Nightwatch
Intelligence archive
Historical intelligence

Situation Report

Archived operational intelligence briefing retained for historical analysis.

Intelligence brief / archived issue

Situation Update (UTC)

Key reported developments

  • SBU head Oleksandr Poklad dismissed two senior SBU officials who became subjects of NABU's "Carthage" anti-corruption investigation; Poklad publicly challenged a figure alias "Mexikants" to surrender. Reported by РБК-Україна (16:50:19 UTC), Оперативний ЗСУ (16:50:51 UTC), ТАСС (16:51:20 UTC), STERNENKO (16:52:17 UTC), and ЦАПЛІЄНКО_UKRAINE FIGHTS (16:54:13 UTC). The "Carthage" case is linked to fraudulent call-center operations per ЦАПЛІЄНКО's framing. (event time: 4 Nov; confidence MEDIUM—multiple Ukrainian and Russian-language outlets relay the same official SBU statement; individual names and positions of dismissed officials not disclosed; no NABU-side press release supplied in this batch.)

  • Crimea blackout cause: Russian channel Операция Z (17:03:46 UTC) now states the outage began "from 3 November" following "a night attack by the enemy on energy infrastructure outside the peninsula," extending Aksyonov's earlier 3-November attribution. School holidays confirmed extended to 9 November; kindergarten operations left to municipal discretion. (confidence MEDIUM-HIGH for the outage and its administrative consequences per ASTRA footage in the prior report and this relay; the cause remains an occupation-authority claim with no independent strike evidence in this batch.)

  • Ukrainian Air Force issued four additional jet-propelled (reactive) drone alerts: toward Lypovets, Vinnytsia oblast (16:45:54 UTC); from Chernihiv oblast toward the Kyiv reservoir area and Chornobyl (16:47:34 UTC); at the Zhytomyr–Kyiv oblast border heading south (16:59:40 UTC); on eastern Vinnytsia from Cherkasy oblast (17:00:31 UTC). (event times 16:45–17:00 UTC, Повітряні Сили ЗС України, confidence HIGH that alerts were issued; intercepts and impacts not stated.)

  • Russian MoD, via ТАСС (17:06:35 UTC), claimed air-defence assets shot down 46 Ukrainian UAVs over Russian regions in one day. No locations, drone types, or independent verification supplied. (confidence LOW—single-source belligerent claim.)

  • WarArchive (16:45:08 UTC) published video attributed to Ukraine's 225th Separate Assault Regiment showing a forested assault in Zaporizhzhia oblast, claiming four Russian soldiers captured and the use of Browning M2-equipped ground robotic systems. The M2 UGV claim is not visually confirmed in the sampled frames; the stated date "~10.2026" is flagged as anomalous by the source's own analysis. (confidence MEDIUM for the assault and capture narrative; LOW for the UGV equipment claim and the date.)

  • АРХАНГЕЛ СПЕЦНАЗА (17:04:25 UTC) published FPV footage claiming a fiber-optic-guided Russian drone struck a Ukrainian portable EW jammer operator in flat agricultural terrain (described as southern Ukraine steppe). The "NO IMAGE" ending is ambiguous. (confidence MEDIUM-LOW—single propaganda channel; no detonation confirmation, no geotag, target identity inferred from equipment appearance only.)

  • РБК-Україна (17:08:52 UTC) relayed commander "Madyar" (Brovdi) confirming the downed drone near Kyiv carried two propaganda leaflets (one parodying a "Ukrainian volunteer brigade in the Russian army" with a fake poll and QR code; one targeting TCC mobilization), described as a cyber-phishing trap. Photos and IR recovery footage are mutually consistent. (confidence MEDIUM for leaflet existence and content per attached media; drone type "Shahed" and exact downing location/time remain single-source claims; QR payload not technically analyzed in this batch.)

