Russian Drone Incursions in Moldova and Romania Signal Escalating Hybrid Threat to Europe

Key points

• Russian drones crashed in Cernita, Moldova, and near Solca, Romania, on September 24, following strikes on western Ukraine.
• Poland evacuated border crossings at Zosin and Dorohusk for 30 minutes as a preventative measure during Russian attacks.
• A fire at a Starlink station in Poland and a drone incident in Berlin are attributed to sabotage, though official attribution is pending.
• The Russian MoD falsely claimed an encirclement of Dobropillya, a claim refuted by Ukrainian officials and ISW analysis.
• US and Ukraine propose a ceasefire on energy strikes, reopening the Black Sea grain corridor, and a trilateral meeting in Abu Dhabi.

Background

This escalation follows months of Russian hybrid warfare tactics, including sabotage of European infrastructure and drone incursions into NATO airspace. Previous assessments in August 2026 noted Russian offensive stagnation in Ukraine, with limited territorial gains despite high casualties. The current incidents represent a shift toward diversifying attack platforms, including potential use of shadow fleet vessels, to pressure European support for Ukraine.

How outlets are covering it

The Institute for the Study of War (ISW) frames the drone incursions as part of a deliberate Kremlin strategy to normalize airspace violations and degrade European will to support Ukraine. ISW emphasizes that while incidents in Poland and Germany fit this pattern, authorities have not yet officially attributed them to Russia. In contrast, Ukrainian officials focus on the immediate humanitarian impact, such as the strike on a residential building in Khmelnytskyi, and the broader diplomatic efforts to end the war. Western intelligence sources, including the Danish Defense Intelligence Service, warn of intensified hybrid warfare but assess that a limited military attack on NATO borders is unlikely. The Kremlin, meanwhile, continues to project battlefield strength through exaggerated claims of encirclements, despite ISW’s assessment that these are cognitive warfare efforts to mask stagnation.

Why it matters

The increasing frequency of drone incursions into NATO and Moldovan airspace raises the risk of accidental escalation and signals a shift in Russian hybrid warfare tactics. These incidents could strain European defense resources and disrupt critical infrastructure, such as telecommunications and logistics, potentially affecting public confidence in security. The proposed US-led de-escalation steps offer a potential pathway to reduce tensions, but the Kremlin’s refusal to engage in trilateral talks and its continued exaggeration of battlefield gains suggest a lack of immediate willingness to negotiate. The situation underscores the complex interplay between kinetic warfare in Ukraine and hybrid threats to European stability.

What to watch

Western intelligence agencies will likely monitor for further Russian provocations, including potential attacks on underwater telecommunications infrastructure. Diplomatic efforts may focus on the proposed trilateral meeting in Abu Dhabi or the G20 Summit in December 2026, though the Kremlin has expressed skepticism. On the battlefield, Ukrainian forces will continue counteroffensives, such as Operation Vivaldi, to disrupt Russian logistics, while Russian forces may attempt to maintain pressure through drone strikes and infiltration missions. The outcome of these diplomatic and military actions will determine whether the conflict escalates further or moves toward a negotiated resolution.