Pinned Tweet
A lot of new people found this account today - thank you so much for following.
I’ll continue to track, report, and get comments on major military and security activity like what we saw today.
Also, a quick plug: I run Grey Zone Europe:
greyzoneeurope.eu
It's a small independent project tracking and mapping hybrid incidents, suspicious activity, and security developments across Europe. Any feedback is appreciated!
🇭🇺🇷🇺 NEW: Hungary is considering removing Russia's Rosatom from its €12.5 BILLION nuclear power project - potentially dealing a major blow to Moscow's remaining energy influence in the EU.
According to an exclusive Reuters investigation, Prime Minister Péter Magyar's government has begun approaching alternative suppliers for the expansion of Hungary's Paks nuclear power plant.
The project was awarded to Russia's state-owned Rosatom in 2014 by former Prime Minister Viktor Orbán, without a competitive tender.
Key developments:
• The Hungarian government is reviewing whether Rosatom should remain the main contractor.
• A source close to the government says Budapest is leaning towards continuing the nuclear expansion without Russian involvement.
• More than €2 billion has already been spent on the project.
• Replacing Rosatom could put €1.1 billion already paid to the Russian company at risk, alongside potential contract termination penalties.
• The original contract has been amended five times, with a sixth amendment prepared but not signed.
• A final decision is expected by late 2026 or early 2027.
WHY THIS MATTERS
Paks is Rosatom's most prominent remaining nuclear construction project in the European Union.
While Europe has significantly reduced Russian oil and gas imports since the invasion of Ukraine, Russia remains deeply embedded in Europe's nuclear supply chain.
In 2025, Russia accounted for approximately 23% of EU uranium enrichment deliveries and 16% of natural uranium supplies.
Removing Rosatom from Paks would therefore represent a significant shift in Hungary's relationship with Moscow — and potentially another step towards reducing Europe's strategic energy dependence on Russia.
IMPORTANT: No decision to terminate Rosatom's contract has been made. Rosatom maintains that construction is proceeding under the existing agreement and says it has received no formal termination notice.
📰 SOURCE: Reuters Exclusive - 21 October 2026:
reuters.com/business/energy/…
🇩🇰🇺🇦 NEW: Denmark will provide a DKK 750 MILLION ($113 million) state-backed loan guarantee to Ukrainian missile and drone manufacturer Fire Point - supporting the production of long-range missile fuel on Danish soil.
The Danish government announced the financing today, marking another significant step towards establishing Ukrainian defence production inside NATO territory.
Key details:
• The guarantee covers a DKK 750 million loan to Fire Point's Danish subsidiary.
• Financing will be arranged through Denmark's Export and Investment Fund (EIFO).
• The company is establishing a rocket-fuel production facility near Skrydstrup Air Base in southern Denmark.
• The factory is expected to become operational by the end of 2027.
• Denmark says the state guarantee is necessary because Russia's war prevents Fire Point from obtaining financing under normal commercial conditions.
WHY THIS MATTERS
Fire Point is a big Ukrainian manufacturer of long-range missiles and drones.
By relocating part of its production chain to Denmark, Ukraine can reduce the vulnerability of critical manufacturing facilities to Russian missile and drone strikes.
Danish Defence Minister Jeppe Bruus explicitly highlighted this strategic advantage, arguing that producing military equipment outside Ukraine helps protect essential supply chains from Russian attacks.
The project also creates opportunities for closer cooperation between Ukrainian manufacturers, the Danish Armed Forces and Denmark's defence industry.
Fire Point is additionally developing the Freyja air-defence system, intended to provide Ukraine with a domestic alternative to the US-made Patriot system.
A significant development in European defence cooperation: Denmark is not simply purchasing weapons for Ukraine - it is helping establish Ukrainian defence-industrial production within NATO territory.
The DKK 750 million is a state-backed loan guarantee, not a direct cash grant. Production has not yet begun.
🚨🇪🇺 BREAKING: Critical software vulnerabilities trigger government website shutdowns across at least SIX European countries, affecting public authorities, hospitals, schools and critical infrastructure.
Two severe security flaws have been discovered in PHP, one of the world's most widely used server-side programming languages.
The vulnerabilities could potentially allow attackers to execute malicious code on affected servers without authentication or access sensitive information, including passwords and security credentials.
