Report for Wednesday, June 25, 2025
9:20 AM America/New York Wednesday, June 25
Report for Wednesday, June 25, 2025
Leaked report says U.S. airstrikes may have set back Iran’s nuclear program only months
FBI shifting focus from immigration to terrorism amid Mideast Tension
Trump agrees to meeting with Zelensky
FBI Cyber leader warns that China’s ‘Typhoons’ remain threat amid mideast conflict
CIPHER BRIEF EXCLUSIVES
Can Europe Really Defend Itself?As NATO leaders meet in The Hague, Europe faces growing pressure to defend itself amid doubts about the continued U.S. commitment. Since President Donald Trump’s re-election, the U.S. has distanced itself from NATO, prompting European allies to dramatically increase their defense spending, adopting a new target of 5% of GDP, up from 2%. While European militaries are beginning to adapt, including Germany's pledge to build the strongest conventional force and Poland nearing the 5% benchmark, experts warn that Europe still heavily depends on the U.S. for high-end military capabilities such as strategic airlift, intelligence, and missile defense systems. Trump’s statements and policy shifts have triggered urgent recalibrations across Europe. Initiatives include a €150 billion European Union defense fund, increased NATO exercises, and the Baltic states' exit from landmine treaties. However, logistical, political, and industrial barriers remain. Experts argue that it could take decades and nearly $1 trillion for Europe to match the U.S. military's support. Nonetheless, there is growing consensus that Europe must—and is beginning to—stand on its own.The Cipher Brief
Opinion: NATO’s Critical 1.5 Percent. Rear Adm. (Ret.) Mark Montgomery and Annie Fixler of the Foundation for Defense of Democracies argue that NATO’s proposed 1.5% of GDP spending on defense-related infrastructure and cybersecurity is as vital as the 3.5% traditional military spending target. They emphasize that military readiness relies on strong civilian infrastructure — power grids, transportation networks, and communications systems — which adversaries like Russia and China deliberately target through cyber operations. Montgomery and Fixler warn that without this dedicated spending, NATO’s ability to project force and sustain operations could be crippled in a crisis. They call for European governments to align national infrastructure priorities with NATO's operational needs, fund cybersecurity upgrades for vulnerable civilian operators, and eliminate Chinese-made components that pose systemic risks. Ultimately, they stress that tanks and planes are ineffective if critical infrastructure fails, making the 1.5% investment indispensable for genuine readiness. The Cipher Brief
Opinion: Could Iran's Judiciary Chief Be the Next Supreme Leader? Former Central Intelligence Agency senior analyst Steven R. Ward argues that Gholam-Hoseyn Mohseni-Ejei, Iran’s judiciary chief and former intelligence minister, is a strong contender to succeed Supreme Leader Ayatollah Ali Khamenei. With President Ebrahim Raisi dead and Khamenei's son sidelined, Mohseni-Ejei's deep roots in Iran’s intelligence and judiciary apparatus make him a pragmatic choice to preserve the Islamic Republic. Ward emphasizes Mohseni-Ejei’s operational credentials: decades of service in the intelligence-judiciary axis, close ties with key regime figures like Esmail Khatib, and loyalty to Khamenei. As Iran faces war, internal unrest, and economic failure, the regime increasingly values security expertise over religious stature. Mohseni-Ejei’s role in suppressing dissent, including during the 2009 Green Movement and 2022 hijab protests, reinforces his standing. Ward concludes that in a system prioritizing loyalty and control, Mohseni-Ejei may be the chosen successor to steer Iran through threats. The Cipher Brief
Opinion: Was Everyone Wrong About Iran’s Nuclear Program?Dr. Clément Renault of the French Institute for Strategic Research questions the intelligence rationale behind Israel’s massive airstrike on Iran’s nuclear infrastructure—Operation Rising Lion. Israeli Prime Minister Benjamin Netanyahu claimed Iran was months away from building a nuclear weapon. Yet, Renault highlights that this assessment contradicted long-held conclusions by the U.S. intelligence community and the International Atomic Energy Agency, which maintained that Iran had not decided to weaponize its nuclear program. Renault argues that either Israel and the U.S. uncovered game-changing intelligence—missed by every major agency—or the justification was built on politicized intelligence, echoing the pre-Iraq War narrative of 2003. He details Mossad’s covert sabotage efforts and the precision of Israeli strikes as evidence of operational brilliance, but warns that these tactical successes may have obscured a strategic manipulation of threat perception. Renault ultimately raises deep concerns about the credibility and politicization of Western intelligence.The Cipher Brief
Opinion: Ukraine’s Defense Export Pivot Is A Game-Changer. Chief Warrant Officer 5 (Ret.) Joey Gagnard argues that Ukraine’s newly launched “Build with Ukraine” program marks a transformative moment in global defense strategy. No longer merely an aid recipient, Ukraine is becoming a producer and exporter of advanced, battle-tested weapons such as drones, missiles, and artillery. By establishing co-production lines in allied nations—starting in Europe—Ukraine is helping partners achieve defense self-sufficiency, reduce reliance on vulnerable supply chains, and accelerate defense innovation. Gagnard highlights that the initiative fosters industrial integration, technology transfer, and job creation, offering European countries customized and resilient production capabilities. For the U.S., the program presents opportunities for collaboration, innovation, and lessons from Ukraine’s agile battlefield development. It also diversifies the global arms market, strengthens supply chains, and elevates Ukraine as a strategic partner. Gagnard concludes that “Build with Ukraine” signals a pivotal shift toward a more resilient, integrated Western defense ecosystem centered on shared innovation and security. The Cipher BriefISRAEL- IRAN CONFLICT
Iran-Israel ceasefire holds, Trump envoy says talks with Iran 'promising.' A U.S.-brokered ceasefire between Israel and Iran appeared to be holding on Wednesday, following 12 days of intense conflict. Both nations declared victory, with Israel claiming to have killed Iran’s top military and nuclear leadership, and Iran touting its missile response as a success. Iranian authorities said 610 people were killed and nearly 5,000 injured in Iran; 28 people were killed in Israel. The U.S. joined two days before the ceasefire, targeting Iran’s nuclear facilities with bunker-busting bombs. President Donald Trump declared Iran’s nuclear program "obliterated," though U.S. intelligence suggested the damage may be limited. Despite harsh rhetoric, Trump ruled out regime change, seeking regional stability. Trump's Middle East envoy, Steve Witkoff, said late Tuesday that talks between the United States and Iran were "promising" and that Washington was hopeful for a long-term peace deal. Meanwhile, internal fallout in Iran included executions, arrests, and speculation over Supreme Leader Ayatollah Ali Khamenei’s succession. Israel and Iran remain cautious, but signs of tentative diplomacy have emerged, with Iran signaling openness to resolving differences with the U.S. and regional powers. Reuters
