Two merchant vessels have been attacked by aerial and maritime drones in Bulgaria’s exclusive economic zone in the Black Sea, sinking one ship and forcing the evacuation of another. The incident follows a deadly attack on a grain carrier off Romania a day earlier and has prompted concern over the growing risks to civilian shipping close to EU and NATO territory.

Two commercial vessels were struck by drones in Bulgaria’s exclusive economic zone early on Tuesday, 6 October, in the first known attack of its kind on merchant shipping in Bulgarian waters.

The Togo-flagged ALFA WATAN suffered severe structural damage and sank, while the Palau-flagged ABLE caught fire. Bulgarian Prime Minister Rumen Radev said the vessels were attacked at around 3am by both aerial and maritime drones about 70 nautical miles east of the coastal town of Byala. The Bulgarian government said a search-and-rescue operation was continuing for the crew of the ALFA WATAN, whose fate remained unknown.

All 18 people aboard the ABLE were rescued after abandoning the burning vessel. The Bulgarian-flagged passenger and freight ferry DIOSCURIA was diverted to the area and initially took the crew on board before Bulgarian Navy and Border Police vessels transferred them towards Varna.

The crew comprised 11 Turkish and seven Indian nationals. Two sailors were taken to hospital, including an Indian crew member suffering from burns and the Turkish captain, who sustained a head injury. Bulgarian public broadcaster BNT reported that the remaining 16 sailors subsequently arrived safely in Varna for medical checks.

The ABLE was reportedly carrying grain towards Istanbul. The cargo aboard the ALFA WATAN, which had been heading north towards Romania, has not been officially established.

Radev convened an emergency meeting involving the ministries of defence, interior, transport and environment, alongside the presidency and Bulgaria’s security services. He described the attack as an unacceptable violation of international and maritime law and warned of its effect on commercial navigation in the Black Sea.

Bulgarian authorities have not publicly identified who launched the drones. Investigations are examining both the weapons used and the circumstances surrounding the attack. One rescued Turkish sailor told Bulgarian television that he believed the ABLE had been hit by a Russian underwater drone, but that account has not been independently established and Sofia has made no formal attribution.

Foreign Minister Velislava Petrova said Bulgaria was in contact with its European and NATO partners and described Black Sea security as inseparable from wider European security. She said civilian crews and freedom of navigation must be protected and that Bulgaria would work with its allies to assess the wider consequences for maritime security.

European Commission President Ursula von der Leyen also condemned attacks against civilian shipping, saying the situation in the Black Sea was becoming increasingly concerning. She said commercial vessels and their crews were being targeted as investigations continued into the latest incidents.

Tuesday’s attack came less than 24 hours after another commercial vessel caught fire and sank in Romania’s exclusive economic zone. The Turkish-owned Royad Mammadov, sailing under the flag of Saint Kitts and Nevis, had left the Ukrainian Danube port of Izmail carrying corn for Ravenna in Italy.

Romanian authorities confirmed that two people died and 11 crew members were rescued. President Volodymyr Zelenskyy said the vessel had been struck by two Russian drones, although Romanian authorities did not themselves publicly attribute the incident to Russia.

The two incidents in consecutive days mark a further geographical expansion of the risks facing commercial shipping in the western Black Sea. EU Today has previously reported how strikes near Romania have moved maritime war risks closer to NATO territory, while a separate maritime drone explosion at Constanța raised questions over the ability of coastal states to detect and respond to unmanned systems approaching commercial infrastructure.

The distinction between territorial waters and an exclusive economic zone remains important. The attacks occurred outside Bulgaria’s territorial sea and therefore do not amount simply to an attack on Bulgarian territory. They nevertheless took place in an area where Bulgaria has internationally recognised economic rights and responsibilities, including search-and-rescue and environmental obligations.

The immediate concern for Sofia is the search for the missing crew of the ALFA WATAN and the possibility of pollution from the wreck. The wider concern for the EU is the increasingly exposed position of civilian shipping routes linking Ukraine, Romania, Bulgaria and Turkey.

Ukraine’s maritime export routes remain particularly important for agricultural trade. Repeated attacks on merchant vessels can increase insurance premiums, discourage shipowners from entering the region and raise transport costs even when ports themselves remain operational. Russian attacks on Odesa and its export infrastructure have already placed Ukraine’s Black Sea grain corridor under sustained pressure.

