NATSEC//BRIEF

SYNC OCT 19 06:46 ET

SYS // DAILY BRIEF

Friday, October 2, 2026

FILED 06:45 ET 14 STORIES 8 MIN READ

Bottom line: US prosecutors charged a Virginia tech CEO and a Russian national with hiding Moscow’s secret ownership of forensics software sold to the Secret Service, while a Department of Energy employee in Washington state was separately arrested on charges of helping build drones and communications gear for Iran’s Houthi allies. In Israel, new reporting shows Shin Bet had warned for months about security gaps at UAE airports before this week’s flydubai hijacking attempt, and Germany stood up its first dedicated drone regiment as Chancellor Merz warned Russia is preparing more “serious” hybrid attacks.

Espionage and counterintelligence

A Russian-linked scheme to plant software inside the Secret Service collapses in federal charges. Prosecutors charged Lee Reiber, the Idaho-based chief executive of Virginia digital-forensics firm Oxygen Forensics, and Russian national Oleg Davydov with concealing that the company was secretly owned and run from Russia while its data-recovery software was sold to the Secret Service and other US agencies. Prosecutors allege the same software had previously gone to Russia’s FSB security service and its interior ministry; Davydov was arrested at London’s Heathrow Airport and the US is seeking his extradition. Why it matters: A digital-forensics tool used by the agency that protects the president is a high-value espionage target, and the case suggests Moscow had a foothold in it for years. (CNBC, intelnews.org)

A Department of Energy employee is charged with helping Iran’s Houthi allies build drones. The FBI arrested Ashton Hamed Ellaboudy, 51, a Department of Energy employee in Richland, Washington, home to the Hanford nuclear site, alleging he used his electrical-engineering background to help the Houthis improve mobile communications and drone components, and bought nitric acid, ammonium nitrate and other explosive precursors between late 2024 and early 2025. Prosecutors say Ellaboudy used an old US Army Corps of Engineers passport to travel through Oman into Houthi-held Sanaa, Yemen, last September; officials said the case poses no threat to the Hanford site itself. Why it matters: It’s an alleged case of a federal employee with access to sensitive engineering knowledge choosing to put it to use for a group the US has designated a foreign terrorist organization. (Justice Department, Idaho News)

A Russian-Australian man faces court accused of passing Ukrainian military positions to Russia. Vladimir Teslov, 27, appeared by video link in Brisbane Magistrates Court and was ordered held in custody while prosecutors examine his devices. Prosecutors allege Teslov traveled to Russia in October 2024 for military-style training, then joined Ukrainian forces the following year while passing the location and movements of Ukrainian units back to Russia. Why it matters: The case is a reminder that Russian recruitment reaches dual nationals embedded inside the forces fighting it. (AAP)

Montenegro extradites an Iranian-Turkish hacker accused in a $3.4 billion university breach campaign. Amir Barati, a 40-year-old dual Iranian-Turkish citizen, was extradited to the United States after Montenegro’s courts upheld an FBI arrest warrant. Prosecutors say Barati was part of a 17-person operation run through Iran’s Mabna Institute on behalf of the Islamic Revolutionary Guard Corps that breached 144 American universities and 42 US companies, stealing more than 31 terabytes of research and intellectual property. Why it matters: The case shows Iran’s long-running academic-espionage apparatus is still being prosecuted years after the underlying breaches. (The Record)

Taiwan indicts three retired servicemembers for spying for China since 2020. Kaohsiung prosecutors charged a retired airman, surnamed Chen, and two other former servicemembers, Lu and Mao, with passing a Chinese Communist Party-linked intelligence unit tank specifications and details of Taiwan’s Han Kuang military exercises in exchange for money. Chen allegedly traveled to Zhuhai, China, in 2024 to meet Chinese intelligence officers in person. Why it matters: Taiwan keeps uncovering China-run recruitment networks inside its own armed forces, each one eating into confidence that exercise and equipment details stay secret. (Focus Taiwan)

US military and intelligence community

The Pentagon raises combat pay for the first time in 24 years as the Iran war continues. The War Department increased hostile fire pay to $450 a month, up from $250, and imminent danger pay to $275 a month, up from $225, effective with the new fiscal year. Officials said the change, the first adjustment to the two special pays since 2002, comes with more than 50,000 US troops deployed in the Middle East and 19 American service members killed since the war with Iran began. Why it matters: The size and timing of the increase is itself a marker of how long and costly the Pentagon now expects the Iran conflict to run. (Department of War, Army Times)

A new Pentagon cyber pay model is leaving troops bracing for cuts. The Pentagon’s new cyber mastery incentive pay program was meant to reward skill development with escalating pay rates, but several services have struggled to roll it out, and personnel in at least one branch are expecting the change to bring pay cuts rather than raises. Why it matters: A pay model that discourages cyber specialists from staying in uniform undercuts the workforce the military needs for its own cyber and signals-intelligence missions. (DefenseScoop)

