Southern Company said an unauthorized outside party accessed limited information through its online customer portal, affecting about 400,000 accounts across its utilities: roughly 300,000 at Georgia Power and about 100,000 at Alabama Power (WALB, AL.com). The data included names, addresses, phone numbers, email addresses, basic account information and, for some customers, the last four digits of Social Security numbers; bank account, payment card and driver's license numbers were not accessed, AL.com reported. A recorded customer line says the breach happened in September. The company said it stopped the activity on detection, engaged law enforcement, found no evidence of ongoing unauthorized access and is offering affected customers a year of free credit monitoring and identity restoration.

• Indicators to watch · Formal breach notices to state attorneys general, any disclosure of how the portal was accessed, phishing campaigns impersonating Georgia Power or Alabama Power, regulator inquiries

• B2Iran's oil minister quits as the rial hits a record lowMohsen Paknejad resigned and National Iranian Oil Company chief Hamid Bovard became acting minister. Treasury Secretary Scott Bessent says Iran loaded no crude in September, and the rial fell to a record 270,000 tomans per dollar.
• B2Houthis claim a counteroffensiveThe Houthis deny losing ground at Bab el-Mandeb and say they took Turbah and are pushing toward Taiz, Yemen's third-largest city. The U.N. counts 184,000 people displaced since the war resumed.

• B2Hormuz shuttle runs cost $30–40 million eachHerald Business, citing The Wall Street Journal, reports that Gulf producers load crude inside the strait and transfer it to ships outside at $30–40 million per run, or $15–20 a barrel extra. Crews earn bonuses of up to $25,000 per round trip.
• C2Boeing gets up to $14.7 billion for PAC-3 MSE seekersLockheed Martin awarded Boeing a seven-year undefinitized contract to triple seeker production in Huntsville under an April framework with the Pentagon. Seekers have been a bottleneck as the U.S. refills interceptor stocks drawn down in Ukraine and the Middle East.

Watchlist next 12–48 hours and beyond

• Daily
  UKMTO advisories for Hormuz, the Red Sea and the Gulf of Aden; fighting around Bab el-Mandeb
• Wed, Oct 7
  CISA deadline for federal agencies to remediate NetScaler CVE-2026-88779
• Wed, Oct 7, 2 p.m. ET
  Minutes of the September FOMC meeting and the Treasury market's reaction
• Thu, Oct 8
  Samsung Electronics preliminary Q3 results as a read on AI memory demand
• Sat, Oct 10
  North Korea's Party anniversary: events, a parade or further missile launches
• Tue–Wed, Oct 27–28
  FOMC rate decision

