.

Komsomolskaya Pravda’s Alexander Kots raised a practical problem: Russian law, he wrote, gives businesses no instructions for defending sites against drones or cruise missiles, while barriers require extensive approvals, and private guards cannot easily be given weapons more powerful than shotguns.

The decree followed weeks of Ukrainian attacks on Russian refineries, ports, and warehouses. Ozon reported six disruptions at its facilities after 22 August. The listed retailer’s shares fell as much as 29.09% from Friday’s close on Monday, after five weeks of strikes on privately held Wildberries.

Explore further

Why did Ozon fall as much as 29% while Russia’s market lost 2.9%?

Refining hit two-decade lows as strikes forced Russia to import gasoline, while a sixth Ust-Luga attack since March struck the country’s largest Baltic port.

NSP’s nationalization study records more than 100 cases since 2022 and about 6.5 trillion rubles (about $78 billion) in seized assets. It says cases averaged one court hearing and roughly two months.

The NSP temporary-management table lists several foreign-owned businesses placed under “temporary” management from 2023 whose owners still lack access because the arrangements remain indefinite.

Germany has placed part of a federal ministry directly next to a Berlin building that France links to Russian intelligence, the newspaper Tagesspiegel reported. The branch office shares a wall with the Russian House, a cultural center long suspected of serving as a Kremlin front. One of its units works on protecting Germany's critical networks from attack.

A shared wall in the heart of Berlin

The Federal Ministry for Digital Affairs opened a branch at Taubenstraße 42/43 on 1 July. It sits wall-to-wall with the Russian House on Friedrichstraße, reporter Claudia von Salzen found. The ministry moved in because its main headquarters nearby had run out of space.

Two of the ministry's six departments now operate there. One covers digital infrastructure, including a unit for the security and resilience of public telecom networks.

The other handles digital identities, trust services, and the cybersecurity industry. Both are fields a hostile intelligence service would want to watch.

Explore further

The throwaway agents Moscow sent after a Bavarian drone boss arming Ukraine—and how Germany stopped them

Why the address raises alarms

The Russian House is officially a science and culture center. It opened on Friedrichstraße in 1984 to promote friendship with the Soviet Union.

Rossotrudnichestvo, a Russian state agency, runs it. The EU sanctioned that agency in July 2022 as the Kremlin's main tool for hybrid influence. In Germany, it allegedly helped organize pro-Russian rallies, and many of its staff abroad are Russian intelligence officers.

A leaked French Interior Ministry letter states the building serves as cover for Russian intelligence. The Russian House rejected that and claimed it is a purely cultural institution.

Other branches of government took the threat seriously

Across town, German lawmakers near the Russian Embassy hardened their offices years ago. They were told to avoid Bluetooth devices and to fit their windows with anti-espionage film.

Berlin is also reviewing whether to close the Russian House over the espionage suspicions, TVP World reported. A senior lawmaker, Roderich Kiesewetter of the CDU, called the ministry's choice a clear failure of risk awareness.

Explore further

Germany declared a break with Russia—then licensed its nuclear giant

The ministry said it picked the site because the building is federally owned and the right size. It did not answer whether the proximity to the Russian House counts as a security risk.

Russia's shadow war has already reached Germany

Germany has become one of the busiest fronts in Russia's campaign of drone incursions, sabotage, and spying. By December, Germany had logged more than 1,000 suspicious drone flights in 2025 alone. The drones have swarmed both civilian airports and military sites, shutting Munich Airport over two days in October 2025 and stranding thousands of travelers. Analysts judge it highly likely that Russia flew some 144 surveillance drones over a dozen NATO countries between August 2024 and February 2026, including near Ramstein Air Base and NATO nuclear sites. In early August 2026, security staff found an explosives-laden drone beside a Ukrainian cargo plane at Leipzig-Halle airport, an incident Western intelligence tied to Moscow.

Explore further

A bomb-laden drone hit a Ukrainian An-124 in Germany, then lay unnoticed for hours

Much of the ground work runs through disposable agents recruited online. In March 2026, authorities arrested operatives who had surveilled the head of a Bavarian drone firm arming Ukraine, a case its domestic service treats as a planned assassination. Prosecutors separately charged three men over a plot to mail exploding parcels from Germany, described as a test run for future arson attacks.

Russia may expand hybrid attacks against Poland and the Baltic states, including infrastructure sabotage or false-flag attacks, Bloomberg reported on 12 August, citing an unnamed European intelligence official. 

The warnings come amid concern that Moscow wants to intimidate Ukraine’s supporters. The CIA warning follows Russian threats, incursions, alleged sabotage plots, and disinformation against Poland and the Baltic states. Most Western military aid reaches Ukraine through Poland, while the Baltic states rank among Kyiv’s strongest supporters. Sabotage of transport, energy, or communications can slow aid delivery and test NATO while hiding Russia’s role.

Separately, a European government official told Bloomberg that the CIA had warned countries in the region of a possible future Russian attack. The CIA declined to comment.

