France is already conducting undisclosed conventional military responses to Russian hybrid attacks an undisclosed source told Le Monde. What is your most up-to-date and in-depth assessment?
FR-01, France Agent:
Yes. The line you are referring to is real, and it is more consequential than it looks.
On 19 September 2026, Le Monde reported that when a French military source was asked whether France might respond militarily, in the conventional domain, to Russian hybrid attacks without necessarily publicizing the response, the source replied: “C’est déjà le cas” — “That is already the case.”
That does not establish that France is secretly conducting kinetic strikes on Russian territory, and Le Monde does not say that. But taken together with Emmanuel Macron’s remarks on 18 September, France’s revised military-programming law, its hybrid-warfare doctrine, and the recent change in French attribution practice, it points to a significant doctrinal evolution: Paris appears increasingly willing to answer an asymmetric Russian action with a response in a different domain, while deliberately withholding the nature, timing and possibly even the existence of the response.
My assessment: France is moving from “resilience” toward cross-domain deterrence
The most important sentence Macron used on 18 September was not simply that the Russian hybrid threat had intensified. Discussing retaliation, he said that the nature of deterrence is precisely not to reveal what France will do, before adding that Russian actions “will not remain without response.” He also confirmed that France has already suffered attributed cyber and information attacks.
Put that beside the military source’s “already the case,” and a coherent architecture appears.
Previously, the publicly visible French ladder looked approximately like:
Russian hybrid operation → investigate → attribute → diplomatic/economic/cyber response.
The emerging model looks more like:
Russian hybrid operation → assess cumulative strategic effect → privately select a response from the entire French toolbox → impose costs in a domain Paris chooses → disclose, partially disclose, or conceal the response.
That last distinction matters enormously. It means France may no longer consider itself obliged to answer cyber with cyber, sabotage with arrests, or information warfare with counter-information.
There is now documentary support for this broader philosophy. France’s 2025 National Strategic Review explicitly identifies five priority hybrid domains—cyber, information manipulation, lawfare, economic action and military operations—and says the objective is to constrain adversaries, particularly Russia, while strengthening France’s ability to manage escalation.
Then came the August 2026 update to the military-programming law. It explicitly strengthens France’s offensivecapabilities in hybrid fields and describes defensive cyber operations, offensive cyber operations and military influence operations as instruments available when hybrid warfare threatens France. It also introduces a graduated and attributable cyber-deterrence capability against states conducting persistent attacks on French interests and critical infrastructure.
So the Le Monde disclosure does not appear in a doctrinal vacuum.
What might “conventional military responses” actually mean?
This is where analytical discipline is essential.
There is currently no public evidence in the material I found demonstrating French kinetic attacks against Russian territory in retaliation for hybrid operations. Treating “C’est déjà le cas” as confirmation of French covert missile strikes, sabotage inside Russia, or assassinations would go substantially beyond the reporting.
“Conventional military response” could instead encompass a much wider spectrum.
My assessment is that the likelier possibilities include deliberately increased French military support or enabling activity benefiting Ukraine; deployments or force movements that impose additional Russian military costs; intensified intelligence, surveillance and targeting support; military countermeasures against Russian assets operating around Europe; actions involving Russian maritime activity; or other military operations whose connection to a particular Russian hybrid act is intentionally not announced.
Some of those possibilities are inference rather than established fact.
There is an especially interesting clue in France’s broader posture. Paris and Berlin agreed in July to develop the relationship between conventional forces, deep precision strike, missile defence and nuclear deterrence, explicitly describing this as improving escalation management beneath the nuclear threshold.
That does not prove what the unidentified French source was describing. But it demonstrates that cross-domain escalation management is now being thought about institutionally rather than rhetorically.
Why Paris would keep the response secret
There is a strategic logic here that fits French practice particularly well.
Public attribution creates a political problem: once Paris announces “Russia attacked us,” domestic audiences, allies and Moscow all begin asking what France will do about it. A publicly announced military retaliation then creates another problem: Moscow faces pressure to respond.
A non-public response breaks that escalation chain.
Moscow can receive the cost without Paris publicly forcing Moscow to acknowledge that it received it. Paris can also communicate privately through intelligence or military channels that a particular Russian operation generated a particular French consequence.
That produces something close to deterrence by privately communicated punishment.
And Macron confirmed on Friday that contacts with Russia continue “at the level of the services.”
That channel is important. Strategic ambiguity works poorly if the adversary cannot determine whether an apparent setback was accidental or retaliatory. France therefore has the theoretical option of maintaining public ambiguity combined with private clarity:
French public: little or nothing is disclosed.
Russian leadership/services: potentially know why something happened.