With merchant ships now struck in the economic zones of both Romania and Bulgaria on consecutive days, Black Sea maritime security has moved further onto the agenda of EU and NATO governments along the western coast.

A large fire has broken out at the Volodarskaya petroleum-products station outside Moscow following an extensive overnight drone attack. The facility occupies an important position in the pipeline network supplying petrol, diesel and aviation fuel to the Russian capital and its principal airports.

A major fire was reported at the Volodarskaya linear production and dispatch station in Moscow region early on Tuesday, bringing Ukraine’s campaign against Russian fuel infrastructure to another important point in the capital’s supply network.

Footage published from the area around Konstantinovo showed a substantial blaze at the facility, with reports from local residents that storage tanks were burning. The material identified the site as the Volodarskaya station, operated by Transneft-Upper Volga and connected to the petroleum-products network serving the Moscow region.

The extent of the damage was not immediately clear. There had been no detailed assessment from Transneft by Tuesday morning establishing whether pumping equipment, pipelines or only storage facilities had been affected. This distinction will determine whether the attack produces a temporary disruption or a more significant problem for Moscow’s fuel distribution system.

The strike formed part of a large overnight drone attack on Moscow and surrounding districts. Moscow Mayor Sergei Sobyanin reported repeated interceptions of drones approaching the capital, while air-defence activity continued across Moscow region. Russian aviation authorities temporarily restricted operations at Vnukovo, Domodedovo, Sheremetyevo and Zhukovsky airports for flight-safety reasons.

There is no evidence at this stage that the airport restrictions resulted from fuel shortages. They were imposed during the drone attack itself. The longer-term significance of Volodarskaya lies instead in the station’s role within the pipeline and storage infrastructure serving the Russian capital.

A major link in Moscow’s fuel network

Volodarskaya is connected to Moscow’s ring petroleum-products pipeline, through which petrol, diesel and aviation kerosene can be moved between refineries, storage facilities and major consumers.

Its importance is documented by Transneft itself. In 2024, the company said it had returned a 32-kilometre petroleum-products pipeline between the Moscow refinery and Volodarskaya to operation as part of a project to increase fuel deliveries across Moscow region.

According to the company’s figures, the project allowed aviation-fuel deliveries to Moscow’s airports to rise almost twofold, to as much as three million tonnes a year. Potential diesel deliveries to Moscow region consumers increased to 2.8 million tonnes annually, while petrol volumes reached 1.6 million tonnes. Transneft specifically identified Vnukovo, Domodedovo and Sheremetyevo as airports supplied through the expanded system.

Transneft has also expanded storage at Volodarskaya. The company previously said it had commissioned additional petroleum-product tanks at the station to support fuel supplies to Moscow and aviation-fuel transportation to the capital’s airports.

Those figures do not mean that every litre of fuel consumed by Moscow depends on Volodarskaya. Russia can move petroleum products by rail and road, and the Moscow region has other storage and distribution facilities. But replacing pipeline volumes on the scale handled by the Moscow system would place additional demands on those alternatives, particularly if disruption were prolonged.

The attack also follows repeated Ukrainian strikes against refining infrastructure supplying European Russia. On 20 September, EU Today reported that a mass drone attack had hit the Moscow Oil Refinery at Kapotnya, one of the main fuel-processing plants serving the capital. The strike reportedly affected its ELOU-AVT-6 primary processing unit, increasing pressure on a refinery that had already been targeted earlier in the year.

The broader campaign has moved beyond individual refineries. Ukraine has increasingly targeted different stages of Russia’s energy system, including storage depots, pumping infrastructure, ports and export terminals. Earlier attacks on the Omsk refinery and Baltic export infrastructure illustrated Kyiv’s effort to put pressure on both domestic fuel processing and the logistics through which Russian oil reaches international markets.

That approach is intended to force Russia to repair several parts of the system simultaneously rather than simply compensate for the temporary loss of production at one refinery. EU Today has previously examined how sustained strikes can put physical pressure on Russia’s oil economy where sanctions alone have limits.

