The Week Moscow Raised the Risk of a NATO Clash
A secret CIA mission, Belarusian mobilisation drills, Russian threats to Britain, attacks on Ukraine and a German sabotage attribution point to a dangerous shift — but not yet to evidence of an imminent Russian invasion of NATO.
For eight and a half hours on August 25, a United States military transport sat on the ground in Moscow. The passenger who mattered was John Ratcliffe, the director of the CIA. His trip had not been announced. He did not meet Vladimir Putin. The Kremlin later said the contact ran through intelligence channels, while President Donald Trump described the visit as “semi-routine.”
The visit looked anything but routine in its timing.
American reporting says Ratcliffe carried a warning: Russia should not attack NATO members. The Baltic states were a particular concern. The Washington Post added a more unsettling layer, reporting that recent U.S. intelligence assessed the Kremlin as seeing Washington weakened and distracted by the war with Iran — and therefore potentially vulnerable to pressure against American interests and allies in Europe. Ratcliffe also warned against a further escalation of the war in Ukraine.
The simplest way to read the trip is therefore not that the CIA director arrived in Moscow and Putin then chose escalation. The sequence points in the opposite direction. Washington appears to have sent its intelligence chief because the risk environment was already deteriorating.
That distinction matters. It turns one secretive journey into a marker of a wider strategic moment.
Two days before Ratcliffe arrived, Putin had addressed the United Russia congress as the country moved toward the September 20 State Duma election. He told the ruling party that it had to do everything possible to achieve victory in Ukraine. The election is not a presidential contest, and there is no public evidence that the Kremlin is ordering military operations for electoral effect. Yet the political backdrop is unmistakable: the war is being integrated ever more tightly into the governing party’s claim to legitimacy.
Then came August 24.
Leaders of the Coalition of the Willing, meeting in Kyiv and by video link, said Russia was carrying out systematic and escalating strikes against Ukrainian cities, critical infrastructure and civilians. On the same day, Belarus began a readiness check involving the 51st Guards Artillery Brigade. Belarusian military channels said the formation was being brought toward the highest degree of combat readiness, with reservists arriving and parts of the brigade being filled toward wartime staffing.
This does not prove that Belarus is preparing an invasion of Poland or Lithuania. The 51st is an artillery formation based around Osipovichi, and Minsk presented the activity as a readiness inspection and training exercise. But mobilisation procedures matter precisely because they test how a peacetime force expands, absorbs reservists and moves toward wartime organisation. In a tense region, such activity becomes part of the strategic picture even when it is not, by itself, evidence of an offensive plan.
Ratcliffe arrived in Moscow the next day.
By August 27, the confrontation had acquired a more direct British dimension. Russia's Foreign Ministry said British military facilities and equipment in Ukraine and beyond could become targets in response to Ukrainian attacks using British weapons. The warning followed Britain's decision to deepen support for Ukraine's long-range strike capability. It was among Moscow's starkest public formulations toward a NATO member during the war.
Two days later, Polish Prime Minister Donald Tusk said after speaking with NATO Secretary General Mark Rutte that Russian escalation was continuing. He called the next six months potentially decisive and said Poland and NATO had to be prepared for different scenarios, including a Russian provocation against an Alliance member.
Tusk's warning did not emerge from nowhere. In July, leaders in Lithuania, Latvia and Poland had already spoken publicly about intelligence pointing to the risk of limited military or hybrid actions against critical infrastructure on NATO's eastern flank. The significance of those warnings was not that they predicted columns of Russian armour crossing a frontier. Their focus was narrower and, in some ways, more difficult for NATO: damage to transport or energy infrastructure, a deniable operation, a drone incident, a cyberattack or another action designed to create ambiguity about attribution and response.
That is where the idea of a “test” of NATO becomes more plausible than the image of an imminent conventional invasion.
A limited operation presents Moscow with a different strategic calculation. The purpose would not have to be territorial conquest. It could be to discover how quickly allies agree on what happened, whether they agree on who is responsible, how much evidence is demanded before action, and whether the United States and European governments share the same appetite for retaliation. The value of such a test would lie in the political reaction it produced.
Europe has already been living inside that grey zone.
