EMET NEWS PRESS

Key Finding

Since 1 July 2026 the 1 German-Netherlands Corps has commanded NATO land operations in Estonia and Latvia. In the event of defence it assumes control of the allied and national land forces assigned to that mission, among them the Estonian Division and Multinational Division North. Its planned command scope reaches up to 50,000 soldiers.

Franz-Stefan Gady argues that Germany's European leadership role requires a nationally available core of command, fires and support capabilities. The new Baltic mission makes that argument concrete: Germany and the Netherlands provide an experienced headquarters and deeply integrated land forces, while deep fires, air defence and operational logistics have yet to reach the required strength.

The operational time gap runs between an already activated binational corps mission and national contributions that have not been fully delivered. German capability targets extend to horizons of 2035 and 2039. The corps mission has been in force since 1 July 2026.

Key Assessment

Foreign objects have been found in the fuel tank systems of German A400M transport aircraft. The finding is officially confirmed; its cause is not. A determination of sabotage would require perpetrator access, a time frame, a distribution pattern and a technical signature of manipulation. None of these has been established. A determination of a production fault would require a completed causal investigation. That investigation is not concluded. Both explanations remain open.

The foreign objects are reported to be textile particles. This composition initially favours an entry from the production process, since work inside integral tanks is performed using textile aids and fibre residue is the characteristic finding of deficient foreign object control. The same inconspicuousness, however, yields no exculpatory argument. An actor with access to production would rationally select a means indistinguishable from ordinary process failure.

The case stands in an environment that shifts the prior probability. Since early 2025, several incidents have been documented in which foreign matter was introduced into the propulsion and fuel systems of German naval vessels. In one case this led to arrest warrants. The A400M finding fits this pattern without being established by it.

Assessment confidence is low. The factual basis rests largely on a single reporting outlet, the number of affected aircraft is not public, and the investigating bodies decline to comment on the question of cause.

Kernbefund

Deutschlands Sicherheitslage hat sich durch parallele Bedrohungen aus dem jihadistischen, iranischen, russischen sowie rechts- und linksextremistischen Spektrum verdichtet. Die Warnung des Bundesinnenministers wird durch vereitelte Anschlagsplanungen, glaubwürdig zugeordnete Infrastruktursabotage und wiederholte Drohnenaufklärung gestützt. Öffentlich bleibt offen, welche konkrete Erkenntnis die aktuelle Verschärfung ausgelöst hat. Entscheidend ist, ob zusätzliche Befugnisse nachweisbare operative Fähigkeitslücken schließen und wirksam kontrolliert werden.

Key Assessment

Developments on 17 and 18 July 2026 confirm a geographical and functional expansion of hostilities. US targeting increasingly extends beyond Iranian combat assets to reconnaissance, command, logistics and regeneration structures; confidence: medium. Iran retains operational inventories of ballistic missiles, one-way attack drones and maritime disruption capabilities, demonstrated by its attacks during recent weeks. The size, disposition and sustainability of these inventories remain undetermined. Observable indicators assessed for the next four weeks do not show preparations for a major US ground offensive; probability: highly unlikely, confidence: medium.

Key Assessment

The division of military strategy into direct and indirect schools serves as an analytical model. The direct method seeks a decision by concentrating superior effects against enemy forces, command structures or strategic foundations of power. The indirect method relies on deception, circumvention, attrition, disorganisation and the manipulation of political will. In practice, both methods are regularly combined. Clausewitz, Sun Tzu, Jomini, Liddell Hart, Mao and Boyd can therefore be classified only according to the main emphasis of their respective theories.

The Bundeswehr stands within the strategic tradition of Clausewitz. War is understood as a politically determined conflict between opposing wills. Friction, uncertainty, escalation and the relationship between political purpose and military objective provide the theoretical framework. The operational command principle is Führen mit Auftrag, command by mission. Superior commanders define the mission, intent and required effect; subordinate commanders independently determine how to execute it within the prescribed framework. This command philosophy does not belong to the indirect school, but supports rapid decision-making, local initiative and adaptation under enemy action.

Since 2022, the Bundeswehr has redirected training, planning and force development towards national and collective defence. Large-scale combat operations, rapid readiness, logistical endurance, comprehensive defence, Host Nation Support and command across multiple operational domains have gained importance. The Bundeswehr Command and Staff College reflects this change in its curriculum and faculty structure. The Faculty of Cyber and Information Domain, the restructuring of general and admiral staff officer training and the increased emphasis on comprehensive defence and Multi-Domain Operations confirm this realignment.

The decisive vulnerability lies in the transition between peace, strategic competition, hybrid action and armed conflict. Russia and China combine military and non-military instruments in long-term influence and power operations. German doctrine recognises this threat but retains clear legal and political thresholds for state action. This creates a response disadvantage when an adversary remains below these thresholds, separates individual incidents and conceals their cumulative strategic effect.

Key Assessment

Iran has declared the Strait of Hormuz closed and is attempting to enforce this claim through attacks, vessel seizures, mines and selective transit controls. Its operational effect does not depend on controlling every passage without interruption. Tehran raises the risk of loss to a level at which shipping companies, insurers and crews suspend voyages or proceed only under additional security measures. On Sunday, 12 July 2026, only six vessels passed through the strait according to Kpler data. This was the lowest daily figure in five weeks. Separately, oil and gas tanker traffic fell to its lowest level since 25 May 2026.

