IC BRIEF
Current as of 0336 EDT (UTC-04), Monday 13 July 2026
Contents
9 stories from 38 sources across 32 organizations
KEY JUDGMENTS
Clayton's Director of National Intelligence (DNI) confirmation by August 31 remains genuinely uncertain, with Wednesday's hearing at the intersection of the subpoenas Clayton signed in the White House-directed leak probe, FBI Director Patel's credibility damage from his Graham conspiracy post, and the continued
Israeli intelligence reporting of a fresh Iranian assassination plot against Trump and a separate Iranian-linked AI video depicting Senator Graham's death as a state operation paint a multi-vector targeting picture. Formal US characterization linking both threads as a coordinated campaign is very unlikely before August 15, constrained by the interagency consensus machinery that the DNI vacancy and Patel's conduct have weakened.
A Main Intelligence Directorate of the Russian General Staff (GRU) procurement unit operating from Tokyo and North Korea's ordered expansion of General Reconnaissance and Intelligence Bureau (GRIB)'s intelligence mandate indicate adversary services are scaling while US collection authority remains lapsed. The collection gap persists through the next cycle absent a standalone 702 bill or Trump decoupling renewal from the Safeguard American Voter Eligibility Act (SAVE Act).
Adversary Intelligence
GRU Unit Operating From Tokyo High-Rise Identified Hunting Dual-Use Technology for Russian War Effort
BLUF: Japan's institutional counterintelligence gaps make public action against the identified GRU network
A GRU unit operating from a high-rise in central Tokyo has been working to identify dual-use equipment, industrial know-how and sensitive supply chains for Russia's war effort, according to a New York Times investigation cited by Prism News
Analyst Note: A GRU unit working out of central Tokyo, exposed only through a single New York Times investigation that Prism News and The Hill amplified rather than independently confirmed, shows Japan functioning as an unpoliced conduit for Western
Sources:
1: Russia GRU hunts war tech from a Tokyo high-rise -
2: Russia goes to Japan for tech in Ukraine war: Report -
How Putin Turned Japan Into a Den of Spies -
Iranian-backed cyber network releases AI-generated video claiming assassination of Senator Graham with active hit list
BLUF: Formal US attribution of the video to Iranian state direction remains
An Iranian-linked network circulated an AI-generated Lego-style animation on Saturday depicting Senator Lindsey Graham's fatal cardiac arrest as a staged assassination, according to
Analyst Note: The video's explicit naming of a second target and its embedded reference to the president convert a symbolic propaganda clip into a protective-intelligence matter, pushing FBI resource allocation toward the security request ahead of any forensic conclusion on the network's origin. Federal characterization of the campaign as state-directed rests on stylistic and thematic cues, the Witt reference and the checklist imagery, rather than on technical attribution such as infrastructure or account forensics. Until an agency names Iran on the record, the operation functions as effective leverage regardless of true authorship, amplifying fear among Graham's allies and complicating public messaging around his death. Low confidence reflects the single-narrative-thread sourcing and the absence of any technical attribution data.
Sources:
2: BREAKING: An Iranian regime account is now claiming Iran assassinated Senator Lindsey Graham -
3: Russia and Iran had Motive, Opportunity and Intent to Poison Lindsey Graham. Was He Assassinated? -
WATCH: Iranian Media Celebrates Death of Sen. Lindsey Graham -
Kim Jong Un Orders Radical Expansion of North Korea Unified Spy Agency GRIB to Integrate Satellite Cyber and HUMINT Operations
BLUF: Consolidating satellite, cyber, and HUMINT collection under a single command structure would compress Pyongyang's targeting cycles against South Korean military and critical infrastructure.
Kim Jong-un presided over the first enlarged meeting of the ninth
Analyst Note: Bundling the GRIB mandate with naval modernization, nuclear expansion, and a People's Army reshuffle in one Central Military Commission session indicates Kim is folding intelligence reform into a broader chain-of-command overhaul rather than issuing a standalone directive, with the "many-sided" and "radical" language pointing toward fusing satellite, cyber, and HUMINT collection under a single command structure to sharpen targeting of South Korean infrastructure. Sourcing rests on KCNA's primary account with only Yonhap adding independent write-up, leaving the story single-sourced despite three citations. Seoul's monitoring statement rather than a countermeasure announcement suggests the South currently reads this as capability-building. The rhetoric may instead function primarily as domestic messaging reinforcing Kim's authority over the reshuffled military rather than signaling near-term change to GRIB's actual capabilities.
Sources:
1: N. Korea to expand intelligence agencys role against potential enemies -
2: North Korea orders expanded role for military intelligence agency -
First Enlarged Meeting of Ninth WPK Central Military Commission Held -
IC Oversight & Policy
White House Directs FBI Director Patel to Run Air Force One Leak Investigation From Presidential Residence
BLUF: Running an FBI leak probe from the White House residence collapses the last procedural distance between political direction and federal law enforcement action, setting a precedent that will outlast this investigation.
