The Architecture of Survival: Ukraine's Intelligence and Security Apparatus in the Crucible of War

Executive Summary

This report provides a comprehensive, unclassified analysis of Ukraine’s intelligence and counterintelligence apparatus, with a research cutoff date of July 20, 2026\. The central question defining this analysis is how Ukraine transformed its intelligence systems since the 2014 annexation of Crimea, and how its civilian, military, security, border, cyber, and allied-intelligence relationships function during the ongoing war with the Russian Federation. The findings indicate that Ukraine’s intelligence community has evolved into a highly lethal, technologically adaptive force, pioneering the fusion of open-source data, artificial intelligence, and asymmetric deep-strike capabilities. However, this operational brilliance is juxtaposed against profound institutional volatility. The apparatus is characterized by rapid leadership turnover, overlapping jurisdictional mandates, and severe tensions between existential national security requirements and democratic accountability. The July 2026 political reshuffle—which saw career security officers assume top civilian defense and executive roles—underscores a centralization of power that relies heavily on intelligence personnel to manage the state's wartime administration1. Concurrently, the apparatus must navigate intense reliance on allied intelligence sharing, a vulnerability starkly exposed by the temporary suspension of United States intelligence support in March 20255. Ultimately, Ukraine’s intelligence infrastructure remains a formidable, highly adaptive entity that is continuously forced to reconcile its operational imperatives with systemic internal governance challenges.

Current Organizational Chart

The Ukrainian intelligence apparatus operates as a federated network of agencies answering primarily to the President, with coordination mechanisms situated within the executive branch and military high command.

Agency Table: Mandates, Jurisdictions, and Reforms

The formal legal basis and operational reality of Ukraine's principal intelligence institutions dictate a complex division of labor across military, foreign, domestic, and technical domains.

Mapping the Apparatus and Division of Labor

The traditional boundaries between intelligence disciplines have largely dissolved under the pressure of total war, resulting in a highly integrated, yet occasionally competitive, intelligence architecture.

The Political-Intelligence Nexus and Oversight

The overarching architecture is guided by the President of Ukraine, who acts as the Supreme Commander-in-Chief. The President exercises authority through the National Security and Defense Council (NSDC), which coordinates defense policy, budgets, and the implementation of domestic sanctions9. The NSDC has seen rapid turnover; in mid-July 2026, former Interior Minister Ihor Klymenko was appointed NSDC Secretary, replacing Rustem Umerov2. This followed a profound structural shift on January 2, 2026, when President Zelenskyy appointed Lt. Gen. Kyrylo Budanov, the highly popular former head of HUR, to lead the Presidential Office (PO)7. This appointment transformed the PO into a highly militarized coordination center for security policy, effectively rendering Budanov the chief national security advisor and lead negotiator for international peace frameworks8. An Intelligence Committee operates under the President to advise on intelligence sharing and issue strategic warnings, such as identifying Russian subversion campaigns designed to fracture Ukrainian civil-military relations10. Formal parliamentary oversight is conducted by the Committee on National Security, Defense and Intelligence, chaired by Oleksandr Zavitnevych12. However, wartime secrecy protocols and martial law authorities severely limit the legislature's ability to constrain executive intelligence actions, reducing oversight primarily to budgetary approvals and reviews of defense innovation legislation11.

Military Intelligence, Battlefield Reconnaissance, and Special Operations

The division of labor at the tactical and operational levels falls under the Armed Forces of Ukraine (AFU), commanded by Gen. Oleksandr Syrskyi1. The General Staff and Armed Forces intelligence directorates (J2 elements) manage immediate battlefield reconnaissance, utilizing service-level and operational-command intelligence to track enemy troop dispositions. Strategic military intelligence is the exclusive domain of Defence Intelligence of Ukraine (HUR). Commanded by Lt. Gen. Oleh Ivashchenko since January 2026, HUR operates under the Ministry of Defense but maintains direct channels to the President15. HUR is uniquely unrestrained compared to Western military intelligence agencies. It not only collects and analyzes data regarding Russian defense-industrial output and troop movements but possesses elite kinetic units capable of direct action behind enemy lines, high-profile sabotage, and strategic psychological operations7. The Special Operations Forces (SSO), commanded by Maj. Gen. Oleksandr Trepak since May 2024, is an independent branch of the AFU modeled on NATO standards20. While HUR handles strategic intelligence, the SSO executes tactical special reconnaissance and direct action. Crucially, the SSO organizes the "Rukh Oporu" (National Resistance Center), which trains and coordinates civilian partisans in Russian-occupied territories to conduct sabotage and gather human intelligence (HUMINT)32. Further augmenting the battlefield architecture is the Unmanned Systems Forces, commanded by Maj. Robert Brovdi, which integrates drone reconnaissance and asymmetric strike capabilities into operational planning25.

Foreign Political and Economic Intelligence

Carved out of the SBU in 2004 to separate foreign intelligence from domestic policing, the Foreign Intelligence Service of Ukraine (SZRU) focuses exclusively on foreign intelligence collection17. Currently led by acting head Oleh Luhovskyi, the SZRU provides the President with strategic assessments regarding Russian economic resilience, sanctions evasion, and geopolitical maneuvering18. Operating largely in the shadows without the kinetic public profile of HUR, the SZRU tracks global supply chains supporting the Russian military-industrial complex and monitors the shifting political tides in allied capitals39.

