Germany Is About to Strike Russia First: Inside Berlin’s Historic Break From Post-War Restraint

A Cabinet Vote That Rewrites 80 Years of German Security Doctrine

For eight decades, German intelligence services operated under a single, unbending rule: watch, don’t act. Shaped by the trauma of the Gestapo and the Stasi, Germany built spy agencies designed to collect information, not to strike. That era is now ending.

On August 12, 2026, Germany’s federal cabinet unanimously approved a sweeping 732-page draft law that hands the country’s two main intelligence services — the BND, its foreign intelligence agency, and the BfV, its domestic security service — powers no German government has granted since World War II: the authority to hack into foreign computer systems, sabotage hostile supply chains, and disrupt attacks before they happen. The bill still needs approval from parliament, but its cabinet passage alone marks what officials are calling the most significant overhaul of German spy law in the post-war era.

The target, though never named explicitly in the legislation itself, is unmistakable. Officials have pointed squarely at Russia’s campaign of hybrid warfare against Germany and its NATO allies as the driving force behind the change.

Why Now? A Government Says It Can No Longer Afford to Wait

The immediate trigger came into sharp focus just days before the cabinet vote. A drone loaded with explosives was discovered at Leipzig airport in eastern Germany, forcing a runway lockdown and prompting a wave of alarm inside the government. It was only the latest in a string of incidents — unidentified surveillance drones repeatedly spotted hovering over German military installations, along with a steady drumbeat of cyberattacks and sabotage attempts that officials say now number in the hundreds annually.

Chancellery chief Nina Warken framed the threat in blunt terms, telling reporters that Germany faces a real and acute danger from hybrid attacks by foreign powers, and that it can no longer count on allied intelligence services to guarantee its own security. That last point carries particular weight in Berlin, where officials have grown increasingly uneasy about whether the United States will continue sharing intelligence at the level Germany has relied on for decades.

Interior Minister Alexander Dobrindt, who has spearheaded the reform, did not mince words either. He told reporters after the cabinet meeting that Germany is a daily target of espionage, sabotage, cyberattacks and covert operations by foreign powers seeking to destabilize the country and force political change from within. Dobrindt has described the legislation as a plan to transform Germany’s intelligence services into what he called genuine secret services — agencies with real operational power, not just analytical capacity.

Germany is far from alone in leveling these accusations. NATO member states have repeatedly accused Russia of hacking government networks, jamming aircraft GPS systems, and interfering with Ukrainian drone operations near alliance airspace. Moscow has consistently denied the allegations, dismissing them as a pretext for European militarization. Whatever the merit of either side’s claims, the political reality in Berlin is that the accusations have translated directly into legislative action.

What the New Powers Actually Allow

The scope of the bill goes well beyond traditional espionage. Under the proposed law, Germany’s intelligence services would gain the authority to:

Disable Threats Before They Materialize

Security services could interfere directly with an attacker’s infrastructure — for example, secretly disabling explosives so that a surveillance operation can continue without loss of life, rather than simply reporting a threat after the fact to police or the military.

Conduct Offensive Cyber Operations

Under strict legal thresholds, the BND and BfV would be authorized to hack into the IT systems of hostile actors. Warken has said the powers could be used to disable servers run by state-backed hacking groups and disinformation networks, or to sabotage the digital infrastructure behind drone factories and chemical weapons laboratories through targeted cyber operations.

Disrupt Physical Supply Chains

In one of the more striking provisions, agencies could sabotage the delivery of hostile components — for instance, substituting faulty parts into shipments bound for adversarial weapons or drone programs, disrupting an operation before it ever reaches deployment.

Deploy Artificial Intelligence Tools

The legislation incorporates AI-driven analysis and tracking capabilities into the services’ toolkit, alongside a companion oversight framework intended to govern how AI-generated surveillance data can be used — a regulatory piece that has drawn far less attention internationally than the hacking provisions, but which German officials describe as similarly significant.

Dobrindt has said the reform would revolutionize the country’s security architecture, marking the first time German intelligence agencies would hold genuine operational powers rather than a purely observational role.

The Money Behind the Mandate

The legal overhaul arrives alongside a significant expansion of resources. The BND’s annual budget has climbed to roughly €1.5 billion this year — an increase of about 25 percent — with further growth expected as the new law moves through parliament. Officials close to the agency have made clear, however, that funding alone cannot substitute for legal authority; without the statutory power to act, additional money buys little more than expanded surveillance capacity.

Not Without Resistance

The bill has not sailed through unchallenged. Civil liberties organizations and press-freedom advocates have raised alarms about oversight, warning that expanding hacking and disruption powers domestically — not just abroad — could weaken protections for journalists and their confidential sources. Critics point to Germany’s own surveillance history as reason for caution, arguing that broad new authority to penetrate digital devices and disable infrastructure needs airtight independent oversight to avoid mission creep into domestic political life.

Supporters counter that the threat environment has changed too quickly for Germany’s post-war legal architecture to keep pace. A hostile actor, they note, can route an operation through infrastructure spread across several countries, hijack compromised civilian servers, and complete an attack before legal authorities can even agree on jurisdiction. In that view, the reform isn’t about abandoning restraint — it’s about closing a gap that adversaries have learned to exploit.

The real test now shifts to parliament, which must still approve the measure before any of the new powers take effect, expected sometime in early 2027. Lawmakers are widely anticipated to debate exactly where the threshold sits for authorizing an offensive cyber operation, how independent oversight bodies will monitor the agencies’ use of these powers, and how tightly the reform’s domestic surveillance provisions — including reported plans to allow agents to secretly install spyware inside suspects’ homes — will be constrained.

A Doctrine Shift With Regional Ripple Effects

Germany’s move lands at a moment when the broader security posture across Europe is hardening. Chancellor Friedrich Merz’s government has already overseen a substantial increase in military spending following Russia’s invasion of Ukraine, and Germany remains among Kyiv’s largest military backers. The intelligence reform fits into that same trajectory: a country that spent the better part of a century defined by military and strategic restraint is now recalibrating in real time.

Whether Berlin’s shift proves to be a necessary modernization or a step toward the kind of unchecked security apparatus Germans have historically feared depends heavily on the safeguards parliament ultimately builds into the law. But the direction of travel is no longer in question. A government that once prided itself on watching and waiting is preparing, for the first time since the fall of the Third Reich, to act first.

The Bottom Line

Germany’s cabinet has approved historic new powers letting its spy agencies hack, sabotage, and disrupt hostile operations before they occur — a direct response to what Berlin describes as an escalating campaign of Russian hybrid warfare. The measure still requires parliamentary approval, but it already signals a fundamental shift in German security doctrine: from post-war restraint to pre-emptive action.

Germany Is About to Strike Russia First: Inside Be...