  • Colonelcassad (16:43:01 UTC) relayed an IRGC claim of a sixth MQ-9 Reaper shootdown near the Strait of Hormuz on 4 November (Iranian calendar 13 Aban 1404). No US or third-party confirmation. (confidence LOW—adversarial-state claim, footage resolution insufficient for target identification; tangential to the Russia-Ukraine theatre but present in the information environment.)

Reported situation by area

Zaporizhzhia oblast (225th OShP sector): WarArchive (16:45:08 UTC) reports a small-unit forested assault by the 225th Separate Assault Regiment in Zaporizhzhia region, with two prone figures visible (caption claims four captured). Thermal/UGV targeting view at 8s is the closest visual evidence for the claimed ground robotic systems, but the M2 platform itself is not shown. The date "~10.2026" is anomalous. This is new evidence relative to the prior report's KamyShevaha/Orikhiv sector description. (confidence MEDIUM for the assault event; LOW for equipment claims and date.)

Vinnytsia / Zhytomyr / Kyiv oblasts (air-raid alerts): Four new jet-drone alerts (16:45–17:00 UTC) extend the prior report's alert chain: Lypovets (Vinnytsia), Kyiv reservoir/Chornobyl corridor from Chernihiv, Zhytomyr–Kyiv border heading south, and eastern Vinnytsia from Cherkasy. These are warnings only; no confirmed engagements or impacts are stated. (confidence HIGH for alerts issued; intercept outcomes UNCONFIRMED.)

Crimea (annexed): Операция Z (17:03:46 UTC) relays the occupation administration's account: restrictions on electricity supply from 3 November following a "night attack on energy infrastructure outside the peninsula"; school holidays extended to 9 November; kindergartens at municipal discretion; "all services working on restoration without stopping." This is consistent with the prior report's ASTRA footage and Aksyonov statements but adds the "outside the peninsula" phrasing. No independent strike evidence is supplied. (confidence MEDIUM-HIGH for the outage and administrative response; cause remains an occupation-authority claim, UNCONFIRMED by independent sources.)

Southern Ukraine (EW-targeting claim): АРХАНГЕЛ СПЕЦНАЗА (17:04:25 UTC) describes a fiber-optic FPV strike on a portable EW jammer operator in steppe terrain, with no geotag. Terrain and season (bare trees, dry grass, plowed fields) are described as consistent with Zaporizhzhia/Kherson direction. (confidence MEDIUM-LOW; no independent corroboration.)

Kyiv / rear areas: РБК-Україна (17:08:52 UTC) provides additional detail on the downed drone carrying leaflets near Kyiv (previously reported at 16:26–16:31 UTC in the prior baseline). The leaflet content, QR-code framing, and Brovdi's "Shahed-agitator" label are now corroborated by a second Ukrainian outlet. No drone wreckage, geotag, or malware analysis is provided. (confidence MEDIUM for leaflet existence; drone model and phishing payload UNCONFIRMED.)

Reported strikes and air-defense activity

  • Crimea energy infrastructure (cause disputed): Операция Z (17:03:46 UTC) attributes the ongoing blackout to a "night attack on energy infrastructure outside the peninsula" beginning 3 November. This is the occupation administration's account; no strike event, weapon type, or target facility is described. The prior report noted Aksyonov's two conflicting explanations ("accident outside the peninsula" vs. "attack on energy infrastructure"); this relay aligns with the latter. No independent evidence adjudicates the cause. (confidence MEDIUM-HIGH for the outage; cause UNCONFIRMED.)

  • Air-raid alerts (new batch): Повітряні Сили ЗС України issued four additional reactive-drone alerts between 16:45 and 17:00 UTC covering Lypovets (Vinnytsia oblast), Kyiv reservoir/Chornobyl corridor (from Chernihiv oblast), Zhytomyr–Kyiv oblast border, and eastern Vinnytsia (from Cherkasy oblast). Combined with the prior report's five alerts (16:20–16:38 UTC), at least nine reactive-drone warnings were issued in this window. (confidence HIGH for alerts issued; no confirmed intercepts or impacts stated.)