Domestic Counterintelligence, Counterterrorism, and Anti-Sabotage

The Security Service of Ukraine (SBU) is the primary domestic security and counterintelligence organ, reporting directly to the President. Historically bloated and plagued by Soviet-era corruption, the SBU has been aggressively reformed through wartime necessity28. The SBU is responsible for counterintelligence, counterterrorism, and the protection of national statehood against sabotage and collaboration. Under Lt. Gen. Vasyl Malyuk (2022–January 2026), the SBU hunted internal "moles" and expanded into asymmetric warfare, establishing specialized drone units that struck Russian oil refineries and airbases28. However, the SBU’s leadership remains highly volatile. Following Malyuk's resignation, Yevhen Khmara served as acting head until July 2026, when he was abruptly tapped to serve as acting Defense Minister amid a wave of political protests regarding the dismissal of Mykhailo Fedorov4. First Deputy Head Oleksandr Poklad subsequently became acting SBU Chief1. Poklad’s appointment has drawn severe criticism from civil society due to his alleged role in fabricating political cases and obstructing anti-corruption investigations14.

Cyber Defense and Cyber Intelligence

The State Service of Special Communications and Information Protection (SSSCIP), led by Brig. Gen. Oleksandr Potii, manages the security of state communications, cryptography, and critical infrastructure22. It coordinates with the Cyber Police, a department of the National Police led by Yurii Vykhodets, to defend against relentless Russian cyberattacks targeting the energy sector and government databases24. In late 2025, Ukraine adopted a new Cybersecurity Strategy to transition to proactive cyber defense, heavily integrating artificial intelligence to track advanced persistent threats22.

Prosecutorial and Anti-Corruption Institutions

While not traditional intelligence agencies, prosecutorial bodies such as the National Anti-Corruption Bureau (NABU) and the Specialized Anti-Corruption Prosecutor's Office (SAPO) frequently intersect with national security. They are responsible for investigating high-level corruption within defense procurement and state enterprises26. This creates intense friction with the SBU, which often utilizes state-secret classifications and counterintelligence mandates to shield political elites from NABU investigations, highlighting a severe structural conflict within Ukraine's governance apparatus14.

Wartime Intelligence-Cycle Diagram

Ukraine's intelligence cycle has been radically compressed to meet the demands of high-intensity warfare. The traditional linear model has been replaced by a networked, digital fusion architecture that rapidly integrates national-level requirements with volunteer open-source networks and commercial data.

Analysis of the Intelligence Cycle

The critical innovation of Ukraine's cycle is digital fusion. The Delta situational awareness system, developed by the Ministry of Defense's Center for Innovation, integrates multi-source intelligence into a cloud-based, real-time map accessible to commanders across the front49. Delta operates as the hub of an expansive ecosystem. For example, the Avengers AI platform, integrated into Delta, processes dozens of simultaneous drone video feeds to automatically identify and classify up to 12,000 camouflaged enemy targets per week, reducing detection time to a mere 2.2 seconds49. Once targets are identified, dissemination is nearly instantaneous. Applications like GIS Arta and Kropyva function as an "Uber for artillery," routing target coordinates directly to the nearest available kinetic asset, drastically reducing the sensor-to-shooter timeline48. This cycle relies heavily on civilian volunteer networks providing OSINT and commercial information, bypassing traditional classification controls that would otherwise bottleneck rapid dissemination.

Capability Matrix

Allied-Sharing Analysis

Ukraine’s survival relies heavily on intelligence cooperation with the United States, NATO members, and European partners. Allied intelligence provides the strategic depth that independent Ukrainian collection lacks, particularly regarding early warning of ballistic missile launches, deep-rear Russian logistics movements, and advanced strategic SIGINT.

Interoperability and Regional Shifts

Ukraine has succeeded in integrating software from United States and NATO command-and-control systems directly into its domestic architecture. The Delta system utilizes the Link-16 tactical communication system, enabling seamless data sharing with Western platforms like F-16 fighter jets52. Recognizing the need for institutionalized regional cooperation, Ukraine advanced the SENTINEL Program in 2026, a joint initiative with the EU Advisory Mission (EUAM) and NATO to establish a Joint Maritime Security Centre61. This center integrates Ukraine into Euro-Atlantic maritime domain awareness, providing real-time data on Russian naval movements, "dark ship" shadow-fleet tankers, and threats to subsea infrastructure in the Black Sea53.

Dependence, Restrictions, and the March 2025 Crisis

The profound reliance on allied intelligence poses severe sovereign risks, particularly regarding restrictions on the use of Western data for strikes inside Russian territory. This vulnerability was starkly exposed in early March 2025, when the Trump administration abruptly suspended all intelligence sharing with Ukraine in an effort to force President Zelenskyy into accepting a 30-day ceasefire on American terms5. This freeze instantly blinded Ukraine to Russian strategic bomber movements and severely degraded its ability to conduct precision long-range drone strikes, providing Russia a strategic advantage to exploit the intelligence gap6. Although the suspension was reversed on March 11, 2025, following diplomatic negotiations in Saudi Arabia, it demonstrated that the U.S. is willing to leverage vital intelligence flows to achieve bilateral foreign policy objectives6. This incident shocked Five Eyes partners and prompted Ukraine to actively cultivate regional redundancy and enhance its domestic AI-driven autonomous systems to mitigate the risks created by sudden changes in allied policy6.

Legal and Oversight Framework

The legal framework governing Ukraine's intelligence apparatus reflects an ongoing effort to align Soviet-legacy institutions with democratic norms, heavily modified by the exigencies of martial law.