The White House directed FBI Director Kash Patel to oversee a leak investigation into New York Times reporting on security shortfalls in the new
Analyst Note: Direct White House oversight of the leak probe, run from the residence rather than headquarters, erodes the separation between prosecutorial and political functions, and subpoenaing reporters before pursuing internal suspects signals speed and press pressure taking priority over standard DOJ leak protocols. Jay Clayton, the prosecutor behind the subpoenas, is simultaneously Trump's DNI nominee, a dual role that hands Senate confirmers a conflict-of-interest question at Wednesday's hearing, the same day the reporters face the grand jury. Officials have since gone on record insisting reporters are not targets and confirming the FBI's earlier failed request that the Times hold the story, though one person familiar says Patel went to the White House on his own initiative rather than at its direction, cutting against the centrally-directed framing. Confidence is moderate, resting on the Times' primary account with only secondary outlets repackaging it and no independent corroboration.
Sources:
1: White House directed Patel to oversee investigation involving Times reporting -
2: Trump admin directs Kash Patel to lead Air Force One leak investigation -
3: Trump's Air Force One switcheroo highlights security concerns around Qatari model -
White House Directed Patel to Oversee Investigation Involving Times Reporting -
White House Directed Patel to Oversee Investigation Involving Times Reporting -
White House Directed Patel to Run Leak Probe -
Prior Reporting
- [Trump administration subpoenas NY Times journalists in grand jury leak probe tied to Air Force One report](https://www.foxnews.com/media/trump-administration-subpoenas-ny-times-journalists-grand-jury-leak-probe-tied-air-force-one-report) (2026-07-11) - [Justice Department subpoenas New York Times reporters over Air Force One reporting](https://www.npr.org/2026/07/11/g-s1-133160/justice-department-subpoenas-new-york-times-reporters-over-air-force-one-reporting) (2026-07-11) - [Trump administration subpoenas New York Times journalists who reported security concerns around new Air Force One](https://www.cnn.com/2026/07/11/politics/new-york-times-trump-subpoenas-journalists) (2026-07-11) - [Several New York Times journalists reportedly issued subpoenas after Air Force One reporting](https://www.cbsnews.com/news/trump-air-force-one-security-subpoena-journalists/) (2026-07-11) - [Trump Administration Subpoenas Times Journalists Over Air Force One Reporting](https://www.nytimes.com/2026/07/11/business/media/new-york-times-trump-subpoenas.html) (2026-07-11) - [Trump administration subpoenas New York Times journalists over new Air Force One reporting](https://www.nbcnews.com/politics/justice-department/justice-department-subpoenas-new-york-times-journalists-air-force-one-rcna470538) (2026-07-11) - [Trump administration subpoenas NYT reporters after Air Force One story raises concerns](https://thehill.com/homenews/media/5963811-the-new-york-times-journalists-subpoena-air-force-one-iran-threat-report/) (2026-07-11)Jay Clayton DNI Confirmation Hearing Set for Wednesday as Section 702 Renewal Remains Lapsed
BLUF: Clayton's confirmation as DNI by August 31 remains
Jay Clayton, Trump's nominee to serve as director of national intelligence, faces a Senate Intelligence Committee confirmation hearing on Wednesday, July 15, after Trump abruptly postponed a previously scheduled June session, according to the Washington Post and U.S. News & World Report
Analyst Note: Clayton's July 15 hearing, independently confirmed by the committee notice and corroborated by multiple outlets after Trump's mid-June postponement, reopens the path to removing Pulte, whose staffing purges have unsettled the intelligence enterprise, but confirmation by August 31 remains
Sources:
1: Jay Clayton's confirmation hearing back on after Trump abruptly canceled -
2: Jay Clayton's US Intelligence Director Nomination Hearing Set for July 15 -
3: SpyWeek: Trump Tries Again with Jay Clayton, Patel Ignites Graham Conspiracy Talk, FBI Probes Air Force One Leak -
Open Hearing: Nomination for the Honorable Walter "Jay" Clayton III to be Director of National Intelligence -
Prior Reporting
- [Trump's DNI pick hearing scuttled over voting law spat](https://www.axios.com/2026/06/17/trump-national-intelligence-pick-hearing-cotton) (2026-06-17) - [Donald Trump halts Clayton's DNI confirmation process](https://thehill.com/homenews/administration/5927665-donald-trump-pauses-clayton-dni-nomination/) (2026-06-17) - [Senate to proceed with intel chief confirmation hearing despite Trump's call to delay](https://www.npr.org/2026/06/17/nx-s1-5859298/jay-clayton-confirmation-hearing-director-of-national-intelligence) (2026-06-17) - [Trump sabotages Senate bid to fast-track Clayton as DNI, hearing canceled](https://www.cnbc.com/2026/06/17/jay-clayton-dni-hearing-congress-trump-cancel.html) (2026-06-17)FBI Director Patel stokes conspiracy theories about Lindsey Graham death with cryptic X post
BLUF: Patel's unexplained invocation of FBI resources around a medically explained death
FBI Director Kash Patel posted on X early Sunday that "the FBI is assisting local authorities and has made every necessary resource available" following Senator Lindsey Graham's death Saturday night
