IN THIS BULLETIN
Tanzania again dominates this cycle, on three fronts at once. Tundu Lissu’s treason trial reached its most consequential witness stage, with three summoned security chiefs found to be abroad and unreachable by the court itself. Emmanuel Nchimbi remains unreachable three weeks after his resignation, with no government statement addressing his status. And the state had to publicly debunk a forged Chief Secretary’s notice within the same week a genuine crisis, the death of First Gentleman Hafidh Ameir, left a real information vacuum for that forgery to exploit. The Full Assessment tests whether the summoned witnesses’ unavailability reflects routine scheduling or soft non-compliance, and what the disinformation pattern signals about state communications capacity under strain.
Separately, and given full free treatment this cycle rather than folded into the roundup below: Uganda has arrested or removed nearly its entire senior military-intelligence leadership lineage in three waves since March, a pattern this bulletin assesses against the alternative explanations of routine anti-corruption enforcement and succession-related consolidation of the security apparatus under Muhoozi Kainerugaba.
Elsewhere: South Africa confirmed new permanent leadership at the Special Investigating Unit; a dossier shared with the New York Times and Washington Post added the most detailed evidence yet of a Sudanese military chlorine-weapons programme; Libya’s Tripoli government announced arrests over a sabotage campaign targeting the Zawiya oil complex; a secret three-month ceasefire between Nigeria’s government and a Boko Haram faction was revealed; Mozambique’s Supreme Court set opposition leader Venâncio Mondlane on course for trial; and Germany’s AfD won a landslide state election that places a party classified as confirmed right-wing extremist within reach of oversight authority over the domestic intelligence service that surveils it.
TABLE OF CONTENTS
Briefing
Tanzania’s Compounding Institutional Pressure
South Africa, Sudan, Libya, Nigeria, Mozambique, Germany
Intelligence Leadership Change Check
Assessment One: Uganda’s Military Intelligence Purge
Key Judgements, Scope and Approach, Background, Analysis, Outlook, Analytical Foundations
Assessment Two: Tanzania’s Institutions Under Strain
Key Judgements, Scope and Approach, Background, Analysis, Outlook, Analytical Foundations
Tanzania:
Three summoned security chiefs found abroad as Lissu trial reaches its decisive stage; Nchimbi enters fourth week unreachable; two forged official documents circulated and debunked.
CHADEMA Vice-Chairman (Mainland) John Heche completed his testimony as the fifth and final civilian defence witness in Tundu Lissu’s treason trial on 16 September. The High Court rejected a prosecution bid to recall him over remarks allegedly made outside the courtroom while under oath. Attention has shifted to the three state-security witnesses the court ordered summoned on 10 September: IGP Camillius Wambura, CDF Jacob Mkunda, and DCI Ramadhani Kingai. The court registrar reported the summonses could not initially be served because all three were outside Tanzania. DCI Kingai is scheduled to testify on 18 September; the return dates of the IGP and CDF remain unconfirmed as of this writing.
Former Vice-President Emmanuel Nchimbi remains unreachable since his 25 August resignation, over three weeks with no government statement on his status, consistent with the pattern flagged in the prior bulletin’s Full Assessment.
Separately, President Samia Suluhu Hassan’s husband, Hafidh Ameir Hassan, died on 7 September at Emilio Mzena Memorial Hospital, Zanzibar, following treatment for a heart condition. Tanzania’s Ministry of Information (MAELEZO) subsequently issued a public notice branding as fake a forged Chief Secretary’s statement, formatted to resemble an official document, that had claimed a specific 90-day presidential leave arrangement and been picked up by several regional outlets before correction. A second, cruder fabrication falsely claiming Nchimbi had been found dead circulated separately on social media without corroboration from any outlet or official channel and is assessed as fabricated.
University of Dodoma lecturer Melkisedek Kaijage, held since July on terrorism and economic sabotage charges over the banned Saba Saba protests, was discharged on 10 September after the DPP stated it had no intention of proceeding, though the Dodoma Regional Crime Officer separately sought conduct conditions on him, meaning the release is not unconditional.
