UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCESUNDAY, 28 JUNE 2026
Five Eyes Hacking Tools
▌ INTELLIGENCE BRIEF

Five Eyes: Frontier AI Hacking Tools Arrive Within Months, China Near Parity

◆ HIGH CONFIDENCECyber and Information Warfare24 JUN 2026

Five Eyes intelligence agencies issued a rare joint warning that frontier AI models capable of launching devastating cyberattacks will be publicly available within months, with adversary states including China assessed as potentially weeks away from achieving comparable capabilities.

Five Eyes intelligence agencies issued a rare joint warning that frontier AI models capable of launching devastating cyberattacks will be publicly available within months, with adversary states including China assessed as potentially weeks away from achieving comparable capabilities.

ALSO FILED
▌ INTELLIGENCE BRIEF

Iran-U.S. Nuclear Talks Stall as Switzerland Framework Fails to Close

US-Iran nuclear negotiations in Switzerland have failed to produce a final agreement, with the proposed MOU offering only a temporary pause in hostilities while deferring fundamental disputes over enrichment limits and frozen funds to follow-on negotiations.

◆ MODERATEGeopolitical Analysis
▌ INTELLIGENCE BRIEF

IRGC Drone Strike on Hormuz Vessel Fractures US-Iran Ceasefire Framework

An IRGC drone strike on the Singapore-flagged M/V Ever Lovely in the Strait of Hormuz has triggered a cycle of US-Iranian retaliatory strikes that places the June 17 ceasefire memorandum under existential pressure.

◆ HIGH CONFIDENCEConflict and War
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Iran-U.S. Nuclear Talks Stall as Switzerland Framework Fails to Close

US-Iran nuclear negotiations in Switzerland have failed to produce a final agreement, with the proposed MOU offering only a temporary pause in hostilities while deferring fundamental disputes over enrichment limits and frozen funds to follow-on negotiations.

◆ MODERATEGeopolitical Analysis
▌ INTELLIGENCE BRIEF

IRGC Drone Strike on Hormuz Vessel Fractures US-Iran Ceasefire Framework

An IRGC drone strike on the Singapore-flagged M/V Ever Lovely in the Strait of Hormuz has triggered a cycle of US-Iranian retaliatory strikes that places the June 17 ceasefire memorandum under existential pressure.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

Iran's Hormuz Gambit Puts Fragile Ceasefire Architecture Under Strain

The US-Iran ceasefire memorandum of understanding, signed June 17, faces critical stress as Tehran demands Strait of Hormuz transit fees, Israel stalls on Lebanon withdrawal, and the 60-day formalisation window narrows.

◆ MODERATEGeopolitical Analysis
▌ INTELLIGENCE BRIEF

Bolton Pleads Guilty to Espionage Act Violation — Iran Accessed Compromised Email

Former U.S. National Security Advisor John R. Bolton II pleaded guilty to retaining Top Secret/SCI material — including foreign military plans and HUMINT source intelligence — subsequently accessed by a suspected Iranian cyber actor.

◆ HIGH CONFIDENCEIntelligence Community
▌ INTELLIGENCE BRIEF

Iran Rebuilds War Machine as Ceasefire Clock Ticks Down

Western intelligence assessments confirm Iran has reconstituted approximately 75% of its pre-war military capability within weeks of the June 17 Islamabad Memorandum ceasefire, with 30 of 33 missile sites restored to operational status and continued Russian-origin weapons transfers documented.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

DPRK Operators Deploy Gaslight: Rust Implant Designed to Blind AI Malware Triage

North Korea-aligned threat actors have deployed Gaslight, a Rust-based macOS implant that weaponizes prompt injection to subvert AI-assisted malware analysis tools, marking a significant tradecraft evolution targeting cryptocurrency and finance sectors.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

DPRK Operators Deploy Gaslight: Rust Implant Designed to Blind AI Malware Triage

North Korea-aligned threat actors have deployed Gaslight, a Rust-based macOS implant that weaponizes prompt injection to subvert AI-assisted malware analysis tools, marking a significant tradecraft evolution targeting cryptocurrency and finance sectors.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Tehran Repudiates IAEA Pledge, Placing Post-War Nuclear Framework in Jeopardy

A direct public contradiction between Washington and Tehran over IAEA nuclear inspection access threatens to collapse the fragile post-war framework signed on June 17, 2026, potentially reigniting hostilities within the 60-day MoU window.

◆ MODERATEGeopolitical Analysis
▌ INTELLIGENCE BRIEF

Tehran Disputes Trump on Nuclear Talks as Ceasefire Strains

Tehran's simultaneous rejection of ballistic missile talks and denial of nuclear inspection commitments reveals structural contradictions within the US-Iran ceasefire MOU that threaten to collapse the 60-day ratification window.

◆ MODERATEGeopolitical Analysis