Polish Prime Minister Donald Tusk warned on 29 August that the next six months would be decisive for NATO's eastern flank, saying the alliance could not rule out a Russian provocation against a member state. The comment echoed an assessment by NATO Secretary General Jens Stoltenberg that was shared in a tweet by Tusk after the alliance's top defence policy official briefed European capitals on recent US‑Russian intelligence exchanges.

The chain of events began on 25 August when John Ratcliffe, director of the US Central Intelligence Agency, travelled to Moscow for a closed‑door meeting with Russia's foreign intelligence chief Sergey Naryshkin and domestic security chief Alexander Bortnikov. The meeting, described by the Wall Street Journal as "extraordinary", was the first time a CIA director had set foot in the Russian capital since November 2021, a few months before Moscow launched its full‑scale invasion of Ukraine.According to Dr Kristi Raik, director of Estonia's International Centre for Defence and Security, the visit was a signal of seriousness. "When you want to signal you're serious, you send the CIA director," said former CIA case officer and intelligence historian David Gioe. The Washington Post later reported that the meeting was prompted by fresh US intelligence indicating an elevated risk of Russian escalation, possibly aimed at deterring Moscow from testing NATO's resolve via the Baltic states.

US briefing to NATO after the Moscow trip

Two days after Ratcliffe's Moscow stop, Elbridge Colby, the US Under Secretary of Defense for Policy, the third‑ranking official in the Pentagon, travelled to Brussels. There he briefed NATO ambassadors and Secretary General Stoltenberg on the content of the Moscow talks. The briefing formed the basis of Stoltenberg's later conversation with Tusk, in which the Polish premier stressed that "we cannot rule out provocations from Russia against one of NATO's members".

These diplomatic exchanges come amid a spate of incidents that have raised alarm across the alliance. In recent weeks, US intelligence warned that Russia was planning a possible attack on NATO's eastern flank within the next few years. An armed drone was intercepted near Leipzig/Halle airport in Germany and was attributed to Russian actors, prompting German officials to publicly name Moscow as the culprit. Simultaneously, NATO aircraft have been conducting deterrence exercises close to the Russian exclave of Kaliningrad, underscoring the alliance's heightened vigilance.

European response and calls for coordination

Five EU commissioners from countries on the alliance's eastern edge have urged Commission President Ursula von der Leyen to appoint a high‑level coordinator for Baltic security. The proposed role would liaise with NATO and national authorities to prepare for potential threats to critical infrastructure, a request that reflects growing unease about Russia's "grey‑zone" tactics, sabotage, cyber‑attacks and other sub‑threshold actions that fall short of a conventional armed assault.

Experts say the lack of a clear NATO red line for such activities complicates the alliance's response. Article 4 of the NATO treaty allows any member to call for consultations when it feels threatened, but it does not obligate collective action. Article 5, the collective‑defence clause, is triggered only by an armed attack, and the definition of "armed attack" remains ambiguous when dealing with covert sabotage or cyber‑intrusion.

"Putin doesn't know NATO's real red‑lines because NATO itself hasn't worked them out yet," Gioe explained. "If Russia slips into an undefined grey zone, Article 5 could be invoked, which would mean a war for all of us." He added that a prolonged period of inaction by European leaders could be interpreted by Moscow as tacit permission to continue low‑level aggression.

What a Russian provocation could look like

Raik warned that Russia is constantly probing European societies for vulnerabilities. "They are looking for weak spots in infrastructure, energy, finance and public services," she said. Potential scenarios range from a terrorist‑style attack, such as the foiled drone incident in Germany, to a large‑scale cyber‑operation targeting power grids or transport networks. The economic fallout from a successful sabotage could be severe, especially for households already burdened by high energy prices and inflation.

For workers, the risk is twofold. First, any disruption to energy supplies could push up utility bills, eroding real wages. Second, heightened security measures may lead to increased surveillance and restrictions on civil liberties, a development that trade unions across Europe have traditionally opposed.

US diplomatic overtures and the broader strategic picture

In addition to the CIA‑Moscow meeting, US officials have floated a controversial idea: a trilateral summit involving President Joe Biden, President Vladimir Putin and Ukrainian President Volodymyr Zelenskyy. Sources familiar with the proposal, reported by Axios, say the aim would be to clarify red lines and possibly de‑escalate the situation. The White House has not confirmed the plan, and critics argue that inviting Putin to a high‑profile summit could legitimize his regime without delivering concrete security guarantees.

The broader strategic context is shaped by Russia's increasingly desperate position in Ukraine. "The risk‑taking on the Russian side has increased because Russia is in an increasingly desperate situation," Raik noted. As Moscow faces mounting sanctions, dwindling foreign investment and a strained war economy, its leadership may resort to asymmetric tactics that are cheaper and harder to attribute.

Implications for European policy and the labour movement

European governments are now under pressure to translate diplomatic warnings into concrete preparedness measures. This includes reinforcing critical infrastructure, enhancing cyber‑defence capabilities and ensuring that energy supplies remain resilient. For the European Union, the challenge is to balance a robust security response with the need to protect civil liberties and avoid excessive militarisation of public life.

Trade unions have called for a "people‑first" approach, urging that any security upgrades should not be funded by cutting social programmes or by imposing regressive taxes on low‑income households. They argue that the costs of a potential Russian provocation, whether through higher energy bills or disrupted public services, would fall hardest on the working class.

At the same time, industry groups warn that overly stringent security regulations could hinder investment in sectors such as renewable energy, which are already struggling to meet EU climate targets. They stress the need for a coordinated European response that safeguards both security and economic competitiveness.

Looking ahead

The next half‑year will test NATO's ability to deter and, if necessary, respond to Russian moves that fall short of a full‑scale invasion but still threaten the safety of European citizens. The alliance's internal debate over the definition of an "armed attack" and the appropriate level of collective response will shape the political narrative across Brussels, Warsaw and Berlin.

For ordinary Europeans, the stakes are clear: a successful Russian provocation could translate into higher living costs, disrupted services and a heightened sense of insecurity. As governments grapple with these risks, the pressure will be on them to demonstrate that security measures are matched by protections for workers, affordable energy and democratic oversight.

In the words of Dr Raik, "Russia's foreign policy has its own internal logic, but it does not align with the expectations of European democracies." Understanding that logic, and preparing for its possible manifestations, will be the central task for NATO and the EU as they navigate an increasingly volatile security environment.