Russian President Vladimir Putin has made inadequate drone defenses and slow repairs grounds for putting private assets under state management. His 24 August security decree opens a new way to government control over Russia’s economy.

It expands a mechanism Russia has used against foreign-owned businesses since 2023, according to research by Nektorov, Saveliev and Partners (NSP), a Russian law firm that tracks state takeovers.

A business need not lose a facility before the measure can apply. Decree No. 604 allows action over late security measures, safety violations, conduct that endangers normal operations, ineffective counter-drone steps, or delayed restoration.

The text does not specify what counts as “ineffective” drone protection or how quickly a facility must be restored. Covered sectors include energy, industry, communications, utilities, transport, logistics, and life-support infrastructure, plus any sites deemed important to Russia’s security or economic stability.

Foreign controllers are also covered, including foreign organizations and citizens controlling Russian companies. Temporary management can reach all or part of an entity’s Russian property, securities, stakes in Russian companies, and other property rights—the rule is not limited to the damaged or vulnerable facility alone.

“Temporary” control has no deadline

At the same time, the text mentions no automatic return deadline. Putin must instruct the government to begin temporary management and then end it. By default, the Federal Property Management Agency assumes the owner’s powers, except for the right to dispose of the assets. The assets’ costs will be covered from its income.

Interfax published Denis Manturov’s remarks. The first deputy prime minister said the measure would be used selectively for specific security tasks and would leave formal ownership unchanged.

Komsomolskaya Pravda’s Alexander Kots raised a practical problem: Russian law, he wrote, gives businesses no instructions for defending sites against drones or cruise missiles, while barriers require extensive approvals, and private guards cannot easily be given weapons more powerful than shotguns.

The decree followed weeks of Ukrainian attacks on Russian refineries, ports, and warehouses. Ozon reported six disruptions at its facilities after 22 August. The listed retailer’s shares fell as much as 29.09% from Friday’s close on Monday, after five weeks of strikes on privately held Wildberries.

Explore further

Why did Ozon fall as much as 29% while Russia’s market lost 2.9%?

Refining hit two-decade lows as strikes forced Russia to import gasoline, while a sixth Ust-Luga attack since March struck the country’s largest Baltic port.

NSP’s nationalization study records more than 100 cases since 2022 and about 6.5 trillion rubles (about $78 billion) in seized assets. It says cases averaged one court hearing and roughly two months.

The NSP temporary-management table lists several foreign-owned businesses placed under “temporary” management from 2023 whose owners still lack access because the arrangements remain indefinite.

Germany has placed part of a federal ministry directly next to a Berlin building that France links to Russian intelligence, the newspaper Tagesspiegel reported. The branch office shares a wall with the Russian House, a cultural center long suspected of serving as a Kremlin front. One of its units works on protecting Germany's critical networks from attack.

A shared wall in the heart of Berlin

The Federal Ministry for Digital Affairs opened a branch at Taubenstraße 42/43 on 1 July. It sits wall-to-wall with the Russian House on Friedrichstraße, reporter Claudia von Salzen found. The ministry moved in because its main headquarters nearby had run out of space.

Two of the ministry's six departments now operate there. One covers digital infrastructure, including a unit for the security and resilience of public telecom networks.

The other handles digital identities, trust services, and the cybersecurity industry. Both are fields a hostile intelligence service would want to watch.

Explore further

The throwaway agents Moscow sent after a Bavarian drone boss arming Ukraine—and how Germany stopped them

Why the address raises alarms

The Russian House is officially a science and culture center. It opened on Friedrichstraße in 1984 to promote friendship with the Soviet Union.

Rossotrudnichestvo, a Russian state agency, runs it. The EU sanctioned that agency in July 2022 as the Kremlin's main tool for hybrid influence. In Germany, it allegedly helped organize pro-Russian rallies, and many of its staff abroad are Russian intelligence officers.

A leaked French Interior Ministry letter states the building serves as cover for Russian intelligence. The Russian House rejected that and claimed it is a purely cultural institution.

Other branches of government took the threat seriously

Across town, German lawmakers near the Russian Embassy hardened their offices years ago. They were told to avoid Bluetooth devices and to fit their windows with anti-espionage film.