Confirmed disruptions across Europe:
🇩🇰 DENMARK
• Danish Meteorological Institute (DMI)
• Copenhagen Municipality
• Danish Road Directorate
• Aula, the national school communication platform
🇩🇪 GERMANY
• Federal Police (Bundespolizei)
• Federal Interior Ministry
• Robert Koch Institute
• Customs authorities
• Charité university hospital
• University of Potsdam
🇳🇱 NETHERLANDS
• Port of Rotterdam websites
• National Cyber Security Centre (NCSC)
• Government portals and judicial services
• Political party websites
• Several hospitals
🇧🇪 BELGIUM
• Flemish government websites
• Smartschool education platform
• AZ Monica hospital in Antwerp
• Media organisations
🇫🇮 FINLAND
• Government ICT services
• National Land Survey
• Additional public-facing government websites
🇫🇷 FRANCE
• Local government administrative websites temporarily shut down as a precaution
🇬🇧 UNITED KINGDOM
The National Cyber Security Centre has issued an urgent warning, recommending protective measures, including temporary shutdowns where necessary. No specific government shutdown has been independently confirmed.
🇺🇸 UNITED STATES
According to Reuters, the White House has been aware of the vulnerabilities since October 16.
Federal authorities are now assessing whether government systems and critical infrastructure have been affected.
The vulnerabilities reportedly remained undiscovered for more than a decade before being identified with the assistance of AI.
Security patches have now been released, and organisations are being urged to update vulnerable installations immediately.
IMPORTANT: The reported shutdowns are primarily precautionary security measures, NOT evidence that the affected organisations have been successfully hacked.
There is currently no confirmed coordinated cyberattack or established state-sponsored attribution.
The scale of the response highlights how vulnerabilities in widely used software can simultaneously disrupt digital public services across multiple countries.
Coffe Report retweeted
BREAKING: Israeli PM Netanyahu says Iran is “once again trying to develop nuclear bombs,” adding that “the only way to eliminate this threat once and for all is to topple the Iranian regime.”
Netanyahu says he has instructed the IDF, Mossad and security agencies accordingly.
Coffe Report retweeted
First diesel export from Russia to the US claimed by Russian minister to depart port tomorrow
Claim it is loading at the port of Ust-Luga. No ship named, but 40,000 t cargo size. I’m trying to identify the ship @TankerTrackers
oilprice.com/Latest-Energy-N…
reuters.com/business/energy/…
🚨🇳🇱🇫🇮 NEW: Government websites across the Netherlands and Finland have been taken offline following the discovery of two critical vulnerabilities in PHP.
Dutch services affected include DigiD, parliament and the national cybersecurity agency.
The vulnerabilities could allow unauthenticated remote code execution. Emergency patches have now been released.
Authorities say the shutdowns are precautionary. No state-sponsored involvement has been established.
🇪🇪🇸🇪🇫🇮 NEW: Estonia, Sweden and Finland are moving forward with a €40 MILLION submarine communications project aimed at strengthening Baltic Sea infrastructure resilience.
According to Estonian broadcaster ERR, seabed surveys are beginning for a new fibre-optic route connecting the three countries.
The project includes:
• Approximately 300 km of submarine cables
• Another 250 km of terrestrial fibre connections
• €40 million in total investment
• €15.7 million in EU funding
• Expected entry into service in 2027
The new route is intended to provide additional, physically separate communications connections across the Baltic Sea.
Estonian officials have explicitly pointed to recent incidents involving damaged submarine cables as a reason for strengthening the region's connectivity.
The project is particularly significant given the Baltic Sea's growing importance to NATO and the repeated disruptions to critical underwater infrastructure in recent years.
Rather than relying solely on protecting existing cables, the countries are investing in redundancy - ensuring communications can continue even if individual connections are damaged.
🇵🇱 NEW: Poland's $960 MILLION airborne radar surveillance programme has reportedly been delayed by nearly TWO YEARS, postponing a major upgrade to NATO's eastern flank.
According to Dziennik Gazeta Prawna, the four US-made Barbara surveillance aerostats are now facing significant delivery delays.
The systems are designed to detect low-flying drones, cruise missiles and aircraft approaching Poland's eastern borders.
Key figures:
• 4 surveillance aerostats ordered from the US in 2024
• $960 million total contract value
• Surveillance range exceeding 300 km per aerostat
• First delivery delayed from late 2026 to late 2027
• Initial operational capability expected in Q1 2028
• Full system readiness now expected by late 2028
The delays reportedly stem from procurement disputes between American contractors.
The setback comes amid growing concerns over Russian drone incursions and low-altitude threats along NATO's eastern flank.
Poland's existing air surveillance remains operational, but the additional detection capabilities will arrive significantly later than originally planned.