Civil-Liberties and Governance Questions

Treating intelligence effectiveness strictly as an empirical question requires examining how internal governance failures, corruption, and the erosion of civil liberties degrade operational capacity and allied trust.

Security-Service Reform and Anti-Corruption Controls

The most severe domestic threat to intelligence integrity is the alleged use of the security apparatus to shield political elites from anti-corruption controls. The ongoing "Mindichgate" (Operation Midas) scandal centers on allegations that top officials, including former Presidential Office Head Andriy Yermak, former Defense Minister Rustem Umerov, and businessman Tymur Mindich, laundered energy-sector kickbacks through elite real estate27. As the National Anti-Corruption Bureau (NABU) launched investigations into these figures, the SBU allegedly interfered. In 2025, the SBU raided NABU headquarters—ostensibly to root out a Russian spy who was leaking classified data—but anti-corruption watchdogs claim it was a pretext to seize files related to Mindich and to intimidate detectives14. Furthermore, Artem Shylo, a former SBU official and Presidential Office advisor, was arrested by NABU in April 2024 for allegedly orchestrating a $2.4 million embezzlement scheme involving inflated transformer contracts for Ukrzaliznytsia (Ukrainian Railways)56. The July 2026 appointment of Oleksandr Poklad—the SBU deputy accused of orchestrating the attacks on NABU and fabricating political cases—to the position of acting SBU head signals a chilling willingness by the political leadership to prioritize loyalists over transparent governance and political neutrality14.

Protection of Journalists and Wartime Surveillance

The SBU has been empirically verified to have abused its counterintelligence powers to conduct wartime surveillance on domestic journalists. In early 2024, the SBU's Department for the Protection of National Statehood (DZND), led by Roman Semenchenko, conducted illegal hidden-camera surveillance of the Bihus.Info investigative journalism team at a country resort, later attempting to frame the journalists in an "anti-drug operation"47. Semenchenko was subsequently dismissed47. Similarly, Illya Vityuk, the SBU’s Cybersecurity Head, allegedly directed military recruitment officers to issue a draft notice to Slidstvo.Info journalist Yevhen Shulhat in retaliation for publishing an exposé on Vityuk’s unexplained wealth, which included luxury real estate47. Vityuk was later removed from his post82. These actions highlight a lack of accountability for covert operations and demonstrate how the weaponization of the intelligence apparatus against civil society diverts highly trained personnel away from treason and collaboration investigations.

Historical Timeline

• 1991–2004: Following independence from the Soviet inheritance, the KGB structure is rebranded as the SBU. The agency suffers from massive early institutional weaknesses, corruption, political weaponization, and deep Russian penetration concerns29.
• 2004: Amid political upheavals, the SZRU is spun off from the SBU to handle foreign intelligence, representing an early attempt to reform the apparatus29.
• 2014: The Euromaidan revolution and the subsequent Russian annexation of Crimea expose the catastrophic failure of Ukraine's intelligence apparatus, which collapses due to treason among top commanders. The Donbas war begins84.
• 2014–2021: A grueling period of post-2014 reforms and Western assistance. The SBU and HUR are modernized with allied support. The SSO is formed in 2016 to NATO standards16. The 2020 Law on Intelligence provides a new legal framework30.
• February 2022: Full-scale Russian invasion. Ukrainian intelligence anticipates the invasion, but institutional responses lag. The SBU undergoes massive purges of collaborators to ensure wartime adaptation.
• 2023–2024: Ukraine pioneers intelligence-driven drone warfare, developing systems like Delta and executing bold raids into Russia.
• March 2025: The U.S. temporarily halts intelligence sharing, forcing Ukraine to rapidly diversify its intelligence partnerships5.
• June 2025: Operation Spiderweb demonstrates Ukraine's capability to execute complex, strategic sabotage inside Russia41.
• July 2026: A massive political shakeup altering the most recent leadership and structural dynamics. Defense Minister Fedorov is dismissed; SBU leadership transitions to Poklad and Khmara; Klymenko replaces Umerov at the NSDC1.

Five High-Level Case Studies

1\. Intelligence Weaknesses Surrounding Crimea in 2014

• Event: The rapid, unopposed Russian annexation of Crimea.
• Ukrainian Statements: Post-2014 leadership claimed the military and SBU were hollowed out by the ousted Yanukovych regime, rendering organized defense impossible84.
• Russian Claims: Framed the annexation as a peaceful, democratic integration supported by the local populace, denying overt military intervention initially.
• Allied Assessments: Western intelligence noted the highly organized deployment of unmarked Russian special forces ("little green men") but failed to formulate a strategy to deter the invasion84.
• Independent Verification: The failure was systemic. Russian intelligence (FSB/GRU) had deeply penetrated the SBU. Covert Russian operatives operated with impunity because local SBU and military commanders either defected or refused orders, demonstrating a catastrophic collapse of counterintelligence84.

2\. Rebuilding Counterintelligence: The Kulinich and Kozyura Moles

• Event: The arrests of top SBU officials Oleh Kulinich (2022) and Dmytro Kozyura (2025) for high treason.
• Ukrainian Statements: The SBU under Vasyl Malyuk hailed these arrests as triumphs of "self-cleansing" and counterintelligence mastery47.
• Russian Claims: Russia rarely acknowledges captured intelligence assets, maintaining operational silence regarding Kulinich and Kozyura.
• Allied Assessments: Allied intelligence viewed these arrests as necessary steps to secure classified data sharing, though expressing concern over the depth of the infiltration58.
• Independent Verification: While the arrests were successful, they empirically demonstrate the terrifying longevity of Russian penetration. Kulinich, the head of the Crimean SBU, sabotaged southern defenses during the 2022 invasion and communicated directly with Moscow58. Kozyura, the chief of staff of the SBU's Anti-Terrorism Center, spied for the FSB from 2018 until his arrest in 2025, passing critical data on air defenses and missile strikes59.

