European security trends and unauthorized UAS incidents.
Research snapshotChecks every 15 minutes while open
EUROPE / SECURITY ENVIRONMENT
Theater globe
01 Jan 2026 – 09 Nov 2026Amber: confirmed · Violet: suspected · Approximate locations
Overall stability assessment
REVIEWED 07 OCT 2026
Hover over or click a direction arrow for the latest seven days of reporting. Select a country to focus the globe.
Country / area
Security direction · explore
Confidence
Overall security and political stability
Moderate
Overall security and political stability
Moderate
Political stability
Low
Airspace and external security
Moderate
Airspace and hybrid security
Moderate
Baltics = Estonia, Latvia and Lithuania. “Unclear” avoids treating an evidence gap as stability. Live headlines do not silently change these judgments.
Priority intelligence requirements
RESEARCH SETUP
Public incidents, civilian highways and leave-travel safety. Open requirements, independently reviewed evidence.
No published research review yet.
Scheduled research is not enabled. Owner connection and a verified research/QC publication are required before scheduling.
PIR-1 · OPEN MONITORING
Suwałki region: reported incidents
What drone incursions or sabotage have been publicly reported in the Suwałki–Marijampolė area and the Polish–Lithuanian–Belarusian border region?
UnclearUnassessed confidence
Not assessed0 accepted findings
Evidence has not yet completed the research and independent QC workflow.
Evidence, comparison & information gaps
Information gaps
Corridor drone reports: not yet assessed.
Corridor sabotage reports: not yet assessed.
Tri-border drone reports: not yet assessed.
No accepted findings are published for this requirement. This is not an all-clear.
PIR-2 · OPEN MONITORING
Civilian highways: works and restrictions
What current and next-90-day highway works are publicly announced between northeastern Bavaria, Suwałki and Marijampolė?
UnclearUnassessed confidence
Not assessed0 accepted findings
Evidence has not yet completed the research and independent QC workflow.
Evidence, comparison & information gaps
Information gaps
German highway notices: not yet assessed.
Czech highway notices: not yet assessed.
Polish highway notices: not yet assessed.
Lithuanian highway notices: not yet assessed.
No accepted findings are published for this requirement. This is not an all-clear.
PIR-3 · OPEN MONITORING
Leave-travel safety in Europe
What events or changing threats in European cities could affect the safety of soldiers on leave?
UnclearUnassessed confidence
Not assessed0 accepted findings
Evidence has not yet completed the research and independent QC workflow.
Evidence, comparison & information gaps
Information gaps
Planned protests: not yet assessed.
Significant crime increases: not yet assessed.
Sabotage: not yet assessed.
Anti-American acts: not yet assessed.
State Department advisory changes: not yet assessed.
No accepted findings are published for this requirement. This is not an all-clear.
Research and review method
Decision areas: leave safety, public contingency context and protective security. These are sourced assessments for leadership review, not automatic restrictions, activation orders or deployment recommendations. The executive view uses accepted research only. Search saved history and compare reviews. Source-linked decision products record changes, historical baselines, uncertainty and optional testable outlooks; later reviews retain and evaluate those outlooks. Saved finding counts describe research coverage, not threat intensity.
Head researcher → five specialists → independent red team → independent QC → accepted snapshot. Sources, event dates, publication dates and review decisions are recorded separately. The head assigns work and helps resolve source-access problems. Specialists cover traffic/construction, Ukraine, Kosovo/Serbia, sabotage/terrorism and State Department advisories. Red team challenges assumptions and alternatives; QC checks original sources, resolves challenges and confirms relevance. QC runs with every research cycle and works through a persistent queue, oldest first. Interrupted reviews resume on the next execution. Older reviewed research stays in history and must be rechecked before it can update the current dashboard. An improvement director records lessons after each cycle. A separate evaluator tests proposed source and language priorities against historical cases and fresh evidence before adoption. Policy versions and rollback records are retained. Temporary specialists supplement the core team within recorded task allowances; broader changes remain owner decisions. All requirements remain open.
Incidents: rolling 30-day collection. Roadworks: current and next 90 days. Leave safety: local news across European countries, past 30 days of incidents and next 30 days of protests; comparable crime statistics and source-supported attribution. State Department baselines change only after accepted QC. A first check establishes a baseline, not a worsening threat. Trends compare two consecutive seven-day windows and remain unclear without comparable coverage. Multiple articles about one event do not multiply the event count. Public notices do not establish military route suitability.
Unauthorized UAS tracker
FROM 01 JANUARY 2026
Incursions over time
Recorded episodes across European countries outside the Russia–Ukraine battlefield. Includes confirmed unauthorized flights, impacts and restricted-site discoveries.
26Confirmed records
3Suspected records
3Not substantiated · excluded
9Countries in confirmed records
Historical backfill is partial. Episode lines count records; the cyan line totals aircraft explicitly reported in confirmed and suspected episodes. Unknown aircraft counts are omitted—not entered as zero. Not-substantiated alerts are excluded. Empty months mean no records added, not zero incursions. January has no verified entries yet. September is an incomplete month.
One record represents one reported episode in one country on a stated date. Multiple aircraft in an episode do not multiply the count. Separate-country impacts remain separate records. Updates and corrections stay attached to the original event. Exact event dates are used where available; approximate timing is flagged.
Confirmed means the occurrence is supported by an official statement or attributable reporting; it does not mean malicious intent or the operator is proven. Suspected records are separated, and unsubstantiated alerts are excluded from incursion totals. The map uses approximate area locators, not operational coordinates.
Coverage includes European airspace and restricted-site UAS incidents. Routine battlefield strikes in Russia and Ukraine, authorized flights, maritime drones, balloons, mere precautions, and reports with no identifiable episode are excluded. The 6 October attacks on ships in Bulgaria’s economic zone are retained as a security development but excluded as maritime activity. Romania’s 5–6 October alert is also excluded because its Defence Ministry reported that no target entered national airspace. This initial backfill is selective; it is not a systematic Europe-wide census. January and country gaps require further source review.
Romania’s Ministry of National Defence aggregate, updated 6 October, records 30 unauthorized drone entries and 44 drones or fragments identified in 2026, compared with 9 and 16 respectively in all of 2025. These aggregate categories can overlap and are not distributed across dated event records, so they are preserved as an explicit coverage gap rather than added to this ledger’s episode totals.
Open incoming reporting & source status
New reporting to verify
Loading archive
BBC and DW headlines are screened and retained when the dashboard refreshes. These are candidate reports, not verified incidents; publication dates are not used as event dates. This feed queue is separate from the primary PIR research/QC workflow. The country review date records the imported assessment snapshot.
Explore live reporting & indicator screening
Recent reporting & indicator screening
Use these regional filters for the live news feed below.
ASSESSMENT STATUSReview required No automated threat-level judgment
REPORTS IN WINDOW00 / 7 daysDated items, including curated reporting
LIVE SOURCE COVERAGE0 / 2 feedsChecking source availability
Executive brief
ANALYTICAL CONTEXT
PRIORITY WATCH · BLACK SEA
Drone attacks reached commercial shipping in Bulgaria’s economic zone.
Sea and aerial drones struck two merchant vessels on 6 October, sinking one. Bulgaria is investigating the first reported attack of this kind in its exclusive economic zone; origin and intent remain unresolved, so the event is treated as a major maritime-security indicator rather than a national-airspace UAS episode.
