UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCETUESDAY, 2 JUNE 2026
cyber war
▌ INTELLIGENCE BRIEF

GCHQ Director Warns West's Window Is Closing as Russia and China Accelerate

◆ HIGH CONFIDENCEIntelligence Community31 MAY 2026

GCHQ Director Anne Keast-Butler, in an inaugural public address at Bletchley Park, warned that the West is at a moment of consequence as Russia intensifies hybrid operations from seabed to cyberspace and China emerges as a full-spectrum technology superpower.

GCHQ Director Anne Keast-Butler, in an inaugural public address at Bletchley Park, warned that the West is at a moment of consequence as Russia intensifies hybrid operations from seabed to cyberspace and China emerges as a full-spectrum technology superpower.

ALSO FILED
▌ INTELLIGENCE BRIEF

Gulf Escalation: US and Iran Trade Strikes as Kuwait Caught in Crossfire

The US-Iran ceasefire in the Gulf is fracturing following a US strike on Iranian military sites and Iran's retaliatory ballistic missile attack on US forces in Kuwait, intercepted by American air defences.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

China's APTs Exploit Gulf Instability to Target Maritime and Energy Intelligence

China-aligned advanced persistent threat groups have pivoted operations toward Gulf maritime and energy targets, exploiting the intelligence vacuum created by the US-Iran conflict and ongoing regional instability — per ESET's Q1 2026 APT Activity Report.

◆ HIGH CONFIDENCECyber and Information Warfare2 JUN 2026
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Gulf Escalation: US and Iran Trade Strikes as Kuwait Caught in Crossfire

The US-Iran ceasefire in the Gulf is fracturing following a US strike on Iranian military sites and Iran's retaliatory ballistic missile attack on US forces in Kuwait, intercepted by American air defences.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

China's APTs Exploit Gulf Instability to Target Maritime and Energy Intelligence

China-aligned advanced persistent threat groups have pivoted operations toward Gulf maritime and energy targets, exploiting the intelligence vacuum created by the US-Iran conflict and ongoing regional instability — per ESET's Q1 2026 APT Activity Report.

◆ HIGH CONFIDENCECyber and Information Warfare2 JUN 2026
▌ INTELLIGENCE BRIEF

GREYVIBE Emerges: Russia's AI-Augmented Cyber Unit Strikes Ukraine

A previously undocumented Russian-linked threat group designated GREYVIBE has deployed AI-assisted cyberattack capabilities against Ukrainian military, government, and civilian infrastructure since at least August 2025, representing a documented escalation in AI-enabled offensive cyber operations within the ongoing Russo-Ukrainian conflict.

◆ MODERATECyber and Information Warfare2 JUN 2026
▌ INTELLIGENCE BRIEF

Salt Typhoon Penetrates Italy's Critical IT Backbone in Silent Two-Week Operation

China's Salt Typhoon APT maintained undetected two-week access inside IBM's Italian subsidiary Sistemi Informativi, compromising IT infrastructure serving Italy's national institutions, energy, finance, and telecommunications sectors.

◆ MODERATECyber and Information Warfare31 MAY 2026
▌ INTELLIGENCE BRIEF

Russia Deploys Dual Covert Operation to Seize Armenia's June Election

Russia is conducting a dual-track covert influence operation against Armenia's June 2026 elections, combining the planned transportation of up to 100,000 diaspora voters from Russian territory with Storm-1516's most extensive disinformation campaign on record, targeting PM Pashinyan's pro-Western government.

◆ MODERATECovert Operations30 MAY 2026
▌ CT ALERT // EUROPE

Operator Identified: IRGC Assassination Network Active Across Europe as Tehran's External Operations Arm Loses Its Chief

European intelligence sources have identified Alireza Mohammadi — alias Meghdad Hassani — as the IRGC officer overseeing an active assassination, espionage and sabotage network operating across multiple European countries. The disclosure, timed to the killing of IRGC Intelligence chief Majid Khademi, signals a coordinated Western counter-intelligence campaign against Tehran's external operations during a period of structural disruption at the top of the IRGC.

◆ MODERATETerrorism and Counterterrorism29 MAY 2026
▌ OSINT REPORT // ATLANTIC INFRASTRUCTURE SURVEILLANCE

Tracked Every Mile: UK Exposes Russian Deep-Sea Surveillance Operation Against Atlantic Cable Infrastructure

British and Norwegian forces tracked three Russian vessels — including two GUGI deep-sea research submarines — conducting a month-long covert survey of North Atlantic undersea cable infrastructure. The UK's decision to publicly expose the operation represents a calibrated counter-intelligence and deterrence signal rather than a purely defensive response.

◆ HIGH CONFIDENCEOSINT29 MAY 2026
▌ INTELLIGENCE BRIEF

GCHQ Director Warns West Is Losing Ground in Cyber Cold War

GCHQ Director Anne Keast-Butler publicly warned that Russia is relentlessly targeting Western critical infrastructure and democratic processes while China advances toward cyber supremacy, leaving the West a narrowing window to respond.

◆ HIGH CONFIDENCECyber and Information Warfare29 MAY 2026
▌ INTELLIGENCE BRIEF

Iran Deal Stalls: Trump Signals No Rush as Hormuz Closure Deepens

US-Iran ceasefire negotiations remain unresolved as fundamental disagreements over nuclear enrichment, sanctions relief, and a Lebanon ceasefire threaten to delay any near-term agreement to reopen the Strait of Hormuz.

◆ MODERATEGeopolitical Analysis28 MAY 2026