The Full Assessment, testing whether the summoned witnesses’ unavailability reflects soft non-compliance rather than coincidence, and what two forged official documents in one week signal about the information environment surrounding Tanzania’s current leadership questions, is available to paid subscribers below.
South Africa:
New permanent head confirmed at the Special Investigating Unit
President Cyril Ramaphosa appointed Leonard Lekgetho as permanent SIU head effective 1 September, ending seven months of acting leadership since Adv Andy Mothibi’s departure to become National Director of Public Prosecutions. The SIU is a statutory anti-corruption body, not a member of South Africa’s intelligence community proper, though its casework regularly intersects with Crime Intelligence and the Hawks.
Sudan:
Leaked dossier adds detail to chemical-weapons allegations
The New York Times and Washington Post separately published a dossier on 5 September, sourced from an unnamed Middle Eastern intelligence agency, describing a Sudanese Armed Forces chlorine-weapons programme said to have begun in 2024 under Brig Gen Tariq Hussain. Materials include intercepted messages suggesting army chief Gen Abdel-Fattah al-Burhan had direct knowledge of the programme. Sudan’s military denies the allegations.
Libya:
Arrests announced over Zawiya oil sabotage campaign
Libya’s Tripoli-based government announced the arrest of five people, including foreign nationals, over a “sabotage cell” behind repeated drone attacks on the Zawiya refining complex. No domestic intelligence agency has been named as leading the investigation in available reporting.
Nigeria:
Secret Boko Haram ceasefire revealed
The New Humanitarian reported an undisclosed three-month ceasefire tied to the June release of 360 civilians abducted from Ngoshe, allegedly accompanied by a five-billion-naira ransom the government denies paying. No specific security agency has been named as the ceasefire’s facilitator.
Mozambique:
Mondlane set for trial on terrorism-linked charges
Mozambique’s Supreme Court notified opposition leader Venâncio Mondlane on 25 August that he faces five charges, including incitement to terrorism, over the 2024 post-election protests. No evidence connecting the case to SISE has been independently confirmed.
Germany:
AfD’s Saxony-Anhalt win raises domestic intelligence-oversight question
The AfD won 44 percent of the vote in the 6 September Saxony-Anhalt state election. The state’s Verfassungsschutz classifies the local AfD branch as confirmed right-wing extremist, a designation under legal challenge. Because German state governments hold oversight authority over their domestic intelligence services, an AfD-led state government would place a monitored party in a position to influence the oversight of its own monitor, a tension not yet publicly addressed by state or federal officials in detail.
INTELLIGENCE LEADERSHIP CHANGE CHECK (06–17 September 2026)
Uganda is this period’s most significant exception. Three waves of arrests and removals since March have detained former holders of the Chieftaincy of Military Intelligence (CMI), now the Defence Intelligence and Security (DIS) directorate: former chiefs Abel Kandiho and Charles Bakahumura, and former Chief of Defence Intelligence and Security (CDIS) Maj Gen James Birungi, alongside Deputy Chief of Military Intelligence Col Abdul Rugumayo, replaced in March by Brig Gen Oscar Munanura. The current, sitting CDIS is Maj Gen Richard Otto, in post since 16 April 2025 when he replaced Birungi in a swap confirmed by UPDF’s own press office; Otto has not been reported arrested, removed, or otherwise implicated in this period’s arrests. Every figure detained this period is a former or retired holder of the post, not its current occupant, a distinction that matters directly for the succession-consolidation reading tested in Assessment One.
Niger saw a related but distinct development: on 11 September, junta leader Gen Abdourahamane Tiani reshuffled the top of the armed forces, naming Gen Mamane Sani Kiaou as Chief of Defence Staff in place of Gen Moussa Salaou Barmou, alongside three further senior appointments, two weeks after the late-August mutiny at Niamey’s Base 101. This is a military high-command reshuffle, not a confirmed change to Niger’s intelligence service specifically, and the two should not be conflated.