China, Russia, Iran and North Korea

Iran secretly executes an Afghan national on an espionage charge, rights groups say. The Hengaw Organization for Human Rights said Iran executed Tourat Mohammadi, 42, an Afghan national who had previously worked for an organization affiliated with Iran’s Islamic Revolutionary Guard Corps, at Karaj’s Central Prison without notifying his family or lawyer in advance. Mohammadi had been held for about two years and interrogated for seven months by Revolutionary Guard intelligence before his execution; rights groups count him as the 16th person executed on espionage charges in Iran this year. Why it matters: The claim comes only from rights monitors, since Iran did not announce the execution, and it fits a pattern of Tehran using espionage charges against foreign nationals with little public process. (Khaama Press, Hengaw)

Putin says Russia is ready to use “every weapon” to defend Kaliningrad. Speaking at the Valdai forum, Vladimir Putin said that if Russia considered Kaliningrad, its Baltic exclave, to be under direct attack, “the issue of use by the Russian Federation of all arms at the disposal of our country will inevitably and immediately be on the agenda.” He accused NATO of threatening the exclave with naval exercises in the Baltic Sea; NATO Secretary General Mark Rutte said none of the alliance’s activities threatened Moscow. Why it matters: Putin is explicitly tying a conventional NATO exercise to the threshold for Russia’s broadest weapons use, including implicitly nuclear ones. (BBC)

Brazil’s intelligence service tells European allies both the US and Russia are meddling in its election. Officials from Abin, Brazil’s intelligence agency, briefed visiting French and German officials that they had confirmed interference from both the United States, ranging from open statements of support to lawfare, and Russia, though they gave no further detail on the Russian activity. A senior Brazilian cyber official said cyberattacks had nearly doubled since 2025, with a sharp rise in hacking and phishing attempts against the president’s office that officials called clearly election-related. Why it matters: A government naming a US administration, not just Russia, as an election-interference actor to its own allies is an unusual break from how foreign interference is normally discussed among partners. (Latin Times)

Germany and Israel

The Bundeswehr stands up Germany’s first drone regiment. Defense Minister Boris Pistorius announced a new drone regiment of up to 600 troops, built around unmanned aerial and ground systems including loitering munitions, with a range of up to 500 kilometers; it will be folded into the 10th Armored Division to help protect NATO’s eastern flank and is due to stand up in 2027. Officials said the unit is a direct response to lessons from drone warfare in Ukraine. Why it matters: It’s Germany’s clearest structural move yet to build drone warfare into its regular force rather than treat it as an auxiliary capability. (Yahoo News/AP)

Shin Bet warned for months about UAE airport security gaps before this week’s flydubai hijacking attempt. Shin Bet chief David Zini had pressed for months for additional screening at check-in counters used by Israeli airlines in the United Arab Emirates, a request Emirati authorities initially resisted, while Israel’s ban on its own airlines flying to the UAE never applied to foreign carriers like flydubai, which kept running ten daily Tel Aviv-Dubai flights. Israel’s prime minister has acknowledged the gap as a “loophole” after an Omani co-pilot allegedly tried to crash a flydubai flight to Tel Aviv earlier this week. Why it matters: The warnings predating the incident turn this from a one-off security failure into a question of why a known gap in vetting foreign airline crews went unclosed. (Haaretz, Ynetnews)

Germany says it’s bracing for “serious” Russian hybrid attacks. Chancellor Friedrich Merz said at a NATO ceremony that “we are preparing for new hybrid attacks, including serious ones,” pointing to an attempted drone incursion at Leipzig Airport that Berlin has blamed on Russia, alongside Russian-linked disinformation efforts he said included “the sound bites of the AfD and their Russian puppeteers.” Merz said Germany would respond “quickly and clearly” to further attacks. Why it matters: A sitting chancellor naming a domestic political party as a conduit for Russian messaging marks a sharper public line than Berlin has previously drawn. (Haaretz)

Israel names the intelligence officer who missed warning signs before October 7, as the army plans his ouster. Haaretz reported that Lt. Col. Aryeh Amidror, the Israel Defense Forces (IDF) Gaza Division’s intelligence officer on October 7, assessed at the time that there were no signs Hamas was raising its readiness; the army is now moving to force him out. Amidror is the son of a former head of the IDF’s intelligence research department. Why it matters: Three years on, Israel is still working through individual command accountability for the intelligence failures that preceded the October 7 attack. (Haaretz)

Worth reading

What to watch

  • Lee Reiber and Oleg Davydov’s arraignment in federal court in Los Angeles over the Oxygen Forensics case, expected in the coming weeks.
  • Vladimir Teslov’s next Brisbane Magistrates Court date as Australian prosecutors review his seized devices.
  • Whether Israel’s joint Mossad-Shin Bet investigation finds evidence Iran directed the flydubai hijacking attempt.
  • The Bundeswehr’s new drone regiment, which Berlin wants operational in 2027.

Coverage: Thu Oct 01 05:45 ET to Fri Oct 02 06:45 ET. 625 stories scanned from 37 sources.