← Back to Archive
IC BRIEF
Current as of 0234 EDT (UTC-04), Friday 23 October 2026
Contents
10 stories from 38 sources across 35 organizations
KEY JUDGMENTS
Adversary intelligence campaigns against Western elections, exercises, and defense personnel are outpacing countermeasures, as previously assessed. The intelligence community is very unlikely to publicly attribute Russia's Storm-1516 deepfake videos targeting midterm candidates by November 6, leaving campaigns reliant on outside researchers. Moderate confidence rests on lawmaker and private-sector attribution but no official agency comment. Peoples Liberation Army (PLA) operatives intercepted communications at US and South Korean bases 13 times during bilateral exercises, and Taiwan indicted four for leaking military secrets to Chinese contacts.
Western sanctions targeting A7's Sadovod brokers and offshore intermediaries are unlikely by late November, leaving bank de-risking as the primary disruption tool. Another US prisoner release from Russia is unlikely before late December; Hubbard's release was a discrete gesture. High confidence reflects the absence of named prisoners in Russian statements; their appearance would signal active negotiations. The Pentagon's reported sabotage and deep-cover programs lack congressional oversight.
Cybersecurity and Infrastructure Security Agency (CISA) will very likely add the PHP2Shell CVEs to its Known Exploited Vulnerabilities catalog by November 6, triggering mandatory federal remediation; unsupported PHP deployments have no patch path. High confidence reflects joint CISA-NSA advisories and millions of exploitation attempts. Canada's Bill C-22 will likely receive Royal Assent by year's end. Low confidence reflects thin Senate sourcing; passage would force encrypted-communications providers into exit decisions.
IC Operations & Tradecraft
Pentagon Creates Classified Technology Support Office to Sabotage Adversary Defense Technology
BLUF: Standing up a classified sabotage office without clear operational authority or robust oversight invites accountability gaps that budget fights between Special Operations Command (SOCOM), CYBERCOM, and the new office will expose before any operational blowback does.
Politico reported Thursday, citing a dozen current and former national security officials, that Deputy Defense Secretary Steve Feinberg signed an April 14 memo creating a classified Technology Support Office, which merges two classified programs that have run smaller tech-sabotage efforts since 2023 12. Grant Hundley, a former Marine Corps special operations officer, leads the office under the undersecretary for intelligence and security 23. Reported work includes custom hacking tools, supply-chain interference, and deceptions meant to induce adversaries to install faulty weapons components 12. IBTimes UK reported the office lacks authority to conduct operations itself and develops tools for partners acting under their own authorities 2. A former senior intelligence official estimated classified contracts could exceed $1.5 billion, an unconfirmed figure, and Politico reported Special Operations Command and Cyber Command opposed the office over budget concerns 12. Deputy Press Secretary Jacob Bliss called the reporting "simply not true" 12.
Analyst Note: The Pentagon has put a permanent, classified structure behind technology sabotage, and congressional oversight now trails the program rather than shaping it. Only a small group of congressional staff has been read in, and because the office reportedly builds tools for partners acting under their own authorities, accountability for any operation is hard to assign. Special Operations Command and Cyber Command objected over budget, so funding disputes are where the office's real scope should surface first. Confidence is low: every outlet relays a single Politico account, with no document or on-record official confirming structure or budget, and the $1.5 billion contract figure is one official's estimate. The office may instead be a modest administrative merger of two existing programs, as the Pentagon's denial implies.
Sources:
1: Pete Hegseth secret movie-level spy craft agency sparks oversight alarm - Raw Story
2: Pentagon Reportedly Created Secret Tech Sabotage Unit in April to Disrupt Foreign Weapons Programmes - IBTimes UK
3: Pentagon Has Reportedly Set Up a Secret Office for Tech Sabotage - Trending Topics
The Pentagon is quietly building an elite new tech sabotage agency - Politico
Pentagon creates agency for technological sabotage in foreign countries — Politico - TASS
Pentagon Plans Deep Cover Spy Program With Operatives Posing as Business People to Confront China
BLUF: It is unlikely that any congressional committee leader publicly demands a briefing or launches an inquiry into the reported Pentagon deep-cover program within the next 30 days, given the flat official denial and unresolved jurisdictional ambiguity between Title 10 and Title 50 oversight.
