Polish Prime Minister Donald Tusk told parliament on Friday that classified assessments suggest Russia could test NATO with a drone or missile strike on alliance territory within months, not years—a timeline now echoed by European intelligence chiefs speaking on the record to the Guardian as leaders gather in New York for the United Nations General Assembly. The warning lands amid a widening catalog of sabotage: unexplained fires at defence contractors, drone incidents near airports, and recruitment schemes targeting citizens in Denmark, Lithuania, and France.

What Warsaw is seeing

Tusk did not publish the underlying intercepts, but his public statement marked a shift from quiet diplomatic cables to a floor speech designed to align Poland’s debate on defence spending with what Baltic allies have argued privately since 2022. Polish military planners have already accelerated air-defence drills along the eastern flank and asked NATO’s integrated air command for earlier notification windows when Russian sorties approach alliance borders.

Czech and Latvian intelligence officials interviewed in Prague and Riga told the Guardian their services share Tusk’s concern that Moscow’s risk appetite is rising even as most Russian brigades remain tied down in Ukraine. One official said a limited strike—something short of an armoured invasion—could be used to probe whether Article 5 consultations would move faster than they did after hybrid incidents that stayed below military thresholds.

Hybrid attacks below the war line

The European picture this month includes an explosives-laden drone discovered beside a Ukrainian cargo aircraft at Leipzig airport, warnings that Russia is recruiting Danes to sabotage firms supplying Kyiv, and a Lithuanian IKEA warehouse fire authorities linked to online recruiters. Italy, Bulgaria, Estonia, and Slovakia have reported unexplained blazes at plants with defence contracts. France saw coffins inscribed “French soldiers in Ukraine” left near the Eiffel Tower; the United Kingdom jailed arsonists who targeted property connected to former prime minister Keir Starmer.

Germany expelled more than 150 Russian diplomats after the Leipzig scare and promised tighter entry checks, but Schengen free movement complicates enforcement when suspects arrive on tourist visas issued elsewhere. EU sanctions continue to target banks, energy traders, and shadow-fleet tankers, yet diplomats concede economic measures alone have not stopped the sabotage tempo.

Alliance politics in New York

NATO ambassadors expect informal corridor talk at the UN to focus as much on these grey-zone attacks as on the Iran war and Hormuz shipping crisis. French President Emmanuel Macron summoned party leaders for an emergency briefing on similar intelligence last week, according to the Guardian’s reporting, while Estonian officials publicly caution against panic even as they stockpile artillery shells.

Former U.S. President Donald Trump has previously dismissed scenarios in which Russia rolls into a Baltic state to test NATO, a posture European officials worry could slow U.S. signaling if a provocation stays ambiguous—say, a cruise missile fragment landing in farmland without a claimed launch point. Alliance lawyers note that collective defence deliberations hinge on clarity of attribution, the very element Moscow’s hybrid playbook tries to muddy.

What comes next

Poland’s defence ministry is expected to publish an updated civil-defence pamphlet for border counties this week, and Lithuania’s military said it would keep quick-reaction aircraft on strip alert after Italian jets shot down a drone near Vilnius on 15 September. None of these steps amount to a formal NATO alert, but Tusk’s months-not-years framing gives parliaments a clock they did not have in spring.

For the wire, the new fact is the convergence: a Polish premier on the record, Baltic and Czech spies willing to be quoted, and a sabotage ledger that no longer fits the old “grey zone” label. NATO is not mobilizing for invasion tomorrow, but European capitals are openly gaming a Russian test shot designed to see how fast the alliance answers.