The same official said Russia might instead be creating the impression of an impending attack to sow fear as part of an information operation. The official saw no signs that Moscow was preparing a conventional attack or invasion.

Moscow tests NATO’s eastern flank

Poland and Lithuania had already raised similar concerns. In July, Poland said it had credible intelligence that Russia was planning new provocations. Lithuania later warned that Moscow might rebuild captured Ukrainian drones for false-flag strikes on critical infrastructure.

In September 2025, between 19 and 23 Russian drones entered Polish airspace, shutting down airports and damaging buildings. Poland closed four airports as NATO aircraft responded.

Meanwhile, five people are on trial in Lithuania over attacks allegedly organized for Russian military intelligence in 2024, Bloomberg reported. Lithuania has reinforced infrastructure sites and deployed troops since June.

These warnings and incidents place the CIA alert within a wider pattern of pressure on NATO’s eastern flank and Ukraine’s supporters. 

How Russia strikes without starting a war

Bloomberg cited several recent unexplained drone incidents in Germany alongside the CIA warning. Citing Die Zeit, Euromaidan Press reported that an explosive-laden drone struck the wing of a parked Ukrainian An-124 at Leipzig-Halle airport and failed to detonate. A US Defense Department official in Europe told CNN that Washington assessed the drone belonged to Russian intelligence. 

Bloomberg also reported that a cargo plane hit an unidentified object and that drones appeared over a military base the following day. It did not connect either incident to Russia.

More broadly, Russian hybrid operations have grown sharply since the full-scale invasion. CSIS found that attacks in Europe tripled from 2023 to 2024, after quadrupling the previous year. Separately, the US Helsinki Commission mapped nearly 150 operations in NATO territory attributed to or suspected of Russia between February 2022 and November 2024.

Retired Lt. Gen. Ben Hodges told Euromaidan Press in February that attacks on ports, railways, and cables can probe routes needed for NATO reinforcements. Their deniability raises the political cost of responding.

By hiding its role, Moscow can disrupt support for Ukraine and test NATO without openly starting a war. 

Lithuania's military intelligence warned that Russia is considering using captured Ukrainian drones for false flag attacks on critical infrastructure in the Baltic region, LRT reported. Defense Minister Robertas Kaunas confirmed the assessment and called the scenario "probably the most realistic" form of Russian provocation against the region. Lithuania has reinforced security at key infrastructure sites and deployed military forces since June.

Russia's false flag playbook with captured drone parts

Moscow could reassemble crashed and intercepted Ukrainian drone wreckage into functioning devices and launch them at targets in the Baltic states, Kaunas told reporters on 6 August. The goal: create confusion about who launched the strike and avoid accountability for hitting NATO territory.

"We have data that Russia is considering conducting unconventional kinetic attacks against critical infrastructure in the Baltic region," Kaunas said. "It is likely that Russia could use Ukrainian-made drones for this purpose."

The Baltic region. Map: Euromaidan Press

The mechanism exploits a byproduct of Ukraine's drone war against Russia. As Ukrainian long-range drones hit oil infrastructure and military targets deep inside Russia, some are intercepted or crash. Russia collects the wreckage. 

"Russia possesses some of those parts and drone fragments and is capable of assembling them into a functioning device," Kaunas said. "The theoretical possibility that such drones could be used in a false flag operation exists."

Explore further

Lithuania moves to produce Ukrainian drones locally under bilateral defense pact

Kaunas emphasized no decision to launch such an operation had been detected. 

"We are talking about a false flag operation in which a fake Ukrainian drone could be used. At this point, that is probably the most realistic scenario."

The false flag warning follows a pattern of Ukrainian drones entering Baltic airspace after being diverted by Russian electronic warfare. NATO fighter jets shot down such drones over Latvia and Estonia this spring, and Lithuania shut Vilnius airport after detecting a drone crossing from Belarus.

Explore further

Baltic nation boosts security at dam, gas storage facility due to Russian threat

Multiple NATO allies see the same intelligence

Lithuanian President Gitanas Nausėda had earlier raised concerns about possible conventional and sabotage strikes targeting the country's transport and energy networks. Kaunas echoed that message and pointed to a broader pattern across the alliance's eastern flank.

"Other NATO countries have repeatedly made it very clear that they see it, hear it, know about it, and have warned Russia not to do it," Kaunas said. He did not identify specific targets or a timeline for any potential attack.

Russia claimed the Baltic states open air corridors for Ukrainian drone strikes—without producing evidence. Russia also threatened NATO member Latvia with retaliation over the accusations. Nausėda publicly rejected Moscow's claims.

NATO upgraded its Baltic Air Policing rules of engagement in July, giving fighter jets authority to shoot down objects that pose a threat. Russia's military aircraft probed NATO's eastern flank so aggressively in July that scrambles jumped more than 250%.

Read also

• Lithuania scrambles NATO jets and shuts Vilnius airport over drone from Belarus

• Baltic nation boosts security at dam, gas storage facility due to Russian threat

• Russian maps blurred 119 of Russia’s own military sites in the Nordics and Baltics—and gave away their locations