  • Near Kyiv (leaflet drone): РБК-Україна (17:08:52 UTC) reports the downed drone described as "Shahed-agitator" carried two PSYOP leaflets with a QR code characterized as a phishing trap. Photos show the leaflets and IR footage shows recovery. No wreckage identification, serial number, or flight-path data is provided. (confidence MEDIUM for leaflet content; drone type attribution LOW.)

  • Southern Ukraine (EW operator): АРХАНГЕЛ СПЕЦНАЗА (17:04:25 UTC) claims a fiber-optic FPV drone struck a portable EW jammer operator. The "NO IMAGE" ending is ambiguous. (confidence MEDIUM-LOW; single propaganda channel.)

  • Russian MoD air-defense claim: ТАСС (17:06:35 UTC) reports 46 Ukrainian UAVs downed over Russian regions in one day. No breakdown by region, drone type, or date range is provided. (confidence LOW—single belligerent-source claim.)

  • Geran-5 designation (unverified): Анатолій Штефан "Штірліц" (17:03:59 UTC) published video captioned "Geran-5" showing a fixed-wing drone impacting and detonating in a dry reed field. The source's own analysis notes the airframe is visually consistent with Shahed-136/Geran-2 family; no publicly confirmed "Geran-5" variant is documented. Location is not geolocated. (confidence MEDIUM for a drone impact event; "Geran-5" designation UNCONFIRMED.)

Reported Russian activity

  • Crimea blackout attribution: Операция Z (17:03:46 UTC) relays the occupation administration's account of a "night attack on energy infrastructure outside the peninsula" from 3 November, with school holidays extended to 9 November and restoration efforts described as continuous. (confidence MEDIUM for the administrative response; the strike claim is unverified.)

  • Fiber-optic FPV against EW: АРХАНГЕЛ СПЕЦНАЗА (17:04:25 UTC) publishes footage claiming a fiber-optic-guided drone defeated enemy electronic warfare by striking a portable jammer operator. The channel's caption frames this as "Минус РЭБ у противника." (confidence MEDIUM-LOW; no independent corroboration.)

  • Air-defense accounting: ТАСС (17:06:35 UTC) relays a Russian MoD claim of 46 Ukrainian UAVs downed over Russian regions in one day. (confidence LOW.)

  • Volunteer drone-component production: Дневник Десантника🇷🇺 (16:56:01 UTC) shows a person in camouflage operating a Creality FDM 3D printer producing small drone parts (propeller/rotor assembly), framed as 24/7 volunteer production supporting Russian military drone operations. The video directly shows the printing activity; the scale and military delivery chain are not verifiable from this clip. (confidence MEDIUM-HIGH for the activity shown; LOW for production scale and end-use.)

  • IRGC MQ-9 claim (tangential): Colonelcassad (16:43:01 UTC) relays IRGC footage claiming a sixth MQ-9 Reaper shootdown near the Strait of Hormuz. No US acknowledgment. (confidence LOW; not a Russia-Ukraine theatre event.)

Reported Ukrainian activity

  • SBU dismissals (NABU "Carthage" case): Poklad dismissed two senior SBU officials as subjects of the NABU "Carthage" investigation. Multiple outlets (РБК-Україна, Оперативний ЗСУ, ТАСС, STERNENKO, ЦАПЛІЄНКО) relay the same official statement. Poklad's quote references coordination with NABU, SAP, and partner-country services, and challenges the "Mexikants" alias to surrender. ЦАПЛІЄНКО specifies the case involves "call centers." (confidence MEDIUM—official SBU statement, multiple relays; individual names and charges not disclosed; no NABU-side confirmation in this batch.)

  • 225th OShP assault video: WarArchive (16:45:08 UTC) publishes footage attributed to the 225th Separate Assault Regiment showing a forested assault in Zaporizhzhia region, claimed capture of four Russian soldiers, and claimed use of Browning M2 ground robotic systems. The M2 UGV is not visually confirmed in sampled frames. Date "~10.2026" is anomalous. (confidence MEDIUM for the assault; LOW for equipment claim and date.)

