Summary, 16 October 2026 · Eastern flank

The written assessment: today's news first, then key developments, where sources disagree and the outlook for the next 30 days.

Produced 16 October 2026, 22:37 UTC

Watchcon

Yellow · Significant concern

Moderate confidence · Trend: Rising

Yellow level held. Ship strikes in Romanian waters and the Starlink arson are serious hybrid acts, but conventional readings stay at level 1 and Romania has not sought Article 4. No armed attack on allied soil is confirmed.

Bottom line up front

Watch condition held at the Yellow level; conventional attack highly unlikely. The Black Sea probe reading rose from 3 to 4 on 6 Oct, but allied sectors' conventional readings stayed at level 1, moderate, so the Yellow level held.
Drone strikes on merchant ships have reached allied territorial waters. HS Dignity sank off Bulgaria on 13 Oct; drones hit ships in Romanian waters by 16 Oct, and the board raised its deniable strike indicator from 2 to 3.
Starlink arson now spans Poland and Bulgaria, and sabotage rose. Two Turkish suspects were arrested in Germany on 12 Oct over the Wola Krobowska arson; on 16 Oct the board raised sabotage from 2 to 3 after Sofia antennas burned.
Border pressure on Latvia turned armed, with a Belarus-based group claiming it. A pistol was shown at Latvian troops on 10 Oct and a group claimed a raid on 13 Oct; the board raised migration from 1 to 2 on 8 Oct.

Key developments

NATO said drones struck two ships in Romanian Black Sea waters overnight, and a third vessel was hit just outside them, with seven crew missing. Strikes inside allied waters keep the Black Sea at the severe level. wsj.com
Bulgaria formally asked NATO for combat aircraft and anti-drone systems on its territory after the ship attacks and awaits a decision. It shows an allied state seeking more cover, not a Russian force move. defensenews.com
Prime Minister Tusk said German police detained two Turkish citizens over the 23 Sept Starlink station arson in Mazovia and called it hybrid warfare. Reports link the suspects to a gang that may have acted for Russian services. defenceturk.net
Moldova logged six unauthorised drone overflights on 15 to 16 Oct, one crashing and exploding in Dondușeni district, and put this year's violations at 63. Spillover onto Moldovan soil continues with Russian attacks on Ukraine. moldpres.md
Polish Defence Minister Kosiniak-Kamysz said a Russian drone hit a locomotive 6 to 7 km from the Polish border on the Ukrainian side, and drones struck a Polish-owned firm in Volyn. Strikes are nearing the border but not crossing it. wiadomosci.wp.pl
Lithuania extended its troop deployment of up to 100 soldiers on the Kaliningrad border to mid-November, citing possible refugee flows. Military intelligence reports no significant change in Russian activity there. x.com

Where sources disagree

Attribution of the Black Sea drone strikes: an unnamed NATO source said the drones came from Russia, Bulgarian and Romanian authorities treat Russia as prime suspect, but Romania's president says it is too early to prove it.
Thresholds: Lithuania's foreign minister calls the strike inside Romanian waters a significant escalation, while Romania's president has not sought Article 4 and says Article 5 is not being discussed.
Black Sea toll differs by report: one counts at least 23 sailors killed in ten days, another two killed and more than 25 missing; the Wine Trader's missing are given as seven in most reports and eight in two.
Starlink arson: Poland's prime minister says suspects were detained and calls it hybrid warfare, while reports say the Turkish gang only may have acted for Russian services.

Outlook

More drone strikes on Black Sea merchant ships are highly likely. Watch for another vessel hit inside Romanian or Bulgarian waters, or a decision on Bulgaria's request to NATO; a further strike would hold the Black Sea at the severe level.
Polish jet scrambles and eastern airport closures will almost certainly recur. Watch for a Red level Alert RCB warning or a recorded violation of Polish airspace, which would bear on the odds of the deniable drone strike scenario.
Moldovan airspace violations will likely recur during Russian attacks on Ukraine. Watch for another drone crash with an explosion on Moldovan soil; it would hold Moldova's probe reading at level 2, while a quiet week would ease it.
A further sabotage act in a state supporting Ukraine is likely. Watch for new arson outside Poland and Bulgaria; a third state would mark a series across states, the sign the board's sabotage indicator describes.

Collection gaps

None filed in this summary.

In short

Drones hit ships inside Romanian waters. NATO said drones struck two ships in Romanian Black Sea waters overnight and a third vessel was hit just outside, leaving seven crew missing. wsj.com
Bulgaria asked NATO for jets and anti-drone systems. Defence Minister Stoyanov said the request followed the week's ship attacks and that Sofia awaits a decision. defensenews.com
Poland warned Lublin counties of an air attack threat. The Red level alert for counties near Chełm went out at 01:17 on 16 Oct and ended at 01:26. It is a warning, not a report of a strike. x.com
Poland's prime minister says suspects are held over the Starlink arson. Donald Tusk said German police detained two Turkish citizens over the 23 Sept fire in Mazovia and called it another act of hybrid warfare. defenceturk.net

Analysis

Poland's airspace: Russian strikes on western Ukraine again brought Polish fighters up and closed Rzeszów and Lublin airspace on 16 Oct. Alert RCB warned Lublin and Podkarpackie residents at levels from Red to Yellow, all ended by 17:11. Poland's military recorded no violation of its airspace. Drones hit a locomotive 6 to 7 km from the border on the Ukrainian side.

Poland, sabotage: Tusk says two Turkish citizens were detained in Germany over the 23 Sept Starlink arson at Wola Krobowska. Reports link them to a gang that may have worked for Russian services. The board raised sabotage from 2 to 3 on 16 Oct. A separate case: a 66-year-old man was charged over a plot against Tusk and the defence minister.

Moldova: six unauthorised drone overflights were logged on 15 to 16 Oct, and one drone crashed and exploded in Dondușeni district. Moldova counts 63 violations this year. Moldova is not a NATO state, so it does not set the conventional reading, but the spillover shows how far the strikes on Ukraine reach.