//
OFFLINE — VIEWING CACHED CONTENT
← Back to Archive

IC BRIEF

Current as of 0333 EST (UTC-05), Saturday 07 November 2026

Contents

10 stories from 40 sources across 35 organizations

KEY JUDGMENTS

Midterm losses, leadership vacancies and budget scrutiny are simultaneously straining U.S. intelligence and national security capacity into 2027. Collins's departure from the Senate intelligence committee and Turner's from the House remove Republican oversight voices as incoming Democratic chairs prepare Department of Justice (DOJ), FBI and Iran war-authorization investigations. Subpoenas to those agencies are very unlikely before December 31, since the new majority cannot compel testimony until January. This deepens the assessment; an early subpoena or privilege concession would alter the timeline.

Office of the Director of National Intelligence (ODNI) is recalling detailees to rebuild integration capacity after the Gabbard-Pulte cuts, but Office of Management and Budget (OMB) Director Vought now controls intelligence budgets; formal actions from the review are unlikely by mid-December, though Vought can reshape accounts through apportionment. Eisenberg's resignation leaves the National Security Division under acting leadership, and a nominee is very unlikely by mid-December. Moderate confidence rests on consistent but single-sourced reporting. A formal ODNI hiring plan or OMB action would signal the outcome.

Separately, Yaroch's guilty plea to stealing $2.47 million in crypto via credentials from 35 FBI investigations exposes systemic gaps in crypto-custody controls; an IG review of seized-asset access would confirm the institutional response.

Poland will very likely announce at least one more Russia-linked detention by early December, as the 21 searches yielded materials under analysis.

IC Oversight & Policy

White House OMB Investigating Intelligence Community Black Budget Spending After CIA Officer Fraud Case

BLUF: OMB's classified spending review is unlikely to produce public findings or formal budget actions by mid-December, but Vought's direct control of intelligence accounts gives him tools to reshape spending without any announcement.

NBC News reported, citing four people with knowledge of the review, that the White House Office of Management and Budget is examining intelligence agencies' classified "black budget" to determine whether money was misspent over years of clandestine operations 12. The scrutiny has accelerated since former senior CIA officer David Rush pleaded guilty to defrauding U.S. officials and contractors of nearly $200 million, including $40 million in gold bars found at his home, and Rush faces up to 20 years at a January sentencing 2. Two sources told NBC the CIA arrived at OMB meetings without answers, which a CIA spokesperson called "demonstrably false and inaccurate" 2. The Record, citing four people familiar, reported that OMB Director Russell Vought personally took over day-to-day oversight of intelligence budgets after Amaryllis Fox Kennedy's departure, and OMB did not respond to a request for comment 3.

Analyst Note: We have moderate confidence in this assessment, because the reporting rests on one primary NBC account from anonymous sources, The Record adds a separate anonymous account, and no outlet has shown what the review team has found. OMB cannot compel testimony and is working through classified programs, which slows any releasable product. It is unlikely that OMB or the White House publicly announces formal findings, or takes a formal action such as budget cuts, a freeze or a new oversight mandate, from its review of intelligence community classified spending by December 15, 2026. Budget Director Vought's direct control of the intelligence accounts lets him act through apportionment and budget guidance without announcement. The Rush case has shifted from a criminal fraud matter into a White House rationale for scrutinizing intelligence budgets. The leaks may instead be pressure on the CIA and a political case for downsizing the community, in which case little formal output should be expected. If a formal finding or action does emerge, agencies and appropriators must prepare for cuts or new oversight rules in the fiscal 2027 cycle. If none does, CIA leaders can treat the review as informal pressure and focus on the Rush damage assessment and the January sentencing, the next points where pressure on the CIA could surface, alongside the incoming House Democratic majority.

Sources:

1: U.S. intel agencies' 'dark money' budget under White House scrutiny, sources say - NBC News

2: CIA stonewalls the White House as the probe into its black budget heats up - Raw Story

3: An intelligence budget 'super user' job is now in the hands of Russ Vought - The Record

White House goes after intelligence community for 'black box' spending - Alternet

Prior Reporting

DOJ National Security Division Chief John Eisenberg Resigns

BLUF: Three senior DOJ departures in two days leave the National Security Division under acting leadership during a period of career attrition, and a nominee announcement by mid-December is very unlikely to happen.

