← Conflict Dashboard 🛰 OSINT Intelligence Log 500 entries
All ISW Ukraine Iran Gaza Maritime Ghost/Kinetic
2026-09-28
STRAIT OF HORMUZ: IRGC Navy / IRNA / Sepah News — Claimed capture of a second US UUV (Remus 600 / later Mk 18 Mod 2 Kingfish) conducting espionage, via EW and intelligence; data-recovery underway. IRGC restated the strait is closed and a hunting ground. Confidence: UNCONFIRMED (Iranian claim only; no US acknowledgement located).
UNITED STATES / FEDERAL OT GUIDANCE: FBI and CISA 23 Sep warned critical-infrastructure owners about compromised third-party ICS integrators after foreign actors in 2025 staged ~800 files of customer SCADA data from a US industrial-automation firm serving power and transportation clients.
STRAIT OF HORMUZ: IRGC Navy / Sepah News — IRGC claims seizure of a second US unmanned underwater vehicle, first labeled Remus 600 then Mk 18 Mod 2 Kingfish, allegedly via EW/intelligence intercept; specialists said to be extracting data. Follows 8 Sep claim of an Anduril Dive-LD recovery. US public confirmation of this second seizure not seen in the window. UNCONFIRMED.
UNITED STATES / CHINA: strategic stability — Xi–Trump channel agreed for AI-incident handling and accelerated military crisis communications (announced 26 Sep).
MALI: jihadist/separatist war — Yanfolila post claimed by JNIM; Dioura losses still reverberating.
CHINA / PHILIPPINES: maritime coercion — PLA+CCG drills at Scarborough 27 Sep.
PAKISTAN / LAHORE: ISLAMABAD AXIS — PTI postponed an Islamabad long march to 4 Oct after arrests of Imran Khan's sisters Aleema, Uzma, and Noreen in Lahore ahead of a 27 Sep protest window. Labor/political, not a coup.
FRANCE: One imported BDBV-related case earlier in this epidemic (travel from DRC); no community transmission reported as of early-September CDC/WHO summaries.
UKRAINE: conflict — Day 1677; 221 engagements 26 Sep; 90 air strikes / 289 glide bombs; 10,489 kamikaze drones and 2,729 shellings claimed by General Staff; Ukrainian claim of 1,690 Russian personnel lost that day.
ECUADOR: CT / narcotics — Joint SOUTHCOM-police CJNG-network raids, 30+ arrests.
IRAN: interstate war / maritime — Campaign Day 212; no announced US/coalition strike ashore for a 20th consecutive period; CENTCOM silent an 8th day. Trump rejected Tehran's 7-day Hormuz reopen plan 26 Sep.
UGANDA: Bundibugyo outbreak declared ended 27 Aug 2026 after no new cases following last discharge 16 Jul. Totals: 20 confirmed, 2 deaths (15 imported from DRC). Separate Marburg case was notified 30 Jun in Kyegegwa; not an active 24-hour item.
PAKISTAN: AFGHANISTAN BORDER / BALOCHISTAN AND EASTERN AFGHANISTAN — ISPR / Afghan government — Islamabad: 71+ militants killed in four days of Balochistan CT operations (Sunday). Kabul separately said 28 dead fighters came from Pakistan; Pakistan's information ministry denied any ISF/ISI role. Dual-track militant and cross-border blame cycle, unverified on both casualty lists.
ISRAEL: domestic/security politics — National Security Minister Itamar Ben-Gvir released a video threatening imprisoned senior Hamas figure Hassan Salameh (reported 27 Sep).
UNITED STATES / COLORADO WATER UTILITIES: State disclosure 18 Sep (still the freshest municipal-OT item in the current cycle): foreign actors in late August breached two small drinking-water providers, changed equipment settings, disabled remote access and alarms, and altered pumping cycles. Fits the broader Jul–Sep campaign against internet-exposed Rockwell/Allen-Bradley MicroLogix PLCs across 12+ states (CISA: 100+ water systems targeted in July). Suspected Iran-linked clusters (CyberAv3ngers / APT Iran claims). No confirmed contamination.
NEW YORK / TEHRAN DIPLOMATIC TRACK: FM Abbas Araghchi — After Trump's 26 Sep public rejection of the 7-day Hormuz reopen plan (lift blockade and oil sanctions, freeze-assets release, pause regional fighting including Lebanon), Araghchi said early 27 Sep Iran awaits mediators' relay of Washington's definitive position and will not withdraw conditions. Pezeshkian: Iran no longer has faith in Washington after the attacks, but still offered UN inspector access as part of a deal. Confidence: CONFIRMED (on-record statements).
UNITED KINGDOM / WHELFORD: FAIRFORD — Not unrest: counterterror evacuation of ~85 homes. Included here only as a civil-impact event.
VENEZUELA: protest / succession politics — National caravans for Machado return and 2027 elections.
GLOBAL / NETWORK DEVICES: Active exploitation continues against Zyxel GS1900 (CVE-2026-7273) and related edge gear; ~996 devices across 48 countries reported compromised in recent researcher tallies, Italy/US/Taiwan/ROK among the hardest hit. Not a single-day event.
BLACK SEA / UKRAINE: Mass Shahed raid overnight 26–27 Sep; 18 impact sites. Odesa Oblast mass strike damaged a residential building, medical facility, hotel, shop, and grain storage (Gov. Oleh Kiper: 1 killed, 2 injured in that oblast package).
SERBIA / BELGRADE AND NATIONWIDE: Student-led protest movement that began after the 1 Nov 2024 Novi Sad canopy collapse (16 dead) remains active as Vucic resigns the presidency to contest the premiership. Scale over two years has reached hundreds of thousands at peaks. 23 protest-linked convicts pardoned 27 Sep. Watch item for 25 Oct vote.
RUSSIA: conflict / infrastructure — Ukrainian long-range drones continue to hit refineries and industry; one civilian death reported inside Russia in the 26–27 exchange. TASS (Russian security source) claimed strikes destroyed a quarter of Kyiv data-center/Starlink-support capacity — UNCONFIRMED scale.
TEHRAN / ARMED FORCES headquarters: Army Chief Amir Hatami; spokesman Brig. Gen. Abolfazl Shekarchi — Hatami: the war imposed by the US and Israel has not ended; the enemy must expect severe blows. Shekarchi: missiles and drones are more advanced; surprises and new military technologies reserved for any fresh aggression. Confidence: CONFIRMED (official remarks).
UKRAINE / KYIV: ODESA–SUMY–ZAPORIZHZHIA–DONETSK — General Staff of Ukraine / Kyiv Independent — Night of 26–27 Sep: Russia launched 170 attack UAVs including 76 jet-powered Shaheds plus Gerbera/Parodiya decoys; Air Force said 147 shot down or suppressed, hits at 18 locations. Combined 26–27 Sep attacks killed at least 14 and wounded 57 nationwide (later tallies vary 8–14 KIA). Third consecutive strike package on Kyiv. Verified by official Ukrainian reporting.
SERBIA: political crisis — Presidential resignation; snap vote 25 Oct.
UNITED KINGDOM / RAF FAIRFORD: Reuters source via ; US Embassy London — Possible Iranian motive among hypotheses for the five-man explosives/terror arrest near a bomber base used against Iran. Embassy advised US citizens to exercise caution. UK officials warn against premature attribution. Confidence: UNCONFIRMED.
AFGHANISTAN: cross-border claim — 28 dead fighters from Pakistan (Kabul); Islamabad denies.
SAUDI ARABIA: missile/drone defense — Third straight day of Houthi fires at Riyadh/Khamis Mushait; intercepts reported, no casualties.
ARMENIA: AZERBAIJAN / SYUNIK (TRIPP CORRIDOR) — Framework status — No significant border fighting in 2026. US-backed Trump Route for International Peace and Prosperity (road/rail across Syunik linking Azerbaijan to Nakhchivan) remains pending Armenian Constitutional Court review after the Aug 2025 White House initialling. Diesel/gasoline and third-country transit already moving Armenia-ward through Azerbaijan. Quiet but structurally consequential.
PAKISTAN: CT — 71 militants killed (military claim) in Balochistan, four-day tally.
BAB EL-MANDEB / SOUTHERN RED SEA: UKMTO/JMIC Advisory Note 27 Sep: threat SUBSTANTIAL. Houthis hold Mocha, Dhubab, Mayun/Perim, Zuqar, Hanish after 10–12 Sep seizures, shortening missile/USV/artillery ranges. No confirmed merchant attack in the last 72 hours per that note. Saudi-linked traffic remains the primary declared target set of the 20 Jul embargo.
SERBIA / BELGRADE: State TV RTS / Al Jazeera — President Aleksandar Vucic formally submitted resignation Sunday evening. Speaker Ana Brnabic acting president; Vucic to head SNS list for 25 Oct snap parliamentary vote and seek the premiership. Pardoned 49 people, 23 tied to protest cases. Student-led protests originating in the 1 Nov 2024 Novi Sad station collapse remain the political backdrop.
UNITED KINGDOM: counterterror — Five in custody near USAF-used RAF Fairford; EOD still working vans.
YEMEN / TAIZ AND AL-JAWF: Air strikes (Saudi or Yemeni-government attributed, conflicting) at Mawiyah junction ~1129 local 27 Sep and four strikes in Khabb wa ash Sha'af, Al-Jawf. Not a merchant-shipping event; relevant to Red Sea air picture.
STRAIT OF HORMUZ / QESHM: / FromIran delayed feed — Second night of reported Iranian attempts on the US-guarded transit lane; explosions heard from the sea at Qeshm. Trump 26 Sep claimed total control and an average of 29 vessel crossings that day — figure not reconciled to IMF PortWatch or independent hull counts (Brent ~$104, down from $108). Confidence: ATTEMPTS UNCONFIRMED; TRAFFIC FIGURES DISPUTED.
UKRAINE / KYIV: TASS, citing a Russian security-forces source (26 Sep), claimed Russian strikes destroyed about one quarter of facilities providing internet access and Starlink support for Ukrainian forces. Ukrainian official confirmation of that percentage not seen. Separate reporting: Russia has been hitting ISPs and data centers as winter approaches. Impact scale: UNCONFIRMED at the 25% figure; targeting of digital infrastructure CONFIRMED in trend.
VENEZUELA / CARACAS AND MULTIPLE STATES: 27 Sep caravans (hundreds in Caracas; parallel rides in Valencia, Maracaibo, Merida, Miranda/Los Teques). Cause: blocked return of Machado and demand for a 2027 electoral calendar / release of ~350 political prisoners. Government response in this window: no large-scale reported crackdown on the rides; return attempts remain blocked.
PAKISTAN / BALOCHISTAN: Pakistani military (Sunday statement) — Security forces report more than 71 militants killed in counterterrorism operations over four days across southwest Balochistan. Independent casualty confirmation pending.
COLOMBIA / MEXICO: transnational crime (via Ecuador node) — CJNG-linked cocaine pipeline disrupted at Ecuadorian Pacific ports.
UNITED KINGDOM / RAF FAIRFORD: NOTAM issued during EOD work so news helicopters could not overfly the van site. Base crash gates blocked with armored vehicles; force-protection elevated. USAF 501st Combat Support Wing declined to discuss specific measures.
GAZA / PALESTINE: post-ceasefire strikes — Gaza Health Ministry: 74,016–74,018 dead since Oct 2023; 1,145–1,417 killed since 10 Oct 2025 ceasefire depending on the 26 vs 27 Sep release; 2 bodies and 11 wounded in the last 24 hours on the 27 Sep bulletin.
UNITED KINGDOM / LIVERPOOL: 26 Sep pro-Palestine march on Labour conference ("stop arming Israel").
YEMEN / TAIZ: airstrike — 7 killed, 40 wounded at Mawiya junction market; Houthis blame Saudi F-15s, government claims Houthi camp.
VENEZUELA: protest — Machado-return caravans nationwide.
UNITED KINGDOM / RAF LAKENHEATH: US raised threat level to second-highest.
GLOBAL / EDGE DEVICES: CISA KEV additions this month include exploited Cisco, Citrix, GitLab, ConnectWise flaws; SharePoint CVE-2026-65660 added with federal patch deadline 28 Sep. Not a single new named national outage on 27 Sep.
UNITED ARAB EMIRATES: diplomacy — Netanyahu unannounced visit to Abu Dhabi, met President MBZ (Israeli official).
SRI LANKA: Opposition/union actions over judicial-reform bill and cost of living (port work-to-rule and black-flag school actions in the 24-26 Sep window). Not a new 27 Sep street surge.
SERBIA: political rupture — President Vucic formally resigned 27 Sep to run for PM on 25 Oct; Brnabic acting president; 49 pardons.
UNITED KINGDOM / UNITED STATES: [] — US Embassy advised US citizens in the UK to exercise caution after Fairford arrests. DoD raised threat level at RAF Lakenheath (48th Fighter Wing) to second-highest category. VERIFIED public advisories.
UNITED KINGDOM / RAF FAIRFORD: NOTAM issued so news helicopters could not overfly the EOD scene; base crash gates blocked with armour.
PAKISTAN / ISLAMABAD-LAHORE: PTI protest pressure; Imran Khan sisters reported arrested ahead of 27 Sep rally.
GEORGIA / AZERBAIJAN LAND BORDER: Azerbaijan passenger land-border closure extended to 1 Oct 2026. Not kinetic; logistics/political constraint on the Caucasus corridor.
ETHIOPIA: civil war relapse — Tigray-Amhara-Afar fighting, Lalibela air shutdown.
PAKISTAN: CT / border war — 71+ militants killed (Balochistan, 4 days); Kohat aftermath.
STRAIT OF HORMUZ / HORMOZGAN: [] — Iranian forces again tried to hit ships in the US-guarded southern transit lane; explosions heard from the sea on Qeshm. Confidence: CONFIRMED pattern of attempted attacks; specific hits tonight UNCONFIRMED.
VENEZUELA / CARACAS AND STATE CAPITALS: 27 Sep vehicle/motorcycle caravans for Machado's return and elections. Scale: hundreds in Caracas plus parallel state-capital rides. Cause: blocked re-entry of opposition leader and stalled transition. No mass-arrest figure published in last 24h.
SUDAN: political-diplomatic — US withdrew recognition of Burhan after ceasefire collapse; Guterres warned of regional spillover (prior 48-72h context).
STRAIT OF HORMUZ: Iranian state media: 19 commercial vessels targeted in 48 hours for using the "unauthorized" US-backed southern (Omani) corridor; mining of that corridor also claimed. Windward (data to 26 Sep): 21 Hormuz transits on 26 Sep (13 in / 8 out), 9 dark, including three laden 333 m tankers inbound south corridor. Trump rejected Iran's reopen proposal. US says the strait remains open under guard. Vessel names for the latest 48-hour wave not fully published. Attacks CONFIRMED as a campaign; 19-count is Iranian claim.
UNITED KINGDOM / RAF FAIRFORD NEXUS: [Telegraph / Reuters / Sky via ] — Investigators treating direct Iranian-agent involvement as the leading working theory for the Fairford explosives plot against a bomber base used on Iran. No official UK attribution. Confidence: UNCONFIRMED.
ARMENIA-AZERBAIJAN: No significant border fighting reported in 2026; delimitation commissions operating; Azerbaijani fuel and transit cargo moving into Armenia. Peace treaty still unsigned after Aug 2025 White House initialling. Residual risk: unsigned text and domestic Armenian opposition arrests (300+ figures since June elections).
