The Alfa Watan, a ship sailing under the flag of Togo, and the Able, a vessel flying the flag of Palau, were targeted by naval and aerial drones on Tuesday (6 October) morning in the Black Sea near the Bulgarian coast.
The Alfa Watan sank, and rescuers at the scene found only an overturned boat, life jackets, and fragments of the ship’s equipment, according to Bulgarian prime minister Rumen Radev.
The 18-member crew of the Able caught fire, but was successfully evacuated to the port of Varna.
“This is an unacceptable attack in Bulgaria’s exclusive economic zone,” Radev said after an emergency government meeting on Tuesday.
Bulgaria had discussed the drone attack inside the EU and Nato, he added.
It came after a drone also sank a Turkish-owned grain ship, the Royad Mammadov, killing two sailors, on Monday.
But even though Ukraine’s president Volodymyr Zelensky was quick to blame Russia, the perpetrators have not been formally identified yet, in a grey-zone conflict in which deniability is a tactic.
Russia and Ukraine have been escalating attacks on ships for several months in an effort to disrupt each other’s export economies.
And Moscow’s attacks have largely halted Ukraine’s maritime exports of agricultural products, while Kyiv’s attacks have forced Russia to seek alternative routes for exports.
“The situation in the Black Sea is increasingly concerning,” said EU Commission’s president Ursula von der Leyen on X on Tuesday.
Ukraine has “proposed concrete steps to de-escalate the situation”, also said Zelensky.
But for all his good will, the attacks were just part of a broader deterioration in Europe’s security environment, covering also Nato’s eastern and southern borders.
‘Shadow war’
For Czech president Peter Pavel, speaking to Czech daily Deník N on 22 September, the most imminent danger came from a false-flag attack in Estonia or Latvia, to test Nato’s resolve.
This article continues, but the full version is available only to EUobserver.com subscribers. Visit account.euobserver.com/membership
What Ukrainian officers say about the changes brought by the new commander-in-chief, Mykhailo Drapatyi.
He has appointed people in their thirties and forties to important positions, often those who did not suit Syrskyi.
According to Ukrainska Pravda, Ukrainians are preparing a war plan to clarify the Ukrainian army’s long-term objective.
Russians attacked Ukrainian cities during Putin’s birthday, damaging apartment blocks and killing at least 11 people.
Charts of the day: How far production at Russian refineries has fallen; exports of oil and oil products have declined, but Trump is indirectly keeping profits from them high.
Videos of the day: a blazing sunset in Sochi; the music plays on; an unmanned Humvee; a robot’s duel with a drone; what the road to Crimea looks like.
Two and a half months have passed since major general Mykhailo Drapatyi became commander-in-chief of Ukraine’s armed forces. That may not be enough time for major reforms. But in recent days, articles have begun to appear about how the new commander is trying to change the Ukrainian army.
Unlike his predecessor, Oleksandr Syrskyi, Drapatyi does not promote himself much on social media. He has not made a single Facebook post since July, and his Telegram profile has similarly remained silent.
Ukrainska Pravda journalist Olha Kyrylenko tried to fill this “information vacuum”. She spoke with around 20 senior officers in the Ukrainian army.
Based on their anonymous testimonies, she sought to convey how Drapatyi had changed the Ukrainian army over those two and a half months.
The army is currently performing well at the front: Russians are suffering heavy losses and advancing very slowly, if at all. The protection of military, industrial and civilian sites in the rear against Russian air attacks is worse.
The article she wrote presents Drapatyi in a very positive light. According to Kyrylenko, the first word brigade and corps commanders use to describe the changes he has brought is “freedom”.
Drapatyi gives units considerable freedom and does not seek to micromanage everything at the front, as Syrskyi did.
“Unlike his predecessor, who told some brigade commanders how and where they should fight — and even specified the coordinates where they should establish a position — Drapatyi chose a different approach. He decided to decentralise command and abandon ‘micromanagement’,” Kyrylenko wrote.
Drapatyi is not as concerned with what is happening on each section of the front. He is more interested in statistics, analyses and the broader picture of the war.
