A lot of new people found this account today - thank you so much for following. I’ll continue to track, report, and get comments on major military and security activity like what we saw today. Also, a quick plug: I run Grey Zone Europe: greyzoneeurope.eu It's a small independent project tracking and mapping hybrid incidents, suspicious activity, and security developments across Europe. Any feedback is appreciated!

MAP UPDATE: Europe’s grey-zone war, mapped. 168 documented incidents - up from 151. 17 new cases added during the last two weeks alone, spanning drone incursions, sabotage, espionage, and military activity. Explore: greyzoneeurope.eu

🇬🇧🇷🇺 A second RAF RC-135W Rivet Joint intelligence aircraft is airborne today. Earlier, RRR7221 (ZZ664) conducted a surveillance mission near Russia's Kaliningrad exclave and the Suwałki Gap. Now RRR7222 (ZZ666) is also airborne from RAF Waddington. Watching to see whether this aircraft heads towards Kaliningrad as well.

🚨🇩🇪🇷🇺 BREAKING: Germany has arrested a suspected Russian intelligence operative accused of collecting information on Europe's defence industry and NATO's eastern flank. The suspect, identified as Ukrainian national Vadym Y., was arrested today in Brandenburg by Germany's Federal Criminal Police Office (BKA). According to federal prosecutors, he allegedly: • Gathered intelligence on the production of tanks, ammunition and explosives. • Collected information on military personnel and installations involved in securing NATO's eastern flank. • Exploited contacts within Europe's defence industry to obtain information not publicly available. • Maintained contact with a Russian intelligence service through an intermediary since at least July 2025. The arrest followed intelligence gathered by Germany's domestic intelligence agency (BfV). The suspect is expected to appear before a federal judge tomorrow, October 23. The allegations remain under investigation.

134 → 168 documented incidents. That’s how much the Grey Zone Europe map has grown since I began building it. Every point is researched, geolocated, and linked to public sources. Open the map. Pick a case. Follow the evidence. greyzoneeurope.eu

🇳🇱NATO AIR ACTIVITY: NATO A330 MRTT tanker (T-056) is currently flying a refuelling-style orbit over the western Black Sea, seemingly supporting other Allied aircraft operating in the region. The flight comes just two days after NATO announced additional aircraft, drones and surveillance assets to bolster security in the Black Sea following recent attacks on commercial shipping.

🚨🇩🇰🇷🇺 NEW: Denmark has reportedly decided to purchase long-range strike missiles capable of hitting targets inside Russia, according to Danish public broadcaster DR. The government has reportedly selected TWO suppliers as Denmark moves to establish a long-range precision-strike capability. 🇳🇴🇺🇸 1. JOINT STRIKE MISSILE (JSM) Developed by Norway’s Kongsberg in cooperation with US defence industry partners, the JSM is designed for deployment from F-35 fighter jets. • Air-launched precision-strike missile • Capable of engaging land and maritime targets • Designed to be carried internally by the F-35 • Would give Danish combat aircraft a new stand-off strike capability 🇺🇸 2. COVENANT - POSSIBLY THE ANTHEM CRUISE MISSILE DR reports that Denmark will also purchase missiles from American defence company Covenant. The specific missile has NOT yet been officially identified. However, Covenant’s Anthem is a strong candidate, given its intended role as a relatively inexpensive, ground-launched long-range cruise missile. If selected, Anthem could provide: • Mobile, ground-based precision-strike capability • A potential range exceeding 1,500 km, according to earlier reporting, although this remains unconfirmed • A payload exceeding 200 kg • A reported production cost target of approximately $500,000 per missile • Access to a developing European production network, including Germany Covenant has previously announced international orders for Anthem, with deliveries planned to begin in late 2026. IMPORTANT: Denmark’s selection of Anthem is speculation at this stage. DR has identified Covenant as a supplier, but has not confirmed the missile model. WHY THIS MATTERS Denmark announced its intention to acquire long-range precision-strike weapons in September 2025, arguing that air defence alone is insufficient to deter attacks against Denmark and NATO. The reported procurement would potentially provide Denmark with two complementary capabilities: • Air-launched precision strikes from F-35 fighters • Ground-launched long-range strikes, if Anthem is confirmed Together, these would significantly expand Denmark’s ability to hold military targets at risk beyond its borders, including potentially inside Russia. An official announcement is scheduled for 15:30 CEST today, when the government is expected to provide further details.