🚨🇵🇱 NEW: POLAND SAYS 50 SUSPECTED SABOTEURS ARE CURRENTLY BEHIND BARS
An extraordinary figure from Poland's Deputy Defence Minister Cezary Tomczyk deserves far more attention.
According to Tomczyk, 50 individuals suspected of sabotage and subversive activities are being held in Polish prisons and detention centres, following operations by the country's security and intelligence services.
Speaking on 2 October, Tomczyk stated:
“We have acts of sabotage. We have 50 saboteurs caught by the special services in our prisons.”
The figure was reiterated on 19 October, when Tomczyk revealed that intelligence obtained from detained suspects was helping Polish authorities identify additional individuals.
The announcement comes amid growing concerns over foreign-directed sabotage operations across Europe.
Poland has previously linked several serious incidents to Russian intelligence, including:
• Railway sabotage targeting infrastructure used to transport assistance to Ukraine.
• Arson operations and attempted attacks on critical infrastructure.
• Recruitment of individuals to carry out sabotage and other covert activities.
Polish security services have repeatedly warned about Russian efforts to destabilise the country and disrupt support for Ukraine.
IMPORTANT: The figure does NOT mean 50 people have been convicted of sabotage, nor that all 50 are confirmed Russian operatives. Their individual legal status, alleged offences and foreign connections have not been publicly detailed.
The original figure was disclosed on 2 October and repeated on 19 October.
50 people reportedly held in connection with suspected sabotage and subversive activities - in Poland alone.
A remarkable indication of the scale of the threat Polish authorities say they are confronting.
🚨🇩🇪🇷🇺 BREAKING: U.S. intelligence assesses that Vladimir Putin personally ordered an intensified sabotage campaign against NATO countries, according to a major new WSJ investigation.
The report reveals new details about the August drone attack on Germany's Leipzig-Halle Airport.
KEY REVELATIONS:
• Three explosive-laden drones were reportedly used in the attack. One struck an Antonov cargo aircraft transporting military aid to Ukraine but failed to detonate.
• Western intelligence links the operation to Russia's GRU Special Tasks Service, headed by Gen. Andrey Averyanov.
• Investigators reportedly uncovered a wider network involving operatives and explosives transported through Serbia into the EU.
• Following the attack, a Kremlin-linked backchannel allegedly warned German officials that Leipzig would not be the last.
NATO ARTICLE 5:
According to the WSJ, aides to Chancellor Merz say Germany would have considered invoking NATO's collective-defence clause had the attack caused mass casualties.
Article 5 was NOT invoked.
The attack happened in August. What's new is the reported intelligence linking the operation directly to Putin and the GRU.
Putin's alleged personal involvement remains an intelligence assessment, not an independently established fact.
Sources:
📰 Wall Street Journal (21 October):
wsj.com/world/europe/airfiel…
🇩🇪 German Federal Government (4 September):
bundesregierung.de/breg-de/a…
🚨🇩🇪 BREAKING: GERMAN MILITARY WARNS RUSSIA MAY NOW DIRECTLY TARGET BUNDESWEHR FORCES ON GERMAN SOIL
For the first time, Germany's Bundeswehr has classified the threat of Russian sabotage against its own military as “ERHEBLICH” (SUBSTANTIAL) - the SECOND-HIGHEST level on its threat assessment scale.
The classified assessment, obtained by WDR and Süddeutsche Zeitung, follows two alarming discoveries.
🇩🇪 LEIPZIG/HALLE - AUGUST 2026:
• An attempted attack involving an explosives-laden drone at Leipzig/Halle Airport failed.
• Investigators believe cargo aircraft supporting Ukraine were the intended targets.
🇩🇪 WUNSTORF - SEPTEMBER 2026:
• A farmer discovered a crashed drone near a major German Air Force base.
• A can containing high explosives was found just metres from the wreckage.
• The drone's construction closely resembled the device discovered at Leipzig.
• BKA forensic analysis suggests the drone may have been lying there for approximately TWO YEARS.
• Investigators believe Bundeswehr aircraft may have been the intended targets.
WHAT HAS CHANGED?
According to the leaked assessment, Russia almost certainly possesses the capability - and very likely now has increased intent - to attack Bundeswehr forces, facilities and partners supporting Ukraine inside Germany.
The document goes further.
It assesses that the use of explosive drones has crossed a previously anticipated “RED LINE” involving potentially lethal attacks against Germany and its armed forces.
While Leipzig was assessed as an indirect threat to the Bundeswehr, Wunstorf is now considered very likely to have involved the German military itself as a direct target.
