DECODING: Poland's White Book Exposes Putin's Invisible Arsenal Against the Baltic States

DECODING: Poland's White Book Exposes Putin's Invisible Arsenal Against the Baltic States

Introduction: Warsaw Sounds the Alarm Over a War Without a Declaration of War

A document that says aloud what Europe has been whispering for months

On June 16, 2026, in Luxembourg, before the Foreign Affairs Council of the European Union, Polish Foreign Minister Radosław Sikorski laid an explosive dossier on the table. The White Book on Russian Sabotage and Subversion Acts Against the Member States of the Council of the Baltic Sea States, compiled by the Polish Institute of International Affairs (PISM), catalogues with surgical precision the clandestine operations that Moscow has been conducting against its neighbours for years — sometimes decades.

This is not an ideological pamphlet. It is a rigorous compilation of documented incidents: severed submarine cables, systematic GNSS jamming, targeted disinformation campaigns, and cognitive destabilization operations. Poland, holding the rotating presidency of the EU Council, chose this precise moment to force its European partners to confront a reality that some still preferred to call "tensions" or "isolated provocations."

Sikorski facing the hesitant: the moment of collective European clarity

Sikorski demanded before his counterparts an immediate reinforcement of intelligence cooperation between member states and the creation of a common data-sharing system. He insisted on the need to increase collective pressure on Putin. This white book did not appear out of nowhere: it crystallizes a heightened awareness that accelerated since autumn 2024, when cables linking Estonia to Finland and Latvia to Sweden were severed under circumstances that left no doubt about their deliberate nature.

Since then, the pace of incidents has only increased. The Russian shadow fleet, electronic jamming operations, digital influence campaigns — all the pieces of a geopolitical puzzle that Warsaw had the courage to assemble publicly before the 27 European partners.

The Catalogue of Hybrid Crimes: Critical Infrastructure in the Crosshairs

The vulnerability map laid bare by PISM

The PISM report maps attacks against critical infrastructure across the Baltic region with a granularity that is dizzying. Submarine fiber-optic and power cables have become preferred targets — not only for their strategic value, but because their destruction is difficult to formally attribute and slow to repair. The Russian shadow fleet — tankers and cargo ships operating under flags of convenience — has been implicated in several incidents, with dragging anchors or loose equipment serving as improvised sabotage tools.

Operations targeting power grids, pipelines, and communications hubs are also documented. The objective is not necessarily to destroy — sometimes it is simply to demonstrate vulnerability, to create a persistent sense of insecurity, and to cost the targeted countries money and attention. It is a war of attrition that dares not speak its name, and one that democracies still struggle to officially classify.

GNSS jamming: an invisible weapon with very real effects on civilians

The systematic jamming of satellite navigation systems (GNSS) across the Baltic region is one of the white book's most alarming chapters. Hundreds of commercial flights have reported navigation disruptions over the Baltic Sea, Finland, the Baltic states, and Poland. Ships have had their positioning systems jammed, dangerously complicating docking manoeuvres in ports such as Tallinn, Riga, and Helsinki.

This practice, which security experts describe as low-risk electronic warfare for the aggressor, causes real disruptions without providing formal proof of an act of war. Moscow can deny, dilute, and attribute events to unidentified sources. Victim governments must document, analyse, and corroborate — a slow process that benefits the aggressor and drains national response resources.

Cognitive Operations: The Invisible Front of Structured Disinformation

Manufacturing doubt, fragmenting European societies from within

The third pillar of the white book concerns what PISM calls aggressive cognitive operations. These are structured disinformation campaigns targeting European public opinion with carefully constructed narratives designed to amplify existing divisions, weaken trust in democratic institutions, and sow doubt about the true nature of the Russian threat. These operations are not the work of a few isolated trolls — they are coordinated, funded, and rely on sophisticated distribution networks that use artificial intelligence to multiply their reach.

In Germany, France, Italy, and across much of Central Europe, campaigns have targeted elections, referenda, and debates about aid to Ukraine. Fake social-media accounts, front-facing news websites, algorithmic manipulation — all of this constitutes an influence arsenal whose effectiveness no serious observer can still question.

Baltic societies on the front line of Russia's narrative war

The countries directly targeted by the white book — Estonia, Latvia, Lithuania, Poland, Finland, Sweden, Germany, Denmark — are also those with the largest Russian-speaking communities or the most exposed borders with Russia and Belarus. Moscow exploits these vectors with a precision one can only begrudgingly admire before fighting it with every necessary ounce of resolve.

Estonia and Latvia, in particular, have developed exemplary countermeasures: media literacy education, early detection of hybrid narratives, cooperation between public services and civil society. These models should be extended across the entire European Union — which is precisely what Sikorski demanded in Luxembourg before his counterparts.