European allies: selected governments may be informed.
France: retains escalation control and plausible political deniability.
That, in my view, is the most strategically significant interpretation of the Le Monde passage.
Something else has changed: French attribution itself
For years Paris was unusually cautious about publicly identifying Russia as responsible for individual hybrid operations. Le Monde notes precisely this distinction between France and eastern European states.
That restraint is weakening.
In July France formally attributed persistent cyberespionage operations against French targets to FSB Unit 61240/Turla. French authorities say targets included the Armed Forces Ministry, diplomatic networks, the justice sector and a sensitive-technology research institute working with the French defence industry.
That followed France’s April 2025 attribution of APT28 activity to Russia’s GRU.
The progression is therefore notable:
quiet suspicion → technical attribution → political attribution → explicit warning → undisclosed retaliation.
We should not assume every suspected sabotage incident belongs in that chain. Le Monde itself reported, for example, that the January fire at a Thales facility in Brest was being examined through the foreign-interference investigative framework while the accidental explanation remained the official investigative hypothesis.
That caution is important because hybrid warfare creates a dangerous attribution problem: an accident, criminal act, proxy operation and state-directed sabotage can initially look very similar.
France is simultaneously preparing its territory for a higher threshold
There is another development that I think deserves at least as much attention as the anonymous quotation.
France’s August military-programming legislation created an “état d’alerte de sécurité nationale”, a national-security alert regime that can be activated in response to a serious and current threat to national security, circumstances requiring France to fulfil international defence commitments, or a situation requiring imminent deployment of French or allied forces on French territory.
Meanwhile, French authorities have been working on classified graduated defence stages capable of triggering military deployments domestically according to the intensity of the hybrid threat.
And this week the French Air and Space Force ran XLAD26, involving 180 participants and roughly twenty scenarios testing counter-drone command chains in a simulated high-intensity conflict on French territory.
These developments collectively suggest that France is preparing for a continuum rather than two neat conditions called “peace” and “war.”
Something closer to:
espionage → influence → cyberattack → sabotage → lethal sabotage → attacks on critical infrastructure → limited conventional confrontation → major conflict.
The difficult policy question is no longer simply where “war” begins. It is at what point on that continuum France imposes military costs.
The central strategic problem: deterrence without an obvious red line
There is a paradox.
Ambiguity can strengthen deterrence because Moscow cannot know exactly which action will trigger which French response.
But excessive ambiguity can weaken deterrence because Moscow cannot know whether France retaliated at all.
France therefore appears to be experimenting with a form of calibrated strategic ambiguity: conceal operational responses, retain private communication, selectively attribute Russian operations, and occasionally reveal enough—as this anonymous military source apparently just did—to tell Moscow that the mechanism exists.
In that interpretation, the Le Monde quotation itself may have signalling value, whether or not its publication was deliberately encouraged. The message is not:
“France will attack Russia.”
It is closer to:
Do not assume that because you cannot see a French response, there has been no French response.
That is a considerably more sophisticated deterrent message.
Where I would put the strategic threshold now
I would be careful about saying France and Russia are already in a conventional war. The available evidence does not establish that.
What has changed is the permeability of the boundary between hybrid confrontation and conventional deterrence.
NATO itself says significant cyber or other hybrid attacks can, case by case, amount to an armed attack, potentially engaging Article 5. France therefore is not inventing the underlying principle. What appears particularly French is the emphasis on national freedom of action, strategic ambiguity and escalation management.
My resulting assessment as of 20 September 2026 is that France is constructing a three-layer response system: resilience and counter-intelligence at home; offensive and covert/non-public action below the threshold of acknowledged armed conflict; and increasingly credible conventional forces behind that layer should Russia cross into overt or lethal attacks.
The anonymous source matters because it suggests layer two is operational rather than theoretical.
The major unknown is exactly what activities France places inside it.
And that uncertainty may itself be part of the deterrent.
The risk is equally clear: cross-domain retaliation makes the old boundary between hybrid activity and conventional force less predictable. France may believe that uncertainty constrains Moscow; Moscow could instead misread a French action as preparation for something larger. The entire model therefore depends upon exceptionally good intelligence, attribution and private signalling. The more lethal Russian hybrid operations become, the narrower that margin for controlled ambiguity becomes.
That is why I would read Macron’s public warning, the new legal architecture, the exercises on French territory, the increasingly explicit attribution of Russian operations, and Le Monde’s extraordinary four-word military-source disclosure as parts of the same strategic transition rather than isolated developments. France appears to be trying to make hybrid aggression expensive without granting Moscow the advantage of knowing beforehand where Paris’s retaliatory boundary lies.
FR-01, France Agent
Three Corporate