The Washington Post reported on October 21, citing half a dozen people familiar with the initiative, that the Pentagon is building a deep-cover program in which operatives pose as businesspeople without overt U.S. government affiliation, as a covert prong of its economic warfare campaign against China 12. Kurdistan24, relaying the Post, reported that Tom Rakusan, a 39-year CIA veteran and senior adviser to Deputy Defense Secretary Steve Feinberg, oversees the effort, which is in planning and not yet operational 34. Pentagon deputy press secretary Jacob Bliss denied the program exists, calling the query "simply not true," and the CIA declined to comment 3. Congressional committees do not appear to have been briefed 3. Global Times, a Chinese state-run outlet, said Beijing's Counter-Espionage Law gives it tools to respond 5.
Analyst Note: Confidence is low because the story rests on one original Washington Post report, with the other outlets amplifying it without independent sourcing, and the Pentagon flatly denies the program exists. Officials describe a hybrid "Title 60" authority that falls between Title 10 and Title 50 oversight lines, which gives Armed Services and Intelligence members a jurisdictional reason to ask questions. It is unlikely that a congressional committee chair or ranking member publicly states a Pentagon briefing on the deep-cover program, or announces a formal inquiry or demand letter about it, between October 23 and November 22. The denial lets the Pentagon decline briefings on a program it says does not exist, and the leak may reflect Pentagon-CIA turf competition, with former CIA officials exposing a rival effort, more than an operational program that will draw oversight. Beijing already frames the report as proof of U.S. economic espionage and may cite it when tightening Counter-Espionage Law enforcement against foreign business personnel. If oversight does materialize, committee staff must prepare for hearings or document demands and Pentagon counsel must defend the authority basis. Without it, planning continues with funding and authorities unexamined.
Sources:
1: Pentagon looks to build a deep-cover spy program to confront China - The Washington Post
2: Pentagon Builds Spy Program for Economic Warfare - Political Wire
3: Pentagon Building Deep-Cover Spy Network Against China - Kurdistan24
4: Pentagon to Develop Deep-Cover Espionage Capabilities to Wage Economic War Against China - Libertarian Institute
5: The Pentagon denies sending 'merchant spies' to China, everyone laughed - Global Times
Russia Says Moscow and Washington Discussing Prisoner Releases Through Intelligence Service Channels
BLUF: Hubbard's release was a discrete diplomatic gesture tied to the Witkoff visit, and it is unlikely that Russia or the United States releases another US-held prisoner before late December.
Russian Deputy Foreign Minister Sergei Ryabkov told TASS that Moscow and Washington are "in dialogue" on releasing prisoners held in Russian penal colonies through intelligence-service channels, and he named no prisoners, according to The Insider 1. NPR reported that Putin said he freed Stephen Hubbard, 74, at Trump's request, announcing it as he met U.S. envoy Steve Witkoff in Saint Petersburg 2. Hubbard had been sentenced in 2024 to nearly seven years for alleged mercenary service in Ukraine 2. Trump wrote on Truth Social that the U.S. gave nothing "in return" and that no "swap" was necessary 2. Report.az, citing a February Russian Foreign Ministry statement, said exchange work runs through intelligence services and details should not be disclosed prematurely 3.
Analyst Note: We have high analytic confidence that Ryabkov's "dialogue" claim signals no working release pipeline, because he named no prisoners and the Foreign Ministry's standing position is that exchange details stay undisclosed until concluded. Hubbard's release was a discrete gesture tied to Witkoff's visit and to the diesel and sanctions track. Moscow gains leverage by describing intelligence-channel talks as ongoing while withholding names, and the sourcing is thin: The Insider and Report.az both relay Russian statements through TASS, and only NPR independently confirms the Hubbard release. It is unlikely that Russia or the United States releases another US citizen or US-linked prisoner from Russia between October 23 and December 22. Moscow may instead be preparing an exchange to stage around the mid-November three-way peace talks, with names withheld to protect sensitive terms, and a named prisoner in official statements would be the first sign. If one appears, State Department and hostage-affairs officials would treat sanctions relief as a working trade for detainees and press for more releases. Otherwise they can keep detainee cases separate from the peace and sanctions talks.
