UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCEMONDAY, 26 OCTOBER 2026
Baku Becomes Hub in German Spy Scandal as Secret Russia Talks Surface
▌ INTELLIGENCE BRIEF

Baku Becomes Hub in German Spy Scandal as Secret Russia Talks Surface

◆ LOW CONFIDENCEGeopolitical Analysis14 OCT 2026

Reporting that former German officials met Russian representatives in Azerbaijan, while ex-BND chief August Hanning sat on a German-Azerbaijani forum board, places Baku at the centre of a possible influence channel that German counterintelligence is only beginning to map.

Reporting that former German officials met Russian representatives in Azerbaijan, while ex-BND chief August Hanning sat on a German-Azerbaijani forum board, places Baku at the centre of a possible influence channel that German counterintelligence is only beginning to map.

ALSO FILED
▌ INTELLIGENCE BRIEF

China-Aligned Storm-0940 Turns AI Agents on 2,250 Microsoft Tenants

Microsoft attributes a ConnectWise supply-chain compromise that reached roughly 2,250 Microsoft 365 tenants to China-aligned Storm-0940, assessing that agentic AI drove intrusion at machine speed and compressing the window defenders have to respond.

◆ MODERATECyber and Information Warfare
▌ INTELLIGENCE BRIEF

54 Russia-Linked Sabotage Incidents Strike Europe in Six Months, Broadcasters Find

A 17-broadcaster EBU-SVT investigation counts at least 54 Russia-linked physical sabotage attacks and plots across Europe between April and October 2026, with Estonia's security service confirming one arson was ordered by Russian intelligence.

◆ MODERATESecurity and Defence
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

China-Aligned Storm-0940 Turns AI Agents on 2,250 Microsoft Tenants

Microsoft attributes a ConnectWise supply-chain compromise that reached roughly 2,250 Microsoft 365 tenants to China-aligned Storm-0940, assessing that agentic AI drove intrusion at machine speed and compressing the window defenders have to respond.

◆ MODERATECyber and Information Warfare
▌ INTELLIGENCE BRIEF

54 Russia-Linked Sabotage Incidents Strike Europe in Six Months, Broadcasters Find

A 17-broadcaster EBU-SVT investigation counts at least 54 Russia-linked physical sabotage attacks and plots across Europe between April and October 2026, with Estonia's security service confirming one arson was ordered by Russian intelligence.

◆ MODERATESecurity and Defence
▌ INTELLIGENCE BRIEF

Germany Arrests Suspected Russian Agent as Austria Expels Four Diplomats

Within 48 hours Germany arrested a suspected Russian agent mapping NATO's eastern-flank arms supply chain and Austria expelled four Russian diplomats, indicating Moscow is running parallel agent and diplomatic-cover collection against European defence production.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

Russia Strikes Kyiv After Putin-Witkoff Talks, Dismissing New Peace Terms

Russia struck Kyiv with ballistic missiles within hours of the Putin-Witkoff meeting while dismissing the new US-European proposals as lacking substance, indicating Moscow is negotiating from a maximalist position on Donbas while keeping the option of November talks open.

◆ MODERATEGeopolitical Analysis
▌ INTELLIGENCE BRIEF

Denmark Charges Two Over Telegram-Tasked Surveillance of Counter-Drone Firm

Danish prosecutors say two young Ukrainians photographed counter-drone manufacturer MyDefence for a Telegram handler tied to a Russian intelligence service, pointing to disposable, socially recruited collectors aimed at Europe's defence supply chain.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

Hamburg Court Convicts Two in Iran-Directed Plot Against German Jewish Leaders

A Hamburg court's finding that Iranian intelligence directed a plot against German Jewish leaders, followed by a formal summons of Tehran's ambassador, moves Berlin from prosecuting proxies to confronting the sponsoring state.

◆ HIGH CONFIDENCECovert Operations
▌ INTELLIGENCE BRIEF

Ukraine Reports No US Warning Before Kyiv Missile Barrage; Washington Denies Cut-Off

Reports that US early warning of Russian ballistic launches lapsed during the 13-14 October barrage, alongside curbs on military Starshield terminals, suggest Washington's intelligence support to Kyiv is now entangled with its pressure campaign on Ukrainian energy strikes.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

Egypt Pledges Support to Riyadh as Houthi War Draws In Regional Powers

Egypt's National Defense Council has pledged unspecified support to Saudi Arabia against Houthi attacks, signalling that a Muslim-majority regional bloc, not Washington, is forming around Riyadh's air defence.

◆ MODERATEGeopolitical Analysis
▌ INTELLIGENCE BRIEF

Kazakhstan-Linked Hackers Shadow Regional Diplomacy in Eight-Campaign Espionage Run

Cisco Talos and Recorded Future assess with medium confidence that a Kazakhstan-based cluster has run at least eight espionage campaigns since January 2025 against nine states, shadowing diplomatic calendars across Central Asia, Russia and Belarus.

◆ MODERATECyber and Information Warfare