Global Intelligence Weekly Wrap up

Send us Fan Mail
🕵️ Why Are Spies Breaking Bad? | Global Intelligence Weekly Wrap-Up
A Canadian NATO intern accused of espionage. A former German intelligence chief arrested. A former senior CIA official admitting to a multimillion-dollar fraud scheme.
What happens when people entrusted with secrets abuse that trust—and can security screening identify the warning signs?
This week, Neil Bisson—retired CSIS Intelligence Officer, former CBSA Officer, and Director of the Global Intelligence Knowledge Network—examines security screening, insider threats, accountability and foreign influence.
🇨🇦 CANADA / NATO — SECURITY SCREENING UNDER SCRUTINY
The alleged espionage case involving Canadian NATO intern Biwei Zhang raises questions about how a previous finding of fraud in a CBSA appointment process was considered when she received security clearance.
Public Safety Minister Gary Anandasangaree has acknowledged screening gaps. We examine the responsibilities of CSIS and the department granting a clearance, information sharing, and why security must continue after access is approved.
The espionage allegations remain unproven. An earlier finding of dishonesty does not establish espionage, but it raises relevant questions about reliability and trust.
🇩🇪 GERMANY — FORMER SPY CHIEF ARRESTED
Former BND director August Hanning has been arrested on suspicion of espionage-related offences and attempted treason. He denies wrongdoing.
Prosecutors allege that a serving insider supplied him with approximately 2,000 documents, including classified material, after he left the service.
We examine how longstanding professional relationships can become pathways around safeguards—and why retirement, seniority and familiarity do not establish a present need to know.
🇨🇦🇺🇸 CANADA — ALBERTA SEPARATISM & FOREIGN INFLUENCE
Canada’s Foreign Influence Transparency Registry faces questions about reported contacts between Alberta separatist organizers and American officials and political operatives.
Meetings completed before the legislation took effect are different from qualifying arrangements that continued afterward.
We explore disclosure, outside support, campaign tools and political data—and why neither a foreign contact nor an absence from the registry establishes wrongdoing.
🇺🇸 UNITED STATES — CIA FRAUD, GOLD & BETRAYED TRUST
Former senior CIA official David J. Rush has pleaded guilty to wire fraud in a scheme that the U.S. Justice Department says caused approximately US$194 million in losses.
The case involves fictitious government authorities, luxury purchases and hundreds of gold bars. Reporting also describes an unauthorized disclosure of classified information concerning a clandestine human source.
We examine how secrecy and authority can be exploited—and connect the week’s stories through initial vetting, continuing review and independent oversight.
The NATO and German cases involve allegations; Rush has pleaded guilty. These distinctions matter when examining the patterns.
⏱️ CHAPTERS — APPROXIMATE
00:00 Introduction
00:30 NATO Intern Case: Canada’s Security Screening Questions
07:30 Former BND Chief Arrested: Trust After Retirement
15:30 Alberta Separatism & Foreign Influence Transparency
21:00 CIA Fraud, Gold Bars & Insider Threats
29:00 Final Thoughts & Thanksgiving Outro
🎓 THE PSYCHOLOGY BEHIND HUMAN SOURCES IN INTELLIGENCE COLLECTION
Why do people agree to provide information—and what motivates betrayal?
Join Neil through the University of Ottawa’s Professional Development Institute for this online course on March 23–24, 2027. The course can count toward the National Security and Intelligence Certificate Program.
Course details and registration:
https://pdinstitute.uottawa.ca/PDI/Courses/National-Security/The-Psychology-Behind-Human-Sources/Course.aspx?CourseCode=S0236
💬 SEND US FAN MAIL
https://www.buzzsprout.com/2336717/fan_mail/new
🎙️ LISTEN TO THE PODCAST
https://www.buzzsprout.com/2336717
🤝 SUPPORT GIWW
Help support the research and analysis behind each episode with a one-time or ongoing contribution. Scan the QR code in the video or visit:
https://www.buzzsprout.com/2336717/support
🌐 GLOBAL INTELLIGENCE KNOWLEDGE NETWORK
Training, presentations and consulting on espionage, foreign interference, HUMINT, security screening, proxy operations and sabotage.
Read the episode transcript for source links, examine the reporting and draw your own conclusions.
Subscribe, like, comment and share. Happy Thanksgiving to our Canadian listeners!
Stay curious. Stay informed. Stay safe!
Support the show