Attorney General Todd Blanche announced on X on Friday that John Eisenberg, assistant attorney general for the National Security Division, resigned, thanking him for strengthening the nation's ability to address threats, per CBS News 1. Fox News reported that Blanche announced it shortly after Fox learned of the departure 2. Southern District of Florida U.S. Attorney Jason Reding Quiñones resigned under an hour earlier, and Civil Rights Division head Harmeet Dhillon announced her exit Thursday, though she told Fox News Digital she had tried to resign three weeks earlier and was asked by chief of staff Susie Wiles to stay until after the midterms 2. CBS News reported that the division, which lost many career staff over the past year, oversaw the review of about 5.2 million pages of Epstein files, and that Eisenberg was sworn in on June 5, 2025 13.

Analyst Note: The National Security Division will operate under acting leadership through the handover to a Democratic House, and its approval role over counterterrorism, leak and export control cases will continue without a confirmed head. The White House announcing a nominee for Assistant Attorney General for the National Security Division by December 15, 2026 is very unlikely to happen. Confidence is moderate: reporting of the resignation is consistent, but it traces to one original CBS account that the other outlets repeat, and no shortlist or vetting is visible. Three senior departures in two days cluster after the midterms, yet Dhillon's delayed resignation suggests ordinary post-election turnover and personal timing rather than a coordinated exit. Losing the political head compounds the career counterterrorism attrition reported in March, so case review and interagency consultation may slow. A nominee named by mid-December would let Republicans start confirmation before the new Congress seats. Otherwise agencies must plan around acting leadership into 2027, when a Democratic Senate would control confirmation.

Sources:

1: Top lawyer in DOJ's National Security Division abruptly resigns - CBS News

2: DOJ shake-up continues with head of national security division, US attorney in Miami resigning - Fox News

3: Top DOJ National Security Official John Eisenberg Resigns - Badlands Media

Justice Department's Eisenberg Resigns, AG Blanche Says - U.S. News & World Report

Prior Reporting

Former HPSCI Chair Turner Loses Ohio Seat While SSCI Member Collins Falls in Maine as Midterms Hollow Out Republican Intelligence Expertise in Congress

BLUF: Loss of Collins and Turner strips Republicans of seasoned intelligence and defense oversight voices just as Democratic committee chairs inherit leverage over Pentagon budgets and war authorities.

The Associated Press called Maine's Senate race for Democrat Troy Jackson over Republican Susan Collins on Tuesday night, NPR reported 1. Collins sat on the Senate intelligence committee and led the defense appropriations subcommittee, The National reported 2, while Aerohaber described her as Appropriations Committee chairwoman 3. Former House Intelligence Committee chairman Mike Turner lost Ohio's 10th District to Democrat Kristina Knickerbocker, according to The National 2. Aerohaber, published earlier, had Knickerbocker ahead by about 1 percent with 98 percent counted and the race uncalled 3. The National reported Jack Reed and Adam Smith are expected to chair the Senate and House armed services committees, pending formal confirmation 2.

Analyst Note: Republican intelligence and defense expertise in Congress thins sharply in January as Collins leaves the Senate intelligence committee and the defense appropriations gavel, and Turner leaves the House. With Reed and Adam Smith positioned to run the armed services panels, Pentagon budget requests and Iran war authorities face Democratic oversight with fewer GOP defense voices to defend them. Collins broke with the administration on Ukraine aid and the Hegseth confirmation, so her exit removes a Republican appropriator who constrained executive requests from inside the majority. Turner's loss is reported but unconfirmed, since one account had the race uncalled at 98 percent counted. Confidence is high, based on the AP call of Maine carried by NPR and consistent secondary accounts of the committee shifts, though Ohio rests on a single outlet. The losses may matter less than they appear, since both were often outvoted within their own party and Democratic chairs could produce more bipartisan defense legislation.

