Coffe Report @CoffeReport

@AirAssets @Etienne_Marcuz Scheduled NOAA Flight - flew that same-ish path August 27th

keyboard_arrow_left Previous keyboard_arrow_right Next

@AirAssets Could this just be NASA’s SABRE 2026 deployment rather than anything missile-related? N926NA is currently operating from Panama for the NOAA/NASA atmospheric research campaign, and NASA publicly lists today’s sortie.

UPDATE: The Berlin government cyberattack has now escalated into a major security incident. Around 5.8 TB of stolen government data - reportedly some 1.44 million files - has been published after Berlin refused to pay the Rhysida ransomware group. German federal authorities are now involved, including the BSI, BKA and domestic intelligence service, with information being coordinated through the national Cyber Defence Centre. Initial reporting indicates the leak includes personnel files, ID scans, credentials, government contracts and potentially sensitive material relating to critical infrastructure, including assessments concerning Berlin’s drinking-water system. The federal government is also reviewing potential security implications and says measures will be taken where necessary to safeguard military security. Berlin now describes the incident as an “extremely serious crime” and an attack on the state itself. Important caveat: authorities still assess Rhysida as primarily criminal and financially motivated. There is currently no public evidence that the original attack was directed by a foreign state. But once this volume of government data is public, who carried out the original intrusion and who may subsequently exploit the material are two separate questions.

Coffe Report @CoffeReport

16 hours ago

The Berlin government cyberattack appears to be more serious than initially thought. After Berlin refused to pay a roughly €2m ransom, the Rhysida group published the stolen data online. BILD reports that the leak includes building plans, emergency-response material and a

1 15 70 6K 11

STILL WANTED: German police are continuing their search for the 48-year-old suspect linked to the recent power-grid sabotage cases. The genuinely new part: information contained in his claim-of-responsibility letters has reportedly led investigators to similar devices at two additional substations in Saxony. Authorities currently suspect a climate-extremist motive, but have not established that he personally carried out all of the attacks. Foreign-state involvement has not been formally ruled out.

NEW: Around 50 people in or around the U.S. Joint Staff were reportedly polygraphed in August as part of an unusually broad leak investigation. The probe followed media reports on sensitive U.S. weapons stockpiles and munitions use during the Iran conflict. CBS says personnel from CENTCOM and other combatant commands were also tested. None reportedly failed the leak-related questions. The Pentagon has not publicly confirmed the full scope of the investigation.

The Berlin government cyberattack appears to be more serious than initially thought. After Berlin refused to pay a roughly €2m ransom, the Rhysida group published the stolen data online. BILD reports that the leak includes building plans, emergency-response material and a folder relating to CBRN planning - chemical, biological, radiological and nuclear hazards. Important distinction: this does not mean “nuclear secrets” were stolen. The material appears to concern civil protection and emergency planning, although the full sensitivity of the leaked files is still being assessed. Berlin had already acknowledged that security-relevant information concerning critical infrastructure may have been compromised. There is currently no public evidence linking the attack to Russia or another state actor; German authorities have described Rhysida as financially motivated ransomware.

dr.dk/nyheder/indlan…

NEW: Danish police have imposed a temporary restriction on drones and smaller aircraft over large parts of Copenhagen today for Denmark’s annual Flag Day. What makes this noteworthy is that, according to DR, this has never previously been done for Flag Day. Copenhagen Police only impose this kind of airspace restriction relatively rarely - typically for major security-sensitive events, such as visits or summits involving heads of state and government. Police say today’s restriction was introduced for security reasons and to allow them to operate in the airspace themselves. There is currently no public indication of a specific threat behind the decision.

A remarkably effective “lone wolf,” if that assessment holds. Worth remembering, though: a genuine climate-extremist motive would not automatically rule out outside encouragement or manipulation. PET in Denmark has specifically warned that Russia recruits proxies who may not even know who ultimately benefits from their actions.