Send us Fan Mail
🕵️ Is CSIS Breaking the Law? | Global Intelligence Weekly Wrap-Up
When can intelligence officers legally undertake activities that would otherwise be criminal—and what happens when the safeguards governing those activities fall short?
This week, Neil Bisson—retired CSIS Intelligence Officer, former CBSA Officer, and Director of the Global Intelligence Knowledge Network—examines four stories about intelligence authorities, covert research funding, transnational criminal networks and independent foreign intelligence collection.
🇨🇦 CANADA — IS CSIS BREAKING THE LAW?
Canada’s intelligence watchdog, NSIRA, has identified potential compliance failures involving CSIS’s Justification Framework during operations in 2022 and 2023.
The framework permits certain activities that would otherwise constitute criminal offences, subject to specific conditions. NSIRA’s findings raise questions about employee designation, authorization, records and reporting, while also identifying compliance with restrictions on the types of offences permitted.
We examine what the findings establish, CSIS’s response, and why clear legal authority protects the public, intelligence officers and human sources.
🇬🇧 UNITED KINGDOM — CHINESE INTELLIGENCE & UNIVERSITY RESEARCH
MI5 has warned that a Chinese research institute with strong ties to the Ministry of State Security has funded academic work capable of strengthening China’s espionage capabilities.
Research areas include artificial intelligence, cybersecurity and covert communications. Some researchers may have participated without knowing the ultimate source of their funding.
What should Canadian universities learn from this warning? We connect the alert to earlier CSIS warnings and the security findings involving Canada’s National Microbiology Laboratory.
🇨🇦🇺🇸 GOLDY BRAR — NIJJAR CASE & THE FBI’S MOST WANTED LIST
The FBI has added Goldy Brar to its Ten Most Wanted Fugitives list, offering up to US$1 million for information leading to his arrest.
U.S. prosecutors allege that Brar and Lawrence Bishnoi ordered the June 18, 2023 killing of Hardeep Singh Nijjar in Surrey, British Columbia.
We examine how this development extends the story from alleged participants to alleged leadership—and what criminal networks reveal about cross-border violence, intimidation and potential proxy operations. The allegations have not been proven in court.
🇯🇵 JAPAN — BUILDING AN MI6-STYLE INTELLIGENCE SERVICE
Japan is pursuing a dedicated foreign intelligence agency, with a policy target of establishing it by the end of fiscal 2027—March 31, 2028.
Its final staffing, budget and operational authorities remain unsettled. Building an organization also takes less time than developing experienced officers and reliable overseas sources.
For Canada, the comparison raises a familiar question: how much should a country depend on its allies for intelligence, and what should it collect independently?
⏱️ CHAPTERS — APPROXIMATE
00:00 Introduction
00:30 Is CSIS Breaking the Law? NSIRA & the Justification Framework
05:15 MI5 Warning: Chinese Intelligence & Academic Research
13:10 Goldy Brar, the FBI & the Nijjar Investigation
18:00 Japan’s Proposed Foreign Intelligence Agency
25:00 Final Thoughts & Outro
🎟️ PILLAR SOCIETY SPEAKER SERIES — OCTOBER 20
Join the Ottawa–Gatineau Chapter of the Pillar Society at the Shenkman Arts Centre in Orléans for a discussion with journalist Andrew Coyne on Canada’s national security, defence, productivity and geopolitical challenges.
Tickets and information:
https://pillarsociety.com
💬 SEND US FAN MAIL
https://www.buzzsprout.com/2336717/fan_mail/new
🎙️ LISTEN & SUPPORT THE PODCAST
https://www.buzzsprout.com/2336717
🌐 GLOBAL INTELLIGENCE KNOWLEDGE NETWORK
Training, presentations and consulting on espionage, foreign interference, HUMINT, proxy operations, sabotage and emerging national-security threats.
Read the episode transcript for source links, examine the reporting and draw your own conclusions.
Subscribe, like, comment and share to support informed discussion about the intelligence issues affecting our lives.
Stay curious. Stay informed. Stay safe!
Support the show

Send us Fan Mail
☣️ ISIS Planning Chemical Attack in Canada? | Global Intelligence Weekly Wrap-Up

A terrorism investigation in Quebec City has raised a disturbing question:
Was an alleged ISIS supporter researching how to carry out a chemical attack in Canada?

This week, Neil Bisson — retired CSIS Intelligence Officer, former CBSA Officer, and Director of the Global Intelligence Knowledge Network — examines four stories demonstrating how foreign intelligence, cyber espionage, sabotage and terrorism are increasingly intersecting with domestic national security.

