UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCEWEDNESDAY, 29 JULY 2026
Go Serpent Backdoor
▌ INTELLIGENCE BRIEF

GoSerpent Backdoor Targets Southeast Asian Governments, Diplomats

◆ MODERATECyber and Information Warfare21 JUL 2026

A previously undocumented Go-based backdoor, GoSerpent, has covertly harvested government and diplomatic files across Southeast Asia since late 2025, deploying an evolved toolset in May 2026 whose tradecraft overlaps a threat actor tracked since 2023 as TetrisPhantom.

A previously undocumented Go-based backdoor, GoSerpent, has covertly harvested government and diplomatic files across Southeast Asia since late 2025, deploying an evolved toolset in May 2026 whose tradecraft overlaps a threat actor tracked since 2023 as TetrisPhantom.

ALSO FILED
▌ INTELLIGENCE BRIEF

Saudi Arabia Joins US Strikes on Iran-Backed Forces in Iraq

Saudi Arabia has for the first time conducted direct strikes alongside US forces against Iran-backed positions in eastern Iraq, following an intercepted IRGC ballistic missile attack on American bases, marking a significant escalation that draws Riyadh into active combat against Tehran's proxy network.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

Ukraine's Deepest Strike Yet Forces NATO's Hand on Missiles

Ukraine executed its largest long-range drone strike of the war against Russian strategic bomber bases as Germany agreed to host US Tomahawk missiles, signaling both sides' shift toward deeper, longer-range confrontation.

◆ HIGH CONFIDENCEConflict and War
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Saudi Arabia Joins US Strikes on Iran-Backed Forces in Iraq

Saudi Arabia has for the first time conducted direct strikes alongside US forces against Iran-backed positions in eastern Iraq, following an intercepted IRGC ballistic missile attack on American bases, marking a significant escalation that draws Riyadh into active combat against Tehran's proxy network.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

Ukraine's Deepest Strike Yet Forces NATO's Hand on Missiles

Ukraine executed its largest long-range drone strike of the war against Russian strategic bomber bases as Germany agreed to host US Tomahawk missiles, signaling both sides' shift toward deeper, longer-range confrontation.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

Russian Hackers Weaponize European Security Cameras Against NATO Logistics

Dutch intelligence services have confirmed that Russian state hackers hijacked civilian-owned internet-connected security cameras across the Netherlands and other NATO states to track weapons shipments to Ukraine and, in Ukraine itself, to help target military personnel.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Bahrain and Kuwait Break Precedent With Direct Strikes on Iran

Bahrain and Kuwait conducted their first direct airstrikes on Iranian military targets this month, with UAE-supplied targeting intelligence marking a structural shift from Gulf state defensive posture to active retaliation.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Hormuz Truce Holds, Houthis Open New Front on Saudi Aramco

A fragile 48-hour pause in US-Iran strikes on the Strait of Hormuz has not stopped Houthi forces from opening a new front against Saudi Arabia's Red Sea energy infrastructure, raising the risk that the wider Gulf conflict escalates even as Oman-mediated ceasefire talks continue.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

US Pauses Iran Strikes as Munitions Deplete, Diplomacy Advances

The United States has paused airstrikes on Iran for a second consecutive night after nearly two weeks of continuous bombing, with envoy Mike Waltz acknowledging depleted munitions stockpiles as Oman-brokered talks with Tehran over Strait of Hormuz access show measurable progress.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Houthi Strike on Aramco Confirms Iran War's Red Sea Expansion

Houthi forces struck two Saudi Aramco refining complexes on 25 July with ballistic missiles and drones, marking the first direct assault on Saudi oil infrastructure since 2022 and confirming the Iran war's expansion into a Red Sea energy conflict.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

NATO Intern Arrested at SHAPE on Espionage Charges

Belgian authorities arrested a Canadian intern at NATO's SHAPE headquarters on espionage charges, surfacing a delegated-vetting blind spot that Chinese intelligence has now reached at least four times across NATO territory since January 2026.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

Iran's CIA Facility Strikes Trigger Russian Involvement Probe

US intelligence officials are investigating whether Russia supplied targeting data or advanced drone technology that enabled Iranian strikes on CIA facilities in Saudi Arabia and Iraq during the 2026 war.

◆ MODERATEIntelligence Community27 JUL 2026