UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCETHURSDAY, 4 JUNE 2026
Russias Tech Espionage
▌ INTELLIGENCE BRIEF

Russia Abandons Attribution Caution in Western Defense Tech Espionage Surge

◆ HIGH CONFIDENCEIntelligence Community4 JUN 2026

A coordinated four-nation intelligence advisory from Sweden, Finland, GCHQ, and Estonia confirms Russian spy agencies are escalating Western defense technology acquisition through front companies, sanctions-busting middlemen, and cyber espionage, with agents now operating with significantly reduced concern for attribution.

A coordinated four-nation intelligence advisory from Sweden, Finland, GCHQ, and Estonia confirms Russian spy agencies are escalating Western defense technology acquisition through front companies, sanctions-busting middlemen, and cyber espionage, with agents now operating with significantly reduced concern for attribution.

ALSO FILED
▌ INTELLIGENCE BRIEF

Five Eyes Issues Unprecedented Warning on Chinese Job-Platform Spy Recruitment

The Five Eyes intelligence alliance issued its first-ever joint public bulletin on June 3, 2026, warning that Chinese military intelligence is systematically exploiting professional networking and recruitment platforms to covertly recruit government, military, and defence personnel as unwitting assets.

◆ HIGH CONFIDENCEIntelligence Community
▌ INTELLIGENCE BRIEF

Gulf Strikes Resume as Tehran Suspends Ceasefire Talks Over Lebanon

US Central Command struck an Iranian military ground control station on Qeshm Island after Iranian forces damaged Kuwait's international airport, as Tehran suspended ceasefire communications citing continued Israeli operations in Lebanon—placing the broader truce architecture under acute stress.

◆ HIGH CONFIDENCEGeopolitical Analysis4 JUN 2026
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Five Eyes Issues Unprecedented Warning on Chinese Job-Platform Spy Recruitment

The Five Eyes intelligence alliance issued its first-ever joint public bulletin on June 3, 2026, warning that Chinese military intelligence is systematically exploiting professional networking and recruitment platforms to covertly recruit government, military, and defence personnel as unwitting assets.

◆ HIGH CONFIDENCEIntelligence Community
▌ INTELLIGENCE BRIEF

Gulf Strikes Resume as Tehran Suspends Ceasefire Talks Over Lebanon

US Central Command struck an Iranian military ground control station on Qeshm Island after Iranian forces damaged Kuwait's international airport, as Tehran suspended ceasefire communications citing continued Israeli operations in Lebanon—placing the broader truce architecture under acute stress.

◆ HIGH CONFIDENCEGeopolitical Analysis4 JUN 2026
▌ INTELLIGENCE BRIEF

China-Linked Operation Dragon Weave Exploits Azure Cloud to Spy on Czech and Taiwanese Targets

A China-aligned threat actor has weaponised Microsoft Azure Blob Storage as a command-and-control relay to conduct simultaneous spear-phishing operations against government, academic, and financial targets in the Czech Republic and Taiwan.

◆ MODERATECyber and Information Warfare4 JUN 2026
▌ INTELLIGENCE BRIEF

Gulf Escalation: US and Iran Trade Strikes as Kuwait Caught in Crossfire

The US-Iran ceasefire in the Gulf is fracturing following a US strike on Iranian military sites and Iran's retaliatory ballistic missile attack on US forces in Kuwait, intercepted by American air defences.

◆ HIGH CONFIDENCEConflict and War3 JUN 2026
▌ INTELLIGENCE BRIEF

China's APTs Exploit Gulf Instability to Target Maritime and Energy Intelligence

China-aligned advanced persistent threat groups have pivoted operations toward Gulf maritime and energy targets, exploiting the intelligence vacuum created by the US-Iran conflict and ongoing regional instability — per ESET's Q1 2026 APT Activity Report.

◆ HIGH CONFIDENCECyber and Information Warfare2 JUN 2026
▌ INTELLIGENCE BRIEF

GREYVIBE Emerges: Russia's AI-Augmented Cyber Unit Strikes Ukraine

A previously undocumented Russian-linked threat group designated GREYVIBE has deployed AI-assisted cyberattack capabilities against Ukrainian military, government, and civilian infrastructure since at least August 2025, representing a documented escalation in AI-enabled offensive cyber operations within the ongoing Russo-Ukrainian conflict.

◆ MODERATECyber and Information Warfare2 JUN 2026
▌ INTELLIGENCE BRIEF

GCHQ Director Warns West's Window Is Closing as Russia and China Accelerate

GCHQ Director Anne Keast-Butler, in an inaugural public address at Bletchley Park, warned that the West is at a moment of consequence as Russia intensifies hybrid operations from seabed to cyberspace and China emerges as a full-spectrum technology superpower.

◆ HIGH CONFIDENCEIntelligence Community31 MAY 2026
▌ INTELLIGENCE BRIEF

Salt Typhoon Penetrates Italy's Critical IT Backbone in Silent Two-Week Operation

China's Salt Typhoon APT maintained undetected two-week access inside IBM's Italian subsidiary Sistemi Informativi, compromising IT infrastructure serving Italy's national institutions, energy, finance, and telecommunications sectors.

◆ MODERATECyber and Information Warfare31 MAY 2026
▌ INTELLIGENCE BRIEF

Russia Deploys Dual Covert Operation to Seize Armenia's June Election

Russia is conducting a dual-track covert influence operation against Armenia's June 2026 elections, combining the planned transportation of up to 100,000 diaspora voters from Russian territory with Storm-1516's most extensive disinformation campaign on record, targeting PM Pashinyan's pro-Western government.

◆ MODERATECovert Operations30 MAY 2026