Sources:

1: Troy Jackson wins Maine Senate race over Susan Collins, in big victory for Democrats - NPR

2: Who’s in and who’s out of US foreign policy circles after Republicans lose the midterms? - The National

3: Congress's Defense Advocates Take Big Hit In 2026 Midterm Elections - Aerohaber

Key midterm election results - Roll Call

Prior Reporting

House Democrats Plan Investigations Into Politicization of DOJ and FBI Including Prosecutions of Former Directors Comey and Brennan and Iran War Authorization

BLUF: Democrats' planned DOJ and FBI investigations will generate political heat immediately, but subpoenas to those agencies are very unlikely before December 31, 2026, because the new majority cannot wield compulsory power until January.

Democrats secured House control on Tuesday, according to an ABC News projection 1, and Rep. Robert Garcia, the expected Oversight chairman, replied with a two-word statement: "Lawyer up" 12. ABC reports Rep. Jamie Raskin, the expected Judiciary chairman, intends to probe the prosecutions and investigations of Comey, Letitia James and John Brennan, along with career prosecutor firings and the $1.8 billion "Anti-Weaponization fund" 1. Rep. Adam Smith, the expected Armed Services chairman, plans to examine the decision to launch the Iran war on February 28 without congressional authorization 1. Bloomberg Law cited former Hill counsel who expect early oversight letters and court action if refused, and who expect DOJ to assert broad executive privilege 3.

Analyst Note: House Democrats will make DOJ and FBI their first oversight target once seated in January, and the administration will answer with broad executive privilege claims rather than document production, with oversight letters on the Comey, James and Brennan prosecutions and the career prosecutor firings expected within weeks. A House committee is very unlikely to issue a subpoena to DOJ, FBI or ODNI officials or records tied to these investigations by December 31, 2026. Confidence is high because four outlets report consistently, with ABC News as the primary account and NPR, MS NOW and Bloomberg Law independently converging on the same committee plans, and because the majority cannot compel anything before it takes the gavel. Democrats may instead prioritize affordability, health care and tariff legislation, limiting early output to letters and hearings. Absent a subpoena this year, DOJ, FBI and ODNI leaders and outside counsel can plan for voluntary-request negotiations and privilege assertions in early 2027. An earlier subpoena would force immediate litigation and records preservation, and third-party subpoenas to contractors and former employees, plus DOJ suits to block disclosures, are the next indicators.

Sources:

1: Democrats take the House: what they plan to investigate - ABC News

2: 'Lawyer up': A new Democratic majority prepares for a slate of Trump investigations - MS NOW

3: Democrats Prep DOJ Subpoenas, Oversight Tools With Majority Win - Bloomberg Law

Back in the majority, Democrats have plans for a long list of Trump investigations - NPR

Adversary Intelligence

Greek National Pleads Not Guilty to Charges of Spying on Iran International Journalist in UK on Behalf of Iran

BLUF: Iran's reliance on EU-resident proxies to surveil exiled journalists in Britain signals an operational pattern that will sustain elevated threat levels for diaspora media staff well beyond the May 2027 trial.

Ioannis Aidinidis, 46, a Greek national born in Georgia who lived in Munich, pleaded not guilty at the Old Bailey on Friday to charges under Britain's National Security Act, appearing by video link from Belmarsh Prison through a Russian interpreter 12. He was remanded in custody ahead of a trial in May 2027 23. Prosecutors said he travelled to Britain in April and May to surveil an Iran International journalist, photographing addresses and number plates, and that on the second trip he installed a covert camera hidden in a sock, capable of sending data "to persons unknown abroad" 1. ProtoThema, citing Bloomberg, placed the monitored locations in London and Brighton 2. Police previously said his actions were believed to be on behalf of Iran, and Tehran has repeatedly denied involvement in plots in Britain 34.

