Summary, 27 September 2026 · Eastern flank

The written assessment: today's news first, then key developments, where sources disagree and the outlook for the next 30 days.

Produced 27 September 2026

Watchcon

Yellow · Significant concern

Moderate confidence · Trend: Rising

The Yellow level reflects elevated hybrid pressure, especially recurring probes, drone spillover and sabotage reports. The recorded period began on 18 September and does not establish a full two-week comparison. No reported event shows a conventional build-up or a confirmed armed attack on allied territory.

Bottom line up front

The Yellow level held, and a deliberate attack is highly unlikely. Pressure rose in the recorded days through 24 September, driven by recurring probes and sabotage, before easing from the peak of 12 flank events.
Baltic air and maritime probes likely remained persistent. Baltic states recorded 10 probe events on five days from 21 to 26 September, with no high or severe event recorded.
Polish sabotage activity likely recurred above the standing tempo. Poland recorded five sabotage events on three days from 18 to 24 September, including the reported railway sabotage attempt near Stoczek Łukowski.
Moldovan airspace spillover likely remained elevated. Moldova recorded four probe events on three days from 24 to 27 September, including a Geran-4 drone that crashed and exploded in Briceni district.

Key developments

Drone fragments were found near Volintiri in Moldova on 27 September; authorities secured the site and opened an investigation, sustaining elevated spillover pressure in Moldova. digi24.ro
Poland and Lithuania are developing a cross-border civilian evacuation plan and testing it through Lithuanian mobilisation exercises. This is precautionary preparation, not evidence of a force build-up facing the flank. euronews.com
Lithuania's parliament approved a proposal to lift its constitutional ban on nuclear weapons and foreign bases, but two further votes are needed. The measure does not change the current conventional reading. euobserver.com

Where sources disagree

Some reporting describes a changing or escalating hybrid threat, while other officials cited in the listed material say the overall threat picture is unchanged. The reports do not provide a common operational threshold for that difference.

Outlook

Further Romanian airspace alerts are likely in the next 30 days. Watch for another confirmed border crossing near Tulcea or Chilia Veche; repeated crossings would keep the Black Sea probe reading elevated.
Further Moldovan drone debris or incursions are likely in the next 30 days. Watch for a further confirmed drone entry, crash or debris find; this would sustain Moldova's elevated probe reading.
A new Polish sabotage report is likely in the next 30 days. Watch for a confirmed physical attack on rail or communications infrastructure; a cross-state series would strengthen the sabotage indicator.
An overt conventional build-up toward the Baltic states is highly unlikely. Watch for maneuver units, ammunition or bridging returning to Kaliningrad, or Russian force formation toward Belarus; either would raise the conventional reading.

Collection gaps

None filed in this summary.

In short

Romanian airspace was breached near Chilia Veche. Aerial targets prompted an alert and the scramble of Spanish F-18 fighters and a helicopter. Radar contact was later lost near Pardina. digi24.ro
A further alert covered northern Tulcea County. Romanian authorities issued an RO-Alert and scrambled two F-16s after radar detected an object crossing into Romanian airspace. digi24.ro
Drone fragments were found near Volintiri, Moldova. Border police secured the field in Ştefan Vodă district and began an investigation into the device's origin and type. digi24.ro
Poland and Lithuania continued civilian crisis planning. The two countries are developing a cross-border evacuation plan, with testing linked to Lithuania's ongoing mobilisation exercises. euronews.com

Analysis

The Black Sea sector recorded another Romanian airspace incident near Chilia Veche. It adds to the recent pattern of alerts and fighter scrambles, but no report describes casualties or a strike on Romanian infrastructure.

The Volintiri debris find sustains Moldova's elevated spillover reading. Its origin and type remain unconfirmed, limiting any assessment beyond a further drone-related incident.

The Polish-Lithuanian evacuation work is a precautionary civil measure. It does not provide evidence of Russian conventional force formation toward the Suwałki corridor.

Lithuania's nuclear-ban proposal is not yet law and does not change the current force posture. The reported Russian state-media threat remains messaging rather than an observed military move.