Weekly Briefs

AI-generated intelligence summaries for the Baltic region, published weekly as Hybrid and Defense Prep bundles.

Each week publishes a brief bundle with separate Hybrid and Defense Prep analyses. Open a week to read both scopes together.

European authorities continue to counter hybrid threats involving espionage, sabotage, and proxy terrorist activities primarily linked to Russian intelligence and allied actors.
Multiple sabotage attempts targeted critical infrastructure, including power grids, subsea communication cables, railway lines, and ammunition depots, with some attributed to Russian agents or proxies.
Hybrid tactics included state-sponsored illegal migration from Belarus to Latvia, drone attacks near NATO borders without airspace violation, and threats by pro-Kremlin groups aimed at arms suppliers to Ukraine.
+2 more points...

Estonian Defence Forces participated for the first time in the NATO REPMUS 2026 exercise to test autonomous maritime systems and verify interoperability with allies.
Latvia extended Operation Werewolf until October to address illegal migration from Belarus, citing damage to border infrastructure and use of migration as political pressure.
Estonia deployed a border guard team to Latvia’s eastern border to support efforts against illegal migration and to secure the EU external border.
+3 more points...

Russian intelligence services (SVR, GRU, FSB) are operating espionage activities in Austria, with at least 1 in 6 Russian diplomats linked to Moscow intelligence. Austria expelled diplomats for suspected espionage targeting European institutions in Vienna.
Russian GRU military intelligence is suspected of sabotage against Bulgaria's defense industry, including the August 10 explosion at EMCO arms plant storage, and paramilitary operations involve sabotage and arson on Latvian railway infrastructure.
Latvia has intensified border security against hybrid threats including instrumentalized illegal migration from Belarus with Operation VILKATIS and reported multiple incidents involving drones over Latvian airspace downed by NATO jets.
+2 more points...

Military-grade explosive drones targeted Ukrainian cargo planes at a NATO logistics hub and Leipzig Airport, highlighting the use of unmanned systems in hybrid attacks near critical infrastructure.
Joint Russian-Belarusian military exercises simulated 'nuclear' scenarios using decoy Su-25 aircraft and electronic warfare pods for survivability enhancement without deploying actual nuclear weapons.
Lithuanian intelligence indicates Russia's potential plans to employ captured Ukrainian drones for false flag hybrid attacks on Baltic critical infrastructure, though no imminent attacks are confirmed.
+2 more points...

Key espionage incidents include the arrest of a Canadian intern at NATO SHAPE suspected of spying for China, and multiple Latvian espionage cases targeting pro-Ukrainian individuals, attributed to Russian intelligence efforts.
Russia reportedly uses captured Ukrainian drones to potentially carry out false-flag attacks against Poland and NATO states, raising hybrid warfare escalation concerns.
Weaponization of migration is evident with identified tunnels under the Lithuania-Belarus border aiding irregular crossings with Belarusian state complicity, and Moroccan intelligence officers infiltrating Spain’s Ceuta border disguised as migrants.
+2 more points...

Russia is reportedly escalating hybrid warfare tactics by potentially using captured Ukrainian drones for attacks against NATO countries including Poland and the Baltics.
Eastern European nations including Latvia, Lithuania, and Poland face weaponized migration flows reportedly orchestrated by Russia and Belarus as a destabilization strategy.
Romania has experienced a significant uptick in drone incursions and airspace violations including multiple interceptions of Russian Shahed drones supported by NATO air policing.
+2 more points...

France, UK, and the EU publicly attribute and sanction Russia's FSB 16th Centre for long-standing, state-backed cyber espionage and sabotage campaigns targeting government, defense, and critical infrastructure sectors, including a foiled major power outage attack in Poland.
Hybrid warfare activities by Russia include cyberattacks, disinformation campaigns, and unconventional paramilitary tactics such as aiding illegal migration and sabotage against NGOs supporting Ukraine, notably in Latvia.
Germany detained a Moldovan-registered flying spy drone conducting surveillance over a sensitive arms manufacturing site, indicating use of UAVs for reconnaissance in hybrid operations.
+2 more points...

Italy expelled two Russian GRU military attachés and dismantled a sophisticated Russian spy ring recruiting former Italian intelligence officers to target Ukrainian air defense data.
A Lithuanian company, UAB Eseka, was implicated in sanctions evasion by supplying Starlink terminals and drone motors to Russia, highlighting ongoing economic support to Russian military efforts.
Russian intelligence campaigns in Europe increasingly use Telegram-based recruitment of disposable saboteurs for sabotage, arson, and vandalism, indicating a growing low-level covert operational tactic.
+2 more points...

Belarusian hybrid operations target Latvia through border militarization and troop quartering near NATO, elevating regional tensions.
A significant cyberattack on Latvia's LVM forestry firm exposed data leaks, raising ongoing concerns about cyber security vulnerabilities in hybrid conflict contexts.
Russian naval provocations against Greenpeace protest vessels in the Baltic illuminate increased maritime intimidation tactics near Germany.
+2 more points...

Loading briefs...