Bab al-Mandab does not constitute a merely parallel escalation axis. The strait threatens the alternative route that Saudi Arabia and other Gulf states have increased their reliance on following the disruption of Hormuz. Crude oil is transported by pipeline to the Red Sea and shipped from Yanbu. Activation of the Houthi threat would therefore target the maritime redundancy that partially offsets the loss of Hormuz.

China and Russia increase Iran’s economic, diplomatic and military-technological resilience. No publicly available evidence confirms joint operational command of the Hormuz blockade. China’s energy imports and its position as the principal market for Iranian oil simultaneously provide Beijing with the strongest external economic leverage over Tehran. Russia can increase Iran’s capacity to regenerate military capabilities but, based on the current public intelligence picture, avoids overt participation in maritime operations.

Key Finding

Twentyfour Industries is a Munich-based defence-tech company founded in late 2024. It operates its own small-drone platform and a business model focused on serial production, training, systems integration and operational support. The Q-X provides an independent industrial base; the planned German production of the Merops interceptor opens access to the priority counter-UAS market.

Confirmed developments include an equity financing volume of USD 11.8 million, the establishment of a German production organisation and contacts within the Bundeswehr environment. A sustained four-digit monthly output, major serial-production contracts, reliable revenue data and comprehensive European control over Merops have not been demonstrated publicly.

The company’s further development depends on three indicators: verified serial-production capacity, multi-year government contracts and secured access to the technology required for production, integration and further development.

Key Assessment

The Federal Intelligence Service, the Bundesnachrichtendienst or BND, is the civilian foreign intelligence service of the Federal Republic of Germany and a higher federal authority under the Federal Chancellery. Its statutory mission is to collect and assess information concerning foreign countries that is relevant to Germany’s foreign and security policy. This includes intelligence on the political intentions of foreign governments, military capabilities, preparations for war and escalation, terrorist organisations, proliferation programmes, cyber operations, sabotage networks, strategic technologies, raw-material dependencies and hybrid influence activities.

The BND was established on 1 April 1956 from the Gehlen Organisation. The latter had been created after the Second World War under US control and relied to a considerable extent on former members of the Wehrmacht, military intelligence, the Gestapo, the SS Security Service and other National Socialist institutions. The integration of this personnel allowed the young Federal Republic to establish an intelligence capability against the Soviet Union and East Germany rapidly. At the same time, it created grave moral, political and operational burdens. The National Socialist past of numerous employees increased their vulnerability to blackmail, facilitated hostile penetration and shaped the internal culture of the service for decades.

From an intelligence organisation directed primarily against the Soviet Union, the BND gradually developed into a globally operating service. During the Cold War, the armed forces of the Warsaw Pact, the German Democratic Republic, Soviet missile and nuclear capabilities, and political developments in Eastern Europe dominated its work. After 1990, the focus shifted towards regional conflicts, proliferation, terrorism, organised crime and support for German overseas deployments. Since Russia’s annexation of Crimea in 2014 and its full-scale invasion of Ukraine in 2022, military early warning, Russian power projection, hybrid warfare, cyber operations and sabotage have again gained major importance.

According to publicly available information, the service employs approximately 6,500 people. Its headquarters are located at the Chausseestraße complex in Berlin. Pullach remains important, particularly for technical intelligence. For 2026, the BND has been allocated budgetary resources amounting to roughly EUR 1.5 billion. The detailed distribution of these funds across personnel, technology, operational collection, foreign structures and classified programmes remains largely secret.

Since 15 September 2025, the BND has been headed by Martin Jäger. His presidency began during a period of strategic compression. Russia is conducting a prolonged war against Ukraine, China is expanding its military, economic and technological power, Iran is employing regional proxy structures, transnational terrorist networks remain operational, and digital operations are shortening warning times. At the same time, Germany is increasingly expected to reduce its dependence on US and British intelligence.

The decisive criterion for assessing the BND is therefore not the volume of data it collects, but its ability to identify adversary intentions in time, issue credible warnings and support political decision-making with independently acquired intelligence. Historically, the service has achieved substantial results in individual fields. At the same time, scandals, penetrations, analytical failures and external dependencies have repeatedly exposed structural weaknesses in human-source operations, counterintelligence, political oversight, technological autonomy and strategic early warning.

Key Finding

Germany and France put their nuclear deterrence cooperation into practice for the first time on 16 July 2026. Two nuclear-capable French Rafale aircraft and two German Eurofighters conducted aerial refuelling training with a French tanker aircraft. A German Air Force spokesperson confirmed the exercise. It took place immediately before a meeting between German Chancellor Friedrich Merz and French President Emmanuel Macron.

The operation creates neither Franco-German nuclear sharing based on the NATO model nor a French nuclear umbrella with an automatic security guarantee. France retains exclusive control over its nuclear weapons, operational planning and any decision to employ them. Germany provides conventional capabilities, infrastructure and personnel for selected French deterrence exercises.

The Franco-German Defence and Security Council is due to decide on further operational integration in Nörvenich on 17 July. It is expected to approve the first participation of German personnel in a French nuclear exercise in autumn 2026. The cooperation complements NATO’s US-led nuclear-sharing arrangements but does not replace them militarily or politically.

Key Assessment

Japan is undertaking the most extensive restructuring of its intelligence architecture since the end of the Second World War. On 27 May 2026, the National Diet passed legislation establishing a National Intelligence Council. At the same time, the existing Cabinet Intelligence and Research Office will be expanded into a higher-ranking central intelligence body within the Cabinet Secretariat. Prime Minister Sanae Takaichi will chair the new council, giving her direct access to a formally strengthened national intelligence and assessment organization.