🚨🇬🇧🇷🇺 NEW: A Telegraph investigation has identified more than 500 instances of Russian fishing vessels operating near critical undersea communication cables around Britain. Using four years of tracking data, journalists found Russian trawlers spent a combined 337 hours above the Atlantic Crossing 1 cable north of Scotland. Other vessels reportedly followed cable routes for miles. NATO is aware of the activity, according to a source cited by the newspaper. The movements raise concerns about potential reconnaissance, but do not independently establish espionage or sabotage.

🇩🇰🇺🇦 NEW: Denmark will provide a DKK 750 MILLION ($113 million) state-backed loan guarantee to Ukrainian missile and drone manufacturer Fire Point - supporting the production of long-range missile fuel on Danish soil. The Danish government announced the financing today, marking another significant step towards establishing Ukrainian defence production inside NATO territory. Key details: • The guarantee covers a DKK 750 million loan to Fire Point's Danish subsidiary. • Financing will be arranged through Denmark's Export and Investment Fund (EIFO). • The company is establishing a rocket-fuel production facility near Skrydstrup Air Base in southern Denmark. • The factory is expected to become operational by the end of 2027. • Denmark says the state guarantee is necessary because Russia's war prevents Fire Point from obtaining financing under normal commercial conditions. WHY THIS MATTERS Fire Point is a big Ukrainian manufacturer of long-range missiles and drones. By relocating part of its production chain to Denmark, Ukraine can reduce the vulnerability of critical manufacturing facilities to Russian missile and drone strikes. Danish Defence Minister Jeppe Bruus explicitly highlighted this strategic advantage, arguing that producing military equipment outside Ukraine helps protect essential supply chains from Russian attacks. The project also creates opportunities for closer cooperation between Ukrainian manufacturers, the Danish Armed Forces and Denmark's defence industry. Fire Point is additionally developing the Freyja air-defence system, intended to provide Ukraine with a domestic alternative to the US-made Patriot system. A significant development in European defence cooperation: Denmark is not simply purchasing weapons for Ukraine - it is helping establish Ukrainian defence-industrial production within NATO territory. The DKK 750 million is a state-backed loan guarantee, not a direct cash grant. Production has not yet begun.

🚨🇪🇺 BREAKING: Critical software vulnerabilities trigger government website shutdowns across at least SIX European countries, affecting public authorities, hospitals, schools and critical infrastructure. Two severe security flaws have been discovered in PHP, one of the world's most widely used server-side programming languages. The vulnerabilities could potentially allow attackers to execute malicious code on affected servers without authentication or access sensitive information, including passwords and security credentials. Confirmed disruptions across Europe: 🇩🇰 DENMARK • Danish Meteorological Institute (DMI) • Copenhagen Municipality • Danish Road Directorate • Aula, the national school communication platform 🇩🇪 GERMANY • Federal Police (Bundespolizei) • Federal Interior Ministry • Robert Koch Institute • Customs authorities • Charité university hospital • University of Potsdam 🇳🇱 NETHERLANDS • Port of Rotterdam websites • National Cyber Security Centre (NCSC) • Government portals and judicial services • Political party websites • Several hospitals 🇧🇪 BELGIUM • Flemish government websites • Smartschool education platform • AZ Monica hospital in Antwerp • Media organisations 🇫🇮 FINLAND • Government ICT services • National Land Survey • Additional public-facing government websites 🇫🇷 FRANCE • Local government administrative websites temporarily shut down as a precaution 🇬🇧 UNITED KINGDOM The National Cyber Security Centre has issued an urgent warning, recommending protective measures, including temporary shutdowns where necessary. No specific government shutdown has been independently confirmed. 🇺🇸 UNITED STATES According to Reuters, the White House has been aware of the vulnerabilities since October 16. Federal authorities are now assessing whether government systems and critical infrastructure have been affected. The vulnerabilities reportedly remained undiscovered for more than a decade before being identified with the assistance of AI. Security patches have now been released, and organisations are being urged to update vulnerable installations immediately. IMPORTANT: The reported shutdowns are primarily precautionary security measures, NOT evidence that the affected organisations have been successfully hacked. There is currently no confirmed coordinated cyberattack or established state-sponsored attribution. The scale of the response highlights how vulnerabilities in widely used software can simultaneously disrupt digital public services across multiple countries.

