U.S. intelligence assessments indicate Russian President Vladimir Putin may authorize increased hybrid operations, including cyberattacks and sabotage, targeting NATO territory to test alliance unity and the incoming Trump administration's response. Specific incidents cited include a Russian-origin explosive drone at Leipzig airport, incursions into Romania, and a missile crossing into Poland, alongside a broader rise in suspected sabotage. These reports reflect a change in Putin's risk tolerance compared to recent months, though independent verification of attributions remains limited.