Analyst Note: FBI Director Patel's post invoking bureau resources, without explanation, hands conspiracy actors an official-sounding hook days after Graham's Ukraine trip and Zelensky meeting, turning a natural-death story into a bureau credibility problem. MPD's lead-agency status and the medical examiner's cardiac finding contradict any FBI investigative role, though the language may simply reflect standard liaison boilerplate for a sitting senator's sudden death rather than deliberate signaling. High confidence rests on six independently reported outlets converging on identical quoted language and two federal law enforcement sources on record denying foul play. Absent a retraction or clarifying statement, Patel
Sources:
1: Reckless: Kash Patel Called Out for Stoking Lindsey Graham Conspiracy Theories With Cryptic X Post -
2: Keystone Kash Patel Makes Eyebrow-Raising Claim About Lindsey Graham's Death -
3: Kash Patel says FBI is 'assisting local authorities' after Lindsey Graham's death -
4: Kash Patel Slammed for "Reckless" Post on Lindsey Graham's Death -
5: Kash Patel stuns with weird response to Lindsey Graham's death: 'Why is the FBI involved?' -
6: FBI scrambles after Kash Patel posts 'reckless' comment on Lindsey Graham death: sources -
Kash Patel post on Lindsey Graham's death -
Allied Intelligence
Israel Shares Intelligence Warning of Fresh Iranian Plot to Assassinate Trump Prompting Air Force One Security Switch in Turkey
BLUF: Israeli-sourced threat intelligence reflects general Iranian rhetoric rather than operational plotting, making a verified assassination attempt against Trump
The Wall Street Journal reported that Israeli intelligence indicated a new plot to assassinate Trump was in development, though the timing and channel of the warning remain unclear
Analyst Note: A verified Iranian-linked assassination attempt against Trump is
Sources:
1: Israel reportedly warned US that Iran devised a new plot to assassinate Trump -
2: Iran's reported assassination threat raises fears around risk to Trump -
Israel Shared New Intelligence Indicating Fresh Iranian Plot to Kill Trump -
Prior Reporting
- [Israel Shares Intelligence Warning Iran Plotted New Assassination Attempt Against Trump](https://www.foxnews.com/politics/israel-shares-intelligence-warning-iran-plotted-new-assassination-attempt-trump-report) (2026-07-10) - [Israel shared intelligence with US of Iranian plot to assassinate Trump, sources say](https://www.cnn.com/2026/07/09/politics/trump-assassination-plot-iran-israel) (2026-07-09) - [Israel warns US of new Iranian plot to assassinate Trump as tensions in region grow - report](https://www.jpost.com/middle-east/article-902082) (2026-07-09) - [Iran recently plotted to kill Donald Trump, per Israel](https://thehill.com/homenews/administration/5962032-israel-iran-trump-security-threat/) (2026-07-09)Secretive Israeli Nili Unit Composed of Shin Bet and IDF Elements Has Killed Over 2500 October 7 Terrorists
BLUF:
Israeli security forces have killed 2,561 of the roughly 3,000 terrorists who crossed into Israel from Gaza on October 7, 2023, according to a Channel 12 report published Friday night and cited by JNS
Analyst Note: Israel has converted the October 7 manhunt into standing policy rather than a closing chapter, with Nili's Shin Bet-IDF fusion sustaining periodic targeted strikes inside Gaza as long as several hundred participants remain unaccounted for. Dependence on prisoner interrogation as a lead source ties future strike tempo to detentions elsewhere in the campaign, while fugitives' use of assumed identities will slow, not stop, the tracking effort. Channel 12 supplies the sole primary account, with JNS and RedState offering downstream pickup, leaving the casualty tally uncorroborated by any outlet independent of Israeli broadcast media. The public figure may function as a deterrence signal aimed at remaining fugitives rather than a precise operational accounting.
Sources:
1: Israel has slain 2,561 terrorists who invaded on Oct. 7—report -
2: Secretive Israeli Unit Kills Over 2,500 October 7 Hamas Terrorists -
צדים את כולם: עד כה חוסלו 2,561 ממחבלי טבח 7 באוקטובר ("Hunting them all: 2,561 of the October 7 massacre terrorists eliminated so far") -
France Moves to Remove Intelligence Data From Palantir Systems in Bid to Reduce US Dependence
BLUF: Formal Direction Générale de la Sécurité Intérieure (DGSI) termination of Palantir before January 2028 remains
French Prime Minister
Analyst Note: Formal DGSI termination of Palantir before January 2028 is
Sources:
1: French spies break with data-analysis giant Palantir, wary of relying on US tech -
2: Le renseignement français prend ses distances avec la société américaine Palantir, cofondée par un proche de Donald Trump -
La France va investir 655 millions d'euros supplémentaires pour le développement de l'intelligence artificielle, annonce Sébastien Lecornu -
France removes intelligence data from Palantir -
COLLECTION GAPS
- CISA and FBI joint cybersecurity advisory activity during active US-Iran hostilities.
- IC Inspector General oversight actions relevant to current FBI conduct controversies.
- Five Eyes multilateral intelligence coordination beyond bilateral channels.
- Congressional IC appropriations and NDAA intelligence provisions ahead of FY27.