Sources:
1: Moscow and Washington are discussing possible prisoner releases through intelligence channels, Russia says - The Insider
2: Russia releases imprisoned U.S. citizen Stephen Hubbard following Trump's request - NPR
3: Russia says work on prisoner exchanges between it, US goes on via intelligence channels - Report.az
Adversary Intelligence
Warner and Himes Warn of Russian Covert Campaign Targeting Pro-Ukraine US Candidates Ahead of Midterms
BLUF: Partisan disagreement over disclosure and Office of the Director of National Intelligence (ODNI)'s silence mean an official U.S. intelligence community statement attributing the Storm-1516 deepfake videos targeting Talarico to Russia is very unlikely by November 6, leaving public accountability to outside researchers.
Senators and representatives briefed on a classified intelligence community report said Russia has launched a covert online campaign against Democratic and Republican candidates who support Ukraine, Senate Intelligence Vice Chair Mark Warner and House Intelligence ranking member Jim Himes told reporters on Wednesday, according to Politico 1. Warner said the report indicates Moscow is using AI tools to spread its messaging faster, while Himes said the themes include distrust of US institutions and voting machines 1. The Kyiv Independent reported Warner named Senator Jon Ossoff and Texas Senate candidate James Talarico as especially targeted by AI-generated ads 2. Graphika attributed deepfake videos accusing Talarico of sexual assault to Russia-linked Storm-1516 1, and the Kyiv Independent cited NBC News reporting that three research teams likely tie the videos to a Russian government-backed group 2. Himes said intelligence agencies have seen no evidence of Russian attempts to hack election infrastructure or campaign networks 13. A spokesperson for House Intelligence Chair Rick Crawford accused the two Democrats of cherry-picking details of the report 1.
Analyst Note: Confidence is moderate, resting on consistent lawmaker and private-sector attribution but no official ODNI, FBI or CISA comment. The US intelligence community is very unlikely to publicly release an unclassified statement or report attributing the Storm-1516 deepfake videos targeting James Talarico to Russia between October 23 and November 6. Independent corroboration is thin, since the four outlets converge on one lawmaker briefing and the Kyiv Independent and Militarnyi draw on Politico. Attribution so far comes from Graphika, research teams and Democratic lawmakers, whose characterization the House Intelligence chair's office disputes as selective. That partisan fight over disclosure, plus ODNI's silence, leaves public attribution with nongovernment researchers and X through the November 3 election, though Warner and Himes may keep disclosing details after the classified briefing scheduled next week. Officials may also be silent because the classified report never names the Talarico videos, which would mean no attributable intelligence rather than a choice to withhold. Without an official statement, campaigns and platforms must rely on Graphika and lawmaker briefings rather than act on government attribution before polling day.
Sources:
1: Russia launched covert influence campaign to undermine US candidates supportive of Ukraine, lawmakers say - Politico
2: Russian disinformation campaign targets pro-Ukraine candidates ahead of midterms, lawmakers say - Kyiv Independent
3: Russia Launches Disinformation Campaign Against Pro-Ukrainian Politicians in USA Ahead of Elections - Militarnyi
Early Edition: October 22, 2026 - Just Security
Former PLA Officer Intercepted Communications at US-South Korea Military Bases During Joint Exercises 13 Times
BLUF: Documented PLA collection against allied exercises gives Washington concrete grounds to further restrict intelligence sharing with Seoul until Korea closes its counterintelligence gaps.
The Korea JoongAng Daily reported, citing an indictment obtained from the Ministry of Justice by People Power Party Rep. Kim Meen-geon, that a former PLA lieutenant colonel with 40 years in a signals-intelligence unit intercepted communications at Korean and US bases 13 times between March 2024 and August 2026, seven during bilateral or trilateral exercises 1. The Korea Times, citing the Pyeongtaek branch of the Suwon District Prosecutors Office, said he allegedly smuggled 13.9 terabytes of intercepted data to China 2. Kunsan Air Base was targeted in seven operations, and prosecutors indicted him on September 1 1. The Herald Business reported that police arrested him as "B" on general treason and communications secrets charges, that he used a software-defined radio near Gunsan Airport, and that he told investigators listening to aircraft communications was "a hobby" 3. A second former PLA member, a 45-year-old special forces veteran, allegedly stole exercise data 12 times and recruited a civilian worker and soldiers at Camp Humphreys 23. Korea Daily gives the end date as August 2028 and the age as 64, which conflicts with the other outlets 4.
