The UK Ministry of Defence reported a sharp increase in drone sightings near British military bases, citing 266 incidents last year versus 126 in 2024, and linked the trend to concerns about hostile reconnaissance of sensitive defence sites, including airbases used by the US Air Force. In response, the UK government is moving to expand authorities under the Armed Forces Bill so designated military personnel can directly intervene against threatening uncrewed systems—covering air, land, and submersible drones—without first requiring police involvement.
In Ukraine, SpaceX and Ukrainian authorities implemented an emergency measure to disable unauthorized Starlink terminals being used to control Russian long-range drones, following reports that Russia continued leveraging Starlink-enabled connectivity for strikes deeper inside Ukraine. Ukrainian officials characterized the action as a temporary fix that may also disrupt some legitimate users, while SpaceX and Ukraine pursue a more durable approach to prevent unauthorized use of the satellite service in contested environments—highlighting how commercial communications infrastructure is being exploited as part of drone-enabled warfare and broader hybrid threats across Europe.

Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
7 events from the most recent confirmed update back to the earliest known activity.
A new International Institute for Strategic Studies report said Russia likely conducted a systematic drone-based aerial espionage campaign across 13 European countries. The report documented 144 incidents between August 2024 and February 2026 involving suspected overflights of military sites, airports, ports, and other critical infrastructure, with Germany identified as the most affected country.
Ukraine announced a mandatory verification and registration system for Starlink terminals used by civilians, businesses, and the military. The Ministry of Defense said only verified terminals would remain active in Ukraine, with unregistered devices automatically disconnected, in coordination with SpaceX.
Through the Armed Forces Bill, the UK government proposed allowing authorized service personnel to directly respond to threatening uncrewed systems without first involving police. Defence Secretary John Healey said the government would also invest more in counter-drone technology.
The UK government disclosed that 266 drone incidents were recorded near defense sites in 2025, up from 126 in 2024. The increase heightened concerns about hostile reconnaissance around British military facilities, including airbases used by the US Air Force.
Ukrainian Digital Transformation Minister Mykhailo Fedorov publicly thanked SpaceX President Gwynne Shotwell and Elon Musk for quickly responding to the misuse of Starlink by Russian forces. Officials said the emergency measures were an interim step while a more comprehensive solution was prepared.
After the recent Starlink-equipped drone attack, SpaceX and the Ukrainian government implemented emergency measures to disable unauthorized Starlink terminals operating inside Ukraine. Ukrainian officials said the temporary controls also affected some legitimate users.
Ukrainian officials said they identified a Russian attack drone using Starlink connectivity in late January 2026, confirming that Russian forces had begun using the service for real-time drone control inside Ukraine.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
euronews.al
Open sourcetherecord.media
Open sourcearstechnica.com
Open sourcetherecord.media
Open sourcetomshardware.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.