The drone with explosives at a German airport was not a mistake. It was a probe.

ON THE NIGHT of August 4th an airport employee at Leipzig/Halle, one of Europe's busiest cargo hubs, spotted an unidentified flying object near the southern runway. What he found on the tarmac was not a stray quadcopter but a drone fitted with explosives and a detonator, positioned within sight of a Ukrainian Antonov transport aircraft bearing the inscription "Be brave like Kherson". Federal police specialists removed the detonator with a bomb-disposal robot. A DHL cargo plane that had aborted its landing collided with a second, as yet unconfirmed, flying object and landed safely in Hanover with minor damage. Operations resumed. No one was hurt. The device failed to detonate because of a technical glitch.

A technical glitch is not the same thing as an accident. The incident, as Germany's interior minister, Alexander Dobrindt, put it, is a "new threat scenario" and a "professional hybrid threat". The words matter. For more than two years Europe has been watching drones loiter above military bases, nuclear infrastructure and civilian airports. What has changed is that the drones now carry explosives.

The Leipzig episode is not an isolated provocation. It sits at the sharp end of a campaign. In July the International Institute for Strategic Studies, a London-based think-tank, assessed that it was "highly likely" the Kremlin had conducted a coordinated unmanned-aerial-vehicle campaign across Europe between August 2024 and February 2026. The report documented 144 suspicious drone sightings across 13 countries. Germany recorded the most: 58. Sightings spiked from an average of four per month to 22.5 in the autumn and winter of 2025. Nearly half occurred over military installations; a further 26% targeted critical infrastructure such as ports and energy sites. The IISS judged the pattern too concentrated and persistent to be explained by misidentification, hobbyist activity or opportunistic harassment alone.

What makes the IISS report distinctive — and controversial — is its suggestion that a subset of these drones may have been launched from vessels in the Russian "shadow fleet", a fleet of age-old tankers and freighters that sail close to European coastlines, sometimes with their AIS (automatic identification system) transponders switched off. The only publicly confirmed incident of this kind occurred in February, when the Swedish military jammed a drone launched from the Zhigulevsk, a Russian signals-intelligence ship, as it headed towards the French aircraft carrier Charles de Gaulle during a port visit to Malmö.

Scepticism about the shadow-fleet hypothesis is warranted. Dranewatch, a specialist defence publication, points out that the IISS relies on correlation — drone sightings happening while Russian-linked vessels are offshore — rather than physical evidence. Danish police, after months of investigation, found no connection between shadow-fleet ships and any drone incidents in their waters. In Belgium, high-profile sightings were later identified as police helicopters. In Italy, an alert attributed to a suspected Russian Zala drone turned out to be radio interference from a household signal booster. Commercial multirotors lack the range to fly hundreds of kilometres from North Sea vessels, as Dutch officials noted.

True. But the IISS does not need every sighting to be a Russian military drone for its conclusion to hold. The Leipzig device was found on the ground, at a secure cargo area, near a Ukrainian aircraft. It carried an explosive. German investigators described it as the work of "professional actors", not amateurs. American officials familiar with intelligence reports, according to The Wall Street Journal, believe the drone "likely belongs to the Russian government". The device does not need to have been launched from a shadow ship to have been ordered by the Kremlin. What matters is the escalation: from reconnaissance to sabotage, from airspace intrusion to armed attack.

This is where Germany's response reveals a familiar problem. Chancellor Friedrich Merz announced in June a plan to spend nearly €650bn over the next five years on defence, more than double current spending, aiming to meet NATO's revised target of 3.5% of GDP. The 2026 defence budget stands at €108.2bn, supplemented by a €500bn special infrastructure fund. In October 2025 the government committed to buying over 600 Rheinmetall Skyranger 30 short-range air-defence systems in a €9bn deal, with deliveries running through 2030. These systems can detect microdrones weighing as little as 250g from 6km away. The Bundeswehr has been authorised to shoot down drones. In June Mr Dobrindt created a Joint Centre for Countering Hybrid Threats.

The ambition is credible. The trouble is that the spending is calibrated for conventional warfare, and the threat is asymmetric. Skyranger 30s are designed to detect and engage drones in military airspace, not to protect a cargo runway at a civilian airport. They cost billions and take years to deliver. The drone that sat on the tarmac at Leipzig probably cost a fraction of that. The incentive structure is all too familiar from Ukraine: one side spends fortunes on defences designed for a 20th-century threat model; the other spends pocket change on improvised, deniable weapons. The asymmetry is not a bug of hybrid warfare. It is the point.

Germany's institutional architecture compounds the problem. Airports are civilian infrastructure, defended by police, not the military. Police do not have the sensor coverage, the Rules of Engagement or the procurement pipelines of the armed forces. The European Drone Defence Initiative, NATO's new counter-drone programme, will only engage drones once they enter European airspace. It has no mandate over the vessels that may be launching them in international waters. As the IISS puts it, the system protects the border but leaves the mechanism of attack intact.

There is a political dimension, too. Mr Merz's government has spent considerable capital signalling its break with Germany's post-war defence reticence. Big numbers — €650bn, 3.5% of GDP, 600 air-defence systems — look impressive in a press conference. They also paper over the fact that the Bundeswehr currently has only 50% readiness across its land forces, a shortfall of about 20,000 troops and a maintenance backlog running into the billions. The F-35 fighter programme will not reach full operational capability until 2026 at the earliest. The promised brigade of 4,800 soldiers for Lithuania has already struggled to deploy. A procurement acceleration act is only now heading to the Bundestag. The state is trying to build a conventional army while the threat it faces most immediately looks like a parcel bomb on a runway.

The stronger case against alarmism deserves to be heard. The Leipzig device did not detonate. Russia has not claimed responsibility and Moscow has denied involvement in previous incidents. Attribution in the hybrid zone is notoriously difficult, as Germany's own Federal Criminal Police Office has acknowledged. Some share of the 144 sightings the IISS compiled may well be misidentifications. The campaign, if it is one, has not yet caused major casualties or destroyed critical infrastructure.

Yet the fact that the device failed is precisely what makes it a probe, not a failure. A professional attacker does not need to succeed on the first try. The objective is to test response times, sensor coverage, legal authorities and political will. Leipzig told the planners that airports are vulnerable, that civilian and military authorities do not share a seamless command picture, that a single consumer-grade platform can bring a major freight hub to a halt and that the political response — a minister cutting his summer break short, declarations of "new quality" — is proportionate to the disruption but not yet to the strategic implication.

The question for Europe is not whether to spend more on defence. It already is. The question is how to spend differently. Counter-drone capability at civilian infrastructure cannot be bolted on to a military procurement pipeline that moves at the speed of parliamentary committees. It requires dedicated sensor networks at airports, ports and energy terminals; legal clarity on who can shoot down a drone in civilian airspace and under what conditions; and cooperation with neighbours on the vessels that sail offshore without identification. That cooperation is the politically awkward part. Interdicting a tanker in international waters is not a police matter. It is an act of naval enforcement, with escalation risks of its own.

Russia's hybrid campaign works because it is designed to exploit the seams between jurisdictions, the gaps between budgets and the hesitation between crisis and war. A drone with explosives on a runway is small enough to be dismissed as an incident and large enough to be a warning. The danger is not that Europe will be defeated by drones. It is that the cost of defending against them will be treated as an administrative inconvenience rather than a structural feature of a long war.

Better to recognise the probe for what it is, before the next one does not fail.