icbrief.org

Ukraine Brief — 2026-08-30

We assess Russia and Ukraine will very likely continue fighting through winter without implementing a ceasefire before March 2027. Moderate confidence rests on converging military, industrial, and diplomatic indicators: Budanov's 30,000-per-month mobilization floor and winter-fighting commitment, Zelensky's order to triple drone strikes, Russia's tasking of offensive scenarios toward Kyiv and Chernihiv, and Moscow's pursuit of North Korean KN-30 ballistic missiles. Detection of Russian force generation toward the northern axis, or a formal negotiating framework addressing territorial terms, would alter this judgment.

Ukraine's repeat strikes on Engels-2, disabling a second Tu-95 bomber in six weeks, are eroding Russia's cruise-missile launch capacity. Ukraine will likely employ a domestically produced FP-7 missile against targets inside Russia within six months, while Russia's use of the untransferred KN-30 in the same period is unlikely. At least one NATO member will very likely announce new interceptor deliveries by November as the aerial threat set expands.

The Zaporizhzhia nuclear plant, running on emergency diesel after losing external power on August 20, will very likely experience further drone or military-activity incidents at the site within the next two months. A station blackout before diesel is replenished would force emergency international intervention.

https://icbrief.org/ukraine/

#Ukraine #UkraineWar #RussiaUkraineWar

Ukraine Brief — 2026-08-28

Russia and Ukraine are simultaneously degrading each other's industrial production at a scale not observed earlier in the war. All major Lukoil refineries are offline for the first time; fuel rationing will likely expand to at least three additional Russian oblasts by September 30. Ukrainian grain exports for August will very likely fall below 50 percent of prior-year volume, as Russian strikes on port vessels and a 70-ship Danube bottleneck cap the only remaining export route. Moderate confidence rests on convergent reporting across both threads but limited independent damage verification.

No ceasefire or peace agreement under Zelensky's disclosed framework will very likely be signed through year-end 2026. That assessment carries moderate confidence, since Russia's constitutional claim to Donetsk and Luhansk forecloses the third-party administration mechanism the proposal requires. The Commission will likely preserve Ukraine's Patriot waiver access over French objections through at least November, maintaining the air-defense pipeline Kyiv needs as the Iskander-1000's confirmed 550-kilometer range extends the threat geometry.

Partial resumption at any one Lukoil refinery would ease rationing pressure. A confirmed back channel addressing Russia's sovereignty claim, or a US-imposed negotiating deadline, would shift the peace assessment.

https://icbrief.org/ukraine/

#Ukraine #UkraineWar #RussiaUkraineWar

Ukraine Brief — 2026-09-01

Both Russia and Ukraine will very likely strike each other's civilian economic infrastructure weekly through September, extending a mutual campaign now in its seventh straight week. Russia's shift to daytime jet-powered drone waves has prompted the Verkhovna Rada to adopt formal continuity measures, and at least one additional Kyiv national institution is likely to follow before September 15. Moderate confidence reflects consistent strike tempo but limited visibility into munition reserves.

The Zaporizhzhia NPP, on backup generators since August 20, poses the most acute near-term risk. An IAEA-escorted fuel convoy will likely reach the plant before stocks exhaust around September 10, but Russia is likely to strike energy transmission infrastructure in at least two attacks before September 12 while the plant remains off-grid, degrading the network ZNPP requires to reconnect. High confidence in the convoy reflects the IAEA's established logistics-facilitation role.

Ukraine will likely enter October without both a named defense-industrial adviser replacing Kamyshin and a confirmed date for the Witkoff-Kushner Kyiv visit, leaving defense-industrial coordination and direct U.S. engagement strained during framework negotiations. The envoy visit is unlikely within the next two weeks despite renewed scheduling contact on August 31.

https://icbrief.org/ukraine/

#Ukraine #UkraineWar #RussiaUkraineWar

Ukraine Brief — 2026-09-05

The Witkoff-Kushner shuttle to Moscow and Kyiv will very likely conclude without a mutual ceasefire framework by September 15. Russia struck SBU headquarters during Kyiv's unilateral pause while Ukraine extended drone range to Sochi, leaving neither side with incentive to formalize a halt. Ukraine will likely carry out a named retaliatory strike on Russian territory within three weeks of the ceasefire's September 8 expiry. Moderate confidence reflects convergent reporting without direct access to internal deliberations; a Russian reciprocity statement before September 8 would narrow both assessments.