🇨🇦 CANADA — DOES CANADA NEED ITS OWN FOREIGN INTELLIGENCE SERVICE?
Canada's renewed debate over developing a greater independent foreign-intelligence capability raises a fundamental question:
Can Canada make truly independent strategic decisions if some of the intelligence informing those decisions must come from its allies?
As the international security environment becomes increasingly uncertain, the debate over how Canada collects intelligence abroad is becoming more important.

🇳🇿 NEW ZEALAND — CHINA'S CYBER ESPIONAGE THREAT
New Zealand has identified China as its most persistent and capable state-backed cyber threat.
The warning reinforces a pattern GIWW has been following across the Five Eyes:
Gain access. Maintain access. Collect intelligence.
And potentially preserve that access for future operations.
The distinction between cyber espionage and preparation for potential cyber disruption may be becoming increasingly difficult to define.

🇵🇱 POLAND — SABOTAGE, STARLINK & RUSSIAN HYBRID OPERATIONS
Polish authorities are investigating a fire at a Starlink communications facility as suspected sabotage, while Denmark's intelligence service is warning of an escalating Russian hybrid campaign.
The development comes only weeks after GIWW examined reports involving suspected Russian activity around critical undersea communications infrastructure near Svalbard.
Infrastructure supporting Ukraine and NATO remains an important potential target — and sabotage may provide adversaries with a means of imposing costs while remaining below the threshold of conventional military conflict.

☣️ CANADA — ISIS & AN ALLEGED CHEMICAL ATTACK PLOT
Our main story takes us to Quebec City.
The RCMP has charged 24-year-old Louay Angoud with three terrorism-related offences following an investigation by the Integrated National Security Enforcement Team.
Authorities allege Angoud communicated online with members of a terrorist organization and researched information related to constructing a chemical weapon that could potentially be used to poison people in Canada.
Police have said there was no imminent threat to the public, and Angoud reportedly did not possess the materials necessary to carry out the alleged chemical attack when he was arrested. 2026 09 25 Global Intelligence …
The case raises several important intelligence questions:
• What originally brought Angoud to the attention of Canadian authorities?
• What was the nature of his alleged online communications with ISIS?
• How far had the alleged research progressed toward operational capability?
• How do intelligence agencies distinguish extremist rhetoric and online research from genuine attack planning?
• Has the internet fundamentally changed the pathway between radicalization and terrorist action?
And there is another reason Quebec City is worth watching.
GIWW previously examined a separate case involving a Quebec City-area teenager accused of promoting the Atomwaffen Division online. The two investigations involve very different extremist ideologies and should not be treated as part of the same phenomenon.

But they share something important:
The operational environment increasingly begins online. 2026 09 25 Global Intelligence …
This week's stories may involve different countries, adversaries and threats.
But the boundaries separating foreign intelligence, cyber espionage, sabotage and domestic national security are becoming increasingly difficult to define.

⏱️ CHAPTERS
00:00 Introduction
02:00 Canada: Does Canada Need a Foreign Intelligence Service?
07:30 New Zealand: China's Cyber Espionage Threat
12:45 Poland: Starlink Sabotage & Russian Hybrid Operations
18:00 ISIS Planning a Chemical Attack in Canada?
28:45 Final Thoughts & Outro

🎟️ PILLAR SOCIETY SPEAKER SERIES — OCTOBER 20
The Ottawa–Gatineau Chapter of the Pillar Society welcomes Canadian journalist Andrew Coyne to the Shenkman Arts Centre in Orléans on October 20 for a discussion examining Canada's national security, defence, productivity and geopolitical challenges.
www.pillarsociety.com

Tickets and information:
Pillar Society
🌐 GLOBAL INTELLIGENCE KNOWLEDGE NETWORK
Training, presentations and consulting on foreign interference, espionage, HUMINT, proxy operations, sabotage, research security and emerging national-security threats.
📧 globalintelligence@globalintelligenceknowledgenetwork.com
☕ SUPPORT GLOBAL INTELLIGENCE WEEKLY WRAP-UP
Support Global Intelligence Weekly Wrap-Up
Subscribe, share the episode and leave a review on your favourite podcast platform.

Stay curious. Stay informed. Stay safe!