3\. Strategic Warning Before the 2022 Invasion

• Event: The intelligence buildup and strategic warning prior to February 24, 2022\.
• Ukrainian Statements: HUR Chief Kyrylo Budanov was one of the few Ukrainian officials to publicly and accurately predict the multi-axis invasion, while political leadership downplayed the threat to avoid economic panic62.
• Russian Claims: Repeatedly denied intentions to invade, labeling intelligence warnings as Western hysteria.
• Allied Assessments: U.S. and UK intelligence successfully predicted the invasion, declassifying information at an unprecedented pace to warn the world63.
• Independent Verification: A classic manifestation of the "Warning Paradox": intelligence accurately forecasted the threat, but national institutions failed to translate that warning into comprehensive preventive action and defensive posture in a timely manner63.

4\. Battlefield and Maritime Intelligence Innovation

• Event: The development of the Delta system and maritime domain awareness integration.
• Ukrainian Statements: The Ministry of Defense claims Delta processes 12,000 targets a week via the Avengers AI module, providing unparalleled situational awareness49.
• Russian Claims: Have attempted to hack and disrupt the Delta system via phishing campaigns, claiming to have compromised user data49.
• Allied Assessments: NATO and the EUAM actively support Ukraine's maritime intelligence integration through the SENTINEL program, viewing Delta as a highly capable, interoperable system52.
• Independent Verification: Western military observers verify that Delta successfully replicates and in some ways exceeds NATO's Joint All-Domain Command and Control (JADC2) framework on a fraction of the budget51. Independent audits confirm Delta's cybersecurity resilience49.

5\. Operation Spiderweb (June 1, 2025\)

• Event: A coordinated SBU drone attack on five Russian strategic airbases (Olenya, Dyagilevo, Ivanovo Severny, Belaya, Ukrainka).
• Ukrainian Statements: The SBU claimed 41 Russian aircraft were damaged or destroyed using 117 FPV drones launched from disguised civilian trucks smuggled into Russia by unwitting drivers41.
• Russian Claims: Acknowledged the attack but minimized damage, claiming air defenses intercepted the majority of the drones.
• Allied Assessments: U.S. officials estimated roughly 20 aircraft were hit, with 10 completely destroyed, significantly degrading Russia's strategic bomber fleet41.
• Independent Verification: Satellite imagery confirmed the destruction of at least seven strategic bombers at Belaya airbase alone, 4,300 km from Ukraine. Independent media verified the tactical mechanism: drones hidden in prefabricated housing modules transported by civilian truckers, resulting in civilian casualties when one truck detonated41.

Strengths, Weaknesses, and Unresolved Intelligence Gaps

Strengths:

• Asymmetric Innovation: Rapid prototyping and deployment of OSINT, commercial satellite data, and AI (Delta, GIS Arta, Sky Sentinel) into immediate battlefield lethality49.
• Operational Audacity: Unmatched willingness to execute deep-penetration sabotage (Operation Spiderweb) and high-risk maritime drone operations (Sea Baby)53.
• Decentralized Execution: Empowering tactical units to act on intelligence without waiting for cumbersome hierarchical approvals51.

Weaknesses:

• Politicization and Corruption: The use of intelligence agencies to surveil domestic journalists and obstruct independent anti-corruption bodies severely undermines institutional integrity and allied trust26.
• Vetting Failures: The continued discovery of long-term, high-ranking FSB moles indicates systemic flaws in personnel security and counterintelligence59.
• Allied Dependence: Despite domestic innovations, Ukraine remains dangerously reliant on U.S. space-based SIGINT/GEOINT, leaving it highly vulnerable to foreign political shifts6.

Unresolved Intelligence Gaps:

• Can the fragmented intelligence apparatus maintain operational continuity amid the severe political turnover and centralization of power seen in the July 2026 reshuffle?
• How will Ukraine transition its ad-hoc, volunteer-driven tech networks into a standardized, sustainable military-industrial intelligence complex without suffocating innovation?

Ukrainian Terminology Glossary

• HUR / DIU: Головне управління розвідки (Main Directorate of Intelligence of the Ministry of Defense).
• SBU: Служба безпеки України (Security Service of Ukraine).
• SZRU / FISU: Служба зовнішньої розвідки України (Foreign Intelligence Service of Ukraine).
• SSO: Сили спеціальних операцій (Special Operations Forces).
• SBGSU: Державна прикордонна служба України (State Border Guard Service of Ukraine).
• SSSCIP: Державна служба спеціального зв'язку та захисту інформації (State Service of Special Communications and Information Protection).
• Stavka: Ставка Верховного Головнокомандувача (Supreme Commander-in-Chief's Staff).
• NABU: Національне антикорупційне бюро України (National Anti-Corruption Bureau of Ukraine).
• SAPO: Спеціалізована антикорупційна прокуратура (Specialized Anti-Corruption Prosecutor's Office).
• Rukh Oporu: Рух Опору (National Resistance Center; partisan network).
• DZND: Департамент захисту національної державності (Department for the Protection of National Statehood, within the SBU).

Which wartime claims can and cannot be independently verified?

