Title: Summary, 6 November 2026 · Eastern flank · OSINT Map
URL: https://www.osintmap.app/intsum?summary=k9784j9fhhtfgsbakpbrm8twzs8hpm7p
Updated: 2026-11-06T18:12:24.583Z

# Summary, 6 November 2026 · Eastern flank

The written assessment: today's news first, then key developments, where sources disagree and the outlook for the next 30 days.

Produced 6 November 2026, 18:12 UTC

## Watchcon

**Yellow** · Significant concern

Moderate confidence · Trend: Rising

The Yellow level holds because hybrid acts grew across the fortnight: Poland's sabotage cases, Black Sea and Baltic drone probes and cyberattacks all rose. None is an armed attack on allied territory, and the conventional reading stays at level 1.

## Top stories

- [Hoax bomb threats hit nearly 30 flights across Europe; emails traced to a Russian far-right group and Colombia](https://www.hs.fi/maailma/art-2000012392832.html)

  9 reports · Helsingin Sanomat, Digi24, BBC Europe and 5 more · latest 6 November 2026, 17:44 UTC

- [New US troop rotation arrives in Estonia after summer gap](https://x.com/MoD_Estonia/status/2118651347704627509)

  4 reports · Estonia Ministry of Defence, Defence24, ERR News and 1 more · latest 6 November 2026, 15:48 UTC

- [Lithuania's Nausėda warns Putin is 'getting closer' to Article 5, expects hybrid war to reach Germany and Denmark](https://www.digi24.ro/stiri/externe/ue/presedintele-lituaniei-avertizeaza-ca-putin-se-apropie-tot-mai-mult-de-articolul-5-rusii-se-vor-preface-doar-ca-negociaza-4024391)

  3 reports · Digi24, Baltic News Network, POLITICO Europe · latest 6 November 2026, 13:49 UTC

- [Von der Leyen to visit Bulgaria and Romania amid deadly drone attacks on Black Sea shipping](https://www.politico.eu/article/ursula-von-der-leyen-to-visit-black-sea-amid-wave-of-deadly-drone-attacks/)

  3 reports · POLITICO Europe, România TV, Coffe Report · latest 6 November 2026, 13:33 UTC

- [France to protect NATO hub in Poland from January, official says](https://news.google.com/rss/articles/CBMimgFBVV95cUxQblUyT2dIOXVxTTlTcGFBMThseE1Lb2RyTWhIUGVDaWxncmU5ZHZxT2QwOHdwXzl3aTh6dmwyX3VMTnR6WkIxd0M5aDRJbXhNa210bURONXNkZXhxQjhOSHhGSnhwVEdlVjhhdVRYWHJsZl9BQktXUXEtdVJjSWtPdGhGYlpYNDBGMVJKWEV6NHZzZHVVZDFrR2pn?oc=5)

  2 reports · Google News — Reuters Europe, G4 Media · latest 6 November 2026, 16:02 UTC