Intelligence gaps · unconfirmed

• Hormuz tallies differ: Al-Monitor, citing UKMTO, counts at least 12 tankers attacked over the past week; Eurasia Group says 11 since last Wednesday; Gulf News called the Oct 5 strike the fourth UKMTO incident report in 24 hours. Most ship names and the attackers in each case have not been officially confirmed.
• The gas carrier in the Oct 5 delayed report is described as an LNG tanker by Newsquawk and as an LPG tanker in Fox News live coverage; its name, flag and damage have not been disclosed.
• Herald Business, citing The Wall Street Journal, reports nine ships attacked near Hormuz in two weeks, with one seafarer killed and two injured; this could not be independently confirmed. Tanker rate figures also differ: about $1.2 million a day for a China-bound VLCC (Herald Business) versus $1.3 million a day, roughly 43 times January levels (Gulf News).
• Prewar export baselines vary by source: about 18 million b/d (NBC, Kpler) versus about 19 million b/d (The Wall Street Journal, cited last edition); Euronews puts late-September non-Iranian exports at 19.5–22.5 million b/d.
• Yemen: the government's claim to have secured Bab el-Mandeb and the Houthi denial are flatly at odds, and Al Jazeera says it cannot verify battlefield reports. Control of Perim Island and any Saudi or Aramco account of the Houthi-claimed strikes on Aramco sites remain unconfirmed.
• Fairford: ITV reported U.S. concern about a multiple-drone attack, but the article could not be opened, and Trump declined to say whether drones were involved. Accounts still differ on whether the five men arrested Sept 27 were released on bail (AFP) or without charge (Al Jazeera).
• Reuters dates the G7 reserve agreement to Friday, Oct 2, while Al Jazeera dates it to Oct 3; per-country release volumes have not been disclosed.
• Market expectations for Aramco's November prices differ: a Bloomberg survey expected a $5 increase, a Reuters survey a $3 increase.
• Reports differ on the date CISA added the NetScaler flaw to its Known Exploited Vulnerabilities catalog (the Oct 7 deadline is consistent). BleepingComputer describes payload-download attempts suggesting possible code execution, while Citrix describes only a denial-of-service impact.
• The Black Sea attack location differs: about 30 nautical miles south of Sfantu Gheorghe (AP) versus about 20 nautical miles off the Romanian coast (The Kyiv Independent).
• Market data: the WTI settlement reported by investingLive ($89.43, -1.84%) differs from this edition's collected quote ($89.30, -1.99%) because of timing, and some outlets cited intraday Brent above $102. This edition uses collected values only.
• North Korea has not explained how AI is used in the missile, and its evasion claims are unverified. The company whose access was abused in the Danish CPR breach and the attackers remain unnamed. Southern Company has not said how the portal was accessed or who was behind it.
• Pages from BBC (Fairford, Yemen, Black Sea), CNBC, The Wall Street Journal, ITV, TheStreet, WSB-TV and Saudi Gazette were blocked; facts were confirmed through other outlets or not used.

Meeting Armenian Foreign Minister Ararat Mirzoyan in Tehran on Oct 5, President Masoud Pezeshkian said “negotiations have no meaning with an enemy that resorts to assassination, sanctions, pressure and threats every day” and breaks its commitments (Tehran Times, Gulf News). Brig. Gen. Aziz Jafari said “all movements” in Hormuz are under the armed forces' control; Foreign Minister Abbas Araghchi said the strait could reopen “within seven days” if Iran's conditions are met, and Parliament Speaker Mohammad Bagher Ghalibaf repeated that it stays shut until seven conditions are satisfied (Euronews). Asked about the Fairford withdrawal on Oct 5, Trump said “there were some threats” and “we actually know the people that made the threat... They would be linked to Iran”; asked whether attack drones were involved, he said, “I can't tell you that but if they did they'll suffer greatly” (AFP). Downing Street said the base is safe, and Iran denies any role (AFP, Al Jazeera).

• Indicators to watch · Iran's final reply to the U.S. views on its seven-day plan, Qatari and other mediator statements, further U.S. measures against Iran, force-protection changes at U.S. bases in Britain

Yemen's armed forces said on Oct 5 that the Nation's Shield Forces, Giants Brigades and Tihama Resistance, with Saudi-led air support, retook the Red Sea port of Mokha, which the Houthis seized in early September (Reuters; Dawn, citing the state news agency SABA). Government forces say they took most of the Dhubab district overlooking the Bab el-Mandeb Strait, including Dhubab airport, and cut the road to Mokha; coalition spokesman Maj. Gen. Turki al-Maliki said 100 fighter jets were providing round-the-clock support, had destroyed 324 “high-value” targets and had secured “air protection” of the strait (The National, Al Jazeera). The Houthis called the government's claims “completely untrue,” threatened to attack aircraft in Saudi airspace and said they had captured Turbah and were advancing on Taiz (ABC News Australia). Al Jazeera said it could not independently verify the battlefield reports.