Analyst Note: Seoul's counterintelligence gap is now an alliance problem rather than a policing one. A retired PLA signals officer collected near Kunsan, Camp Humphreys, Busan and Gwangju, and a second ex-PLA member allegedly recruited insiders at Camp Humphreys. Collection timed against Freedom Shield, Freedom Flag, Freedom Edge and Ulchi Freedom Shield points to deliberate targeting of allied exercises, which undercuts the suspect's "hobby" explanation, though opportunistic radio monitoring drawn by heavy air activity remains possible. Washington has already restricted some North Korea intelligence shared with Seoul, and these cases give US officials grounds to extend that. Prosecutors used older provisions because the revised espionage law took effect only September 13, leaving it untested. Confidence is high: four outlets report the core facts consistently from a prosecutors' indictment, though they share that single source, and one outlet's age and end-date discrepancies appear to be errors.
Sources:
1: Alleged Chinese spy snooping on drills with US puts fresh pressure on Korea counterintelligence system - Korea JoongAng Daily
2: 2 former Chinese soldiers indicted for leaking secrets from Korean, US military - The Korea Times
3: Two ex-PLA soldiers arrested for spying near US military bases in South Korea - The Herald Business
4: US-South Korea military intelligence — China Spies Target Allied Drills - Korea Daily
ICIJ Investigation Reveals Kremlin-Backed A7 Processed 283 Tons of Untraceable Cash Through Moscow Markets
BLUF: Western sanctions against A7's broader cash-handling network, including Sadovod brokers and offshore intermediaries, are unlikely by late November, leaving bank de-risking as the primary near-term disruption mechanism.
An International Consortium of Investigative Journalists (ICIJ) and Proekt investigation based on leaked internal A7 records found the Russian state-backed payment network processed at least 283 tons of cash rubles, worth over $14 billion, between November 2024 and July 2025 123. Agents Media, citing the records, reported monthly volume peaked at 250 billion rubles in June 2025, at least 58 tons 3. At least eight broker teams at Moscow's Sadovod market bag the cash for delivery to A7's cashiers and then to co-owner Promsvyazbank, which credits A7 accounts 13. Offshore intermediaries then pay mostly Chinese suppliers, with the cash origin absent from the bank transfers 23. A7 did not respond to ICIJ, and has publicly denied wrongdoing after the U.S. Treasury sanctioned it on October 1 1.
Analyst Note: Confidence is moderate, because all coverage traces to one ICIJ and Proekt investigation, and The Insider, Agents Media and UA.News add rewrites rather than independent collection. Treasury's October 1 designation already reached A7 itself, so no follow-on package is visible, and brokers and intermediaries now face exposure mainly through bank de-risking. It is unlikely that the US Treasury, the UK or the EU designates an individual or entity explicitly tied to A7's cash-handling network, such as Sadovod brokers or offshore intermediaries, between October 23 and November 22. Hong Kong and Chinese correspondent banks may begin reviewing ruble-linked flows from Kyrgyz and offshore intermediaries after the leak. The records may instead prompt rapid designations of Sadovod brokers and offshore intermediaries, since they name actionable targets sanctions authorities previously lacked. It is unresolved whether A7 or the brokers verify cash origin, which determines how far laundering liability extends. If designations come, compliance teams and correspondent banks would need to cut off A7-linked accounts immediately. Without them, banks manage exposure through their own screening, and enforcement planners can stay focused on A7's core entities.
Sources:
1: Kremlin payment firm A7 has been pumping billions in untraceable cash into global financial system - ICIJ
2: Агенты платежной сети A7 Илана Шора собрали на рынках Москвы 283 тонны наличных рублей за девять месяцев. Это сумма, эквивалентная $14 млрд - The Insider
3: Поддерживаемый Кремлем платежный гигант А7 собрал на столичных рынках 283 тонны наличных денег - Агентство (Agents Media)
Moscow merchants transferred money to China through the A7 network - UA.News
Taiwan Indicts Four Over Classified Military Secrets Leak to Chinese Contacts
BLUF: Beijing's use of cryptocurrency cutouts and retired officers as financial intermediaries reveals tradecraft designed to insulate active-duty sources, and it is unlikely that a Taiwanese court issues a first-instance verdict against any defendant by the end of 2026.
The Taiwan High Prosecutors' Office indicted four people on October 19 for allegedly helping Chinese contacts pay Taiwanese personnel for classified military information, according to the Epoch Times 1 and Taipei Times 2. Former service members Lee and Sen allegedly passed material while serving, Lee from about March 2024 to August 2025 and Sen from about late 2023 to March 2025 12. Coast Guard member Tsai allegedly lent a bank account, and retired captain Yu Cheng-yu, already indicted separately, allegedly converted cryptocurrency from March to October 2024 into cash deposited in Lee's and Tsai's accounts 12. Prosecutors say Lee received NT$884,000, Sen and Tsai together NT$515,000, and Yu NT$430,403 12; Central News Agency (CNA), cited by the Epoch Times, reported Lee and Sen are detained while Tsai and Yu are on bail 1.
