🛰️ #OSINT Update for 29 September 2025 (CET) 🛰️

🇺🇸 United States — Domestic Security • AI Regulation • Digital ID

→ DHS expanded biometric border pilot to include iris scans at two additional airports.

→ Treasury circulated draft guidance on crypto mixers; proposes classification as “primary money laundering concern.”

→ Congressional aides confirm second round of hearings on AI safety frameworks before year-end.

🇪🇺 European Union — Digital Identity Wallets • Chat Control • CBDC

→ Parliament rapporteurs remain divided on mandatory-scanning provisions in Chat Control; trilogue session pushed into October.

→ Commission advanced enforcement plan requiring member states to provide quarterly progress reports on EUDI Wallet rollout.

→ ECB circulated restricted memo reviewing programmable payment conditions in CBDC pilot.

🇷🇺 Russia — Cyber • Military Posture • Energy

→ Russian operators escalated spear-phishing against Baltic energy firms; malware attributed to GhostSickle variant.

→ Satellite images confirm continued reinforcement of air-defense batteries near Kursk.

→ Domestic reports highlight state subsidies to offset sanctions’ impact on refined fuel exports.

🇺🇦 Ukraine — Military • Drones • Cyber

→ Ukrainian MoD unveiled domestically assembled long-range drone tested in Odesa region.

→ CERT-UA flagged phishing wave masquerading as NATO procurement portals.

→ National grid operator warned of renewed cyber probing of substations, attribution under review.

🇮🇱 Israel — Intelligence • Border Security • Cyber

→ IDF deployed new AI-enhanced surveillance balloons along northern frontier.

→ Mossad reportedly monitoring procurement networks in Eastern Europe tied to dual-use components.

→ Israeli CERT issued alert after utilities faced coordinated ransomware intrusion attempts.

🇵🇸 Palestine — Humanitarian • Security

→ UNRWA reported aid stockpiles in Rafah at critical low, citing cross-border access delays.

→ Local health authorities flagged collapse risk of dialysis treatment within days absent new deliveries.

🇨🇳 China — Military • AI Surveillance • Economy

→ PLA staged live-fire drills in East China Sea featuring drone swarms with AI target coordination.

→ MSS directive expanded mandatory data-retention period for telecom operators.

→ Central bank officials warned of continued capital outflow pressure despite currency support actions.

🇯🇵 Japan — Defence • Tech Policy

→ Tokyo announced joint initiative with US firms to secure semiconductor supply for military satellites.

→ Lawmakers advanced debate on restricting unlicensed encryption hardware imports.

🇩🇪 Germany — Intelligence • Privacy

→ Bundestag oversight committee requested inquiry into BND’s AI-assisted SIGINT tools.

→ Berlin city council paused rollout of expanded CCTV facial-recognition network pending legal review.

🇬🇧 United Kingdom — Immigration • Domestic Security

→ Home Office tested integrated risk-scoring model for visa applicants tied to behavioural analytics.

→ Civil society groups reported spike in moderation of encrypted communication forums.

🇨🇦 Canada — Crypto • Surveillance

→ FINTRAC draft memo proposed lower thresholds for mandatory reporting on crypto kiosks.

→ Canadian cities expanding trial use of AI-assisted cameras in public transport hubs.

🇦🇺 Australia — Immigration • AI Oversight

→ Parliamentary inquiry scrutinising predictive analytics in visa fraud detection.

→ GovAI oversight body recommended red-teaming all deployed algorithms in critical infrastructure.

🇰🇵 North Korea — Military • Cyber

→ Satellite imagery shows renewed activity at Yongbyon reactor site.

→ DPRK-linked hackers targeted South Korean defence contractors with spear-phishing lures.

🏦 ECB — CBDC • Regulation

→ ECB internal task force tested conditional offline CBDC wallets with preset transaction ceilings.

→ Legal services unit flagged unresolved questions over cross-border CBDC interoperability.

🛰️ Intelligence Agencies — NSA • CISA • BND • Mossad • MSS

→ NSA detected anomalous IPv6 traffic linked to Chinese infrastructure testing.

→ CISA issued advisory on deepfake-enabled phishing targeting election workers.

→ BND reportedly evaluating expanded cyber joint-ops framework with DGSE.

🔍 Cyberattack

→ Coordinated credential-stuffing campaign disrupted EU academic networks; incident under mitigation.

📌 Forward Triggers

→ NATO consultations or posture changes following any cross-border airspace incursions or escalation linked to Russia/Ukraine operations.

→ Publication of Member-State EUDI Wallet conformity-assessment results and any regulator non-conformity actions.

→ EU trilogue outcome on Chat Control and whether the text adopts mandatory scanning or alternative mitigations.

→ Confirmed impact assessments on Russian fuel production and export volumes following continued Ukrainian strikes.

→ FinCEN supervisory escalations or rule-finalisation timelines affecting KYC requirements for kiosks and high-risk MSBs.

→ ECB sandbox telemetry that would alter pseudonymity or offline CBDC policy direction.

→ Israeli utility cyber-forensics reports that would prompt sectoral emergency advisories.

🔚 End of Report 🔚