NextFin News - Polish Prime Minister Donald Tusk warned on Thursday that Russia is planning "hybrid-style" drone and missile strikes against nations supporting Ukraine, including NATO-member Poland, as Moscow's war enters what Warsaw describes as its most crucial phase. The warning, delivered as Russian strikes landed within two kilometers of Polish territory over the weekend, marks one of the most explicit public acknowledgments by a NATO government that Moscow is actively preparing attacks on alliance soil - and it raises a question markets have so far declined to answer: is Europe's security regime permanently broken, or is this just another escalation spike that will fade?
The Warning and What Preceded It
Tusk's Sept. 17 warning did not arrive in a vacuum. It followed a Sept. 13 Russian drone attack on a Kyiv-Warsaw passenger train roughly 2 kilometers - about 1.2 miles - from the Polish border, and a strike on a gas station near the Yahodyn-Dorohusk border crossing. The train attack carried particular weight: a diplomatic train carrying former British Prime Minister Boris Johnson, former Swedish Prime Minister Carl Bildt and ex-CIA chief David Petraeus had passed through the area shortly before the strike. Ukrainian Railways said the diplomatic train could have been the intended target, having departed earlier than scheduled as timetables were adjusted in real time under the constant threat of Russian attack.
Polish officials have been escalating their public language for months. In April, Tusk said a Russian attack on a NATO member state might be a matter of "months" rather than years. In late June, Foreign Minister Radoslaw Sikorski told CBS News he would not rule out a Russian "false flag" operation within the next two years to justify an attack on a NATO state. On Sept. 13, Tusk told defense officials: "The coming weeks and months will be a period of very intense activity on the Russian side, and unfortunately, we cannot rule out that this escalation will also affect our territory."
The alliance's leadership has echoed the concern without matching Warsaw's specificity. NATO Secretary-General Mark Rutte, speaking in Brussels on Sept. 14, said the strikes near NATO territory "again show Putin's desperation and also his desire to sow fear and terror," and pledged that the alliance would increase support for Ukraine while strengthening defenses along its eastern border with Russia. Rutte added that Putin would not succeed in weakening NATO's unity or stopping support for Ukraine.
Poland is not bluffing about readiness. Deputy Defense Minister Cezary Tomczyk told Super Express this month: "We are preparing for war, hoping it never happens." And Poland has already tested the alliance's consultation machinery once: Warsaw invoked NATO Article 4 - the treaty's consultation clause - in September 2025 after Russian drones entered Polish airspace during an overnight attack on Ukraine. The pattern has only widened since: on Sept. 10, Polish Defense Minister Wladyslaw Kosiniak-Kamysz said the Polish army recovered what appeared to be a Russian military drone from the Baltic Sea near the coastal village of Jaroslawiec, extending the arc of incidents from the southern border to the coast.
Behind the public statements sits a stream of private intelligence. Polish officials have said intelligence assessments, including information from a CIA briefing the previous week, indicated that Russia could target border areas and increase sabotage operations in European countries, with the reported aim of discouraging Western countries from continuing their support for Ukraine. On June 30, the Polish outlet Onet, citing sources in the Polish special services, the Defense Ministry and people close to President Karol Nawrocki, reported that U.S. officials had been warning Polish officials that Russia could conduct a limited military provocation against NATO's eastern flank that could include Poland. The Polish sources told Onet that Russia would not launch a conventional full-scale invasion of Poland, but offered several possible limited scenarios.
The Market Has Barely Flinched
Here is the puzzle. A NATO government is publicly stating that Russia is planning strikes on alliance territory, a passenger train was hit two kilometers from the border, and the defense minister says the country is preparing for war. Yet European defense equities - the most direct beneficiaries of any sustained escalation - are trading as if the risk is already old news.
The Select STOXX Europe Aerospace & Defense ETF (EUAD) was up 0.58% at $43.03 on Thursday, but it sits 11% below its 52-week high of $48.44, set in mid-August, and roughly 3% beneath its 50-day average of $44.42. Rheinmetall, Germany's largest defense contractor, traded at €1,016.20, up 0.32%, but down nearly 50% from its 52-week high of €2,008 set in early October 2025 - and still more than ten times its pre-invasion level around €80. Leonardo, Italy's defense and aerospace group, was up 0.54% at €50.69, also well below its 52-week high of €66.26. BAE Systems in London was the outlier, up 0.69% at 2,043 pence and holding just above its 50-day average of 2,035 pence. RENK Group fell 1.67% to €40.04, down more than 55% from its 52-week high of €90.34.