Analyst Note: Iran is using EU-resident third-country nationals to surveil Iran International staff in Britain, and Aidinidis's not-guilty plea means a disputed trial rather than an early guilty plea. The sock-hidden camera, able to transmit abroad, indicates a handler outside the UK receiving live collection, so the tasking chain remains untraced publicly. With trial set for May 2027, evidence and any attribution to Iranian intelligence stay inside court proceedings for six months, Tehran will keep denying involvement, and protection for exiled-media staff in London and Brighton will stay elevated. Aidinidis may instead be a paid freelancer for a criminal intermediary, with Iranian direction inferred by police, which a defence case could exploit. Confidence is high given consistent reporting from five outlets and two primary hearing accounts, though the three secondary pieces restate the same details and the Iranian link rests on police belief, not tested evidence.

Sources:

1: Greek national to face trial for spying on Iranian journalist in UK - The National

2: Greek national accused of spying for Iran pleads not guilty in UK court - ProtoThema English

3: Greek national pleads not guilty in UK court to assisting a foreign intelligence service - Cyprus Mail

4: Greek national in UK denies spying on journalist for Iran - The Jerusalem Post

Greek National Pleads Not Guilty to UK Spying Charges Linked to Iran - Bloomberg

Prior Reporting

Poland Arrests Six Suspects Working for Russian Intelligence and Supplying Military Components

BLUF: Poland will very likely announce at least one more Russia-linked espionage or sabotage detention by early December, as this case exposes a procurement network whose threads remain under active investigation.

Poland's Internal Security Agency (ABW) stated on Thursday that it apprehended six people suspected of working for Russian intelligence and unlawfully supplying military components to Russia 1. Minister-coordinator Tomasz Siemoniak stated the suspects are five Polish nationals aged 25 to 52 and a 37-year-old Russian woman 1. All six face charges of participating in an organized criminal group and of violating rules on trade in strategically important goods, and four also face espionage charges 1. A court ordered those four held for three months, while the other two received non-custodial measures 1. ABW officers searched 21 locations in Warmia-Masuria, Pomerania and Greater Poland between October 21 and November 2, and the National Prosecutor's Office in Bialystok is supervising the case 1. Euronews and Bloomberg carried the same account 23.

Analyst Note: The case moves the story from a cartridge-case smuggling network to espionage charges against four of six detainees, with a Russian national among them, and it suggests Moscow is sourcing munitions inputs through ordinary buyers and couriers rather than trained officers, widening the pool Warsaw must monitor. We have high confidence, based on a steady run of comparable ABW announcements and an investigation that has already exposed a procurement channel to follow. Polish authorities will very likely announce at least one new detention of a person suspected of spying or sabotage for Russia between November 8 and December 7. The 21 searches produced devices and records still under analysis, so arrests could reach suppliers, freight carriers and the woman's contacts. Euronews, Bloomberg and Anadolu all repeat the same official statements, so their agreement reflects one upstream source. Warsaw may be publicizing the case to build support for tighter export enforcement, and the group may be a criminal ring under only loose Russian direction. If more arrests follow, customs and export-licensing authorities should tighten controls on ammunition components and dual-use goods.

Sources:

1: Poland detains 6 suspected of spying for Russia, supplying military components - Anadolu Agency

2: Poland arrests six suspected of spying for Russia and supplying its military - Euronews

3: Poland Detains Six Over Russian Military Components Supply Ring - Bloomberg

Prior Reporting

IC Workforce & Organization

ODNI Director Clayton Quietly Rehiring Employees Fired During Gabbard-Pulte Workforce Purge

BLUF: Clayton's quiet recall of detailees signals an attempt to restore ODNI's core integration mission, but without White House backing the effort may stall well short of reversing the damage from halving the workforce.

Director of National Intelligence Jay Clayton is requesting some employees who were let go to return to the Office of the Director of National Intelligence, according to NBC News reporting relayed by Political Wire and Alternet, which cite three people with knowledge of the matter 12. The effort so far targets staff who had been detailed to ODNI from the 18 intelligence agencies it oversees and were sent back to their home agencies in the cuts 12. NBC reported that ODNI has fewer than 1,000 employees, down from slightly more than 2,000 at the start of the administration, and its sources did not know how many former staff have been approached 23. The cuts were made under former directors Tulsi Gabbard, who announced her resignation in May, and Bill Pulte 23.