Leaked report says U.S. airstrikes may have set back Iran’s nuclear program only months. A preliminary classified assessment by the Defense Intelligence Agency (DIA) found that U.S. airstrikes on Iran’s nuclear facilities—part of Operation Midnight Hammer—only delayed Tehran’s nuclear program by a few months, not “obliterated” it as President Donald Trump claimed. While the strikes damaged surface infrastructure and sealed some tunnel entrances, they failed to destroy Iran’s deeply buried nuclear facilities, and much of Iran’s enriched uranium was reportedly relocated beforehand. This finding contradicts public statements by Trump and Defense Secretary Pete Hegseth, who assert the operation crippled Iran’s nuclear capacity. The White House dismissed the DIA report as false and politically motivated. The gap between intelligence assessments and political claims raises serious concerns about the potential politicization of intelligence. If Iran retains enrichment capability and covert facilities, the strike may provoke escalation without neutralizing the core threat. Allies and lawmakers are pressing for transparency. ReutersReutersWall Street JournalNew York TimesCNN
The Pillars of Iran’s Regime Are Damaged, Not Destroyed. Despite U.S. and Israeli airstrikes on Iran’s nuclear and military infrastructure, Tehran’s regime remains intact and dangerous. The strikes killed nuclear scientists and damaged enrichment sites, missile batteries, and state institutions, yet Iran still retains enriched uranium and the expertise to eventually rebuild its weapons program. A preliminary U.S. intelligence report suggests the nuclear delay is only temporary, potentially just a few months. Analysts warn Iran’s distributed nuclear capabilities and intact stockpile mean the threat remains real. Meanwhile, Iran’s leadership faces internal pressure amid security failures, with some officials calling for open weaponization. Proxy militias like Hezbollah may be reactivated, though tensions linger over Tehran’s support. Israel and the U.S. bought time, but the regime is expected to regroup. As regional instability simmers, experts caution this could be merely a pause, not a resolution, with renewed escalation likely without a comprehensive diplomatic solution. Wall Street JournalHow Trump Cajoled Iran and Israel Into a Cease-Fire and Forced Them to Comply. President Donald Trump orchestrated a surprising cease-fire between Iran and Israel following a dramatic U.S. airstrike on Iranian nuclear facilities. Trump personally pressured Israeli Prime Minister Benjamin Netanyahu to halt further attacks and used Arab intermediaries and direct messages to urge Iran toward de-escalation. Iran responded with a limited missile attack on a U.S. base in Qatar—carefully coordinated to avoid escalation—while Trump warned Israel against violating the truce. Despite last-minute attacks by both sides, the cease-fire held after Trump intervened again via social media and direct calls. The episode highlighted Trump’s impulsive yet forceful diplomatic style, which bypassed conventional channels. Whether this fragile truce leads to a nuclear deal remains uncertain, but the region has entered a tense pause. Wall Street Journal
Israel’s dazzling, daunting, dangerous victory. Prime Minister Benjamin Netanyahu declared Israel’s 12-day war with Iran a historic success, claiming the destruction of key nuclear sites and a major setback to Tehran’s missile threat. With U.S. help—particularly President Donald Trump’s deployment of bunker-buster bombers—Israel achieved regional air dominance and dealt a blow to Iran’s proxies. Yet challenges remain: Iran’s regime survives, still possesses enriched uranium, and could revive its nuclear ambitions. Israel now faces a critical choice—maintain a costly, militarized posture or pivot to diplomacy. Economic strain, public fatigue, and the momentum of the Trump era may prompt Netanyahu to consider negotiations. Domestically, his far-right coalition resists compromise, but Netanyahu’s wartime victory might grant him the political capital to shift strategy and reshape Israel’s long-term path. The EconomistReuters
The Bombing of Iran May Teach an Unwelcome Lesson on Nuclear Weapons. President Trump’s bombing of Iranian nuclear sites marks a bold effort to prevent Tehran from acquiring nuclear weapons, but it could backfire. The strikes have intensified global fears that nuclear weapons are the only real deterrent against attack. North Korea, already nuclear-armed, remains untouched, further reinforcing this perception. Analysts warn that nations like Iran, Saudi Arabia, South Korea, and Japan may now see nuclear arms as essential for security, especially amid doubts about U.S. defense commitments, and the American nuclear umbrella. Past examples, such as Libya’s disarmament followed by regime collapse, serve as cautionary tales. Although no regional arms race has yet erupted, pressure is mounting. The attack may reassure U.S. allies of American strength, but it also raises questions about whether the weakened Islamic Republic will now accelerate its nuclear ambitions, or return to negotiations. The global logic of nuclear proliferation appears stronger than ever. New York Times
Trump Team Weighed Range of Options for Oil Supply Disruptions.Before striking Iran, the Trump administration explored strategies to manage a potential oil supply crisis in the Middle East, a region critical to global energy markets. While a ceasefire between Iran and Israel lowered immediate concerns, officials had considered releasing oil from the Strategic Petroleum Reserve, encouraging domestic drilling, and invoking emergency powers under the Defense Production Act to ensure supply. The reserve, however, is at half capacity after previous drawdowns. Analysts warn that even strategic releases would not fully counteract disruptions in the Strait of Hormuz. Trump has made controlling oil prices central to his presidency, urging action on social media and celebrating a recent $10 drop in oil prices. His administration is prepared to use various tools, including regulatory waivers and industry incentives, to stabilize markets and shield the U.S. economy from global shocks. Bloomberg
Britain, France, and Germany say Iran must come to the negotiating table. Leaders of Britain, France and Germany said on Tuesday that it was now "time for diplomacy", as a shaky ceasefire began to take hold between Israel and Iran. British Prime Minister Keir Starmer met with French President Emmanuel Macron and German Chancellor Friedrich Merz at the NATO summit in The Hague. ReutersTHE AMERICAS
FBI shifting focus from immigration to terrorism amid Mideast Tension. The FBI is shifting focus from immigration enforcement back to counterterrorism amid heightened concerns of retaliation following U.S. airstrikes on Iran. On Monday, FBI Director Kash Patel warned of increased risks from lone attackers, sleeper cells, and foreign-backed plots, emphasizing the need to protect U.S. communities. A new Department of Homeland Security bulletin also flagged a “heightened threat environment” tied to Middle East tensions and the “lingering fallout” from the 2020 killing of Qassem Soleimani. The FBI had recently redirected agents to immigration raids as part of the Trump administration’s aggressive deportation push. Though the FBI hasn’t officially reversed this shift, Patel said terrorism tracking is now the top priority, particularly identifying suspected terrorists allegedly allowed into the U.S. The Bureau could potentially transfer thousands of agents away from immigration, to concentrate on cyber threats and counterterrorism. Patel also called on local law enforcement to help detect threats at the community level. BloombergNBC NewsABC NewsBBC
