UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCEFRIDAY, 4 SEPTEMBER 2026
China-Nexus 'SilkParasite' Campaign Deploys AI-Built Malware Across Central Asia
▌ INTELLIGENCE BRIEF

China-Nexus 'SilkParasite' Campaign Deploys AI-Built Malware Across Central Asia

◆ MODERATECyber and Information Warfare24 AUG 2026

Bitdefender researchers assessed with medium confidence that a China-nexus threat actor ran a nearly year-long cyberespionage campaign, SilkParasite, deploying five newly documented AI-assisted RATs against government bodies in six Central Asian states as Beijing moves to fill the vacuum left by receding Russian influence in the region.

Bitdefender researchers assessed with medium confidence that a China-nexus threat actor ran a nearly year-long cyberespionage campaign, SilkParasite, deploying five newly documented AI-assisted RATs against government bodies in six Central Asian states as Beijing moves to fill the vacuum left by receding Russian influence in the region.

ALSO FILED
▌ INTELLIGENCE BRIEF

Wedding Strike Triggers Four-Front Iranian Retaliation Across Gulf

Iran launched coordinated missile and drone strikes against U.S. military facilities in four countries after accusing Washington of a war crime over strikes that killed at least eighteen people, including children, at a wedding celebration in southern Iran.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Fire Ant Turns Routers Into Silent Spy Platforms

A China-linked espionage cluster tracked as Fire Ant has hijacked Cisco IOS XR routers and authentication servers to establish covert, log-evading access across enterprise networks, with reconnaissance activity extending toward U.S. critical infrastructure.

◆ MODERATECyber and Information Warfare
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Wedding Strike Triggers Four-Front Iranian Retaliation Across Gulf

Iran launched coordinated missile and drone strikes against U.S. military facilities in four countries after accusing Washington of a war crime over strikes that killed at least eighteen people, including children, at a wedding celebration in southern Iran.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Fire Ant Turns Routers Into Silent Spy Platforms

A China-linked espionage cluster tracked as Fire Ant has hijacked Cisco IOS XR routers and authentication servers to establish covert, log-evading access across enterprise networks, with reconnaissance activity extending toward U.S. critical infrastructure.

◆ MODERATECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Germany Blames Russian GRU for Leipzig Airport Drone Plot

Germany has formally attributed an August 4 explosive drone attack on a Ukrainian cargo aircraft at Leipzig/Halle Airport to Russia's GRU military intelligence directorate, expelling diplomats and closing Russian diplomatic facilities in response.

◆ HIGH CONFIDENCECovert Operations
▌ INTELLIGENCE BRIEF

Iran Renews Strikes on US Bases in Jordan and Bahrain

Iran launched missile and drone strikes against US and allied military installations in Jordan and Bahrain on 1 September, the first direct clash in roughly a month, prompting President Trump to vow renewed retaliatory strikes against Tehran.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

China-Linked Fire Ant Hijacks Router Infrastructure to Blind Network Defenses

A China-nexus threat actor tracked as Fire Ant has expanded its espionage campaign from VMware hypervisors to Cisco IOS XR routers, TACACS authentication servers, and Linux management hosts, using the compromised infrastructure to harvest credentials and blind security logging across high-value networks.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Iran Strikes US-Linked Bases in Jordan, UAE After Hormuz Attack

Iran's IRGC struck US-linked bases in Jordan and the UAE hours after a US attack on Iranian rocket launchers in the Strait of Hormuz, marking the first direct US-Iran kinetic exchange in over a month and reopening the risk of a wider Gulf escalation.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

AI-Generated Exploits Breach US Water Utilities as Iran Tests UK Grid

A joint US federal advisory confirms adversaries are using AI-generated exploit code against Siemens industrial controllers in the first operationally confirmed AI-assisted intrusion campaign against US critical infrastructure, coinciding with an Iran-linked strike on UK power generation.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

US Strikes Iranian Launchers on Larak Island, Ends Month-Long Pause

US forces struck two IRGC rocket launchers loaded with sea mines on Iran's Larak Island on 30 August 2026, the first direct US strike on Iranian territory in more than a month, and Tehran has vowed retaliation, raising renewed escalation risk in the Strait of Hormuz.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

CIA Chief's Secret Moscow Trip Signals Fear of Russian Escalation

CIA Director John Ratcliffe made an unannounced trip to Moscow on 25 August to warn Russia against exploiting a classified U.S. assessment that Vladimir Putin views Washington as strategically overextended by its six-month war with Iran.

◆ MODERATEGeopolitical Analysis