On July 13, the North Atlantic Council formally condemned what it called Russia's persistent malicious cyber activity against allies and partners, including operations directed at critical national infrastructure and government entities. On September 1, Germany went further. Berlin publicly attributed an attempted explosive-drone attack at Leipzig/Halle Airport in August to Russian involvement and announced diplomatic and security measures. German authorities described a pattern consistent with Russian hybrid operations. Moscow denied responsibility.
The Leipzig case is important because it narrows the distance between abstract warnings about hybrid war and a concrete incident attributed by a major European government. The airport is not merely a civilian transport hub; it is also strategically relevant to logistics supporting Ukraine. An attack there therefore sits at the junction of civilian vulnerability, military supply and plausible deniability.
At the same time, the conventional war in Ukraine has intensified. On September 1, Kyiv and surrounding regions endured an aerial attack lasting more than 12 hours, the sixth consecutive day of heavy Russian strikes, according to the Associated Press. That matters beyond Ukraine because pressure on Kyiv and pressure on Europe are not separate theatres in Moscow's strategic messaging. They are linked by the same question: how much cost can Russia impose before Western governments alter their behaviour?
Yet there is a danger in assembling these events into a story that is too neat.
There is no public evidence that Putin has made a decision to attack Poland, Lithuania, Latvia or Estonia. There is no visible mass Russian ground deployment around the Baltic region comparable to the force build-up around Ukraine before February 2022. On August 30, a NATO official said Russia was increasing hybrid activity in Europe but that the Alliance saw no imminent threat of attack. Baltic and Nordic officials have also pushed back against claims that a conventional assault is about to begin.
Those cautions are not contradictions. They describe the central problem.
The most dangerous scenario may be precisely the one that does not look like preparations for a large war.
A cyber operation against public systems, a sabotage attempt against energy or transport, a drone crossing, an attack conducted through expendable intermediaries or a small armed incident creates a decision problem for NATO. It can be severe enough to cause damage and fear, but ambiguous enough to generate an argument about proportionality. Russia has spent years operating in that space, while NATO has spent years trying to make deterrence apply not only to tanks and missiles but to hostile activity below the traditional threshold of war.
The late-August cluster of events is therefore significant not because any single one proves an imminent attack. It is significant because governments that do not share identical interests are behaving as though the probability of a dangerous Russian probe has risen.
Washington sent the CIA director to Moscow with a warning, according to several U.S. reports. Poland's prime minister publicly told his country to prepare for multiple scenarios. Lithuania and Latvia had already raised the possibility of limited attacks on infrastructure. Germany has now attributed an explosive-drone plot to Russian involvement. NATO says hybrid activity is increasing even while it sees no immediate conventional attack. Britain has been openly threatened over its military support for Ukraine. Belarus is testing wartime mobilisation procedures in an artillery brigade. Russia continues a sustained air campaign against Ukrainian cities.
These signals do not establish a single Kremlin master plan. But taken together they suggest that the strategic boundary between the Ukraine war and the security of NATO territory is under heavier pressure than it was only weeks ago.
Ratcliffe's trip is especially revealing when placed in that sequence. The last known visit by a CIA director to Moscow before this one came in 2021, when William Burns carried warnings as Russia massed forces around Ukraine. History does not repeat on command, and the military picture today is very different. But intelligence chiefs are not normally sent into adversary capitals to deliver messages that can be handled by ordinary diplomatic traffic.
This time, the central risk is not necessarily that Moscow is preparing a second February 2022. It may be that Russia believes the West can be divided, distracted or forced into hesitation through something smaller.
That would make the coming weeks less a countdown to invasion than a contest over thresholds. Moscow can raise the pressure in Ukraine, threaten individual NATO members, probe infrastructure and exploit ambiguity. NATO can harden vulnerable systems, reinforce its eastern flank and make clear that deniable attacks will still carry consequences.
The September 20 Russian parliamentary election adds a domestic backdrop but not a proven cause. The Iran war adds pressure on American attention and resources but does not automatically translate into opportunity for Moscow. Belarusian readiness drills add military texture but do not equal a deployment order. Each element has limits.
The danger lies in their convergence.
If the next stage comes through a deliberately limited provocation rather than a conventional offensive, the first battlefield may not be a border. It may be the few hours in which allied governments have to decide what happened, who did it and whether the act was designed to test the promise at the heart of NATO: that an attack on one cannot be isolated from the rest.