Berlin is also reviewing whether to close the Russian House over the espionage suspicions, TVP World reported. A senior lawmaker, Roderich Kiesewetter of the CDU, called the ministry's choice a clear failure of risk awareness.

Explore further

Germany declared a break with Russia—then licensed its nuclear giant

The ministry said it picked the site because the building is federally owned and the right size. It did not answer whether the proximity to the Russian House counts as a security risk.

Russia's shadow war has already reached Germany

Germany has become one of the busiest fronts in Russia's campaign of drone incursions, sabotage, and spying. By December, Germany had logged more than 1,000 suspicious drone flights in 2025 alone. The drones have swarmed both civilian airports and military sites, shutting Munich Airport over two days in October 2025 and stranding thousands of travelers. Analysts judge it highly likely that Russia flew some 144 surveillance drones over a dozen NATO countries between August 2024 and February 2026, including near Ramstein Air Base and NATO nuclear sites. In early August 2026, security staff found an explosives-laden drone beside a Ukrainian cargo plane at Leipzig-Halle airport, an incident Western intelligence tied to Moscow.

Explore further

A bomb-laden drone hit a Ukrainian An-124 in Germany, then lay unnoticed for hours

Much of the ground work runs through disposable agents recruited online. In March 2026, authorities arrested operatives who had surveilled the head of a Bavarian drone firm arming Ukraine, a case its domestic service treats as a planned assassination. Prosecutors separately charged three men over a plot to mail exploding parcels from Germany, described as a test run for future arson attacks.

Russia may expand hybrid attacks against Poland and the Baltic states, including infrastructure sabotage or false-flag attacks, Bloomberg reported on 12 August, citing an unnamed European intelligence official. 

The warnings come amid concern that Moscow wants to intimidate Ukraine’s supporters. The CIA warning follows Russian threats, incursions, alleged sabotage plots, and disinformation against Poland and the Baltic states. Most Western military aid reaches Ukraine through Poland, while the Baltic states rank among Kyiv’s strongest supporters. Sabotage of transport, energy, or communications can slow aid delivery and test NATO while hiding Russia’s role.

Separately, a European government official told Bloomberg that the CIA had warned countries in the region of a possible future Russian attack. The CIA declined to comment.

The same official said Russia might instead be creating the impression of an impending attack to sow fear as part of an information operation. The official saw no signs that Moscow was preparing a conventional attack or invasion.

Moscow tests NATO’s eastern flank

Poland and Lithuania had already raised similar concerns. In July, Poland said it had credible intelligence that Russia was planning new provocations. Lithuania later warned that Moscow might rebuild captured Ukrainian drones for false-flag strikes on critical infrastructure.

In September 2025, between 19 and 23 Russian drones entered Polish airspace, shutting down airports and damaging buildings. Poland closed four airports as NATO aircraft responded.

Meanwhile, five people are on trial in Lithuania over attacks allegedly organized for Russian military intelligence in 2024, Bloomberg reported. Lithuania has reinforced infrastructure sites and deployed troops since June.

These warnings and incidents place the CIA alert within a wider pattern of pressure on NATO’s eastern flank and Ukraine’s supporters. 

How Russia strikes without starting a war

Bloomberg cited several recent unexplained drone incidents in Germany alongside the CIA warning. Citing Die Zeit, Euromaidan Press reported that an explosive-laden drone struck the wing of a parked Ukrainian An-124 at Leipzig-Halle airport and failed to detonate. A US Defense Department official in Europe told CNN that Washington assessed the drone belonged to Russian intelligence. 

Bloomberg also reported that a cargo plane hit an unidentified object and that drones appeared over a military base the following day. It did not connect either incident to Russia.

More broadly, Russian hybrid operations have grown sharply since the full-scale invasion. CSIS found that attacks in Europe tripled from 2023 to 2024, after quadrupling the previous year. Separately, the US Helsinki Commission mapped nearly 150 operations in NATO territory attributed to or suspected of Russia between February 2022 and November 2024.

Retired Lt. Gen. Ben Hodges told Euromaidan Press in February that attacks on ports, railways, and cables can probe routes needed for NATO reinforcements. Their deniability raises the political cost of responding.

By hiding its role, Moscow can disrupt support for Ukraine and test NATO without openly starting a war.