Allied Intelligence — 2026-09-21

European Spy Chiefs Warn Moscow Is Planning More Decisive Action Against NATO Within Months

BLUFMultiple European service chiefs moving threat assessments on the record very likely foreshadows a NATO member publicly attributing a Russian-linked attack to Moscow by late December 2026.

Michal Koudelka, head of the Czech Republic's BIS security service, told the Guardian that Russia could attempt increased drone activity, false-flag provocations, a limited incursion into NATO territory, or a large-scale influence campaign within "months, not years" 12. The Guardian's interviews also included Sweden's military intelligence chief Thomas Nilsson, who said Russia's intensified sabotage campaign aims to weaken support for Ukraine, split NATO, and spread fear among European populations 12. The warnings follow Polish Prime Minister Donald Tusk's statement to parliament that intelligence assessments suggest Russia could use drones or missiles against NATO territory in coming months to test whether "article 5 is more theoretical than practical," a claim French President Emmanuel Macron called credible 3. Latvia's state security chief Normunds Mežviets said his service sees "no indications of an imminent attack" but noted Russia is shifting sabotage and arson attacks from random targets toward railway and defence-industry sites tied to Western support for Ukraine, and the Kremlin's Dmitry Peskov dismissed the warnings as having "nothing to do with reality" 123.

Analysis
A NATO member very likely will publicly attribute a Russian-linked drone incursion, sabotage attack, or limited incursion to Moscow by December 21, as named service chiefs in Prague and Riga shift from closed-door planning to on-the-record threat menus that itself signals deterrence intent toward Moscow. Czech and Latvian officials agree on Russian intent but split on timing, with Prague citing a compressed "months, not years" window against Riga's insistence on no imminent-attack indicators. This judgment carries moderate confidence, resting on consistent signals across multiple national services but lacking disclosed operational intelligence confirming a Russian decision to strike, and rests on a single primary channel since secondary outlets merely relay the Guardian's original interviews. The warnings may function primarily as coordinated deterrence messaging and domestic threat-conditioning rather than new intelligence, given Estonia's criticism of "panicked" discussion. A confirmed incident would force NATO planners to decide in real time whether it clears the threshold for Article 5 consultation and eastern-flank posture adjustments.

3 sources

European spy chiefs warn Moscow is planning more decisive action against Nato - The Guardian
Russia could test NATO in coming months, European intelligence chiefs warn - The News International (Pakistan)
European Spy Chiefs Warn Russia Could Launch Attack on NATO - Greek City Times