“Syrskyi listened to reports from everyone every day and could give specific instructions on how to respond to developments, including where units should advance. Drapatyi does not do this; it is the task of the commanders of military groupings. Drapatyi focuses on strategic and systemic issues,” an unnamed senior military officer told Ukrainska Pravda.
The newspaper also adds that Drapatyi travels to visit units less frequently.
After taking up the post of commander-in-chief, he made several personnel changes. Broadly speaking, he is promoting younger commanders proven in the current war to replace older officers of the old Soviet school.
By contrast, he is moving the latter to rear-area and training roles, or they are retiring.
They are being replaced by younger commanders; Drapatyi himself is only 43. For example, Denys Prokopenko, a general with a far-right past, was put in charge of the important area near Dobropillia, where Russians are currently exerting the greatest pressure, despite being only 35.
Drapatyi has also rehabilitated some commanders who fell out of favour with the command under Syrskyi because of their criticism. One example is Serhii Sobko (42), who resigned last year from command of a brigade after the high command refused to send him reinforcements and would not allow his units to withdraw from a threatened area. Drapatyi appointed him as his deputy.
Emil Ishkulov (39), meanwhile, was sidelined after criticising the previous command over the campaign in the Kursk region, which ultimately ended with the withdrawal of Ukrainian soldiers. Drapatyi made him commander of the 11th Army Corps.
Ukrainska Pravda mentions an example from early summer under Syrskyi, when the 7th Corps was moved from Dobropillia to the Belarusian border in the Volyn region. The command said this would deter a possible Russian attack from Belarus.
After taking office, Drapatyi reversed this decision and sent the corps to defend the Zaporizhzhia region. The units themselves said they had had nothing to do at the Belarusian border for two weeks.
Ukrainska Pravda writes that a war plan is being prepared under Drapatyi. It is intended to define the Ukrainian army’s real long-term objectives and how to achieve them in this war.
“We need a grand strategy for 30 years, so that we as commanders know where we should be heading,” one of the corps commanders said, according to Ukrainska Pravda. The National Security and Defence Council is currently working on the plan.
Journalist Kyrylenko says this is probably the first such plan. However, the Thornpill account wrote that similar plans had already been prepared in 2017 under General Valerii Zaluzhnyi.
The Kyiv Post also published an article headlined that Ukraine’s army is winning under Drapatyi.
“Drapatyi is reshaping Ukraine’s armed forces to focus on drone-intensive warfare, decentralised command and younger combat commanders,” it wrote.
However, the steps taken by the previous command have also had a major influence on the current situation. For example, Operation Vivaldi, through which Andrii Biletskyi’s 3rd Army Corps has been liberating territory north of Lyman, has been under way since May, although its results are only being published now.
Ukrainska Pravda also recalls that Syrskyi handed Drapatyi an army in a better position than the one he had “inherited” in 2024 from the dismissed General Zaluzhnyi. At that time, the Russians were advancing rapidly and captured Avdiivka, for example.
The current commander-in-chief had an “easier start” in July.
“Drapatyi took office at a time when the front had been relatively stabilised, with Ukrainian armed forces even holding the advantage on the battlefield in some places. According to Ukrainska Pravda’s sources, the corps reform initiated by Syrskyi played a key role in this. Not all corps managed to develop into strong units, but the 3rd Corps, for example, substantially strengthened and literally retrained the relatively weak brigades it had received for combat duty,” Ukrainska Pravda added.
Nevertheless, several Western analysts shared the current reports about Drapatyi’s initial changes, especially his granting greater freedom to commanders. “It is a pity that Syrskyi was not replaced by Drapatyi much earlier — Ukraine would be in a better position now,” said Jakub Janovský, an OSINT analyst at Oryx, for example.
Russia again attacked Ukraine overnight into Wednesday. This time, it deployed at least five ballistic missiles, nearly 50 cruise missiles and 130 drones, 46 of them jet-powered. The fairly respectable 83-percent interception rate for jet-powered drones is noteworthy.