President Volodymyr Zelenskyy said on 3 October that Ukraine intended to intensify attacks on Russian oil refineries in response to Moscow’s continuing strikes against Ukrainian cities, while maintaining that Ukrainian operations would not deliberately target civilians.

Volodarskaya adds another element to that campaign. A refinery converts crude oil into usable fuels; a pumping and storage station determines how those products reach consumers. Damaging one without the other may create disruption that can be bypassed. Sustained damage to both processing and distribution infrastructure is more difficult to compensate for.

Much therefore depends on what happened inside Volodarskaya overnight. If the damage is confined to several storage tanks, the Moscow fuel network may be able to absorb the loss. Damage to pumping installations or pipeline connections would have wider consequences, particularly if the facility is attacked repeatedly.

The strike nevertheless demonstrates that a fuel installation closely connected to Moscow’s aviation and transport system can be reached despite the dense air-defence network surrounding the capital. The scale of its effect will become clearer once satellite imagery and operational information show which parts of the Volodarskaya complex were actually damaged.

EU foreign policy chief Kaja Kallas has warned that Russia is intensifying hybrid operations across Europe, citing sabotage attempts, airspace violations and Russian drones and missiles crossing into Moldovan territory.

Her intervention adds pressure for a more coordinated European response to hostile activity below the threshold of conventional warfare.

Russia is putting lives at risk across Europe through an expanding campaign of hybrid activity, EU foreign policy chief Kaja Kallas said on Monday, after another series of Russian drones and missiles entered Moldovan airspace.

Speaking in Brussels alongside Moldovan Prime Minister Vasile Tofan and Enlargement Commissioner Marta Kos, Kallas said Europe had experienced an increase in sabotage attempts and airspace violations during recent weeks.

“Russian missiles and drones violated Moldovan airspace again over the weekend,” she said, describing the incidents as unacceptable.

According to the official EU record of the press conference, Kallas said the Kremlin was seeking to create fear and interfere with European decision-making, and argued that the response should include greater resilience and continued support for Ukraine.

Her remarks follow Russia’s renewed large-scale attacks against Ukraine’s energy system and continued reports of drones crossing borders beyond Ukrainian territory.

Moldova’s defence authorities reported that three drones entered Moldovan airspace during Russia’s 30 September attack on Ukraine. Moldova, which shares a long border with Ukraine and is seeking EU membership, has repeatedly accused Moscow of attempting to destabilise the country.

The latest incidents broaden a European debate that has been developing for months: how governments should respond to hostile operations that are deliberate and potentially dangerous but fall short of an overt military attack.

EU Today reported on 28 September that European governments were discussing an emergency security protocol intended to improve coordination when member states face sabotage and other hybrid threats.

That followed earlier warnings concerning suspected attacks on infrastructure, cyber operations, interference campaigns and airspace violations across several European countries.

The problem is partly one of attribution and partly one of thresholds.

A conventional armed attack on a NATO member may trigger consultation under Article 4 or, in sufficiently serious circumstances, collective defence provisions under Article 5. The European Union also has its own mutual assistance provision under Article 42.7 of the Treaty on European Union.

Hybrid activity is frequently designed to remain below those thresholds.

Cyberattacks, covert sabotage, GPS interference, disinformation, drones and operations conducted through intermediaries can impose costs without giving governments an obvious basis for a military response.

Kallas’s warning comes as Germany has also reported an increase in activity it attributes to Russia.

Chancellor Friedrich Merz has warned that Germany faces growing hybrid pressure involving drones and cyber operations. European security services have separately investigated suspected Russian involvement in sabotage and attacks on infrastructure in several countries.

Moscow has denied Western accusations that it is directing such operations.

The EU has already used sanctions against individuals and entities accused of Russian hybrid activity, while governments are considering faster systems for sharing intelligence and attributing incidents.

EU Today examined the debate in September as the European Parliament considered proposals for quicker attribution, stronger intelligence-sharing and improved protection of critical infrastructure.

Moldova occupies a particularly exposed position.

The EU has provided €317 million through the European Peace Facility for Moldovan defence modernisation, according to Kallas, including €120 million allocated in 2026 for air defence. Brussels is also supporting Moldova through its EU Partnership Mission, which provides assistance against hybrid and cyber threats.