The reform initially centralizes political direction, the definition of national intelligence priorities, interagency information exchange and strategic all-source assessment. The Ministry of Foreign Affairs, Ministry of Defense, police, Public Security Intelligence Agency and other authorities will remain organizationally independent. They will, however, be placed under stronger obligations to provide intelligence in accordance with centrally defined requirements.

The new structure does not yet create an independent operational foreign intelligence service comparable to the CIA or the British Secret Intelligence Service. The immediate capability gain lies in coordination, assessment and intelligence support to the political leadership. Japan’s limited HUMINT capacity will therefore remain in place for the time being.

Takaichi has described the new system as the first step in a broader intelligence reform. Further measures include a national intelligence strategy, the expansion of counterintelligence, legislation against foreign intelligence and influence activities, and the possible establishment of an independent foreign intelligence service.

The principal risk lies in the institutional asymmetry between stronger executive authority and limited independent oversight. Japan is creating more binding leadership, coordination and information-access powers without simultaneously establishing a parliamentary intelligence oversight system comparable to those maintained by established Western democracies.

Key Finding

Western cyber and intelligence authorities warn of an ongoing global operation targeting routers, switches and other network components. The activity is attributed to Russia’s FSB Center 16. The unit combines cross-border signals intelligence with technical network reconnaissance and long-term access operations.

The campaign focuses on devices whose management services are exposed to the internet, whose firmware contains known vulnerabilities or whose administrative protocols lack modern authentication and encryption. The operators extract device configurations, reconstruct internal network structures and establish access for subsequent espionage operations.

The technical core of the operation is an attack chain based on the Simple Network Management Protocol and unsecured file-transfer services. Center 16 searches for devices that respond to known or weak community strings such as “public” and “private.” “Public” is conventionally used for read access. Manipulation of a device configuration requires a write community with modification privileges, frequently using the default value “private.” Through an SNMP Set Request, the target device can be instructed to transfer its configuration to an external TFTP server or a compromised FTP server.

The exfiltrated files may contain internal address ranges, routing relationships, administrator accounts, VPN parameters, additional community strings and information on connected systems. Observed filenames such as “config.bkp” and “output.txt” constitute concrete indicators for log analysis and threat hunting.

No complete list of affected models is available. Exposure depends on the software version, device configuration, enabled services and external accessibility. Within Cisco environments, particular attention should be given to older Catalyst platforms supporting Smart Install and to devices outside the manufacturer’s support lifecycle. Current German home routers have not been identified as specific target models of the operation.

The operation is of elevated relevance to Germany. Explicitly identified target sectors include communications infrastructure, the defence industry, energy, finance, government institutions and healthcare. Additional technical reporting indicates activity against telecommunications companies, universities and manufacturing. Risks to logistics, transport and research arise from the structure of German infrastructure and should be assessed as a national risk inference.

Das Wichtigste in 30 Sekunden

Der Referentenentwurf zur Reform des Nachrichtendienstrechts erweitert die technische, analytische und operative Reichweite von Bundesnachrichtendienst und Bundesamt für Verfassungsschutz. Vorgesehen sind eine umfassendere automatisierte Datenauswertung, weiterentwickelte Befugnisse zur strategischen Fernmeldeaufklärung und aktive Maßnahmen gegen technische oder operative Strukturen gegnerischer Akteure. Ein wesentlicher Teil der Reform setzt verbindliche Vorgaben des Bundesverfassungsgerichts um. Die Übergangsfrist für die beanstandeten Vorschriften endet am 31. Dezember 2026.

Die angekündigte Neufassung des Informationsfreiheitsgesetzes könnte den bislang voraussetzungslosen Zugang zu amtlichen Informationen auf natürliche Personen mit berechtigtem Interesse begrenzen. Weitere Eckpunkte betreffen den Wohnsitz oder die Staatsangehörigkeit der Antragsteller, zusätzliche Schutzbereiche und eine stärkere Ausrichtung der Gebühren am Verwaltungsaufwand. Betroffen wären vor allem journalistische Recherche, wissenschaftliche Analyse und zivilgesellschaftliche Kontrolle.

Der Nachrichtendienstentwurf enthält zugleich eine Neuordnung der Aufsicht. Der seit 2022 tätige Unabhängige Kontrollrat soll zusätzliche Zuständigkeiten erhalten. Seine Wirksamkeit hängt von personeller Stärke, technischer Expertise, unmittelbarem Systemzugang und durchsetzbaren Prüfungsrechten ab.

Beide Vorhaben bilden kein gemeinsames Gesetzespaket. Werden die operativen Nachrichtendienstbefugnisse weitgehend verabschiedet und die angekündigten IFG-Hürden umgesetzt, vergrößert sich voraussichtlich der strukturelle Informationsvorsprung der Bundesexekutive.

Kernbefund

Der Referentenentwurf zur Reform des Nachrichtendienstrechts verändert die gesetzliche Stellung des Bundesamtes für Verfassungsschutz und des Bundesnachrichtendienstes grundlegend. Beide Dienste sollen Bedrohungen weiterhin aufklären und analysieren, künftig jedoch zusätzlich selbst auf bestimmte Gefährdungsabläufe einwirken können.

