Fast Facts

• Italy recorded over 19,000 cyberattacks between January 2023 and July 2024 - averaging more than 30 a day.
• A new bill proposes granting the military operational roles in cyberspace, even in peacetime.
• The plan includes recruiting ex-military and highly skilled civilians as a specialized cyber reserve.
• Critics warn of legal gray zones and potential conflicts with Italy’s civilian cybersecurity agency.
• Comparable approaches in the US, UK, and Germany reveal persistent challenges in oversight and accountability.

From Battlefield to Keyboard: The New Front Line

Picture Italy’s generals not just commanding tanks and jets, but also overseeing squads of hackers and code warriors. This is not science fiction: as cyberattacks multiply, the Italian government is considering a dramatic expansion of military power into cyberspace, blurring the line between digital defense and conventional warfare.

Since NATO declared cyberspace an operational domain in 2016, the pressure has mounted. Attacks on energy grids, water utilities, hospitals, and government networks have surged. In 2021, a ransomware assault paralyzed the Lazio region’s healthcare, locking out vaccine appointments and patient records - an act with consequences rivaling a kinetic strike. Now, with over 19,000 attacks in less than two years and a 53% jump in major incidents in early 2025, Italy faces a digital siege.

The Minardo Bill: Military Muscle for Cyber Defense?

The bill, championed by Defense Commission president Nino Minardo, would rewrite Italy’s military code to let the armed forces act in cyberspace - even outside wartime. It would create a cyber reserve of ex-soldiers and civilian tech experts, granting them special legal protections similar to intelligence officers. Their digital maneuvers, if done in the nation’s interest, could be shielded from criminal prosecution.

Supporters say this hybrid force is crucial to combat “hybrid threats” - where lines blur between criminal hackers, political activists, and state-sponsored saboteurs. But critics see dangers: an opaque legal “twilight zone,” where civilian oversight and judicial review could be sidestepped in the name of national security.

Governance at a Crossroads: Who’s in Charge?

Italy already has a civilian National Cybersecurity Agency, tasked with preventing attacks and coordinating defenses. Adding an operational military role risks creating a confusing two-track system - echoing past turf wars and bureaucratic fragmentation. Experts warn that cyber defense works best when roles are clear, responsibilities unified, and accountability ironclad.

International models offer cautionary tales. The US Cyber Command operates under strict civilian oversight. Britain’s GCHQ keeps military and civilian functions separate. Germany’s Bundeswehr cyber command, while robust, still wrestles with constitutional and parliamentary challenges. There is no simple blueprint for merging military might with digital defense.

Securing the Digital Republic: At What Cost?

As Italy races to fortify its cyber walls, the stakes are existential. The right legal scaffolding is vital: unchecked powers could erode civil liberties, while sluggish bureaucracy may leave vital systems exposed. Real security will require not just technical prowess but also investment in training, transparent oversight, and a commitment to democratic principles - even as operations grow more secretive by necessity.

Italy’s digital future hangs in the balance. Can it forge a cyber defense that is both strong and just, protecting citizens without sacrificing the very freedoms it seeks to defend?

WIKICROOK

• Hybrid Threats: Hybrid threats are attacks that combine traditional tactics, like sabotage, with digital methods such as hacking and disinformation to achieve complex goals.
• Ransomware: Ransomware is malicious software that encrypts or locks data, demanding payment from victims to restore access to their files or systems.
• Cyber Reserve: A Cyber Reserve is a standby group of trained experts, ready to assist national cyber defense efforts during major cyber incidents or emergencies.
• Operational Domain: An operational domain is a recognized environment - such as land, sea, air, space, or cyberspace - where military and security operations are carried out.
• Accountability: Accountability ensures individuals or organizations are held responsible for their actions in managing and using information systems, promoting trust and security.