European defense support faces structural friction that compounds the battlefield picture. Estonia's €70M ammunition scandal will likely prompt at least one other EU member to review EPF-funded procurement by October 31, slowing the stock transfers Ukraine depends on to close its interceptor gap before winter. Confidence is low; a Commission statement framing the failure as idiosyncratic would narrow this assessment. Sanctions enforcement against newly exposed evasion corridors through Morocco and the Maldives will likely produce no formal designations by December 1.

The FAO Food Price Index will very likely remain above 130 points in September on Black Sea shipping disruption and European weather losses, keeping MENA import costs elevated through Q4.

https://icbrief.org/ukraine/

#Ukraine #UkraineWar #RussiaUkraineWar

Ukraine Brief — 2026-09-04

Ukraine's multi-night drone campaign disrupting all three Moscow airports, combined with Zelensky's formal ICAO notification, will likely push at least one non-Russian carrier to suspend Moscow service by mid-October as insurers reprice the risk. Russia will very likely respond with a coordinated 100-plus munition strike against Ukrainian energy infrastructure before November. Moderate confidence on both reflects the unbroken annual pattern of Russian pre-winter energy campaigns and post-MH17 precedent for carrier exits from contested airspace.

Western institutional support is likely to remain stalled through mid-October. House Republican leaders have canceled pre-election working weeks, blocking a floor vote on the Graham Russia sanctions act, while Hungary has vetoed EU Cluster 2 and 3 screening for the third consecutive meeting. Moderate confidence reflects the narrow procedural windows available before November.

Russia will very likely enact further recruitment-eligibility expansions within 30 days of the September Duma elections, substituting administrative coercion for a mobilization decree. Moderate confidence rests on five consecutive broadening measures since February 2022. A shift toward executive decree language would signal the Kremlin's acceptance of formal mobilization's political cost.

https://icbrief.org/ukraine/

#Ukraine #UkraineWar #RussiaUkraineWar

IC Brief Morning — 2026-09-06

Russia will likely sustain dual-track operations against NATO allies' domestic political processes and Ukrainian security infrastructure through October 6. The Pentagon's munitions-leak investigation and Israeli security accountability proceedings show allied counterintelligence organizations managing internal vulnerabilities alongside external threats. We have high confidence in the Russia assessment: Storm-1516's 77-campaign record since 2023 and the September 4 SBU headquarters strike during active ceasefire talks confirm institutionalized tasking on both tracks. A formal ceasefire agreement is the single observable that would constrain this tempo.

The Pentagon investigation and HPSCI testimony on AI data-center vulnerabilities reveal US defense information reaching adversary collection through unauthorized disclosure and supply-chain-embedded access. A senior US official will likely cite Iran-conflict munitions depletion as a constraint on Ukraine support within 60 days. Chinese state media will likely reference disclosed stockpile data to challenge allied military credibility within two months. Moderate confidence reflects the investigation's single-source reporting base.

Israeli media will very likely report additional factual discrepancies in the PMO's October 7 timeline within two weeks. The Kirya arrival-time inconsistency and the omitted wake delay provide anchors for further IDF and Shin Bet-sourced reporting that sustains domestic pressure through the October 7 anniversary period.

https://icbrief.org/icbrief/

#Intelligence #OSINT #NationalSecurity

Ukraine Brief — 2026-09-03

Ukraine's compounding interceptor shortfall will likely sustain Russia's near-nightly attack tempo against Kyiv through mid-September and likely enable a combined energy-infrastructure strike by early October, initiating the winter campaign earlier than in any prior year. F-16 pilots have resorted to cannon-only sorties, Rubio refused Zelensky's request for Patriot missile stock, and the Zaporizhzhia plant remains on emergency diesel after grid severance. Moderate confidence reflects on-record sourcing from the 107th Wing commander and State Department, offset by unverified stockpile data.

An allied announcement earmarking air-to-air missiles or Patriot interceptors for Ukraine is unlikely by mid-October, given zero such packages since January 2025. Confirmation that a European F-16 partner has initiated an AIM-9 transfer outside ITAR review would shift the air defense outlook from continued degradation to near-term stabilization. Absent that, Ukraine's mitigation is the triage embedded in Zelensky's new two-tier alert system.

