Moscow Security Forum: Oreshnik, ISIS threats, and US base warnings

Russia is convening an International Security Forum in the Moscow Region from May 29 under the auspices of the Russian Security Council, with more than 150 delegations reportedly participating. In parallel, Russian officials and experts are intensifying messaging about the Oreshnik system’s ability to strike deeply, claiming it can penetrate Soviet-era underground engineering sites used for Ukrainian drone and missile-related assembly and storage. Separately, Russia’s domestic security leadership is highlighting the ISIS threat, with the FSB chief warning that ISIS affiliates in Afghanistan are recruiting from CIS networks and stressing the need to expand counterterrorism contacts with Afghan counterparts. At the same time, Russia’s market mood is softening at the open of the main Moscow Exchange session, with MOEX and RTS indices down modestly by around 0.23% and 0.23% respectively. Strategically, the cluster reads like a coordinated signaling campaign across three theaters: European security posture, counter-drone and counter-reconnaissance capabilities, and transnational counterterrorism. The Moscow forum is likely intended to consolidate diplomatic narratives and shape external perceptions of Russia’s security agenda, while the “Oreshnik” claims aim to deter or constrain Ukrainian and Western planning by emphasizing survivability and penetration into legacy infrastructure. The ISIS recruitment warnings, coupled with calls for closer Russia–Afghanistan counterterrorism coordination, point to a broader effort to legitimize intelligence and security cooperation beyond traditional channels. Meanwhile, Belarus opposition leader Sviatlana Tsikhanouskaya’s warning that Russia could attack “Western neighbours” if a future peace deal is not “just and long-lasting” adds political pressure on any negotiation framework, suggesting that Moscow’s messaging may be paired with uncertainty-management in Europe. Market and economic implications are most visible in Russia’s own risk appetite and sentiment, where the early-session decline on MOEX and RTS signals caution rather than panic. The security narrative can still transmit into risk premia for defense-adjacent supply chains, industrial infrastructure insurance, and hedging demand, especially if strikes are framed as targeting underground industrial nodes. Outside Russia, the ISIS repatriation angle in Australia—reporting another group of ISIS-linked women and children landing after leaving Al-Roj camp and boarding a flight from Qatar—can affect domestic security spending expectations and border-control policy, with second-order effects on travel and insurance risk. Separately, Russia’s energy drink market contraction data (sales down 7% and production down 14.8% year-on-year in Q1) is not directly tied to the security forum, but it reinforces a backdrop of consumer demand normalization pressures that can matter for broader macro sentiment. What to watch next is whether the May 29 forum produces concrete deliverables—joint statements, intelligence-sharing frameworks, or operational commitments—rather than only rhetorical positioning. On the military-technical side, the key trigger is any observable shift in strike patterns against underground industrial infrastructure in Ukraine, including timing, target selection, and the claimed use of systems linked to Oreshnik capabilities. For counterterrorism, monitor evidence of ISIS-linked recruitment pipelines from CIS networks and any announced Russia–Afghanistan coordination steps, as well as follow-on repatriation or legal actions in Australia. Finally, Iran’s Supreme Leader Mojtaba Khamenei’s warning that regional powers will no longer “shield” US bases raises the probability of regional signaling and cyber/kinetic incidents; the escalation test will be whether any “safe haven” rhetoric is followed by concrete disruptions to US-linked logistics or security posture in the region.

Geopolitical Implications

• 01

  Russia is using the forum to consolidate diplomatic leverage while simultaneously shaping deterrence narratives around precision and penetration into legacy infrastructure.

• 02

  Counterterrorism cooperation claims (Russia–Afghanistan) may broaden Russia’s security influence and create new intelligence-sharing pathways that complicate Western monitoring.

• 03

  European negotiation dynamics may be affected by Belarus opposition warnings that any “peace deal” could be treated as a window for further Russian pressure on neighbors.

• 04

  Iran–US posture signaling could increase the probability of incidents that blur lines between conventional security, cyber operations, and proxy/terror threats.

Key Signals

• —Forum outcomes: any announced agreements on intelligence-sharing, joint counterterrorism mechanisms, or operational coordination.
• —Ukrainian reporting on underground industrial site impacts, including damage patterns consistent with penetration claims.
• —Evidence of ISIS recruitment activity across CIS networks and any arrests, disrupted cells, or new FSB–Afghan coordination statements.
• —Australian government and court actions tied to ISIS-linked arrivals, including repatriation timelines and security measures.
• —Iran-related security incidents involving US-linked bases or regional logistics, plus any cyber-security alerts tied to video-system vulnerabilities.