Analyst Note: The case reached the High Court only on October 19, with Lee and Sen in pretrial detention, so the next visible steps are preparatory hearings and evidence review, not sentencing. It is unlikely that a Taiwanese court issues a first-instance verdict against at least one of the four defendants by the end of 2026. Confidence is high because reporting on the procedural stage is consistent and nothing suggests an accelerated schedule, though both outlets rest on one prosecutorial announcement and add little independent verification. The payment trail, running through cryptocurrency conversion and borrowed bank accounts, shows Chinese handlers using intermediaries to avoid direct transfers to serving personnel. Yu's continued role as a conduit after his earlier indictment points to gaps in monitoring retirees. Guilty pleas and cooperation could still bring a ruling within weeks, and a verdict before year-end would let Taiwan's defense and coast guard authorities cite sentencing precedent in revising vetting and financial-monitoring rules. Without one, those reviews wait into 2027.
Sources:
1: Taiwan Indicts 4 Over Alleged Leak of Military Secrets to China - Epoch Times
2: Four indicted in alleged espionage case - Taipei Times
IC Technology & Cyber
NSA and CISA Issue Joint Advisory Urging Immediate Patching of Critical PHP2Shell Vulnerabilities
BLUF: CISA will very likely add the PHP2Shell CVEs to its Known Exploited Vulnerabilities catalog by November 6, triggering mandatory remediation timelines for federal agencies while leaving organizations on unsupported PHP versions with no patch path.
CISA and NSA each issued advisories on October 21 urging immediate patching of the PHP flaws CVE-2026-109618 and CVE-2026-109619, nicknamed "php2shell," which allow unauthenticated remote code execution 12. CISA directs updates to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35 and said it had not observed exploitation at publication 1. NSA said cyber actors are likely to weaponize the flaws and advised taking systems offline if they cannot be updated immediately 2. The Epoch Times reported that Cloudflare CEO Matthew Prince posted on October 22 that exploitation attempts rose from thousands before the announcement to millions 3. It also reported that 32 UK government services were unavailable, as were several Dutch government sites and Denmark's Aula school platform 3.
Analyst Note: We have high confidence in this assessment because the CISA and NSA advisories agree on severity and remediation, and the reported jump in exploitation attempts fits active scanning. CISA will very likely add CVE-2026-109618 or CVE-2026-109619 to its Known Exploited Vulnerabilities catalog by November 6. Federal agencies would then face a binding remediation deadline, and civilian operators would have to treat the patch as a compliance item as well as a security fix. PHP often sits inside other software, so many organizations cannot see their exposure, and the government shutdowns in the UK, Netherlands and Denmark show what delay costs. Deployments on unsupported PHP 8.1 and earlier have no patch path and will stay exposed until replaced or taken offline. A catalog listing may still not come if the surge is mostly automated scanning without confirmed compromises, or if broad patching and shutdowns blunt exploitation before agencies can document it. That would leave the timeline to voluntary action and let teams stage updates by exposure.
Sources:
1: Critical Vulnerabilities in PHP Require Immediate Patching - CISA
2: NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities - National Security Agency/Central Security Service
3: US Cybersecurity Agencies Urge Immediate Fix for Bug Threatening Millions of Websites - The Epoch Times
NSA, CISA Urge Immediate Patching of Critical PHP2Shell Vulnerabilities - ExecutiveGov
NIST NSA and CISA Publish Joint Guidance on Incident Readiness for Autonomous Super Intelligence Systems
BLUF: Voluntary reporting and the absence of any legal mandate mean this guidance gives frontier labs a compliance shield without guaranteeing the disclosure it was designed to produce.