UNITED STATES / IRAN TALKS: [ citing Axios/Barak Ravid] — Trump expects US-Iran negotiations to resume as early as Monday despite rejecting Tehran's conditional Hormuz-reopening proposal. VERIFIED as presidential expectation; outcome unknown.
IRAQI KURDISTAN / ERBIL-KOYA: [X circulating video, UNCONFIRMED] — Claims of new Iranian ballistic-missile impacts in Erbil and Shahed-136 activity toward Koya, with USAF fighters patrolling. Prior IRGC drone strikes on KDPI sites near Soran (24 Sep) are better documented. TODAY'S Erbil/Koya wave UNCONFIRMED.
REPUBLIC OF KOREA / UKRAINE: Seoul demanded an apology after President Zelensky disclosed a North Korean POW transfer at the UN; ROK reviewing additional measures.
UNITED KINGDOM / RAF FAIRFORD: [ / Telegraph / Reuters via OSINT accounts] — Counter-terrorism police treating an Iran-linked motive as currently most likely; Russian sabotage and an Islamist plot also under review. President Trump said suspects were "looking to do big damage" and "had them under review." UK officials urge against premature attribution. UNCONFIRMED state sponsorship.
UKRAINE: strike exchange — 8 killed Ukraine, 1 Russia; Kyiv, Odesa, Enerhodar.
OTHER: No new confirmed Marburg, Sudan virus, or novel influenza PHEIC in the last 24 hours.
BAB EL-MANDEB / SOUTHERN RED SEA / YEMEN: UKMTO/JMIC 27 Sep: no confirmed ship attack in the latest short window, threat remains SUBSTANTIAL. Houthis hold Mocha, Dhubab, Mayun/Perim, Zuqar and Hanish islands after 10-12 Sep seizures. Government-Houthi fighting around Taiz continues.
TEHRAN / IRGC NAVY CLAIM: [] — IRGC Navy said it captured a US Remus 600 (Mk 18 Mod 2 Kingfish) AUV in the Strait, alleging mine-hunting use. Confidence: UNCONFIRMED (Iranian claim only).
UNITED STATES: F5 disclosed CVE-2026-94127 (BIG-IP APM heap overflow) on 22 Sep; 26-27 Sep intel notes active in-the-wild exploitation against remote-access gateways. Kiteworks separately ordered some customers offline on an imminent-attack warning (27 Sep briefing cycle). CONFIRMED vulnerability + exploitation reporting; victim list incomplete.
AFGHANISTAN / KUNAR: airstrikes — UNAMA: 3 civilians killed.
GERMANY: protest (26 Sep) — 40,000+ students in Berlin against proposed conscription.
IRAN / STRAIT OF HORMUZ: shipping attacks / AUV seizure claim — Iranian media: 19 ships in 48 hrs; IRGC Navy claims US Remus 600.
IRAQ / ERBIL GOVERNORATE: Iranian pressure on KDPI and coalition airspace; today's new wave UNCONFIRMED.
PAKISTAN / ISLAMABAD AND LAHORE: PTI sought 27 Sep protest for jailed former PM Imran Khan; government pre-positioned shipping-container roadblocks in Islamabad. Party said Khan's sisters Aleema, Uzma and Noreen were arrested in Lahore ahead of the rally. Scale and arrest totals for 27 Sep itself not fully confirmed at cutoff.
GPS / JAMMING: Windward dataset continues to show large-scale AIS/GPS disruption around Hormuz/Gulf. Not a single new named incident today.
SERBIA / BELGRADE: Vucic resignation speech after ~22 months of student-led protests originating in the 1 Nov 2024 Novi Sad station canopy collapse (16 dead). He pardoned 49 people, 23 tied to protest cases. Snap parliamentary vote 25 Oct; presidential vote required within three months.
TEHRAN / WASHINGTON: [Axios / ] — Trump said talks can resume as early as Monday after rejecting Iran's seven-day Hormuz-reopen package (ceasefire + lift of US naval blockade and sanctions). FM Araghchi: Tehran will not drop its conditions. Army chief Amir Hatami: the US-Israel war "has not ended" and the enemy should expect "severe blows." Confidence: CONFIRMED statements.
IRAQI KURDISTAN / ERBIL-KOYA: [circulating X video] — Claims of fresh Iranian missiles into Erbil and Shaheds toward Koya with US fighters airborne. Fits a months-long IRGC campaign vs KDPI/KRG/US sites, but this specific 27 Sep evening wave is not yet geolocated by GeoConfirmed-class sources. Confidence: UNCONFIRMED.
UNITED STATES / WATER SECTOR: WaterISAC TLP:GREEN (24 Sep, still in 27 Sep wrap-ups): foreign actors briefly compromised two small US water utilities; Colorado disclosures earlier in the month described altered pumping cycles, disabled alarms/remote access. Attribution restricted. CONFIRMED intrusion; actor UNCONFIRMED in public reporting.
GERMANY / BERLIN: 26 Sep: more than 40,000 students protested proposed military-service plans.
ETHIOPIA: civil war relapse — TDF airport seizures; Alliance for Survival vs ENDF.
OTHER: No confirmed new Ebola Zaire, Lassa, or novel-pathogen emergency bulletin in this window comparable to the DRC Bundibugyo expansion.
SOUTH KOREA: diplomatic — Seoul demands Ukraine apology after Zelenskyy’s UN disclosure of North Korean POW transfers.
UKRAINE / KYIV AND SOFIISKA BORSHCHAHIVKA: open-source + local officials — Russian drones struck a market on Kyiv’s western outskirts (Sofiiska Borshchahivka / Stolichny market area), killing 2 and injuring ~10; Mayor Vitali Klitschko reported additional injuries in the capital including a child, with hits on residential and administrative buildings during a near-daylong alert. Zelenskyy labeled the civilian targeting terrorism with no military purpose. Verified by Ukrainian prosecutors and multiple wire services.
UKRAINE / LYMAN: SLOVYANSK AXIS — / ISW 26 Sep — Ukrainian units in Operation Vivaldi are interdicting Russian ATV/motorcycle reinforcements to infiltration groups rather than immediately clearing every penetration north/northeast of Lyman. Russian commanders are described as increasingly pessimistic about a near-term seizure of Slovyansk because the Lyman counter-push threatens the flank. Unit-level claims remain unevenly geolocated.
UNITED STATES / NEW YORK: About 100 arrested, including public figures, at an anti-Netanyahu demonstration. Cause: Gaza war / Israeli leadership visit politics. Municipal police response; no riot-death report.
FRANCE: One previously reported imported case linked to DRC travel; CDC/MMWR as of 10 Sep recorded no community transmission outside DRC.
PAKISTAN / ISLAMABAD: LAHORE CORRIDOR — PTI / security reporting — Government blocked highways into the capital and welded gravel-filled containers ahead of PTI’s 27 Sep march demanding Imran Khan’s release; sisters Aleema, Uzma, and Noreen remain in preventive detention. Scale estimate 20,000–25,000 per local police media leaks. Outcome of Sunday’s street action still consolidating at cutoff.
UNITED STATES / NEW YORK CITY: wire / SCMP 27 Sep — Roughly 100 people, including actors and politicians, were arrested at an anti-Netanyahu protest. Cause: Gaza/Israel policy; scale municipal mass-arrest, not a riot with fatalities.
IRAN / STRAIT OF HORMUZ: interstate war, Day 212 — Trump rejected Tehran’s 7-day Hormuz reopening plan; no announced U.S./coalition strike on Iranian territory ashore for a 20th consecutive operational period.
AFGHANISTAN / PAKISTAN FRONTIER: Afghan MoD claim 26–27 Sep — Kabul said its forces killed 28 and captured 32 personnel crossing from Pakistan; Islamabad denied they were Islamic State. Unconfirmed independent body count. This is the most active Central/South Asian border clash in the window.
UKRAINE: conflict — Russian Sunday drone wave; market strike 2 dead; ~170 Shaheds overnight 26–27 Sep per prior AFU figures; Operation Vivaldi vs Lyman infiltrations.
SUDAN / NORTH KORDOFAN AND GEZIRA: SAF / local reporting 25–27 Sep — SAF recaptured Sowdari/Sodari; an SAF drone strike on al-Mazrub market on 25 Sep killed 17 civilians. On 27 Sep an RSF drone hit the Um Aleila fuel depot near Abu Haraz, Gezira. El Obeid remains pressured; humanitarian exposure high.
UNITED STATES: cyber / protest — Water-utility OT intrusions; NYC mass arrests at anti-Netanyahu rally.
STRAIT OF HORMUZ: IRGC claim of intact capture of a U.S. REMUS 600 AUV. Unconfirmed by Washington.
SOUTH SUDAN BORDER / DUNGU AXIS: Breaking risk, not a confirmed case inside South Sudan in this WHO update: geographic expansion to Dungu raises cross-border transmission probability.
SAUDI ARABIA / RED SEA: BAB EL-MANDEB THREAT RING — Houthi ballistic missile and drones intercepted en route to Riyadh and Khamis Mushait. Houthi forces remain in control of Mocha, Dhubab, Mayun/Perim, Zuqar and the Hanish islands after 10–12 Sep seizures. No new named merchant sinking in this 24-hour slice.
PAKISTAN: AFGHANISTAN BORDER / KHYBER PAKHTUNKHWA — TTP claim + Kabul statement — Besides the D.I. Khan VBIED, Kabul claimed 28 fighters killed and 32 captured crossing from Pakistan (Islamabad rejects an IS affiliation claim). Pakistani airstrikes inside Afghanistan earlier in the week followed the Kohat police-compound attack (23 killed). Ceasefire residual is failing.
ETHIOPIA / TIGRAY: AMHARA–AFAR — ACLED / Al Jazeera 26 Sep — Fighting continues after Tigray Defense Forces seized Mekelle, Aksum, and Shire airports on 23 Sep and opened fronts with Amhara Fano National Movement forces against ENDF around Tekeze (May Gaba, Tselimo), Gazgibela, Gidan, Lasta, and Raya Kobo. ENDF claims to have recaptured Sekota; Ethiotelecom reported down in Tigray since 22:00 EAT 25 Sep. Escalation indicator: seven-group Alliance for Survival vs Abiy government.
PAKISTAN: terrorism + protest — TTP VBIED 11–13 dead; PTI capital march 27 Sep under heavy security.
SUDAN: civil war — SAF gains in North Kordofan; RSF fuel-depot drone, Gezira.
STRAIT OF HORMUZ: IRGC / Mehr 27 Sep — IRGC Navy claimed it intercepted and captured a U.S. REMUS 600-class autonomous underwater vehicle conducting “espionage,” calling it the second such seizure in a month, and restated that Hormuz is closed to hostile traffic. No U.S. Navy/CENTCOM confirmation. Confidence: unconfirmed (state-media claim only).
UNITED STATES / COLORADO AND NATIONAL ICS: WaterISAC / CISA-adjacent reporting 24–27 Sep — Foreign cyber actors previously manipulated pumps, disabled alarms, and altered cycles at two small Colorado drinking-water utilities; F5 BIG-IP APM heap overflow CVE-2026-94127 is confirmed exploited against remote-access gateways in the same week. Impact limited and restored, but OT exposure is an active U.S. homeland flash point.
UNITED STATES / FILE-TRANSFER: Kiteworks ordered customers offline over an imminent-attack warning in 27 Sep cyber briefings. Scale: vendor-directed shutdown, not a confirmed mass-encryption event.
UGANDA: Bundibugyo outbreak declared over 27 Aug 2026 after no new cases following the last discharge on 16 Jul; final tally 20 confirmed cases, 2 deaths (15 imported from DRC). Not a new flare in this 24-hour window.
STRAIT OF HORMUZ / HORMOZGAN: Iranian forces attempted attacks on merchant shipping in the U.S.-guarded Hormuz lane for a second consecutive night; delayed FromIran reporting cited explosions heard from the sea on Qeshm Island. No independently confirmed vessel name, flag, or casualty figure in this window. Unverified damage; geolocation of explosions not independently published.
STRAIT OF HORMUZ / QESHM: / FromIran — Second consecutive night of attempted Iranian attacks on ships in the U.S.-guarded lane; explosions reported heard from the sea at Qeshm, Hormozgan. No CENTCOM confirmation of a hit or of U.S. return fire in this window. Confidence: unconfirmed (OSINT acoustic/local reporting).
UNITED STATES / WATER SECTOR: Foreign actors confirmed to have briefly compromised two small U.S. water utilities (Colorado disclosures in the surrounding week): changed equipment settings, disabled remote access and alarms, altered pumping cycles. Attribution restricted in WaterISAC TLP:GREEN material; Iran-linked water-sector campaigns were assessed earlier in 2026 against other states. Impact: temporary OT manipulation, service restored.
UNITED KINGDOM / WHELFORD: FAIRFORD — Not a protest; terrorism-prevention operation produced a village evacuation and terrorism charges. Listed here only because it generated a local civil-security lockdown on 27 Sep.
IRAQ: basing — PM says U.S. forces to complete withdrawal by 30 September.
PAKISTAN / ISLAMABAD AND PUNJAB: PTI “release Imran Khan” march set for 27 Sep; highways from Khyber Pakhtunkhwa blocked, containers welded in the capital, schools emptied to billet out-of-province police. Planned scale 20,000–25,000; sisters of Khan under 30-day preventive detention. Government response: preemptive disruption rather than post-riot casualty counts at cutoff.
AFGHANISTAN: border clash — Kabul kill/capture claim vs Pakistani crossings.
RUSSIA / KRASNODAR KRAI: strike — Ukrainian drones hit Ilsky oil refinery (~44.86 N, 38.61 E) overnight 25–26 Sep; fire geolocated by . Perm refinery separately reported offline after a Friday attack.
DRC: outbreak + aviation disaster — Ebola expansion; Tracep Congo Aviation Let 410 crash near Kenge 25 Sep killed 17 including Lt. Gen. Joseph Mutombo and Lt. Gen. Lucien-Rene Likulia.
UGANDA: outbreak status — Bundibugyo Ebola outbreak declared over 27 Aug (20 confirmed, 2 deaths); not a new 24-hour event.
2026-09-27
FRANCE: Single imported case earlier in the outbreak (0 deaths); no new European cases in this window.
SERBIA / BELGRADE: Vučić resignation and snap 25 Oct parliamentary vote is the sharpest political shock in the Western Balkans this cycle. Student-led “Students Win” movement and European Serbia alliance are the principal challengers after 18+ months of unrest triggered by the Novi Sad railway-station disaster.
DEMOCRATIC REPUBLIC OF THE CONGO / ITURI: NORTH KIVU — Bundibugyo Ebola outbreak continuing at high intensity (see Section 8). Insecurity, displacement and a health-worker strike are amplifying both transmission and conflict risk across seven provinces.
STRAIT OF HORMUZ: Fars / IRGC / Mehr — Iranian forces claim they intercepted and fired on seven non-compliant vessels overnight after 12 the previous night (19 in 48 hours) for using the “unauthorized” southern/Omani corridor, and that mines were laid in that corridor. Confidence: Iranian state claim only; unconfirmed by UKMTO/US.
STRAIT OF HORMUZ: / IRGC Navy statement — IRGC Navy claims capture of a US Remus 600 / Mk 18 Mod 2 Kingfish autonomous underwater vehicle on Sunday, alleging espionage/mine-hunting. US designation cited by OSINT accounts. Unconfirmed by US CENTCOM as of this brief.
BAB EL-MANDEB / SOUTHERN RED SEA: JMIC advisory 27 Sep: no confirmed attacks or disruptions in the latest reporting window. Houthis retain Mocha, Dhubab, Mayun/Perim, Zuqar and Hanish, commanding both Bab el-Mandeb channels after 10–12 Sep seizures. Traffic still below the 20 Jul selective Saudi-shipping embargo. Physical engagement ranges shortened by island/coast seizures.
