PDB Afternoon Bulletin | September 29th, 2026: Russia Carries Out an Attack on NATO Soil & Iran’s Cryptocurrency Network

Mike Baker (0:12)

It's Tuesday, the 29th of September. Welcome to the PDB Afternoon Bulletin. I'm Mike Baker. Your eyes and ears on the world stage. Let's get briefed. First up, an alleged Russian attack on NATO soil is adding urgency to Europe's effort to build a common response to Russian sabotage and other hybrid attacks. Later in the show, a new Senate investigation says Iran has relied heavily on cryptocurrency to move money around US sanctions, exposing a digital workaround in the regime's shadow banking network. But first, today's afternoon spotlight. European officials are once again confronting a familiar problem. How do you respond when Russia is accused of attacking a NATO country in a manner that falls short of outright warfare and when it's difficult to ascertain with certainty who the culprit is? The latest case in what has become known as Putin's hybrid war against the EU comes from Estonia, where authorities now say an arson attack last month against the defense company Milgram Robotics wasn't random vandalism. Authorities say it was a deliberate act of sabotage commissioned by Russian security services.

The fire broke out on the 15th of August at a building used by Milgram in Tallinn, that's the Estonian capital. The damage was limited, but the target was significant. Milgram builds unmanned ground vehicles and other military systems, including equipment supplied to Ukraine. Three Latvian suspects were arrested in the days after the attack and later transferred to Estonian custody. Estonia's Domestic Intelligence Service now says the operation was planned in advance and directly attributable to Russia.

Now, you ask yourself, I wonder if the Kremlin denies those accusations. Well, let me think. Yes, the Kremlin has denied those accusations. Now, as we've been covering for quite some time here on the PDB, European governments are seeing a growing pattern of sabotage, arson, cyber attacks and other disruptive operations that they believe are designed to weaken support for Ukraine, intimidate governments and test out for Moscow can push things without provoking a conventional military response. Estonia's foreign minister says Russia is effectively testing Western democracies step by step, looking to see what it can get away with and how NATO will react. Estonia is now pushing allies to publicly condemn and attribute attacks when they believe Moscow is responsible and to establish clearer consequences for those operations. Well, that all sounds fairly reasonable.

European defense ministers are now considering a new common framework for responding to so-called hybrid attacks, operations that may be hostile, deliberate and damaging, but still fall below the level of an armed attack that would clearly trigger NATO's Article 5 mutual defense clause. The European Commission has proposed what it calls an emergency security protocol, along with a broader counter-hybrid playbook designed to help governments coordinate quickly when one member state is hit by sabotage or cyber attacks or other forms of interference. Officials are also discussing what a proportional response might actually look like. And that is where a complicated situation gets more complicated. If Russian forces crossed Estonia's border with tanks, NATO's response would be relatively straightforward. But what happens when someone sets fire to a defense contractor? What happens when a railway line is sabotaged? A drone appears over sensitive infrastructure or a criminal intermediary carries out an operation that intelligence services later trace back to Moscow.

Those incidents can be serious. They can disrupt military production, damage critical infrastructure and undermine public confidence. But individually, they may not look like acts of war. That ambiguity is part of what makes hybrid operations worthwhile from Moscow's perspective. They create pressure without necessarily creating the kind of clear-cut event that forces NATO to respond collectively. European governments have been wrestling with this for years, and the problem has grown since Russia's full-scale invasion of Ukraine. Authorities across Europe have investigated a large number of suspected sabotage incidents linked to Russia, although the strength of the public evidence varies from case to case. Estonia says the Milgram attack fits that broader pattern.

The challenge now is deterrence. European officials want Moscow to believe that these operations will carry a real cost, but they also have to decide, well, what that cost should be. More sanctions, diplomatic expulsions, some form of coordinated retaliation against Russian intelligence networks. That's the key question confronting European governments. What is proportionate, appropriate response when there is sufficient evidence to tie Moscow to an act of hybrid warfare within the EU or targeting NATO allies? Clearly, the standard harshly worded memo or the stern look from a diplomat is not going to change Putin's stripes.

And there's another complication. Any common EU mechanism would have to complement NATO rather than create a competing system. Some European officials are already warning that another layer of decision making could make responses slower instead of faster. But the Milrem case helps explain why the debate is happening now. If Estonia's assessment is correct, Russian security services commissioned an attack inside a NATO country against a company helping arm Ukraine.