UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCETUESDAY, 28 JULY 2026
Go Serpent Backdoor
▌ INTELLIGENCE BRIEF

GoSerpent Backdoor Targets Southeast Asian Governments, Diplomats

◆ MODERATECyber and Information Warfare21 JUL 2026

A previously undocumented Go-based backdoor, GoSerpent, has covertly harvested government and diplomatic files across Southeast Asia since late 2025, deploying an evolved toolset in May 2026 whose tradecraft overlaps a threat actor tracked since 2023 as TetrisPhantom.

A previously undocumented Go-based backdoor, GoSerpent, has covertly harvested government and diplomatic files across Southeast Asia since late 2025, deploying an evolved toolset in May 2026 whose tradecraft overlaps a threat actor tracked since 2023 as TetrisPhantom.

ALSO FILED
▌ INTELLIGENCE BRIEF

Russian Hackers Weaponize European Security Cameras Against NATO Logistics

Dutch intelligence services have confirmed that Russian state hackers hijacked civilian-owned internet-connected security cameras across the Netherlands and other NATO states to track weapons shipments to Ukraine and, in Ukraine itself, to help target military personnel.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Bahrain and Kuwait Break Precedent With Direct Strikes on Iran

Bahrain and Kuwait conducted their first direct airstrikes on Iranian military targets this month, with UAE-supplied targeting intelligence marking a structural shift from Gulf state defensive posture to active retaliation.

◆ MODERATEConflict and War
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Russian Hackers Weaponize European Security Cameras Against NATO Logistics

Dutch intelligence services have confirmed that Russian state hackers hijacked civilian-owned internet-connected security cameras across the Netherlands and other NATO states to track weapons shipments to Ukraine and, in Ukraine itself, to help target military personnel.

◆ HIGH CONFIDENCECyber and Information Warfare
▌ INTELLIGENCE BRIEF

Bahrain and Kuwait Break Precedent With Direct Strikes on Iran

Bahrain and Kuwait conducted their first direct airstrikes on Iranian military targets this month, with UAE-supplied targeting intelligence marking a structural shift from Gulf state defensive posture to active retaliation.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Hormuz Truce Holds, Houthis Open New Front on Saudi Aramco

A fragile 48-hour pause in US-Iran strikes on the Strait of Hormuz has not stopped Houthi forces from opening a new front against Saudi Arabia's Red Sea energy infrastructure, raising the risk that the wider Gulf conflict escalates even as Oman-mediated ceasefire talks continue.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

US Pauses Iran Strikes as Munitions Deplete, Diplomacy Advances

The United States has paused airstrikes on Iran for a second consecutive night after nearly two weeks of continuous bombing, with envoy Mike Waltz acknowledging depleted munitions stockpiles as Oman-brokered talks with Tehran over Strait of Hormuz access show measurable progress.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Houthi Strike on Aramco Confirms Iran War's Red Sea Expansion

Houthi forces struck two Saudi Aramco refining complexes on 25 July with ballistic missiles and drones, marking the first direct assault on Saudi oil infrastructure since 2022 and confirming the Iran war's expansion into a Red Sea energy conflict.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

NATO Intern Arrested at SHAPE on Espionage Charges

Belgian authorities arrested a Canadian intern at NATO's SHAPE headquarters on espionage charges, surfacing a delegated-vetting blind spot that Chinese intelligence has now reached at least four times across NATO territory since January 2026.

◆ MODERATEIntelligence Community
▌ INTELLIGENCE BRIEF

Iran-US War Escalates: Drones Strike Iraqi Base, Oil Tops $100

Iran's drone strikes on a US-linked base in northern Iraq, layered onto three weeks of sustained tanker attacks in the Strait of Hormuz, signal a deliberate widening of the conflict beyond the maritime domain and toward direct confrontation with US regional infrastructure.

◆ MODERATEConflict and War
▌ INTELLIGENCE BRIEF

Trump Weighs 'Massive Attack' as Iran War Fronts Multiply

President Trump has signaled he is close to authorizing a 'massive attack' against Iran as the war enters its 13th consecutive night and expands to strike U.S. partners across the Gulf and northern Iraq.

◆ HIGH CONFIDENCEConflict and War
▌ INTELLIGENCE BRIEF

Iran's CIA Facility Strikes Trigger Russian Involvement Probe

US intelligence officials are investigating whether Russia supplied targeting data or advanced drone technology that enabled Iranian strikes on CIA facilities in Saudi Arabia and Iraq during the 2026 war.

◆ MODERATEIntelligence Community27 JUL 2026