Die Entwurfsbegründung bezeichnet diese Erweiterung als begrenzte Interventionsbefugnisse beziehungsweise als aktive Schutzmaßnahmen. In der öffentlichen und fachpolitischen Debatte werden sie überwiegend unter dem Begriff aktive Maßnahmen zusammengefasst.

Der Instrumentenkatalog umfasst Telekommunikationsüberwachung, biometrische Identifizierung, Zugriffe auf private informationstechnische Systeme, automatisierte Datenanalysen sowie technische Einwirkungen auf laufende Cyberoperationen. Vorgesehen sind außerdem Maßnahmen, durch die Datenströme verändert, Angriffsinfrastrukturen beeinträchtigt oder beteiligte Akteure gezielt fehlgeleitet werden können.

Private Unternehmen werden unter den gesetzlichen Voraussetzungen zur Auskunft, Datenübermittlung, technischen Unterstützung und Geheimhaltung verpflichtet. Betroffen sind unter anderem Telekommunikationsanbieter, Verkehrsbetriebe, Finanzdienstleister, Fahrzeughersteller, Werkstätten, Hostinganbieter und Betreiber von Videoüberwachungsanlagen.

Das Bundesamt für Sicherheit in der Informationstechnik soll technische Erkenntnisse über Cyberangriffe und Sicherheitslücken frühzeitig an den BND weitergeben. Damit entsteht eine engere Verbindung zwischen defensiver Cybersicherheit und nachrichtendienstlicher Nutzung technischer Schwachstellen.

Die operative Rechts- und Datenschutzkontrolle wird beim Unabhängigen Kontrollrat konzentriert. Die G-10-Kommission soll entfallen. Der Entwurf reagiert damit auf Vorgaben des Bundesverfassungsgerichts, erweitert zugleich jedoch Reichweite und operative Wirkung der Nachrichtendienste.

Key Findings

Germany’s right-wing extremist threat environment combines a large extremist personnel base, sustained violence orientation, digitally accelerated mobilisation and regionally capable political-extremist linkage spaces.

The right-wing extremist spectrum comprised 58,700 persons in 2025. Of these, 15,600 were assessed as violence-oriented. Authorities recorded 36,951 offences with a right-wing extremist background, including 1,395 violent offences.

The AfD’s nationwide parliamentary, organisational and digital presence creates a politically relevant resonance environment in which narratives can gain wider visibility and may be adopted, intensified or operationalised by actors in the broader right-wing extremist spectrum.

The decisive operational requirement is the early identification of regional convergence zones where political visibility, extremist networks, digital amplification, local mobilisation capacity and concrete intimidation or violence indicators coincide.

The Essentials in 30 Seconds

The NATO Summit in Ankara on 7–8 July 2026 will formalise a revised Alliance burden architecture. The United States is expected to reaffirm its commitment to Article 5 while reducing selected conventional capability allocations within the NATO Force Model.

European Allies and Canada have largely compensated for the immediate shortfalls through additional force contributions, readiness measures and alternative capability packages. The remaining high-value gaps concern strategic bombers, air-to-air refuelling, persistent ISR, maritime long-range surveillance, carrier-based naval power, sea-based long-range strike and rapid global reinforcement.

The summit will assess whether European defence expenditure can be converted into deployable formations, ammunition production, air and missile defence, command-and-control resilience, military mobility and industrial regeneration capacity.

The central operational issue is the gap between political reassurance and force availability. Article 5 remains the political foundation of collective defence. European readiness, industrial output and sustainment capacity determine the Alliance’s ability to manage simultaneous pressure in Europe, the Middle East and the Indo-Pacific.

Core Findings

The situation between Iran, Israel, the United States, and the Arab Gulf states is not a stable ceasefire, but a limited escalation regime carrying a high risk of relapse. De-escalation efforts rest on the Memorandum of Understanding signed in Islamabad, which establishes a 60-day window for a comprehensive agreement. Two weeks into this window, both sides continue to dispute the interpretation of the signed MOU, making a failure of the initial agreement currently appear more likely than a final settlement. Additionally, a one-week temporary truce is in place for the Strait of Hormuz; renewed clashes remain highly possible immediately after July 4.

Two structural factors dominate the negotiation landscape. First, Iran has institutionalized its claims over the Strait of Hormuz through the newly created Persian Gulf Strait Authority (PGSA). Teheran is operating a de facto transit regime featuring approved corridors, mandatory coordination with the IRGC Navy, and transit fees. Second, following the death of Supreme Leader Ali Khamenei, Iran is undergoing a leadership succession phase. Mourning ceremonies are scheduled from July 4 to July 9, and the next negotiation meeting has been postponed until their conclusion. This succession represents the primary variable affecting Iran's negotiation mandate, escalation discipline, and the internal cohesion of the Revolutionary Guards.

Militarily, Iran remains weakened—US strikes have repeatedly degraded its missile, drone, and coastal radar capabilities according to CENTCOM reports—yet strategically operational. Teheran's operational impact stems from its capacity to project power across multiple theaters simultaneously: the maritime domain (Hormuz, Persian Gulf, Red Sea), ground fronts (Northern Israel, Southern Lebanon, Iraq, Syria), the Gulf monarchies hosting US forces, and critical digital infrastructure. Israel and the United States maintain clear advantages in air power, ISR (Intelligence, Surveillance, and Reconnaissance), target development, precision strikes, missile defense, and maritime projection. While this superiority is sufficient to repeatedly degrade Iranian infrastructure, it fails to permanently deter Iran from maritime coercion, missile reconstitution, cyber operations, or supporting terrorist and other armed proxies.