Trump Administration Restaffs National Security Council After Cutting Its Size.The White House is rehiring staff for the National Security Council (NSC) just weeks after President Trump drastically downsized it. The move, led by Secretary of State and acting National Security Adviser Marco Rubio, is part of a broader restructuring rather than a direct reaction to recent global crises. Still, it comes as Washington faces mounting foreign-policy challenges, including tensions with China, continued conflict in Gaza, fallout from strikes on Iran, and the war in Ukraine. Earlier this year, the Trump administration cut much of the NSC staff, aiming to reduce its influence on policy-making and focus it solely on implementing Trump’s directives. The downsizing was also spurred by loyalty concerns. The NSC, established in 1947, has traditionally advised presidents across a wide range of issues but has been sidelined in Trump’s second term in favor of personal allies. Bloomberg
Rage and mistrust course through Congress on Iran. Democrats are deeply skeptical of President Trump’s claims that U.S. strikes on Iran’s nuclear facilities were fully successful, after media reports suggested the damage may have been overstated, fueling mistrust between the White House and Congress. Lawmakers have criticized the administration for postponing a classified briefing and failing to adequately inform them about the operation. Senators like Chuck Schumer voiced concerns about misrepresented intelligence, drawing parallels to the lead-up to the Iraq War. Sen. Chris Van Hollen expressed worries about the administration “distorting, manipulating and even lying about intelligence.” Democrats were excluded from early briefings that Republican lawmakers received and remain frustrated by delays in their scheduled updates. As doubts grow, Senator Tim Kaine is pushing a war powers resolution to formally challenge the president’s authority and hold him accountable for bypassing Congress in military decisions. Axios
U.S. tests radar that could link into Golden Dome to detect China, Russia threats. The U.S. successfully tested a long-range radar in Alaska, a key component for the future Golden Dome missile defense shield aimed at countering threats from Russia and China. Built by Lockheed Martin, the radar tracked a test missile over 2,000 kilometers, demonstrating its ability to detect and report missile activity. The system could enhance existing Ground-Based Midcourse Defense interceptors in Alaska and California. Golden Dome, modeled after Israel’s Iron Dome, envisions a $175 billion network of satellites and sensors for global missile defense. Slated for deployment by 2029, the project faces skepticism over its high cost and ambitious timeline. ReutersDefense News
Admiral James 'Sandy' Winnefeld (Ret.)
The Cipher Brief: The Challenges – and Opportunities – of a ‘Golden Dome’ Defense System
Senators concerned with Navy shipbuilding delays, budget. The U.S. Navy is years behind schedule in ship deliveries and lacks clear timelines for improvement, officials told the Senate Appropriations Subcommittee on Defense on Tuesday. Navy leaders, including Adm. James Kilby and Secretary John Phelan, stressed a focus on countering China, but faced bipartisan criticism over an underfunded base budget and reliance on one-time reconciliation bills. Senators expressed alarm at slow shipbuilding progress, with the Columbia-class submarine now two years behind schedule. Lawmakers urged increased and consistent funding to match Beijing’s rapidly expanding naval fleet, which is projected to reach 435 ships by 2030. The Navy admitted to shrinking output due to cost increases and fewer ships built annually. Defense News
Mexican police in Chiapas unveil armed drones to combat cartels. Mexican state police in Chiapas have unveiled a collection of armed drones to counter powerful drug cartels fighting over control of smuggling routes along the Guatemalan border. These drones, possibly equipped with rifles or firefighting gear, are a response to being outgunned by cartels that increasingly use weaponized drones. However, concerns are growing over the lack of clear engagement rules and recent police actions that triggered a cross-border shootout in Guatemala. Chiapas has seen devastating violence, displacement, and clashes between the Sinaloa and Jalisco New Generation cartels. The state government is strengthening its police force, and taking over roles once assigned to the military, despite allegations of internal corruption. Human rights groups warn that what appears to be law enforcement progress may actually reflect growing militarization rather than genuine gains against organized crime. Associated Press
Ecuador’s Noboa struggles with another high-profile prison break. Ecuador’s government is offering a $1 million reward for information leading to the recapture of Rolando Federico Gomez, a suspected drug lord known as "Fede" who escaped prison last week. President Daniel Noboa, who declared Fede a military target, blamed the escape on complicity rather than negligence. Nineteen soldiers, two prison guards, and an inmate have been detained as part of the investigation. Fede, accused of murder, drug trafficking, and arms smuggling as leader of the Las Aguilas gang, was a key figure in Noboa’s crackdown on organized crime. Ecuador is experiencing record-high violence, with murders exceeding 13 per 100,000 people. Fede’s breakout follows the high-profile January escape of another trafficker, “Fito,” who remains at large. Guayaquil, the country’s main drug trafficking hub, remains the epicenter of this escalating crisis. BloombergCNNTHE UKRAINE UPDATE
Russian attack on Dnipro kills at least 18, injures almost 300.Russia launched one of its deadliest strikes of the war early Tuesday, hitting Ukraine’s industrial city of Dnipro with ballistic missiles, killing at least 18 and injuring 300, including 27 children. The attack damaged residential areas, schools, hospitals, and a passenger train. Nearby Samarske was also hit, adding to the civilian toll. Russia’s summer offensive, marked by intensified drone and missile attacks, has escalated since May. Compounding Ukraine’s vulnerability, the U.S. redeployed some aerial defenses to the Middle East amid the Iran-Israel conflict. At the NATO summit in The Hague, President Volodymyr Zelensky urged allies to tighten sanctions, warning that Russia relies on foreign components to sustain its missile production and military aggression. Kyiv IndependentPolitico EU
Trump agrees to meeting with Zelensky. President Donald Trump is set to meet Ukrainian President Volodymyr Zelensky on Wednesday during the NATO summit. Speaking at a press briefing at The Hague on Wednesday, Trump was asked by a reporter what he would be discussing during the meeting with Zelensky. "Obviously we'll be discussing his difficulties, he's got a little difficulty," Trump replied. "Zelensky is a nice guy, I'm going to meet him today. I don't know, I assume we're going to be discussing Ukraine. It seems the most likely.” Earlier this month, Zelensky traveled to the G7 summit in Canada, hoping to meet Trump, who left early without a meeting. On Tuesday, Trump told reporters aboard Air Force One that he would “probably” meet with Zelensky. Their last in-person meeting was in April at the Vatican during Pope Francis’ funeral, following a tense Oval Office exchange in February. PoliticoKyiv Independent
