Germany has drafted legislation that would grant its intelligence services the authority to hack foreign systems, disrupt hostile networks, and deliberately spread disinformation, marking the most extensive overhaul of the country’s post-war security architecture. The measure, seen by Reuters but not yet public, reflects Berlin’s assessment that hybrid and cyber threats—particularly from Russia—demand pre-emptive action rather than passive monitoring. Simultaneously, the Kremlin is consolidating regulatory control over artificial intelligence, naming the Ministry of Digital Development (Mintsifry) as the lead agency to shape state policy, draft legislation, and coordinate AI deployment across government. Both moves land just as the UN’s independent AI panel releases a preliminary report concluding that capabilities are outstripping governments’ ability to set guardrails.

The German proposal redefines the legal basis for domestic and foreign intelligence operations, introducing a tiered threat model that unlocks graduated powers. Under the most severe category, agencies could penetrate IT infrastructure, copy or delete data, and disable tools used in state-backed influence campaigns. For the first time, closed-source spyware would be authorised for online searches and live telecommunications interception, while telecoms firms, digital platforms, and financial intermediaries could face binding secrecy orders backed by fines of up to €1 million. A new Independent Control Council would replace fragmented oversight bodies and require prior judicial-type approval for the most invasive techniques, including long-term infiltration and residential surveillance.

In Moscow, the regulatory shift concentrates authority over a sprawling AI ecosystem within a single ministry that already handles digital infrastructure, communications, and media. Mintsifry will gain the power to approve regulations drafted by other agencies, set standards for “trusted” AI models required in state systems, and run a register of vetted algorithms. The approach mirrors the government’s broader push for technological sovereignty, encouraging developers to align with state priorities in exchange for access to public data and support measures. Analysts in Washington and Brussels note that both the German and Russian frameworks seek to close a perceived capability gap, though they do so from radically different starting points: Berlin aims to give its cautious services offensive cyber teeth, while Moscow is locking in top-down direction over a technology it views as strategic.

From New York, the UN panel of 40 experts warns that the evidence dilemma is throttling effective regulation: policymakers need robust data before acting, but by the time sufficient studies exist, the technology has already moved on. The report also highlights the concentration of compute power—roughly 90% shared between the United States and China—as a source of fragility. With the German bill expected to be debated in parliament and Russia’s AI mandate slated to take effect on 1 September, the next milestone is the UN panel’s final recommendations, which may propose common international standards for transparency and safety in an arena where no single state can set the rules alone.