IC Brief Morning — 2026-10-11 Russian sabotage has escalated from reconnaissance to explosive attacks on defense suppliers in Estonia and Denmark, while GRU-linked operatives behind the Leipzig airport drone strike have been identified. German prosecutors are likely to issue a warrant or charges against at least one Leipzig suspect by year-end. High confidence reflects DNA and travel evidence. Reconnaissance near smaller European arms plants would signal further escalation. The FSB's unannounced detention of a Kiriyenko-linked political scientist shows security services now hold a practical veto over domestic political management. Former BND chief Hanning's arrest for espionage spanning 2010 to 2022 will force allied services to reassess sharing with Berlin; a formal indictment is unlikely by December 31. High confidence reflects pretrial detention timelines. Patel is likely to visit Russia by October 31, granting Russian services access to the FBI director. Low confidence reflects unconfirmed scheduling. Washington is unlikely to curtail intelligence sharing with Ukraine by November 15; Ukraine will very likely hit another refinery within days. Germany's custody of a suspected Qilin leader opens a window into affiliate networks, but Qilin will very likely post new victims this week, confirming one arrest does not degrade the threat. China-linked actors harvesting Exchange mailboxes across U.S. critical infrastructure with commodity tools demand behavior-based hunting. https://icbrief.org/icbrief/ #Intelligence #OSINT #NationalSecurity