However, Russian missiles and drones also struck several locations and residential buildings. “Today, on Putin’s birthday, the Russian army ‘gave’ him the destruction of a residential building in Pryluky, in the Chernihiv region. It was an ordinary five-storey building. Unfortunately, according to current information, five people were killed and 26 injured, including five children. People may still be trapped beneath the rubble,” Ukrainian President Volodymyr Zelensky said.
The Russian attack damaged five apartment blocks in Dnipro and four in the city of Kremenchuk. This is what the situation in Kremenchuk looked like.
This is my hometown in the video, and today it suffered too. This is Kremenchuk – a city in Ukraine whose name doesn't pop up in news feeds very often, but tonight it got hit as well. One of the missiles hit a courtyard between high-rises: windows, cars parked in the yards, and… pic.twitter.com/PeeUkU19dZ
As can be seen in these photographs, a ballistic missile fell in Kyiv but did not explode; Ukrainian bomb disposal experts tried to render it harmless.
An unexploded Russian Iskander 9M723 ballistic missile lies among residential buildings in Kyiv’s Darnytskyi district, where Ukrainian bomb disposal teams are conducting a complex operation to neutralize it.
— Special Kherson Cat 🐈🇺🇦 (@bayraktar_1love) October 7, 2026
Chart of the day
Ukrainians claim that their attacks on refineries have put more than 50 percent of Russia’s oil-processing capacity out of action. Michael Bohnert, an analyst at the RAND think tank, wrote on X that this was not entirely accurate. According to his calculations, current fuel production at Russian refineries stands at 3.22 million barrels per day. Before the war, it was usually around 5.5 million barrels per day, meaning a fall of about 40 percent.
There has also been a monthly decline of 0.36 million barrels per day, apparently owing to the latest attacks on refineries, for example in Moscow and Samara.
Ukraine says its strikes have taken out more than half of Russia’s refining capacity. Live crude runs do not show that.
My bottom-up tracker (41 refineries plus the mini-tail, version 2) puts national throughput at about 3.22 mb/d as of 6 Oct. That is down 0.36 mb/d over the… pic.twitter.com/RhXrzGlnJS
According to Bohnert, this is the third time Ukrainians have managed to reduce Russian oil processing so substantially. There was a drop of around 40 percent last autumn and in July this year. “3.2m barrels per day is roughly the point at which things start becoming uncomfortable for Moscow,” he wrote.
Unlike last year, however, Russia is helping itself through imports. The country, once the world’s third-largest fuel exporter, has sharply curtailed its exports. At the same time, it is partially making up for the shortfall in domestic production through imports.
South Korea is also helping it in this respect. According to information from the Guardian, 176,000 tonnes of fuel, mainly diesel, arrived from South Korea at Russian ports in the Far East in July and August. Seven tankers made a total of 14 voyages to Russia. Three of the tankers are on the European Union’s sanctions list.
Overall, Russia imported 368,000 tonnes of petroleum products by sea in August, a third of them from South Korea. The country, which once supported Ukraine not only verbally but also through non-military aid, is now helping Russia cope with Ukrainian attacks on refineries.
High petrol prices are also working in Russia’s favour. Analysts at the Kyiv School of Economics Institute published a chart showing that Russia exported the least oil and petroleum products in August since 2018. As the final bar in the left-hand chart shows, this was mainly due to a decline in petroleum-product exports.
Nevertheless, revenue from sales remains at last year’s level (the purple line in the left-hand chart). This is mainly due to the rise in their prices on global markets as a result of the US-Israeli war against Iran.
1/9 🛢️ Russia’s crude oil and oil product exports fell to their lowest level since 2018 in August. Despite higher prices, oil export revenues increased by just $0.3B to $13.9B. September Russian Oil Tracker by @KSE_Institute 👉 https://t.co/Rk4hd5OiA6pic.twitter.com/KdVMj4QjVV
This was the sunset seen by residents of the Russian coastal city of Sochi on Tuesday. A tanker sailing under the Liberian flag was burning close to shore. Footage showed that it was ablaze along virtually its entire length.
The Russian Rybar channel wrote that it had been hit by naval drones. It was therefore probably a Ukrainian attack on Russia’s shadow fleet, which exports oil around the world and thereby finances the war.