Western enforcement against Russian state assets will likely produce at least one additional seizure beyond Norway's Svalbard action before mid-October, sustained by four national-level interdictions this year and Naftogaz's stated global pursuit. Zelensky faces simultaneous institutional strain from the SBU-HUR shootout and corruption allegations reaching his Presidential Office chief, constraining cohesion ahead of winter.

https://icbrief.org/ukraine/

#Ukraine #UkraineWar #RussiaUkraineWar

IC Brief Morning — 2026-08-28

At least one additional sabotage attempt against European defense infrastructure supporting Ukraine will very likely become public within 60 days, extending a GRU commissioning pattern that Czech, Slovak, and German authorities have independently documented. Moderate confidence rests on the breadth of confirmed plots across jurisdictions. European governments will likely avoid formal attribution to Russian state direction over the next 90 days. Low confidence reflects early-stage forensic investigations and the Fico government's reluctance to formally attribute.

Neither the Ratcliffe-Bortnikov intelligence channel nor the US-brokered Mossad-Syria Amman track will likely produce a negotiating framework within 90 days, absent commitments that would convert exploratory contact into structured negotiation. That assessment carries low confidence, given the opacity of internal deliberations. Mossad Director Gofman's concurrent recusal from the Qatargate investigation, where the security opinion will likely remain unsubmitted within 60 days, compounds the institutional constraints limiting the Amman track's pace.

At least one additional US intelligence community insider threat case will likely become public within 60 days, given the convergence of a DIA analyst's guilty plea, a Secret Service clearance-revocation investigation, and declassified MSS espionage files. Moderate confidence reflects three concurrent detection actions. A European government naming Russia in a sabotage case would shift the attribution assessment.

https://icbrief.org/icbrief/

#Intelligence #OSINT #NationalSecurity

IC Brief Morning — 2026-08-30

Russia's hybrid sabotage campaign against European defense-industrial targets will very likely produce at least one additional publicly reported incident within 60 days. High confidence reflects an accelerating cadence: three operations surfaced in the past month, including Germany's GRU-attributed Leipzig drone, Slovakia's foiled napalm factory attack, and arson at Estonia's Milrem Robotics facility. Berlin's imminent formal attribution will likely produce a coordinated EU hybrid-specific sanctions package by September 30, absent a Hungarian unanimity block.

U.S.-mediated Russia-Ukraine negotiations will likely not formally convene by September 30. Putin has not accepted the trilateral format Ratcliffe proposed through SVR-FSB intelligence channels, and Budanov's hedged September timeline tracks prior Ukrainian projections that consistently failed to produce sessions. Moderate confidence rests on this reference class, though the novel intelligence back-channel introduces bounded uncertainty about whether a bilateral track materializes outside public view.

DHS use of customs summonses to circumvent judicial warrant restrictions and CIA routing of AI-generated reports to local police through fusion centers will likely draw formal civil liberties legal challenge within 90 days. Moderate confidence rests on the concrete factual predicate both disclosures supply; Fort's pending impoundment motion creates a ready procedural vehicle.

https://icbrief.org/icbrief/

#Intelligence #OSINT #NationalSecurity

IC Brief Morning — 2026-08-27

We assess that Iranian, Chinese, and Russian intelligence-linked operators will each likely regenerate disrupted capability over the next 90 to 120 days. US countermeasures (IRGC designations, QTFY domain seizures, Ratcliffe's Moscow warning) imposed tactical costs without reaching the contractor and proxy networks that enable reconstitution. Moderate confidence in the Iran and PRC assessments reflects documented reconstitution rates in prior cases. Low confidence in the Russia sabotage assessment reflects uncertainty over whether Ratcliffe's direct Baltic warning breaks the current quarterly tempo.

Iran's DadeNegar crowdsourcing platform requires no satellites or signals infrastructure and has reconstituted under new branding after three of five prior designations. Nanjing Xinjiuwei and its MSS and PLA clients face no indictments after the QTFY seizure, leaving the contractor model intact. Congress will likely fund reconstruction of the intelligence infrastructure Iran has damaged, including the CIA's Riyadh station, before year-end.