In the fog of the Russo-Ukrainian war, distinguishing empirical reality from strategic communication is vital. What CAN be independently verified:

• Kinetic Outcomes: The destruction of Russian strategic bombers during Operation Spiderweb and naval assets in the Black Sea can be independently verified through commercial satellite imagery (GEOINT) and open-source visual confirmation41.
• Domestic Surveillance Abuses: The SBU's illegal surveillance of journalists (Bihus.Info, Slidstvo.Info) has been independently verified through released video evidence, resulting in official dismissals and formal prosecutorial investigations47.
• Technological Integration: The existence and basic functionality of systems like Delta and GIS Arta are verified by NATO observers and independent cybersecurity audits49.

What CANNOT be independently verified:

• Casualty and Damage Inflation: Official Ukrainian claims regarding the exact number of enemy personnel killed by intelligence operations or the exact number of aircraft destroyed in strikes (e.g., claiming 41 aircraft in Spiderweb versus U.S. estimates of 20\) are rarely verifiable and usually inflated for psychological effect41.
• The Full Extent of Russian Penetration: While arrests of moles like Kulinich and Kozyura are public, it is impossible to independently verify SBU claims of having rooted out "all" remaining Russian networks28. The true depth of FSB/GRU infiltration remains heavily classified.
• Behind-the-Scenes Anti-Corruption Motives: In cases like the SBU's raid on NABU or the prosecution of figures in "Mindichgate," the exact flow of illicit funds and the internal political directives driving these inter-agency turf wars remain obscured by state secrecy laws and wartime classification56.

Works cited

1. Zelenskyy appoints Oleksandr Poklad as acting SBU chief \- The New Voice of Ukraine, https://english.nv.ua/nation/zelenskyy-appoints-oleksandr-poklad-as-acting-head-of-ukraine-s-sbu-50625326.html

2. Zelensky offered former Interior Minister Klymenko the position of NSDC Secretary \- Бабель, https://babel.ua/en/news/128636-zelensky-offered-former-interior-minister-klymenko-the-position-of-nsdc-secretary

3. Zelensky names security service general as acting defence minister \- Brussels Signal, https://brusselssignal.eu/2026/07/zelensky-names-security-service-general-as-acting-defence-minister/

4. Ukraine's divisive reshuffle and defence shake-up: what we know \- The New Indian Express, https://www.newindianexpress.com/world/2026/Jul/17/ukraines-divisive-reshuffle-and-defence-shake-up-what-we-know

5. Trump administration pauses flow of intelligence to Ukraine \- Defense News, https://www.defensenews.com/global/europe/2025/03/05/trump-administration-pauses-flow-of-intelligence-to-ukraine/

6. U.S. Intelligence Sharing with Ukraine Suspension and Restoration \- Carleton University, https://carleton.ca/eetn/2025/u-s-intelligence-sharing-with-ukraine-suspension-and-restoration/

7. Kyrylo Budanov \- Wikipedia, https://en.wikipedia.org/wiki/Kyrylo\_Budanov

8. Ukraine: a New Year's reset of the state security management system \- OSW, https://www.osw.waw.pl/en/publikacje/analyses/2026-01-05/ukraine-a-new-years-reset-state-security-management-system

9. Zelenskyy offers Klymenko position of NSDC Secretary instead of Umerov, https://ukranews.com/en/news/1163657-zelenskyy-offers-klymenko-position-of-nsdc-secretary-instead-of-umerov

10. Statement of the Intelligence Committee under the President of Ukraine, https://cpd.gov.ua/en/docs/statement-of-the-intelligence-committee-under-the-president-of-ukraine/

11. National Security Committee recommends Rada pass defense innovation management bill at first reading – MP, https://en.interfax.com.ua/news/general/1179713.html

12. Zelensky has changed the composition of the Commander-in-Chief's Staff. He added two people, including one minister \- LIGA.net, https://news.liga.net/en/politics/news/zelensky-has-changed-the-composition-of-the-commander-in-chiefs-staff-he-added-two-people-including-one-minister

13. Oleksandr Poklad will serve as acting head of the SBU, replacing Yevhen Khmara \- LIGA.net, https://news.liga.net/en/politics/news/oleksandr-poklad-will-serve-as-acting-head-of-the-sbu-replacing-yevhen-khmara

14. Who are Ukraine's new police and security chiefs, and what accusations do they face?, https://kyivindependent.com/who-are-ukraines-new-police-and-security-chiefs-and-what-accusations-do-they-face/

15. Oleh Ivashchenko (Ukrainian general) \- Wikipedia, https://en.wikipedia.org/wiki/Oleh\Ivashchenko\(Ukrainian\_general))

16. Main Directorate of Intelligence (Ukraine) \- Wikipedia, https://en.wikipedia.org/wiki/Main\Directorate\of\Intelligence\_(Ukraine))

17. Foreign Intelligence Service of Ukraine \- Wikipedia, https://en.wikipedia.org/wiki/Foreign\Intelligence\Service\of\_Ukraine

18. Zelensky appoints Luhovskyi as acting head of Foreign Intelligence Service \- Ukrinform, https://www.ukrinform.net/rubric-polytics/4087788-zelensky-appoints-luhovskyi-as-acting-head-of-foreign-intelligence-service.html

19. State Border Guard Service of Ukraine \- Wikipedia, https://en.wikipedia.org/wiki/State\Border\Guard\Service\of\_Ukraine

