Summary, 29 September 2026 · Eastern flank

The written assessment: today's news first, then key developments, where sources disagree and the outlook for the next 30 days.

Produced 29 September 2026, 19:33 UTC

Watchcon

Yellow · Significant concern

High confidence · Trend: Rising

The flank stays at the Yellow level because hostile acts on allied territory are confirmed and recurring, a sabotage attack in Poland and one in Estonia, drone debris in Romania and repeated airspace incidents, yet all remain below an armed attack and conventional postures facing the flank are unchanged.

Bottom line up front

The watch condition held at the Yellow level; conventional attack highly unlikely. Pressure rose over the twelve recorded days: Poland, the Baltic states and the Black Sea all moved to a rising trend on 29 September.
A deniable strike on Polish or Baltic territory remains likely. Air and maritime probes recurred in the Baltic and Black Sea sectors, ten events each on six days, with nine in Poland.
Sabotage inside states supporting Ukraine is highly likely to continue. The board raised sabotage to the high level on 28 September after the confirmed Starlink station fire in Poland, with six Polish events on four days.
Eroding faith in Article 5 is roughly even chance Moscow's main aim. The board raised the Article 5 cognitive indicator to the high level on 26 September, after a Russian state agency published then deleted a nuclear threat against Lithuania.

Key developments

Estonia said the 15 August arson at defence firm Milrem Robotics in Tallinn was commissioned by Russian special services, with three Latvian suspects detained and transferred to Estonia, and summoned Russia's chargé d'affaires on 29 September. For the board this is a second state-attributed sabotage act in the same window, the basis for the sabotage instrument standing at the high level. valitsus.ee
Romanian radar detected an aerial target north of Isaccea during the night of 28 to 29 September; two Spanish F-18s on reinforced air policing launched and an alert was issued in northern Tulcea County, with no airspace violation reported. It marks another night of allied jets scrambled over the Romanian border. x.com
A Russian drone struck about 2 km from the Dorohusk–Yahodyn crossing on the Ukrainian side on 28 September; Poland scrambled aircraft and issued an alert in Lubelskie without reporting an airspace violation. The board reads this as continued spillover pressure on Poland's border from strikes over the line. polskieradio.pl
Poland's defence ministry said pilots will be able to engage unauthorised aerial objects on radar identification alone, without visual confirmation, citing repeated Russian airspace violations including the Mi-8 incursion of 23 September. It lowers the threshold at which an intruding object over Poland is shot down. notesfrompoland.com
A Polish court sentenced a Belarusian man to three and a half years for preparing to set fire to a warehouse in Chełm for foreign intelligence, after he filmed the site and sent information to handlers recruited via Telegram. It shows the recruitment pattern behind the sabotage series that the board tracks in Poland. notesfrompoland.com
EU defence ministers agreed more than €62 million for the Eastern Flank Watch initiative, covering border monitoring, air defence and counter-drone capability, and reaffirmed sanctions on Russia's shadow fleet. The board notes it as allied hardening against the probe pattern rather than a change in Russian activity. kam.lt

Where sources disagree

Risk assessments diverge: Lithuania's prime minister says the risk of attacks on NATO remains but has not significantly changed, while a Danish assessment cited in Dutch preparedness reporting holds that Moscow could launch a limited attack on NATO in coming months.

Outlook

Further drone debris on Romanian or Moldovan soil is likely. Watch for another explosive-payload drone landing on allied territory; a detonation causing casualties would push the Black Sea sector's reading and the deniable-strike odds higher.
Poland firing on an intruding drone is roughly even chance. Watch for a first engagement under the radar-only rules announced on 29 September; a shootdown over Polish soil would lift the sector's probe reading.
Sabotage spreading to another flank state is roughly even chance. Watch for a confirmed act against rail, energy or communications in a state not yet hit; that would lift that sector's hybrid reading.
Another Lithuanian airport closure from Belarus-launched objects is roughly even chance. Watch for arrivals suspended again at a Lithuanian airport, or a second NATO shootdown; either would firm the Belarus platform indicator above its elevated level.

Collection gaps

None filed in this summary.

In short

Estonia named Russia over an arson attack in Tallinn, saying the 15 August fire at defence firm Milrem Robotics was commissioned by Russian special services. Three Latvian suspects were detained and transferred to Estonia, and Russia's chargé d'affaires was summoned on 29 September. Moscow denies involvement. valitsus.ee
A drone with an explosive charge came down on Romanian farmland, near Gropeni in Brăila County overnight. The charge detonated on impact and started a small fire that was quickly put out, with no casualties or damage. Romanian authorities recovered the fragments for examination. g4media.ro
Spanish F-18s took off over Romania's border, after radar detected an aerial target north of Isaccea during the night of 28 to 29 September. A population alert was issued in northern Tulcea County and lifted at 02:10. Romania reported no violation of its airspace. x.com
Poland will let pilots fire on radar alone, dropping the requirement for visual identification before engaging unauthorised objects in its airspace. The defence ministry tied the change to repeated Russian violations, including the brief Mi-8 helicopter incursion on 23 September. notesfrompoland.com

Analysis

On the Black Sea flank the pattern was again aerial. A drone carrying an explosive charge fell near Gropeni and its charge detonated on Romanian ground, and hours earlier Spanish F-18s on reinforced air policing launched over a target north of Isaccea, with an alert in northern Tulcea County and no airspace violation reported. Debris on allied soil and jets in the air on the same night is the combination that took the sector's trend upward on 29 September.

Poland's day mixed defence and enforcement. Warsaw said pilots will be able to engage intruding objects on radar identification alone, a lower bar than visual confirmation, and a court in Poland jailed a Belarusian man for preparing to burn a warehouse in Chełm for foreign intelligence after filming the site for handlers recruited online. A Russian drone also struck about 2 km from the Dorohusk–Yahodyn crossing on the Ukrainian side, with Polish aircraft scrambled and an alert in Lubelskie, but no violation of Polish airspace.