SOFREP Morning Brief: Russian Military Hackers Targeted Western Supply Chains Supporting Ukraine

Good morning! Start your Friday with SOFREP’s Morning Brief for May 23, 2025—your quick intel on defense and global affairs. US-Iran nuclear talks resumed but remain stuck over uranium enrichment. Microsoft fired an engineer after a pro-Palestinian protest during the CEO’s speech. Israel fired warning shots near EU diplomats in Jenin, drawing French backlash. The National Security Agency reports that Russian hackers targeted Ukraine’s aid logistics. The UK handed the Chagos Islands to Mauritius but retained the Diego Garcia base. North Korea downplayed its failed warship launch as a probe begins. South Korea denied reports of a potential US troop withdrawal.

—

US and Iran Resume Nuclear Talks in Rome Amid Sharp Divide Over Uranium Enrichment

US and Iranian negotiators meet in Rome on Friday for a fifth round of high-level nuclear talks, with both sides locked in a standoff over Tehran’s uranium enrichment program.

The talks are the most significant contact since the US withdrew from the 2015 Joint Comprehensive Plan of Action (JCPOA) during President Donald Trump’s first term.

Trump, now back in office, has revived his “maximum pressure” strategy, supporting negotiations but warning of military action if diplomacy fails. Iran, suffering under heavy sanctions, seeks a new agreement that would ease economic restrictions in exchange for nuclear curbs.

The previous round of talks in Muscat ended in a dispute after US envoy Steve Witkoff declared Washington could not permit any level of uranium enrichment. Iran called that a deal-breaker, citing its rights under the Non-Proliferation Treaty.

Iranian Foreign Minister Abbas Araghchi reaffirmed Thursday that uranium enrichment is non-negotiable but expressed openness to increased inspections of nuclear facilities.

5th round of Iran-US Nuclear talks in Europe

Iran says no deal if US insists on zero enrichment@BislaDiksha reports pic.twitter.com/AppjQK2Z0d

— WION (@WIONews) May 23, 2025

Iran currently enriches uranium to 60%, far above the 3.67% cap set by the 2015 deal, though still below weapons-grade levels. Tehran has warned that further Western pressure could trigger irreversible escalation.

Araghchi also threatened consequences if Europe reimposes UN sanctions via the JCPOA’s “snapback” mechanism.

The talks occur ahead of a June International Atomic Energy Agency review and as reports suggest Israel may be preparing to strike Iranian nuclear sites. Tehran warned that any Israeli attack would implicate the US as legally responsible. Trump spoke with Israeli Prime Minister Benjamin Netanyahu on Thursday, discussing both the nuclear issue and the recent killing of two Israeli diplomats in Washington.

With both sides firmly entrenched, expectations for a breakthrough remain low. Iran insists enrichment is its sovereign right, while Washington demands tighter restrictions — setting the stage for continued deadlock.

Microsoft Fires Engineer After Pro-Palestinian Protest at CEO’s Speech

Microsoft fired software engineer Joe Lopez after he interrupted CEO Satya Nadella’s keynote at the company’s annual Build developer conference in Seattle to protest the company’s ties to the Israeli military.

Lopez, who accused Microsoft of enabling the war in Gaza through its Azure cloud services, was escorted out and later claimed in a mass email that the company misrepresented how its technology is used.

His protest was the first of several pro-Palestinian disruptions during the four-day event, which included multiple session interruptions, audio cuts on livestreams, and demonstrations outside the Seattle Convention Center.

Microsoft has previously dismissed employees over similar protests, including during its 50th anniversary celebration in April.

“How about you show them how Microsoft is killing Palestinians?”

Joe Lopez, a Microsoft employee and member of the No Azure for Apartheid movement, disrupted a keynote speech by the company’s CEO, Satya Nadella, during the tech giant’s Build 2025 conference in Seattle on Monday pic.twitter.com/HQqsMmues8

— Middle East Eye (@MiddleEastEye) May 20, 2025

While Microsoft confirmed last week that it provides artificial intelligence (AI) services to the Israeli military, it claims there is no evidence that its technology has been used to harm civilians in Gaza. The advocacy group No Azure for Apartheid, which includes current and former employees, said Lopez was fired and that internal communication referencing “Palestine” or “Gaza” is being restricted.