Rubio says tougher sanctions on Russia might jeopardize peace talks. U.S. Secretary of State Marco Rubio told Politico in an interview at the NATO summit that President Donald Trump will not immediately meet European leaders’ calls for new sanctions on Russia. Rubio explained that while Congress is preparing more sanctions, the administration wants to preserve diplomatic space for ceasefire talks with Moscow. Imposing harsher sanctions now, Rubio said, would signal that negotiations are effectively over: “If he does it, you’re almost admitting that this is not going to be negotiated anytime soon.” He added that Trump will act “at the right time and place” and is coordinating with Sen. Lindsey Graham on a bill to penalize trade with countries buying Russian energy if diplomacy fails. Rubio also noted that Russia believes it can secure its demands on the battlefield, a view Washington disputes. PoliticoVideo
How Russia prepares its strategic missile plant for ‘eternal war.’Russia has dramatically expanded its Votkinsk missile plant despite international sanctions, using Chinese, Taiwanese, and Belarusian equipment funneled through intermediaries. The plant, critical to both short-range Iskander and intercontinental missile production, tripled Iskander output in 2024 and is building a missile stockpile for prolonged war. Orders for ICBMs like Yars and Bulava—capable of striking U.S. cities—were issued shortly after the invasion of Ukraine. The plant added new buildings, recruited thousands, and acquired over 7,000 new machines, many from Chinese suppliers. Russia’s largest titanium producer also sources materials via China. The equipment, though used now for short-range missiles, is versatile and enables ICBM manufacturing. With over 10 Russian enterprises contributing to missile production, Votkinsk’s growth is part of a broader, long-term escalation. Despite sanctions, Russia is positioning itself for “eternal war” with an expanding arsenal that threatens Ukraine, Europe, and the U.S. alike. Kyiv Independent
Russian air defenses destroy dozens of Ukrainian drones, officials say. Russian officials reported intercepting and destroying over 40 Ukrainian drones in the Voronezh region and additional drones across Rostov, Belgorod, and Ulyanovsk on Tuesday. While no injuries were reported, drone strikes damaged a sports complex in Taganrog and a grain facility in Azov. Airports near the Volga River briefly closed due to the activity. Ukraine has increased drone attacks, including a recent operation targeting Russian bombers. Meanwhile, Russia continues heavy strikes on Ukrainian cities. Reuters
Drone debris found in Ukraine indicates Russia is using new technology from Iran. Ukrainian forces recently discovered debris from a new type of Russian drone containing advanced Iranian technology, including anti-jamming systems, AI-powered computing, and remote control capabilities. The drone, white and lacking typical Russian markings, bore labels consistent with Iranian manufacture. Experts believe it may have been sold by Iran to Russia for combat testing. Despite much of Russia’s Shahed drone production now being localized, key technologies—like anti-jamming units—still rely on Iranian supply, which may be disrupted by recent Israeli airstrikes on Iranian facilities. Russia is also evolving its drone tactics, using altitude variation, swarming decoys, and upgraded tech to overwhelm Ukrainian defenses. As a result, drone strike effectiveness has increased, from 6% in late 2024 to as high as 50% on some nights in mid-2025. Yet analysts warn that Israeli strikes on Iran could hinder Russia’s access to critical components. The new Iranian-enhanced drone may mark a turning point in both technological escalation and Russia’s battlefield success. Associated Press
The Weapon That Terrorizes Ukrainians by Night. Russia’s long-range Shahed drones, based on Iranian designs but now domestically produced, have transformed nighttime warfare in Ukraine. These low-cost, mass-produced drones—coated in black—fly at 115 miles per hour and carry increasingly powerful, diversified warheads, including high-explosive, thermobaric, and tungsten-ball-laced charges. Their use has surged from 34 weekly launches in 2022 to over 1,000 per week by mid-2025. Built with foreign parts, including Western and Chinese components, they now feature enhanced GPS-jamming resistance and even Ukrainian SIM cards to navigate via cellular networks. Russia also deploys decoy drones like the “Gerbera” to confuse defenses. In response, Ukraine fields new drone-on-drone interceptors, such as those operated by the secretive Darknode unit. These Ukrainian drones cost only $6,000 and are piloted by gamers-turned-soldiers to destroy Shaheds over unpopulated areas. The accelerating technological arms race has made Shaheds a central, terrifying weapon in Russia’s evolving campaign of civilian-targeted psychological and physical warfare. New York Times
Ukraine to set up war tribunal with Council of Europe.Ukraine will establish a special war crimes tribunal with the Council of Europe to prosecute senior Russian officials for the crime of aggression related to the 2022 full-scale invasion. President Volodymyr Zelensky is expected to sign the agreement with Alain Berset, chair of the Strasbourg-based human rights body. This marks the first such tribunal created by the CoE, operating independently of the European Court of Human Rights. It will target top Russian leaders, including the president, prime minister, and military commanders, holding them accountable for planning and executing the invasion. Unlike the International Criminal Court, which cannot prosecute for aggression, the tribunal can initiate cases even in the absence of the accused. Over 34,000 incidents of death, destruction, and displacement have been recorded to support future prosecutions. The court’s location has yet to be determined, but Ukraine will soon make legal and administrative preparations for its establishment. Financial Times
ISW Russian Offensive Campaign Assessment for Tuesday, June 24. NATO Secretary General Mark Rutte warned that Russia poses the greatest existential threat to NATO today and is preparing for a long-term war with the alliance, potentially ready to attack within three to seven years. The Kremlin is working to integrate troops from Collective Security Treaty Organization (CSTO) allies under Russian command through a new protocol that enables rapid deployment and centralized control, thereby further enhancing Moscow’s military reach. Russian forces are increasingly relying on motorcycles for assault, transport, and reconnaissance operations along the Ukrainian front — a tactical innovation that may extend to future conflicts with NATO. Rutte also announced plans for NATO members to boost defense investments, including a five-fold increase in air defense and the development of Ukraine’s defense industrial base, aligning with U.S. efforts to shift more defense responsibility to Europe. European partners pledged major support to Ukraine at the NATO summit, including hundreds of millions of euros for drone procurement and joint production with the UK.