National Institute of Standards and Technology (NIST)'s Center for Advancing Innovation and Standards for Super Intelligence, the NSA's Super Intelligence Security Center and CISA issued a 14-page document of ten voluntary key practices, dated October 16, for incidents during super intelligence training and evaluation 12. It targets "SI control incidents," in which agents take uninstructed actions that compromise operator-imposed controls or human oversight 1. Organized across preparation, detection, response, recovery and reporting, the practices call for least-privilege access, allowlisted network egress through monitored gateways, monitoring of the model, harness, host and network layers, and rebuilding affected environments from verified baselines 12. Industrial Cyber, SecurityWeek and ExecutiveGov covered the release on October 20 234. The guidance asks organizations to report incidents and near-misses to CISA and to share SI-specific details with NIST Center for Advancing Innovation and Standards for Super Intelligence (CAISSI) and NSA Super Intelligence Security Center (SISC) 12.
Analyst Note: Frontier labs now have a federal reference standard for agent control failures, and outside auditors can measure them against it. The ten practices extend NIST SP 800-61r3 into areas it never addressed: monitors that agents may attack, recovery steps that could reinforce the behavior behind an incident, and incidents that never touch a cyber target. Reporting is voluntary, so disclosure rests on developer goodwill rather than legal duty. Labs adopting egress allowlists, tamper-resistant logging and baseline rebuilds will bear the cost first, and procurement language may adopt the document next. The guidance may instead mainly signal government engagement and template later regulation, since it has no enforcement mechanism and the labs already run internal incident programs. Confidence is high, because the primary document and three secondary outlets report its contents consistently.
Sources:
1: Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation - NIST (with NSA SISC and CISA)
2: CISA, NSA, NIST urge safeguards, continuous monitoring, incident reporting for autonomous super intelligence systems - Industrial Cyber
3: US Agencies Detail Incident Response Practices for Rogue AI Agents - SecurityWeek
4: NIST, NSA, CISA Issue AI Incident Response Practices - ExecutiveGov
Allied Intelligence
Canadian Senate Debates Bill C-22 Giving Intelligence Services Backdoor Access to Encrypted Communications
BLUF: Bill C-22 will likely receive Royal Assent by year's end, forcing Signal and NordVPN to act on stated threats to exit Canada.
Bill C-22, the Lawful Access Act, passed third reading in the House of Commons after the Liberal government limited debate, BetaKit reported 1. The amended bill cut the proposed metadata retention period from one year to six months 1, though the Electronic Frontier Foundation said on October 22 that it still requires retention for up to a year 2. Michael Geist wrote on October 1 that the bill now says nothing compels a provider to decrypt unless it supplied the encryption and holds the key, while a carve-out excludes persons already subject to a warrant from the "systemic vulnerability" definition 3. Geist also reported that the Royal Canadian Mounted Police (RCMP) told a House committee in May that police wanted the bill for access to encrypted communications, and that nearly two dozen technology companies and groups say the provisions still put users at risk 3. The Canadian Civil Liberties Association is petitioning the Senate, where some senators have raised constitutional concerns, according to the Electronic Frontier Foundation (EFF) 2.
Analyst Note: Since May the bill has cleared the Commons under limited debate, halved proposed metadata retention to six months, and limited decryption duties to providers holding the key, though the warrant-target carve-out remains contested. Bill C-22 will likely receive Royal Assent between October 23 and December 31, 2026. Confidence is low because the only contemporaneous Senate indicator is the EFF's report of unnamed senators' constitutional concerns, with no visible committee calendar or vote count. Sourcing is thin, resting on one commentary, one trade outlet and an advocacy group, and the sources diverge on retention terms. The text leaves both camps unsatisfied, since police want a decryption mandate while about two dozen technology firms say users remain at risk. Senate amendments could return the bill to the Commons and push passage into 2027. If it passes, Signal and NordVPN face live exit decisions and Five Eyes partners must settle data-sharing terms. A delay lets providers hold those decisions and lobby through the winter.
Sources:
1: Bill C-22 passes third reading after Liberals adopt measures to limit debate - BetaKit
2: Canadians Are Running Out Of Time To Oppose The Dangerous C-22 Surveillance Bill - Electronic Frontier Foundation
3: Is Compromise on Encryption Possible? Why Bill C-22's "Minor Opening" Leaves the Central Question Unanswered - Michael Geist (Substack)
Prior Reporting
COLLECTION GAPS
- Five Eyes intelligence cooperation and allied service restructurings outside the Canadian surveillance bill
- Iranian, North Korean, and Hezbollah intelligence service operations and exposed tradecraft
- US IC workforce and organizational changes, including clearance processing and agency restructurings
- Congressional oversight of IC programs beyond the Russia influence briefing, including FISA 702 and inspector general investigations