• Indicators to watch · UKMTO Red Sea and Gulf of Aden advisories, who actually controls Dhubab and Perim Island, Houthi claims of strikes on Saudi Arabia and Saudi responses, carrier routing decisions

• B2EU and Germany condemn the launchEU foreign-policy spokesperson Christian Wigand said the program violates multiple U.N. Security Council resolutions and urged a return to dialogue; Germany's Foreign Office also condemned the test.
• B2Three U.S. surveillance aircraft were over the East Sea at launch timeVOA Korean reports an RC-135S Cobra Ball entered the area at 05:26 on Oct 3 and was overhead at the 06:30 launch, with an MQ-9B SeaGuardian and an ARES signals aircraft operating since the night before.
• —Taiwan Strait: no new activity confirmedNo new military activity or coast guard confrontation in the Taiwan Strait was confirmed within this collection window.

Edition archiveRSS

• Thursday, Oct 8 · Evening Edition · 17:37 ETTrump rules out striking Iran before the midterms, but a delayed report of another Hormuz tanker strike, Houthi missiles over Riyadh and Hurricane Isaias shutting in about 63% of Gulf of Mexico oil output keep Brent up 3.71% at $103.92
• Thursday, Oct 8 · Morning Edition · 05:41 ETThe Houthis claim a missile strike on Riyadh's main airport as explosions are heard across the Saudi capital, a report that the White House sought pre-midterm Iran strike options helps push Brent up nearly 4%, and Isaias becomes the season's first hurricane on its way to the Gulf Coast
• Wednesday, Oct 7 · Evening Edition · 17:43 ETA tanker is hit with casualties deep inside the Gulf, Houthi strikes on two Saudi airports kill three, and the 10-year Treasury yield touches its highest since 2002 as Fed minutes point to another hike
• Wednesday, Oct 7 · Morning Edition · 05:39 ETA Russian missile and drone barrage kills at least 12 across Ukraine as North Korea expands a launch-prep site near Wonsan and Hormuz tanker captains command up to $100,000 a month
• Tuesday, Oct 6 · Evening Edition · 17:49 ETA Hormuz strike leaves 12 tanker crew injured and drones sink a ship inside NATO member Bulgaria's economic zone, while North Korea threatens an “immediate” response at the border
• Tuesday, Oct 6 · Morning Edition · 05:43 ETThe Houthis claim strikes on Riyadh's main airport and a Saudi Red Sea refinery as Hormuz attacks keep coming and the U.S. blockade bottles up Iran's tankers
• Monday, Oct 5 · Evening Edition · 17:40 ET · CurrentStrikes on Hormuz shipping continued Monday as Iran's president called talks with Washington “meaningless” and Trump tied the Fairford bomber pullout to Iran-linked threats
• Monday, Oct 5 · Morning Edition · 05:40 ETIran's strikes on Hormuz shipping pick back up as Gulf oil exports recover, and the U.S. pulls its bombers out of RAF Fairford
• Sunday, Oct 4 · Evening Edition · 17:38 ETYemen's government launches an offensive against the Houthis as a tanker reports explosions near Bab el-Mandeb and Hormuz stays shut
• Sunday, Oct 4 · Morning Edition · 10:06 ETTwo more tankers are hit near Hormuz as Iran refuses to reopen the strait until its seven conditions are met
• Saturday, Oct 3 · Evening Edition · 23:55 ETHouthis claim a strike on Aramco's Riyadh refinery as the Pentagon Pizza Index holds at DOUGHCON 2 overnight

A tanker off the Musandam Peninsula in the Strait of Hormuz was hit by an unknown projectile at about 16:37 UTC on Oct 5, starting an engine-room fire the crew was still fighting when the report was filed; no injuries were reported (The Maritime Executive, citing UKMTO). Gulf News said it was the fourth UKMTO incident report within 24 hours. The same day, UKMTO received a delayed report that an inbound LNG carrier had been struck in the strait, damaging its engine room (Newsquawk), and the IRGC hailed a tanker 11 nautical miles north of Khasab, Oman, and told it to turn back or be targeted; the ship complied (Reuters). Al-Monitor, citing UKMTO reports, counts at least 12 tankers attacked over the past week, and Eurasia Group analyst Gregory Brew put the tally at 11 since last Wednesday. Even so, Middle East crude exports averaged 18.3 million barrels a day over the seven days to Sept 30, above the roughly 18 million b/d prewar level, according to Kpler data cited by NBC News.