## Key developments

- Romania scrambled two F-16s on 6 Nov after radar found an aerial target east of Sulina heading toward Ukraine, and sent an RO-ALERT to northern Tulcea county: the Black Sea probe pattern is still reaching Romania's border. [radioconstanta.ro](https://www.radioconstanta.ro/2026/11/06/un-nou-mesaj-ro-alert-a-fost-transmis-populatiei-din-nordul-judetului-tulcea-o-tinta-aeriana-a-fost-detectata-in-apropiere-de-sulina/)
- A Russian Gerbera-2 drone washed ashore near Shabla on Bulgaria's coast and was destroyed on site after the defence ministry confirmed it; its origin and time of impact are unknown, so it adds a find on allied soil but no attribution. [x.com](https://x.com/CoffeReport/status/2118698253315101015)
- Moldova's defence ministry logged 69 airspace violations in 2026, a drone over Camenca and Vărăncău on 4 Nov and drone fragments at Gordinești on 5 Nov: drone spillover into Moldova continues. [moldpres.md](https://moldpres.md/rom/societate/republica-moldova-a-inregistrat-69-de-incalcari-ale-spatiului-aerian-de-la-inceputul-anului-2026)
- Cyberattacks that heated refrigeration in food stores hit stores in Finland, Estonia, Sweden and other states this week, and the Kremlin denies involvement: the cyber pattern against civilian systems is now Europe-wide. [is.fi](https://www.is.fi/digitoday/tietoturva/art-2000012393147.html)
- Two pro-Russian groups claimed cyberattacks on refrigerators in Romania and said power plants and water networks are next: a claim only, but it names the targets the board would watch. [t.me](https://t.me/romaniatv/344253)
- Bomb threats disrupted at least 15 flights on Thursday, three linked to Poland, with diversions to Sofia and Plovdiv; authorities have not named those responsible, so the board holds this as an unattributed disruption. [polskieradio.pl](https://www.polskieradio.pl/395/7784/Artykul/3749992,bomb-threats-disrupt-flights-across-europe-including-routes-to-and-from-poland)
- Lithuania's defence minister said its Kaliningrad border is calmer than Poland's and that troops aiding border guards since 8 Oct will likely stay past mid-November: allied border precaution persists on both sides. [lrt.lt](https://www.lrt.lt/en/news-in-english/19/3106360/lithuania-s-border-with-kaliningrad-calmer-than-poland-s-defence-minister-says)
- Polish police, border guards and GROM troops have been deployed to the Kaliningrad border since 2 Nov, while Russian outlets suggest Warsaw plans a provocation: a narrative that matches the board's lawfare and information watch. [defence24.com](https://defence24.com/defence-policy/russian-media-paint-poland-as-the-aggressor-a-scenario-similar-to-ukraine)

## Where sources disagree

- Bomb-threat emails: one report says they were traced to a Russian far-right group and Colombia, the group's founder denies any link, and Polish reporting says authorities have not identified those responsible.
- Refrigeration cyberattacks: the Kremlin calls the blame on Russia 'nonsense', while two pro-Russian groups claimed the Romanian attacks and threatened more.
- Kaliningrad border: Poland says it thwarted a possible provocation, Lithuania calls its side calmer, and Russian outlets cast Poland as the one preparing a provocation.

## Outlook

- **Further drone alerts and debris are highly likely in Romania and Moldova.** Watch for another RO-ALERT in Tulcea or fresh debris finds; a drone confirmed inside Romanian airspace would raise the Black Sea probe reading.
- **More arrests and sabotage cases in Poland are likely.** Watch for new arrests or arson in Poland; a further act tied to Russian services would keep the Poland sector's hybrid reading rising.
- **Further cyberattacks on utilities or cold-chain systems across Europe are likely.** Pro-Russian groups claimed Romanian refrigerator attacks and named power plants and water networks next; a confirmed hit on either would raise the cyber reading.
- **Another drone incursion into Latvia or Lithuania is likely.** Watch for a new Latvian air threat alert or interceptor launch; a repeat would hold the Baltic probe reading at its raised level.

## Collection gaps

None filed in this summary.