Key Judgment

Russian forces have measurably expanded their capacity for tactical adaptation since 2024, yet highly likely continue to fail at converting tactical penetrations into operational breakthroughs. From this discrepancy, eight exploitable weakness complexes emerge: the unprotected consolidation phase following infiltrations, the predictability of reconnaissance-by-force, the dependence of small assault groups on rearward connectivity, the incomplete handoffs within combined arms operations, the concentration of key personnel in centralized drone structures, the channeling of movement corridors, the exposed tactical supply chain, and the recognizable operating pattern of the glide bomb campaign. None of these complexes requires new major weapon systems to exploit; all counter-approaches rest on available means whose effect derives from prioritization and temporal compression.

Methodology and limitations: This assessment draws exclusively on open sources (RUSI, CSIS, ISW, Jamestown Foundation). Reliable Russian casualty and inventory figures are not available. Probability statements follow the scale: almost certain – highly likely – likely – possible.

Key Finding

Several unidentified drones flew in formation over a Swiss military facility. The location, time, platform type, control point and operators remain undisclosed. The military character of the protected site has been confirmed.

Tactical pre-operational reconnaissance aimed at testing detection, alarm procedures and response times is likely. An imminent sabotage or attack operation is not substantiated. There are no reliable technical or forensic indicators supporting attribution to a state actor or intelligence service.

The Chief of the Armed Forces announced a review of the existing catalogue of critical infrastructure. The Armed Forces are now recording drone sightings systematically and are examining a flight-restricted zone above the affected facility. Until integrated Counter-UAS systems are available more widely, passive protection remains the most immediately effective measure.

The Essentials in 30 Seconds

Russia treats Germany as an intelligence, influence and potential disruption environment. Military logistics, defence industry, transport, energy, digital infrastructure and political decision-making are priority target sets.

The 2025 constitutional protection report documents sabotage preparation against transport infrastructure, reconnaissance of military-relevant routes and persistent cyber access. It also identifies the use of low-level agents as a Russian operating pattern. Russian direction of extremist actors in Germany for sabotage has not been proven.

China pursues long-term strategic acquisition and influence activity against technology, research, industry and political target structures. Iran is intensifying surveillance and repression against the exile opposition, Jewish and Israeli institutions, and US-linked targets.

The Essentials in 30 Seconds

• According to the GAO, the U.S. F-35 fleet’s full mission capable rate fell to 25 percent in fiscal year 2025. Forty-four percent of aircraft were mission capable for at least one assigned task.

• Spare-parts shortages, extended depot turnaround times, limited data access, delayed software maturity and insufficient industrial capacity are constraining availability.

• Six U.S. Marine Corps F-35B aircraft were accepted without AN/APG-85 radars. Concurrency now affects a core sensor.

• For the United States and NATO, the ability to generate available F-35 units increasingly depends on the performance of the U.S.-led sustainment system.

F-35 availability constrains the United States’ ability to provide fully mission-capable air forces for sustained multi-role operations. Fleet inventory is growing while spare-parts supply, depot capacity, software maturity and technical support are not expanding at the same rate.

According to the GAO report published in June 2026, the mission capable rate of the U.S. F-35 fleet declined from 67 percent in fiscal year 2021 to 44 percent in fiscal year 2025. This metric measures aircraft able to fly and execute at least one assigned task. The full mission capable rate declined from 38 percent to 25 percent over the same period. Full mission capable status requires an aircraft to perform its complete assigned mission set without a limiting deficiency.

In fiscal year 2025, only around one quarter of the U.S. F-35 fleet could execute all assigned missions. A 44-percent mission capable rate also constrains training, alert commitments, deployment preparation and sustained operations. The shortfall affects the F-35A, F-35B and F-35C, as well as the Air Force, Navy and Marine Corps.

The Essentials in 30 Seconds

The Netherlands is transforming its Defence Space Security Centre into a Space Command. The move consolidates satellite-based intelligence, space domain awareness, satellite communications, positioning, navigation and timing, and the processing of space-derived data within a joint military command structure.

The initiative does not create an autonomous Dutch space power. It is intended to connect national satellites, ground infrastructure, commercial services and allied data for maritime surveillance, air defence, intelligence support and NATO operations.

A limited initial operational capability is likely by 2028. A resilient 24/7 operational structure with trained shift teams, protected ground segments, independent data fusion and routine NATO integration will depend primarily on personnel recruitment and the maturity of operational data chains.

The Essentials in 30 Seconds

Sweden plans to activate its new civilian foreign intelligence service, Sveriges utrikes underrättelsetjänst (UND), on 1 January 2027. Parts of the foreign intelligence function currently held by MUST are expected to transfer into the new structure.

MUST Chief Lieutenant General Thomas Nilsson has identified the implementation timetable as an operational risk. During Almedalen Week in Visby, he stated that Sweden could not afford to “drop the ball” under current security conditions. A reform of this scale could reduce operational effectiveness; that reduction must not reach a level that degrades ongoing intelligence production.

The transition affects the same personnel, technical access, and international liaison arrangements that MUST requires for Russia intelligence, military early warning, Baltic Sea situational awareness, and NATO support. The reform may strengthen strategic intelligence support to the government over time. Until early 2027, it creates a capability risk if personnel, SIGINT access, and liaison procedures are removed prematurely from military intelligence work.

