Planned reforms of the Intelligence Services Act are intended to grant BND and Constitutional Protection Service explicit offensive cyber capabilities, including zero-day exploitation, and place the BSI structurally under their control.