On Thursday, Denmark's military intelligence service issued what reporting describes as the bluntest warning yet from any NATO ally: Russia may be preparing a limited strike against a NATO country. In an unclassified threat assessment published September 24, the Danish Defence Intelligence Service, known as the FE, said there is a "low but growing risk" that Moscow could launch a limited military attack against one or more NATO nations bordering Russia in the coming months, according to reporting by Reuters.

This Denmark NATO warning is not an invasion prediction. The assessment treats a limited attack and a full-scale assault as separate scenarios. Danish analysts say a Russian invasion of NATO territory remains highly unlikely but "cannot be ruled out," noting Moscow would need at least six months to assemble the forces for one. A limited attack would be smaller, harder to attribute, and meant to create confusion rather than seize territory.

Intelligence chief Thomas Ahrenkiel outlined several possible forms the attack could take, according to the New York Post's reporting on the assessment. Russia might fire long-range weapons at infrastructure used to support Ukraine. It might stage a false-flag operation using Ukrainian-made drones. Or it could send a small number of troops, operating without insignia, across a border under the pretext of protecting Russian-speaking minorities, a tactic Moscow used in parts of Ukraine before its full invasion in 2022.

The goal, Ahrenkiel said, would not be conquest. "The aim is not to take over the country, but to divide NATO," he said, according to the New York Post's report. The assessment reportedly warns that Moscow may believe the alliance will not respond as one, especially if it judges that the United States cannot or will not back up its European members in a war against Russia. That calculation, more than any single weapon system, is what Copenhagen says should worry the alliance.

Alongside the military warning, Danish intelligence expects Russia to sharply intensify its hybrid campaign against NATO and Western countries in the coming months, with operations hitting more often and landing harder than anything seen so far. Future operations could include destructive cyberattacks that knock out essential services, as well as sabotage that puts lives at risk, as reported by EuropeSays. Europe is already living through that playbook, and flashpoints like the recent India-Pakistan naval collision in the Arabian Sea show how fast military incidents can escalate when trust is thin.

The warning lands after a string of incidents that already have European capitals on edge. Reuters reported that NATO's top commander pointed to an attempted drone attack at Germany's Leipzig/Halle Airport and a Russian ship firing flares toward a Danish military helicopter as examples of the pattern. Moscow has also faced accusations of cutting critical undersea cables in Europe. Russia has repeatedly denied any involvement in sabotage or hybrid operations against NATO countries.

NATO's top commander: don't try it on my watch

Hours after the Danish assessment dropped, NATO's Supreme Allied Commander Europe answered. In a phone interview with Reuters on September 24, U.S. Air Force General Alexus Grynkewich said the alliance's thirty-two member states have stepped up intelligence sharing in response to the wave of sabotage and other incidents apparently linked to Russia. Asked about the risk of a limited Russian attack on alliance territory, he called it "unlikely but something that we can't rule out."

Grynkewich struck a defiant note. "It's concerning," he said of the recent incidents, "but we should be calm and confident that we as an alliance, the most powerful alliance in history, have the tools that we need and have the mechanisms that we need in order to manage the risk here." He added that NATO was well positioned to defend every inch of its territory, and aimed a warning directly at the Kremlin. "He better not try it on my watch," the general said.

The commander also dismissed suggestions that Russian President Vladimir Putin might see an opening because the United States has used up much of its global stockpile of precision long-range missiles during the war with Iran. That claim was reported by Reuters, citing people familiar with the data. "Absolutely not," Grynkewich said, adding that he now holds the authorities he needs to act if emerging threats appear.

Europe is being asked to carry more of the load

The exchange comes as NATO is in the middle of a major reshuffle, part of a broader shift driven by President Donald Trump's demands that European nations take more responsibility for their own security. The Norfolk headquarters, which handles operations in the Arctic and northern Europe and protects transatlantic resupply routes, is being handed over to a European commander, with a British army general taking charge from a U.S. Navy vice admiral.

Speaking to Reuters, Grynkewich sought to reassure European allies worried about an ongoing review of U.S. forces on the continent. Washington will continue to provide "critical but more limited capabilities" to the alliance as Europeans take on a greater role, he said, adding that there is "no predetermined outcome" on how many of the roughly eighty thousand American troops stationed in Europe might stay or relocate.

For now, the Denmark NATO warning sits in an uneasy middle: a warning serious enough to trigger faster intelligence sharing across the alliance, but one that stops short of predicting war. The Danish assessment's bet is that Moscow wants division, not territory, and NATO's answer is that testing that theory would be a mistake. Watch for what follows in the coming months: a higher tempo of hybrid incidents, and a test of how quickly the alliance's new intelligence-sharing setup turns warnings into action.