Faytuks Network @FaytuksNetwork

a day ago

German Interior Minister Alexander Dobrindt says authorities believe “climate extremism” was the motive behind the recent attacks on power substations in North Rhine-Westphalia, with initial investigations pointing to a lone perpetrator. - Tagesschau

14 42 281 45K 34

nyheder.tv2.dk/samfund/2026-0…

Quite a remarkable story from Denmark tonight: Children attending the Russian Embassy school in Copenhagen are reportedly being taught about Kalashnikov rifles, hand grenades and the “defence of the motherland” as part of a curriculum set in Moscow. The school is run under Russia’s Foreign Ministry and appears to follow the increasingly militarised curriculum introduced in Russian schools since the invasion of Ukraine. Not evidence of military recruitment - but a striking example of how Moscow’s wartime education system extends beyond Russia itself.

welt.de/vermischtes/kr…

UPDATE: German police have located and stormed the vehicle of the 48-year-old suspect in the recent power-grid sabotage cases - but he was not inside and is now being sought on foot. Investigators also found explosives at his home in Gevelsberg. Authorities currently say the evidence increasingly points toward a lone perpetrator with a possible climate-extremist motive.

BREAKING: German police are searching for a man after investigators assessed letters claiming responsibility for several recent power-grid sabotage incidents as AUTHENTIC. The letters reference Jänschwalde, Bergheim, Dormagen and Weisweiler, and contain details believed to indicate perpetrator knowledge. Police are now searching around the Weisweiler power plant after it was specifically mentioned. Authorities have not yet confirmed that the wanted man actually authored the letters or carried out the attacks.

UPDATE: This appears to be the publication Marats Kasems was teasing yesterday. Latvian pro-Kremlin activist Viktors Guščins has been released from pre-trial detention after around nine months, despite prosecutors raising concerns that he could flee to Russia. Guščins is accused of violating EU sanctions by providing material to a Russian propaganda outlet. Kasems also points out that the judge, Diāna Dzērviniece, previously handed a suspended sentence to Valērijs Lazarevs for attacking a young man wearing a Ukrainian flag - although an important caveat is that prosecutors had also requested a suspended sentence in that case. The sentence was later overturned on appeal and replaced with two years in prison.

Coffe Report @CoffeReport

2 days ago

Worth watching tomorrow morning: former Sputnik Lithuania editor Marats Kasems says he is preparing a “very important publication” and that what he found was “even worse” than he had imagined. Kasems previously worked inside Russia’s state media system and has since spoken

2 16 113 10K 37

@MoPo_overhere Ofc: welt.de/vermischtes/ar…

UPDATE: German police are reportedly searching for a man from Gevelsberg, NRW, after a claim-of-responsibility letter linked to the recent attacks on power infrastructure. The letter also reportedly referenced other possible sites, prompting checks at a substation in Weisweiler. Important caveat: police have not yet confirmed the letter’s authenticity or that the named man is actually responsible.

SVF680 and BRIO66 are racking up some serious ISR hours at this point 😂 Though, to be fair, the crews obviously rotate - the aircraft themselves are certainly getting plenty of work.

Yeah, I do sometimes. When you follow this stuff closely every day, it can be hard not to feel a bit uneasy about where things are heading. At the same time, I try to keep some perspective - X is an algorithm feeding us this stuff. A lot of what we see is worrying, but that doesn’t mean the worst-case scenario is inevitable. And honestly, stepping away from the news for a while now and then really helps. Talk to your friends - I'm sure most of them have no idea that a lot of this stuff is going on. Not too personal at all, by the way - it’s a fair question.

NEW(ish): Poland is expanding the protection of its airspace and increasing the activity of its air forces, including F-16s and helicopters, following what Defence Minister Władysław Kosiniak-Kamysz describes as recent Russian “provocations and acts of aggression.” He says recent weeks have shown that Russian provocations can pose threats in areas previously considered safe. Poland is also strengthening its ability to rapidly respond to threats across the country.

Władysław Kosiniak-Kamysz @KosiniakKamysz

2 days ago

Po ostatnich rosyjskich prowokacjach i aktach agresji podjąłem decyzję o poszerzeniu ochrony naszej przestrzeni powietrznej. Zwiększamy aktywność naszych sił powietrznych, w tym samolotów F-16 oraz śmigłowców. Ostatnie tygodnie pokazały, że prowokacje ze strony Rosji przybierają

340 237 1K 127K 37

DEVELOPING: Police have also sealed off a substation in Ganderkesee, Lower Saxony, following what authorities currently describe only as “suspicious circumstances.” A police helicopter has been deployed and the area remains secured. Important: sabotage has not been confirmed there at this stage.