## In short

- **Romania scrambled F-16s over a target near Sulina.** Radar found an aerial target east of Sulina heading toward Ukraine on 6 Nov. Two F-16s took off from Borcea and an RO-ALERT went to northern Tulcea county. [radioconstanta.ro](https://www.radioconstanta.ro/2026/11/06/un-nou-mesaj-ro-alert-a-fost-transmis-populatiei-din-nordul-judetului-tulcea-o-tinta-aeriana-a-fost-detectata-in-apropiere-de-sulina/)
- **A Russian Gerbera-2 drone washed up in Bulgaria.** It was found on a beach near Shabla and destroyed on site after the defence ministry confirmed it. Its origin and time of impact are unknown. [x.com](https://x.com/CoffeReport/status/2118698253315101015)
- **Moldova counts 69 airspace violations this year.** A drone flew over Camenca and Vărăncău on 4 Nov, and drone fragments with no explosive were found near Gordinești on 5 Nov. [moldpres.md](https://moldpres.md/rom/societate/republica-moldova-a-inregistrat-69-de-incalcari-ale-spatiului-aerian-de-la-inceputul-anului-2026)
- **Bomb threats disrupted flights across Europe.** At least 15 flights were hit on Thursday, three linked to Poland, with diversions to Sofia and Plovdiv. Authorities have not named those responsible. [polskieradio.pl](https://www.polskieradio.pl/395/7784/Artykul/3749992,bomb-threats-disrupt-flights-across-europe-including-routes-to-and-from-poland)

## Analysis

Black Sea: Romania raised two air alerts for Tulcea county on 6 Nov. The first, at 00:19, came as Russia hit Ukraine's Danube ports, and no incursion into Romanian airspace was reported. The second followed a target near Sulina heading toward Ukraine. The Gerbera-2 on the Bulgarian coast is a separate find with no known flight path.

Cyber and hoaxes: the Kremlin denies involvement in the refrigeration cyberattacks, and two pro-Russian groups claimed attacks in Romania and named power plants and water networks next. The bomb-threat emails have been tied by one report to a Russian far-right group, which denies it. No authority has attributed them.

Moldova: the drone over Camenca and the fragments near Gordinești show spillover continuing. The fragments carried no explosive payload.

