UNCLASSIFIED // FOR PUBLIC RELEASE▸ INTELLIGENCE BRIEFING ACTIVESPYWITNESS NEWS
INTELLIGENCE REPORT
SPYWITNESS
NEWS & ANALYSIS
ESTABLISHED 2023
▌ LIVE INTELLIGENCE FEED
▌ LATEST INTELLIGENCESUNDAY, 31 MAY 2026
cyber war
▌ INTELLIGENCE BRIEF

GCHQ Director Warns West's Window Is Closing as Russia and China Accelerate

◆ HIGH CONFIDENCEIntelligence Community31 MAY 2026

GCHQ Director Anne Keast-Butler, in an inaugural public address at Bletchley Park, warned that the West is at a moment of consequence as Russia intensifies hybrid operations from seabed to cyberspace and China emerges as a full-spectrum technology superpower.

GCHQ Director Anne Keast-Butler, in an inaugural public address at Bletchley Park, warned that the West is at a moment of consequence as Russia intensifies hybrid operations from seabed to cyberspace and China emerges as a full-spectrum technology superpower.

ALSO FILED
▌ INTELLIGENCE BRIEF

Salt Typhoon Penetrates Italy's Critical IT Backbone in Silent Two-Week Operation

China's Salt Typhoon APT maintained undetected two-week access inside IBM's Italian subsidiary Sistemi Informativi, compromising IT infrastructure serving Italy's national institutions, energy, finance, and telecommunications sectors.

◆ MODERATECyber and Information Warfare31 MAY 2026
▌ INTELLIGENCE BRIEF

Russia Deploys Dual Covert Operation to Seize Armenia's June Election

Russia is conducting a dual-track covert influence operation against Armenia's June 2026 elections, combining the planned transportation of up to 100,000 diaspora voters from Russian territory with Storm-1516's most extensive disinformation campaign on record, targeting PM Pashinyan's pro-Western government.

◆ MODERATECovert Operations30 MAY 2026
INTELLIGENCE ARCHIVE
▌ INTELLIGENCE BRIEF

Salt Typhoon Penetrates Italy's Critical IT Backbone in Silent Two-Week Operation

China's Salt Typhoon APT maintained undetected two-week access inside IBM's Italian subsidiary Sistemi Informativi, compromising IT infrastructure serving Italy's national institutions, energy, finance, and telecommunications sectors.

◆ MODERATECyber and Information Warfare31 MAY 2026
▌ INTELLIGENCE BRIEF

Russia Deploys Dual Covert Operation to Seize Armenia's June Election

Russia is conducting a dual-track covert influence operation against Armenia's June 2026 elections, combining the planned transportation of up to 100,000 diaspora voters from Russian territory with Storm-1516's most extensive disinformation campaign on record, targeting PM Pashinyan's pro-Western government.

◆ MODERATECovert Operations30 MAY 2026
▌ CT ALERT // EUROPE

Operator Identified: IRGC Assassination Network Active Across Europe as Tehran's External Operations Arm Loses Its Chief

European intelligence sources have identified Alireza Mohammadi — alias Meghdad Hassani — as the IRGC officer overseeing an active assassination, espionage and sabotage network operating across multiple European countries. The disclosure, timed to the killing of IRGC Intelligence chief Majid Khademi, signals a coordinated Western counter-intelligence campaign against Tehran's external operations during a period of structural disruption at the top of the IRGC.

◆ MODERATETerrorism and Counterterrorism29 MAY 2026
▌ OSINT REPORT // ATLANTIC INFRASTRUCTURE SURVEILLANCE

Tracked Every Mile: UK Exposes Russian Deep-Sea Surveillance Operation Against Atlantic Cable Infrastructure

British and Norwegian forces tracked three Russian vessels — including two GUGI deep-sea research submarines — conducting a month-long covert survey of North Atlantic undersea cable infrastructure. The UK's decision to publicly expose the operation represents a calibrated counter-intelligence and deterrence signal rather than a purely defensive response.

◆ HIGH CONFIDENCEOSINT29 MAY 2026
▌ INTELLIGENCE BRIEF

GCHQ Director Warns West Is Losing Ground in Cyber Cold War

GCHQ Director Anne Keast-Butler publicly warned that Russia is relentlessly targeting Western critical infrastructure and democratic processes while China advances toward cyber supremacy, leaving the West a narrowing window to respond.

◆ HIGH CONFIDENCECyber and Information Warfare29 MAY 2026
▌ INTELLIGENCE BRIEF

Iran Deal Stalls: Trump Signals No Rush as Hormuz Closure Deepens

US-Iran ceasefire negotiations remain unresolved as fundamental disagreements over nuclear enrichment, sanctions relief, and a Lebanon ceasefire threaten to delay any near-term agreement to reopen the Strait of Hormuz.

◆ MODERATEGeopolitical Analysis28 MAY 2026
▌ INTELLIGENCE BRIEF

GCHQ Chief: West Now Occupies Space Between Peace and War

GCHQ Director Anne Keast-Butler warned at Bletchley Park that Britain and its allies now occupy a space between peace and war, as Russia's daily hybrid operations intensify and China emerges as a full-spectrum intelligence and technology superpower.

◆ HIGH CONFIDENCEIntelligence Community28 MAY 2026
▌ INTELLIGENCE BRIEF

Lazarus Group Deploys Undetectable Memory RAT Against Global Financial Sector

North Korea's Lazarus Group has deployed RemotePE, a fully memory-resident RAT leaving zero filesystem artifacts, against global financial and cryptocurrency institutions — a significant capability escalation directly funding Pyongyang's weapons programmes.

◆ HIGH CONFIDENCECyber and Information Warfare27 MAY 2026
▌ ANALYSIS

Hormuz on the Edge: Iran's IRGC Tests Ceasefire Limits as Nuclear Deal Hangs in the Balance

Nearly three months after the United States and Israel launched the most significant direct military campaign against Iran in modern history, a fragile ceasefire is fracturing in real time. On 25 May, US forces conducted what the Pentagon described as "self-defence strikes" against Islamic Revolutionary Guard Corps boats actively laying mines in the Strait of Hormuz — the global chokepoint through which roughly 20 percent of the world's traded oil transits daily. The IRGC has responded by threatening reciprocal action and redefining the Strait as a "vast operational area." Peace negotiations in Doha remain deadlocked on the nuclear question. The conflict may have entered a post-offensive phase, but it has not ended.

◆ HIGH CONFIDENCEConflict and War26 MAY 2026