UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCEFRIDAY, 17 JULY 2026
uk sanction gru unit
▌ INTELLIGENCE BRIEF

EU and UK Sanction GRU Unit 29155 Over Infrastructure Sabotage

◆ HIGH CONFIDENCECyber and Information Warfare17 JUL 2026

The European Union and United Kingdom issued a first-ever joint cyber sanctions package on 13 July against Russian GRU officers, an FSB unit, and a support company tied to a decade-long infrastructure sabotage and espionage campaign across Europe, including a foiled attack on Poland's energy grid.

The European Union and United Kingdom issued a first-ever joint cyber sanctions package on 13 July against Russian GRU officers, an FSB unit, and a support company tied to a decade-long infrastructure sabotage and espionage campaign across Europe, including a foiled attack on Poland's energy grid.

ALSO FILED
▌ INTELLIGENCE BRIEF

Russia Turns Europe's Doorbell Cameras Into a Spy Network

Russian state-sponsored hackers have converted poorly secured civilian IP cameras across the Netherlands and wider Europe into a distributed surveillance network trained on NATO logistics corridors carrying weapons to Ukraine.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

US Naval Blockade of Iran Triggers Region-Wide Strikes

The reimposed US naval blockade of Iranian ports and a fourth consecutive night of strikes have pushed the Iran conflict into a regional phase, with Iranian retaliatory fire now reaching Jordan, Qatar, Kuwait, Oman and the UAE and crossings through the Strait of Hormuz down more than half.

◆ HIGH CONFIDENCEConflict and War
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Russia Turns Europe's Doorbell Cameras Into a Spy Network

Russian state-sponsored hackers have converted poorly secured civilian IP cameras across the Netherlands and wider Europe into a distributed surveillance network trained on NATO logistics corridors carrying weapons to Ukraine.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

US Naval Blockade of Iran Triggers Region-Wide Strikes

The reimposed US naval blockade of Iranian ports and a fourth consecutive night of strikes have pushed the Iran conflict into a regional phase, with Iranian retaliatory fire now reaching Jordan, Qatar, Kuwait, Oman and the UAE and crossings through the Strait of Hormuz down more than half.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

EU and UK Sanction Russian GRU Network Over Grid Sabotage

The EU and UK have jointly sanctioned Russian GRU and FSB officers and front companies for a sixteen-year cyber sabotage campaign against European power grids and rail networks, formalizing what officials describe as an active hybrid war against the continent's critical infrastructure.

◆ HIGH CONFIDENCECyber and Information Warfare14 JUL 2026
▌ INTELLIGENCE BRIEF

Israel Warned US of Specific Iranian Plot to Kill Trump

US Ambassador to Israel Mike Huckabee has confirmed that Israeli intelligence warned Washington of a specific Iranian plot to assassinate President Trump, a disclosure that prompted altered presidential travel security even as Trump himself and some US officials dispute the threat's credibility.

◆ MODERATEIntelligence Community13 JUL 2026
▌ INTELLIGENCE BRIEF

Iran Declares Strait of Hormuz Closed After Third US Strike Wave

Iran's Revolutionary Guard has declared the Strait of Hormuz closed to shipping after a third consecutive wave of U.S. airstrikes shattered the February ceasefire, threatening a fifth of the world's oil flow and raising the risk of a wider regional war.

◆ HIGH CONFIDENCEConflict and War12 JUL 2026
▌ INTELLIGENCE BRIEF

Iran Strikes Ship, Shuts Hormuz Again as US Hits Back

Iran's attack on the container ship M/V GFS Galaxy and renewed closure of the Strait of Hormuz triggered a third wave of US airstrikes within days, leaving Oman's untested two-corridor shipping proposal as the only concrete de-escalation track on the table.

◆ HIGH CONFIDENCEConflict and War12 JUL 2026
▌ INTELLIGENCE BRIEF

Israel Warns US of New Iranian Plot to Kill Trump

Israel has shared unverified intelligence with Washington warning of a new Iranian plot to assassinate President Trump, a disclosure surfacing amid an open rift between Trump and Netanyahu over how to handle post-war Iran.

◆ MODERATEIntelligence Community10 JUL 2026
▌ INTELLIGENCE BRIEF

Iran-US Truce Collapses as IRGC Strikes Gulf Bases

IRGC strikes on four U.S. bases in Kuwait and Bahrain have effectively collapsed the June ceasefire with Iran, following renewed U.S. airstrikes and Iranian attacks on Strait of Hormuz shipping.

◆ HIGH CONFIDENCEConflict and War10 JUL 2026
▌ INTELLIGENCE BRIEF

China's UAT-7810 Expands Covert Router Proxy Network With LONGLEASH

Cisco Talos has documented China-linked actor UAT-7810 actively expanding the LapDogs Operational Relay Box network with new LONGLEASH, DOGLEASH, and JARLEASH malware, hijacking unpatched Ruckus and ASUS routers to build covert proxy infrastructure later used by secondary actors against Taiwanese critical infrastructure.

◆ HIGH CONFIDENCECyber and Information Warfare10 JUL 2026