Europe's offensive cyber pitch skips the cheaper punishments already on the shelf

Cyber operations appeal to a cabinet because they are deniable. Tom Uren's objection, in the Seriously Risky Business newsletter, is that deniability disqualifies them from the job the Munich speakers described: an operation Moscow can absorb without acknowledging changes no Russian decision, so anything that would actually stop the sabotage has to hurt, which means big and noisy ^[10]. NATO members with far more mature offensive programmes have not run cyber sabotage campaigns inside Russia, which is why Uren reads the missing ingredient as will rather than tooling ^[15].

The cheaper instruments are already in hand. Uren names three lines of non-cyber pressure Europe has chosen not to apply: more sanctions, going after the shadow fleet that moves oil around the existing ones, and closing Russian consulates while expelling diplomats ^[11]. Three named, none used ^[14]. Each carries lower escalation risk and less legal ambiguity than a destructive network operation, and each has an obvious owner inside a foreign ministry. His inference follows from that: capitals that decline the expulsion will hesitate at the destructive operation too, whenever the capability finally lands ^[16].

The activity underneath the rhetoric is not primarily a network problem. GRU handlers are using the Wagner Group to recruit disposable locals, per Financial Times reporting cited in the newsletter ^[7], and the resulting incidents have been irritating rather than lethal or economically serious ^[12]. Prosecutions land on the recruits and have not touched the campaign's tempo ^[13]. What has moved is ambition: fifteen defendants charged over parcel bombs sent through Lithuanian delivery firms ^[8], with reporting that the next phase targeted cargo aircraft bound for the United States and Canada ^[9]. The charges are on the record; the cargo-plane stage is reporting rather than an indictment ^[9].

Shekerinska named China alongside Russia ^[2], but the whole cost menu on the table concerns Russia, and the call itself is being driven by Russian aggression in Europe ^[4]. No one at Munich, including the intelligence chiefs who echoed Virkkunen ^[3], described an instrument aimed at Chinese operations. For defenders the planning assumption does not move this quarter. Poland's grid was targeted late last year ^[5], the proxy sabotage continues ^[6], and the deterrent being requested needs both a procurement cycle and a political decision that has already failed a much easier test. Uren does support building sovereign European capability, partly because the alliance looks less reliable than it did ^[17]. That is an argument about the next five years, not a change to the threat model for grid operators and delivery networks being probed now.