Unlike Ukraine, Moldova is not a NATO member and has constitutional neutrality. Its ability to counter Russian missiles or drones entering its airspace is therefore closely connected to the development of its own detection and air-defence capabilities.

For the EU, repeated incidents involving Moldova, NATO airspace and European infrastructure are increasingly being considered as parts of the same security problem rather than isolated events.

German Chancellor Friedrich Merz has announced a new package worth more than €1.3 billion for Ukraine during a visit to Kyiv, combining additional military assistance with support for the country’s damaged energy infrastructure as German-Ukrainian industrial co-operation expands.

Merz visited the Ukrainian capital on Sunday while Russian drone attacks continued against Kyiv.

According to the Ukrainian presidency’s account of the meeting, the package includes more than €1 billion for defence and additional financing for the energy sector ahead of winter. Separate reporting put the energy component at approximately €350 million.

The visit also produced an extensive group of bilateral agreements involving governments and companies.

President Volodymyr Zelenskyy said Ukraine and Germany had concluded 15 agreements and documents, most concerning security co-operation, production, procurement, orders for German industry and joint projects in Ukraine. He put the total value of the agreements reached during the visit at more than €8.5 billion.

A narrower set of industrial agreements reported during the visit was valued at about €6.6 billion and included air-defence, radar and drone projects.

The visit went beyond another transfer of military aid.

Germany and Ukraine are increasingly constructing a defence relationship based on procurement, industrial production and the transfer of Ukrainian battlefield experience to European manufacturers.

At the Ukrainian-German Business Forum, Zelenskyy said the new security package would strengthen Ukraine’s armed forces immediately while industrial agreements were intended to build longer-term production capacity.

The direction corresponds with a wider shift in European support for Ukraine.

Military assistance is increasingly moving away from transfers of existing national stocks towards contracts financing new weapons production. In July, the EU released €3.47 billion for Ukrainian defence procurement, including financing intended for drones, missiles, air defence and combat aircraft requirements.

Kyiv has since asked European partners to accelerate further financing as the demands of the war outpace scheduled disbursements. EU Today reported in September that Ukraine was seeking early access to part of its 2027 EU funding to close a military budget gap.

The German agreements add a bilateral industrial track to that European system.

They also reflect changes on the battlefield.

Russia has continued to expand large-scale drone and missile attacks, increasing the importance of interceptor production, radar coverage and lower-cost methods of destroying unmanned aircraft. Ukraine’s air-defence problem is increasingly an industrial one: inexpensive attack drones cannot sustainably be countered only with scarce and costly surface-to-air missiles.

EU Today has previously examined how Ukraine’s air-defence battle has become an industrial equation, determined as much by production rates and cost ratios as by the technical performance of individual systems.

German-Ukrainian co-operation is increasingly being shaped by that requirement.

Merz has presented continuing support for Ukraine as a direct German and European security interest, rather than assistance based solely on solidarity with Kyiv.

The argument has acquired greater force as German authorities investigate Russian-linked sabotage and hybrid operations on German territory.

In September, investigators reportedly traced the attempted bombing of a Ukrainian cargo aircraft at Leipzig/Halle Airport to a suspected Russian military-intelligence organiser, with EU Today reporting details of the alleged GRU-linked logistics network.

For Berlin, support for Ukraine is now increasingly seen as part of Germany’s own security.

Merz’s visit also carries a domestic political dimension. His government is committing Germany to considerably higher defence expenditure at a time when the CDU has suffered severe electoral setbacks in eastern Germany and voters remain concerned over public finances and economic performance.

Yet Germany’s military and industrial engagement with Ukraine is continuing to expand.

The new package announced in Kyiv is important in itself, particularly as Ukraine prepares for another winter of Russian attacks on its energy infrastructure. The wider development, however, lies in the growing number of defence-production agreements accompanying it.

European governments have spent much of the war debating how to replenish their own weapons stocks while sustaining Ukraine.

The German approach increasingly points towards a different model: Ukrainian operational experience, Ukrainian procurement requirements and European industrial capacity being brought into the same defence-production system.

Two Iranian nationals have been charged with terrorism offences over an alleged plot targeting the Jewish community in Manchester, with investigators accusing them of researching potential targets and obtaining instructions and materials for an improvised explosive device.