The message from the tape is unambiguous: investors are treating this as a cyclical escalation spike, not a structural break. The rearmament trade peaked months ago. Defense stocks have become a crowded position, and the market is pricing the next move as de-escalation, not war.
Why This Time May Be Different: The Structural Case
The market's complacency rests on a bet that Europe's security shock is cyclical - that after another spike of rhetoric, the baseline returns. That bet is worth interrogating, because the evidence for a structural regime shift is unusually strong.
First, the mechanism has changed. Before 2022, direct Russian military action against NATO territory was generally discussed as a post-Ukraine-war scenario - something that might become plausible only after Russia ended or froze its campaign in Ukraine and rebuilt its forces. The current Polish warnings detach that possibility from the end of the war. Warsaw is now arguing that Moscow is willing to take greater risks while the war is still raging, precisely because it cannot win on the battlefield. That is a qualitatively different risk profile: not a future threat after reconstruction, but a present one born of battlefield frustration.
Second, the casualty math supports the "desperation" framing. Russian forces have suffered roughly 30,000 casualties per month since the start of 2026, with July reaching a record 42,860 - the highest monthly toll since the full-scale invasion began, according to Ukraine's General Staff. August again topped 40,000, and total losses since January have exceeded 300,000. A military absorbing losses at that rate faces mounting pressure to change the strategic equation, and hybrid strikes on NATO supply lines are a low-cost way to test whether Western resolve holds. The summer alone accounted for 124,170 Russian casualties across three months, a pace that no modern European army has sustained without resorting to broader mobilization.
Third, and most importantly for investors, the policy response is already locked in regardless of whether strikes materialize. European governments have committed to defense spending well above the NATO 2% floor, with several moving toward 3% of GDP. Once those budgets are legislated, they do not reverse when rhetoric cools. The defense sector now represents almost 5% of the Morningstar Europe Index - up from a fraction of that before 2022 - and that weight reflects a permanent re-rating of European security policy, not a temporary war premium. The European Defence Agency estimates EU defense spending rose from €218 billion in 2021 to an estimated €381 billion in 2025, a 75% increase in four years, and the European Commission's ReArm Europe plan aims to unlock up to €800 billion in defense investment through 2030.
Fourth, the industrial base has crossed a threshold that makes reversal unlikely. EU ammunition production capacity alone rose from around 300,000 rounds per year in 2022 to an estimated 2 million by the end of 2025 - a pace of expansion that exceeds peacetime growth rates by a factor of three. Once factories are tooled, workforces trained and order books filled for multi-year programs, the political cost of dismantling that capacity exceeds the cost of keeping it. This is not a stockpile-and-pray posture; it is a rearmament cycle with its own momentum.
"If Russia attacked us and we took our gloves off, I think we would defeat Russia quite quickly. We have overwhelming superiority over Russia in air power. General, correct me if I'm wrong, but it's something like 2,500 aircraft," Sikorski said at the Yalta European Strategy meeting in Kyiv on Sept. 12. "Even without the US it's still overwhelming."
He went further on energy targeting: "But if the Ukrainians have knocked out half of Russia's refining capacity in six months, we could do it in six weeks and take out the other half." The remarks drew an angry response from Moscow, with Russian Foreign Ministry spokeswoman Maria Zakharova accusing Sikorski of "Russophobia of the brain."
The Counter-Thesis: The Trade Is Priced, and De-Escalation Is the Base Case
The strongest argument against the structural view is simple: the market has been here before, and the rearmament trade is already fully priced. EUAD roughly doubled from its October 2024 launch level near $24 to its August peak of $48.44. Rheinmetall trades at more than ten times its pre-invasion price. At those valuations, even a genuine increase in threat levels leaves limited upside - and any movement toward a ceasefire framework would trigger a sharp de-rating.
NATO itself is signaling restraint. Alliance officials have repeatedly said they see no imminent threat of a Russian attack; the Sept. 14 statements framed Russia's actions as desperation, not preparation for a broader war. Polish officials have stressed they do not expect a full-scale war between Russia and NATO. The most likely scenarios, by Warsaw's own assessment, are limited: drone or missile strikes, false-flag operations, a brief border violation, or the temporary seizure of a small piece of territory. None of those triggers Article 5's collective-defense guarantee automatically, and none would necessarily sustain a defense-sector rerating.