20. Oleksandr Trepak \- Wikipedia, https://en.wikipedia.org/wiki/Oleksandr\_Trepak

21. Special Operations Forces | Ministry of Defence of Ukraine, https://mod.gov.ua/en/about-us/special-operations-forces

22. Ukraine: Facing the intensification of Russian cyber attacks \- REGARD SUR L'EST, https://regard-est.com/ukraine-facing-the-intensification-of-russian-cyber-attacks

23. Brigadier General Oleksandr Potii to lead SSSCIP \- Держспецзв'язку, https://cip.gov.ua/en/news/derzhspeczv-yazku-ocholiv-brigadnii-general-oleksandr-potii

24. Ukraine's Cybersecurity Strategy 3.0: A Course Toward Cyber Resilience, Digital Sovereignty, and Proactive Cyber Defense, https://www.rnbo.gov.ua/en/Diialnist/7637.html

25. Robert Brovdi \- Wikipedia, https://en.wikipedia.org/wiki/Robert\_Brovdi

26. Ukraine: the independence of anti-corruption bodies is being dismantled amid scandals involving top politicians \- OSW, https://www.osw.waw.pl/en/publikacje/analyses/2025-07-23/ukraine-independence-anti-corruption-bodies-being-dismantled-amid

27. Zelensky Not Part of 'Midas' Corruption Probe, NABU Says \- Kyiv Post, https://www.kyivpost.com/post/75966

28. Vasyl Malyuk \- Wikipedia, https://en.wikipedia.org/wiki/Vasyl\_Malyuk

29. Security Service of Ukraine \- Wikipedia, https://en.wikipedia.org/wiki/Security\Service\of\_Ukraine

30. INTELLIGENCE SECRET: LEGISLATIVE DEFINITION AND CORRELATION WITH STATE SECRET \- Національна школа суддів України, http://slovo.nsj.gov.ua/index.php/en/archive-of-rooms1/2022/1-2-38-39/31-arh-2022-en/761-intelligence-secret-legislative-definition-and-correlation-with-state-secret

31. Oleh Luhovskyi Has Reported to the President of Ukraine on the Situation in Crimea and belarus \- Служба зовнішньої розвідки України, https://szru.gov.ua/en/news-media/news/oleh-luhovskyi-has-reported-to-the-president-of-ukraine-on-the-situation-in-crimea-and-belarus

32. Ukrainian Special Operations Forces (SSO) \- Grey Dynamics, https://greydynamics.com/ukrainiansso/

33. Special Operations Forces (Ukraine) \- Wikipedia, https://en.wikipedia.org/wiki/Special\Operations\Forces\_(Ukraine))

34. National Security and Defense Council of Ukraine \- Wikipedia, https://en.wikipedia.org/wiki/National\Security\and\Defense\Council\of\_Ukraine

35. New Year. Old War. New Team. Who's Who In Zelenskyy's Personnel Shuffle, https://www.rferl.org/a/ukraine-zelenskyy-personnel-changes-corruption-war/33644026.html

36. From master spy to lead negotiator What does Zelensky's new chief of staff, Kyrylo Budanov, bring to the peace talks? \- Meduza, https://meduza.io/en/feature/2026/01/08/from-master-spy-to-lead-negotiator

37. Serhiy Marchenko and Oleksandr Zavitnevych Joined the Headquarters of the Supreme Commander-in-Chief \- sud.ua, https://sud.ua/en/news/ukraine/362476-sergey-marchenko-i-aleksandr-zavitnevich-voshli-v-sostav-stavki-verkhovnogo-glavnokomanduyuschego

38. Interview: Commander of Ukraine's Special Operations Forces' resistance movement, https://kyivindependent.com/how-ukraines-special-operations-forces-resistance-movement-is-operating-under-russian-occupation/

39. Oleh Luhovskyi, First Deputy Head of the Foreign Intelligence Service of Ukraine: "Oreshnik is a Tool to Intimidate Our European Partners", https://szru.gov.ua/en/news-media/news/oleh-luhovskyi-first-deputy-head-of-the-foreign-intelligence-service-of-ukraine-oreshnik-is-a-tool-to-intimidate-our-european-partners

40. russia Plans to Sell $19 Billion Worth of Gold to Cover Its Budget Deficit, https://szru.gov.ua/en/news-media/news/russia-plans-to-sell-19-billion-worth-of-gold-to-cover-its-budget-deficit

41. Operation Spiderweb \- Wikipedia, https://en.wikipedia.org/wiki/Operation\_Spiderweb

42. Yevhenii Khmara \- Wikipedia, https://en.wikipedia.org/wiki/Yevhenii\_Khmara

43. Zelensky names Ukraine’s acting security chief Yevhen Khmara as acting defense minister, https://meduza.io/en/news/2026/07/16/zelensky-names-ukraine-s-acting-security-chief-yevhen-khmara-as-acting-defense-minister

44. CYBERCRIME CONFERENCE C³ 20 – 21 MAY 2026 \- BKA, https://www.bka.de/SharedDocs/Downloads/DE/Publikationen/C3Conference/2026/KonferenzmappeEN.pdf?\\_blob=publicationFile\&v=5

45. Head of SSSCIP: a peace deal will not bring peace to cyberspace \- RIA, https://www.ria.ee/en/head-ssscip-peace-deal-will-not-bring-peace-cyberspace

46. NABU and SAPO bring Ukrainian Railways procurement corruption case to court, https://english.nv.ua/nation/nabu-sends-case-against-mp-viktor-bondar-to-court-over-ukrzaliznytsia-procurement-scheme-50589060.html

