UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCEMONDAY, 14 SEPTEMBER 2026
Russian Drone Targets Kyiv SBU Chief Ahead of Moscow Peace Talks
▌ INTELLIGENCE BRIEF

Russian Drone Targets Kyiv SBU Chief Ahead of Moscow Peace Talks

◆ HIGH CONFIDENCEConflict and War6 SEPT 2026

A Russian jet-powered drone struck the Kyiv headquarters of Ukraine's Security Service in a deliberate attempt on acting chief Oleksandr Poklad's life on 4 September, hours before U.S. envoys Steve Witkoff and Jared Kushner arrived in Moscow for Trump-brokered talks to end the war, prompting a Ukrainian retaliation order and a subsequent mutual pause on capital strikes during the envoys' visits.

A Russian jet-powered drone struck the Kyiv headquarters of Ukraine's Security Service in a deliberate attempt on acting chief Oleksandr Poklad's life on 4 September, hours before U.S. envoys Steve Witkoff and Jared Kushner arrived in Moscow for Trump-brokered talks to end the war, prompting a Ukrainian retaliation order and a subsequent mutual pause on capital strikes during the envoys' visits.

ALSO FILED
▌ INTELLIGENCE BRIEF

Iran-Linked Hackers Breach Water Systems Across Twelve US States

Iran-linked hackers, assessed to include the IRGC-backed CyberAv3ngers, have breached water-utility control systems across at least twelve U.S. states, briefly disabling a Georgia pump station in the broadest documented targeting of U.S. water infrastructure since 2023.

◆ MODERATECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Russia Strips Germany's Last Diplomatic Foothold, Lavrov Invokes 1941

Russia has stripped Germany of its last consular and cultural presence on Russian soil, with Foreign Minister Lavrov invoking 1941 to frame the Leipzig drone-attack rupture as the opening of what Moscow now calls a real war with Berlin.

◆ HIGH CONFIDENCEGeopolitical Analysis
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Iran-Linked Hackers Breach Water Systems Across Twelve US States

Iran-linked hackers, assessed to include the IRGC-backed CyberAv3ngers, have breached water-utility control systems across at least twelve U.S. states, briefly disabling a Georgia pump station in the broadest documented targeting of U.S. water infrastructure since 2023.

◆ MODERATECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Russia Strips Germany's Last Diplomatic Foothold, Lavrov Invokes 1941

Russia has stripped Germany of its last consular and cultural presence on Russian soil, with Foreign Minister Lavrov invoking 1941 to frame the Leipzig drone-attack rupture as the opening of what Moscow now calls a real war with Berlin.

◆ HIGH CONFIDENCEGeopolitical Analysis
▌ INTELLIGENCE BRIEF

Moscow's AI-Automated Espionage Machine Targets European Defense Networks

Russian intelligence-linked hackers operationalized Anthropic's Claude to autonomously detect, rebuild, and redeploy malware faster than defenders could respond, compromising more than twenty government, diplomatic, and defense-sector targets across Ukraine, Europe, the Middle East, and Asia.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Putin Tells BRICS Summit European Troops in Ukraine Mean War

Vladimir Putin declared at the BRICS summit in New Delhi that any European troop deployment to Ukraine would constitute war with Russia, sharpening Moscow's challenge to the Western security-guarantee framework built to underwrite a future Kyiv peace deal.

◆ HIGH CONFIDENCEGeopolitical Analysis
▌ INTELLIGENCE BRIEF

Satellite Imagery Shows Iran Racing to Harden Underground Nuclear Site

New satellite imagery analysis shows the heaviest construction activity yet recorded at Iran's deeply buried Pickaxe Mountain site near Natanz, as the Pentagon separately studies specialized strike options against hardened underground nuclear facilities.

◆ MODERATEOSINT
▌ INTELLIGENCE BRIEF

BlueMoon Exploit Kit Spreads Across Four China-Linked Spy Units

A previously undocumented exploit kit, BlueMoon, has been independently adopted by at least four China-nexus espionage clusters within twelve days of its first confirmed use, chaining a Chrome zero-day with a Windows kernel flaw to compromise NGOs, mining firms, and commodity trading houses.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

China's COSCO Fleet Doubles as Global Signals Intelligence Platform

U.S. officials allege that China's state-owned COSCO shipping fleet has used concealed signals intelligence equipment to intercept military communications near foreign coastlines for decades, a claim Beijing denies as the Trump-Xi summit approaches this month.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

Russian Spy Cluster Weaponized AI to Automate Espionage Operations

Anthropic's September 2026 threat intelligence report reveals that a Russian state-nexus espionage cluster, GTG-20006, built AI-driven workflows around Claude to automate reconnaissance, phishing, and exfiltration against more than twenty Ukrainian, European, and diplomatic targets, marking a qualitative shift in how state intelligence services conduct cyber operations.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Iran Strikes US Base, Ten Ships After Tanker Sinkings

Iran's retaliatory strikes on ten vessels and a U.S.-linked base in Jordan, following Washington's destruction of five Iranian tankers, mark the sharpest escalation yet in the Strait of Hormuz tanker war.

◆ HIGH CONFIDENCEConflict and War