The Essentials in 30 Seconds

• A Russian attack on Estonia, Latvia or Lithuania would place NATO and the European Union in a simultaneous collective-defence and mutual-assistance crisis.

• Switzerland and Austria would remain formally neutral. Both states would nonetheless become part of a European conflict environment shaped by transit, infrastructure, cyber defence, defence industry, energy security and counter-intelligence.

• Austria would be legally obliged under Article 42(7) TEU to provide aid and assistance. The neutrality reservation limits the form of assistance; it does not create a cost-free option of political non-involvement.

• Switzerland could restrict militarily relevant support more extensively. Its 2022 and 2023 re-export policy nevertheless demonstrated that European partners can treat Swiss defence goods and components as an availability risk.

• Russia’s objective would not primarily be the formal abolition of neutrality. It would seek to constrain European decision-making through deterrent messaging, sabotage, cyber operations and political polarisation.

The Essentials in 30 Seconds

• Canada has formalised delivery of an Arctic Over-the-Horizon Radar capability, A-OTHR, with Australia and BAE Systems Australia. BAE Systems Australia is scheduled to begin work on 1 July 2026; Initial Capability is planned for December 2029.

• The Canada–Australia government-to-government agreement is valued at AUD 2.5 billion. Canada’s wider A-OTHR programme exceeds CAD 6 billion, covering sites, infrastructure, integration, operating preparation and later expansion.

• A-OTHR uses JORN-derived HF skywave radar technology but requires adaptation to North Atlantic operating conditions, Canadian geography and NORAD command-and-control architecture.

• The decisive programme risk lies in ionospheric availability, software and data integration, electronic protection, bilateral NORAD interfaces and the conversion of radar tracks into actionable response chains.

Canada has moved its Arctic Over-the-Horizon Radar capability, A-OTHR, into the delivery phase through an agreement with Australia and BAE Systems Australia. The programme forms part of Canada’s NORAD modernisation effort and is intended to extend early warning and target tracking across northern and northeastern approaches to North America.

Ottawa is not acquiring a direct replica of Australia’s Jindalee Operational Radar Network, JORN. Canada is procuring a JORN-derived architecture configured for Canadian terrain, North Atlantic operating conditions, northern air and maritime approaches, national infrastructure and integration into binational NORAD command-and-control systems.

Canada and Australia established the technical partnership in 2025. The agreement signed on 22 June 2026 now covers system delivery, technology rights, industrial participation and long-term technical cooperation. BAE Systems Australia is scheduled to begin implementation on 1 July 2026.

The Essentials in 30 Seconds

• Attackers gained access to at least one file server operated by the Centre for East European and International Studies in Berlin. It remains unclear whether files were copied and which data sets may be affected.

• Russian nationals with documented cooperation links to ZOiS face the highest risk because Russia has designated the institute an “undesirable organisation” since October 2023.

• A data breach could connect individuals, research activity and contact networks. This creates potential exposure to criminal prosecution, border questioning, pressure on relatives and targeted digital follow-on operations.

• Russian involvement has not been established. Technical forensics and any subsequent context-specific targeting will determine the further assessment.

The Centre for East European and International Studies confirmed on 25 June 2026 that an unauthorised actor had accessed at least one file server. According to the institute, files stored on the system were accessible to the attackers. It remains unclear whether files were copied or exfiltrated and which data sets may have been affected.

ZOiS stated that its email infrastructure is not affected according to the current assessment. The institute isolated affected systems, reset credentials, initiated forensic examinations and notified the relevant security and data-protection authorities.

The technical impact cannot yet be quantified. The central security question is whether the affected systems contained personal, contact or project data capable of documenting a traceable link between individual Russian nationals and an organisation criminalised by the Russian state.

The Essentials in 30 Seconds

• Russia remains the most acute threat actor affecting Switzerland. Intelligence collection, cyber-enabled activity, influence operations, sanctions evasion and suspected sabotage preparation form a connected hybrid threat environment.

• Switzerland is not only a target area. Its role as a financial centre, research hub, digital infrastructure location and host of international organisations provides access opportunities for operations directed against European third states.

• China presents a different risk profile: long-term access to technology, research, industrial capabilities and economic dependencies.

• The NDB assessment on Iranian guided missiles is prospective. It describes a possible future expansion of Iranian strike reach into Europe, not a current direct missile threat to Swiss territory.

The 2026 assessment by Switzerland’s Federal Intelligence Service identifies a further deterioration in the national security environment. Russia remains the principal acute threat actor. Espionage, cyber activity, influence operations, sanctions evasion, terrorism and violent extremism do not operate as separate risk categories. They overlap within the same European operating environment.

Switzerland remains politically neutral. Operationally, it is embedded in the European hybrid threat space. Its international institutions, financial systems, research capacity and digital infrastructure create intelligence access, technical dependencies and disruption opportunities with effects beyond Swiss territory.

The Essentials in 30 Seconds

• The German Ministry of Defence has terminated the programme for six F126 frigates. The decision was driven by delays, rising costs and the risks associated with a change of prime contractor.

• The programme, originally costed at around ten billion euros, would have required more than 18 billion euros if continued. Costs already incurred and potential damages claims against Damen remain part of the financial and legal follow-up.

• Subject to budgetary and contractual implementation, Germany intends to procure eight MEKO A-200 DEU frigates. The project was initially designed as a bridging solution against F126 delays and is now becoming the core ASW programme of the German surface fleet.