• Indicators to watch · UKMTO Hormuz advisories (including delayed reports), frequency of IRGC turn-back orders, strikes on LNG and LPG carriers, whether Gulf producers keep running shuttle convoys, war-risk premiums

Brent fell to $100.32 (-1.89%) and WTI to $89.30 (-1.99%). Reuters reported that the G7 agreed to release 100 million barrels of crude and diesel from emergency reserves and to refrain from energy export restrictions, and that Middle East crude exports topped prewar levels on four of the last seven days of September; the release runs through the International Energy Agency over four months, with a large diesel release in the first 20 days (Al Jazeera). The ISM services PMI eased to 54.9 in September from 55.4, but its prices index rose to 74.0, the highest since July 2022, and respondents cited fuel costs twice as often as any other single issue (ISM, Reuters). The 10-year yield rose to 5.311% (+3bp), while the Nasdaq closed at a record 27,477.31 (+1.05%). Reuters noted the Fed raised rates to 3.75%–4.00% last month and that markets price about a 26% chance of another hike in October.

• Indicators to watch · September FOMC minutes on Wed, Oct 7, the 10-year yield, Fed speakers, diesel prices as the G7 release begins

• B2Trump blames refineries, not Hormuz, for gasoline pricesOn Truth Social, Trump said Hormuz is no longer what is driving gasoline prices, pointing instead to Ukrainian strikes on Russian refineries and refinery closures in Democratic-run states. AAA's national average stood at $4.36 a gallon, up from $4.14 a month ago.
• B1Saudi Arabia cuts Asia prices, raises Europe, holds the U.S.Aramco cut November Arab Light to Asia by $3 to a $5 discount, the widest since June 2020, and lowered Arab Medium and Heavy by $5. Prices for Europe rose $3 and U.S. prices were left unchanged.

• B2Denmark CPR breach: company and attackers still unnamedDigitalisation Minister Christina Egelund called it “a deeply serious incident,” ordered a full security review and urged residents to watch for suspicious messages. Police say it is too early to say who was behind it.

U.S. Impact Assessment

• Energy and shippingA lower Brent price and the G7 release ease near-term pressure, but strikes on Hormuz traffic continued Oct 5, including a delayed report of a gas carrier being hit, and Gulf producers are paying $30–40 million per shuttle run to keep crude moving. U.S. refiners, shippers and importers should plan for elevated freight and war-risk costs, with diesel still the tightest product, which is why the G7 front-loaded it.
• Force protection and the defense industrial baseTrump's statement that the Fairford threat came from people linked to Iran puts Iran-related force protection at U.S. bases in Europe squarely on the agenda. On the industrial side, the PAC-3 MSE seeker award shows the Pentagon trying to break a known production bottleneck as it rebuilds interceptor stocks, which matters for suppliers across the Patriot supply chain.
• CyberThe Southern Company intrusion came through a customer-facing portal, and the NetScaler zero-day targets the SAML authentication layer many enterprises rely on. Federal agencies must remediate NetScaler by Oct 7, and private operators running NetScaler as a SAML provider should patch now; utilities and other firms with large customer portals should review login anomaly detection and prepare for phishing that reuses exposed account data.
• MarketsA services prices index at its highest since July 2022 and a 10-year yield of 5.311% keep inflation risk alive even as the Nasdaq sets records and the VIX sits at 15.52. Wednesday's FOMC minutes and any renewed jump in oil after further Hormuz strikes are the main tests for the rally.