47. Malyuk Dismissed: What Marked the SBU During His Leadership \- The Page, https://en.thepage.ua/news/rada-approves-malyuks-dismissal-highlights-of-the-service-under-his-tenure

48. Advanced Technologies in the War in Ukraine \- German Marshall Fund, https://www.gmfus.org/sites/default/files/2024-10/Mysyshyn%20-%20Ukraine%20war%20tech%20-%20paper.pdf

49. Delta (situational awareness system) \- Wikipedia, https://en.wikipedia.org/wiki/Delta\(situational\awareness\_system))

50. Open Source Technology and Public-Private Innovation Are the Key to Ukraine's Strategic Resilience \- War on the Rocks, https://warontherocks.com/open-source-technology-and-public-private-innovation-are-the-key-to-ukraines-strategic-resilience/

51. Full article: Reassessing Biddle's Modern System: data-linked kill chains, advanced algorithms, and the evolution of combined arms warfare in the Russo-Ukrainian war \- Taylor & Francis, https://www.tandfonline.com/doi/full/10.1080/14702436.2026.2672089

52. Does Ukraine Already Have Functional CJADC2 Technology? \- CSIS, https://www.csis.org/analysis/does-ukraine-already-have-functional-cjadc2-technology

53. Mitigating Maritime Risks: Mapping Dark Ships from Russia and Iran to India and China, https://manaramagazine.org/2026/01/mitigating-maritime-risks-dark-ships/

54. Operation Spiderweb: Lessons for Protecting America's Bomber Fleet \- Pericles Institute, https://www.periclesinstituteau.com/post/operation-spiderweb-lessons-for-protecting-america-s-bomber-fleet

55. Armed Forces of Ukraine \- Wikipedia, https://en.wikipedia.org/wiki/Armed\Forces\of\_Ukraine

56. The case of Artem Shylo, former Advisor to the Presidential Office \- HACC decided, https://hacc-decided.ti-ukraine.org/en/cases/52022000000000169

57. An SBU colonel, who was personally detained by Malyuk, was sentenced to life in prison for treason \- LIGA.net, https://news.liga.net/en/politics/news/an-sbu-colonel-who-was-personally-detained-by-malyuk-was-sentenced-to-life-in-prison-for-treason

58. From the Kremlin to Kyiv: How an American lobbyist allegedly planted Russia's 'top agent' in Zelenskyy's inner circle, https://english.nv.ua/nation/how-an-american-lobbyist-allegedly-placed-an-fsb-agent-in-zelenskyy-s-team-50489029.html

59. Former head of the SBU Anti-Terrorist Center sentenced to life for high treason \- Бабель, https://babel.ua/en/news/128044-he-passed-data-to-the-fsb-former-head-of-the-sbu-anti-terrorist-center-sentenced-to-life-for-high-treason

60. No.26-1140, Sky Sentinel (Apr 26).pdf \- Army.mil, https://api.army.mil/e2/c/downloads/2026/04/14/74c34dce/no-26-1140-sky-sentinel-apr-26.pdf

61. Steering Committee Launches SENTINEL Program to Strengthen Ukraine's Maritime Domain Awareness, https://www.euam-ukraine.eu/news/steering-committee-launches-sentinel-program-to-strengthen-ukraine-s-maritime-domain-awareness/

62. Zelensky names military spy chief to lead Office of President \- World Socialist Web Site, https://www.wsws.org/en/articles/2026/01/07/eiij-j07.html

63. The Warning Paradox: Why Correct Intelligence Often Fails \- The Cipher Brief, https://www.thecipherbrief.com/why-correct-intelligence-often-fails

64. Ukraine, the EU and NATO strengthen interagency coordination on maritime security, https://mindev.gov.ua/en/news/ukraina-razom-z-ies-i-nato-posyliuiut-mizhvidomchu-koordynatsiiu-z-pytan-morskoi-bezpeky

65. SENTINEL Program Moves into Implementation Phase to Strengthen Ukraine's Maritime Security, https://www.euam-ukraine.eu/news/sentinel-program-moves-into-implementation-phase-to-strengthen-ukraine-s-maritime-security/

66. SENTINEL programme moves into implementation phase to strengthen Ukraine's maritime security \- EU NEIGHBOURS east, https://euneighbourseast.eu/news/latest-news/sentinel-programme-moves-into-implementation-phase-to-strengthen-ukraines-maritime-security/

67. US stops sharing intelligence on Russia with Ukraine \- The Guardian, https://www.theguardian.com/world/2025/mar/05/us-stops-sharing-intelligence-on-russia-with-ukraine

68. By alienating its intelligence partners, the US risks losing more than trust \- Atlantic Council, https://www.atlanticcouncil.org/dispatches/by-alienating-its-intelligence-partners-the-us-risks-losing-more-than-trust/

69. (PDF) Reforming Intelligence in Ukraine: The Past, Present, and Future \- ResearchGate, https://www.researchgate.net/publication/385778227\Reforming\Intelligence\in\Ukraine\The\Past\Present\and\_Future

70. Ukraine: Law on Counterintelligence Activities \- Intelligence Resource Program, https://irp.fas.org/world/ukraine/cilaw.html

71. What kind of information is deemed a state secret in Ukraine?, https://khpg.org/en/1141117178

72. List of information constituting official information in the Economic Security Bureau of Ukraine, https://esbu.gov.ua/en/for-the-public1/access-to-public-information/list-of-information-constituting-official-information-in-the-economic-security-bureau-of-ukraine