## Previous summaries

- [5 November 2026](https://www.osintmap.app/intsum.md?summary=k97fsp0f9ane0r7jpwcpapavtx8hm707)
- [4 November 2026](https://www.osintmap.app/intsum.md?summary=k972sz0qgdan402br9azeatkz58hk2wa)
- [3 November 2026](https://www.osintmap.app/intsum.md?summary=k974bnt84mjm7kvxd80cgbxy4x8hhn76)
- [2 November 2026](https://www.osintmap.app/intsum.md?summary=k978epwazteqtcqhfvdc52ff758hfgn0)
- [1 November 2026](https://www.osintmap.app/intsum.md?summary=k97e3kd2d4mgmhr76ze8zrj11s8hcq0b)
- [31 October 2026](https://www.osintmap.app/intsum.md?summary=k97dmw2j1wtsw93b3hkqfsk8g98ha9dr)
- [30 October 2026](https://www.osintmap.app/intsum.md?summary=k974751e71p58m12qca283v7qx8h9s2e)
- [29 October 2026](https://www.osintmap.app/intsum.md?summary=k977ry01kcjmaazj4c4sv4sx258h63at)
- [28 October 2026](https://www.osintmap.app/intsum.md?summary=k978ee850k4shtaabyp294zecs8h5fqc)
- [27 October 2026](https://www.osintmap.app/intsum.md?summary=k979g9s53w2hne2rjkd04qgp018h2r49)
- [26 October 2026](https://www.osintmap.app/intsum.md?summary=k970k97mwcw95ykq6mncdwne2s8h1rxy)
- [25 October 2026](https://www.osintmap.app/intsum.md?summary=k973m63wg8q6e1pftq1453h3px8gygse)
- [24 October 2026](https://www.osintmap.app/intsum.md?summary=k974sfhwnfw2qkpydmpe765jhn8gwphk)
- [23 October 2026](https://www.osintmap.app/intsum.md?summary=k976ynw7658q1ysatmnzwrbh158gv0ra)
- [22 October 2026](https://www.osintmap.app/intsum.md?summary=k973p5vqzvbygcy91643jfq1r18grw4c)
- [21 October 2026](https://www.osintmap.app/intsum.md?summary=k97b17zz83s9amcbf4p3k932cs8gpzsy)
- [20 October 2026](https://www.osintmap.app/intsum.md?summary=k970zf9wyt0hdmy1vyws5md4z18gm0vw)
- [19 October 2026](https://www.osintmap.app/intsum.md?summary=k97b6fnymeqfnbwk5x3bm4q0d98gj2f7)
- [18 October 2026](https://www.osintmap.app/intsum.md?summary=k97b15jjmzg9vd0qm4j9ndnex18ggws1)
- [17 October 2026](https://www.osintmap.app/intsum.md?summary=k9729wtjwfx0n02x0nmzrdxnyx8gfejh)
- [16 October 2026](https://www.osintmap.app/intsum.md?summary=k970xz7gevy5ejr0wkmnk2sayn8gc7dt)
- [15 October 2026](https://www.osintmap.app/intsum.md?summary=k97a66qxst04z4xkhb82r46dn58gbsx0)
- [14 October 2026](https://www.osintmap.app/intsum.md?summary=k97ag37vxywx0twky03733bh1n8g9n5a)
- [13 October 2026](https://www.osintmap.app/intsum.md?summary=k97btej62ed0c8nxwpts0hn3qx8g7qdx)
- [12 October 2026](https://www.osintmap.app/intsum.md?summary=k97ad7ffwf7p86v6x2zp09wm298g5p3r)
- [11 October 2026](https://www.osintmap.app/intsum.md?summary=k97ahcafzw9fpm5b1dxqadgjjx8g3grv)
- [10 October 2026](https://www.osintmap.app/intsum.md?summary=k97afka7gg9yrexg890m3q8xfn8g17ec)
- [9 October 2026](https://www.osintmap.app/intsum.md?summary=k97740dftytt5ha1gznjaawtn18fz4bm)
- [8 October 2026](https://www.osintmap.app/intsum.md?summary=k975gmcravc1n5q0ysy99pgws58fxyh0)
- [7 October 2026](https://www.osintmap.app/intsum.md?summary=k977t29ypft4bmqdktw2esgq3n8fvezm)
- [6 October 2026](https://www.osintmap.app/intsum.md?summary=k9776yc5g2v54jp68381gspy798fsrzq)
- [5 October 2026](https://www.osintmap.app/intsum.md?summary=k97679zez0p1b6jz6x46waqkgn8fqv7n)
- [4 October 2026](https://www.osintmap.app/intsum.md?summary=k97bcj1zr7pgf0a0dcnayqhww58fn917)
- [3 October 2026](https://www.osintmap.app/intsum.md?summary=k97abw49xcwap45sx23x87m0c58fja14)
- [2 October 2026](https://www.osintmap.app/intsum.md?summary=k971ftaengatbm0yega19mx4dh8fgmc9)
- [1 October 2026](https://www.osintmap.app/intsum.md?summary=k97cwj53pj01f2jbqqcm9ztkjn8ffj9r)
- [30 September 2026](https://www.osintmap.app/intsum.md?summary=k9741pfm2r3887r46qp1v1sy2d8fc55h)
- [29 September 2026](https://www.osintmap.app/intsum.md?summary=k970nmqr440zd783t37zbtz79x8favn4)
- [28 September 2026](https://www.osintmap.app/intsum.md?summary=k97aq7mbv86mz0z4endecjfqm18f8cg2)
- [27 September 2026](https://www.osintmap.app/intsum.md?summary=k9711p5wpxvft3bqh53dqeg0wd8f9hc8)
- [26 September 2026](https://www.osintmap.app/intsum.md?summary=k97awrxc35gbw8ab9sbgv0vya58f9410)
- [25 September 2026](https://www.osintmap.app/intsum.md?summary=k978bxrzm28c8ekg839c5sw8md8f8jv7)
- [24 September 2026](https://www.osintmap.app/intsum.md?summary=k974qk5rer2rscn7rvc71w49fs8f8r31)
- [23 September 2026](https://www.osintmap.app/intsum.md?summary=k97ek49s7j8hxmxyhbgs8e737d8f9c0n)