Denmark's defence intelligence service issued one of the starkest warnings yet from a western security agency on Thursday, saying Russia could launch a limited military attack against a NATO member state within months. The assessment, made public in Copenhagen, comes as Poland investigates a fire at a Starlink satellite station as a suspected act of sabotage, a coincidence that has sharpened concern across the alliance about the shape of a conflict that may no longer be confined to Ukraine's borders.

The Danish report describes a "low but growing risk" that Russia could carry out long-range strikes on NATO infrastructure supporting Ukraine's war effort, or attempt a limited incursion into a neighboring country using a small number of troops, potentially without insignia identifying them as Russian forces. That last detail is significant. It echoes the tactics Russia used in 2014, when unmarked soldiers, dubbed "little green men" at the time, seized Crimea before Moscow's involvement was formally acknowledged.

A Warning Grounded in Precedent

Denmark's intelligence service is not making these claims in isolation. Suspicion of Russian sabotage operations against European infrastructure has been building for months, and the fire at the Polish Starlink facility gives the warning immediate, tangible weight. Starlink terminals have become critical to Ukraine's military communications, making any satellite infrastructure supporting that network, wherever it sits, a plausible target for disruption short of open war.

This pattern of ambiguous, deniable aggression is consistent with a long history of Russian security services using covert or quasi-covert methods against adversaries who are difficult to confront directly. Moscow's playbook, refined over two decades, has repeatedly relied on operations that offer the Kremlin plausible deniability while still delivering a strategic message. The murders of Kremlin critics abroad, including the 2006 poisoning of the former FSB officer Alexander Litvinenko in London with a rare radioactive isotope, and the assassination of the journalist Anna Politkovskaya that same year, demonstrated a willingness to conduct hostile operations on foreign soil while maintaining official denial. In 2006, Russia's parliament passed a law explicitly authorizing the FSB to send commandos abroad to act against designated "terrorist groups," a power exercised solely at the president's discretion.

Seen against that backdrop, a campaign of infrastructure sabotage and deniable incursions fits a familiar Russian template: pressure applied below the threshold that would trigger a unified NATO military response, but severe enough to sow doubt, strain resources, and test the alliance's cohesion.

Why NATO Should Take the Warning Seriously

NATO's collective defense guarantee under Article 5 hinges on member states agreeing that an attack on one is an attack on all. Ambiguous or unmarked incursions are designed precisely to complicate that political calculus. If Russian personnel operate without insignia, or if sabotage is difficult to attribute definitively to the Russian state, the alliance faces a harder decision about whether and how to respond collectively.

Denmark's willingness to name this risk publicly, rather than confine it to classified briefings, signals a shift in how western intelligence services are choosing to communicate threat assessments. Public warnings serve a dual purpose: they prepare domestic populations and allied governments for the possibility of limited strikes, and they put Moscow on notice that its calculus is being watched closely by services beyond Washington and London.

Russia's economic position gives it both incentive and constraint. Energy revenues that once funded a decade of steady growth under Vladimir Putin, and that helped Moscow build a substantial reserve fund to weather the 2008 financial crisis, have been squeezed by sanctions since the full-scale invasion of Ukraine in 2022. A state under economic pressure may find deniable, low-cost sabotage operations more attractive than costly conventional escalation, since they impose disruption on NATO members without the price tag or political risk of open conflict.

What Comes Next

Poland's investigation into the Starlink fire will be a critical test case. If investigators confirm state-linked sabotage, it would lend immediate credibility to Denmark's warning and likely prompt renewed discussion within NATO about hardening infrastructure, particularly satellite ground stations, power grids, and communications networks that support Ukraine's war effort from allied territory.

For now, the Danish assessment functions as both an intelligence judgment and a political signal: a reminder that the war in Ukraine, more than three years old, continues to generate risks that extend well beyond its immediate battlefield, and that European governments are increasingly willing to say so out loud.