The oil-laden tanker was travelling from Novorossiysk to India. Local residents reported an explosion and feared that oil would spill into the sea.
🔥🚢 A dramatic view from the Russian Sochi right now, where the burning oil tanker off the port has turned into a massive wall of fire pic.twitter.com/oFKrLRTIuw
— Special Kherson Cat 🐈🇺🇦 (@bayraktar_1love) October 6, 2026
This is a rather surreal continuation of the previous video. A man is playing guitar on the promenade in Sochi while an oil tanker burns behind him, sending up an enormous plume of smoke.
Recorded on October 6, 2026, in Sochi, Russia. A street musician continues to play music on the waterfront while an oil tanker burns offshore in the background. pic.twitter.com/5lcfiOqZD2
Ukrainians are experimenting with remotely controlled vehicles. This video shows how a US Humvee off-road vehicle was converted into a remotely operated ground drone. It was loaded with wooden beams, which it delivered to soldiers building fortifications.
A Ukrainian HMMWV converted into a remotely controlled UGV is being used for frontline logistics, delivering timber for the construction and reinforcement of defensive positions. pic.twitter.com/NxQnuoa6Xf
— Special Kherson Cat 🐈🇺🇦 (@bayraktar_1love) October 7, 2026
This video shows a duel between a Ukrainian robot and a Russian FPV drone. In this case, the robot ultimately won, neutralising the drone by ramming it.
A Ukrainian ground robotic system rammed and destroyed a Russian FPV drone on the Pokrovsk axis. The UGV, operated by the 25th Sicheslav Airborne Brigade of Ukraine’s 7th Air Assault Corps, was returning from a combat mission when the FPV began pursuing it. The operators… pic.twitter.com/dIPGuEMVVC
Ukrainian attacks on the land route to Crimea continue. This is what one of the roads to Crimea currently looks like, with numerous damaged and destroyed lorries visible.
This is only part of the road now referred to as the land corridor to Crimea. Another road has turned into a "road of death" for the Russians. pic.twitter.com/D0fKAXQdGo
By Monday (5 October), Russia had verifiably lost 24,170 pieces of heavy equipment (24,138 on Tuesday, 22 September). Of these, 19,133 (19,105) were destroyed by Ukrainians, 1,003 (1,000) were damaged, 1,194 (1,194) were abandoned by their crews, and 2,840 (2,839) were captured by the Ukrainian army. This includes 4,452 (4,448) tanks, of which 3,357 (3,353) were destroyed in combat.
Ukraine has lost 12,238 (12,175) pieces of equipment, of which 9,633 (9,579) were destroyed, 711 (702) damaged, 695 (695) abandoned and 1,199 (1,199) captured. This includes 1,466 (1,464) tanks, of which 1,126 (1,125) were destroyed in combat.
Note: Neither side regularly reports its fatalities or destroyed equipment. Ukraine publishes daily figures for Russian casualties and destroyed equipment, which cannot be independently verified. This overview uses data from the Oryx project, which has compiled a list of equipment losses documented exclusively by photographs since the start of the war.
US prosecutors say an American forensic tool concealed its Russian owners and its development in Russia.
Used by numerous security agencies in Europe, Oxygen Forensics helps investigators worldwide access data from mobile phones and computers.
Many bodies are now suspending use of the software following recent revelations.
The Slovak interior ministry bought the software in 2018 when links to Russia were not yet publicly known, then renewed the license multiple times. Now, the ministry said IT department officials are investigating the issue.
The tool was also sold to other government bodies across Europe.
Russian ownership via Cyprus
In the US, Virginia-based Oxygen Forensics CEO Lee Reiber was arrested at the end of September, along with Oleg Davydov, one of the Russian owners.
The company was headquartered in the US state of Virginia, appearing American.
According to federal prosecutors in the US, the company hid its Russian ownership through a shell company in Cyprus and that its software was developed in Russia.
Allegedly, this scam helped secure contracts for the forensic tool in the US, UK, Czech Republic, Latvia, Romania, and Slovakia.
