UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCETUESDAY, 28 JULY 2026
Go Serpent Backdoor
▌ INTELLIGENCE BRIEF

GoSerpent Backdoor Targets Southeast Asian Governments, Diplomats

◆ MODERATECyber and Information Warfare21 JUL 2026

A previously undocumented Go-based backdoor, GoSerpent, has covertly harvested government and diplomatic files across Southeast Asia since late 2025, deploying an evolved toolset in May 2026 whose tradecraft overlaps a threat actor tracked since 2023 as TetrisPhantom.

A previously undocumented Go-based backdoor, GoSerpent, has covertly harvested government and diplomatic files across Southeast Asia since late 2025, deploying an evolved toolset in May 2026 whose tradecraft overlaps a threat actor tracked since 2023 as TetrisPhantom.

ALSO FILED
▌ INTELLIGENCE BRIEF

Russian Hackers Weaponize European Security Cameras Against NATO Logistics

Dutch intelligence services have confirmed that Russian state hackers hijacked civilian-owned internet-connected security cameras across the Netherlands and other NATO states to track weapons shipments to Ukraine and, in Ukraine itself, to help target military personnel.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Bahrain and Kuwait Break Precedent With Direct Strikes on Iran

Bahrain and Kuwait conducted their first direct airstrikes on Iranian military targets this month, with UAE-supplied targeting intelligence marking a structural shift from Gulf state defensive posture to active retaliation.

◆ MODERATEConflict and War
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Russian Hackers Weaponize European Security Cameras Against NATO Logistics

Dutch intelligence services have confirmed that Russian state hackers hijacked civilian-owned internet-connected security cameras across the Netherlands and other NATO states to track weapons shipments to Ukraine and, in Ukraine itself, to help target military personnel.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Bahrain and Kuwait Break Precedent With Direct Strikes on Iran

Bahrain and Kuwait conducted their first direct airstrikes on Iranian military targets this month, with UAE-supplied targeting intelligence marking a structural shift from Gulf state defensive posture to active retaliation.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Hormuz Truce Holds, Houthis Open New Front on Saudi Aramco

A fragile 48-hour pause in US-Iran strikes on the Strait of Hormuz has not stopped Houthi forces from opening a new front against Saudi Arabia's Red Sea energy infrastructure, raising the risk that the wider Gulf conflict escalates even as Oman-mediated ceasefire talks continue.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

US Pauses Iran Strikes as Munitions Deplete, Diplomacy Advances

The United States has paused airstrikes on Iran for a second consecutive night after nearly two weeks of continuous bombing, with envoy Mike Waltz acknowledging depleted munitions stockpiles as Oman-brokered talks with Tehran over Strait of Hormuz access show measurable progress.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Houthi Strike on Aramco Confirms Iran War's Red Sea Expansion

Houthi forces struck two Saudi Aramco refining complexes on 25 July with ballistic missiles and drones, marking the first direct assault on Saudi oil infrastructure since 2022 and confirming the Iran war's expansion into a Red Sea energy conflict.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

NATO Intern Arrested at SHAPE on Espionage Charges

Belgian authorities arrested a Canadian intern at NATO's SHAPE headquarters on espionage charges, surfacing a delegated-vetting blind spot that Chinese intelligence has now reached at least four times across NATO territory since January 2026.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

Iran's CIA Facility Strikes Trigger Russian Involvement Probe

US intelligence officials are investigating whether Russia supplied targeting data or advanced drone technology that enabled Iranian strikes on CIA facilities in Saudi Arabia and Iraq during the 2026 war.

◆ MODERATEIntelligence Community27 JUL 2026
▌ INTELLIGENCE BRIEF

Houthis Declare Saudi Naval Blockade as Iran War Widens

Yemen's Houthi rebels have declared a naval blockade of Saudi Arabia in solidarity with Iran, opening a second maritime chokepoint threat alongside the paralyzed Strait of Hormuz and placing roughly 2.5 million barrels per day of Saudi crude exports at risk as regional mediators press Washington and Tehran to accept a ten-day ceasefire.

◆ HIGH CONFIDENCEConflict and War22 JUL 2026
▌ INTELLIGENCE BRIEF

UK Sanctions Target RSF Gold Financier as Court Convicts Hemedti of Genocide

The UK's sanctioning of a Dubai-based RSF financier and a Sudanese court's in-absentia genocide conviction of RSF commander Hemedti mark a coordinated legal-financial push to choke off the conflict gold economy sustaining Sudan's war, though enforcement gaps and a fractured Western sanctions front limit near-term impact.

◆ HIGH CONFIDENCECovert Operations20 JUL 2026