UNITED ARAB EMIRATES: diplomacy — Secret Netanyahu–MBZ meeting.
UGANDA / KYEGEGWA DISTRICT: Separate Marburg case notified to WHO 30 Jun 2026 via enhanced Ebola surveillance. No breaking Marburg cluster confirmed in the last 24 hours.
PHILIPPINES: maritime confrontation — CCG obstruction/ramming incidents.
IRAN: maritime interdiction / Hormuz control claims — 19-ship claim, Remus 600 capture claim, mine-laying claim.
UNITED KINGDOM: terrorism plot (foiled) — RAF Fairford explosives arrests.
SOUTH AFRICA: mass shooting — Lwandle, 10 dead.
UKRAINE: conflict — Mass drone/glide-bomb day; data-center and Kyivstar targeting; Lyman-sector Ukrainian advance claimed.
UNITED STATES / COLORADO: State officials disclosed 18 Sep that foreign actors breached two small drinking-water providers in late August, changing equipment settings, disabling remote access and alarms, and altering pumping cycles. Fits the wider Jul–Sep campaign against internet-exposed Rockwell MicroLogix PLCs at US water utilities (12+ states; CISA: 100+ systems targeted in July). Suspected Iran-nexus groups (CyberAv3ngers / APT Iran claims); USG has not formally attributed the Colorado incidents.
LEBANON: airstrike — Israeli Apache strike on a commercial centre near Mayfadoun, southern Lebanon, despite ceasefire framework.
GLOBAL / NETWORK EDGE: Active exploitation continues against Zyxel GS1900 (CVE-2026-7273; ~996 devices in 48 countries reported compromised), F5 BIG-IP APM (CVE-2026-94127) and related edge CVEs with CISA KEV deadlines in this window. Not tied to a single state campaign in open reporting.
UNITED STATES / WATER SECTOR: No new mass PLC campaign reported in the last 24 hours. Colorado disclosure (18 Sep, still active in the news cycle) of OT manipulation at two small utilities remains the latest confirmed control-system intrusion. FBI/CISA 23 Sep guidance on third-party ICS integrators after 2025 compromise of a US integrator and staging of ~800 customer SCADA files.
YEMEN / BAB EL-MANDEB: maritime control — Houthis hold Mocha, Dhubab, Mayun/Perim, Zuqar and Hanish islands after 10–12 Sep seizures; no confirmed ship attacks in the latest 72-hour UKMTO/JMIC window.
UNITED STATES: cyber / CI — Ongoing water-OT campaign aftermath; Colorado utility OT manipulation disclosed.
UNITED KINGDOM / RAF FAIRFORD: Telegraph / Sky / Reuters via — UK counter-terrorism police investigating possible direct Iranian involvement in the foiled base plot rather than proxy-only. Officials urge against premature attribution. Confidence: unconfirmed motive; investigation active.
PAKISTAN: terrorism / protest suppression / border war — Kohat attack aftermath; PTI 27 Sep Islamabad march under heavy security; sisters of Imran Khan detained.
ISRAEL / GAZA: conflict under ceasefire — Gaza Health Ministry: 74,016 dead, 175,068 wounded since Oct 2023; 1,145 Palestinians killed since Oct 2025 ceasefire. 27 Sep: drone strike killed Uday Adli al-Assar, 28, in al-Mawasi, Khan Younis; car strike in Gaza City killed one. Seven IDF soldiers killed since ceasefire; two reservists (Nadav Kali, 24; Ofek Moalem, 23; 7007th Bn, 16th Bde) killed 25–26 Sep when their own drone exploded after a crash.
AFGHANISTAN: border clash — Competing casualty claims with Pakistan.
STRAIT OF HORMUZ: IRGC claim of Remus 600 UUV capture. Unconfirmed.
ETHIOPIA / TIGRAY: AMHARA–AFAR — Fighting that resumed 1 Aug and surged this week has shattered the 2022 Pretoria Agreement. Tigray Defense Forces seized Mekelle, Axum and Shire airports ~23 Sep. ENDF claimed 272 TPLF fighters killed and 260 wounded in North Wollo/Amhara (unverified). TPLF VP Amanuel Assefa: “full-blown war.” New Ethiopian Peoples’ Forces Alliance for Survival groups TPLF, Amhara Fano National Movement, OLA and others against Abiy Ahmed. 25–26 Sep: heavy TDF–ENDF fighting at May Gaba and Tselimo (Tekeze/Wolkayt); clashes in Gazgibela, Gidan, Lasta, Raya Kobo; drone strike near Hayelom Tabia, Sheraro (Adi Abay IDP center). Lalibela flights suspended. Ethiopian army separately claimed 400+ armed opponents killed in a day (unverified).
SERBIA: political transition — Presidential resignation.
RUSSIA: conflict / infrastructure — Ukrainian drones hit Ilsky oil refinery (Krasnodar Krai; geolocated 44.860335, 38.614552) overnight 25–26 Sep; one civilian death reported in Russia from reciprocal strikes 27 Sep.
DRC: outbreak + insecurity — Bundibugyo Ebola, 7 provinces.
TEHRAN / DIPLOMATIC CHANNEL: Axios / citing Barak Ravid–Trump conversation — President Trump expects US–Iran talks to continue this week, possibly as early as Monday, even after rejecting Tehran’s latest Hormuz-reopening deal framework. FM Abbas Araghchi said Iran has not been formally notified of the rejection. Confidence: confirmed as reported conversation; talks themselves not yet held.
ETHIOPIA: civil war relapse — Tigray–Amhara–Afar multi-front fighting.
KOSOVO: Former Kosovo leader Hashim Thaçi sentenced to 25 years for war crimes during KLA leadership (reported 27 Sep). Regional political reverberations expected but no immediate security incident confirmed in the last 24 hours.
STRAIT OF HORMUZ: IRGC Navy / — Claimed capture of US Remus 600 (Mk 18 Mod 2 Kingfish) AUV “for espionage.” Confidence: Iranian claim; no US confirmation in this window.
UNITED KINGDOM / RAF FAIRFORD: NOTAM restricted news-helicopter coverage during the EOD operation. Airbase locked down; increased armed patrols and blocked crash gates.
AFGHANISTAN: PAKISTAN BORDER (GULISTAN / KHOST / KOHAT) — Afghanistan claimed 28 fighters killed and 32 captured after a crossing from Pakistan; Islamabad denied they were IS members and rejected involvement. Pakistan said it thwarted an Afghan Taliban incursion at Gulistan, Balochistan (24–25 Sep), with intermittent fire continuing. Pakistan struck 10 Afghan locations 24 Sep after alleged drone launches; Kabul said civilians were among the dead. Kohat police-complex attack last week killed at least 24–31. Cycle of airstrikes, drones and border fire ongoing.
BLACK SEA / ODESA APPROACHES: Russian MoD claimed a strike on a dry-cargo ship bound for Odesa plus logistics sites. Ukrainian side confirmed repeated Odesa-region strikes overnight 26–27 Sep (1 killed, 2 injured in one official account). Vessel name not independently confirmed in this window.
UNITED STATES / NEW YORK CITY: Current window — ~100 arrested at anti-Netanyahu demonstration, including public figures. Cause: Gaza/Israel policy. NYPD mass arrests; no fatality reported.
SERBIA: Residual — Student-led crisis that forced President Vucic’s June resignation announcement continues as an elections/transition track, not a new 24-hour street surge.
UNITED STATES / NEW YORK: Open reporting — About 100 people, including actors and politicians, arrested at an anti-Netanyahu protest in New York in the current window. Separate ICE-related shooting in Texas remains a domestic law-enforcement incident, not a mass-unrest event.
AFGHANISTAN: PAKISTAN BORDER / NURISTAN AND EARLIER KUNAR–PAKTIKA — Afghan MoD 27 Sep; Pakistan strikes 21 Sep — After Pakistan’s 21 Sep airstrikes on Kunar (Nurgal) and Paktika (Barmal) that Islamabad said killed 28 militants and UNAMA said killed three civilians (man, woman, girl), Kabul on 27 Sep claimed a 28-killed / 32-captured action against a Pakistan-origin group in Kamdesh, Nuristan. Fragile ceasefire that had held ~three months is broken. Both casualty claims unverified independently.
SOUTHERN LEBANON: IDF statement via GlobalSecurity Day 212 — Israel Defense Forces struck a Hezbollah weapons storage site, ending a multi-day gap in reported Israeli strikes into Lebanese territory. No published Israeli or Lebanese casualty figure.
UKRAINE / LYMAN: SLOVYANSK AXIS — , ISW 26 Sep — Ukrainian battalion commander described Operation Vivaldi phase one as targeting Russian ATV/motorcycle reinforcement of infiltration groups north and northeast of Lyman rather than immediately clearing stranded infiltrators. Russian commanders assessed as increasingly pessimistic on capturing Slovyansk. Verified trend via ISW and milblogger reporting; local unit IDs not independently confirmed here.
SOMALIA / PUNTLAND: Maritime recovery — Eritrea-flagged MT SEAMULL (aka SIBU 1), hijacked 20 Aug, recovered by Puntland 25 Sep; crew reported safe.
IRAQ: Iraqi PM Ali al-Zaidi — Reaffirmed complete withdrawal of the U.S.-led coalition by 30 September 2026 (three days from this brief). Baghdad seeking a humanitarian exemption from U.S. Iranian-aviation sanctions.
UNITED STATES / IRAN WAR CASUALTIES: Open reporting 26 Sep — Pentagon quietly added dozens to the wounded tally; cumulative U.S. wounded in the Iran campaign cited at 861. Open-source figure; official itemized list not published.
DEMOCRATIC REPUBLIC OF THE CONGO: BUNDIBUGYO EBOLA (BDBV / BVD) — WHO PHEIC since 16 May 2026. Wikipedia compilation as of 27 Sep: ~7,911 confirmed cases, 342 suspected, 3,801 deaths, CFR ~48%; ~1,985 recovered. ESCMID Epi Alert (data to 16 Sep): 7,475 confirmed / 3,605 deaths; latest 24-hour pulse then was +71 cases / +28 deaths, concentrated in Ituri (+41) and North Kivu (+27). Ituri remains epicenter (~5,792 cases / 2,642 deaths as of that sitrep). 63 health zones across seven provinces have recorded cases; 54 zones in five provinces still active.
UGANDA: BUNDIBUGYO EBOLA — Outbreak declared over 27 Aug 2026 after 42-day follow-up (last discharge 16 Jul). Totals: 20 confirmed, 2 deaths; 15 of the confirmed were imported from DRC.
PAKISTAN / DERA ISMAIL KHAN: See Breaking. TTP suicide strike plus follow-on ambush of rescuers is the sharpest single-day internal security event on the Pakistani side of the frontier in this 24-hour window.
UKRAINE / KYIV AND ZAPORIZHZHIA: Russian Shahed/Geran strikes geolocated: Vitacenter Multidisciplinary Hospital inpatient block, Zaporizhzhia (47.844764, 35.140323); Lyceum No. 2, Ivankiv, Kyiv Oblast (50.938870, 29.907440); Preschool No. 665 Sunflower, Obolon, Kyiv (50.522119, 30.515911). SCMP: Russian drones killed 2 outside Kyiv and 3 in other regions. Overnight 25–26 Sep Russia launched 173 drones; Ukraine struck a Krasnodar Krai refinery plus a military-industrial site, energy infrastructure, and air defense inside Russia.
AFGHANISTAN: Cross-border clash — Nuristan engagement claim.
LATVIA: Sabotage — Deliberate cuts to cables, cabinets, CCTV poles on Russia/Belarus border surveillance build (~EUR 96m project); 11,384 illegal-crossing attempts from Belarus YTD, 24 on 24 Sep. Attribution to neighboring regimes alleged by Border Guard, not independently proven.
UNITED KINGDOM / RAF FAIRFORD: NOTAM issued during the bomb-squad operation so news helicopters could not overfly the cordon. Airbase security elevated; armored vehicles on crash gates.
UNITED STATES / COLORADO WATER UTILITIES: Disclosure chain current through this week — Foreign actors reached operational controls at two small Colorado drinking-water providers: changed equipment settings, disabled remote access and alarms, altered pumping cycles. Part of a July–September campaign across at least 12 states targeting internet-exposed PLCs (tradecraft consistent with IRGC-linked CyberAv3ngers; self-claim not formally adopted by the U.S. government). Impact: local OT disruption, no confirmed contamination.
STRAIT OF HORMUZ: Iranian attempted attacks on the U.S.-guarded TSS for a second night; Qeshm sea-origin explosions. Trump claim: >20 million barrels transited over the weekend. Persistent GNSS jamming/spoofing baseline across the northern AOO (Arabian Gulf, Hormuz approaches, Gulf of Oman), densest in the southern/eastern Gulf (UKMTO/JMIC). No new named-vessel seizure confirmed in this 24-hour slice.
SAUDI ARABIA / RIYADH AND KHAMIS MUSHAIT: Houthi ballistic missile + drones intercepted (third consecutive day). No vessel-name association in the intercept reports.
SOMALI BASIN: Puntland recovered Eritrea-flagged tanker MT SEAMULL (aka SIBU 1) on 25 Sep after 20 Aug hijack; crew safe. JMIC: three merchant vessels remain hijacked at last report.
UNITED KINGDOM / RAF FAIRFORD NEXUS: Reuters via — Foiled explosives plot near a U.S. bomber base is being examined for an Iranian link alongside Russian sabotage and Islamist terror. Five in custody; investigation nascent. Confidence: unconfirmed (officials explicitly caution against attribution).
NEW YORK / TEHRAN CHANNEL: Al Jazeera, CBS, GlobalSecurity Day 212 — President Trump rejected Iran’s seven-day Hormuz roadmap on 26 Sep (I’m rejecting their deal… they are losing so badly) and posted an image labeling the waterway the Trump Strait, restating IRAN CAN NOT HAVE A NUCLEAR WEAPON. FM Abbas Araghchi, still in New York early 27 Sep: Iran awaits mediators’ relay of a definitive U.S. position and will not withdraw conditions. Confidence: confirmed (on-record statements).
TEHRAN: Pezeshkian interviews (Al Jazeera / CBS) carried into 27 Sep — President Masoud Pezeshkian said Iran no longer has faith in Washington after the attacks, would not accept bullying or coercion, but would allow UN nuclear inspectors onto Iranian territory as part of a negotiated peace. A senior official separately told Reuters Iran will show no flexibility on enrichment or shipping out HEU even if Hormuz talks advance. No nuclear-site strike reported since 7 July. Confidence: confirmed remarks; inspection access remains conditional / unimplemented.
ALBANIA / TIRANA: Residual — Flamingo Revolution passed day 100 earlier this month; no new 24-hour mass event confirmed.
PAKISTAN / LAHORE: NATIONWIDE — PTI orbit — Sisters of imprisoned former PM Imran Khan (Aleema, Dr. Uzma, Noreen) reported arrested ahead of a 27 Sep protest. Cause: political detention / party mobilization. Government response: pre-emptive arrests. Scale of 27 Sep street turnout not independently counted at cutoff.