• The higher unit count improves fleet rotation and platform availability. Organic airborne ASW redundancy, however, declines: F126 was designed for two NH90 Sea Tiger helicopters; the currently known MEKO configuration accommodates one medium helicopter or, alternatively, two light aircraft.

The F126 programme has been terminated. Germany’s planned large-frigate line for the 2030s will therefore not materialise.

Six F126 frigates were intended to provide the German Navy with large multi-role platforms featuring high endurance, extensive internal volume and modular mission capacity. The planned task spectrum included anti-submarine warfare, escort operations, maritime surveillance, forward presence, command support, evacuation operations and the embarkation of additional personnel and mission-specific equipment.

The cancellation changes German force planning in the North Atlantic, the North Sea and the Baltic Sea, as well as along NATO’s reinforcement axis between North America and Europe.

The Essentials in 30 Seconds

The BND and BfV face increased collection pressure. Personnel, facilities, access systems and security procedures constitute separate intelligence targets.

No public attribution links the reported incidents at BND sites to Russian services. The confirmed assessment concerns the particular Russian collection interest in employees of German intelligence services.

Drone flights, vehicle surveillance, test contacts at access points and approaches toward employees can produce data on response times, security zones, technical installations and personal contact surfaces.

Intelligence facilities require local C-UAS sensors, pre-arranged JÜKO procedures, fixed police interfaces and integrated assessment of physical, digital and personnel-related indicators.

Russian intelligence services treat German security authorities as operational target environments. Relevant collection targets include classified material, technical capabilities, source access, security procedures, infrastructure and personnel.

Access controls, guard routines, alerting procedures, technical protection measures, energy supply, delivery traffic and employee movement patterns provide information on the protection level, response time and vulnerabilities of a facility.

Publicly known suspected incidents include conspicuous visitors at BND headquarters, drone overflights, repeatedly observed vehicles, possible surveillance of employees, unusual contact attempts and an alleged fence breach at the Centre for Intelligence Training and Further Education.

The Federal Office for the Protection of the Constitution assesses its employees as subject to particular Russian collection interest because of their access to state secrets. The threat situation is continuously assessed with national and international partners. Protective measures are adjusted according to the situation.

The Essentials in 30 Seconds

The IDF conducted a scheduled exercise in the Eilat area on 23 June 2026. The activity followed a confirmed maritime incident on 29 May 2026, when a jet ski approaching from the Jordanian direction crossed into Israeli waters in the Gulf of Aqaba and was forced to turn back by a patrol boat of the 916th Squadron.

According to a Haaretz report, Shin Bet Director David Zini internally prioritised preparations against a coordinated attack on Eilat originating from Jordanian territory or through the Gulf of Aqaba. Shin Bet also stated that Zini’s visit to Eilat had not been triggered by specific warning intelligence.

The Houthi movement remains the most clearly demonstrated external threat axis. On 9 June 2026, Israeli air defence intercepted a drone launched from Yemen over Eilat. Earlier successful Houthi drone attacks against Eilat also show that the air threat is not theoretical.

Publicly visible indicators of an imminent large-scale operation remain absent: no confirmed hostile structure in the Eilat area, no verified preparation of multiple attack axes, no documented weapons transfers, no known target reconnaissance, and no publicly evidenced activation of local support networks.

 The Essentials in 30 Seconds

• On 24 June 2026, Germany’s Federal Prosecutor General ordered searches at premises in Berlin and Frankfurt am Main.

• A Russian national is suspected of aiding and abetting offences under the Foreign Trade and Payments Act and aiding and abetting attempted anti-constitutional sabotage.

• The case concerns the planned liquidation of the former Gazprom Germania GmbH in March 2022 after an acquisition that remained legally ineffective pending investment review.

• According to the Federal Ministry for Economic Affairs and Climate Action, the Moscow-based JSC Palmary was the indirect acquirer.

• The Customs Criminal Investigation Office leads the police investigation. The proceeding combines foreign-trade criminal law, financial investigation and a state-security offence.

The Essentials in 30 Seconds

The German–Polish defence agreement of 17 June 2026 does not close an abstract cooperation gap. It targets defined eastern-flank requirements: movement of heavy forces, host nation support, air defence, engineer support, cyber defence, defence-industrial cooperation, Baltic Sea security and protection of critical infrastructure.

Poland allocates around PLN 200 billion to defence in 2026, roughly 4.8 percent of GDP and about USD 55 billion. Germany remains the rear operational, transit and industrial area. Poland remains the forward state between Belarus, Kaliningrad, Ukraine, the Baltic Sea and the Baltic reinforcement corridor. The axis only has military effect if troop movement, ammunition stocks, interceptor depth, command networks and infrastructure hardening are materially available.

Kaliningrad defines the immediate pressure space. Iskander-M reaches up to 500 kilometres. S-400 with 40N6 missiles is reported with a nominal range of up to 400 kilometres, while sensor horizon, target altitude, terrain and electronic countermeasures limit practical engagement geometry. Polish staging areas, air-defence nodes, ports, energy infrastructure and transport hubs remain within direct Russian pressure range.

The Essentials in 30 Seconds

A European nuclear shield without the United States cannot provide a full replacement for the American nuclear guarantee in the near term. France and the United Kingdom retain credible second-strike capabilities, but they do not possess the nuclear mass, global early-warning architecture, bomber triad, integrated nuclear planning structure or escalation dominance of the United States. The deficit is not limited to warhead numbers; it includes C2, ISR, ASW, missile defence, political threshold logic and industrial reload capacity.