Microsoft has not responded to media inquiries about the protests or the reported email censorship. The conference concludes Thursday.

Israel Defends Troops After Warning Shots Fired Near European Diplomats in West Bank

An Israeli diplomat defended the military Thursday after soldiers fired warning shots near a European diplomatic delegation in Jenin, a flashpoint city in the occupied West Bank.

The incident drew sharp condemnation from France, which summoned Israel’s ambassador over what it called an “unjustifiable and unacceptable” act.

Assaf Moran, deputy chief of mission at Israel’s embassy in France, said troops fired into the air to redirect the delegation, which had reportedly deviated from an agreed route. He emphasized that “there was no actual danger” to the diplomats and that the shots were not aimed at them.

The delegation, which included at least one French diplomat, had coordinated the visit in advance. No injuries were reported.

France’s Foreign Ministry demanded a formal explanation, calling the event “extremely serious.”

The IDF says a European diplomatic delegation deviated from the agreed route and entered a military restricted area in Jenin.

Troops on the ground fired warning shots into the air to drive them back. pic.twitter.com/WyFrBMfq51

— Polymarket Intel (@PolymarketIntel) May 21, 2025

The episode adds to mounting diplomatic tension between Israel and European countries amid ongoing Israeli military operations in Jenin targeting Palestinian militants. Human rights groups have criticized the operations for excessive force.

Separately, France increased security around Jewish institutions following the fatal shooting of two Israeli Embassy staff in Washington, D.C. While the two incidents are not officially linked, their close timing has heightened security concerns and strained diplomatic channels. Israel maintains the delegation was not deliberately targeted.

Russian Military Hackers Targeted Western Supply Chains Supporting Ukraine: NSA

Russian military intelligence hackers, linked to the GRU’s “Fancy Bear” unit, launched a cyber campaign targeting Western logistics and tech companies supporting aid deliveries to Ukraine, the US National Security Agency (NSA) revealed Wednesday.

The operation, which began in 2022, sought detailed intelligence on military and humanitarian shipments entering Ukraine.

The hackers attempted to infiltrate defense, transportation, and logistics firms in the US and Europe, targeting ports, airports, and rail systems. They also tried to access over 10,000 internet-connected cameras—many in Ukraine, but also in Romania, Poland, and other nearby countries—to monitor movement at critical border crossings and transit hubs.

Russian GRU Unit 26165, aka Fancy Bear, has engaged in a cyber campaign against Western logistics providers and technology companies, targeting entities across all transportation modes: air, sea and rail. Click for TTPs and indicators of compromise: https://t.co/1FnnS0Bq54 pic.twitter.com/NbF1MbA8kp

— FBI (@FBI) May 22, 2025

Attackers used common tactics such as spearphishing and exploited vulnerabilities in small office and home networks. Despite lacking novel methods, experts say the operation was methodically executed to provide Moscow with a granular understanding of Ukraine-bound aid, including the timing and transport methods.

The NSA, Federal Bureau of Investigation, and allied security agencies warned that Russia is likely to continue surveillance efforts and urged companies in the supply chain to bolster cybersecurity.

The report follows earlier warnings about potential sabotage and espionage linked to Russian operations across Europe. Moscow has not commented on the findings.

UK Cedes Chagos Islands to Mauritius, Secures Long-Term Lease of Diego Garcia Base

The United Kingdom has agreed to transfer sovereignty of the disputed Chagos Islands to Mauritius, while securing a 99-year lease for the Diego Garcia military base—an installation jointly operated with the US that London considers vital to national and global security.

Under the deal, Britain will pay Mauritius £101 million ($136 million) annually for continued access to the base.

Prime Minister Keir Starmer said the agreement ensures Diego Garcia remains operational “well into the next century,” providing critical counterterrorism and intelligence capabilities. The base supports US and British military operations and can host nuclear submarines, aircraft carriers, and surveillance aircraft.