Germany is unlikely to formally attribute the Leipzig airport drone plot to the GRU before January, consistent with Berlin's pattern of withholding designation even as investigative findings point to Russian tradecraft. A formal attribution or a visible change in Russia's hybrid operational tempo after the Ratcliffe warning would alter the current assessments.

https://icbrief.org/icbrief/

#Intelligence #OSINT #NationalSecurity

IC Brief Morning — 2026-09-01

Russian intelligence operatives are very likely to be arrested or publicly identified by a European government for sabotage or espionage on NATO territory within the next three months. Moderate confidence reflects the sustained pace of European counterintelligence actions and the ongoing pattern of Russian operations against defense supply chains. Additional Chinese cyber or signals-intelligence operations will likely be publicly attributed by a US or allied service within the next two months, extending a targeting pattern that now spans HUMINT recruitment, infrastructure compromise, and confirmed signals-intelligence facilities in Cuba.

The Russian assessment rests on converging indicators: the WB Electronics investigation in Poland has named foreign-intelligence involvement, and FSB counterespionage campaigns have not diminished Russia's external operation tempo. Washington's bilateral channels, confirmed by Lithuania regarding the CIA director's Moscow visit and with NIS assessing a US-North Korea summit could occur at any time, will likely produce additional publicly acknowledged high-level contacts before December. A diplomatic breakthrough through these channels is the primary factor that would suppress public attributions of adversary operations.

https://icbrief.org/icbrief/

#Intelligence #OSINT #NationalSecurity

IC Brief Morning — 2026-09-03

Concurrent FBI seizure of Hamas's crypto fundraising network and IDF/Shin Bet capture of a senior Gaza City security figure will likely prevent Hamas from rebuilding a public donation platform or mounting a claimed retaliatory operation within 21 days. The Pentagon's removal of decades of Orders Book classified material from SIPRNet will likely suppress further public military non-concurrences over the next three weeks, though at least one HASC or HPSCI member will likely cite the purge in support of the structural intelligence reform HPSCI began examining this week.

Moderate confidence in the Hamas assessment reflects the FBI's multi-year penetration of the rotating-wallet system and the intelligence harvest of thousands of donor identities, which raises the cost of any replacement channel. Hamas-affiliated channels promoting new donation addresses within the next week would be the earliest indicator this assessment underestimates recovery speed.

Congressional oversight of the Pauken MSS sentencing and the FBI's relaxed hiring standards will likely remain siloed over the next 21 days, with jurisdictional divides between Judiciary and Intelligence committees preventing officials from publicly linking active adversary recruitment with weakened vetting. DOJ's active Hamas counter-financing pipeline will likely produce additional seizures within 30 days, outpacing any follow-on charges in the separate Pauken MSS network.

https://icbrief.org/icbrief/

#Intelligence #OSINT #NationalSecurity

Ukraine Brief — 2026-08-31

Russia will very likely execute at least one coordinated strike wave against Ukrainian civilian energy infrastructure within three weeks, following the Defense Ministry's preparation announcement and near-uniform follow-through on comparable declared campaigns. At least one additional strike on a Ukrainian ammunition depot near a population center is likely within two weeks, and a mass-casualty incident killing 15 or more civilians is likely before September 20. Moderate confidence rests on six-of-seven prior campaign resolution, announcement specificity, and the Myla-Vyshneve recurrence pattern.

Ukraine's deep-strike campaign has cut Russia's refining capacity to a 20-year low, creating the retaliatory trigger Moscow cited. The Myla investigation will likely produce individual accountability without storage-siting reform by September 30, replicating the Vyshneve precedent and leaving the vulnerability open. Whether a NATO member announces a new air-defense transfer referencing the energy threat within three weeks is genuinely uncertain. Low confidence reflects the framing-specificity requirement recent transfers have not met.

The MoD announcement functioning as domestic messaging rather than operational planning has no precedent in this event class. A House Speaker scheduling commitment on the Russia sanctions bill would shift the trajectory by coupling energy-protection pressure with tariff authority over Russia's top oil buyers.

https://icbrief.org/ukraine/

#Ukraine #UkraineWar #RussiaUkraineWar

Ukraine Brief — 2026-08-27

Russia will likely strike Kyiv's central administrative districts within 30 days, driven by Moscow's framing of Ukrainian refinery strikes as NATO-attributable and Kremlin sources' assessment that peace talks are exhausted. Moderate confidence reflects convergent Kremlin-adjacent sourcing without independent corroboration of targeting decisions. The signaling may reflect pressure tactics ahead of an autumn diplomatic window rather than settled plans. Combined barrages exceeding 100 munitions will likely continue at weekly frequency through late September. The Donetsk fortress-belt cities will very likely hold within 60 days under the Biletskyi-Prokopenko command restructuring.

