UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCETUESDAY, 21 JULY 2026
Go Serpent Backdoor
▌ INTELLIGENCE BRIEF

GoSerpent Backdoor Targets Southeast Asian Governments, Diplomats

◆ MODERATECyber and Information Warfare21 JUL 2026

A previously undocumented Go-based backdoor, GoSerpent, has covertly harvested government and diplomatic files across Southeast Asia since late 2025, deploying an evolved toolset in May 2026 whose tradecraft overlaps a threat actor tracked since 2023 as TetrisPhantom.

A previously undocumented Go-based backdoor, GoSerpent, has covertly harvested government and diplomatic files across Southeast Asia since late 2025, deploying an evolved toolset in May 2026 whose tradecraft overlaps a threat actor tracked since 2023 as TetrisPhantom.

ALSO FILED
▌ INTELLIGENCE BRIEF

UK Sanctions Target RSF Gold Financier as Court Convicts Hemedti of Genocide

The UK's sanctioning of a Dubai-based RSF financier and a Sudanese court's in-absentia genocide conviction of RSF commander Hemedti mark a coordinated legal-financial push to choke off the conflict gold economy sustaining Sudan's war, though enforcement gaps and a fractured Western sanctions front limit near-term impact.

◆ HIGH CONFIDENCECovert Operations20 JUL 2026
▌ INTELLIGENCE BRIEF

US-Iran War Enters Ninth Night as Conflict Spreads to Jordan

US and Iranian forces exchanged fire for a ninth consecutive night on 19-20 July, with Iranian missiles striking Jordan and shrapnel reaching Israel near Eilat as the American troop death toll hit 17, signaling a war of attrition neither side has been able to close out.

◆ HIGH CONFIDENCEConflict and War20 JUL 2026
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

UK Sanctions Target RSF Gold Financier as Court Convicts Hemedti of Genocide

The UK's sanctioning of a Dubai-based RSF financier and a Sudanese court's in-absentia genocide conviction of RSF commander Hemedti mark a coordinated legal-financial push to choke off the conflict gold economy sustaining Sudan's war, though enforcement gaps and a fractured Western sanctions front limit near-term impact.

◆ HIGH CONFIDENCECovert Operations20 JUL 2026
▌ INTELLIGENCE BRIEF

US-Iran War Enters Ninth Night as Conflict Spreads to Jordan

US and Iranian forces exchanged fire for a ninth consecutive night on 19-20 July, with Iranian missiles striking Jordan and shrapnel reaching Israel near Eilat as the American troop death toll hit 17, signaling a war of attrition neither side has been able to close out.

◆ HIGH CONFIDENCEConflict and War20 JUL 2026
▌ INTELLIGENCE BRIEF

Ukrainian Spy Confesses to Extrajudicial Killing of Monaco Bombing Suspect

A Ukrainian military intelligence officer has confessed to the unauthorized killing of the woman accused of the June 29 Monaco bombing, exposing a command-and-control gap inside Kyiv's wartime intelligence services.

◆ MODERATECovert Operations20 JUL 2026
▌ INTELLIGENCE BRIEF

Russia Turns Europe's Doorbell Cameras Into a Spy Network

Russian state-sponsored hackers have converted poorly secured civilian IP cameras across the Netherlands and wider Europe into a distributed surveillance network trained on NATO logistics corridors carrying weapons to Ukraine.

◆ HIGH CONFIDENCECyber and Information Warfare18 JUL 2026
▌ INTELLIGENCE BRIEF

EU and UK Sanction GRU Unit 29155 Over Infrastructure Sabotage

The European Union and United Kingdom issued a first-ever joint cyber sanctions package on 13 July against Russian GRU officers, an FSB unit, and a support company tied to a decade-long infrastructure sabotage and espionage campaign across Europe, including a foiled attack on Poland's energy grid.

◆ HIGH CONFIDENCECyber and Information Warfare17 JUL 2026
▌ INTELLIGENCE BRIEF

EU and UK Sanction Russian GRU Network Over Grid Sabotage

The EU and UK have jointly sanctioned Russian GRU and FSB officers and front companies for a sixteen-year cyber sabotage campaign against European power grids and rail networks, formalizing what officials describe as an active hybrid war against the continent's critical infrastructure.

◆ HIGH CONFIDENCECyber and Information Warfare14 JUL 2026
▌ INTELLIGENCE BRIEF

Israel Warned US of Specific Iranian Plot to Kill Trump

US Ambassador to Israel Mike Huckabee has confirmed that Israeli intelligence warned Washington of a specific Iranian plot to assassinate President Trump, a disclosure that prompted altered presidential travel security even as Trump himself and some US officials dispute the threat's credibility.

◆ MODERATEIntelligence Community13 JUL 2026
▌ INTELLIGENCE BRIEF

Iran Declares Strait of Hormuz Closed After Third US Strike Wave

Iran's Revolutionary Guard has declared the Strait of Hormuz closed to shipping after a third consecutive wave of U.S. airstrikes shattered the February ceasefire, threatening a fifth of the world's oil flow and raising the risk of a wider regional war.

◆ HIGH CONFIDENCEConflict and War12 JUL 2026
▌ INTELLIGENCE BRIEF

Iran Strikes Ship, Shuts Hormuz Again as US Hits Back

Iran's attack on the container ship M/V GFS Galaxy and renewed closure of the Strait of Hormuz triggered a third wave of US airstrikes within days, leaving Oman's untested two-corridor shipping proposal as the only concrete de-escalation track on the table.

◆ HIGH CONFIDENCEConflict and War12 JUL 2026