UK PM Keir Starmer today signed an agreement to transfer sovereignty of the Chagos Islands to Mauritius

The islands belonged to the UK for 211 years & host the strategically crucial Diego Garcia military base

The transfer of sovereignty is expected to take place later this year pic.twitter.com/qMDpS91ySk

— Visegrád 24 (@visegrad24) May 23, 2025

The agreement follows years of legal and diplomatic pressure from the UN and Mauritius, which claims the UK unlawfully retained the Chagos Islands after granting Mauritius independence in 1968. A 2019 International Court of Justice ruling sided with Mauritius, stating the UK should return the territory.

Critics, including Conservative MPs and displaced Chagossians, condemned the deal. Defense spokesman James Cartlidge called it a “fundamental betrayal” of UK interests. Two Chagossian campaigners temporarily delayed the agreement with a court injunction, arguing it weakens their long-denied right to return.

Although the injunction was lifted, activists vowed to continue their fight.

“They’re not treating us like human beings. We’re British citizens – but do our rights not count?” says Bertrice Pompe, a Chagossian woman, after the High Court allowed the government to proceed with the Chagos Islands deal.https://t.co/bOa9WWLkrZ

📺 Sky 501 and YouTube pic.twitter.com/fYorKwEC0A

— Sky News (@SkyNews) May 22, 2025

The deal allows Mauritius to manage resettlement on all islands except Diego Garcia and includes a trust fund for Chagossians. It also contains national security safeguards: a 24-mile exclusion zone around the base, a UK veto on development, and a ban on foreign forces.

The agreement, which requires parliamentary approval, was welcomed by US Secretary of State Marco Rubio, who said it “secures the long-term, stable, and effective operation” of a base that remains critical to US and allied operations.

North Korea Seeks Arrests After Failed Warship Launch, Downplays Damage

North Korea is pursuing arrests and a criminal investigation into those responsible for the failed launch of its second 5,000-ton-class destroyer, the regime announced Friday, while denying reports of major damage to the vessel.

The announcement comes after leader Kim Jong Un condemned the incident as a result of “unpardonable criminal negligence.”

State media claimed the warship sustained only minor hull scratches and seawater flooding in the stern and said repairs would take about ten days. However, satellite images show the vessel lying on its side and partially submerged, leading outside experts to dismiss Pyongyang’s claims and estimate that full repairs, especially to the engine room, could take over a year.

New imagery collected today by @planet shows that North Korea has continued to cover the stricken destroyer with blue tarpaulin, potentially in an attempt to disguise damage to the vessel. Analysis by @stoa1984 indicates the vessel may have suffered significant structural damage. pic.twitter.com/JwMxHO23J6

— Open Source Centre (@osc_london) May 23, 2025

The launch failed when the ship’s stern cradle detached early during a sideways launch — a technique North Korea had never used for a warship. Analysts suggest improper planning and inexperience with large naval vessels contributed to the incident.

The destroyer was built in the same class as North Korea’s first modern warship, launched successfully last month.

Despite the setback, Kim is using the incident to enforce discipline and assert control over the military and scientific sectors. A team of prosecutors has begun investigating, and Hong Kil Ho, the manager of the Chongjin shipyard, has been summoned for questioning.

Experts warn the crackdown could chill innovation in North Korea’s defense science if political punishment outweighs technical accountability.

Seoul Denies Reports of Planned US Troop Withdrawal from South Korea

South Korea’s defense ministry on Friday denied reports that the US is considering a partial withdrawal of its troops from the Korean Peninsula, following a Wall Street Journal article claiming Washington may redeploy 4,500 troops to other locations such as Guam.

“There has been no discussion whatsoever between South Korea and the United States regarding the withdrawal of the United States Forces Korea,” the ministry said in a statement.

Approximately 28,500 US troops are currently stationed in South Korea to deter threats from North Korea. The report surfaced amid renewed scrutiny over defense cost-sharing, as President Donald Trump previously stated Seoul would need to pay significantly more to continue hosting US forces if he returned to office.

The two allies signed a new five-year agreement last year, with South Korea agreeing to increase its contribution by 8.3% to 1.52 trillion won ($1.1 billion) by 2026.

US Forces Korea declined to comment, deferring questions to Washington. Seoul reaffirmed its commitment to maintaining strong military cooperation with the US and emphasized the role of American troops in regional stability.

Sources: News Agencies