Whether European air defense deliveries outpace Russian strike escalation is the binding constraint on the winter campaign. At least one new ground-based battery from the EU's 6.1 billion euro procurement or Italy's SAMP/T NG decree will likely reach Ukrainian operational units before December 1, but Ukraine's indigenous FP-7 ballistic missile and SCALP co-production programs will likely not achieve confirmed combat use before 2027, keeping Kyiv dependent on allied stockpiles through winter.

Fedorov's escalation from demanding wartime elections to publicly declaring Ukraine is losing at 5% institutional effectiveness deepens governance pressure on Zelenskyy's post-Syrskyi leadership model. A formal Rada inquiry will likely not materialize within two weeks, consistent with prior post-dismissal disputes remaining rhetorical.

https://icbrief.org/ukraine/

#Ukraine #UkraineWar #RussiaUkraineWar

Ukraine Brief — 2026-09-02

Russia and Ukraine will likely sustain mutual strikes against each other's energy infrastructure over the next two weeks. Putin ordered retaliatory energy attacks at the SCO summit on September 1, hours after Ukraine's sixth drone strike on Ust-Luga this year. Moderate confidence rests on his public commitment at an international forum, though staging indicators for the next wave are absent. A NATO Patriot interceptor commitment before November is unlikely, leaving Ukraine's air-defense gap unresolved ahead of winter.

Neither the Graham Sanctioning Russia and Iran Act nor an EU mechanism to deploy frozen Russian sovereign assets is likely to advance before November. Belgium's public veto and the House Democratic caucus's refusal to take a position are the proximate blockers. Moderate confidence on both reflects consistent institutional reporting but no visibility into private negotiations. The Witkoff-Kushner Kyiv visit, postponed since Easter, likely remains unscheduled through mid-October.

The Verkhovna Rada will likely advance at least one anti-corruption bill before any women's conscription legislation by December, sustaining EU accession momentum. A second drone incursion into NATO airspace would be the most immediate indicator for shifting the stalled Patriot transfer calculus.

https://icbrief.org/ukraine/

#Ukraine #UkraineWar #RussiaUkraineWar

Ukraine Brief — 2026-09-06

We assess it very likely that no formal ceasefire covering front-line operations will emerge before October 1, even as the Witkoff-Kushner shuttle between Moscow and Kyiv represents the most intensive US mediation of the war. Russia's airport strikes during the declared three-day pause extend May's pattern of narrow gestures coexisting with sustained targeting. Moderate confidence reflects convergent reporting on the talks and ceasefire violations, with the discussed "next steps" plan's content undisclosed.

Russia will very likely execute a coordinated strike exceeding 150 munitions against Ukrainian energy infrastructure before October 15, exploiting degraded air defenses as jet-drone interception rates remain below 70%. Ukraine likely will strike Rassvet satellite infrastructure again by October 1, sustaining counter-space pressure as Russia's latest launch batch failed to reach orbit. Moderate confidence in both reflects documented strike patterns and verified orbital data, absent a ceasefire constraining operations.

The EU will likely renew its Russia sanctions by September 15 without requiring disclosure of the peace plan terms, maintaining economic pressure independent of the stalled military track. A Rassvet launch recovery, interception rates climbing past 75%, or early peace-plan disclosure would alter these assessments.

https://icbrief.org/ukraine/

#Ukraine #UkraineWar #RussiaUkraineWar

IC Brief Morning — 2026-09-04

Three European governments disclosed distinct Russian operations within 48 hours, a convergence that will likely prompt additional NATO disclosures within the next two months. Moderate confidence rests on Germany's formal GRU attribution of the Leipzig drone attack, convergent US intelligence, Denmark's PET exposure of defense-industry sabotage recruitment, and the Munich arrest of two Bulgarian nationals after a firebomb on Rohde & Schwarz. European defense contractors will likely announce enhanced security measures before November. A third-country disclosure before October would confirm an alliance-wide cascade.

The administration will likely frame Iranian cyber operations against US critical infrastructure as part of the broader military confrontation within the next six weeks. Moderate confidence reflects explicit Iranian threats coinciding with Hormuz strikes and a presidential refusal to rule out covert support to dissidents, though CISA's generic advisories suggest institutional resistance to formal linkage. Congressional pressure for CISA funding restoration will likely intensify by December.