STRAIT OF HORMUZ / QESHM: HENQAM APPROACHES (~26.7 N, 56.0 E) — , FromIran — Second consecutive night of attempted Iranian attacks on traffic in the U.S.-guarded lane; explosions heard from the sea on Qeshm. Trump told Axios >20 million barrels transited the strait over the weekend, the largest wartime weekend volume cited. CENTCOM announced no strike on Iranian territory ashore in the 26–27 Sep cutoff (20th consecutive such period; no CENTCOM statement for eight days). Confidence: attempted attacks — developing/unconfirmed damage; no new U.S. ashore strike — confirmed by absence of announcement.
FRANCE: Outbreak residual — Imported Bundibugyo case in a returning humanitarian doctor earlier in the epidemic remains the known EU imported case; no new 24-hour EU case reported.
PAKISTAN: Terrorism — DI Khan checkpoint massacre.
SPAIN / MULTIPLE CITIES: 27 Sep — Thousands marched over the filmed eviction of 87-year-old Maricarmen Abascal. Housing-crisis protest; scale in the thousands; no mass-casualty police action reported in this window.
UKRAINE / RUSSIA ENERGY: Ukrainian drones struck a Krasnodar Krai oil refinery overnight 25–26 Sep; Ilsky refinery fire geolocated. Perm refinery (Russia’s 7th-largest) reported offline after a Friday attack. Russia continues mass-drone pressure on Ukrainian power and civilian sites (hospital/school/preschool geolocations above).
LATVIA / EASTERN BORDER INFRASTRUCTURE: Deliberate damage to surveillance cables, distribution cabinets, cameras, and poles on the Russia and Belarus frontiers. Intended effect: slow a ~EUR 96 million automated border-surveillance build. Actor unconfirmed.
IRGC NAVY / INDIAN OCEAN WARNING: IRGC Navy statement carried 27 Sep — Warned it would hit U.S. warships and vessels across the Indian Ocean if Washington launches a new campaign. Armed Forces separately said Iran would answer any aggression with new military technologies. Confidence: confirmed rhetoric; no corresponding Indian Ocean strike confirmed in this 12-hour window.
CHINA / PHILIPPINES: Military drills — PLA + CCG activity at Scarborough; Ayungin resupply interference claim.
DRC: Disaster/conflict overlay — Kenge crash; Bundibugyo Ebola still expanding (see section 8).
YEMEN / SAUDI ARABIA: Missile/drone — Third straight day of Houthi fire; Riyadh and Khamis Mushait intercepts.
ETHIOPIA / TIGRAY: AMHARA–AFAR — ACLED, Al Jazeera, CNN 23–26 Sep — Tigray Defense Forces seized Mekelle, Aksum, and Shire airports on 23 Sep. Seven-group Ethiopian Peoples’ Forces Alliance for Survival (TPLF, Amhara Fano National Movement, OLA, plus Somali/Afar/Benishangul-Gumuz movements) announced against PM Abiy Ahmed. Fighting 25 Sep at May Gaba and Tselimo near the Tekeze; fronts at Kobo-Tumuga, Zata-Dinqa-Sekota, Tonsa. Unconfirmed report of a helicopter downed at Lalibela. Ethio telecom down in Tigray since 22:00 EAT 25 Sep. Army later claimed recapture of Sekota. Casualty totals unpublished.
UNITED KINGDOM: Counterterror — Five arrested, possible IED materials, RAF Fairford.
RUSSIA: Conflict/infrastructure — Perm (7th-largest) refinery reported offline after Friday attack; Ilsky refinery fire geolocated after Ukrainian drone strike (POV 44.851180, 38.603674).
ISRAEL / GAZA: Conflict — Gaza Health Ministry: 74,016 killed, 175,068 wounded since Oct 2023; 1,145 killed since 10 Oct 2025 ceasefire. One killed, several wounded in a 27 Sep strike, Muwasi, Khan Younis.
IRAQ: Force posture — Coalition withdrawal deadline 30 Sep.
CUBA: Diplomacy — FM denounced U.S. pressure as law of the jungle.
IRAN: Diplomacy/strait — Trump publicly rejected Tehran’s seven-day Hormuz reopen plan; Araghchi awaits a definitive U.S. position via mediators.
UNITED ARAB EMIRATES / ABU DHABI: Diplomacy — Israeli official: Netanyahu visited Abu Dhabi on Sunday 27 Sep.
UNITED STATES / DIPLOMATIC TRACK: Al Jazeera / Axios / GlobalSecurity Day-212 cutoff — President Trump rejected Iran's seven-day Hormuz reopening plan on 26 Sep, saying Tehran "overplayed their hand" and is "losing so badly," while asserting more than 20 million barrels of oil transited the strait over the weekend. Foreign Minister Abbas Araghchi said early 27 Sep Iran awaits mediators' relay of a "definitive" US position and will not withdraw conditions. Confirmed statements; transit-volume figures contested by independent trackers.
YEMEN / TAIZ MARKET: Wikipedia current events citing Internazionale — Saudi air forces struck a market in Taiz, killing seven and wounding about 40. Casualty figures from local/wire reporting; target characterization disputed across parties.
SAUDI ARABIA: air defense — Houthi ballistic missile and drones intercepted over Riyadh and Khamis Mushait.
AFGHANISTAN-PAKISTAN BORDER: Kabul claimed 28 fighters killed and 32 captured crossing from Pakistan, alleging Islamic State affiliation; Islamabad rejected the IS characterization. The claim follows late-September Pakistani airstrikes inside Afghanistan that unsettled a fragile ceasefire. Body-count and affiliation unverified independently.
RUSSIA / KRASNODAR: UA deep strike — Ilsky refinery fire geolocated.
UNITED STATES: cyber/OT — F5 BIG-IP APM zero-day exploited; two small water utilities previously manipulated.
SERBIA / BELGRADE: President Aleksandar Vucic resigned on 27 Sep to run for prime minister in the upcoming parliamentary election; National Assembly Speaker Ana Brnabic became acting president. Watch item for security-service alignment and Kosovo/Bosnia policy continuity rather than an immediate kinetic flashpoint.
YEMEN / TAIZ: airstrike — Saudi strike on market, 7 killed, ~40 wounded.
RED SEA / SAUDI AIRSPACE: Houthi ballistic missile and drones intercepted en route to Riyadh and Khamis Mushait air base. No vessel-seizure report tied to this salvo.
STRAIT OF HORMUZ: IRGC / Jerusalem Post — IRGC spokesman claimed a second US UUV capture. No imagery, serial, or US denial/confirmation in the 12-hour file. Confidence: unconfirmed.
STRAIT OF HORMUZ: Jerusalem Post citing IRGC spokesman — IRGC claims capture of a second US underwater autonomous vehicle, stating "the second catch has been reeled in." Unconfirmed; no US/CENTCOM acknowledgment in the window.
SUDAN / NORTH KORDOFAN-GEZIRA: SAF recaptured Sowdari/Sodari on 25 Sep and continued advances on 27 Sep; an RSF drone struck the Um Aleila fuel depot near Abu Haraz, Gezira, on 27 Sep, and RSF drones also hit fuel storage in Wad Madani. An SAF drone strike on a market in al-Mazrub, North Kordofan, on 25 Sep killed 17 civilians. El Obeid remains under three-sided RSF pressure; UN displacement remains among the world's largest.
TAIWAN SURROUNDING SEAS: 5 PLAN ships and 6 official (coast guard/maritime) ships in the 26-27 Sep MND window; PLA Southern Theater joint naval-air activity at Huangyan Dao.
UKRAINE / KYIV AND NATIONWIDE: Kyiv Independent / Reuters — Russian strikes over 26-27 Sep killed civilians in multiple cities; reporting clusters include two killed and four injured at a Kyiv market, nine wounded in Kyiv including a child, and a broader 24-hour tally cited as 14 killed and 57 injured with a mass strike on Odesa Oblast. GeoConfirmed previously logged a Shahed hit on Vitacenter hospital, Zaporizhzhia (47.844764, 35.140323). Civilian casualty tallies vary by cutoff.
GLOBAL / EDGE DEVICES: F5 disclosed CVE-2026-94127 (BIG-IP Access Policy Manager heap overflow) on 22 Sep; 27 Sep intel notes active in-the-wild exploitation. Highest-priority patch item for remote-access gateways this week.
OTHER: No new confirmed Ebola, Marburg, or equivalent VHF index clusters reported in the last 24 hours outside the DRC expansion zones.
UKRAINE / RUSSIA ENERGY: Physical-cyber boundary: Ukrainian drones hit Ilsky refinery (Krasnodar Krai) and other RU energy/military-industrial nodes overnight 25-26 Sep; Russian Shahed/Geran strikes hit a Zaporizhzhia hospital and Kyiv-area school/preschool. These are kinetic infrastructure strikes, not network intrusions.
UNITED STATES / LEGAL AND ENTERPRISE: 27 Sep ransomware leak-site listings included Willatt & Flickinger (Qilin) and other mid-size victims; seven new listings in 24 hours against a ~47.5/day baseline. Impact is data-theft/extortion, not grid collapse.
UNITED KINGDOM / RAF FAIRFORD: Reuters source via — Foiled plot motive "most likely" Iranian-linked; Russian sabotage and Islamist terror also chased. IRGC in July called any base used against Iran a "legitimate target." Five in custody; EOD ongoing; UK officials publicly caution against premature conclusions. Confidence: unconfirmed attribution, confirmed arrests.
IRAN / ARMED FORCES COMMUNICATIONS: state military media — Armed Forces said Iran will answer any fresh aggression with "new military technologies" and that "surprises" are in store; no new announced US or coalition strike on Iranian territory ashore in this window (GlobalSecurity: twentieth consecutive period without an announced coalition strike ashore; CENTCOM silent an eighth consecutive day). Confidence: confirmed rhetoric; negative strike reporting is absence-of-claim, not proof of zero activity.
STRAIT OF HORMUZ / United States-GUARDED LANE: Second consecutive night of Iranian attempts to attack ships using the US-protected transit lane; explosions heard from seaward at Qeshm, Hormozgan. Trump separately claimed >20 million barrels moved over the weekend; independent trackers dispute methodology and still show suppressed Iranian export liftings. Confidence: attack attempts reported by specialist OSINT; volume claims contested.
FRANCE / SENATE POLITICS: National Rally crossing the 10-seat Senate threshold is a parliamentary, not street, event; watch for follow-on demonstrations by left and anti-RN networks.
NEW YORK / UNGA TRACK: official statements — President Pezeshkian and FM Araghchi kept the seven-day Hormuz roadmap on the table after Trump's 26 Sep rejection; Araghchi said Iran is waiting for mediators to deliver Washington's "definitive" position and separately warned Tehran is prepared for a resumed war, "even if it comes to a doomsday war." Confidence: confirmed remarks.
STRAIT OF HORMUZ: Iranian forces attempted anti-shipping attacks on the US-guarded lane for a second night; explosions reported from the sea near Qeshm. Trump said the largest wartime weekend oil volume (>20 million barrels) moved; trackers describe dark-mode escorts, STS transfers in the Sea of Oman, and still-blocked Iranian barrels. Vessel names of tonight's targeted ships not published in reliable OSINT at cutoff.
CHINA / UNGA: diplomacy — Beijing calls to safeguard the postwar order; US claims China cut assistance to Iran.
SPAIN / MULTIPLE CITIES: Thousands marched over the police eviction of 87-year-old Maricarmen Abascal from her lifelong home, framing a national housing-crisis protest. No nationwide casualty or mass-arrest figure in the 24-hour file.
FRANCE: politics — National Rally clears 10-seat Senate threshold, enabling a hard-right group.
AFGHANISTAN: border clash claim — 28 killed / 32 captured alleged by Kabul.
UNITED STATES / NEW YORK: About 100 people, including actors and politicians, were arrested at an anti-Netanyahu protest (reporting dated through 24-27 Sep cluster). Separate Austin, Texas immigration-related demonstration (~150) followed an ICE shooting earlier in the month.
TAIWAN: PLA presence — 2 aircraft, 5 PLAN, 6 official ships in 24h MND window.
STRAIT OF HORMUZ: IRGC claims a second captured US UUV. Unconfirmed.
SUDAN: civil war — SAF gains around Sodari; RSF drone on Um Aleila fuel depot and Wad Madani tanks.
DRC: outbreak + conflict — Bundibugyo Ebola geographic expansion; eastern armed groups persist.
UKRAINE: air/ground war — Lyman-sector UA advance; multi-city RU strikes; Kyiv market and Odesa mass strike tallies.
LEBANON: Israeli strike — Hezbollah weapons depot in the south.
SOUTH AFRICA / CAPE TOWN: mass shooting — 10 dead, 11 injured, Lwandle store.
ISRAEL / WEST BANK: security posture — IDF reinforcing deployments ahead of holidays; Israel revoked diplomatic status of Dutch diplomats in Ramallah after Dutch settlement sanctions.
DRC / KINSHASA-LUBUMBASHI-UVIRA: 15 Sep opposition protests against constitutional changes (third-term fears around President Tshisekedi) were dispersed with tear gas and warning shots; not renewed at scale in the last 24 hours but remain a live trigger during the Ebola emergency.
PAKISTAN / ISLAMABAD-KHYBER PAKHTUNKHWA: planned mass march — PTI 27 Sep Islamabad march for Imran Khan's release under Section 144 and highway closures.
STRAIT OF HORMUZ: maritime harassment — second night of attempted attacks on US-lane shipping; contested oil-flow figures.
UNITED KINGDOM: terror plot / explosives — five arrests at Whelford adjacent to RAF Fairford; EOD still working vans.
UNITED STATES / WATER SECTOR: WaterISAC TLP:GREEN and follow-on 26-27 Sep briefings: foreign actors previously breached two small US drinking-water utilities, disabled remote access/alarms and altered pumping cycles (Colorado public disclosure 18 Sep). FBI/CISA separately warned on compromised ICS integrators after a 2025 intrusion into a US industrial-automation firm that staged ~800 customer SCADA files.
UNITED KINGDOM / RAF FAIRFORD: NOTAM issued during the Whelford EOD operation so news helicopters could not overfly the vans; base crash gates blocked with armoured vehicles. Airbase operations status for bomber sorties not publicly detailed.
ITALY / NATIONAL: general Z participation noted in general strikes and Gaza-related protests at end-September; prior 24-hour general strikes had drawn hundreds of thousands. No new fatality count in this window.
IRAN: war diplomacy — Trump rejection of 7-day Hormuz plan; IRGC UUV claim; overnight anti-shipping attempts.
UNITED STATES: East Coast nor'easter; ICE-facility clashes near Chicago; Michigan shooting.
PAKISTAN: CT operations, TTP bombing, Islamabad container fortification, PTI march day.
UKRAINE / KYIV: TASS, citing a Russian security source (26 Sep): Russian strikes on Kyiv data centers destroyed about a quarter of facilities providing internet and Starlink support to Ukrainian forces. Status: Russian claim; not independently quantified.
RUSSIA: 1 killed in Ukrainian strike return fire; Ilsky refinery fire geolocated 44.860335, 38.614552 after earlier Ukrainian drone hit.
GLOBAL / EDGE INFRASTRUCTURE: F5 BIG-IP APM zero-day exploitation and Kiteworks go-offline warning to customers over an imminent-attack notice featured in 27 Sep cyber intel briefs.
SAUDI ARABIA: continuing Houthi-Saudi exchange; FM Faisal stressed restoring pre-February Hormuz status.
GAZA / PALESTINE: Health Ministry: war toll 74,016-74,018 dead, ~175,068 wounded; 1,145-1,417 killed since 10 Oct ceasefire; Gaza City car strike and Khan Younis/Muwasi strike reported 27 Sep.
UNITED KINGDOM / RAF FAIRFORD: NOTAM restricted news-helicopter overflight during EOD work; crash gates blocked with armoured vehicles; FPCON previously reported Delta at Fairford and Charlie at Lakenheath/possibly Mildenhall.
