UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCEFRIDAY, 11 SEPTEMBER 2026
Russian Drone Targets Kyiv SBU Chief Ahead of Moscow Peace Talks
▌ INTELLIGENCE BRIEF

Russian Drone Targets Kyiv SBU Chief Ahead of Moscow Peace Talks

◆ HIGH CONFIDENCEConflict and War6 SEPT 2026

A Russian jet-powered drone struck the Kyiv headquarters of Ukraine's Security Service in a deliberate attempt on acting chief Oleksandr Poklad's life on 4 September, hours before U.S. envoys Steve Witkoff and Jared Kushner arrived in Moscow for Trump-brokered talks to end the war, prompting a Ukrainian retaliation order and a subsequent mutual pause on capital strikes during the envoys' visits.

A Russian jet-powered drone struck the Kyiv headquarters of Ukraine's Security Service in a deliberate attempt on acting chief Oleksandr Poklad's life on 4 September, hours before U.S. envoys Steve Witkoff and Jared Kushner arrived in Moscow for Trump-brokered talks to end the war, prompting a Ukrainian retaliation order and a subsequent mutual pause on capital strikes during the envoys' visits.

ALSO FILED
▌ INTELLIGENCE BRIEF

China's COSCO Fleet Doubles as Global Signals Intelligence Platform

U.S. officials allege that China's state-owned COSCO shipping fleet has used concealed signals intelligence equipment to intercept military communications near foreign coastlines for decades, a claim Beijing denies as the Trump-Xi summit approaches this month.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

Russian Spy Cluster Weaponized AI to Automate Espionage Operations

Anthropic's September 2026 threat intelligence report reveals that a Russian state-nexus espionage cluster, GTG-20006, built AI-driven workflows around Claude to automate reconnaissance, phishing, and exfiltration against more than twenty Ukrainian, European, and diplomatic targets, marking a qualitative shift in how state intelligence services conduct cyber operations.

◆ HIGH CONFIDENCECyber and Information Warfare
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

China's COSCO Fleet Doubles as Global Signals Intelligence Platform

U.S. officials allege that China's state-owned COSCO shipping fleet has used concealed signals intelligence equipment to intercept military communications near foreign coastlines for decades, a claim Beijing denies as the Trump-Xi summit approaches this month.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

Russian Spy Cluster Weaponized AI to Automate Espionage Operations

Anthropic's September 2026 threat intelligence report reveals that a Russian state-nexus espionage cluster, GTG-20006, built AI-driven workflows around Claude to automate reconnaissance, phishing, and exfiltration against more than twenty Ukrainian, European, and diplomatic targets, marking a qualitative shift in how state intelligence services conduct cyber operations.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Iran Strikes US Base, Ten Ships After Tanker Sinkings

Iran's retaliatory strikes on ten vessels and a U.S.-linked base in Jordan, following Washington's destruction of five Iranian tankers, mark the sharpest escalation yet in the Strait of Hormuz tanker war.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

Romania Foils Russian Plot Targeting NATO Bases, Antonov Jets

Romania's SRI disrupted a Russian-coordinated sabotage network surveilling NATO military sites and Ukrainian Antonov cargo aircraft on the same day Hungary expelled ten Russian diplomats, marking a coordinated European counterintelligence pushback against Moscow's hybrid-warfare apparatus.

◆ HIGH CONFIDENCECovert Operations
▌ INTELLIGENCE BRIEF

Houthi Barrage Wounds 73 in Saudi Arabia as Gulf War Widens

Iran-aligned Houthi forces conducted a coordinated multi-city missile and drone strike on Saudi Arabia on 8 September, signaling a deliberate widening of the Gulf conflict beyond the US-Iran tanker war and raising the risk of direct Saudi-Iran confrontation.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Russia Resumes Kyiv Strikes Hours After US Peace Envoys Depart

Russia resumed missile and drone strikes on Kyiv within a day of US envoys Steve Witkoff and Jared Kushner departing the capital, killing at least two people and signaling the collapse of a three-day halt tied to stalled peace negotiations.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

Iran-Linked Hackers Expand US Infrastructure Targeting to Telecoms

Iranian government-linked hackers have widened their campaign against U.S. critical infrastructure to include telecommunications networks for the first time, joining water and energy as active target sectors amid the ongoing U.S.-Israel-Iran war.

◆ MODERATECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Iran Declares Restricted Zone Beyond Hormuz, Testing US Naval Line

Iran has declared a restricted maritime zone abutting the US Navy's own blockade line beyond the Strait of Hormuz, a move that risks direct naval confrontation as Gulf shipping traffic collapses and crude prices surge past $97 a barrel.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Russian Drone Strikes SBU Headquarters in Targeted Hit on Spy Chief

A Russian drone strike on the SBU's Kyiv headquarters, apparently aimed at killing the service's acting chief, marks an attempted decapitation strike on Ukraine's counterintelligence leadership and has drawn a vowed covert response from Kyiv.

◆ MODERATEIntelligence Community