NATSEC//BRIEF

SYNC OCT 19 06:46 ET

SYS // DAILY BRIEF

Friday, October 16, 2026

FILED 06:45 ET 13 STORIES 6 MIN READ

Bottom line: Shin Bet chief David Zini postponed a review of the agency’s Gaza-smuggling policy because his brother faces related criminal charges, while a separate Haaretz investigation detailed internal IDF failures behind a soldier’s death in Lebanon. North Korea test-fired its first submarine-launched cruise missile in nearly three years, and Taiwan is weighing a law that would make AI chip smuggling to China a crime for the first time as trade talks with Washington continue. Researchers also found commercial spyware vendors delivering zero-click infections through ordinary online ads.

Espionage and counterintelligence

Zero-click spyware spreads through targeted online ads, researchers say. Citizen Lab researchers found that commercial spyware vendors are increasingly delivering zero-click infections to targets’ phones through purchased online advertising rather than phishing links, letting malware land without the victim clicking anything. Why it matters: ad-based delivery removes the main behavioral safeguard, not clicking suspicious links, that most people rely on to avoid infection. (The Record)

Suspected Kazakhstan-linked hackers run multi-year phishing campaign across Central Asia. Researchers said a roughly two-year-old cyber-espionage campaign targeting governments across Central Asian states appears to originate in Kazakhstan, based on infrastructure and targeting patterns in the operation. Why it matters: a Central Asian state running its own espionage campaign against its neighbors shows regional intelligence rivalries playing out in cyberspace, not just pressure from Russia and China. (The Record)

Russian national extradited to New York over scheme to export US microelectronics to Russia. The Justice Department charged Alexander Suvorov, 52, after extraditing him to New York, alleging he ran a front company in Hong Kong to unlawfully export US microelectronic components to Russia in violation of sanctions imposed after its invasion of Ukraine. Why it matters: front-company export schemes remain one of the main ways Russia keeps its weapons industry supplied with chips despite sanctions. (Justice Department)

US military and intelligence community

Ukraine says the Pentagon has cut off some intelligence sharing. Ukrainian officials said this week that the US appears to have stopped sharing certain forms of intelligence they described as life-saving, according to Defense News; officials did not specify which streams were cut or why. Why it matters: reduced intelligence sharing would hurt Ukraine’s ability to track Russian strikes and plan its own operations regardless of events on the battlefield. (Defense News)

Navy lands an autonomous drone on a ship without GPS. The Navy said it demonstrated autonomous drone flight and a shipboard landing without GPS or pilot input, meant to show unmanned operations can continue where satellite navigation is jammed or disrupted. Why it matters: operating without GPS is central to how the Navy expects drones to function against an adversary capable of jamming satellite signals. (Department of War)

Pentagon buys a year to avoid cyber-force pay cuts. The Pentagon authorized the military branches to preserve legacy incentive pay for cyber personnel for one more year under a transition plan, averting cuts that were set to hit under the new C-MIP pay program after services warned the change could push out experienced operators. Why it matters: retaining experienced cyber personnel matters more to US capability than moving to a new pay system on the original schedule. (DefenseScoop)

China, Russia, Iran and North Korea

North Korea test-fires first submarine-launched cruise missile in nearly three years. North Korea’s Missile Administration fired two submarine-launched strategic cruise missiles from its modified “Hunchback” Romeo-class submarine in the Sea of Japan, the first public disclosure of such a test in almost three years, state media said. A Congressional Research Service report delivered to Congress this week separately lays out how North Korea’s nuclear and missile programs have advanced over the past decade. Why it matters: a working submarine-launched cruise missile would give North Korea a harder-to-detect strike option beyond its land-based systems. (USNI News, USNI News)

Taiwan weighs making AI chip smuggling to China a crime for the first time. Taiwan is considering export controls that would restrict AI chip sales to all customers in China, not just blacklisted firms, as part of trade talks with Washington; the change would let prosecutors charge chip smuggling as a crime, which is not currently possible under Taiwanese law. Prosecutors in Keelung have so far relied on forgery and breach-of-trust charges to indict nine people, including an Nvidia Taiwan manager, over servers allegedly carrying Nvidia Blackwell GPUs routed to China. Why it matters: closing Taiwan’s legal gap would remove one of the easier paths Chinese buyers have used to acquire export-controlled AI chips. (Tom’s Hardware)

Trump calls Zelensky “more difficult” than Putin as EU leaders meet on Ukraine. President Trump leveled fresh criticism at Ukrainian President Volodymyr Zelensky, saying he is harder to deal with than Russian President Vladimir Putin, as Zelensky pressed EU leaders meeting in Brussels to keep up support for Ukraine. Why it matters: the public rift comes as EU leaders weigh a further sanctions package against Russia, raising the question of whether Washington’s patience is thinning just as Europe tries to hold its line. (BBC)

Ukraine reports continued battlefield gains in Donetsk. Kyiv reported further battlefield gains this week as its “Operation Vivaldi” counteroffensive in eastern Ukraine’s Donetsk region continues to advance. Why it matters: continued Ukrainian gains, even incremental ones, complicate Moscow’s narrative that its invasion is grinding toward an inevitable win. (Atlantic Council)

Germany and Israel

Shin Bet chief delays Gaza-smuggling review as his brother faces charges. Shin Bet chief David Zini postponed a scheduled review of the agency’s policy on Gaza-smuggling cases after prosecutors asked the agency to clarify that policy; a source told Haaretz Zini “must not go near these matters” while his brother faces criminal charges tied to the issue. Why it matters: a sitting intelligence chief’s family tie to an active case he would otherwise oversee creates a direct conflict of interest inside Israel’s domestic security service. (Haaretz)

Haaretz investigation details IDF failures behind a soldier’s death in Lebanon. A Haaretz investigation based on messages, testimony and footage found IDF negligence contributed to the death of medic Gur Kehati, who was sent into Lebanon to accompany a civilian researcher, and reportedly drove his family to leave Israel afterward. Why it matters: the case adds to a pattern of IDF internal failures coming to light through investigative reporting rather than the military’s own disclosures. (Haaretz)

Prank exposes how easy it still is to fake Israeli government emails. A prank impersonating Mossad and demanding cat pictures exposed how government agencies still fail to enforce basic email authentication nine years after officials first warned about the gap, Haaretz reported; the prank did not involve any breach of Mossad’s own systems. Why it matters: email spoofing this simple against government domains makes phishing campaigns against officials and journalists easier, whichever agency’s name gets borrowed. (Haaretz)

Worth reading

What to watch

  • Whether the EU adopts a further sanctions package against Russia as leaders meet in Brussels this week.
  • Whether Taiwan finalizes new criminal penalties for AI chip smuggling to China amid ongoing trade talks with Washington.
  • Whether Shin Bet chief David Zini recuses himself from the Gaza-smuggling policy review given his brother’s case.
  • Whether North Korea conducts further tests of its submarine-launched cruise missile following this week’s firing.

Coverage: Thu Oct 15 05:46 ET to Fri Oct 16 06:45 ET. 632 stories scanned from 35 sources.