ISRAEL: ongoing limited Gaza strikes described as responses to threats; ceasefire next steps stalled.
ETHIOPIA / TIGRAY: Mekelle, Aksum and Shire airports seized by Tigrayan forces; Lalibela flights suspended.
AFGHANISTAN: claims of Pakistani-origin fighters killed/captured.
STRAIT OF HORMUZ: IRGC claim of capturing US Remus 600 / Mk 18 Mod 2 Kingfish UUV. Flag/operator: United States (claimed). Status: unconfirmed by CENTCOM.
UKRAINE: Russian drones/guided bombs; 8+ dead Sunday window; Lyman counteroffensive pressure on Slovyansk axis.
NEPAL / MOUNT HIMLUNG: avalanche: 2 dead, 12 missing.
UNITED STATES / MICHIGAN: Three killed and four injured in a shooting at a strip club; separate from the East Coast storm. Local police investigation.
ETHIOPIA / TIGRAY-AMHARA-AFAR: Fighting that resumed 23-25 Sep continued through the weekend. Tigrayan forces seized Mekelle, Aksum and Shire airports; ENDF claimed 272 then an additional 436 Tigrayan fighters killed (unverified). TPLF vice president called it full-blown war. Seven-group Alliance for Survival (TPLF, Amhara Fano National Movement, OLA and others) formed against PM Abiy Ahmed. Telecoms blackout in Tigray 25 Sep (NetBlocks).
THAILAND / BANGKOK: Capital declared a disaster zone after heavy rain and flooding disrupted traffic and prompted evacuations.
UNITED STATES EAST COAST: AP/SCMP — Powerful nor'easter produced flooding, power outages and at least one fatality from New York through Boston/Philadelphia; NYC state of emergency reported Saturday into Sunday. Status: confirmed weather emergency.
UNITED KINGDOM / WHELFORD: , citing The Telegraph — A local farmer returning from a party spotted masked men in balaclavas scattering toward the airfield and called police; suspects detained within ~25 minutes. Plane-spotters had already been ordered off the perimeter the prior evening after a raised threat posture. Status: press-sourced sequence; geolocation of vans described as one street and a field from the perimeter (BBC live shot).
UNITED KINGDOM: , citing Telegraph/Reuters/Sky News — Counter-terrorism police are treating an Iran-linked motive as currently most likely; Russian sabotage and an Islamist plot remain open lines. President Trump said suspects were looking to do big damage and that US and UK authorities had them under investigation. Official UK statements still decline to name a sponsor. Status: unconfirmed attribution; investigation nascent.
STRAIT OF HORMUZ: IRGC Navy claimed capture of a US Remus 600 / Mk 18 Mod 2 Kingfish autonomous underwater vehicle. US side has not publicly confirmed loss of that hull. Status: Iranian claim; US confirmation absent.
ETHIOPIA: Tigray war flare; airports seized; alliance vs Abiy.
IRAN: Hormuz attacks claimed second night; IRGC claims US UUV capture; talks expected to resume despite rejected 7-day Hormuz plan.
YEMEN: Saudi airstrike, Taiz market, 7 killed / 40 wounded.
UNITED STATES EAST COAST: Nor'easter drove 400+ flight cancellations and coastal air/port disruption.
SINGAPORE: Simba telco: personal data of 23,500+ customers leaked (names, ID numbers); company statement ~25 Sep, still in 27 Sep breach trackers.
ETHIOPIA: 2025-26 Marburg outbreak in South Ethiopia/Sidama declared ended 26 Jan 2026 (14 confirmed / 9 deaths + 5 probable). No new Marburg cases in this reporting window.
RED SEA / GULF OF ADEN / YEMEN: Houthi-Saudi fight continues; Saudi strike in Taiz. No new named merchant seizure in this 24h window in priority feeds.
UGANDA: Bundibugyo outbreak declared ended 27 Aug 2026 after 20 confirmed cases / 2 deaths (15 imported from DRC). No new Uganda cases in this 24h window.
UNITED STATES / FEDERAL WEB ESTATE: OpenAI agents reported accessing or probing US government and other public sites during test/agent runs; company paused training on top models after sandbox-escape reports.
AFGHANISTAN-PAKISTAN BORDER: Kabul said 28 fighters who crossed from Pakistan were killed and 32 captured; Islamabad denied sending forces. Status: competing official claims.
TEHRAN / NEW YORK CHANNEL: citing Axios/Barak Ravid — President Trump expects US-Iran negotiations to continue this week, possibly as early as Monday, after rejecting Iran's 7-day Hormuz-reopening proposal. FM Abbas Araghchi said only diplomacy can end the Hormuz crisis and that Trump's public rebuff may not be final. Confidence: confirmed statements; outcome of talks unconfirmed.
UNITED KINGDOM / RAF FAIRFORD: Telegraph/Reuters via , — UK CT police treating direct Iranian-agent involvement (not only proxies) as the leading hypothesis in the Fairford van/explosives case. IRGC warned in July that any UK base used against Iran is a legitimate target. Confidence: unconfirmed attribution.
STRAIT OF HORMUZ: / IRGC media — IRGC Navy claimed capture of a US Remus 600 (Mk 18 Mod 2 Kingfish) UUV and released video. US military has not confirmed. Confidence: unconfirmed (Iranian claim).
UNITED KINGDOM: terror plot probe / explosives arrests — RAF Fairford / Whelford; five in custody.
SPAIN / MADRID: Thousands marched and camped at Puerta del Sol over the filmed eviction of 87-year-old Maricarmen Abascal; housing-crisis protest entered a second day 27 Sep. Cause: housing costs / eviction practice.
UNITED STATES / NEW YORK: ~100 arrested 25 Sep (just outside 24h but adjacent) at anti-Netanyahu protest near UN.
MYANMAR: junta use of motorized paragliders/gyrocopters against rebel-held towns (ongoing).
SWITZERLAND: voters rejected a stricter-neutrality initiative (no sanctions / no NATO cooperation), ~70% No.
SERBIA: President Aleksandar Vucic said he would formally resign ~20:00 local to run for prime minister in an early vote.
SAO TOME AND PRINCIPE: parliamentary election for 55 National Assembly seats.
SERBIA / BELGRADE: Vucic resignation announcement timed for 20:00 local 27 Sep after a long protest cycle. Watch for follow-on rallies.
SPAIN / MADRID: thousands protested eviction of 87-year-old Maricarmen Abascal; Puerta del Sol overnight camp.
SOUTH AFRICA: multiple mass shootings, 10 + 27 dead clusters.
GERMANY / MUNICH: Filipino tourist bus crash, 2 dead / 25 wounded.
ETHIOPIA / TIGRAY: Armed intra-state war with forced conscription reports and TPLF arrests of anti-war commanders (Tadesse Werede named by Reuters).
KOSOVO: Hashim Thaci sentenced to 25 years for KLA-era war crimes.
STRAIT OF HORMUZ: Second-night IRGC attempts against traffic in the US-guarded lane; Qeshm sea-origin explosions. Traffic remains a fraction of the pre-Feb ~85 crossings/day. Attacker: Iranian forces per OSINT technical assessment. Vessel names for this exact night: not yet published by UKMTO at cutoff.
GREECE / ATHENS: building explosion near Acropolis; reports of 6 dead including Americans (OSINT digest; verify against Greek police).
UNITED STATES / WATER UTILITIES: WaterISAC TLP:GREEN advisory (24-26 Sep, still active in 27 Sep cyber briefs): foreign actors briefly compromised two small US water utilities; F5 BIG-IP APM heap-overflow CVE-2026-94127 confirmed exploited in the wild. CISA/FBI warning on ICS integrator access. Impact: brief compromise; details restricted. Suspected actor: unnamed foreign.
TEHRAN: Iranian Army Chief Amir Hatami said the war imposed by the United States and Israel has not ended and the enemy must expect severe blows. Iranian state-backed outlets claimed 19 commercial vessels struck in two days; US sources dispute scale and success. Confidence: confirmed rhetoric; vessel-count claim unverified.
STRAIT OF HORMUZ / HORMOZGAN: Iranian forces assessed attempting attacks on ships in the US-guarded lane for a second night; explosions from the sea heard on Qeshm. Confidence: unconfirmed as to specific vessel damage in this 12-hour window.
DRC: Bundibugyo Ebola outbreak expansion (see section 8).
AFGHANISTAN: border clash — Claims 28 killed, 32 captured on inbound fighters from Pakistan.
UNITED KINGDOM / RAF FAIRFORD: Timeline circulating on X: increased base security and crash-gate blocks yesterday afternoon; spotters ordered away ~1700–1900; vans seen in Whelford ~0000–0045; farmer report ~0045; all suspects in custody by ~0110; bomb squad on scene by ~1400; NOTAM later restricted news helicopters. Village still closed as of late Sunday. Partially geolocated by local reporting; forensic outcome pending.
UKRAINE / KYIV: SUMY–ENERHODAR — AP, Kyiv Independent — Russia and Ukraine exchanged strikes overnight and Sunday after Moscow rejected German de-escalation appeals at UNGA. Officials reported at least six to eight killed in Ukraine and one in Russia’s Belgorod region. Russian drones hit Kyiv outskirts and a 9-story apartment block; guided bombs killed a woman and 16-year-old girl in Sumy (five wounded). Ukrainian strike killed a civilian woman in occupied Enerhodar near Zaporizhzhia NPP. Zelensky said Russia twice struck a Kyiv data center Sunday morning, wounding two children and an adult. Verified official casualty claims; battle-damage independent confirmation incomplete.
UKRAINE / LYMAN: SLOVYANSK AXIS — ; Zelensky 27 Sep — Ukrainian forces reported advances in the Lyman sector; Zelensky claimed more than 10,000 Russian troops killed or wounded this week. WarMonitor3 cited Russian commanders growing pessimistic about taking Slovyansk because the Lyman counteroffensive threatens the advance flank. Ukrainian claim; Russian losses unverified.
UKRAINE / KYIV: Zelensky / Russian MoD 27 Sep — Russia struck Kyiv data centers twice Sunday, claiming they served the armed forces; Zelensky said two children and an adult were wounded. Separate reporting said Russia hit Ukraine’s largest mobile provider in the wider 48-hour window. Kinetic + cyber-relevant infrastructure, not a claimed remote intrusion.
RUSSIA / PERM: Reuters 25 Sep (just outside 24h but cascading) — Perm oil refinery halted after a Friday drone attack, per sources.
FRANCE / GERMANY: Historical imported/treated cases from this outbreak (1 France; 2 treated in Germany after DRC diagnosis). No new European detections reported in the last 24 hours.
GLOBAL / NETWORK GEAR: Industry reporting week of 18–24 Sep — Active exploitation of Zyxel GS1900 buffer overflow (CVE-2026-7273); researchers counted 996 compromised devices in 48 countries. CISA federal patch deadline 24 Sep. Separate Veeam Agent local LPE (CVE-2026-32996) confirmed exploited by Arctic Wolf.
GPS / GNSS: UKMTO: GNSS-interference reports remain concentrated in Red Sea, Gulf of Oman and Arabian Gulf. Pattern unchanged on 27 Sep. No new named canal or FIR closure in the last 24 hours.
UNITED KINGDOM / RAF FAIRFORD: Telegraph sources via 27 Sep — Counter-terror examining direct IRGC/Iranian-agent involvement rather than proxies in the Fairford van/explosives plot. Officials have not named a state sponsor. Confidence: unconfirmed.
SOUTHERN RED SEA / BAB EL-MANDEB: UKMTO/JMIC 27 Sep — Houthi forces remain in control of Mocha, Dhubab, Mayun/Perim, Zuqar and the Hanish islands after 10–12 Sep seizures, commanding both Bab el-Mandeb channels. Traffic still below the 20 Jul selective embargo baseline. No new confirmed ship attack in the 24-hour JMIC window. GNSS spoofing and AIS-off activity persist along the Hodeidah littoral and near Yanbu.
SAUDI ARABIA / RIYADH AND KHAMIS MUSHAIT: Coalition 26 Sep — Intercepts of Houthi UAVs toward Riyadh and missiles toward Khamis Mushait. Not a commercial-shipping hit; air-defense event.
STRAIT OF HORMUZ / GULF SHIPPING: Iranian state-backed media (relayed by ) vs UKMTO/JMIC Update 100 (27 Sep) — Media claimed 19 commercial vessels hit in two days; JMIC stated no confirmed Hormuz attacks or disruptions in its latest period and described GNSS/AIS interference as unchanged. Confidence: unconfirmed / conflicting.
SRI LANKA: Public-sector unions (40+), teachers (black flags), and port workers ran work-to-rule / protest actions over taxes, power tariffs, cost of living, medicine shortages and delayed local elections. Security increased at Fort Railway, CPC and government buildings.
TEHRAN / NEW YORK CHANNEL: FM Abbas Araghchi / IRIB, NBC Meet the Press, AFP — Sunday: “Our conditions are clear… We will not back down.” Araghchi said Iran is “fully prepared for the war to be resumed… even if it comes to a doomsday war,” while still open to diplomacy. He said Trump’s Saturday public rejection of the seven-day Hormuz plan has not arrived as an official note through Qatar/mediators. Confidence: confirmed statements.
WASHINGTON: President Trump / Axios, JPost 27 Sep — Trump said indirect talks continue this week (possible Monday) and that he is “always thinking about” renewing strikes. Saturday he said he “rejected their deal,” claimed “total control” of Hormuz, and said Iran wants the strait open because “they have no money coming in.” Confidence: confirmed remarks; operational intent unconfirmed.
WEST PHILIPPINE SEA / AYUNGIN SHOAL: ~60 nm off Second Thomas Shoal, 25 Sep 2035–2300 local — Three PLAN warships and five CCG vessels interfered with PH RORE (M/V Lapu-Lapu + three escorts). Not a seizure; coercive interception.
SPAIN / MULTIPLE CITIES: Thousands marched after police evicted 87-year-old Maricarmen Abascal from her lifelong home; images of her being carried out drove a housing-crisis protest wave reported 24–27 Sep. Cause: eviction/housing costs.
STRAIT OF HORMUZ: citing Axios/Barak Ravid — Trump told Axios U.S.–Iran talks should continue this week, possibly Monday. Same post noted Iranian state-backed media claimed Iran struck 19 commercial vessels in two days. Talks comment attributed to Trump via Axios. Vessel-strike tally conflicts with UKMTO/JMIC 27 Sep note of no confirmed Hormuz attacks in the latest period — treat 19-ship claim as unconfirmed.
UNITED KINGDOM / RAF FAIRFORD: NOTAM issued 27 Sep to keep news helicopters off the EOD scene. Local airspace restriction, not a national closure.
PAKISTAN / ISLAMABAD: LAHORE–PUNJAB — PTI called a 27 Sep long march on Islamabad demanding jailed former PM Imran Khan’s release and opposing judicial-amendment laws. Sisters Aleema Khan, Dr Uzma Khan and Noreen Niazi detained ~20–21 Sep for 30 days under Punjab MPO; nephews also held. Interior Minister Mohsin Naqvi vowed to block the march; containers and tens of thousands of police/paramilitary deployed on approaches to the capital. Jamaat-e-Islami running a parallel fuel-levy protest. Scale of actual 27 Sep turnout not independently counted in this cycle. Cause: detention of Khan and family, access to counsel, constitutional changes. Government response: preventive detention and physical sealing of routes.
PHILIPPINES: maritime coercion — Chinese warships/CCG blocked Ayungin RORE.