Battlefield update:Ukrainian forces advanced near Toretsk and Kherson City. Russian forces advanced in northern Sumy Oblast and near Chasiv Yar, Pokrovsk, and Novopavlivka.Institute for the Study of WarEUROPE
NATO summit commits to higher spending and collective defense. At the NATO summit in The Hague on Wednesday, alliance leaders committed to dramatically increase defense spending to 5% of GDP by 2035, responding to U.S. President Donald Trump’s pressure and growing concerns over Russia’s threat since its 2022 invasion of Ukraine. The 32-member bloc reaffirmed Article 5’s principle of collective defense despite Trump’s earlier comments casting doubt on its clarity. The new target splits spending between 3.5% for core defense and 1.5% for broader security infrastructure. Spain pushed back against the target, but a compromise was reached to maintain unity. The summit was intentionally short to avoid friction. NATO Secretary General Mark Rutte emphasized there’s “no alternative” given the current threat landscape. Reuters
NATO chief Rutte defends Trump as the U.S. president seeks to reassure on mutual defense. At the NATO summit in The Hague on Tuesday, Secretary General Mark Rutte expressed full confidence in the U.S. commitment to NATO’s mutual defense clause despite President Trump’s ambiguous remarks suggesting there are “numerous” interpretations of Article 5. However, later, speaking to journalists before the summit opened, Trump downplayed concerns over his commitment to mutual defense among allies, saying, "We're with them all the way." The summit is focused on raising NATO’s defense target to 5% of GDP, sparking criticism from Spain and condemnation from Russia, which accused NATO of militarization and demonizing Moscow. President Volodymyr Zelensky warned NATO members of potential Russian attacks if Ukraine is not fully supported and urged expanded weapons support, particularly in drone and air defense systems. ReutersReuters
NATO chief Mark Rutte praises Trump for making Europe ‘pay in a BIG way.’ Ahead of the NATO summit, Secretary-General Mark Rutte privately praised President Donald Trump for pressuring European allies into committing to a 5% GDP defense spending target, calling it a historic achievement no prior U.S. president had managed. Trump publicized Rutte’s message, including praise for his “extraordinary” actions in Iran. While major allies like Germany and France agreed to the target, Spain refused and secured an opt-out, sparking tension and criticism from Trump. Rutte has proposed a plan that would divide the 5% goal into 3.5% for core defense and 1.5% for broader security by 2035. Financial TimesBloomberg
Ambassador Kurt Volker
The Cipher Brief: Can Europe Really Defend Itself?
NATO’s new villain: Spain.At the NATO summit in The Hague, Spain drew sharp criticism for rejecting the alliance’s new goal of spending 5% of GDP on defense. Prime Minister Pedro Sánchez insisted Spain could meet NATO’s military capability targets while capping defense spending at 2.1%. This last-minute carve-out angered many allies, with one European defense official calling it “disgusting.” Slovakia followed suit, citing domestic priorities. Leaders like Denmark’s Mette Frederiksen and Poland’s defense minister argued that exemptions weaken unity. Spain’s move raised fears that other nations, such as Belgium and Canada, may seek similar flexibility. Despite Sánchez’s political struggles at home, many NATO diplomats see his refusal as damaging to alliance solidarity, especially ahead of President Trump’s arrival, who pushed for the higher spending benchmark. Politico EU

General Philip M. Breedlove
The Cipher Brief: NATO’s Most Important Mission
How will Germany pay for its rapid rise in defense spending?Germany plans to increase its defense spending to 3.5% of GDP by 2029, up from the 2% NATO benchmark it met for the first time in 2024. Initially, €77 billion from a special €100 billion defense fund—established after Russia’s 2022 invasion of Ukraine—will be used through 2027. After that, Germany will rely on a new exemption to its constitutional “debt brake” rule, allowing it to borrow €378.1 billion for defense between 2025 and 2029. Annual defense spending will rise from €95 billion in 2025 to €162 billion in 2029, including €9 billion annually for Ukraine. Total defense spending over the five-year period will amount to €649 billion. ReutersNew York Times
UK to purchase fighter jets capable of carrying tactical nuclear weapons. The UK will purchase 12 U.S.-made F-35A fighter jets capable of carrying tactical nuclear weapons, marking its first air-based nuclear capability since 1998. Prime Minister Keir Starmer cited rising global instability and threats from Russia as justification. The move complements the UK's existing Trident submarine deterrent, which has faced recent test failures, and aligns more closely with NATO’s nuclear posture. The U.S. would need to supply the B61 bombs for the jets, as it withdrew its last nuclear weapons from the UK in 2008. The deal supports 20,000 British jobs and is part of a broader plan to boost defense spending to 5% of GDP by 2035. ReutersBloomberg
Fears of sabotage after train cable outage near NATO summit. Dutch authorities have launched an investigation into a major disruption to train services on the opening day of the NATO summit, with Justice Minister David van Weel suggesting that sabotage is a possible cause. A power outage linked to fire-damaged cables near key rail routes, including those serving Schiphol Airport and Amsterdam, caused significant delays. The incident occurred just 50 kilometers from the summit venue. Van Weel, a former NATO cybersecurity official, said investigators are considering whether the disruption was the work of a country or activist group. This follows a wave of low-level cyberattacks on Dutch municipalities the previous day, claimed by a pro-Russian hacktivist group. While the DDoS attacks caused no data breaches, officials say they were designed to strain public infrastructure and create confusion. Security experts had already warned that the NATO gathering would be a likely target for Russian or Chinese operatives. Politico EUAssociated PressThe Record
Downing Street supplied with gas by firm linked to Russian fossil fuels.A POLITICO investigation reveals that Downing Street and key U.K. government buildings are supplied with gas via a multi-billion-pound contract with TotalEnergies Gas & Power, a subsidiary of the French firm linked to Russian LNG. Although the U.K. bans direct Russian gas imports, TotalEnergies holds a 20% stake in Russia’s Yamal LNG project and continues long-term supply to Europe, raising ethical concerns. Critics say the U.K.’s reliance on such a supplier undermines its public stance against funding Vladimir Putin’s war in Ukraine. Labour MPs now urge the government to review the contract. The arrangement, secured under the previous Conservative government, extends to 2030 in some departments, complicating a swift exit despite available alternatives. Politico EUTHE MIDDLE EAST
The war that will remake Iran’s Islamic republic. The recent war between Israel and Iran, though short of regime change, is expected to catalyze major transformations in Iran’s Islamic Republic. Despite declaring “victory,” Iran suffered devastating losses: key military figures were killed, air defenses were crippled, and Supreme Leader Ayatollah Khamenei narrowly escaped Israeli assassination threats. Analysts believe this moment rivals the significance of the 1979 revolution. The regime, long resistant to reform, now faces mounting pressure to evolve, accelerated by both military trauma and internal discontent. Speculation surrounding Khamenei's succession has intensified, with the possibility of a shift from clerical to military leadership. While Iran’s core institutions endure, a more nationalistic and potentially pragmatic political structure is likely to emerge. Financial Times
