It was almost midnight on a warm August evening when a bus driver at one of Europe's busiest cargo airports noticed what appeared to be drone debris next to a large Ukrainian aircraft.
asserted
what → notice → aircraft
The driver, ferrying pilots on the night shift at Leipzig Airport, in Germany's east, parked his bus and tentatively approached the wreckage, poking at pieces with his foot.
asserted
driver → ferry → foot
He was unaware a vegetable soup can among the debris was packed with 600 grams of Semtex explosive — enough to unleash a fireball capable of obliterating everything within 10 metres.
asserted
can → pack → metres
When airport police arrived 30 minutes later, officers discovered two more drones carrying over a kilogram of high-powered explosives.
asserted
officers → arrive → explosives
CCTV footage later revealed the explosive-laden drones had flown directly into the wing of the Ukrainian Antonov aircraft, which had just been filled with 25,000 litres of jet fuel.
asserted
which → reveal → fuel
For some reason, the payload failed to detonate.
asserted
payload → fail → reason
Officials say if the plot to blow up the freshly refuelled plane had succeeded, dozens of people could have died.
uncertain
dozens → say → people
It quickly became obvious to German intelligence Russia was behind the attack, marking a staggering escalation in its hybrid warfare against NATO member states.
asserted
Russia → become → states
Moscow's tactics are deliberately varied: threatening drone incursions over restricted airspace, crippling cyber-attacks on state infrastructure, and the physical sabotage of undersea data cables and oil pipelines, to name but a few.
asserted
tactics → threaten → few
While exact numbers are hard to quantify, European intelligence officials say Moscow has launched at least 200 hybrid attacks in 2026, though NATO suspects the true number is much higher and doesn't include hundreds of attempted cyber attacks and multiple suspicious fires across Europe.
"We have seen a significant intensification of these hybrid attacks regarding numbers and regarding the escalation of violence," said Colonel Johan Schmid, a senior ranking member of the German armed forces and a leading global authority on Russia's hybrid aggression.
asserted
Schmid → quantify → aggression
"By attacking Germany and other nations within NATO, Russia is implementing a price on us, on the West, for its support towards Ukraine."
Colonel Schmid, who has held senior roles within NATO and spent 16 years warning of Moscow's covert operations, told the ABC many countries remained unprepared for hybrid attacks.
asserted
countries → attack → attacks
"From 2014 to the time of Russia's full-scale invasion of Ukraine, hybrid warfare wasn't taken seriously enough," he said.
asserted
he → take → Ukraine
"It took the military escalation by Russia in Ukraine to really wake everyone up."
He added that the war in Ukraine proved Moscow does not separate hybrid tactics from conventional military methods.
asserted
Moscow → take → methods
"For eight years leading up to the full-scale invasion, plausible deniability was the core element of Russia's approach towards Ukraine, working via proxy actors in conjunction with more robust military interventions," Colonel Schmid said.
asserted
Schmid → lead → interventions
While Colonel Schmid believes Russia views its hybrid campaign as equal in importance to its conventional battlefield efforts, NATO categorises them separately.
asserted
NATO → believe → them
Under current NATO agreement, a Russian-sponsored hybrid attack that kills civilians or military personnel in a NATO country would likely trigger Article 4 of the alliance, which calls for emergency consultation rather than collective military action.
asserted
which → sponsor → consultation
Article 4 was triggered twice last year in response to Russian hybrid aggression, and both times Moscow seemingly dismissed it.
asserted
Moscow → trigger → it
Some European spy chiefs believe the Kremlin welcomes Article 4 invocations as evidence that its shadow war is working, particularly because the threshold to trigger Article 5 — a unified military counter-attack — remains deeply ambiguous by NATO's own admission.
asserted
threshold → believe → admission
Poland's Prime Minister, Donald Tusk, has previously noted Russia uses these hybrid attacks to intimidate and show that Article 5 is "more theoretical than practical".
asserted
Article → note → attacks
While the Kremlin has unleashed hybrid attacks across Poland, Luxembourg, and the Baltic states, Germany has emerged as one of its primary targets, with attacks in the country growing increasingly brazen.
asserted
attacks → unleash → country
"Russia has shifted to open aggression on German soil," Konstantin von Notz, a German MP who is also deputy chair of the country's parliamentary intelligence committee, told the ABC.
asserted
who → shift → ABC
"
While Moscow likely views Germany as Ukraine's most critical European ally, analysts believe the Kremlin also sees the nation as uniquely vulnerable.
asserted
Kremlin → view → nation
Following the atrocities committed by the Schutzstaffel or SS — a prominent and depraved Nazi paramilitary unit that reported to Adolf Hitler — during World War II, subsequent constitutional reforms stripped Germany's intelligence agencies of centralised power.
asserted
reforms → follow → power
While seen as a vital safeguard at the time, it has left the country's contemporary spy network fractured, legally barred from making arrests or even questioning suspected foreign operatives.
asserted
it → see → operatives
Mr von Notz has long opposed expanding German intelligence powers, but Moscow's escalating aggression has made him warm to the idea.
asserted
him → oppose → idea
"The German special police took part in the Holocaust, so [the separation of powers] is a very important part of our constitution," he said.
asserted
he → take → constitution
"But in a time where we have such relevant threats from the inside and from the outside, from countries that are not democracies, I think we have to be more robust."
asserted
we → have → countries
The parliamentary committee Mr von Notz co-chairs has documented attacks on the national rail network, drone incursions over military facilities, an assignation plot, and a surge in Russian-led disinformation campaigns.
asserted
Notz → co → campaigns
However, it was the near-miss in Leipzig that finally prompted German politicians to demand a beefing up of national defences.
asserted
that → prompt → defences
"In Leipzig, you had drones carrying bombs that flew into a fuelled aeroplane, and by pure accident, the drones didn't explode," Mr von Notz said.
asserted
Notz → have → accident
"That's an airport where not only cargo planes are flying; that's an airport where everyday people are flying on holidays to Mallorca.
asserted
people → fly → Mallorca
This is a tough fact we have to confront here in Germany."
asserted
we → have → Germany
Following the failed Leipzig attack, Germany shut down a Russian embassy outpost in Bonn and a Moscow-funded "cultural centre" in Berlin, which officials once described as merely a cover for espionage agents.
asserted
officials → follow → agents
German authorities claim to have identified the main culprit behind the Leipzig plot: a Latvia-based Russian spy working for the GRU, Russia's military intelligence arm, who led a team of two lower-level spooks.
uncertain
who → claim → spooks
All three suspects are alleged to have fled to Russia.
asserted
suspects → allege → Russia
The Kremlin has denied responsibility for the Leipzig attack, routinely claiming its hybrid attacks are either accidental infrastructure failures or a Western conspiracy designed to espouse Russophobia.
asserted
attacks → deny → Russophobia
The Aporia
