Danish intelligence: Russia may intensify hybrid war; limited NATO strike risk rising
Denmark’s Defense Intelligence Service warned that Russia will likely intensify hybrid attacks against the West and NATO with greater consequences, and that—while still low—the risk of a limited military attack on one or more NATO countries is increasing, possibly including long-range strikes on infrastructure supporting Ukraine.
AI-assisted · US Brief desk · Sources listed below
What happened
Denmark’s Defense Intelligence Service published a fresh threat assessment on Friday warning that Russia is likely to intensify hybrid warfare against Western and NATO targets—and that the probability of a limited military attack on alliance territory, while still low, is rising.
What DDIS said (via English-language reporting): Breaking Defense summarized a nine-page DDIS document stating Russia will carry out more frequent hybrid attacks “with greater consequences,” including cyber operations that could cripple societal functions and sabotage with a high risk of casualties. The same report said the likelihood of a “limited military attack” against one or several NATO countries is increasing even though the absolute risk remains low.
Illustrative scenario: The assessment, as reported, sketched a possibility of isolated long-range strikes on infrastructure vital to supporting Ukraine, with Russia potentially claiming weapons struck NATO territory only because of Ukrainian jamming—an attribution fog designed to complicate Article 5 politics.
Why it matters
Denmark’s warning lands amid Europe’s debate over air defense, critical-infrastructure protection, and how to respond to gray-zone attacks that may not clearly trigger NATO’s collective-defense clause. For the United States, it feeds congressional and Pentagon arguments about European deterrence stockpiles and Ukraine aid sustainment.
What’s next
Allied leaders’ public responses; any new hybrid incidents in Northern Europe; and whether NATO adjusts air-defense or critical-infrastructure posture statements after the Danish paper.
More context
How headlines differ: CNBC, The Guardian, and Bloomberg used sharper “could attack a NATO country within months” framing in headlines, while Breaking Defense’s fuller paraphrase emphasizes low-but-rising risk and hybrid escalation first. Readers should not treat “within months” as a deterministic countdown without the underlying Danish wording.
Who is affected: Baltic and Nordic publics already primed for hybrid threats; NATO planners tracking sabotage and cyber patterns; and Ukraine, whose support infrastructure on allied soil is explicitly named in the reported scenario.
Uncertainty: Intelligence assessments are probabilistic judgments, not predictions. DDIS does not (in the reported excerpts) claim an imminent large-scale invasion of a NATO member. Competing views range from alarm about normalizing limited strikes to caution that public warnings can also serve domestic readiness politics.
4 listed sources
- Breaking Defense, Sep 25, 2026 — Russian hybrid attacks likely to increase; DDIS nine-page assessment; limited military attack risk rising though still low; long-range strike on Ukraine-support infrastructure scenario; jamming-excuse vignette
- Reuters, Sep 25, 2026 — Denmark expects Russia to escalate hybrid warfare in coming months
- CNBC / The Guardian / Bloomberg, Sep 25, 2026 — English-language headlines on possible attack on a NATO country and rising risk
- NATO / European security context — ongoing Ukraine support and hybrid incidents (background)
References listed by US Brief; a source count is not a verification score.
Editorial sourcing notes
Assessment facts follow Breaking Defense’s Sep 25, 2026 write-up of the Danish Defense Intelligence Service (DDIS) nine-page threat report, corroborated in headline form by Reuters, CNBC, The Guardian, and Bloomberg. Quotations about hybrid intensification and “limited military attack” risk are from that secondary reporting of the DDIS document—not a US Brief translation of the full Danish original. “Within months” framing appears in several English-language headlines; treat timing language carefully and prefer the report’s low-but-rising risk formulation where outlets diverge.
Like US Brief? You can support it with a tip.