UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCEWEDNESDAY, 22 JULY 2026
Go Serpent Backdoor
▌ INTELLIGENCE BRIEF

GoSerpent Backdoor Targets Southeast Asian Governments, Diplomats

◆ MODERATECyber and Information Warfare21 JUL 2026

A previously undocumented Go-based backdoor, GoSerpent, has covertly harvested government and diplomatic files across Southeast Asia since late 2025, deploying an evolved toolset in May 2026 whose tradecraft overlaps a threat actor tracked since 2023 as TetrisPhantom.

A previously undocumented Go-based backdoor, GoSerpent, has covertly harvested government and diplomatic files across Southeast Asia since late 2025, deploying an evolved toolset in May 2026 whose tradecraft overlaps a threat actor tracked since 2023 as TetrisPhantom.

ALSO FILED
▌ INTELLIGENCE BRIEF

Trump Threatens Pickaxe Mountain Strike as Iran War Escalates

President Trump has signaled an imminent US strike on Iran's fortified underground Pickaxe Mountain nuclear facility, a move Tehran has warned would constitute a formal expansion of the eleven-day-old war.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Houthis Declare Saudi Naval Blockade as Iran War Widens

Yemen's Houthi rebels have declared a naval blockade of Saudi Arabia in solidarity with Iran, opening a second maritime chokepoint threat alongside the paralyzed Strait of Hormuz and placing roughly 2.5 million barrels per day of Saudi crude exports at risk as regional mediators press Washington and Tehran to accept a ten-day ceasefire.

◆ HIGH CONFIDENCEConflict and War22 JUL 2026
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Trump Threatens Pickaxe Mountain Strike as Iran War Escalates

President Trump has signaled an imminent US strike on Iran's fortified underground Pickaxe Mountain nuclear facility, a move Tehran has warned would constitute a formal expansion of the eleven-day-old war.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Houthis Declare Saudi Naval Blockade as Iran War Widens

Yemen's Houthi rebels have declared a naval blockade of Saudi Arabia in solidarity with Iran, opening a second maritime chokepoint threat alongside the paralyzed Strait of Hormuz and placing roughly 2.5 million barrels per day of Saudi crude exports at risk as regional mediators press Washington and Tehran to accept a ten-day ceasefire.

◆ HIGH CONFIDENCEConflict and War22 JUL 2026
▌ INTELLIGENCE BRIEF

UK Sanctions Target RSF Gold Financier as Court Convicts Hemedti of Genocide

The UK's sanctioning of a Dubai-based RSF financier and a Sudanese court's in-absentia genocide conviction of RSF commander Hemedti mark a coordinated legal-financial push to choke off the conflict gold economy sustaining Sudan's war, though enforcement gaps and a fractured Western sanctions front limit near-term impact.

◆ HIGH CONFIDENCECovert Operations20 JUL 2026
▌ INTELLIGENCE BRIEF

US-Iran War Enters Ninth Night as Conflict Spreads to Jordan

US and Iranian forces exchanged fire for a ninth consecutive night on 19-20 July, with Iranian missiles striking Jordan and shrapnel reaching Israel near Eilat as the American troop death toll hit 17, signaling a war of attrition neither side has been able to close out.

◆ HIGH CONFIDENCEConflict and War20 JUL 2026
▌ INTELLIGENCE BRIEF

Ukrainian Spy Confesses to Extrajudicial Killing of Monaco Bombing Suspect

A Ukrainian military intelligence officer has confessed to the unauthorized killing of the woman accused of the June 29 Monaco bombing, exposing a command-and-control gap inside Kyiv's wartime intelligence services.

◆ MODERATECovert Operations20 JUL 2026
▌ INTELLIGENCE BRIEF

Russia Turns Europe's Doorbell Cameras Into a Spy Network

Russian state-sponsored hackers have converted poorly secured civilian IP cameras across the Netherlands and wider Europe into a distributed surveillance network trained on NATO logistics corridors carrying weapons to Ukraine.

◆ HIGH CONFIDENCECyber and Information Warfare18 JUL 2026
▌ INTELLIGENCE BRIEF

EU and UK Sanction GRU Unit 29155 Over Infrastructure Sabotage

The European Union and United Kingdom issued a first-ever joint cyber sanctions package on 13 July against Russian GRU officers, an FSB unit, and a support company tied to a decade-long infrastructure sabotage and espionage campaign across Europe, including a foiled attack on Poland's energy grid.

◆ HIGH CONFIDENCECyber and Information Warfare17 JUL 2026
▌ INTELLIGENCE BRIEF

EU and UK Sanction Russian GRU Network Over Grid Sabotage

The EU and UK have jointly sanctioned Russian GRU and FSB officers and front companies for a sixteen-year cyber sabotage campaign against European power grids and rail networks, formalizing what officials describe as an active hybrid war against the continent's critical infrastructure.

◆ HIGH CONFIDENCECyber and Information Warfare14 JUL 2026
▌ INTELLIGENCE BRIEF

Israel Warned US of Specific Iranian Plot to Kill Trump

US Ambassador to Israel Mike Huckabee has confirmed that Israeli intelligence warned Washington of a specific Iranian plot to assassinate President Trump, a disclosure that prompted altered presidential travel security even as Trump himself and some US officials dispute the threat's credibility.

◆ MODERATEIntelligence Community13 JUL 2026