No change was identified this period for Mali’s ANSE (Modibo Koné), Zambia’s ZSIS (Friday Nyambe, confirmed under President Hichilema’s newly inaugurated second term), Mozambique’s SISE (José Pacheco), or Russia’s FSB, SVR, and GRU. The DRC’s ANR and Ethiopia’s NISS could not be confirmed to current-officeholder standard from available reporting this period; both are flagged as collection gaps rather than assumed unchanged. Elsewhere, TISS is carried forward as remaining under the Director-General named in the prior bulletin cycle; this has not been independently re-verified this period and is flagged as such, per this bulletin’s own sourcing convention. His non-appearance in the Lissu trial’s rejected witness list, discussed in Assessment Two, is a separate development from a leadership change and should not be conflated with one.
ASSESSMENT ONE
SUBJECT: Does Uganda’s three-wave removal of its military-intelligence leadership since March 2026 reflect a genuine anti-corruption enforcement drive, or consolidation of the security apparatus ahead of a Museveni succession?
KEY JUDGEMENTS
Every arrest across all three waves has targeted a former or retired holder of the CMI/DIS chief post or the immediate chain beneath one, rather than a representative cross-section of the UPDF officer corps a genuine anti-corruption sweep would be expected to produce; the current, sitting Chief of Defence Intelligence and Security, Maj Gen Richard Otto, in post since April 2025, has not been implicated. Confidence: Moderate. This is a pattern read across public reporting (Monitor, New Vision, TRT Afrika, SpyUganda) and UPDF’s own confirmed appointment record; no Ugandan government statement characterises the arrests this way, so the pattern itself, not the underlying facts of each arrest, is this assessment’s own inference.
If the consolidation reading is correct, Muhoozi Kainerugaba’s public role in ordering or endorsing each wave, including his direct warning to “dancing generals” in August, indicates he is acting with authority over the intelligence services beyond his formal land-forces command. Confidence: Low to Moderate. Muhoozi’s public statements are directly sourced; the inference that this reflects intended succession consolidation rather than a genuine internal anti-corruption mandate he has been given is this assessment’s own reading of motive, not a reported fact.
No further Ugandan government statement has offered a competing explanation for the pattern beyond anti-corruption and, for the August incident, breach of protocol; this leaves the anti-corruption framing untested against Muhoozi’s specific choice of targets. Confidence: High on the absence of a competing statement, which is a matter of the public record to date.
SCOPE AND APPROACH
This assessment addresses whether Uganda’s March-to-September pattern of CMI and DIS leadership removals constitutes routine internal discipline or succession-related consolidation, and what would distinguish the two going forward. It draws on Monitor, New Vision, TRT Afrika, and SpyUganda reporting, and on Muhoozi Kainerugaba’s own public statements. It does not draw on non-public sourcing, and it does not assess the underlying corruption allegations’ legal merit.
BACKGROUND
The first wave began 27 March 2026, when Maj Gen Don William Nabasa and Brig Gen Johnson Namanya Abaho were arrested under an anti-corruption operation Muhoozi ordered; Deputy Chief of Military Intelligence Col Abdul Rugumayo was removed the same day and replaced by Brig Gen Oscar Munanura. Separately, and prior to this period, Maj Gen Richard Otto was appointed Chief of Defence Intelligence and Security (CDIS) on 16 April 2025, replacing Maj Gen James Birungi in a direct swap that saw Birungi take over the Mountain Infantry Division; Otto remains the sitting CDIS throughout the events described below. The second wave was a retirement ceremony rather than an arrest: on 20 August, President Museveni presided over the retirement of nineteen senior UPDF generals at State House Entebbe, after which Muhoozi publicly warned that officers seen celebrating would be investigated. The third wave, in September, saw former DIS chief Maj Gen James Birungi, Director of Counter-Terrorism Col Peter Ahimbisibwe, and Director of Special Operations Lt Col Ephraim Byaruhanga arrested over alleged false intelligence reporting, followed on 9 September by the arrests of Abel Kandiho and Charles Bakahumura, both former CMI or DIS chiefs. Monitor reports the inquiry is sanctioned by Muhoozi and that further individuals connected to the same file remain wanted.