Reiber, a 55-year-old American, was arrested in Idaho on Sunday. On Tuesday (22 September), he appeared before a federal court there and was released on bail. He is expected to appear before a federal court in Los Angeles soon.
Davydov, a 52-year-old from Moscow, was arrested on that same day at London Heathrow before he could board a flight to Istanbul. And the US plans to seek extradition. Both face charges of conspiracy to commit wire fraud.
The group of five also owned a Russian company co-founded by Davydov in 2000. Until September 2022, it was called Oxygen Software and now operates under the name MKO Systems.
Its programmers worked in Russia, where the company sold the software under other names. According to investigative files, its clients included Russia’s secret service (FSB), investigative committee (SKR) and interior ministry.
Davydov, the company’s technical director, was responsible for software development. In 2013, he helped establish Oxygen Forensics in Virginia with Reiber joining the company in August 2015.
Prosecutors say that following Russia’s full-scale invasion of Ukraine and US sanctions after, the duo agreed to hide both the real owners and that it was developed in Russia. In March 2022, Reiber became CEO and director.
Then, Russian owners were removed from public company records.
However, investigators said the Russians continued to control the company, making key decisions, determining Reiber’s pay, and outvoting him on the board.
The charges concern the concealment of the software’s ownership and origin in securing public contracts.
A network of deception
Two companies were found to have supplied the Slovak interior ministry with Oxygen Forensic tools.
In 2018, the sale was part of a broader procurement by the ministry for computers, laptops, servers, monitors and printers, ordered from the Czech company Risk Analysis Consultants for €125,000, the forensic tool itself costing €10,000.
The Prague-based company did not respond for comment.
Screenshot of order from 2018 (Source: Slovak interior ministry website)
An invoice issued to the Slovak interior ministry in 2022 by the Slovak company Microcomp–Computersystém indicates the renewal of a licence for this software. At the time, the minister responsible was Roman Mikulec.
Screenshot of invoice from 2022 (Source: Slovak interior ministry website)
The Slovak ministry also ordered a licence renewal in July 2024, under his successor Matúš Šutaj Eštok. Microcomp–Computersystém did not respond for comment.
Interior ministry order with links to Russia. (Source: Slovak interior ministry website)
Authorities warned
On Friday (2 October), the Slovak national security authority (NBÚ) warned of the risks posed by using software from Oxygen Forensics and connected companies such as MKO Systems and Prostranstvo IT.
Their software helps investigators search for and examine data from digital devices. It can process vast amounts of information, including evidence, which makes it important who owns, controls and develops it. According to the NBÚ, this is important both for data protection and for the reliability of analysis results.
The warning came after the US case was made public.
The NBÚ considers links to Russia significant in assessing the security risk, also in view of Russia’s military aggression against Ukraine.
However, the warning itself does not mean that data leaked through the software. US prosecutors explicitly stated that the charges did not concern malicious code or unauthorised access to customer data.
The case concerns the alleged concealment of the software’s ownership and origin. And no court has yet ruled on the case.
“The ministry will proceed in accordance with the recommendations of the National Security Authority,” the Slovak interior ministry said.
The NBÚ recommended that public bodies identify this company’s presence and report it to the authority.
Belgian Green MEP Saskia Bricmont also called for the use of Oxygen to be stopped immediately and for an inquiry into whether sensitive information could have reached Russia after it was found that Romania, Germany, Spain, Italy, Poland and Hungary had purchased the software.
European police shed tool
Several European security agencies are suspending the use of Oxygen Forensics software or taking steps to terminate their contracts after the company’s Russian ties came to light.
The tool was also used by Czech police. Czech security agencies continued to purchase licences for the computer software after 2022, when the full-scale invasion of Ukraine began. Czech authorities are awaiting further information from the United States. For now, they have prohibited software updates.
London’s Metropolitan Police has suspended the use of Oxygen tools and launched a comprehensive review. British police forces, including specialised units, had used the software.
And Latvian police suspended its use and is assessing whether it will continue using it.
Romania’s anti-corruption agency, too, took steps to terminate its contract with the Russia-linked tool.
Login