Support the show

Send us Fan Mail
🤖🕵️ Is AI Now the Ultimate Spy? | Global Intelligence Weekly Wrap-Up
Artificial intelligence is no longer simply helping intelligence officers analyze information.
What happens when AI begins participating in the espionage operation itself?
This week, Neil Bisson — retired CSIS Intelligence Officer, former CBSA Officer, and Director of the Global Intelligence Knowledge Network — examines four stories demonstrating how access, technology, human intelligence and AI are reshaping modern espionage.
🇩🇪 GERMANY — RUSSIAN INTELLIGENCE & ACCESS
German prosecutors have charged a well-connected Berlin businesswoman with allegedly working on behalf of Russian intelligence.
Her alleged value wasn't necessarily access to classified information — it was access to people.
Prosecutors allege she helped a Russian intelligence officer enter political and military circles, identify potential intelligence targets and establish contacts.
Sometimes the most valuable person in HUMINT isn't the individual who possesses the secret. It's the person who can introduce you to them.
🇨🇳 CHINA — PROTECTING TECHNOLOGY & KNOWLEDGE
China has introduced new regulations allowing authorities to prevent certain citizens from leaving the country over national-security, technology and export-control concerns.
If strategically important knowledge resides inside scientists, engineers and researchers, does protecting technology increasingly mean controlling the movement of the people who possess it?
🤖 RUSSIA — IS AI NOW THE ULTIMATE SPY?
Anthropic has revealed details of a suspected Russian state-linked cyber-espionage operation in which Claude AI was reportedly integrated across multiple stages of intelligence activity.
AI reportedly assisted with reconnaissance, phishing, maintaining access, malware development and data exfiltration.
Even more significantly, AI agents reportedly monitored whether malicious software was being detected, modified it and tested it again.
The operation also reportedly employed “agent swarms,” allowing multiple AI agents to work simultaneously on different tasks.
What happens when intelligence operations that once took place at human speed begin operating at machine speed?
AI doesn't need to invent espionage to transform it.
It may simply make espionage faster, cheaper and scalable.
🇨🇦 CANADA — FOREIGN INFLUENCE OR FOREIGN INTERFERENCE?
Canada's new Foreign Influence Transparency Registry has begun publishing its first registrations.
Among them is former senior Department of National Defence executive Raquel Garbers, who registered an arrangement involving the U.S. Department of State.
This is NOT an allegation of foreign interference.
Instead, the case provides an important real-world example of the distinction between legitimate foreign influence and covert foreign interference — an issue GIWW has been following since 2024.
THIS EPISODE ASKS:
• Why is access so valuable in human intelligence?
• Is China treating technological expertise itself as a national-security asset?
• How deeply is AI already being integrated into espionage?
• Could AI allow one operator to accomplish work that once required an entire team?
• What happens when espionage operates at machine speed?
• Can Canada's new registry distinguish foreign influence from foreign interference?
Different countries. Different methods. Different technologies.
But the fundamentals remain remarkably familiar:
Identify the target. Gain access. Collect information. Avoid detection.
⏱ CHAPTERS
00:00 Introduction
02:15 Russia, HUMINT & the Value of Access
10:35 China: Controlling Technology & Knowledge
16:30 Is AI Now the Ultimate Spy?
25:25 Canada's Foreign Influence Transparency Registry
34:00 Final Thoughts & Outro
🎟️ PILLAR SOCIETY SPEAKER SERIES — OCTOBER 20
The Ottawa–Gatineau Chapter of the Pillar Society welcomes Canadian journalist Andrew Coyne to the Shenkman Arts Centre in East Ottawa on October 20 for its next Speaker Series event.
Tickets and information:
https://www.pillarsociety.com
🌐 GLOBAL INTELLIGENCE KNOWLEDGE NETWORK
Training, presentations and consulting on foreign interference, espionage, HUMINT, proxy operations, sabotage, research security and emerging national-security threats.
📧 globalintelligence@globalintelligenceknowledgenetwork.com
☕ SUPPORT GLOBAL INTELLIGENCE WEEKLY WRAP-UP
https://www.buzzsprout.com/2336717/supporters/new
Subscribe, share the episode and leave a review on your favourite podcast platform.
Stay curious. Stay informed. Stay safe!
Support the show