ANALYSIS
Is This Really About Corruption?
Taken individually, each incident is consistent with a genuine anti-corruption or discipline framing. Taken together, the concentration on former CMI and DIS leadership specifically, rather than a broader cross-section of the officer corps, is the pattern that distinguishes this reading from routine enforcement. That the current, serving CDIS, Maj Gen Otto, has not been touched sharpens rather than weakens this observation: whatever inquiry is underway appears directed at people no longer holding the post, a different and in some ways more unusual target than an active internal-affairs sweep of a sitting chain of command would be. This is inference from pattern rather than confirmed reporting of motive, and it should be weighed accordingly.
What Would the Consolidation Reading Require to Be True?
Museveni, in power since 1986, is approaching the end of his tenure by any ordinary expectation, and Muhoozi is widely regarded as his chosen successor. Control of the coercive apparatus, particularly the services most consequential in a contested transition, is the kind of asset a successor typically prefers to hold directly rather than inherit from officers with independent institutional loyalties. Systematically removing the CMI and DIS leadership lineage, rather than any other branch, would be a rational way to secure that ahead of an actual succession moment, if that is in fact the underlying intent.
OUTLOOK
Will further arrests connected to the same inquiry occur in the next four weeks? Likely, 60 to 75 percent, based on Monitor’s reporting that additional individuals remain wanted.
Will further arrests target the current, sitting CDIS or other actively serving CMI/DIS-adjacent officers, rather than only former or retired holders, in the next four weeks? Unlikely, 20 to 35 percent, based on the pattern to date of arrests concentrating on former post-holders; a shift to targeting sitting officers would be a significant escalation worth flagging immediately if it occurs.
Will Muhoozi assume a formal command or oversight role over CMI or DIS specifically, rather than remaining within his land-forces command? Unlikely in the near term, 20 to 35 percent, absent any current reporting suggesting this is imminent.
ANALYTICAL FOUNDATIONS
Key Assumptions
The concentration of targets on CMI and DIS leadership is a deliberate pattern rather than a coincidence of which officers happened to be under investigation. If arrests broaden into other UPDF branches in the coming weeks, this assumption would need to be revised down.
Muhoozi’s public statements reflect his own operational authority rather than messaging on behalf of a decision made elsewhere in the chain of command. This is the linchpin for Key Judgement 2.
Alternative Assessment
The anti-corruption framing may be substantially true on its own terms: a genuine internal effort, however selectively enforced, to address corruption specifically within intelligence-adjacent commands where it may be most acute or most politically safe for Muhoozi to pursue. This remains credible and cannot be excluded on current evidence.
What We Do Not Know
Whether any arrested officer has been formally charged, and on what specific evidence, is not detailed in current sourcing. Muhoozi’s actual chain-of-command authority over intelligence, as distinct from his public statements, is not independently confirmed. Why the current CDIS has been left untouched while multiple former holders of the post face arrest is not addressed in any source reviewed and is itself a live analytical question rather than an established fact.
Named risk or actor not in open-source reporting: Maj Gen Richard Otto’s own position and any pressure he may be under, as the sitting CDIS surrounded by arrests of his predecessors, is not discussed in any source reviewed for this assessment and is flagged as a specific gap rather than assumed to be uneventful.
Operational recommendation: track Maj Gen Otto’s status specifically as the clearest available signal, since any move against him would represent a break from the former-holders-only pattern established this period, and track whether subsequent arrests broaden beyond intelligence-adjacent officers as a second disconfirming signal for the consolidation reading.
ASSESSMENT TWO: TANZANIA
SUBJECT: Does the unavailability of three summoned security witnesses in the Lissu trial reflect soft non-compliance with a court order, and what does a second forged official document in one week signal about the information environment surrounding Nchimbi’s continued absence and Tanzania’s executive continuity?