  • SIGNUM battalion FPV footage: БУТУСОВ ПЛЮС (16:42:01 UTC) publishes FPV targeting-sequence footage from Ukrainian SIGNUM battalion. The target vehicle displays the Ukrainian tryzub coat of arms, creating an unresolved identification ambiguity (captured vehicle used by Russian forces, friendly reference point, or misidentified target). Caption uses dehumanizing language and pairs combat footage with donation/recruitment solicitation. (confidence MEDIUM for the footage's existence as FPV operations; target identification UNRESOLVED.)

  • Shahed-leaflet counter-PSYOP: РБК-Україна (17:08:52 UTC) relays Brovdi's account of the downed drone carrying two PSYOP leaflets toward Kyiv, with a warning about the QR-code phishing payload. (confidence MEDIUM for leaflet existence; delivery mechanism and drone type single-source.)

Civilian and infrastructure impact

  • Crimea (Simferopol and oblast-wide): Prolonged electricity restrictions from 3 November; school holidays extended to 9 November; kindergarten operations at municipal discretion. No casualties are reported in the supplied messages. (confidence MEDIUM-HIGH for the outage and administrative response per prior ASTRA footage and this Операция Z relay; cause UNCONFIRMED.)

  • Near Kyiv (leaflet drone): Two propaganda leaflets were recovered on the ground. No physical harm to civilians is described. A cyber-phishing warning was issued to residents who may encounter the QR codes. (confidence MEDIUM for leaflet recovery per photos and IR footage; no injuries reported.)

  • Zaporizhzhia region (225th OShP sector): The assault video shows a recently overrun position with an abandoned AK-pattern rifle and smoke; two prone figures (captured personnel) are visible. No civilian harm is described in the supplied content. (confidence MEDIUM for the event per WarArchive; no independent verification.)

  • Southern Ukraine (EW-targeting claim): АРХАНГЕЛ СПЕЦНАЗА describes a strike on a military EW operator. No civilian presence or infrastructure damage is mentioned. (confidence MEDIUM-LOW; no independent corroboration.)

  • Reed-field drone impact (Штірліц video): The "Geran-5"-captioned drone detonated in an open reed field with no buildings, roads, or landmarks visible. No casualties or infrastructure damage are described. (confidence MEDIUM for the impact event; location and variant designation UNCONFIRMED.)

Information environment and disputed claims

  • Target-identification ambiguity (SIGNUM footage): The vehicle struck (or approached) in the SIGNUM FPV video bears the Ukrainian tryzub. The source's analysis cannot reconcile this with the caption's claim of striking "occupiers." Possible explanations (captured Ukrainian vehicle repainted by Russian forces, friendly reference point, misidentification) remain unresolved. The footage is paired with donation solicitation and dehumanizing language ("російський непотріб"). (confidence MEDIUM for the footage's existence; target identity UNRESOLVED.)

  • "Carthage" / call-center case framing: Multiple Ukrainian outlets relay the SBU dismissal statement. ЦАПЛІЄНКО specifies "call centers" as the case subject, aligning with the prior report's Colonelcassad claim (16:33:01 UTC, LOW confidence, single pro-Russian source) that NABU linked SBU, police, and the Prosecutor General's office to fraudulent call centers. The SBU's own statement does not name the dismissed officials or specify charges. The "Mexikants" alias is not independently identified. (confidence MEDIUM for the dismissal event; case details and individual identities UNCONFIRMED.)

  • Crimea blackout cause: Операция Z (17:03:46 UTC) states the cause was "a night attack on energy infrastructure outside the peninsula." The prior report noted Aksyonov's two conflicting explanations. No independent strike evidence, satellite imagery, or third-party confirmation is supplied. (cause remains UNCONFIRMED.)

  • "Geran-5" designation: Штірліц (17:03:59 UTC) labels the drone in the impact footage as "Geran-5." The source's own analysis notes the airframe is consistent with Shahed-136/Geran-2 and that no publicly confirmed "Geran-5" variant has been documented. The designation is unverified. (confidence LOW for the variant label.)