Send us Fan Mail
🌐🕵️ Are Proxy Operations on the Rise? | Season 4 Premiere | Global Intelligence Weekly Wrap-Up
Season Four of Global Intelligence Weekly Wrap-Up starts now!
Neil Bisson — retired CSIS Intelligence Officer, former CBSA Officer, and Director of the Global Intelligence Knowledge Network — returns for a new season examining the espionage, foreign interference, sabotage, terrorism and national security developments shaping Canada and the world.
And Season Four begins with an important question:
Are Proxy Operations on the Rise?
This week, Neil examines five stories demonstrating how modern intelligence operations increasingly exploit insiders, recruited individuals, proxy actors and vulnerabilities in critical infrastructure.
The episode begins in Belgium, where a Belgian-Chinese researcher is preparing to face trial over allegations involving the transfer of sensitive semiconductor technology to China. The case demonstrates why ACCESS remains one of the most valuable commodities in intelligence collection — particularly when advanced technology has both commercial and military applications.
From there, we turn to Canada and the United States, where University of Waterloo student Weiheng Zeng is being held as part of an FBI counter-intelligence investigation. According to court documents, Zeng allegedly accepted paid assignments from an individual he believed was connected to a Chinese security service, including photographing aircraft and aviation facilities.
How does an apparently ordinary online relationship evolve into intelligence tasking — and potentially create a proxy for a foreign intelligence service?
In Germany, a series of sabotage attacks targeting the electrical grid demonstrates how relatively simple physical attacks can potentially produce serious consequences for critical infrastructure.
Then the episode heads beneath the Arctic Ocean.
Reuters reports that NATO allies disrupted what Western officials believe was a covert Russian operation near Svalbard involving specialized deep-sea forces potentially rehearsing the deployment of technology capable of sabotaging undersea fibre-optic cables.
No cables were damaged — but that may be precisely why this story matters. Neil examines how intelligence can identify preparations for sabotage before an attack occurs and why undersea infrastructure is becoming an increasingly important component of modern grey-zone conflict.
Finally, we travel to Australia, where businessman Alexander Csergo has become the first person sentenced under Australia's reckless foreign-interference law.
His relationship allegedly began with a LinkedIn approach offering paid consulting work before developing into increasingly sensitive research requests — providing a real-world example of the recruitment methodology CSIS and its Five Eyes partners have warned is being used by Chinese intelligence services.
Different countries. Different targets. Different methods.
But are foreign states increasingly using recruited individuals, insiders, intermediaries and proxy actors to achieve intelligence objectives while distancing themselves from the operation?
This episode asks:
• Are proxy operations becoming a more important tool for foreign states?
• How can an online relationship evolve into intelligence recruitment?
• Why is dual-use technology an important target for economic espionage?
• How vulnerable is critical infrastructure to physical sabotage?
• Was Russia rehearsing the capability to sabotage NATO undersea communications?
• How are intelligence services using professional networking platforms to identify potential sources?
Neil also marks the 25th anniversary of the September 11 attacks and reflects on how the events of that day changed the direction of his own career and ultimately led him to the Canadian Security Intelligence Service.
⏱ CHAPTERS
00:00 Introduction
02:05 Semiconductor Espionage: The Value of Access
06:52 University of Waterloo Student & Alleged Chinese Intelligence Tasking
12:50 Sabotage Attacks Target Germany's Power Grid
17:40 Russia, Svalbard & the Threat to Undersea Cables
23:58 Alexander Csergo: From LinkedIn to Foreign Interference
29:38 Remembering 9/11 — 25 Years Later
30:08 Final Thoughts & Outro
🎓 SABOTAGE AND PROXY OPERATIONS IN MODERN INTELLIGENCE
This October, Neil Bisson will once again teach Sabotage and Proxy Operations in Modern Intelligence through the University of Ottawa Professional Development Institute.
The course examines how state and non-state actors use proxies, sabotage and unconventional methods to advance strategic objectives while complicating attribution and maintaining plausible deniability.
Register / Course Information:
https://pdinstitute.uottawa.ca/PDI/Courses/National-Security/Sabotage-and-Proxy-Operations/Course.aspx?CourseCode=S0245
🌐 GLOBAL INTELLIGENCE KNOWLEDGE NETWORK
If your government agency, law enforcement organization, university or private-sector organization is seeking training, presentations or consulting on foreign interference, espionage, human-source recruitment, proxy operations, sabotage, research security or emerging national security threats, we'd be pleased to hear from you.
📧 globalintelligence@globalintelligenceknowledgenetwork.com
☕ SUPPORT GLOBAL INTELLIGENCE WEEKLY WRAP-UP
https://www.buzzsprout.com/2336717/supporters/new
If you value independent analysis of espionage, foreign interference, proxy operations, terrorism, sabotage and emerging national security threats, please consider supporting the podcast.
Season Four is underway. Subscribe and join us each week as we follow the intelligence and national security developments shaping Canada and the world.
Stay curious. Stay informed. Stay safe.
Support the show