Escalation watch › Hybrid & sabotage › H05

Central and southern Adriatic and Western Balkans

H05 · Both · checked 2026-11-09 · reviewed Every run · quick scan

Montenegro's security services detained Mikhail Zvinchuk, who runs the Rybar Telegram channel - one of the Russian-side sources this tracker reads - along with associates. According to Vijesti, the services had received information about their arrival and had…

Escalation signal

Kinetic or sabotage incidents at Bari, Brindisi, Durres, Vlora, Bar, Tivat, Split, Ploce or Dubrovnik; damage to undersea cables or the Adriatic energy links; incidents in the Strait of Otranto; naval deployments into the southern Adriatic. Politically: a Republika Srpska secession move, deployment or reinforcement of EUFOR Althea, or unrest requiring KFOR reinforcement.

Baseline (21 Sep 2026)

No maritime or sabotage incidents found in the central/southern Adriatic in 2026. The risk here is political rather than kinetic: Bosnia has had no High Representative since Christian Schmidt's mandate ended in June 2026, and the deadlock over his successor in the UN Security Council has opened a legal vacuum that strengthened Republika Srpska secessionist narratives ahead of local elections. An RS delegation incl. Dodik met Putin and Lavrov in Moscow in May 2026; US Treasury lifted sanctions on Dodik in late 2025 while Congress legislated new Western Balkans sanctions authority. Ports Durres, Vlora and Bar are NATO's southern Adriatic logistics hubs, and NATO Corridor 8 is meant to link the Adriatic to the Black Sea. Montenegro hosted the EU-Western Balkans summit in Tivat (Jun 2026) focused on resilience against hybrid influence.

Where to check

Situation Room (Euro-Atlantic Council of Slovenia)VijestiKlixBalkan Insight (BIRN)Analisi DifesaMarineTraffic

Check log

• 2026-10-211A PROMINENT RUSSIAN MILBLOGGER DETAINED IN A NATO MEMBER. Montenegro's security services detained Mikhail Zvinchuk, who runs the Rybar Telegram channel - one of the Russian-side sources this tracker reads - along with associates. According to Vijesti, the services had received information about their arrival and had been monitoring their movements for several days. Rybar is among the most influential Russian military-analytical channels and has been sanctioned by the EU and others for information operations. WHAT IS NOT ESTABLISHED: the grounds for detention, whether charges follow, and whether this is a Montenegrin initiative or a coordinated allied action. Logged here because the Western Balkans is where Russian influence operations and NATO membership overlap most directly, and because a sanctioned information operator travelling into a member state is itself a datapoint about freedom of movement in the region. Score holds at 1. TO VERIFY NEXT RUN: Montenegrin prosecutors' statements, whether Zvinchuk is charged or expelled, and Russian official reaction. Sources: Vijesti via TASS.
• 2026-10-011CHECKED, NO CHANGE (1) - cluster sweep. No maritime or sabotage incidents found in the central or southern Adriatic. Regional alignment is hardening into blocs rather than incidents: a Croatia-Albania-Kosovo defence declaration on one side, a Serbia-Hungary military cooperation agreement on the other. That is a political fault line to watch, not escalation.
• 2026-09-301CHECKED, NO CHANGE (1). No maritime or sabotage incidents found at Bari, Brindisi, Durres, Vlora, Bar, Tivat, Split, Ploce or Dubrovnik, nor in the Strait of Otranto. Risk remains political (BiH vacuum, RS secessionism) plus a general Mediterranean drone warning naming Spain, France and Italy rather than the Balkan coast.
• 2026-09-271CHECKED, NO CHANGE (1). No maritime or sabotage incidents found at Bari, Brindisi, Durres, Vlora, Bar, Tivat, Split, Ploce or Dubrovnik, and none in the Strait of Otranto. The risk here remains political (BiH vacuum, RS secessionism) plus a general Mediterranean drone warning that names Spain, France and Italy rather than the Balkan coast.
• 2026-06-301Baseline set. High Representative Schmidt's mandate ends with no successor confirmed; UNSC deadlock opens a legal and political vacuum in BiH, raising security risks and emboldening secessionist narratives. EU-Western Balkans summit in Tivat addresses hybrid influence. No Adriatic maritime incidents found. Sources: Situation Room June/July 2026, EUISS Western Balkans analysis, Atlantic Council.
• 2026-06-211Croatian analysis of the region's security profile: the Adriatic is effectively a NATO lake with a very low probability of conventional war, but hybrid conflict and non-military threats (smuggling, trafficking, drone-enabled crime) are the likely scenario; counter-drone protection is judged a top priority that Croatia does not currently have, and the EUR 1.6bn purchase of two corvettes is criticised as defence against non-existent threats. Useful as a local baseline for what the southern Adriatic actually faces. Source: Telegram.hr.
• 2026-05-091Republika Srpska delegation (Dodik, Karan, Stevandic) attends Victory Day in Moscow, meets Putin and Lavrov; Moscow reaffirms partnership with the Serb entity. Source: Euro-Atlantic Council of Slovenia, Situation Room May 2026.