  • Fiber-optic FPV / EW claim: АРХАНГЕЛ СПЕЦНАЗА (17:04:25 UTC) presents a "NO IMAGE" ending as evidence of a successful strike on an EW operator. The source's analysis acknowledges this could also indicate the drone was jammed or crashed. The "our new tech defeats their new tech" framing is a recurring propaganda template. (confidence MEDIUM-LOW.)

  • Oil-price screenshot (Оперативний ЗСУ): A financial table showing crude at $88.708 (−7.68%) and Brent at $94.488 (−8.80%) is captioned as a consequence of "Republican fiasco." The source's own analysis notes the price levels are consistent with the March 2020 oil crash, not a 2022–2026 US election event. The causal framing is unsubstantiated. (confidence LOW for the claimed causality; screenshot provenance unclear.)

  • IRGC MQ-9 claim: Colonelcassad (16:43:01 UTC) relays IRGC footage claiming a sixth MQ-9 shootdown. No US or third-party confirmation. The "sixth" sequence framing is a cumulative propaganda device. (confidence LOW.)

  • Switzerland sanctions removal: ТАСС (16:58:29 UTC) reports Switzerland followed the EU in lifting sanctions on Alisher Usmanov and Mikhail Fridman, citing the Swiss State Secretariat for Economic Affairs website. No further context or verification is supplied. (confidence MEDIUM for the administrative action as reported by ТАСС; no independent confirmation in this batch.)

  • Kotsnews cultural commentary: A 16:59:01 UTC post comparing the 1972 Soviet film "The Dawns Here Are Quiet" with its 2015 remake contains no operational or security-relevant content. It engages in Russian domestic memory politics. (noted for completeness; no war-theatre information value.)

Evidence limitations and unresolved questions

  • The four new Air Force jet-drone alerts (16:45–17:00 UTC) do not state whether any drone was intercepted, crashed, or caused damage. Combined with the prior report's five alerts, nine warnings are documented; zero confirmed engagements are established from these messages.
  • The SIGNUM FPV footage's target-vehicle identification (tryzub-marked truck) is unresolved; the full video was not sampled, and geolocation is not provided.
  • The 225th OShP video's date "~10.2026" is anomalous; the Browning M2 ground-robot claim is not visually confirmed; the number of captured personnel (four claimed, two visible) is not established.
  • The Crimea blackout cause remains an occupation-authority claim; no independent strike evidence, satellite imagery, or third-party corroboration is supplied in this batch.
  • The "Carthage" dismissal: individual names, positions, and specific charges of the two dismissed SBU officials are not disclosed; no NABU-side press release is included; the "Mexikants" alias is not independently identified.
  • The "Geran-5" designation is unverified; the drone's variant, impact location, and whether the strike hit a military target or was intercepted are not established.
  • The АРХАНГЕЛ СПЕЦНАЗА fiber-optic FPV claim lacks geotag, detonation confirmation, and independent corroboration; the "NO IMAGE" ending is ambiguous.
  • The Russian MoD's "46 UAVs downed" figure is a single-source belligerent claim with no breakdown or independent verification.
  • The Shahed-leaflet drone's type, exact downing time and location, and the QR-code payload's technical nature remain single-source claims; no wreckage identification or malware analysis is provided.
  • The oil-price screenshot's date and the claimed causal link to US political events are unresolved; the source's own analysis suggests the data may correspond to March 2020.
  • The IRGC MQ-9 claim is tangential to the Russia-Ukraine theatre and is uncorroborated by any US or third-party source.
  • No weather data in this batch is specific to any reported event; the supplied weather context (Open-Meteo, 17:00 UTC) provides general frontline conditions (2.9–6.9 °C, partly cloudy to overcast, light rain probability 20–28% at some points, winds 2.9–6.1 m/s) but is not linked to any reported incident.
  • The prior situation report (baseline) and prior daily report are used for historical context only; no carried-forward events are re-reported as new.