The assessment also warns that the sabotage threat can no longer be geographically contained and that a further deterioration of the security situation could occur in the near term.
The Bundeswehr has confirmed it is strengthening security measures at military installations.
The significance is clear: Germany's military now considers its own forces potential direct targets of Russian sabotage - not merely the infrastructure supporting Ukraine.
🚨🇪🇺 NEW: EUROPE IS CONSIDERING LETTING POWER COMPANIES SHOOT DOWN DRONES THEMSELVES
As drone threats to critical infrastructure grow, European governments are reconsidering who should have the authority to neutralise hostile drones.
A new Reuters investigation, based on interviews with more than 30 officials, executives and drone experts, reveals a significant shift.
🇫🇷 FRANCE: Passed legislation in August allowing approved critical infrastructure operators to detect, jam and shoot down drones near designated facilities.
🇩🇪 GERMANY: The Interior Ministry is reviewing whether private infrastructure operators could legally participate in active counter-drone operations. For now, the responsibility remains with police.
🇦🇹 AUSTRIA: Announced plans in September to grant similar powers to critical infrastructure operators, including major energy companies.
🇵🇱 POLAND: Already permits designated security units protecting critical energy infrastructure to destroy, disable or take control of drones entering restricted zones.
🇫🇮 FINLAND: Taking a different approach. National grid operator Fingrid argues that counter-drone operations should remain the responsibility of police and the military.
BUT THERE'S A MAJOR PROBLEM.
Who is responsible if a drone is shot down and crashes into a residential building, injures civilians or damages other infrastructure?
Legal uncertainty over authorisation and liability is holding back deployment, even as counter-drone technology becomes increasingly capable.
For perspective, Germany's E.ON alone operates approximately 2,720 substations across the country.
Protecting every site with military or police personnel simply isn't realistic.
Europe is facing a fundamental question:
Should private companies be allowed to use potentially lethal countermeasures to defend critical infrastructure - or should that authority remain exclusively with the state?
Coffe Report retweeted
GeoConfirmed UKR - Statement.
As a lead admin, I am so angry that I cannot write a proper thread at this point.
The US President, Mr Trump, is lying.
Again.
Either he is living in his own reality and is clearly unfit to be president, or his advisers are not telling him the truth. But based on his constant stream of contradictory statements and promises, we all know what the problem is...
Regardless of whether one wants to negotiate with Russia or not, claiming that:
“Russia, frankly, has been fine on Ukraine; they haven’t been doing much.”
is an outrageous lie.
IT IS A LIE!
BASED ON FACTS.
As a volunteer geolocation and mapping platform, GeoConfirmed has mapped more than 60,000 pieces of footage to their exact locations in the Russia–Ukraine conflict alone. That footage is visible to everyone on our map, and anyone can review the geolocation process. That is why we are called GeoConfirmed: we confirm the location of footage.
Recently, you told the world that there would be an energy ceasefire, even though neither party appeared to know about it. When a journalist asked you about it, you gave your now-famous answer: “They agreed, because I said they agreed.”
(youtube.com/shorts/VyBA_OR3m…)
Ukraine honored the ceasefire you called for, while Russia did not!
Regarding your latest claim: “Russia, frankly, has been fine on Ukraine, they haven’t been doing much” You could not be more wrong. Are you inventing your own reality, or are your advisers failing to inform you?
Below are the entries from the last four months, sorted by the icons of civilians killed and buildings destroyed.
Russia is committing war crimes on an almost daily basis. It is targeting civilian-populated areas more than ever before.
Mr. President Trump, you are a liar.
Get your act together.
You may be able to lie to your own people, but the world will witness how delusional you are.
The facts are there, only a blind person could fail to see them.
Are you blind, Mr. President?
(@realDonaldTrump)
Is this how you want to be remembered?
A few of the many recent Russian attacks, below in the thread.
geoconfirmed.org/map/ukraine
🚨🇳🇦🇧🇬 BREAKING UPDATE: NATO REINFORCEMENTS ALREADY OPERATING IN THE BLACK SEA
Following today's North Atlantic Council meeting, NATO announced additional assets for surveillance, reconnaissance and forensic investigations in the Black Sea region.
But new details from Bulgarian officials reveal that allied support is already underway.
🇺🇸 US NAVY P-8A POSEIDON
• An American P-8A maritime patrol aircraft arrived in Varna on 18 October from Sigonella, Sicily.
• Bulgarian authorities confirm it has conducted surveillance patrols over the Black Sea.