Sikorski's Response: Toward a Collective Architecture for Hybrid Defence

Intelligence cooperation: the nerve centre of modern inter-state warfare

Sikorski's call for a reinforced intelligence cooperation framework between EU member states addresses a well-identified structural gap: the 27 members of the Union share too little information about Russian hybrid threats. Each country manages its own portfolio of incidents, often confidentially, without the others benefiting from this shared learning — which is nonetheless vital.

The creation of a common data-sharing system — whose precise contours remain to be defined in upcoming negotiations — would make it possible to detect recurring patterns, anticipate new waves of attacks, and coordinate responses. It is technically feasible. It is politically difficult, because it requires countries jealous of their intelligence sovereignty to accept a level of transparency they have never consented to in other multilateral contexts.

The NATO Ankara summit as a major strategic amplifier

The white book's presentation comes less than three weeks before the NATO summit scheduled in Ankara on July 7–8, 2026. The timing is deliberate. Warsaw is seeking to embed the Russian hybrid threat within the collective security architecture — not just as a European issue but as an Atlantic one. Could Article 5 of the North Atlantic Treaty apply to a series of hybrid attacks that are sufficiently serious and documented? The question is now being raised explicitly in diplomatic circles.

The Baltic allies, Finland, and Sweden — recently integrated into NATO — have been pushing in this direction for several months. The Polish white book gives them the factual corpus the debate was missing. The convergence between documented proof and political will is rare in diplomacy; this time, it finally seems within reach.

Europe Facing the Mirror: Assessment of Existing Responses and Their Gaps

What has already been done — and what remains structurally insufficient

The EU has not been entirely passive in the face of the hybrid threat. The NATO Strategic Communications Centre of Excellence (StratCom) in Riga, the Cyber Excellence Centre in Tallinn, the PESCO mechanisms dedicated to resilience — all of these initiatives exist, function, and produce tangible results. But they remain fragmented, underfunded, and insufficiently integrated into a coherent doctrine at the level of the 27.

The problem is also political: certain member states — by historical tradition, residual economic dependency, or electoral calculation — still baulk at explicitly designating Russia as a systemic hybrid threat. The Polish white book forces that designation. That is its primary merit, beyond the document's considerable archival value in its own right.

Reasons for hope: a Union that learns fast when it truly decides to

Since 2022, the EU has demonstrated a collective response capacity that would have seemed impossible just a few years earlier. Economic sanctions of unprecedented scale, military support to Ukraine that would have been inconceivable before February 24, 2022, a spectacular acceleration of defensive integration — this momentum can be applied to the hybrid threat if the political will in the capitals is genuinely there.

The PISM white book provides the map. Sikorski has pointed the direction with clarity. It now falls to the 27 to decide whether they truly want to march together — or continue managing separately a war that Moscow wages collectively and methodically against all of them.

What the Experts Say: Hybrid War as a Durable New Security Normal

A conflict paradigm redefined by Moscow over several decades

Security analysts who have studied Russian military doctrine for years are not surprised by the white book's contents. What surprises them is rather the delay with which Western democracies integrated these concepts into their actual strategic planning. Moscow practises what experts call the "grey zone": below the threshold that triggers Article 5, but well above the level of an ordinary diplomatic incident.

This grey zone is designed precisely to paralyse democratic decision-making systems, whose requirement for consensus and irrefutable proof creates delays in action that authoritarian regimes do not face. Europe must learn to respond quickly and forcefully without waiting for absolute certainty of attribution — which, in hybrid warfare, never fully arrives and is not meant to.

The concrete operational recommendations of the PISM white book

Beyond the diagnosis, the document presented by Sikorski formulates precise operational recommendations. Three main axes can be identified: first, strengthening critical infrastructure resilience with binding technical standards at the European level; second, creating a permanent hybrid crisis cell capable of coordinating responses in real time; and third, adopting a regime of automatic sanctions triggered as soon as an act of sabotage is attributed to a state with sufficient confidence.

These three recommendations are ambitious. They will face institutional and political resistance. But they have the merit of clarity — and in today's security environment, clarity is already a political victory in its own right against the deliberate opacity of Russian strategy.

The Russian Shadow Fleet: Warsaw's Maritime Sabotage Weapon Unmasked

Anonymous vessels as attack vectors against submarine infrastructure

One of the most striking elements of the Polish white book concerns the Russian shadow fleet — those hundreds of ships operating under flags of convenience from states such as Panama, the Marshall Islands, or Palau, whose real activity far exceeds simple sanctioned oil transport. PISM documents how several incidents involving damage to critical submarine cables in the Baltic Sea coincide geographically and temporally with these vessels' trajectories, creating a body of circumstantial evidence that Swedish, Finnish, and Estonian investigative authorities have progressively made public.

The technique is simple in principle: dragging anchors or poorly secured equipment serve as improvised but devastatingly effective sabotage tools against fiber-optic cables and submarine electrical interconnections. Plausible deniability is built into the operational model — it suffices to plead accident, incompetence, or difficult weather conditions. The result: months of costly repairs for victims, zero sanctions for the aggressor.