Analyst Note: Clayton's outreach to former detailees suggests the new Director of National Intelligence (DNI) is attempting to rebuild ODNI's integration function after cuts that left it under 1,000 staff. Detailees are the cheapest group to recover because their home agencies hold their clearances and tradecraft, so coordination capacity may return quicker than headcount. This reverses the direction set by Pulte's cuts, which gutted mission integration. The outreach may instead be a narrow, short-term fix for specific staffing gaps, leaving the downsizing and the White House preference for a smaller ODNI intact, as Trump stated in June. Scale and White House backing are unobserved, since sources did not know how many staff were approached. Confidence is low: the story rests on one NBC report from three anonymous sources, which other outlets only repeat, with no confirmation from ODNI or an approached employee. A formal hiring plan, an agency-head detailee quota, or a presidential statement would show whether this is policy or a quiet workaround.

Sources:

1: New Intelligence Chief Trying to Reverse Staff Cuts - Political Wire

2: Trump official quietly begging employees back after brutal firings: sources - Alternet

3: Trump official quietly begging employees back after brutal firings: sources - MSN (Alternet syndication)

New intelligence chief trying to reverse staff cuts - NBC News

Prior Reporting

IC Operations & Tradecraft

Ex-FBI Counterintelligence Supervisor Patrick Yaroch Pleads Guilty to Stealing $2.47M in Crypto From Foreign Adversary Using Classified Access

BLUF: Yaroch's undetected exploitation of credentials across 35 investigations signals systemic gaps in FBI crypto-custody controls that will force a broad operational damage assessment.

Former FBI counterintelligence supervisor Patrick Yaroch, 37, of Ashburn, Virginia, pleaded guilty on November 5 in federal court in Alexandria to wire fraud and money laundering, the US Attorney's Office for the Eastern District of Virginia and Justice Department said, per Decrypt 1. Decrypt reported the plea statement of facts put the theft at about $2.47 million in crypto, via roughly 100 transfers using credentials from 35 FBI investigations 1. The Washington Post reported earlier figures of about $1 million taken from an unnamed adversarial nation's wallets 23, and the Detroit News headline cites over $2 million 4. Yaroch self-reported on July 29, initially describing 10 to 12 transfers under $1 million, and faces up to 20 years, with sentencing set for March 4, 2027 1.

Analyst Note: Yaroch's plea shows one cleared counterintelligence supervisor could drain wallets tied to 35 FBI investigations for months without internal detection, and prosecutors say the theft exposed sources and methods in foreign intelligence collection, including at least one FBI-created operational wallet. The loss grew from about $1 million at his August arrest to $2.47 million in the plea facts, and his July 29 self-report of 10 to 12 transfers understated roughly 100 by an order of magnitude. The gap may instead reflect prosecutors finding transfers after the confession, measuring investigative reach rather than his candor. The FBI and Justice Department must treat every case in which he held credentials as potentially burned and review how seized crypto keys are stored and accessed. Confidence is high, based on the Justice Department plea and statement of facts relayed by Decrypt and consistent independent reporting on the conduct, though the loss figure remains contested across outlets.

Sources:

1: Former FBI Agent Pleads Guilty to Stealing $2.5M in Crypto From 35 Investigations - Decrypt

2: Ex-FBI agent set to plead guilty to stealing $1 million in crypto - The Washington Post

3: Ex-FBI Agent Accused of Stealing $1M in Crypto Plans to Plead Guilty - Tickle The Wire / Washington Post

4: Ex-FBI agent stole over $2 million in crypto, including from crime victims - The Detroit News

Prior Reporting

IC Technology & Cyber

NSA, CISA, and Australian ASD Release Joint Post-Quantum Cryptography Vendor Readiness Guidance

BLUF: Procurement teams now have a trilateral benchmark to pressure vendors on post-quantum readiness, giving contract renewals real leverage over suppliers who lack credible Post-Quantum Cryptography (PQC) migration plans.

