NATO's Rutte: drone incursions represent 'evolution of the nature of the threat'
NATO Secretary General Mark Rutte said at a press conference in Lithuania on September 29 that repeated drone incursions into Alliance airspace mark an evolution in the threat NATO faces. He said the Alliance has a full range of response options to Russian hybrid attacks — sometimes public, sometimes not — and that continuing support for Ukraine is the best response to Russian actions in the "gray zone."
Key points
- NATO Secretary General Mark Rutte said on September 29 that repeated drone incursions into Alliance territory mark an "evolution of the nature of the threat."
- Rutte said NATO is strengthening its integrated air and missile defense system and adapting its posture toward drones.
- He said NATO has a full range of response options to Russian hybrid attacks, but they will not always be public or symmetrical.
- He argued that the best response to Russian actions in the "gray zone" is to increase, not decrease, support for Ukraine.
- Rutte praised allies that publicly attribute incidents to Russia when evidence allows, citing Estonia's attribution of the August arson of Milrem Robotics in Tallinn to Russian special services.
- He estimated that the Russian leadership has sacrificed up to 1.2 million of its own military personnel in what he called a "completely unprovoked war."
- On the night of September 28-29, Romania detected an aerial target near its airspace and scrambled fighters; debris was later reported in the Brăila area.
Why it matters
Rutte's remarks formalize NATO's view that the pattern of drone incursions and sabotage across the eastern flank is not a series of isolated incidents but a qualitatively new threat requiring structural adaptation. By explicitly endorsing public attribution and tying the response to continued support for Ukraine, he sent a political signal to Moscow as well as to NATO publics ahead of a heavy election cycle in several European allies.
What happened
Speaking at a joint press conference with Lithuanian Prime Minister Mindaugas Sinkevičius at NATO headquarters in Brussels on September 29, NATO Secretary General Mark Rutte characterized repeated drone incursions into Alliance airspace as an "evolution in the nature of the threat." He said NATO is strengthening its integrated air and missile defense system and adapting its drone posture.
Rutte said the Alliance has a full range of response options to Russian hybrid attacks, but that these responses will not always be public and will not always be symmetrical. He described the term "hybrid" as misleadingly soft, arguing that the real threat is "gray zone" activity including drones, sabotage, and cyberattacks. He cited NATO's Operation Baltic Sentry — launched after an undersea cable between Finland and Estonia was cut at the end of 2025 — as an example of a symmetrical response, and actions by Sweden, the United Kingdom, Belgium, and France against Russia's "shadow fleet" as an example of an asymmetrical one.
Rutte called for a measured approach, noting that the Russian leadership had sacrificed up to 1.2 million of its own military in what he described as a "completely unprovoked war." He said the best response to Russian gray-zone activity is to increase, not decrease, support for Ukraine, and that NATO's message to Moscow is that it will do more for Ukraine, not less. He also said it was important, where evidence allows, to publicly attribute incidents to Russia, and praised Estonia's August attribution of the arson of defense company Milrem Robotics in Tallinn to Russian special services.
How international sources describe it
All supplied sources are Ukrainian-language media, so the framing available here is a Ukrainian one. Those outlets center the story on NATO's eastern-flank vulnerability and frame Rutte's remarks as a direct warning about Russia. They tie Rutte's comments to a broader context of hybrid activity, including the Estonian attribution of the Milrem Robotics arson and EU-level preparations by António Costa and Kaja Kallas for a response mechanism to hybrid attacks.
Background
Roughly two weeks before Rutte's remarks, NATO fighter jets shot down a drone in Lithuanian airspace. On the night of September 28-29, Romania detected an aerial target near its airspace and scrambled fighters; Romania's Defense Ministry later received a report of debris in the Brăila area. On August 15, an arson attack hit the building of Estonian defense company Milrem Robotics in Tallinn; Estonia subsequently officially attributed the attack to Russian special services and summoned the Russian chargé d'affaires. EU leaders António Costa and Kaja Kallas have separately said the EU is aware of hybrid threats and is preparing response mechanisms and plans through 2030.