There is also the political overhang. The warning carries an unmistakable subtext about American reliability under a second Trump administration - Tusk himself questioned in April whether the United States would fulfill its collective-defense obligations as loyally as the treaties require. But European rearmament driven by distrust of Washington is a slower, more fragmented process than rearmament driven by an imminent threat, and fragmentation is a headwind for the pan-European defense names that dominate EUAD's holdings.
The Second-Order Trade Nobody Is Making
Here is the implication the market is missing. Investors are asking whether escalation will happen and trading defense stocks accordingly. The more consequential question is what happens to European risk premia even if the strikes never come.
Consider the chain: a public warning from a NATO prime minister that Russia is planning strikes on alliance territory -> even if no strike occurs, governments must visibly harden border defenses and pre-position interceptors -> defense budgets rise and stay elevated -> the cost of capital for European industrials with any exposure to security-sensitive supply chains increases permanently -> European equities trade at a structural discount to U.S. peers, not because of earnings, but because of a geopolitical risk tax that no earnings growth can fully offset.
That is the real second-order effect: not a spike in defense revenues, but a persistent discount on the entire European equity market. The defense stocks are the obvious hedge; the broader STOXX 600 is the unpriced exposure. If the threat is structural, European equities are cheap for a reason that will not self-correct.
The transmission runs through other asset classes too. Energy markets have already begun to price a modest war premium whenever the eastern flank flares - any strike on infrastructure near the Ukraine-Poland corridor threatens a logistical artery that carries Western aid eastward and, in a wider scenario, could disrupt Russian energy flows westward. Safe-haven flows favor the dollar and gold over the euro, which is structurally more exposed to a land war on its continent than any other G10 currency. Bond markets are the wild card: escalation pushes yields lower on flight-to-quality buying in core European sovereigns, but persistent defense spending pushes them higher through supply. Which force wins depends entirely on whether investors read the threat as cyclical - a temporary bid for Bunds - or structural - a permanent inflation of European fiscal deficits.
Who Benefits, Who Is Exposed
The beneficiary map is clear. European defense contractors with domestic manufacturing, long order backlogs and exposure to air defense, ammunition and armored vehicles sit at the center - Rheinmetall, Leonardo, BAE Systems, RENK and Hensoldt among them. Defense ETFs such as EUAD offer diversified exposure but carry the concentration risk that a handful of large-cap names dominate the index. Cybersecurity firms with government contracts benefit from the hybrid-warfare dimension of the threat, since sabotage and cyber operations are the most likely first moves below the Article 5 threshold.
The exposed side is broader and less obvious. European industrials with energy-intensive production face a renewed risk premium on power prices. Banks with significant Central and Eastern European exposure carry tail risk if a border incident escalates. Airlines and transport operators face route disruptions and higher insurance costs along the eastern corridor. And the entire European equity complex carries the valuation discount described above - a cost that shows up not as a headline loss but as a persistent underperformance against U.S. peers that compounds quietly over years.
What to Watch
Three signals will determine whether this is cyclical or structural. First, the frequency of Russian drone and missile incursions into NATO airspace over the next 60 to 90 days - a sustained increase would confirm the structural read; a decline would support the cyclical view. Second, whether NATO moves beyond rhetoric to concrete forward deployments along the eastern flank. Third, and most decisive, whether a ceasefire framework for Ukraine emerges; if it does, the escalation thesis breaks quickly.
The base case is continued hybrid probing without a full-scale attack - a world in which defense budgets stay elevated but defense stocks remain range-bound because the "war premium" never re-materializes. The upside case is a kinetic strike on NATO territory that forces a genuine Article 5 debate and sends defense names back toward their highs. The downside case - for the rearmament trade, not for security - is a negotiated freeze that leaves European defense contractors with bloated valuations and no growth catalyst.
The uncomfortable conclusion: Poland's warning may be right about the threat and wrong about the trade. If Russia is indeed planning strikes on NATO allies, the market should be repricing European risk, not nibbling at defense stocks near their 50-day averages. Either the threat is real and underpriced, or the market knows something Warsaw does not. History suggests that when a NATO government says it is preparing for war, the cheapest hedge is the one nobody is buying - and the most expensive mistake is assuming this time is the time it fades.
Explore more exclusive insights at nextfin.ai.
