Summary, 5 November 2026 · Eastern flank

The written assessment: today's news first, then key developments, where sources disagree and the outlook for the next 30 days.

Produced 5 November 2026, 21:58 UTC

Watchcon

Yellow · Significant concern

High confidence · Trend: Rising

Hybrid pressure on the flank is steady and rising: drone incursions, sabotage arrests and ship attacks recur, and the board reads no conventional build-up. Nothing seen on 5 Nov shows an armed attack on allied territory.

Key developments

Latvia's armed forces said one drone seen over the country was most likely a Russian Geran-type. A second, which crashed in the east, may have been Ukrainian. This keeps drone incursions into the Baltic states on the board, with one origin still open. wiadomosci.wp.pl
Drone fragments were found in Boghicea commune, Neamț County, Romania, with police and an explosives team sent. The link to a drone that spent over two hours in Romanian airspace is not officially confirmed. It is possible debris on allied soil. x.com
CERT Polska confirmed one cyberattack on a refrigerator in Poland, part of a wave across at least nine European countries. Two pro-Russian hacker groups claimed it. This is confirmed damage on Polish soil, with attribution not established. polskieradio.pl
Drone attacks on commercial ships off Romania and Bulgaria have grown more frequent since early October, with two people confirmed dead and at least ten missing. This is harm in allied waters and keeps the Black Sea maritime reading high. x.com
A Helsinki court jailed the Fitburg's Russian captain for three years and six months and an Azerbaijani crew member for two years and ten months. The anchor drag of 31 Dec 2025 cut two Finland–Estonia cables. It is a court finding of sabotage in the Baltic Sea. digi24.ro
Poland's ABW detained six people, five Poles and a Russian woman, suspected of spying for Russia and sending ammunition components to Kaliningrad via Lithuania. Four face espionage charges. It shows a Russian-linked network working on Polish soil. euronews.com
France is extending its Atlantique 2 patrol aircraft in Romania by several weeks after Romania and Bulgaria asked for reinforcement. This is an allied response to the Black Sea ship attacks, not a hostile move. g4media.ro
A Russian Gerbera reconnaissance drone, with no explosives, was found in woods near Gordinești, Rezina district, Moldova. It adds to the drone debris on Moldovan soil. moldpres.md

Where sources disagree

Refrigerator hacks: the Kremlin calls the accusations absurd and unfounded. Experts name Moscow as a main suspect, and hacker groups claimed the attacks and then deleted the claims.
Black Sea toll: one report counts two confirmed dead and at least ten missing since early October. Another says at least nine ships were hit in October, with about 34 sailors dead or missing.
Fitburg: the court found sabotage, while the captain and crew member deny wrongdoing and question Finland's jurisdiction.

Outlook

More drones entering Romanian airspace are likely within 30 days. Watch for another RO-ALERT or debris find like Neamț County on 5 Nov; repeats would keep the Black Sea air probe reading at level 2.
Further drone incursions into Latvia are likely within 30 days. Baltic probes ran 4 in the last 7 days against 2 before; another Latvian alert would extend that rise.
New sabotage cases in Poland are likely within 30 days. Poland logged 5 sabotage events in the last 7 days against 1 before; further arrests or arson would keep its sabotage reading at level 2.
More merchant ship strikes in the Black Sea are likely within 30 days. Black Sea maritime events ran 3 in the last 7 days against 4 before; a new strike off Romania or Bulgaria would hold the maritime reading at level 3.

Collection gaps

None filed in this summary.

In short

Latvia says one drone was probably Russian. Its armed forces called one drone most likely a Russian Geran-type. A second, which crashed in the east, may have been Ukrainian. wiadomosci.wp.pl
Drone fragments turned up in Romania's Neamț County. Police and an explosives team went to Boghicea commune. The link to an earlier drone seen over Romania is not officially confirmed. x.com
A Helsinki court jailed two Fitburg crew over the cable cuts. The Russian captain got three years and six months, and an Azerbaijani crew member two years and ten months, for the anchor drag of 31 Dec 2025. digi24.ro
Poland detained six over spying for Russia. Five Poles and a Russian woman are suspected of sending ammunition components to Kaliningrad via Lithuania. Four face espionage charges and three months in detention. euronews.com

Analysis

Baltic Sea cables: The Fitburg verdict is a court finding that the ship's anchor dragged at least 130 km along the Gulf of Finland seabed on 31 Dec 2025. It damaged two Finland–Estonia cables and crossed eight other cables and a gas pipeline. Both men deny wrongdoing and question Finland's jurisdiction.

Poland: The six detained by the Internal Security Agency are said to have run shipments from 2023 to 2025 worth over 2 million zloty, using vehicles with hidden compartments. Separately, CERT Polska confirmed one refrigerator cyberattack in Poland, part of a wave in at least nine European countries. Two pro-Russian groups claimed it. The Kremlin denies involvement.

Drones in the south: Romanian police and an explosives team went to drone fragments in Neamț County, about 56 km from the Moldovan border. Moldova's police say the drone found near Gordinești in Rezina district was a Gerbera reconnaissance craft with no explosives. Neither report says who sent the drones.

Black Sea shipping: France is keeping its Atlantique 2 patrol aircraft at Mihail Kogălniceanu base for several more weeks after Romania and Bulgaria asked for reinforcement. The aircraft flagged the three sea drones that sank the Contship Jet about an hour before they struck on 28 Oct.