UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCEMONDAY, 7 SEPTEMBER 2026
Russian Drone Targets Kyiv SBU Chief Ahead of Moscow Peace Talks
▌ INTELLIGENCE BRIEF

Russian Drone Targets Kyiv SBU Chief Ahead of Moscow Peace Talks

◆ HIGH CONFIDENCEConflict and War6 SEPT 2026

A Russian jet-powered drone struck the Kyiv headquarters of Ukraine's Security Service in a deliberate attempt on acting chief Oleksandr Poklad's life on 4 September, hours before U.S. envoys Steve Witkoff and Jared Kushner arrived in Moscow for Trump-brokered talks to end the war, prompting a Ukrainian retaliation order and a subsequent mutual pause on capital strikes during the envoys' visits.

A Russian jet-powered drone struck the Kyiv headquarters of Ukraine's Security Service in a deliberate attempt on acting chief Oleksandr Poklad's life on 4 September, hours before U.S. envoys Steve Witkoff and Jared Kushner arrived in Moscow for Trump-brokered talks to end the war, prompting a Ukrainian retaliation order and a subsequent mutual pause on capital strikes during the envoys' visits.

ALSO FILED
▌ INTELLIGENCE BRIEF

Russian Drone Strikes SBU Headquarters in Targeted Hit on Spy Chief

A Russian drone strike on the SBU's Kyiv headquarters, apparently aimed at killing the service's acting chief, marks an attempted decapitation strike on Ukraine's counterintelligence leadership and has drawn a vowed covert response from Kyiv.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

US Destroys Iranian Tankers After IRGC Missile Attack on Navy Ships

CENTCOM's destruction of three Iranian tankers in retaliation for an IRGC missile attack on two US Navy warships marks the sharpest escalation yet in the Hormuz shadow war, raising the risk of a wider naval confrontation.

◆ HIGH CONFIDENCEConflict and War
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Russian Drone Strikes SBU Headquarters in Targeted Hit on Spy Chief

A Russian drone strike on the SBU's Kyiv headquarters, apparently aimed at killing the service's acting chief, marks an attempted decapitation strike on Ukraine's counterintelligence leadership and has drawn a vowed covert response from Kyiv.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

US Destroys Iranian Tankers After IRGC Missile Attack on Navy Ships

CENTCOM's destruction of three Iranian tankers in retaliation for an IRGC missile attack on two US Navy warships marks the sharpest escalation yet in the Hormuz shadow war, raising the risk of a wider naval confrontation.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

Kyiv Gunfight Between SBU and HUR Exposes Agency Rift

A firefight between Ukraine's SBU and HUR intelligence services in Kyiv, triggered by a disputed FSB-assassination-plot detention, has exposed a dangerous breakdown in wartime interagency coordination at the heart of Kyiv's security establishment.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

Fire Ant Turns Routers Into Silent Spy Platforms

A China-linked espionage cluster tracked as Fire Ant has hijacked Cisco IOS XR routers and authentication servers to establish covert, log-evading access across enterprise networks, with reconnaissance activity extending toward U.S. critical infrastructure.

◆ MODERATECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Iran Strikes US-Linked Bases in Jordan, UAE After Hormuz Attack

Iran's IRGC struck US-linked bases in Jordan and the UAE hours after a US attack on Iranian rocket launchers in the Strait of Hormuz, marking the first direct US-Iran kinetic exchange in over a month and reopening the risk of a wider Gulf escalation.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

AI-Generated Exploits Breach US Water Utilities as Iran Tests UK Grid

A joint US federal advisory confirms adversaries are using AI-generated exploit code against Siemens industrial controllers in the first operationally confirmed AI-assisted intrusion campaign against US critical infrastructure, coinciding with an Iran-linked strike on UK power generation.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Germany Blames Russian GRU for Leipzig Airport Drone Plot

Germany has formally attributed an August 4 explosive drone attack on a Ukrainian cargo aircraft at Leipzig/Halle Airport to Russia's GRU military intelligence directorate, expelling diplomats and closing Russian diplomatic facilities in response.

◆ HIGH CONFIDENCECovert Operations6 SEPT 2026
▌ INTELLIGENCE BRIEF

Pegasus Spyware Wave Confirmed Against Serbian Opposition, Student Movement

Independent forensic analysis confirms NSO Group's Pegasus spyware and a bespoke NoviSpy variant were used to surveil at least fourteen Serbian opposition politicians, activists, and student protest leaders, marking the country's largest documented mercenary-spyware campaign to date.

◆ HIGH CONFIDENCECovert Operations6 SEPT 2026
▌ INTELLIGENCE BRIEF

Tehran Weighs Major Escalation as U.S. Strike Capacity Questioned

U.S. intelligence assesses that Iran's IRGC leadership believes American munitions stockpiles are depleting and may pursue a major military escalation following the heaviest US-Iran exchange of fire in over a month.

◆ MODERATEConflict and War6 SEPT 2026