🚨🇳🇱🇫🇮 NEW: Government websites across the Netherlands and Finland have been taken offline following the discovery of two critical vulnerabilities in PHP. Dutch services affected include DigiD, parliament and the national cybersecurity agency. The vulnerabilities could allow unauthenticated remote code execution. Emergency patches have now been released. Authorities say the shutdowns are precautionary. No state-sponsored involvement has been established.

🇪🇪🇸🇪🇫🇮 NEW: Estonia, Sweden and Finland are moving forward with a €40 MILLION submarine communications project aimed at strengthening Baltic Sea infrastructure resilience. According to Estonian broadcaster ERR, seabed surveys are beginning for a new fibre-optic route connecting the three countries. The project includes: • Approximately 300 km of submarine cables • Another 250 km of terrestrial fibre connections • €40 million in total investment • €15.7 million in EU funding • Expected entry into service in 2027 The new route is intended to provide additional, physically separate communications connections across the Baltic Sea. Estonian officials have explicitly pointed to recent incidents involving damaged submarine cables as a reason for strengthening the region's connectivity. The project is particularly significant given the Baltic Sea's growing importance to NATO and the repeated disruptions to critical underwater infrastructure in recent years. Rather than relying solely on protecting existing cables, the countries are investing in redundancy - ensuring communications can continue even if individual connections are damaged.

🇵🇱 NEW: Poland's $960 MILLION airborne radar surveillance programme has reportedly been delayed by nearly TWO YEARS, postponing a major upgrade to NATO's eastern flank. According to Dziennik Gazeta Prawna, the four US-made Barbara surveillance aerostats are now facing significant delivery delays. The systems are designed to detect low-flying drones, cruise missiles and aircraft approaching Poland's eastern borders. Key figures: • 4 surveillance aerostats ordered from the US in 2024 • $960 million total contract value • Surveillance range exceeding 300 km per aerostat • First delivery delayed from late 2026 to late 2027 • Initial operational capability expected in Q1 2028 • Full system readiness now expected by late 2028 The delays reportedly stem from procurement disputes between American contractors. The setback comes amid growing concerns over Russian drone incursions and low-altitude threats along NATO's eastern flank. Poland's existing air surveillance remains operational, but the additional detection capabilities will arrive significantly later than originally planned.

🚨🇵🇱 NEW: POLAND SAYS 50 SUSPECTED SABOTEURS ARE CURRENTLY BEHIND BARS An extraordinary figure from Poland's Deputy Defence Minister Cezary Tomczyk deserves far more attention. According to Tomczyk, 50 individuals suspected of sabotage and subversive activities are being held in Polish prisons and detention centres, following operations by the country's security and intelligence services. Speaking on 2 October, Tomczyk stated: “We have acts of sabotage. We have 50 saboteurs caught by the special services in our prisons.” The figure was reiterated on 19 October, when Tomczyk revealed that intelligence obtained from detained suspects was helping Polish authorities identify additional individuals. The announcement comes amid growing concerns over foreign-directed sabotage operations across Europe. Poland has previously linked several serious incidents to Russian intelligence, including: • Railway sabotage targeting infrastructure used to transport assistance to Ukraine. • Arson operations and attempted attacks on critical infrastructure. • Recruitment of individuals to carry out sabotage and other covert activities. Polish security services have repeatedly warned about Russian efforts to destabilise the country and disrupt support for Ukraine. IMPORTANT: The figure does NOT mean 50 people have been convicted of sabotage, nor that all 50 are confirmed Russian operatives. Their individual legal status, alleged offences and foreign connections have not been publicly detailed. The original figure was disclosed on 2 October and repeated on 19 October. 50 people reportedly held in connection with suspected sabotage and subversive activities - in Poland alone. A remarkable indication of the scale of the threat Polish authorities say they are confronting.