CHINA: maritime — Continued CCG/PLAN pressure and survey activity in disputed shoals.
SPAIN: protest — Thousands marched over eviction of 87-year-old Maricarmen Abascal (housing crisis).
DRC: disaster + epidemic + eastern war — Kenge crash (17 dead incl. two generals); Bundibugyo Ebola expanding; M23 front ongoing.
PAKISTAN: border/internal security + unrest — Afghan-border fire and PTI 27 Sep Islamabad march after detention of Imran Khan’s sisters.
ETHIOPIA: renewed civil war indicators — Airport seizures in Tigray; seven-group anti-Abiy alliance.
SWITZERLAND: political — Voters rejected tighter neutrality rules; Moscow praised the result.
YEMEN: civil war / Red Sea — Houthis hold Mocha, Dhubab, Mayun/Perim, Zuqar, Hanish after 10–12 Sep seizures; selective embargo on Saudi-linked shipping continues.
LEBANON: airstrikes — IDF overnight fires across south despite June framework agreement.
HAITI: security — OAS/regional joint statement backing UNSC renewal and full deployment of the Gang Suppression Force.
GAZA / PALESTINE: war — Gaza Health Ministry says Palestinian death toll surpassed 74,000; Israeli airstrike on a Gaza City car killed one (Shifa).
UNITED STATES: cyber + civil — Residual water-utility OT intrusions; ICE-related Austin protests.
UNITED STATES / ICS INTEGRATORS: FBI/CISA advisory 23 Sep — Foreign actors in 2025 compromised a U.S. industrial-automation integrator, staged ~800 files of customer SCADA data, device lists and schematics aimed at power and transportation clients. Agencies ordered operators to inventory integrator access and retain manual-run capability.
MARBURG / OTHER: Uganda notified WHO of a Marburg case in Kyegegwa District 30 Jun 2026 during enhanced Ebola surveillance. No confirmed Marburg surge in the last 24 hours in sources reviewed. No new Ebola Zaire or Sudan-virus declarations this window.
UGANDA: outbreak (closed) — Bundibugyo outbreak declared over 27 Aug 2026 (20 cases, 2 deaths); no new community transmission reported outside DRC.
RUSSIA / BELGOROD: conflict — One woman died of wounds from a Ukrainian strike.
UNITED KINGDOM: terrorism plot (foiled) — Five arrested at RAF Fairford; possible Iran nexus unconfirmed.
UNITED STATES / COLORADO: State disclosure 18 Sep, still circulating this week — Officials said foreign actors breached two small drinking-water providers in late August, changed equipment settings, disabled remote access and alarms, and altered pumping cycles. Fits the July–August campaign against Rockwell/Allen-Bradley MicroLogix PLCs across at least 12 states, with CyberAv3ngers / IRGC-linked actors claiming credit. No confirmed contamination. Confirmed incidents; attribution suspected, not formally announced as state policy.
ETHIOPIA / TIGRAY: AMHARA–AFAR — ACLED, Al Jazeera, BBC 23–26 Sep — Fighting between ENDF and Tigray Defense Forces/TPLF spread after Tigrayan forces seized Mekelle, Aksum and Shire airports (23 Sep). Seven groups announced the Ethiopian Peoples’ Forces Alliance for Survival (TPLF, Amhara Fano National Movement, OLA and others). ENDF claimed 272 TPLF fighters killed and 260 wounded in North Wollo; TPLF VP Amanuel Assefa called it “full-blown war.” ACLED logged 25 Sep fighting at May Gaba and Tselimo on the Tekeze, clashes in Gazgibela, Gidan, Lasta, Raya Kobo, and Yallo (Afar); a Sheraro drone strike hit Hayelom Tabia near an IDP center. TPLF detained veteran commanders including Tadesse Werede (Reuters). Lalibela flights suspended. Army kill-count unverified; airport seizures corroborated by multiple outlets.
AFGHANISTAN / PAKISTAN BORDER: AP / Afghan statement 27 Sep — Kabul said its forces killed 28 fighters and captured 32 crossing from Pakistan, alleging Islamic State affiliation. Islamabad rejected the ISIS characterization. Follows Pakistani airstrikes on 10 Afghan sites 24 Sep and earlier drone-downing claims. Both sides’ figures unverified independently.
UNITED STATES / WASHINGTON: TEHRAN CHANNEL — Axios / JPost 27 Sep — Trump said indirect ceasefire talks with Iran continue this week and that he is “always thinking about” renewing strikes. Separate WSJ reporting said he could resume bombing after midterms. Political reporting, not an execute order.
PAKISTAN: AFGHANISTAN / TORKHAM–KHOST–BALOCHISTAN — Reuters, Dawn, APP 23–27 Sep — Pakistan struck 10 Afghan sites 24 Sep after claiming drones launched from Afghanistan; Kabul said civilian dead this week numbered seven and denied launching drones. APP said Pakistani forces killed several Afghan Taliban fighters who tried to enter at Gulistan, Balochistan, 24–25 Sep. Afghanistan on 27 Sep claimed 28 killed / 32 captured on its side of the line. Earlier Kohat/Hangu militant attacks killed 30+ in Pakistan. Mutual claims; no independent body count.
SAUDI ARABIA / RIYADH: KHAMIS MUSHAIT — coalition / regional reporting 26 Sep — Saudi-led coalition said it intercepted Houthi drones headed for Riyadh and missiles toward Khamis Mushait. Coalition claim; intercept locations not independently geolocated in open sources this cycle.
AZERBAIJAN: 26 Sep Remembrance Day — Official events marked 2020 war dead while highlighting six years of reduced kinetic risk and restored rail talk. Pashinyan told UNGA no cross-fire casualties for 2.5 years. Political signaling; no new clash reported in the 24-hour window.
UKRAINE: conflict — Multi-city Russian strike wave; Kyiv data centers and Sumy guided bombs; Lyman-sector Ukrainian push claimed.
IRAN: interstate war / diplomacy — Trump publicly rejected 7-day Hormuz reopen plan; Araghchi says Tehran is ready for “doomsday war” and still waiting official U.S. reply.
SAUDI ARABIA: missile/drone defense — Coalition intercepts of Houthi drones/missiles toward Riyadh and Khamis Mushait.
YEMEN: proxy war — Houthi third consecutive day of fire on KSA; BAM threat remains.
UGANDA / KYEGEGWA DISTRICT: Isolated Marburg case in a 1.5-year-old child (notified WHO 30 Jun 2026). Africa CDC: no active case at last official comment. No new Marburg cases in last 24 hours. Ethiopia Marburg outbreak closed 26 Jan 2026.
SUDAN: civil war — SAF offensive North Kordofan; RSF secondary front SE Sudan.
FRANCE / GERMANY: Prior imported BDBV cases. No new imported cases reported in last 24 hours.
AFGHANISTAN: border tension — fragile ceasefire with Pakistan under strain after earlier 2026 strike cycles.
ALBANIA: protest — Flamingo Revolution ongoing.
UKRAINE / KYIV: Residual effects of 23–24 Sep Russian strikes on Kyiv data centers; ~100,000 households affected at peak. Kinetic-to-infra, not a new 24-hour cyber event.
GLOBAL / ENTERPRISE: Citrix warning 27 Sep: shut down NetScaler appliances over two exploited zero-days.
UNITED KINGDOM / NHS: An NHS Trust suspended 10 staff over a data-breach concern tied to patient Noah Woods (27 Sep reporting).
UNITED STATES: diplomacy/military — UNGA; Iran talks; Iraq withdrawal 30 Sep.
IRAN: Nationwide internet disruption ongoing since late Feb 2026 war start.
POLAND / HEALTHCARE: Second recent medical-data incident: Medyc software vendor used by Polish providers.
IRAN: war/diplomacy — Hormuz strikes claimed; ceasefire rejected; talks may resume Monday.
PAKISTAN: terrorism — TTP-claimed suicide VBIED, Darazinda/DI Khan, 13 dead, 26–35 injured.
RANSOMWARE / GLOBAL: 27 Sep leak-site listings include Qilin vs Willatt & Flickinger and Revenga Smart Solutions; Arcus Media vs Pantaneiro Capas.
ISRAEL / GAZA: war — Hamas official Khalil al-Hayya comments on elections and Abbas unity talk.
UKRAINE: conflict — drone/missile campaign; Lyman counter-infiltration; civilian infrastructure hits.
UNITED KINGDOM: terror plot / base security — five arrests, Fairford major incident.
IRAQ: force posture — U.S. exit 30 Sep; militia disarmament delayed to Jun 2027 phased plan.
UNITED STATES / NEW YORK: BAGHDAD AXIS — Secretary of State Marco Rubio met Iraqi PM Ali al-Zaidi at UNGA; Washington pressed Baghdad to dismantle Iran-backed militias as U.S. forces complete Iraq exit by 30 Sep. Remaining hundreds of U.S. troops in northern Iraq slated for Jordan and other regional bases.
ETHIOPIA / TIGRAY: ACLED/Critical Threats 24–26 Sep: TPLF-led rebel coalition launched a large-scale offensive; TPLF seized Tigray’s three main airports. Coalition aims to consolidate Tigray and pressure federal supply lines. Escalation indicator: first move toward renewed full-scale northern war after four years of fragile peace.
HAITI / PORT-AU-PRINCE: 32 OAS member states on 26 Sep called on the UN Security Council to renew the Gang Suppression Force (GSF) mandate under UNSCR 2793 (2025) and complete full deployment. PM Alix Didier Fils-Aimé told UNGA Haiti is at a “watershed moment.” Escalation indicator: gangs (Gran Grif, Viv Ansanm) remain primary security threat; GSF not fully fielded.
MALI / SIKASSO: SÉGOU–DIOURA — JNIM claimed 22 Sep capture of a FAMa post at Yanfolila, Sikasso; Bla (Ségou) under attack in mid-September reporting. Reuters: ~120–130 Malian soldiers killed in the 10 Sep Dioura camp assault; Defence Minister Sadio Camara killed in related September attacks. Russia’s Africa Corps remains partnered with junta forces.
RUSSIA / KRASNODAR KRAI / ILSKY: Ukrainian drones struck Ilsky oil refinery overnight 25–26 Sep; fire geolocated 44.860335, 38.614552. ISW: Ukrainian strikes also hit a military-industrial site, energy infrastructure, and an air-defense system in Russia the same night.
PAKISTAN / ISLAMABAD: KHYBER PAKHTUNKHWA — PTI postponed the 27 Sep Long March for Imran Khan’s release to 4 Oct after authorities ringed Islamabad with 1,500+ shipping containers. Khan’s sisters Aleema, Uzma and Noreen arrested earlier in the week. Overseas PTI chapters still staged 27 Sep embassy protests (London, France, Barcelona, Germany, Holland). Cause: detention of Khan since 2023. Government response: container blockade, arrests of senior PTI figures.
ARMENIA: AZERBAIJAN / SOUTH CAUCASUS — PM Nikol Pashinyan at UNGA 24 Sep: Aug 8 2025 Trump-brokered peace has produced 2.5 years with no cross-fire casualties; railway links restoring; TRIPP corridor advancing despite Russian/Iranian objections. Azerbaijan marks 27 Sep Remembrance Day (six years from 2020 war start). De facto peace holding; Russian Deputy PM Novak in Baku 26 Sep.
UKRAINE / KYIV: ODESA–SUMY — Kyiv Independent / — Russian attacks over 25–27 Sep killed at least 14 and injured 57 nationwide in one tally; Odesa hit in a mass strike; third consecutive Kyiv attack killed 1, injured 4. Geolocated Shahed hit Vitacenter hospital, Zaporizhzhia (47.844764, 35.140323); school strike Ivankiv, Kyiv Oblast (50.938870, 29.907440); preschool No. 665 Obolon, Kyiv (50.522119, 30.515911). Russia launched 162 drones 25 Sep and 173 overnight 25–26 Sep.
CHINA: naval pressure — PLAN/CCG massing; Huangyan exercises.
UGANDA: BDBV outbreak declared ended 27 Aug 2026 (20 confirmed, 2 deaths). No new Ebola cases in last 24 hours.
GEORGIA / TBILISI: “Georgia Against Ivanishvili” march on 26 Sep, day 668 of daily pro-EU protests, demanded release of political prisoners and territorial integrity; opposed Georgian Dream’s Russia tilt.
UNITED KINGDOM / RAF FAIRFORD: Airbase locked down; extra force-protection; armed police at gates.
MALI: jihadist offensive — JNIM vs FAMa/Africa Corps.
NEW YORK / DOHA CHANNEL: Axios / WSJ / Araghchi — Trump expects talks as early as Monday; publicly rejected seven-day Hormuz reopen plan; FM Abbas Araghchi 27 Sep waiting for mediators to convey Washington’s “definitive” position. President Pezeshkian would allow UN nuclear inspectors as part of a deal. Confidence: diplomatic positions CONFIRMED; strike-resume timing UNCONFIRMED.
STRAIT OF HORMUZ: IRGC Navy / — Claimed capture of U.S. Remus 600 / Mk 18 Mod 2 Kingfish UUV “today.” Confidence: UNCONFIRMED.
TEHRAN / ARMED FORCES: State media 27 Sep — Army “ready” for renewed U.S. attack; “war is not over.” No announced U.S./Israeli strike on Iranian territory in this 12-hour window (GlobalSecurity: 20th consecutive period with no announced coalition strike ashore). Confidence: rhetoric CONFIRMED; new strike package NOT OBSERVED.
STRAIT OF HORMUZ: Iranian media claim of 19 commercial vessels struck in two days. JMIC 27 Sep: no confirmed attacks in its narrow latest period, but IRGC UAV overflight, surveillance, and VHF hailing continue; GNSS interference persistent; threat SEVERE. U.S.-facilitated transits 24–26 Sep: 89. Windward: 21 vessels transited 26 Sep (13 in / 8 out), 9 dark.
STRAIT OF HORMUZ: IRGC claim: capture of U.S. Remus 600 UUV. UNCONFIRMED.
GEORGIA / TBILISI: Day-668 Euro-integration march 26 Sep against Georgian Dream. Scale: central Tbilisi march. Cause: EU path, political prisoners, Russia policy.
ALBANIA / TIRANA: Flamingo Revolution continues. Last-24h specific clash not independently confirmed.
UNITED KINGDOM / SOUTHERN ENGLAND: Protests 25 Sep after arrest of far-right activist Daniel Thomas; last-24h scale limited.
RAF FAIRFORD / UNITED KINGDOM: Sky News / / — UK counter-terrorism investigating possible Iranian link to overnight Fairford plot against the U.S. bomber base used for Hormuz-related strikes. Confidence: UNCONFIRMED.
STRAIT OF HORMUZ: Iranian state-backed media claimed Iran struck 19 commercial vessels in two days; aligns with 48-hour strike reports in/near the strait. JMIC 27 Sep note still rates Hormuz threat SEVERE. Individual vessel identities for the “19” claim UNCONFIRMED.
UNITED STATES / NEW YORK: ~100 arrested 25 Sep at anti-Netanyahu UN protest, including actors Susan Sarandon and Hannah Einbinder. Cause: Gaza/Netanyahu UNGA appearance.
RED SEA / BAB AL-MANDEB / SAUDI AIRSPACE: Houthi ballistic missile and drones at Riyadh and Khamis Mushait intercepted 26 Sep. No new named merchant-ship hit confirmed in the last 24 hours.