Sources 37

• T
  The Maritime ExecutiveUKMTO: Tanker's Engine Room On Fire After Latest Hormuz Attack
  C
• B
  BOE Report (Reuters)Tanker ordered by Iran's IRGC to turn back in Hormuz or risk being hit, UKMTO says
  B
• A
  Al-MonitorHormuz tanker attacks mount, putting oil flows at risk
  C
• N
  NBC NewsMideast oil exports top prewar levels, but ship attacks increase
  B
• H
  Herald Business (Korean-language)'We'll go even if it costs 50 billion won more': Gulf producers can't give up Hormuz crude runs (translated title)
  B
• N
  NewsquawkUKMTO has received a time-delayed report of a warning that an inbound LNG tanker was struck by an unknown projectile in the Strait of Hormuz
  C
• G
  Gulf NewsUS-Iran Tensions Escalate: Iran president says talks with US 'meaningless': state media
  B
• T
  Tehran TimesPezeshkian: Negotiations have no meaning with an enemy that resorts to assassination, and threats
  C
• E
  EuronewsIran insists it controls Hormuz as rial hits record low and exports dry up
  B
• C
  CP24 (AFP)Trump says U.S. moved bombers from U.K. base after 'threats'
  B
• A
  Al JazeeraUS pulls bombers from UK base: Is Iran manoeuvring Trump's war plans?
  B
• T
  The Times of Israel (Reuters)Yemen armed forces retake control of Red Sea port captured last month by Houthis
  B
• T
  The NationalYemen government forces claim Bab Al Mandeb gains as Saudi coalition says 100 jets join Houthi offensive
  B
• A
  ABC News (Australia)Saudi-backed Yemeni forces claim to have taken back control of Bab el-Mandeb Strait from Houthi rebels
  B
• A
  Al JazeeraYemen government forces report recapture of Mocha from Houthis
  B
• D
  DawnYemeni forces recapture Mokha from Houthis: state media
  B
• T
  The Express Tribune (Reuters)Oil slips as Middle East crude exports rise, G7 to release stocks
  B
• A
  Al JazeeraG7 to release 100 million barrels of oil and diesel, will it curb prices?
  B
• i
  investingLiveinvestingLive Americas FX news wrap 5 Oct: Nasdaq close at record as the dollar firms/yields higher
  C
• I
  Institute for Supply Management (ISM)Services PMI® at 54.9%; September 2026 ISM® Services PMI® Report
  A
• T
  The Spokesman-Review (Reuters)US services sector cools in September, price pressures building
  B
• A
  Al JazeeraTrump blames Democrats and Ukraine for soaring US fuel prices, not Iran war
  B
• T
  The NationalSaudi Aramco cuts Asia crude prices to six-year low amid recovery as oil flows rebound
  B
• T
  The Jakarta Post (Reuters)Saudi Arabia unexpectedly cuts oil prices to Asia
  B
• V
  VOA Korean (Korean-language)EU urges North Korea to halt missile development and return to dialogue; Germany condemns launch (translated title)
  B
• V
  VOA Korean (Korean-language)Three U.S. reconnaissance aircraft flew over the East Sea at the time of North Korea's missile launch (translated title)
  B
• S
  Seoul Economic DailySeoul Rejects North Korean Claim That Hypersonic Missile Cannot Be Intercepted
  B
• A
  Arab News (AFP)North Korea's Kim oversaw launch of missile that uses AI
  B
• A
  Aviation WeekNorth Korea Claims 'AI-Enabled' Hypersonic Missile Capability
  C
• A
  AL.com (via Yahoo News)Potential data breach possibly affected as many as 100,000 Alabama Power customers
  C
• W
  WALBGeorgia Power targeted by hackers, company says
  C
• T
  The Hacker NewsNew NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
  C
• B
  BleepingComputerCitrix patches NetScaler SAML zero-day exploited in attacks
  C
• T
  The Irish Times (Bloomberg)Major Denmark breach exposes personal data of 8.8 million people
  B
• B
  Breaking DefenseBoeing nabs potential $14.7 billion PAC-3 seeker contract
  C
• T
  The Kyiv IndependentRussian drones strike cargo ship in Black Sea, kill captain, Zelensky says
  C
• C
  CP24 (AP)Zelenskyy says Russian drones hit a vessel carrying corn in Black Sea, 2 dead
  B