Identifying and tracking the shadow fleet as a collective intelligence challenge

Identifying and tracking these vessels in real time is one of the most concrete operational challenges the white book poses to member states. AIS spoofing — the falsification of Automatic Identification System data that is supposed to make maritime navigation transparent — has become a documented practice of the Russian shadow fleet. Ships declare themselves at one location while physically operating elsewhere, masking their movements near sensitive infrastructure in the Baltic Sea.

Several Nordic countries have begun deploying complementary surveillance systems based on satellite and radar data to work around this problem. These capabilities remain national and fragmented — again, the mutual coordination that Sikorski recommends presents itself as an urgent operational necessity, not merely a diplomatic wish.

The Hour of Reckoning: What Europe Has Learned and Still Must Learn from Warsaw

Real progress, a persistent structural lag against a growing threat

Since Ukraine's full-scale invasion in 2022, Europe has accelerated its thinking on the hybrid threat. Joint exercises, information-sharing protocols, investments in submarine cable resilience — all of these are concrete, measurable advances. But the pace remains insufficient given the documented intensification of Russian operations. The Polish white book lays bare this acceleration of the threat and directly challenges the capitals that have chosen to look away.

It is significant that it is Poland that has assumed this leadership. Warsaw endured decades of Soviet domination and carries an acute awareness of the Russian danger that some Western partners have still not viscerally internalized. Poland devotes 4 percent of its GDP to defence today — the highest ratio in NATO — and that shows in the quality of its strategic analysis.

The Polish model: from historical victim to continental security leader

By taking this leadership in documenting and presenting the Russian hybrid threat before the entire EU, Poland is executing a remarkable geopolitical transformation. It is no longer simply a state on the eastern flank of NATO demanding security guarantees — it is becoming an active producer of collective security for the entire European Union. That is a considerable shift in posture, one that will be noted in Moscow and should be consistently saluted in Brussels.

The convergence of analytical expertise, financial commitment to defence, and diplomatic will is rare in international politics. Poland in 2026 illustrates what it truly means to take one's security seriously in a degraded geopolitical environment — and it is showing the way to those who are still lagging behind.

Conclusion: Warsaw Has Done Its Part — Now Europe Must Play Its Role

A major diplomatic act, a collective burden that is only beginning

The presentation of the Polish white book on Russian sabotage and subversion in the Baltic region is one of the most significant diplomatic gestures of Poland's presidency of the EU Council. Sikorski did not improvise — he prepared, documented, sought the right moment, and acted with determination. The result is a body of evidence that now makes it difficult for any European government to pretend ignorance of the scale and systematic nature of the Russian hybrid threat that has been documented for months.

What Poland accomplished in Luxembourg on June 16, 2026 was to transform an intelligence dossier into a collective European political act. That documented clarity feeds into the discussions at Ankara. It reinforces the position of the Baltic and Scandinavian countries. It embarrasses those in Western Europe who preferred to maintain a comfortable ambiguity toward Moscow.

The real challenge of tomorrow: structural solidarity or fatal fragmentation

The real hybrid war of tomorrow will be fought in critical digital infrastructure, interconnected energy networks, and integrated military command systems. Those who still believe that Putin's Russia distinguishes between peacetime and wartime are fundamentally mistaken. For Moscow, the war is permanent, the domains are multiple, and the rules of international conduct are merely constraints to be methodically circumvented. Against this, Europe has only one viable response: structural solidarity, armed with evidence, translated into concrete and lasting action.

By Maxime Marquette, columnist

Columnist's transparency note

Who I am and what I bring to this complex subject

I am a columnist specializing in defence, international security, and European geopolitics. I have been following the dynamics of Russian hybrid warfare since the annexation of Crimea in 2014 and have covered the escalation of destabilization operations in the Baltic region. My position is clearly stated: I believe that Putin's Russia represents an existential threat to the European security architecture and that the Western democracies' collective response is both necessary and still insufficient at this stage.

My biases, my limits, and what I do not know with certainty

My bias is clearly pro-NATO and pro-European. I acknowledge that I do not have access to the classified documents underlying the PISM white book — I rely on publicly available sources, official Polish communiqués, and accessible expert analyses. I am not able to independently verify every incident cited in the report. Some attributions remain debated in the academic community. I acknowledge this uncertainty while maintaining that the overall body of converging evidence is, taken as a whole, convincing and worthy of an urgent collective political response.

Sources

Primary sources

Polish Ministry of Foreign Affairs — Sikorski at the EU Council: pressure on Russia must go up — June 16, 2026

El País English — Putin's invisible front: drones, sabotage and hybrid warfare test Europe — June 5, 2026

The Guardian — Russian provocations against the Baltic states, Poland on alert — June 26, 2026

Secondary sources

Asymmetric Intelligence Monitor — European strategic autonomy weekly brief — June 17, 2026

WFMD News — Intelligence warns: Russia preparing hybrid attacks on NATO's eastern flank — June 22, 2026

EU Insider — PISM: report on Russian hybrid warfare against Baltic Sea states — 2026