France forms the only fully sovereign nuclear core inside the European Union. Paris controls doctrine, employment decision, delivery systems and the industrial chain at national level. The French forward-deterrence line expands Europe’s deterrence space, but remains tied to French vital interests. It creates a European-usable deterrence pillar, not a shared European command authority over nuclear weapons.

Germany, Poland, Italy, the Netherlands, the Nordic states and the Baltic states can materially reinforce nuclear deterrence without becoming nuclear-weapon states. Their contribution lies in hardened infrastructure, host-nation support, air defence, counter-ISR, space situational awareness, cyber resilience, tanker capacity, dispersal areas and conventional deep strike. A German or Polish national nuclear path would be legally destructive, operationally slow and strategically destabilising

The Essentials in 30 Seconds

The United States is not reducing its NATO commitment as such. It is reducing parts of the force package assigned to the Alliance for the first months of a crisis or defence scenario.

The affected capabilities are high-value enablers: strategic bombers, aircraft carriers, destroyers, maritime patrol aircraft, drones, tankers, a cruise-missile-capable submarine, and the Tomahawk component planned for Germany.

Europe can add fighter, naval and land-force contingents. It cannot replace the US enabler chain of aerial refuelling, ISR, strategic transport, sea-based precision strike, sensor fusion, C2 and nuclear assurance.

Russia will not assess this as an isolated force table. Moscow will assess a time window: US focus on the Indo-Pacific, European capability gaps, slow procurement, limited ammunition stocks and unclear replacement commitments.

Key Judgments

NATO's E-3A fleet is based on the Boeing 707 airframe and is approaching the end of its operational life around 2035. The replacement requirement is not limited to aircraft; it covers airborne early warning, battle management, data fusion and tactical command capability after 2035.

Saab GlobalEye is currently the strongest available option for reducing direct US dependence. The capability is available, European-connectable and under contract with France since December 2025, but it remains dependent on the Bombardier platform, Canadian export control and sufficient fleet size. It is likely that GlobalEye will form the core of the NATO successor fleet; a formal contract award has not been confirmed.

The E-7 Wedgetail is militarily capable but remains structurally embedded in the US-led industrial corridor. After the US cancellation of its own E-7 procurement in June 2025 and the abandonment of the six-aircraft NATO acquisition by the remaining partner nations in November 2025, a return to the E-7 as the alliance solution is unlikely.

An Airbus-based AEW&C solution remains strategically attractive as a follow-on generation, but it is not a credible replacement path for the early 2030s.

The Essentials in 30 Seconds

France is equipping selected A400M Atlas aircraft with the Parallel Mission System, extending the platform from airlift into an airborne mission node.

The operational focus is tactical command, ISR support, sensor integration, data distribution and stand-off mission coordination.

For the German Luftwaffe, the programme creates capability pressure: Germany operates Europe’s largest A400M fleet but has not yet derived an equivalent C2/ISR pathway from the platform.

For NATO, the French approach is relevant if implemented interoperably. A modified A400M can strengthen rear-area command capacity, tactical resilience and distributed operations.

The Essentials in 30 Seconds

China uses research cooperation as an access route to high technology. Relevant transfer means include personnel access, joint publications, code, datasets, conferences, doctoral pathways, visiting-researcher programmes and follow-on careers. Cybersecurity, AI, cryptography, software analysis and vulnerability research sit inside the core field of China’s civil-military fusion.

CISPA is a state-funded German cyber centre of strategic value. From 2029/30, it is set to receive around EUR 45 million in additional annual funding; Saarland is providing up to EUR 350 million for the new campus in St. Ingbert. This funding increases personnel strength, infrastructure, research output, international visibility and target value for foreign intelligence services.

Germany’s counter-architecture remains insufficiently integrated. BAFA export controls, BSI and domestic-intelligence awareness work, university guidelines and the EU research-security framework exist, but they do not impose a unified high-risk review path for partners, personnel, code, data, end use and return structures. Publicly funded cyber excellence therefore remains exploitable for Chinese capability chains.

The Essentials in 30 Seconds

The ODNI release of 12 June 2026 describes US-funded threat-reduction structures, pathogen custody, laboratory vulnerability and information-operations exposure in partner states.

The operational focus is on biosecurity, biosurveillance, diagnostic capacity, site protection, proliferation control and the vulnerability of laboratory infrastructure in war zones and grey-zone environments.

The Ukraine component of the Biological Threat Reduction Program had been publicly documented since 2005. The release adds internal risk language, specific vulnerabilities and intelligence assessments on Russian exploitability.

The military-intelligence relevance lies in access potential, seizure risk, fragment exploitation, Russian biolab narratives and protection requirements for Western biosecurity cooperation.

The Essentials in 30 Seconds

The U.S.–Iran MOU stabilises the Gulf in the short term, reduces direct combat activity and opens a 60-day window for a final agreement. It does not irreversibly dismantle any core Iranian capability.

The sequencing favours Tehran. Washington moves early on blockade removal, oil waivers, financial access and sanctions relief; Iran initially preserves the status quo and shifts substantive obligations into later negotiations.

The nuclear risk remains operationally relevant. Infrastructure, material base, enrichment competence, centrifuge know-how and breakout potential are frozen, not eliminated.

Hormuz is stabilised, not neutralised. Iran remains an implementation actor for passage, demining and technical obstacles. The actor that restores access retains influence over the maritime access regime.