NATSEC//BRIEF

SYNC OCT 19 06:46 ET

SYS // DAILY BRIEF

Friday, October 9, 2026

FILED 06:45 ET 12 STORIES 7 MIN READ

Bottom line: The Justice Department and FBI, working with allies, seized hacking tools and domains tied to China’s Flax Typhoon campaign, the week’s biggest counter-espionage action. Germany’s week-old case against former spy chief August Hanning picked up a disputed China angle as a parliamentary oversight panel pressed for answers, and President Trump said the US will not strike Iran before the midterms even as the Pentagon keeps contingency plans ready.

Espionage and counterintelligence

German spy chief case picks up a disputed China angle. Germany’s parliamentary intelligence oversight panel is pressing for a full accounting of the case against August Hanning, the former BND chief arrested October 6 on treason and espionage charges. Der Spiegel reported Hanning was in contact with a representative of Azerbaijani intelligence; Bild reported separately that he also kept up contacts with Russian and Chinese state institutions, including channels reaching close to the Kremlin. Azerbaijan’s government denied any link to its own intelligence service, and prosecutors still have not named which country, if any, received the material Hanning allegedly prepared. Why it matters: The conflicting, unconfirmed accounts show how little is actually established in what German officials call the most serious espionage case to hit the BND in decades. (Al Jazeera, Berliner Zeitung, in German)

DOJ and FBI seize Chinese hacking tools used against US infrastructure. The Justice Department and FBI announced court-authorized seizures of two hacking tools, “Microscan” and “FishHub,” used to scan and in some cases breach US and foreign critical infrastructure. The tools were allegedly operated by Beijing-based Integrity Tech as part of the Flax Typhoon campaign; the takedown included seven seized domains and came with a joint warning from the FBI, CISA and NSA. The Record reports international partners joined the US in taking down digital infrastructure that allowed “widespread vulnerability scanning and, in some cases, intrusions.” Why it matters: Flax Typhoon has been tied to breaches of US power, airport and university networks, so disrupting its tooling cuts into one of China’s most active state-backed hacking operations. (Justice Department, CyberScoop, The Record)

Russian intelligence allegedly plotted to use Mexican hitmen for a DC assassination. SpyTalk reports senior Russian intelligence officers are suspected of plotting to hire Mexican hitmen to target exiled dissident Vladimir Kara-Murza in Washington, DC. Kara-Murza, a Kremlin critic who survived two poisoning attempts in Russia in 2015 and 2017, was freed in an August 2024 prisoner swap between Russia and Western countries. Why it matters: A plot to kill a dissident on US soil using third-country hitmen, if confirmed, would mark an escalation of Russia’s campaign of transnational repression onto American ground. (SpyTalk)

US military and intelligence community

Senator says Pentagon blocked his Qatar base visit to hide Iran war damage. Sen. Chris Murphy, D-Conn., said the Pentagon denied his congressional delegation access to Al Udeid Air Base in Qatar during a recent trip, calling the move a “cover-up.” Defense News reports Murphy believes the restriction was meant to keep the delegation from seeing damage from the earlier Iran war. Why it matters: A senator being blocked from a US base on an oversight trip raises questions about what the Pentagon doesn’t want Congress to see. (Defense News)

China, Russia, Iran and North Korea

Trump says US won’t strike Iran before midterms, even as Pentagon preps options. President Trump said on Truth Social that US representatives are having “productive discussions” with Iran and that the military will not attack before the November midterm elections. The statement came a day after The Atlantic reported the Pentagon had been asked to prepare a potential strike ahead of the midterms, according to Haaretz. Why it matters: The reassurance doesn’t resolve the tension between active US-Iran diplomacy and military contingency planning this close to an election. (Haaretz)

OpenAI says Iran and Russia used AI to run influence operations. OpenAI reported disrupting two influence campaigns, from Iran and Russia, that used its tools to pose as journalists and think tanks targeting Western media. CyberScoop reports the two campaigns were rated 4 and 5 out of 6 for severity, the first time OpenAI has flagged what it considers high-impact influence operations. Why it matters: It shows state actors increasingly using generative AI to scale information operations against Western audiences, not just to write malware or phishing lures. (CyberScoop)