🇧🇬 ALLIED INVESTIGATION TEAMS
• Two additional allied teams are already operating in Bulgaria.
• One is assisting with forensic investigations into the recent attacks on commercial shipping.
• Specialists are examining recovered material from CHELSEA 3 to help identify explosives and potentially the type of drone involved.
• Further international specialists with advanced equipment are expected on 21 October.
🇧🇬 ADDITIONAL SURVEILLANCE
• Bulgaria has also deployed two of its own unmanned surveillance systems.
• A third, reportedly equipped with more advanced optical, infrared and radar capabilities, is expected this week.
The reinforcements follow a series of drone attacks on commercial shipping near NATO territory, including incidents within Bulgaria's Exclusive Economic Zone (EEZ).
IMPORTANT: NATO has not yet disclosed the full list of additional assets, contributing nations or deployment timeline. The P-8A and existing allied teams predate today's announcement and have not been confirmed as part of the newly pledged reinforcements.
No new NATO combat air patrol mission or expanded shoot-down authority over the Black Sea has been announced.
But clearly the response is already taking shape - with surveillance, intelligence gathering and forensic investigations at its centre.
🚨🇩🇰🇷🇺 Six weeks ago, Danish intelligence warned about a Russian espionage tactic.
Today, prosecutors revealed a case that appears to follow the same playbook.
On 5 September, Denmark's intelligence service (PET) warned that Russian intelligence was recruiting individuals through platforms such as Telegram to photograph defence companies, buildings and access points.
Such reconnaissance could potentially be used to prepare sabotage operations.
Now, on 20 October, two men aged 18 and 21 have been charged in an alleged Russian intelligence operation targeting MyDefence - a Danish company producing counter-drone technology supplied to Ukraine, NATO and allied militaries.
According to prosecutors:
• The suspects allegedly photographed MyDefence's facilities on 19 October.
• They allegedly operated alongside several unidentified accomplices.
• The photographs were reportedly forwarded to a user on Telegram.
• A third individual reportedly remains at large.
The similarities to PET's warning are striking.
But one crucial question remains: What were the photographs intended for?
There is currently no public confirmation that sabotage was being planned.
Both suspects deny the charges.
🚨🇩🇰 🇷🇺 BREAKING: RUSSIAN INTELLIGENCE IMPLICATED IN ESPIONAGE CASE TARGETING DANISH DEFENCE COMPANY
Two young men, aged 18 and 21, have been arrested in Denmark and charged in an espionage investigation involving a Russian intelligence service.
According to DR and TV 2, the case concerns alleged espionage targeting a Danish defence company.
• Both suspects were arrested on 19 October and appeared before Aalborg District Court today.
• Prosecutors have charged both under Section 108 of Denmark's Criminal Code, concerning assistance to foreign intelligence services.
• Denmark's domestic intelligence service (PET) is participating in the investigation.
• A third individual reportedly remains at large.
• The involvement of a Russian intelligence service was disclosed during today's court hearing, according to both DR and TV2 Nord.
Both suspects deny the charges.
The identity of the defence company, the nature of the alleged intelligence operation and the role of the Russian service have not yet been publicly disclosed.
🚨🇩🇰 🇷🇺 BREAKING: RUSSIAN INTELLIGENCE IMPLICATED IN ESPIONAGE CASE TARGETING DANISH DEFENCE COMPANY
Two young men, aged 18 and 21, have been arrested in Denmark and charged in an espionage investigation involving a Russian intelligence service.
According to DR and TV 2, the case concerns alleged espionage targeting a Danish defence company.
• Both suspects were arrested on 19 October and appeared before Aalborg District Court today.
• Prosecutors have charged both under Section 108 of Denmark's Criminal Code, concerning assistance to foreign intelligence services.
• Denmark's domestic intelligence service (PET) is participating in the investigation.
• A third individual reportedly remains at large.
• The involvement of a Russian intelligence service was disclosed during today's court hearing, according to both DR and TV2 Nord.
Both suspects deny the charges.
The identity of the defence company, the nature of the alleged intelligence operation and the role of the Russian service have not yet been publicly disclosed.
SOURCES:
🇩🇰 North Jutland Police - Official statement:
politi.dk/nordjyllands-polit…
🇩🇰 TV 2 - Live court coverage:
nyheder.tv2.dk/live/krimi/20…
🇩🇰 DR - Live court coverage:
dr.dk/nyheder/indland/live-m…






