The National Security Agency, Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Signals Directorate's Australian Cyber Security Centre (ACSC) jointly issued "Post-quantum questions to ask your vendors" on November 4, according to NSA's press release 12. The guidance supplies vendor-neutral questions for procurement, contract renewals and ongoing vendor assurance, organized by five phases of an organization's post-quantum cryptography (PQC) transition, from inventorying cryptographic dependencies to communicating with vendors 1. ISSSource reported that an accompanying quick-reference list contains the full question set by phase, and that the guidance targets long-term and cloud service contracts 3. ISSSource also reported that the guidance flags industrial control systems, legacy systems and IoT devices, where cryptography is hard to update and needs vendor support or replacement 3. ExecutiveGov covered the release on November 5 4.

Analyst Note: NSA, CISA and Australian Signals Directorate (ASD)'s ACSC give procurement and vendor-management teams a common checklist for testing whether suppliers can support a post-quantum transition. Tying questions to the five transition phases lets buyers demand cryptographic inventories and PQC roadmaps before signing long-term or cloud service contracts. Operators of industrial control systems, legacy systems and IoT devices face the sharpest exposure, since their cryptography is hard to update and needs vendor support or replacement. Vendors that cannot answer will draw closer scrutiny at renewals, though the guidance treats early reluctance as non-disqualifying if the vendor engages openly. The release may instead serve mainly as a signal to vendors, building market pressure for roadmaps, and not as a tool buyers will apply systematically. Confidence is high: two primary agency publications agree on scope and structure, and two secondary outlets repeat them without contradiction.

Sources:

1: NSA Joins ASD's ACSC and CISA to Provide Practical Questions to Evaluate Third-Party Readiness for Post-Quantum Cryptography - National Security Agency

2: Post-quantum questions to ask your vendors - Australian Signals Directorate's ACSC

3: Guidance on Quantum Questions for Vendors - ISSSource

4: NSA Releases Joint Guidance to Gauge Vendor Post-Quantum Readiness - ExecutiveGov

Allied Intelligence

Times of Israel: PM and Mossad Chief Planned Iran Operation on Eve of Election, Thwarted After US Tip-Off

BLUF: Washington's reported intervention to halt an Israeli strike on the eve of the October 27 election positions the US as the primary constraint on Israeli escalation against Iran during ongoing negotiations.

Israeli Channel 12 reported on Friday, in an unsourced and unconfirmed account broadcast under military censorship, that Prime Minister Benjamin Netanyahu and Mossad chief Roman Gofman sought an unspecified operation against Iran on the eve of the October 27 election 123. Other senior security officials reportedly opposed it, fearing escalation that could prevent the vote 1. Channel 12 said a mistake by an Israeli security operative tipped off the US, which quickly moved to quash the plan 12. The Prime Minister's Office denied the report, saying Netanyahu clarified in real time that an attack before the election was not on the agenda 1. Earlier, Channel 12 had reported on October 25 that Chief of Staff Eyal Zamir resisted an instruction from Netanyahu for military action that officials feared could trigger a flare-up with Iran 1.

Analyst Note: Netanyahu and Mossad chief Gofman reportedly pursued an Iran operation days before the October 27 vote, and Washington stopped it, which would make the US the brake on Israeli action during the Qatari-mediated talks. Confidence is low: the only original source is one unsourced Channel 12 broadcast under military censorship, the three other outlets merely amplify it, the Prime Minister's Office flatly denies it, and neither the US nor Iran has confirmed. The operation's nature, target and timing remain unestablished. The account fits earlier reports of Netanyahu's dispute with Chief of Staff Zamir and his pressing Trump to resume strikes after the US midterms. Security officials who opposed the move may instead have leaked it to constrain Netanyahu's options while coalition talks continue. Further official disclosures or US confirmation would show which is true.

Sources:

1: Report: PM, Mossad chief planned Iran op on eve of Israeli election; it was thwarted after US accidentally tipped off - Times of Israel

2: Netanyahu Sought to Conduct an Operation in Iran Before Israel's Elections But Was Stopped by the U.S.: Report - International Business Times

3: US Foiled Netanyahu's Iran Strike Plan Before Elections - Daily Beirut

Mossad Backs Iran Operation Opposed by Zamir as Netanyahu Faces Election Test - Palestine Chronicle

COLLECTION GAPS

UNCLASSIFIED // OPEN SOURCE