HPSCI's counterintelligence-reform hearing and the FBI's disclosed wiretapping of a sitting member's calls create converging oversight pressure. A Democratic member will likely cite both the Subramanyam intercept disclosure and CISA personnel reductions in a formal accountability push by December. Low confidence reflects the conjunction's dependence on minority-party messaging calculus amid competing priorities.

https://icbrief.org/icbrief/

#Intelligence #OSINT #NationalSecurity

IC Brief Morning — 2026-09-02

Chinese intelligence services are running parallel collection across maritime SIGINT, allied military headquarters, and defense-industrial targets, documented this week across three concurrent reporting streams. The administration will likely withhold formal COSCO sanctions before any Trump-Xi meeting, by year-end 2026. Moderate confidence holds absent an interagency sanctions process or congressional forcing function, neither of which is in evidence. A congressional hearing bundling two or more concurrent Chinese collection incidents is unlikely within 90 days, absent a domestic jurisdictional hook in the SHAPE case.

DOJ will likely not bring criminal charges on both the Comey-Richman classified-leak probe and a Fauci-related prosecution within six months, given its pattern of sequencing politically sensitive indictments and independent evidentiary barriers. The government will likely appeal the Anthropic retaliation ruling within 60 days. Moderate confidence on the dual-charging assessment rests on the Richman subpoena's early-stage posture and no Fauci-related prosecutorial action beyond the Senate document release.

No cross-agency review of senior officials' compound data exposure, across the IDScan.net breach and DHA's uninvestigated health-record access, will likely be directed within 120 days. Each incident will be managed in its own silo. An indicator that would alter this assessment: a congressional or executive-branch directive mandating joint review, or identification of an official exploited through combined datasets.

https://icbrief.org/icbrief/

#Intelligence #OSINT #NationalSecurity

IC Brief Morning — 2026-09-05

Iranian state-linked actors' concurrent cyber infrastructure probing and IRGC maritime sabotage recruitment will likely compel a formal US government attribution of at least one Iranian-linked compromise or operational plot by year-end. Russian intelligence-directed sabotage against European defense-sector targets is very likely to produce at least one additional arson or kinetic incident before January, extending the documented disposable-agent pattern. Moderate confidence in both assessments reflects sustained targeting tempo and structural difficulty halting exposed campaigns.

Congressional expansion of counterintelligence mandates over commercial AI or critical infrastructure will likely stall through December, with oversight bandwidth consumed by the Pentagon polygraph investigation, FBI surveillance of a former congressman, and the Round River declassification fight. None of these will resolve within their stated timelines. Passage of CFIUS expansion legislation out of committee would alter this assessment.

Southeast Asian port authorities will likely announce enhanced security measures against IRGC-linked networks by late November, compelled by the public naming of recruited operatives. At least one major US technology firm will likely disclose state-sponsored enterprise compromise by year-end, given concurrent DPRK and Iranian targeting. An Iran ceasefire would shift the attribution timeline, but no comparable mechanism constrains the Russian sabotage pattern.

https://icbrief.org/icbrief/

#Intelligence #OSINT #NationalSecurity

IC Brief Morning — 2026-08-31

Multiple state intelligence services are independently exploiting commercial messaging platforms to recruit non-professional assets, from Iranian handlers paying Israeli teenagers via Telegram for reconnaissance to FSB officers compromising thousands of Signal accounts to PLA case officers recruiting South Korean conscripts through chat applications. We assess a Western or allied government will likely disclose at least one new state-linked espionage case using such a platform within the next 90 days. Moderate confidence reflects the steady disclosure cadence across adversary states and the three independent operational threads visible this cycle.

Russian intelligence faces mounting counterintelligence pressure on HUMINT cover structures even as cyber operations continue at tempo. The GRU is losing trade-representative posts to patronage-connected civilians after Western host-nation nominee rejections, while BlueDelta operated unimpeded for seven months against NATO-adjacent defense targets. A NATO or EU member state will very likely publicly act against at least one Russian intelligence officer under cover before November 30. Moderate confidence rests on sustained individual-action rates since the 2022 mass expulsions and expanding exposure of Russian operations across multiple countries.

https://icbrief.org/icbrief/

#Intelligence #OSINT #NationalSecurity