73. Institute of Cyber Warfare Research — The goal of the Cyber ​​War Research Institute is to increase the level of cyber security of Ukraine. Creation of a platform that promotes public-private partnership and increases readiness for cooperation during crisis situations., https://understandingcyberwar.org/

74. Ukraine's Security Service opens pre-trial investigation into Zelensky's former associate Mindich \- Hromadske, https://hromadske.ua/en/ukraine/256669-ukraines-security-service-opens-pre-trial-investigation-into-zelenskys-former-associate-mindich

75. Yermak case brings wartime corruption scandal to Zelenskyy's doorstep \- The New Voice of Ukraine, https://english.nv.ua/nation/bankova-gate-laid-bare-why-the-yermak-mindich-case-may-define-zelenskyy-s-presidency-50608462.html

76. SBU official Artem Shyla was detained in the case of fraud in Ukrzaliznytsia procurement, https://unn.ua/en/news/disclosure-of-an-organized-group-headed-by-a-former-advisor-to-the-presidential-office-sbu-official-artem-shylo-detained

77. Ex-Presidential Office advisor taken into custody in Ukrainian Railways corruption scandal, https://kyivindependent.com/former-presidential-office-advisor-taken-into-custody-in-ukrainian-railways-corruption-scandal/

78. Journalist Denys Bihus responded to the MP Honcharenkoʼs accusations about cooperation with SBU \- Бабель, https://babel.ua/en/news/118994-journalist-denys-bihus-responded-to-the-mp-honcharenko-s-accusations-about-cooperation-with-sbu

79. Surveillance of Bihus.Info: The prosecutorʼs office is investigating the obstruction of journalistsʼ activities \- Бабель, https://babel.ua/en/news/103866-surveillance-of-bihus-info-the-prosecutor-s-office-is-investigating-the-obstruction-of-journalists-activities

80. Inwigilacja Bihus.Info: co wiadomo o zaangażowaniu SBU i możliwych konsekwencjach, https://ua.news/pl/ukraine/slezhka-za-bihus-info-chto-yzvestno-o-prychastnosty-sbu-y-vozmozhnyh-posledstvyyah

81. Semenchenko dismissed from SBU for surveillance of Bihus.Info, https://unn.ua/en/news/semenchenko-dismissed-from-sbu-for-surveillance-of-bihusinfo-journalists-other-law-enforcement-officers-involved-in-the-scandal-to-be-punished

82. Deleted Evidence: SBU General Vitiuk Filmed Berkut's Attacks on Maidan Protesters, https://www.slidstvo.info/en/news/deleted-evidence-sbu-general-vitiuk-filmed-berkut-s-attacks-on-maidan-protesters/

83. NAPC did not confirm the illegal enrichment of the SBU ex-general Vityuk. Earlier, journalists found his apartment for 21.5 million hryvnias \- Бабель, https://babel.ua/en/news/111036-napc-did-not-confirm-the-illegal-enrichment-of-the-sbu-ex-general-vityuk-earlier-journalists-found-his-apartment-for-21-5-million-hryvnias

84. Russia's hybrid warfare strategy: From Crimea to Ukraine \- Observer Research Foundation, https://www.orfonline.org/expert-speak/russias-hybrid-warfare-strategy

85. How Russian agents infiltrated Zelenskyy's team \- Sunday Times. PHOTO \- Цензор.НЕТ, https://censor.net/en/news/3534814/how-russian-spies-infiltrated-zelenskyy-s-team

86. Was the Russian Invasion of Ukraine a Failure of Western Deterrence? \- USAWC Press, https://press.armywarcollege.edu/cgi/viewcontent.cgi?article=3251\&context=parameters

87. Senior Ukrainian security official held in spy probe \- TVP World, https://tvpworld.com/85022786/senior-ukrainian-security-official-held-in-spy-probe

88. Former Head of the Security Service of Ukraine (SBU) in the Autonomous Republic of Crimea Oleh Kulinich will stand trial (VIDEO \- State Bureau of Investigation, https://dbr.gov.ua/en/news/kolishnij-nachalnik-golovnogo-upravlinnya-sbu-v-ar-krim-oleg-kulinich-postane-pered-sudom

89. Spiderweb \- Join Ukraine Army, https://joinuarmy.org/en/all-news/spiderweb/

90. Caught in the web. The unsuspecting truckers at the heart of Ukraine's daring “Operation Spiderweb” drone attack against Russian military airfields \- Mediazona, https://en.zona.media/article/2025/09/23/spiderweb

91. Operation "Spiderweb": The flight from the starting point to the target took 5–6 minutes, and the pilots underwent a year of training, https://news.liga.net/en/war/news/operation-spiderweb-the-flight-from-the-starting-point-to-the-target-took-5-6-minutes-and-the-pilots-underwent-a-year-of-training

92. Russias War in Ukraine \- Marine Corps University, https://www.usmcu.edu/Outreach/Marine-Corps-University-Press/MCU-Journal/JAMS-vol-14-no-2/Russias-War-in-Ukraine/

Memory References

• International Coverage
• Regional Intelligence Atlas
• International Fairness
• Memory operating model
• Long-term memory pointer ledger

Related Durable Documents

• Long-term memory index
• Split-memory architecture

Supersession Status

Current canonical research report. It supports design and research routing but does not override explicit repository instructions, verified implementation, tests, or active .uai current-state records. Review status and truth boundaries are recorded in the pointer ledger.