Rahman Salehi, of Salford, and Salam Ahmadyan, 36, of Liverpool, were charged on Friday, 2 October, with engaging in conduct in preparation for terrorist acts, contrary to Section 5 of the Terrorism Act 2006.

According to the Metropolitan Police announcement detailing the charges, both men are Iranian nationals and were arrested in Manchester on Sunday, 20 September.

They have been remanded in custody and are due to appear at Westminster Magistrates’ Court on Saturday, 3 October.

The arrests followed what police described as a long-running counter-terrorism investigation into a suspected plot directed against the Jewish community in the Manchester area.

Police allege that the two men were communicating with a third person overseas who may have been in Iran. No allegation has been made in the charges released so far that the Iranian government directed the suspected plot.

The particulars published by Counter Terrorism Policing allege that Salehi and Ahmadyan used encrypted communications and obtained material containing instructions for manufacturing an explosive device.

Investigators say the men acquired instructions relating to a device using powdered chlorine and vehicle brake fluid, along with video material concerning the manufacture or assembly of an improvised explosive device.

They are further accused of acquiring liquids, components and equipment, researching potential targets, obtaining images, maps and plans, and carrying out reconnaissance at locations considered as possible targets.

The Crown Prosecution Service confirmed that prosecutors had authorised charges after reviewing evidence gathered during the investigation.

Frank Ferguson, Chief Crown Prosecutor for the CPS Special Crime and Counter Terrorism Division, said prosecutors had concluded that there was sufficient evidence for the case to be put before a court.

The CPS stressed that the proceedings are now active and that both men have the right to a fair trial. The charges are allegations and no finding of guilt has been made.

Arrests during Jewish High Holy Days

The arrests took place shortly before Yom Kippur, the holiest day in the Jewish calendar, and came amid heightened security surrounding Jewish institutions in Britain.

Deputy Assistant Commissioner Vicki Evans, Senior National Coordinator for Counter Terrorism Policing, said the investigation had disrupted what police believed to be a plot targeting Manchester’s Jewish community.

The timing is particularly sensitive because it comes one year after the terrorist attack at the Heaton Park Hebrew Congregation synagogue in Manchester on 2 October 2025.

Two worshippers were killed in that attack, which took place on Yom Kippur. EU Today reported at the time on the Manchester synagogue attack and the security concerns facing Britain’s Jewish population.

The latest case also comes against the background of a series of alleged Iranian-linked threats and attacks involving Jewish and Israeli targets in Britain.

British security agencies have repeatedly warned about Iranian activity on UK territory. The government said earlier this year that more than 20 potentially lethal Iran-backed plots had been tracked by British security agencies over the preceding year.

Concerns intensified following attacks on Jewish-linked premises during 2026. In July, the government imposed sanctions on an Iran-linked organisation that had claimed responsibility for attacks on Jewish and Israeli-linked locations.

The group, the Islamic Movement of Companions of the Right, was subsequently designated under Britain’s new state-threat legislation alongside Iran’s Islamic Revolutionary Guard Corps.

EU Today has previously examined Iran-linked security threats in Britain following counter-terrorism arrests involving Iranian nationals, as well as alleged Iranian-linked plots targeting Jewish institutions elsewhere in Europe and North America.

Britain expands protection for Jewish communities

The Manchester case comes as the British government increases security around synagogues, Jewish schools and community centres.

In July, ministers announced more than £250 million in additional funding over three years to strengthen protection for Jewish communities.

The package includes funding for more than 500 additional police officers across England and Wales, including around 80 officers in Greater Manchester, as well as additional resources for Counter Terrorism Policing.

The UK’s national terrorism threat level was raised to severe in April, meaning that an attack is considered highly likely. The government said the decision reflected both an increased threat from Islamist and extreme-right terrorism and a wider background of state-linked physical threats against the Jewish community.

EU Today has also reported on the government’s £250 million programme to strengthen Jewish community security and the broader increase in antisemitic incidents and violence affecting Jewish communities across Britain.

The allegations against Salehi and Ahmadyan will now be considered by the courts. Prosecutors have warned against publishing material that could prejudice the proceedings.