The Plain Record

Neutral daily news — clear headlines, complete facts.

National

NATO Commander Reports Increase in Russian Risk-Taking and Covert Attacks

NATO's deputy commander warns that Russia is using covert sabotage and drone incursions to test Western unity as front-line casualties mount.

Published September 23, 2026 at 1:43 AM EDT

The short answer

NATO's deputy commander warns that Russia is using covert sabotage and drone incursions to test Western unity as front-line casualties mount. Air Chief Marshal Sir John Stringer, NATO’s deputy supreme allied commander for Europe, stated on Tuesday, September 22, 2026, that Russian President Vladimir Putin is becoming increasingly open to risk and seeking to divide Western allies as the war in Ukraine continues.

NATO Commander Reports Increase in Russian Risk-Taking and Covert Attacks

The Facts

Who
Air Chief Marshal Sir John Stringer (NATO deputy commander), Estonian Prime Minister Kristen Michal, and Russian President Vladimir Putin.
What
NATO’s deputy supreme allied commander for Europe warned that Russian President Vladimir Putin is becoming more risk-accepting and is using covert sabotage and drone incursions to test Western allies.
When
Tuesday, September 22, 2026
Where
Tallinn, Estonia
Why
To report on the shifting nature of Russian tactics toward NATO members, characterized by increased covert sabotage and efforts to divide the alliance amid the ongoing war in Ukraine.

Air Chief Marshal Sir John Stringer, NATO’s deputy supreme allied commander for Europe, stated on Tuesday, September 22, 2026, that Russian President Vladimir Putin is becoming increasingly open to risk and seeking to divide Western allies as the war in Ukraine continues. Speaking at a security conference in Estonia, Stringer noted that the Russian leader appears to be testing the alliance's collective defense pact through covert operations. The warnings come as European leaders report a rise in incidents involving sabotage, espionage, and drone incursions across the continent.

The current security environment follows years of tension between Russia and NATO members, exacerbated by the 2022 invasion of Ukraine. While some European leaders have expressed concern that Moscow is planning bolder attacks to test NATO's Article 5 defense commitments, other officials have urged a measured response. A British defense official, speaking anonymously, stated that the U.K. assessment suggests Putin is not seeking a direct military confrontation with NATO at this time.

Data tracking these incidents shows a sharp increase in activity; according to an Associated Press map, recorded incidents rose from 59 in March 2025 to more than 210 recently. These events include arson, vandalism, and cyberattacks, such as an August plot at Leipzig airport involving a drone with explosives and a disrupted sabotage attempt at a U.K. drone factory. Stringer noted that while some drone incursions into NATO airspace may be accidental results of GPS jamming, the distinction between negligence and deliberate targeting is narrowing.

The scale of the conflict is reflected in the reported casualty figures and the geographical reach of sabotage efforts. Air Chief Marshall Sir Richard Knighton stated that Russian forces have suffered more than 500,000 deaths during the invasion. For the average citizen in Europe, these developments may lead to heightened security at public facilities and potential disruptions to digital services due to cyberattacks. While Estonian Prime Minister Kristen Michal described a conventional military attack on Europe as currently improbable because Russian forces are occupied in Ukraine, she indicated that covert "malign activity" is likely to persist until Moscow alters its military goals.

The situation sets a precedent for how NATO handles "gray zone" tactics—actions that fall below the threshold of open warfare but cause domestic disruption. These covert operations are often difficult to attribute, as Russian intelligence services frequently recruit saboteurs online who may not know their employer's identity. Looking ahead, Baltic leaders, including Latvian President Edgars Rinkevics, predict that infrastructure attacks may increase through the winter months, with no significant diplomatic progress expected until spring 2027. Individual governments, such as France, are currently developing specific protection plans for critical infrastructure against drone and cyber threats.

Timeline of what happened

Key dates and decisions, in the order they occurred.

  1. March 2025

    Recorded incidents of Russian disruption total 59 for the month

  2. August 2026

    German officials report explosives found at Leipzig airport

  3. August 2026

    Estonian defense company fire and Bulgarian weapons depot explosion occur

  4. September 22, 2026

    Air Chief Marshal Sir John Stringer delivers remarks in Estonia

Summaries are written by The Plain Record to state the facts of a story plainly and without political slant. Drafted with AI assistance and checked against the source record before publication. See how we report, or report a correction.

← Back to the front page

Questions readers ask

What happened: NATO Commander Reports Increase in Russian Risk-Taking and Covert Attacks?

NATO’s deputy supreme allied commander for Europe warned that Russian President Vladimir Putin is becoming more risk-accepting and is using covert sabotage and drone incursions to test Western allies.

Who is involved?

Air Chief Marshal Sir John Stringer (NATO deputy commander), Estonian Prime Minister Kristen Michal, and Russian President Vladimir Putin.

When did this happen?

Tuesday, September 22, 2026

Where did this happen?

Tallinn, Estonia

Why does this matter?

To report on the shifting nature of Russian tactics toward NATO members, characterized by increased covert sabotage and efforts to divide the alliance amid the ongoing war in Ukraine.