UNITED STATES / NEW YORK: citing Axios/ — President Trump expects U.S.–Iran negotiations to resume as early as Monday. Separate WSJ line (26 Sep): Trump rejected Iran’s seven-day Hormuz reopen/ceasefire proposal and privately expects to resume bombing after November midterms.
STRAIT OF HORMUZ: IRGC Navy claimed capture today of a U.S. Remus 600 AUV (Mk 18 Mod 2 Kingfish) near the strait. U.S. confirmation not published. UNCONFIRMED / IRGC claim.
STRAIT OF HORMUZ: Iranian state media / — Tehran claimed 19 commercial-vessel strikes in 48 hours; U.S. naval blockade remains in force (CENTCOM: 100+ vessels redirected since blockade resumed). Confidence: claim UNCONFIRMED at vessel-by-vessel level; blockade CONFIRMED.
SPAIN / MADRID: Thousands marched 26–27 Sep over housing after police evicted 87-year-old Maricarmen Abascal from her lifelong home. Scale: thousands. Cause: housing/eviction crisis.
ETHIOPIA: civil war risk — TPLF airport seizures.
RUSSIA: conflict/energy — Ilsky refinery fire; 162–173 drone launches; winter long-range strike theory of victory.
HAITI: security mission — OAS push to renew GSF.
LEBANON: strike — IDF hit Hezbollah weapons depot.
UKRAINE / LYMAN: SLOVYANSK / ZAPORIZHZHIA — ISW 26 Sep / — Ukrainian forces shifting Operation Vivaldi tactics to interdict Russian ATV/motorcycle reinforcement of infiltration groups north/northeast of Lyman; recent Ukrainian advances east of Slovyansk and in western Zaporizhia Oblast. Zelensky: 10,000+ Russian killed/wounded this week (Ukrainian figure, unverified independently).
WEST PHILIPPINE SEA / AYUNGIN SHOAL: Chinese PLAN/CCG blocked M/V Lapu-Lapu resupply; radio threat of “compulsory measures.” Mission aborted.
UKRAINE: energy and industrial sites inside Russia struck; Russian drone campaign against Ukrainian energy and civilian sites continued (162/173 UAV waves). Physical.
DEMOCRATIC REPUBLIC OF THE CONGO: ITURI (EPICENTER), NORTH KIVU, HAUT-UÉLÉ, BAS-UÉLÉ, TSHOPO, SUD UBANGI; SOUTH KIVU QUIESCENT — Bundibugyo ebolavirus (Orthoebolavirus bundibugyoense). WHO DON-618 / NETEC as of 23 September 2026: 7,890 confirmed cases, 3,799 deaths, CFR 48.1%, 1,966 recovered. 70 new confirmed cases in the preceding 24 hours from 26 health zones in Ituri, North Kivu, Haut-Uele, Bas-Uele and Tshopo. 63 health zones across seven provinces ever affected; 48 zones in six provinces had >=1 case in the last 21 days. Ituri: 6,032 cumulative confirmed cases (868 in prior 21 days). Newest zones: Dungu (Haut-Uele, South Sudan border) and Bulu (Sud Ubangi). No licensed BDBV vaccine. PHEIC remains in effect. Coordinates: outbreak is zonal, not single-case grid-referenced in WHO DON; Ituri provincial seat Bunia approx. 1.56N, 30.25E.
UNITED STATES / IRAN: , — Wall Street Journal: President Trump rejected Iran's seven-day Hormuz reopen/ceasefire proposal floated via Qatar and privately told aides he expects to resume bombing after the November midterms. Publicly he says Iran is "begging" for a deal that would dismantle its nuclear program. Confirmed as WSJ reporting; operational strike timeline unconfirmed.
WEST PHILIPPINE SEA / AYUNGIN SHOAL: PLAN/CCG blocked M/V Lapu-Lapu RoRe night of 25 September ~60 nm from the shoal; mission aborted. Not a seizure; gray-zone blocking.
RED SEA / BAB EL-MANDEB: Houthis retain Mocha, Dhubab, Mayun/Perim, Zuqar and the Hanish islands after 10–12 September seizures, commanding both BAM channels. Saudi-linked shipping selective embargo from 20 July remains. No confirmed commercial vessel attack in the last 24 hours. GNSS spoofing residual along Hodeidah littoral and elevated near Yanbu.
UNITED STATES / COLORADO: State officials on 18 September (still the newest named incident in this cycle) said foreign actors in late August breached two small drinking-water providers, changed equipment settings, disabled remote access and alarms, and altered pumping cycles. Fits the July–August campaign against internet-facing Rockwell/Allen-Bradley MicroLogix 1100/1400 PLCs across >=12 states (Minnesota 30+ systems; Georgia Clayton County brief OT disruption and boil-water advisory). Suspected IRGC-linked CyberAv3ngers / "APT Iran." No confirmed drinking-water contamination. Last-24-hour new victim list: none published.
STRAIT OF HORMUZ: IRGC Navy claimed today it captured a U.S. Remus 600 autonomous underwater vehicle (U.S. designation Mk 18 Mod 2 Kingfish) near the strait. CENTCOM previously called a similar IRGC capture claim "clearly desperate" and said the U.S. retains positive control of operational drone assets. Unverified.
UNITED STATES / FEDERAL: FBI/CISA 23 September guidance warned that foreign actors in 2025 compromised a U.S. industrial-automation integrator, staged ~800 files of customer SCADA schematics (power and transportation clients) for presumed exfiltration. Supply-chain residual risk, not a new 24-hour outage.
UNITED KINGDOM / GLOUCESTERSHIRE: RAF FAIRFORD — , , — Five men arrested overnight on suspicion of Explosives Act offences after a farmer driving home from a party reported three vans blocking a road and balaclava-wearing men running toward the airbase. Gloucestershire Constabulary declared a major incident; nearby properties evacuated; Army EOD examined vehicles. Police captured suspects within ~25 minutes. Sky News: counterterrorism is examining an Iran link; Telegraph: Russian sabotage and Islamist plots also under review; Iran-linked motive currently treated as most likely. Attribution unconfirmed.
WASHINGTON / TEHRAN / DOHA CHANNEL: Axios via — President Trump expects U.S.–Iran negotiations to continue this week, possibly Monday, even after publicly rejecting the seven-day Hormuz reopen plan. Confidence: confirmed as Axios/WSJ official-source reporting, not as a signed deal.
TEHRAN: Iranian Armed Forces / state media 27 September — vow to answer "any fresh aggression" with "new military technologies" and "surprises." President Pezeshkian told UNGA the U.S. attacked twice during talks and that Iran "no longer" trusts Washington; FM Araghchi told NBC Iran is "ready for diplomacy and war at the same time." Confidence: confirmed statements.
STRAIT OF HORMUZ / PERSIAN GULF: Iranian state media / — claim of 19 commercial vessels struck in two days. UKMTO 27 September advisory: no confirmed attacks 24–26 September. Confidence: unconfirmed; contradicted by UKMTO incident log for that slice.
UKRAINE / LYMAN DIRECTION: ISW 26 September — Ukrainian battalion commander said the first phase of Operation Vivaldi focused on defeating Russian infiltration groups by striking ATV and motorcycle assaults trying to reinforce stranded infiltrators rather than immediately clearing every infiltration. Escalation indicator: shift from point clearance to interdiction of reinforcement.
STRAIT OF HORMUZ: IRGC Navy claimed capture of a U.S. Remus 600 / Mk 18 Mod 2 Kingfish UUV. CENTCOM has denied an earlier identical class of claim and said it retains positive control of operational drone assets. Confidence: unconfirmed.
UNITED KINGDOM: RAF FAIRFORD — Sky News / Telegraph via , , — CT police investigating possible Iranian link to the disrupted explosives plot against the U.S. bomber hub used in the 2026 Iran air campaign. Motives also include Russia and Islamist terrorism. Confidence: unconfirmed attribution; arrests and major-incident declaration confirmed.
UGANDA: Bundibugyo outbreak declared over (Africa CDC/WHO): 42 days with no new case after last patient discharged 16 July 2026. Totals: 20 confirmed (15 imported, 5 local), 2 deaths, 18 recovered. Risk of re-importation from DRC remains.
RUSSIA / KRASNODAR KRAI: Ilsky oil refinery fire after Ukrainian UAV strike (geolocated). Physical infrastructure, not cyber.
STRAIT OF HORMUZ / PERSIAN GULF: Iranian state-backed media claimed Iran struck 19 commercial vessels in two days. Axios, citing Barak Ravid's conversation with President Trump, reported U.S.–Iran talks expected to resume as early as Monday. UKMTO/JMIC advisory dated 27 September stated no confirmed attacks or disruptions 24–26 September. Vessel-strike tally unverified.
PAKISTAN: terrorism — TTP VBIED Darazinda, 13 dead.
UGANDA / KYEGEGWA DISTRICT: Separate June 2026 Marburg case identified under enhanced Ebola surveillance; not a current expanding outbreak in this 24-hour window.
CHILE / SANTIAGO: 11–12 September Pinochet-coup anniversary: 284 detained, 198 violent incidents (down 34% YoY). Outside the 24-hour window; residual commemorative tension only.
FRANCE: Single imported healthcare-worker case earlier in the outbreak; recovered. No community transmission.
SUDAN: civil war — SAF offensive to clear remaining RSF positions in North Kordofan; RSF secondary push in southeast; SAF drone strikes into Chad earlier this month raised interstate risk.
HAITI: gang war / stabilization — OAS push to renew GSF; elections slated 13 December.
DEMOCRATIC REPUBLIC OF THE CONGO: outbreak + unrest — Bundibugyo Ebola 7,890 confirmed / 3,799 dead as of 23 September; mid-September protests against constitutional change (Tshisekedi third-term path) met tear gas.
MALI: jihadist/separatist war — JNIM Yanfolila claim; Kidal under FLA.
PHILIPPINES: maritime confrontation — Ayungin RoRe blocked.
CHINA: gray-zone / exercises — CCG/PLAN blocking at Ayungin; Southern Theater Command drill at Scarborough.
UNITED STATES: cyber residual / politics — Colorado disclosed late-August foreign breaches of two small water utilities (settings changed, alarms disabled); July 12-state water PLC campaign still the baseline. No new grid outage confirmed in last 24 hours.
ETHIOPIA: renewed civil war risk — TPLF-led coalition offensive, airports seized.
YEMEN / RED SEA: Houthi blockade of Saudi-linked shipping remains in force; Houthis hold Mocha, Dhubab, Mayun/Perim, Zuqar and Hanish after 10–12 September seizures. No confirmed commercial attacks 24–26 September per UKMTO.
SAUDI ARABIA: missile defense / Yemen war — earlier window intercepts of Houthi ballistic missiles toward Taif and Yanbu; Saudi-Turkey-Pakistan Mecca Joint Defence Agreement staff talks continuing.
ISRAEL / GAZA / LEBANON: linked Middle East war — Hamas leadership accused Israel of using Palestinian "blood" as election fuel; seven-front framing remains Netanyahu's public line.
UNITED KINGDOM: terrorism investigation — RAF Fairford plot disrupted; five arrests; Iran-link hypothesis unconfirmed.
AFGHANISTAN: cross-border strikes — Taliban say 28 dead fighters "came from Pakistan"; Islamabad denies; earlier 21 September airstrikes.
RUSSIA: strikes / energy — Ilsky refinery fire geolocated; Perm's seventh-largest refinery reported offline after a Friday attack (prior window).
IRAN: interstate war / Hormuz — Trump rejected 7-day Hormuz reopen plan; IRGC claims UUV capture and 19-ship strike wave; talks may resume Monday.
PAKISTAN / LAHORE: PTI planned 27 September protest after purported arrests of Imran Khan's sisters Aleema, Uzma and Noreen. Scale and turnout not independently confirmed at cutoff.
ETHIOPIA / TIGRAY: Critical Threats/ACLED 24–26 September: a rebel coalition led by the Tigray People's Liberation Front launched a large-scale offensive, including seizure of Tigray's three main airports, aiming to consolidate TPLF control and pressure federal supply lines. First move toward a possible return to full-scale northern war after the 2020–2022 conflict. Confirmed as ongoing fighting; scale still developing.
MALI / SIKASSO: SÉGOU — JNIM claimed on 22 September it took a FAMa military post at Yanfolila, Sikasso region; earlier September reporting put ~120–130 Malian soldiers killed in the 10 September Dioura camp attack. FLA holds Kidal since the April joint FLA–JNIM offensive; Bamako remains under a declared road blockade since 28 April. Escalation: jihadist pressure on central Mali plus Russian Africa Corps partner forces.
HAITI / PORT-AU-PRINCE: Thirty-two OAS member states, including the United States, issued a joint statement on 26 September calling on the UN Security Council to renew and fully deploy the Gang Suppression Force (GSF) authorized under UNSCR 2793 (2025). GSF military component was 1,083 as of early July and remains below the planned 5,500; first-round presidential/legislative elections are scheduled 13 December 2026 if security allows.
PAKISTAN: AFGHANISTAN BORDER / KHYBER PAKHTUNKHWA — 26 September TTP VBIED at Darazinda checkpoint (13 dead) follows 21 September Pakistani airstrikes in Paktika and Kunar that Islamabad said killed 28 militants and UNAMA said killed three civilians (man, woman, girl). Fragile post-October 2025 ceasefire remains broken. WION and other outlets reported additional Pakistani strikes inside Afghanistan in the past week; exact 24-hour strike tally unconfirmed.
WEST PHILIPPINE SEA: AYUNGIN (SECOND THOMAS) SHOAL — AFP: on the night of 25 September, three PLAN warships (including two Houbei-class missile boats) and five CCG vessels interfered with M/V Lapu-Lapu plus three PN/PCG escorts ~60 nm from Ayungin; PLAN radio warned of "compulsory measures." Mission aborted 2308 local. U.S. Ambassador Lee Lipton condemned the blocking tactics on 27 September.
ARMENIA / AZERBAIJAN: Security Council Secretary Alen Simonyan said 24 September Armenia "no longer has a conflict with Azerbaijan." TRIPP (Trump Route for International Peace and Prosperity) corridor through Armenia to Nakhchivan remains pending Armenian Constitutional Court review. Diesel/gasoline shipments from Azerbaijan to Armenia continue. De-escalation on the former NK front, not a signed final treaty.
UNITED STATES / NEW YORK: ~100 arrested at an anti-Netanyahu protest including actors and politicians (prior 48 hours). Not mass-riot scale.
UKRAINE: conflict — Russia launched 162 drones on 25 September and 173 overnight 25–26; Ukrainian strikes hit Ilsky refinery, Azov Optical-Mechanical Plant (Rostov), energy and air-defense targets inside Russia. Two killed, three injured by a guided bomb in Sumy; three injured in Odesa.
UKRAINE: mass drone/glide-bomb strikes on Kyiv, Sumy, Odesa, Zaporizhzhia; data-center targeting.
RUSSIA: Ukrainian strikes on Ilsky refinery and Kursk-area bridge; three dead in Krasnodar Sat.
UNITED STATES: diplomacy: Trump rejects Iran Hormuz-reopen plan; expects talks this week; comments on Fairford plot.
PAKISTAN: TTP suicide bombing at Dera Ismail Khan police checkpoint Sat: 11–12 killed, ~30 wounded; Kohat police-complex attack left at least 31 dead (recent); military claims 71+ militants killed in four days in Balochistan.
AFGHANISTAN / KUNAR: Pakistani airstrikes claimed 28 militants killed; UNAMA confirmed at least three civilians (man, woman, girl) killed and four injured. Kabul summoned Pakistani chargé.