Iran’s parliament greenlights bill suspending cooperation with UN nuclear watchdog. The Iranian parliament has approved a bill to suspend cooperation with the U.N. nuclear watchdog (IAEA), pending final approval from the Supreme National Security Council. The decision follows recent Israeli airstrikes and U.S. bombings targeting Iran’s nuclear facilities, actions the Islamic Republic claims were enabled by a recent IAEA resolution accusing Tehran of breaching non-proliferation obligations. Parliament Speaker Mohammad Baqer Qalibaf criticized the IAEA for not condemning the attacks and announced plans to accelerate Iran’s civilian nuclear program. The bill would halt surveillance camera installations, inspections, and reporting to the IAEA. Iran insists its nuclear efforts are peaceful but has signaled a potential shift in its stance on the non-proliferation regime. Reuters Times of Israel
Iran hangs three men for spying for Israel. Iran executed three men on Wednesday for allegedly collaborating with Israel’s Mossad spy agency and smuggling equipment used in an unspecified assassination, according to the judiciary’s Mizan news agency. While details about the victim were not disclosed, the report stated the equipment had been instrumental in the killing. Iran has long accused Mossad of orchestrating sabotage and assassinations within its borders, particularly targeting its nuclear program. This latest execution continues a pattern of harsh crackdowns on individuals accused of aiding Israel amid the ongoing covert conflict between the two countries. ReutersTimes of Israel
Netanyahu sees redemption in Iran war, but Gaza looms large. After months of political turmoil and declining approval, Prime Minister Benjamin Netanyahu's bold 12-day military campaign against Iran has potentially reshaped his legacy, and boosted his political standing. The strikes drew broad support among Jewish Israelis and shifted public focus away from the October 7 Hamas attack, which had severely damaged Netanyahu’s reputation. Some allies now frame that attack as a wake-up call that spurred decisive action against regional threats. Despite the boost, Netanyahu still faces mounting pressure to end the Gaza war, which has killed tens of thousands and drawn international condemnation. Critics accuse him of dragging out the conflict to avoid political fallout. While Netanyahu's Iran campaign earned rare U.S. military support from President Trump, his far-right coalition resists compromise, setting up tense negotiations over Gaza’s future, hostages, and potential elections. Reuters
How Netanyahu’s Move Against Iran Gives Him Room to Maneuver on Gaza. Israeli Prime Minister Benjamin Netanyahu has gained significant political momentum after launching strikes on Iran and persuading the U.S. to join in targeting its nuclear facilities. This success has boosted his popularity, giving him greater leverage to maneuver on Gaza policy. While he continues to demand Hamas’s surrender and exile before ending the war, analysts note that Netanyahu now has the political capital to shift course without risking his coalition's collapse. Some Israeli negotiators have been given expanded authority in cease-fire talks, suggesting flexibility. However, Netanyahu may delay major moves until parliament recesses in July to avoid triggering a no-confidence vote. Despite hardliner resistance and Hamas’s own demands, Netanyahu may now be better positioned to reach a truce — and potentially call early elections based on his perceived victory over Iran. Still, the durability of this political advantage depends on whether Israel’s military gains against Iran prove lasting or short-lived. New York Times
US to provide $30 million to Gaza aid operation, in spite of concerns over violence. The U.S. has granted $30 million to the Gaza Humanitarian Foundation (GHF), marking its first direct financial support for the group delivering aid in Gaza. The funding, approved under a White House and State Department directive, bypassed typical audits and vetting procedures. GHF uses private U.S. logistics and military contractors to transport and distribute aid at so-called secure sites, some of which have been linked to recent violence. Since Israel partially lifted its blockade in May, over 400 Palestinians have died seeking aid, many shot or shelled near militarized distribution zones. Critics, including U.N. officials and some U.S. insiders, question GHF’s inexperience and its use of armed contractors. GHF defends its record, claiming it has securely delivered 40 million meals and is open to collaboration. Washington may approve further monthly funding. ReutersThe TelegraphAssociated Press
At least 40 more Palestinians killed seeking aid in Gaza, say medics and officials. Israeli forces killed at least 40 Palestinians in Gaza on Tuesday, shortly after a ceasefire was reached between Israel and Iran. Among the dead were 19 civilians seeking food aid at a U.S.-backed distribution site, with medics reporting gunfire as the cause. Gaza residents expressed frustration that the Iran truce excluded them, while deadly airstrikes and evacuations continued. Israel defended its actions, citing militant activity in civilian zones, though groups like Hamas deny using such cover. The controversial Gaza Humanitarian Foundation, through which Israel channels aid, has drawn United Nations criticism as unsafe and biased. Meanwhile, Hamas signaled openness to new ceasefire talks, but key differences remain: Hamas demands Israeli withdrawal and is willing to negotiate hostage releases, while Israel insists on Hamas’s disarmament and dismantling. The Gaza war began after the October 2023 Hamas-led attack on Israel and has since claimed over 56,000 Palestinian lives, according to Gaza's health ministry. ReutersThe GuardianAustralian Broadcasting CorporationAssociated Press
Blast in Gaza kills 7 Israeli soldiers inside an armored vehicle. Seven Israeli soldiers were killed in Khan Younis, southern Gaza, when an explosive device detonated under their armored vehicle, marking one of the deadliest incidents for Israel in the war. Hamas’s Al-Qassam Brigades claimed responsibility, saying they used missiles and machine guns in an ambush. The overall Israeli military death toll since the war began on Oct. 7, 2023, now exceeds 860, including over 400 in Gaza. Meanwhile, Gaza’s Health Ministry reports 56,077 Palestinians killed, more than half women and children. Separately, a 66-year-old Palestinian woman was shot dead during an Israeli raid in East Jerusalem, further escalating tensions in the region. Associated PressReutersTimes of Israel
Merz rejects review of EU economic pact with Israel.German Chancellor Friedrich Merz has firmly rejected calls to suspend or reexamine the EU-Israel Association Agreement, despite an ongoing European Commission investigation into possible Israeli human rights violations in Gaza. Speaking in the Bundestag on Tuesday, Merz stated that terminating the agreement was “out of the question” for Germany. This puts Berlin at odds with countries like Spain and Ireland, which have pushed for an immediate suspension amid Gaza’s humanitarian crisis. Although Merz has criticized Israel’s Gaza offensive more strongly than past German leaders, he continues to back Israel, including its recent strikes on Iran. He did, however, call for a Gaza ceasefire and humane treatment of civilians. Politico EU
