Russia tests NATO with sabotage while Europe hesitates to respond

By Tom Beckwith · Reporting from Washington · September 26, 2026

As Moscow escalates hybrid sabotage across Europe, Western capitals risk undermining NATO deterrence by treating serial grey-zone provocations with quiet hesitation rather than a firm response.

Interests first, capabilities second, statements last

The professional habit in foreign service is to read a capital's behavior like a cable: interests first, capabilities second, statements last. What does the Kremlin want? It wants to fracture European resolve, redirect resources away from Ukraine, and demonstrate that NATO's collective security guarantee is a hollow paper promise. What are its capabilities? As the Danish Defence Intelligence Service assessed on Thursday, Sept. 24, 2026, Moscow possesses the means to intensify a hybrid campaign. Its campaign will bring greater consequences for targeted countries than in the past. The agency also assessed a low but growing risk of a limited military attack against NATO countries bordering Russia.

What about the statements? Vladimir Putin accuses European leaders of seeking out a war against Russia and frightening their populations with an imaginary threat. Meanwhile, state media briefly published and deleted op-eds about a lightning-fast war against the Baltic states. We should ignore the theater and look at the ledger. Incidents have accumulated across the continent with the rhythmic precision of a marching order.

A Russian drone carrying explosives was discovered at an airport in eastern Germany near a Ukrainian aircraft in August 2026. Berlin formally blamed Moscow and imposed a diplomatic freeze, as reported by NBC News. German authorities also temporarily suspended operations at Berlin-Brandenburg airport after air traffic control detected an unidentified drone, according to the Institute for the Study of War.

A fire broke out at a Starlink satellite communications ground base station in Wola Krobowska, Poland, on the evening of Sept. 23, 2026. Polish Deputy Prime Minister Krzysztof Gawkowski confirmed the fire resulted from sabotage aimed at disrupting internet services. He noted it aligns with Russia's new doctrine of attacks, as detailed by the Institute for the Study of War and DW.

A Russian drone hit a passenger train less than two miles from the Polish border, where former CIA Director David Petraeus happened to be stationed. NATO fighter jets shot down a drone entering Lithuanian airspace. A Russian Gerbera-type drone crashed in Moldova and another in Romania, while drones flew over Bukovyna in western Ukraine targeting border crossings, according to the Institute for the Study of War and DW.

This is not miscalculation or stray ordnance; it is a systematic probing of our thresholds. Ed Arnold of the Royal United Services Institute noted that Putin’s risk calculations are getting more liberal. Everyone just got a bit freaked out. Katja Bego of Chatham House observed that with these incidents so frequent and brazen, distinguishing them from actual acts of war grows difficult. She warned that the Kremlin is playing with fire.

The mechanism here is identical to the Estonian cyberattacks of 2007, often called "Web War 1." Non-kinetic, asymmetric disruptions targeted Estonian websites, parliament, banks, and broadcasters amid a dispute over a Soviet-era war grave. Then, as now, the objective was the deployment of non-kinetic, asymmetric disruptions to test a target's societal resilience and political resolve.

The cost five years out is severe. If we fail to price these provocations today, the threshold of war shifts permanently downward.

What each capital fears and what the moves cost in five years

To understand where this goes, we must ask what each capital fears and what a move costs five years out. The Baltic states and Poland fear that small, deniable incursions will create a fait accompli before Article 5 can be invoked. Latvian President Edgars Rinkēvičs noted that a 2022-style conventional incursion is unlikely right now because Russia is absorbed in Ukraine. However, Lithuanian Defense Minister Robertas Kaunas warned that provocations and false-flag operations remain possible.

In response, Lithuania is planning to evacuate older adults and lift its ban on hosting nuclear weapons. It is also receiving a new rotation of U.S. troops. Finland has warned citizens to be mentally prepared for sabotage. France is implementing a plan to protect critical infrastructure, according to NBC News and CNBC.

Yet Western capitals are divided on how to price the risk. U.S. Secretary of State Marco Rubio met with Russian Foreign Minister Sergey Lavrov on Wednesday, Sept. 23, 2026. Rubio stated the U.S. is concerned the Ukraine war could metastasize through a hybrid or sabotage attack. He noted the administration has weighed proposals for a ceasefire on energy infrastructure and a trilateral meeting in Abu Dhabi. Meanwhile, the Pentagon is weighing a plan to reduce the U.S. military presence in Europe by nearly one-third, according to NBC News.

William Alberque, a former senior NATO official, warned that Moscow is trying to show Europe it can act without consequences. Moscow also wants to show that the U.S. will not come to their rescue. That is the central fear in every European chancellery: an American retreat executed precisely as the grey-zone pressure reaches its boiling point.

If we treat these drone crashes and cyber disruptions as mere policing matters, we invite larger kinetic adventures. The same applies to Starlink station fires and attacks on water systems in Norway and Poland. The price of our hesitation in five years will be an alliance too fractured to defend its own perimeter.

The cost of failing to answer asymmetric aggression

The opposing case argues that responding firmly to every border drone risks escalating a localized conflict. A firm response could spark a continent-wide conflagration. In this view, restraint is prudence. Proponents of this caution suggest that Vladimir Putin is lashing out from weakness while his conventional forces are bogged down in Ukraine. They argue that overreacting to grey-zone provocations plays directly into the Kremlin's hand by generating panic and diverting resources from Kyiv's defense. Romanian Defense Minister Radu Miruta argued that no more than a diplomatic protest was needed after a drone crash in Solca. His view reflected a desire to contain rather than expand the crisis.

This argument misreads the nature of coercive deterrence. Restraint in the face of sustained sabotage is not prudence; it is an invitation to further aggression. As Ukrainian President Volodymyr Zelenskyy bluntly stated, if you do not respond to Russians, they will go further.

When a state crosses the line from cyber espionage to physical attacks on railways, airports, and satellite ground stations, quiet diplomatic notes signal weakness. They betray a lack of collective nerve. Deterrence is spent in crises and earned in the boring years. Right now, we are bankrupting our credibility by pretending serial sabotage is business as usual.

The long record teaches us that revisionist powers test borders to discover where resolve ends and accommodation begins. Incremental encroachment succeeds only when defenders convince themselves each violation is too small to justify a stand.

The Kremlin will continue to scale its hybrid campaign across Europe's physical and virtual spaces. It will exploit private-sector tech dependencies and alliance friction until it meets a wall of undeniable consequence. We can draw that line now with unified economic countermeasures, reinforced air defenses, and uncompromising attribution. Or we can draw it later amidst smoking substations and divided capitals when the cost has multiplied tenfold.

Russia tests NATO with sabotage while Europe hesitates to respond

Interests first, capabilities second, statements last

What each capital fears and what the moves cost in five years

The cost of failing to answer asymmetric aggression

Sources