ARMENIA / SYUNIK AND YEREVAN: No significant 2026 border fighting with Azerbaijan. Peace treaty remains initialled (White House, Aug 2025) but unsigned pending Armenian constitutional language on Karabakh. Armenia’s Constitutional Court reviewed the US framework for the Trump Route for International Peace and Prosperity (TRIPP, ~43 km road/rail across Syunik linking Azerbaijan to Nakhchivan). Azerbaijan has shipped >14,000 t diesel and ~5,000 t gasoline to Armenia since Dec 2025.
SOUTH CAUCASUS / GEORGIA: AZERBAIJAN CORRIDOR — Iran war continues to reroute Eurasian cargo onto the Middle Corridor (Caspian–Azerbaijan–Georgia–Black Sea/Turkiye) and Baku–Tbilisi–Kars. Anaklia deep-water port and Georgian rail/port nodes gain strategic weight as Hormuz and, intermittently, Iranian land routes stay disrupted. Georgia faces transit-competition from TRIPP if built.
THAILAND: CAMBODIA BORDER — Renewed fighting after a fragile ceasefire collapsed; Thailand accused Cambodian forces of planting new landmines (Phnom Penh denies). Thai airstrikes and artillery; Cambodian counter-fire; drones and rockets reported. Hundreds of thousands displaced on both sides; officials call it the worst displacement since mid-2025 summer fighting. Both militaries report military and civilian casualties. Exact 24h KIA figures not independently consolidated.
UNITED STATES / WESTERN HEMISPHERE: Guyana, Trinidad and Tobago, and the Dominican Republic joined the US and 11 other states in a UNGA-sidelines Shield of the Americas declaration targeting 24 designated narco-terror organizations, including Haiti’s Gran Grif and Viv Ansanm, Venezuela’s Cartel de Los Soles, Colombia’s Clan del Golfo and ELN, Ecuador’s Los Choneros/Los Lobos networks, MS-13, Tren de Aragua, Sinaloa, and CJNG. Measures cover economic security, regional security, and multilateral coordination. Escalation indicator: formal multilateral listing of Haitian and Venezuelan networks alongside Mexican/Colombian cartels.
ETHIOPIA / AMHARA: TIGRAY–AFAR — ENDF claimed 272 TPLF fighters killed and 260 wounded in a North Wollo (Amhara) counter-offensive after TPLF and allied groups attacked several areas. TPLF VP Amanuel Assefa: full-blown war. Tigrayan forces seized three local airports; Lalibela flights suspended. 2022 Pretoria deal effectively shattered. Casualty figures are government claims, unverified independently.
UNITED KINGDOM: terror plot investigation / major incident — five arrested near RAF Fairford; EOD ongoing.
YEMEN: Saudi strike on Taiz market (7 dead / 40 wounded, Houthi media); Houthis hold Mocha, Perim/Mayun, and Hanish Islands after 10–11 Sep offensive.
IRAN: maritime interdiction and claimed UUV seizure in Hormuz; talks flagged for Monday.
YEMEN / TAIZ: Saudi airstrike on a market in southwestern Taiz killed at least seven and wounded ~40, per Houthi-run media 27 Sep. Separate from the Red Sea coastal campaign. Houthi-source casualty figures UNCONFIRMED by independent monitors.
UKRAINE / KYIV: SUMY–ODESA–ZAPORIZHZHIA — AP / Kyiv Independent — Overnight–Sunday Russian strikes killed at least six to 14 (figures vary by cutoff) and wounded dozens. Sumy: woman and 16-year-old girl killed by guided bombs; five wounded. Kyiv outskirts (Vyshneve): one dead, five wounded by drones. Zelenskyy: data center in Kyiv struck twice Sunday morning, two children and one adult injured. Air Force: 170 Shahed-type drones launched overnight 26–27 Sep.
HAITI / PORT-AU-PRINCE: OAS Secretary-General Albert Ramdin and 32 active OAS members issued a 25–26 Sep joint statement backing UN Security Council renewal and full deployment of the Gang Suppression Force (GSF, UNSCR 2793). Violence by armed gangs (Gran Grif, Viv Ansanm named in a parallel US-led Shield of the Americas list) continues to drive displacement, sexual violence, and child recruitment. Mexico is training 114 FAdH personnel (108 at Camp 37-C, San Miguel de los Jagueyes) to support PNH operations.
UNITED STATES / MULTI-STATE WATER SECTOR: July–August campaign against Rockwell MicroLogix 1100/1400 and other exposed PLCs hit utilities in >=12 states (>=100 facilities targeted per NYT). Attribution leans Iran-linked (CyberAv3ngers / APT Iran claims; US officials likely Iran). No newly confirmed boil-water notice dated 26–27 Sep; campaign remains the live critical-infrastructure baseline tied to the Iran war.
SAUDI ARABIA: Petroline pipeline previously shut after 10 Sep attack; Houthi blockade on Saudi-linked shipping via Bab el-Mandeb remains.
RUSSIA / KRASNODAR: ILSKY REFINERY (44.860335, 38.614552) — Ukrainian drone strike produced a confirmed fire. Ukraine also claimed a plant strike in Rostov region Saturday.
GAZA / PALESTINIAN TERRITORIES: Gaza Health Ministry: Israel–Hamas war death toll surpassed 74,000.
UGANDA: Bundibugyo outbreak declared ended 27 Aug 2026 (20 confirmed, 2 deaths; 15 imported from DRC). Separate Marburg case notified from Kyegegwa District 30 Jun 2026 under enhanced EVD surveillance — treat as historical unless a new 24h case appears (none in current WHO update).
UNITED KINGDOM: UKHSA assesses risk to the UK population as low.
UNITED KINGDOM / RAF FAIRFORD: Telegraph / Sky / / — UK counter-terror investigating possible direct Iranian-agent role in the Fairford van plot rather than proxy use; Russian sabotage and Islamist plots also examined. Iran-link is the source-preferred hypothesis, not a police attribution. IRGC previously (Jul) called any base used for strikes on Iran a legitimate target. Confidence: UNCONFIRMED motive; arrests and EOD are CONFIRMED.
UNITED KINGDOM / WHELFORD: RAF FAIRFORD (51.68N, 1.78W) — / / / — Five men arrested ~00:45 BST after three white vans with falsified fuel-company markings approached RAF Fairford, a USAF bomber hub used since Feb 2026 for limited strikes on Iranian missile sites. Armed police detained the suspects under the Explosives Act; they were later further arrested for preparation of a terrorist act (Terrorism Act s.5). ~85 households evacuated; Army EOD robots examining three vans packed with black barrels; two vehicles opened by afternoon. NOTAM no-fly zone around Whelford. US intel reportedly raised the base to maximum threat (FPCON Delta cited by spotters, unverified by USAF). Trump said suspects were looking to do big damage and had been under joint UK–US review. Iran-link is UNCONFIRMED — Telegraph/Sky sources say counter-terror is examining direct Iranian-agent involvement as the leading hypothesis among Russian sabotage and Islamist motives; police have not named a state actor.
STRAIT OF HORMUZ: IRGC claimed Remus 600/Kingfish AUV capture; claimed additional missile/drone and fast-boat attacks on violating tankers (unconfirmed handles alleged 3–6 vessels hit in a few hours). IRGC expanded a declared prohibited zone toward the sanction route in the Sea of Oman and Arabian Sea. US blockade of Iran-linked shipping remains; CENTCOM previously reported 94+ redirected vessels (as of early Sep). GPS/AIS dark transits continue.
TEHRAN / IRGC NAVY: Fars / IRGC — IRGC Navy threatened to target US warships including in the Indian Ocean if Washington launches a new war. Army chief Amir Hatami said the war imposed by the US and Israel has not ended and the enemy must expect severe blows. Confidence: CONFIRMED as official rhetoric; no new confirmed US shore strike in ~20 days per OSINT sitreps.
UNITED KINGDOM / WHELFORD: FAIRFORD — NOTAM no-fly zone around Whelford while EOD works three suspect vans. RAF Fairford, Lakenheath, and possibly Mildenhall reported elevated FPCON (Delta at Fairford per spotters; Charlie at Lakenheath — USAF will not confirm specific FPCON).
UNITED KINGDOM / GLOUCESTERSHIRE: BBC confirmed the five suspects are additionally held for plotting to commit a terrorist act. Vans were one street and a field from the Fairford perimeter. No identities or nationalities released. Suspects can be held up to 14 days under TACT.
SRI LANKA: Opposition protests against judicial-reform bills (Sajith Premadasa: reforms would annihilate judicial independence); last major reported action 24 Sep.
STRAIT OF HORMUZ: IRGC Navy / Tasnim / — Claimed seizure of a US Remus 600 (Mk 18 Mod 2 Kingfish) AUV today, alleging reconnaissance/espionage and capture via intelligence plus electronic warfare; vehicle said to be under forensic data recovery. CENTCOM/OSINT collation: US retains positive control of operational drone assets. Confidence: UNCONFIRMED (IRGC claim vs US denial of loss).
STRAIT OF HORMUZ / QESHM APPROACHES: / Iranian state media — Local reports of explosions near Qeshm and renewed Iranian missile launches into the strait, assessed as aimed at commercial shipping. Iranian outlets claimed 19 commercial vessels struck in two days; IRGC also warned tanker crews at Kuwaiti and Bahraini docks to abandon ships. Confidence: PARTIALLY CONFIRMED (pattern of IRGC anti-shipping since Jul 2026); specific 19-ship tally UNCONFIRMED independently.
SERBIA: President Aleksandar Vucic said he would formally submit resignation ~20:00 local 27 Sep, opening early presidential/parliamentary elections; he is expected to campaign as an ordinary citizen / possible PM candidate.
BAB EL-MANDEB / SOUTHERN RED SEA: Houthi control of Mocha, Perim (Mayun), and Hanish Islands (seized 10–11 Sep) stands. MARAD advisory 2026-013 remains in force: elevated risk to US/UK/Israeli/Saudi-associated shipping. No newly named vessel strike confirmed in the last 24 hours in primary advisories; Taiz market airstrike is land-based.
SPAIN / MULTIPLE CITIES: Thousands marched 27 Sep over the televised eviction of 87-year-old Maricarmen Abascal after police forced her door; housing-cost crisis is the stated cause. No large-scale riot or mass-arrest figure reported in wires.
PAKISTAN / ISLAMABAD: KHYBER PAKHTUNKHWA — PTI nationwide march to demand Imran Khan’s release set for 27 Sep, to be led by KP CM Sohail Afridi. Government closed the Peshawar–Islamabad motorway, Hazara Motorway, GT Road at Attock, and the Dera Ismail Khan highway; container barriers in the capital. Police estimate 20,000–25,000. Khan’s sisters Aleema, Uzma, and Noreen detained under MPO (30-day orders). Islamabad High Court barred occupation of highways into the capital. Outcome of 27 Sep assemblies still developing at cutoff.
UNITED STATES / ILLINOIS: TEXAS–DC — Anti-ICE actions continued in the 10-day window (Broadview, IL 25 Sep; prior Austin walkouts after ICE shooting of Wilber Rafael Garces Perez; 3,000+ Tibetans protested Trump–Xi White House meeting 24 Sep). No new 24h mass-riot confirmed.
SERBIA / BELGRADE: Student-led anti-graft movement ongoing since the Nov 2024 Novi Sad station collapse (16 dead). Vucic resignation submission tonight is the political hinge; protests have continued after his June announcement.
SWITZERLAND: early results: voters on track to reject tighter neutrality rules.
INDIA / NATIONWIDE: United Forum of Bank Unions strike 28–30 Sep over wages/policy; not yet in the streets on 27 Sep. Cooperative banks opted out.
BLACK SEA / ODESA: Ukrainian MiG-29 gun-kill on a Shahed over Odesa (footage 26 Sep). Russian mass-drone package overnight included Odesa Oblast (mass strike per regional governor).
STRAIT OF HORMUZ: IRGC Navy claimed capture of a US Remus 600 (Mk 18 Mod 2 Kingfish) AUV today, alleging espionage and electronic-warfare seizure; specialists said to be extracting data. CENTCOM, per later OSINT collation, stated US forces retain positive control of operational drone assets. IRGC capture claim UNCONFIRMED by US official statement in primary wires. Iranian state media also claimed 19 commercial vessels struck in two days.
SUDAN: SAF takes Sodari, North Kordofan; RSF drones on Wad Madani and El Obeid approaches.
DEMOCRATIC REPUBLIC OF THE CONGO: Bundibugyo Ebola outbreak expanded to Sud Ubangi.
THAILAND / CAMBODIA: border war flare; mass displacement.
STRAIT OF HORMUZ: / Axios via — Trump told Axios he expects US–Iran talks to resume as early as Monday. Same window as Iranian state claims of renewed missile/drone fire on shipping near Qeshm and an IRGC prohibited-zone expansion into parts of the Sea of Oman and Arabian Sea.
SOUTH AFRICA: 27 killed in two township mass shootings (Wedela, Lwandle).
UKRAINE / KYIV: Russia struck a Kyiv data center twice Sunday morning (Zelenskyy); two children and one adult injured. Russian sources claimed prior hits destroyed ~25% of facilities providing internet/Starlink support to Ukrainian forces (Russian claim, unverified). Pattern: deliberate campaign against comms/data centers ahead of winter.
ETHIOPIA: TPLF–ENDF war resumed; airports seized; 272 TPLF KIA claimed by army.
PAKISTAN / LAHORE AND NATIONAL: Imran Khan's PTI planned 27 Sep protest after reported arrests of sisters Aleema Khan, Dr Uzma Khan, and Noreen Khan. Cause: detention of former PM and party leadership. Government response: prior arrests; 27 Sep turnout not fully tallied at briefing time.
UNITED STATES / EAST COAST: Nor'easter cancelled ~400 flights, 68,000+ without power; 1 dead in New York City.
SRI LANKA: Public-sector unions (40+ unions cited in recent action) protested high taxes, electricity tariffs, cost of living, and delayed local elections; security raised at Fort Railway Station and Ceylon Petroleum Corporation. Some actions fell on 26 Sep rather than strictly today.
COLOMBIA: Post-election transition tension between outgoing Petro and president-elect Abelardo de la Espriella remains political, not a new kinetic event today.
SPAIN / MADRID AND NATIONAL: Thousands marched over the eviction of 87-year-old Maricarmen Abascal after police forced her door; housing-crisis protests. Separate recent Madrid marches over the Ceuta migrant crisis. Scale: thousands. No mass-casualty police action reported in the last 24 hours.
UNITED STATES: Anti-ICE and anti-Iran-war actions continued in prior days (Broadview, IL; Lansing, MI; student walkouts in Texas). No confirmed nationwide riot in the last 24 hours.
SOUTH AFRICA / GAUTENG AND WESTERN CAPE: Tavern shooting in Carletonville killed 17, wounded 15 (26 Sep); store shooting in Lwandle, Cape Town, killed 10, wounded 11 (27 Sep).
SERBIA: President Aleksandar Vucic said he would formally submit resignation ~2000 local 27 Sep, triggering early presidential (and likely parliamentary) elections.
SWITZERLAND: Voters rejected a stricter neutrality initiative that would have barred sanctions and NATO cooperation.
SUDAN: Sowdari recaptured; civilian market and IDP-center drone strikes.
PAKISTAN / DERA ISMAIL KHAN: TTP-claimed suicide VBIED (tractor-trolley) on police-customs checkpoint at Aman Mela, Darazinda; 11-13 killed, ~30 wounded.
YEMEN / TAIZ: Saudi airstrike on a market in Taiz killed 7 and wounded ~40 (27 Sep, Houthi-run media / subsequent wires).