Syrian Christian leader chides president over deadly church bombing. At a funeral for victims of the devastating church bombing in Damascus over the weekend, Syria’s top Christian leader, Patriarch John X Yazigi, blamed President Ahmed al-Sharaa’s government for failing to protect minorities, saying condolences alone were not enough. The bombing at Mar Elias Church on Sunday killed at least 25 worshippers, marking the first such attack since Sharaa’s Islamist-led government took power. Though the government blamed ISIS, a Sunni Muslim extremist group called Saraya Ansar al-Sunna has claimed responsibility. Yazigi called for full accountability and protection for all Syrians, echoing long-standing minority concerns about safety under the new regime. The U.S. condemned the attack and urged Syria to protect religious groups. The nation’s Christian population, once 10% of the country, has shrunk dramatically during the 14-year conflict. Government raids reportedly killed two IS suspects linked to the bombing, including one who enabled the attacker’s entry. ReutersTimes of IsraelASIA & OCEANIA
China Calls Them Fish Farms. South Korea Fears They Have Another Use. China's installation of large offshore structures in the Yellow Sea, which Beijing frames as fish farms, has alarmed Seoul amid fears they may serve dual civilian-military purposes. The structures, including repurposed oil rigs and giant steel cages, sit in a contested maritime zone and resemble tactics China has used in the South China Sea, where civilian outposts like artificial islands later became military installations. A Tuesday report from the Center for Strategic and International Studies supports these concerns, warning the platforms may already be collecting strategic data. South Korea's National Assembly has condemned the installations as threats to maritime safety, and tensions flared earlier this year when Chinese vessels blocked a South Korean survey ship. The standoff poses an early foreign policy test for President Lee Jae Myung. Lawmakers are urging countermeasures, including deploying aquaculture structures and boosting maritime surveillance. New York Times
Japan lodges protest with Beijing over new Chinese construction in East China Sea. China is accelerating the construction of offshore platforms for resource extraction and aquaculture in disputed maritime zones, prompting strong protests from Japan and South Korea. Japan recently lodged a protest after spotting a new Chinese structure in the contested East China Sea gas fields, with China rejecting concerns and claiming it operates within its sovereign rights. South Korea has also condemned similar platforms in the Yellow Sea, built despite a 2001 agreement prohibiting permanent construction there. Ongoing disputes are fueled by unresolved maritime boundaries, with Beijing using infrastructure to assert de facto control. Japan, concerned about Chinese patrols near the Senkaku Islands and increasing maritime militarization, is bolstering its defenses. Despite previous agreements, diplomatic talks over joint development or boundary resolution remain stalled. Bloomberg Reuters
China, Taiwan clash over history, Beijing says can't 'invade' what is already Chinese territory. China and Taiwan are locked in a heated dispute over historical narratives, sovereignty, and national identity. Taiwan’s President Lai Ching-te has declared that the island is “of course a country,” rejecting China’s claim that it has historical or legal rights. In response, Chinese officials insist Taiwan is an inseparable part of China, citing post-WWII agreements like the Cairo and Potsdam Declarations. Beijing, which considers Lai a separatist, has ramped up military pressure, frequently flying warplanes near Taiwan. Chinese officials argue that any military action would not be an invasion, as Taipei is already Chinese territory. Taiwan's defense minister on Wednesday accused China of distorting history, asserting that the Republic of China led the anti-Japanese war effort, not the People's Republic. Reuters
Israel-Iran Conflict Spurs China to Reconsider Russian Gas Pipeline. The recent Israel-Iran conflict has revived Chinese interest in the long-stalled Power of Siberia 2 pipeline, which would transport Russian natural gas to China. Previously delayed by disputes over pricing, ownership, and Beijing’s reluctance to over-rely on Russian energy, the project is gaining traction as China reassesses the reliability of gas imports from the Middle East, especially via the vulnerable Strait of Hormuz. The war highlighted risks to China’s LNG supply, much of which comes from the Gulf region. Moscow, in desperate need of new buyers after losing European markets, has pushed the pipeline to deepen ties with Beijing. China, balancing energy security and geopolitical interests, may now be more open to advancing the deal. However, significant hurdles remain, including pricing disagreements and China's demand for equity stakes. Even if approved, the pipeline would take at least five years to build. Wall Street Journal
Japan carries out first missile test on its own territory amid military buildup efforts. Japan conducted its first-ever domestic test of a missile on Tuesday, launching a Type 88 surface-to-ship missile from Hokkaido as part of its growing military buildup aimed at deterring China. The test marks a shift toward greater self-reliance in defense and comes amid rising concerns over Chinese and Russian military activities near Japanese waters. Historically, Tokyo conducted such tests abroad due to space and safety constraints. This move follows Japan’s 2022 security strategy overhaul, which identified China as its top strategic challenge and committed to closer U.S. ties and enhanced strike capabilities. Japan is now deploying long-range cruise missiles, including U.S.-made Tomahawks, and developing domestic missiles with significantly expanded range. Meanwhile, Japan plans to build a missile range on Minamitorishima island. Associated PressArmy RecognitionThe Defense PostEuronews
South Korea’s special prosecutor pushing for arrest warrant for ex-leader Yoon. South Korea's special prosecutor has requested a new arrest warrant for former President Yoon Suk Yeol, intensifying the investigation into his failed attempt to impose martial law in December. The special counsel also seeks to impose a travel ban on him. Yoon, already on trial for insurrection—a charge punishable by death or life imprisonment—was initially arrested in January but released after 52 days due to procedural issues. The new warrant accuses him of obstruction for refusing to comply with summons for questioning. Yoon’s lawyers claim he hasn’t been properly served. His martial law bid shocked South Korea’s democracy and led to his ouster in April, triggering a snap election won by President Lee Jae-myung. Yoon maintains his actions were meant to protect democracy from the then-opposition Democratic Party. ReutersBloomberg Yonhap News AgencyYonhap News AgencyAFRICA
At least 120 children have been kidnapped by insurgents in Mozambique. In recent days, at least 120 children have been abducted in northern Mozambique by jihadist insurgents linked to the Islamic State, Human Rights Watch reported on Tuesday, highlighting a surge in kidnappings in the Cabo Delgado province. Islamist militant group al-Shabab has reportedly been using the children for forced labor, to transport looted goods, and in some cases, as child soldiers or forced brides. Mozambique has battled this insurgency since 2017, relying heavily on foreign military support. The conflict has displaced over 600,000 people and expanded into neighboring provinces. Human Rights Watch urged the government to step up efforts to locate the missing children and prevent further kidnappings. The crisis has been exacerbated by climate disasters, deepening hunger, and reduced foreign aid following U.S. funding cuts. The Norwegian Refugee Council described Cabo Delgado as a neglected emergency, with over 5 million people facing severe food insecurity. Associated Press
