The federal cabinet approved a broad critical infrastructure law requiring operators of energy, water, and communications networks to strengthen physical and cyber defenses against espionage and sabotage by foreign state actors.