Britain expands sanctions on Russia’s shadow fleet and banks. Britain imposed new sanctions targeting Russia’s shadow fleet, blacklisting 20 additional vessels along with individuals and entities linked to Russia’s energy and shipping sectors, including Rosneft Marine UK and a research unit within the Russian Defense Ministry, the Moscow Times reports. Why it matters: It is part of a steady drumbeat of Western sanctions meant to choke off the tanker network Russia uses to evade the oil price cap and fund its war in Ukraine. (The Moscow Times)

Jamestown: Russia’s parliamentary elections show the FSB’s growing domestic reach. The Jamestown Foundation reports independent observers found an unprecedented level of falsification in Russia’s September 18-20 parliamentary elections, which gave the ruling United Russia party its largest-ever State Duma faction. The analysis ties the outcome to the Federal Security Service’s expanding role in managing domestic politics. Why it matters: A security service engineering election outcomes at this scale shows how thoroughly the Kremlin has merged domestic security control with political power. (Jamestown Foundation)

Taiwan indicts 10 for smuggling US military-grade chips to China. New Taipei prosecutors indicted 10 people for using forged export documents and a fake defense-institute end user to smuggle more than ten types of controlled Texas Instruments and Analog Devices chips to China and Hong Kong, relabeling the parts “Made in Taiwan” to hide their origin. Prosecutors said the chips, usable in radar, antenna arrays and military drones, were “clearly” supplied to China’s military industry, and the scheme generated roughly $11 million in illicit profits. Why it matters: It shows China keeps working around US export controls by routing chips through forged paperwork and relabeling, not just outright theft. (Taipei Times, Focus Taiwan)

Germany and Israel

Germany gets direct tasking of dedicated radar reconnaissance satellites. Rheinmetall announced the Bundeswehr can now independently task several synthetic-aperture radar satellites under a program called SPOCK 1, mainly to watch NATO’s eastern flank and protect Germany’s brigade in Lithuania. The satellites are operated by the joint venture Rheinmetall ICEYE Space Solutions under a roughly 1.7 billion euro contract signed late last year. Why it matters: It gives Germany’s military its own standing eye on Russian movements near NATO’s border instead of relying on allies or commercial tasking requests. (Defence Industry Europe)

Shin Bet says it has arrested 72 in southern Israel on security charges this year. Israel’s Shin Bet said it arrested 72 residents of southern Israel on security charges since the start of the year, including a cell in the Bedouin town of Segev Shalom accused of planning to form a “military battalion” and carry out terrorist attacks. About 50 people have been charged with endangering state security so far this year, Haaretz reports. Why it matters: It points to a sustained internal security effort in Israel’s Negev region that has drawn less attention than the war with Hamas and Hezbollah. (Haaretz)

Mossad chief seeks TV pundit with no security background for key strategy role. Haaretz reports Mossad chief Roman Gofman wants to install a former tech executive and political commentator, who has no security background, as head of the agency’s strategy division, a post previously held by veteran Mossad officers. Sources told Haaretz that Gofman already employs four outside advisers who counsel him. Why it matters: Installing a media figure atop a core strategy post at Israel’s foreign intelligence service is an unusual break from Mossad’s tradition of promoting career officers. (Haaretz)

Worth reading

What to watch

  • Whether Germany’s Bundestag oversight panel gets a clearer answer on which foreign service, if any, received Hanning’s material.
  • Whether the Pentagon moves ahead with Iran strike planning after the November midterms.
  • Congressional response to Sen. Murphy’s accusation that the Pentagon blocked his access to Al Udeid Air Base.
  • Any Taiwanese or US export-control action following the chip-smuggling indictments.

Coverage: Thu Oct 08 05:46 ET to Fri Oct 09 06:45 ET. 150 stories scanned from 37 sources.