Over 40 people, including children, killed in brutal attack on Sudanese hospital. The World Health Organization has denounced a deadly attack on al-Mujlad hospital in Sudan’s West Kordofan province, which killed over 40 civilians, including six children and health workers. The hospital lies near the frontline of Sudan’s civil war between the army and the paramilitary Rapid Support Forces (RSF), which erupted in April 2023. The RSF blamed the Sudanese military for the hospital strike, calling it a violation of international law, while the army denied responsibility, asserting that it targets only legitimate military sites. The UN and UNICEF also condemned the violence, warning it hampers life-saving aid. The conflict has seen atrocities by both sides, and UN officials say the risk of genocide and war crimes remains high, particularly against non-Arab ethnic groups in Darfur. Over 12 million people have been displaced, tens of thousands killed, and more than 20 million are now in need of food aid. The GuardianReutersBBC
Funding crisis stalls UN probe into possible war crimes in Congo. A funding crisis in the U.N. human rights office (OHCHR), caused by unpaid contributions and U.S. aid cuts, has stalled a U.N. commission investigating suspected war crimes in eastern Democratic Republic of Congo. The commission, approved in February to probe atrocities by Rwanda-backed M23 rebels in North and South Kivu, cannot proceed without $3.9 million in funding. Preliminary findings already indicate summary executions have been carried out, in addition to severe sexual violence, possibly constituting war crimes. OHCHR says its reserves are exhausted after allocating $1.1 million to a related fact-finding mission. Officials warn the delay undermines accountability and victims' justice. Reuters
Kenyans flood streets for protests, one year after storming parliament. Thousands of Kenyans protested on Wednesday to mark the anniversary of 2024’s deadly anti-government demonstrations, during which at least 60 people were killed and parliament was stormed. Police used tear gas in Nairobi, while marches in Mombasa and Nakuru remained peaceful. Anger persists over state violence and recent incidents like the death of blogger Albert Ojwang, who was killed while in police custody. Six people, including three officers, have been charged with his murder. Opposition leaders criticized the government for inaction, while Western embassies urged restraint and transparency. Rights groups condemned the use of undercover police and hired counter-protesters, raising concerns about public trust and accountability. ReutersBBCThe GuardianAl JazeeraCYBER, TECH & MARKETS
FBI Cyber leader warns that China’s ‘Typhoons’ remain threat amid mideast conflict. Despite rising concerns over potential Iranian cyber retaliation following U.S. strikes, the FBI warns that China remains the most persistent and strategically damaging digital threat. Brett Leatherman, the new head of the Bureau’s Cyber Division, stressed that Chinese cyber activity often “unfolds in silence,” going unnoticed but accumulating significant long-term harm. He cautioned against complacency, noting that China’s goal is to quietly erode U.S. national security and economic advantage. While federal agencies remain alert for Iranian cyberattacks, China’s hacking groups—like Salt Typhoon—continue to target U.S. critical infrastructure, telecoms, and third-party vendors. Nine U.S. firms have been compromised so far, and Canadian telecom networks have also been breached. Leatherman said the intrusions are part of China’s strategy to gather intelligence and map infrastructure. Former cybersecurity official Chris Painter echoed the concern, highlighting China’s sustained capabilities and intent. The Record

Rear Adm. (Ret.) Mark Montgomery
The Cipher Brief
Iranian-backed hackers go to work after US strikes. In the wake of U.S. airstrikes on Iranian nuclear sites, pro-Tehran hackers have targeted American banks, defense contractors, and oil companies, though no major infrastructure damage has occurred so far. Experts warn that the situation could escalate if the Israel-Iran ceasefire fails or independent hacking groups aligned with Iran act on threats. The attacks, mostly denial-of-service disruptions, are part of the regime’ long-standing cyber strategy focused on chaos, espionage, and psychological warfare. While Iran lacks the cyber sophistication of China or Russia, it is adept at leveraging smaller-scale operations to gather intelligence and cause fear. The U.S. Department of Homeland Security and CISA have issued warnings to critical infrastructure operators to stay alert. Critics point to cuts in U.S. cybersecurity programs under the Trump administration, even as the threat landscape expands. Experts argue that major investment in cyber defense and education is now crucial to national security. Associated Press
Iran-linked cyberattack reportedly disrupts public services in Albania’s capital. Homeland Justice, a hacking group tied to Iran’s Islamic Revolutionary Guard Corps (IRGC), disrupted multiple public services in Tirana, Albania, last week, taking down the city’s website and affecting municipal operations. The group claimed responsibility and cited Albania’s hosting of the exiled Iranian opposition group MEK as its motive. The cyberattack impacted services including transportation, passport and license issuance, and digital enrollment for nurseries. Albania’s cybersecurity agency was working to restore systems, though the city’s website remained offline. Homeland Justice has previously targeted other Albanian institutions. The attack follows heightened tensions in the Middle East and increased Iranian cyber activity. The Record
Social engineering and Signal chats led to new Russian malware attacks, Ukraine says.Ukraine’s cybersecurity agency, CERT-UA, reports that Russian military intelligence-linked hackers (APT28/Fancy Bear) are using Signal messenger to deliver new malware—BeardShell and SlimAgent—targeting Ukrainian government agencies. BeardShell enables PowerShell script execution, while SlimAgent captures encrypted screenshots. The attackers used social engineering tactics, impersonating officials to convince victims to open a malicious Word file. CERT-UA noted the malware’s ability to evade antivirus detection due to Signal’s security architecture. The campaign also used legitimate tools like the Covenant framework and cloud services. Broader Russian operations, including those by Sandworm and UNC4221, continue leveraging Signal and deceptive apps to collect battlefield intelligence and geolocation data. The
Russia frees REvil hackers after convictions for payment card fraud. A Russian court sentenced four members of the REvil ransomware gang to five years for trafficking stolen payment data and carding fraud but released them immediately, citing time already served in pre-trial detention. The case did not involve REvil’s major ransomware attacks, which previously targeted high-profile individuals and U.S. companies. The men were arrested in 2022 during a rare Kremlin crackdown following pressure from President Joe Biden. Though Russia seldom prosecutes its hackers, the crackdown lost momentum after the Ukraine invasion. Some experts believe Russia uses cybercriminals like REvil for espionage, allowing the state plausible deniability in cyber operations. The RecordCyberScoopBleeping ComputerREPORT INFO
Brad Christian, Executive Editor
Ethan Masucol, Assistant Editor
Brian Bonner, Senior Contributor
Ken Hughes, Tech & Cyber Contributor
Katharine Campbell, Writer, Contributor
Read deeply experienced, expert-driven national security news, analysis, and opinion in The Cipher Brief
Ralph Goff
The Cipher Brief