Across Europe, a quiet war is being waged in the margins of attribution — in burned warehouses, intercepted drones, and severed cables that no one can definitively trace to Moscow. NATO's deputy commander, speaking in Estonia this week, placed this accumulation of ambiguous harm within a larger strategic logic: Vladimir Putin, under mounting pressure from a costly and stalled war in Ukraine, is probing the edges of Western resolve without crossing the threshold that would demand a unified response. The pattern raises an ancient question about collective security — at what point does the sum of
NATO warns Putin growing more dangerous as covert attacks surge across Europe
a rat in the corner, increasing activity in Europe to weaken Western backing
So NATO is saying Putin is getting more dangerous. But dangerous how? Is he about to attack NATO directly?
Not according to most of the officials quoted here. The British defense establishment thinks direct confrontation is unlikely. But Stringer is warning that Putin is testing boundaries—sabotage, drones, cyberattacks—in ways that are hard to prove and even harder to respond to.
Right, and that's the crucial distinction. The narrative says incidents jumped from 59 to 210, but we should note those aren't all confirmed Russian operations. Some are suspected, some are attributed by one country's assessment. The German drone at Leipzig—that's concrete. The British factory plot they disrupted—that's concrete. But "an Estonian defense company was set on fire"—no public attribution to Russia mentioned in the source.
That's fair. The whole point is that attribution is the problem. Russia recruits people who don't even know they're working for Moscow. So the ambiguity is structural, not accidental.
And the reason Putin is doing this now is because Ukraine is actually hurting him?
Exactly. Half a million dead on the front lines. Fuel shortages in 80 of 83 Russian regions from Ukrainian strikes on energy infrastructure. His military campaign is costly and slow. So instead of escalating directly, he's trying to divide NATO allies and weaken their will to support Ukraine.
But here's what I want to flag: Michal says direct military attack on Europe is "currently improbable" because of NATO's response risk and because Russian forces are tied down in Ukraine. That's a conditional assessment. It's not "impossible." It's "improbable given current conditions."
So if Ukraine weakens, or if NATO fractures, that calculation changes?
That's the implication, yes. And that's why Michal says the best deterrent is backing Ukraine. It's not about defending against drones—it's about keeping Russia too busy and too damaged to consider a wider move.
Stringer also made a point about not overreacting. He said Putin would like to provoke an overreaction that divides the alliance. So NATO is in a bind: respond too little and you look weak; respond too much and you play into Putin's hands.
What does "respond" even mean in this context? You can't shoot down a drone that might be accidental.
Exactly. That's the genius and the terror of the strategy. The incidents are designed to be ambiguous. And the source material doesn't tell us what NATO's actual response protocol is—how they distinguish between accident and deliberate, or what triggers a collective response.
Il Polso
- Covert Russian incidents across Europe have surged from 59 in March 2025 to over 210, spanning arson, sabotage, cyberattacks, and drone operations — a tempo that NATO officials say is accelerating deliberately.
- The operations are engineered for deniability: Moscow recruits operatives online, sometimes without their knowledge, ensuring that proof remains elusive and responsibility nearly impossible to establish.
- A drone loaded with explosives was found beside a Ukrainian aircraft at Leipzig airport; a Russian plot to destroy a drone factory near London was foiled; an Estonian defense company burned and a Bulgarian weapons depot exploded — each incident hovering between accident and act of war.
- European leaders are divided on how to respond, with some warning Putin may soon test NATO's collective defense pact directly, while others caution that overreaction is precisely the outcome Moscow is engineering.
- NATO officials assess that Putin is not seeking open military confrontation, but is instead exploiting the 'febrile environment' to fracture Western unity and erode support for Ukraine as his war grinds forward at catastrophic human cost.
Across Europe, a quiet war is being waged in the margins of attribution — in burned warehouses, intercepted drones, and severed cables that no one can definitively trace to Moscow. NATO's deputy commander, speaking in Estonia this week, placed this accumulation of ambiguous harm within a larger strategic logic: Vladimir Putin, under mounting pressure from a costly and stalled war in Ukraine, is probing the edges of Western resolve without crossing the threshold that would demand a unified response. The pattern raises an ancient question about collective security — at what point does the sum of unprovable provocations become a provocation that cannot be ignored?
At a security conference in Estonia this week, NATO's deputy commander Air Chief Marshal Sir John Stringer delivered a sober assessment: Vladimir Putin is growing more reckless, and the evidence is scattered across Europe in acts of sabotage, drone incursions, and cyberattacks that officials struggle to pin definitively on Moscow. Stringer framed the behavior as a calculated effort to fracture Western unity at a moment when Russia's military campaign in Ukraine is advancing at enormous cost — over half a million Russian dead, according to Britain's defense chief, and fuel shortages across 80 of Russia's 83 regions caused by Ukrainian strikes on energy infrastructure.
The scale of covert activity has accelerated sharply. Analysts tracking incidents across Europe counted 59 in March 2025; the number has since climbed past 210. The operations are designed for ambiguity: Russia's intelligence services recruit operatives online, sometimes without those operatives knowing they are working for Moscow, making attribution nearly impossible. Stringer acknowledged that the line between accident and intent is razor-thin — drones enter NATO airspace after being knocked off course by Russian GPS jamming, leaving open the question of whether the incursion was deliberate.
Polish Prime Minister Donald Tusk and French President Emmanuel Macron have both warned that Moscow might strike NATO territory while claiming the attacks were unintended — a scenario calibrated to test collective defense commitments without crossing the threshold that would trigger a unified military response. Yet British and Baltic officials assess that Putin is not actively seeking direct confrontation; rather, as Estonian Prime Minister Kristen Michal put it, he is behaving like 'a rat in the corner,' intensifying pressure on Europe to weaken Western backing for Kyiv.
The European response remains fractured — some leaders urge firmness, others caution against the overreaction Putin may be seeking. Stringer called on NATO members to remain alert to the dangerous environment without falling into the escalation trap. When asked in May whether Russia was running a covert campaign against the West, Putin offered a reply that captured the entire strategy in four words: 'Name one proven fact.' The ambiguity, it seems, is not a flaw in the operation — it is the operation.
Vladimir Putin is becoming more reckless, according to NATO's deputy commander in Europe, and the evidence is written across the continent in sabotage, drone incursions, and cyberattacks that officials struggle to definitively attribute to Moscow. Air Chief Marshal Sir John Stringer made the assessment at a security conference in Estonia this week, framing Putin's behavior as a calculated effort to fracture Western unity at a moment when his military campaign in Ukraine is grinding forward at enormous cost. The warning reflects a growing anxiety among European capitals that Russia is testing the boundaries of what it can do without triggering a direct NATO response—and that those boundaries may be shifting.
The scale of covert Russian activity has accelerated sharply. An analysis tracking incidents across Europe documented 59 cases in March 2025; by the most recent count, that number had climbed to more than 210, spanning vandalism, arson, sabotage, cyberattacks, and propaganda operations. In August, German authorities discovered a drone carrying explosives positioned next to a Ukrainian aircraft at Leipzig airport, fueled and ready. British officials announced they had foiled a Russian plot to sabotage a drone factory outside London. An Estonian defense company burned down; a weapons storage facility in Bulgaria exploded. The incidents form a pattern, though attribution remains deliberately murky—Russia's intelligence services recruit operatives online, sometimes without their knowledge they are working for Moscow, making proof elusive and responsibility nearly impossible to establish.
Stringer acknowledged the ambiguity that makes these operations so effective. The line between accident and intent, he told the Associated Press, is razor-thin. Drones enter NATO airspace after being knocked off course by Russian GPS jamming or electronic countermeasures meant to disrupt Ukrainian strikes. Russia could escalate such activity, he said, but has not yet decided to do so. Polish Prime Minister Donald Tusk and French President Emmanuel Macron have both warned that Moscow might deliberately strike NATO territory while claiming the attacks were unintended—a scenario that would test NATO's collective defense commitment without crossing the threshold that would trigger a unified military response. France has begun preparing defenses for critical infrastructure against drone and cyberattacks. A British defense official, speaking anonymously, assessed that Putin is not actively seeking direct confrontation with NATO, a view shared by officials in Estonia, Latvia, and Lithuania, who have historically pushed for a harder Western line on Russia.
Yet the motive behind the campaign is clear. Stringer said Putin is "looking at a whole number of things" to create fractures among NATO allies because his war in Ukraine is not going well. Estonian Prime Minister Kristen Michal described Putin as "a rat in the corner," increasing activity in Europe to weaken Western backing for Kyiv while Moscow faces mounting pressure. The costs are staggering: Russia has suffered more than half a million dead on the front lines, according to Britain's defense chief, Air Chief Marshal Sir Richard Knighton. Meanwhile, Ukraine's strikes on Russian energy infrastructure have created fuel shortages across 80 of Russia's 83 regions. None of this has moved Putin to reconsider his objectives in Ukraine.
Michal said the high level of Russian malign activity "is here to stay" until Putin changes his military goals, and that the most effective deterrent is sustained Western support for Ukraine. The European response remains divided. Some leaders warn that Putin may test NATO's collective defense pact through bolder action; others urge restraint, cautioning that overreaction is precisely what Putin wants. Stringer emphasized the need for NATO members to remain aware of the "febrile environment" without falling into the trap of escalation. When asked by the Associated Press in May whether Russia was conducting a covert campaign against the West, Putin replied simply: "Name one proven fact." The question now is whether the accumulation of incidents—each one difficult to prove, each one plausible as accident—constitutes a pattern that demands response, or whether that very ambiguity is the point.
Citazioni salienti
Putin is becoming increasingly cavalier, dangerous and risk accepting as the war in Ukraine drags on and he tries to divide Western allies— Air Chief Marshal Sir John Stringer, NATO's deputy commander in Europe
The high level of malign activity from Russia is here to stay until Putin changes his military goals, and the best way to deter it is to back Ukraine— Estonian Prime Minister Kristen Michal