After a call with President Vladimir Putin, Trump announced on Friday, Oct 9, that Russia would “immediately” release diesel onto global markets, laying out shipments of more than 300,000 tons right away, 500,000 tons in November, 1 million tons after that and 3 million tons depending on the condition of Russian refineries (NBC News, The Tribune citing ANI). Treasury's Office of Foreign Assets Control issued a temporary general license the same day authorizing the sale, delivery, offloading and importation of Russian-origin diesel through 12:01 a.m. EDT on April 7, 2027, while excluding debits to accounts of Russia's central bank, National Wealth Fund and Finance Ministry (The Tribune citing ANI, NBC News). President Volodymyr Zelenskyy called the move “an obvious weakness” and said “gifts to Putin will not bring peace,” and on Saturday, outside the White House before leaving for a rally in Clarksville, Tenn., Trump said “it's time for Ukraine to get a new president” and recalled telling Kyiv, “you can do whatever you want to Russia, don't hit the refineries” (NBC News, UPI, Fox News). Early that day, five Russian glide bombs hit residential buildings in Zaporizhzhia, killing 20, including three children (Al Jazeera). German government spokesman Stefan Kornelius said on Oct 10 that Berlin “remains committed to the decisions on sanctions against Russia and is working with its European partners on further sanctions” (Reuters), and EU foreign policy chief Kaja Kallas said “this is not the time to ease pressure on Russia” (Al Jazeera).

• Indicators to watch · Ukrainian General Staff claims of refinery strikes; the first Russian diesel cargoes under the license and where they go; the EU's 20th sanctions package; follow-up U.S.-Ukraine-Europe talks; further Trump remarks on Zelenskyy

• B2Yields stay high as sentiment slips; banks report next weekOur collected 10-year yield is 5.244% (+1bp) and the VIX 14.84 (−3.70%). Yahoo Finance said Friday's consumer sentiment reading hit a five-month low, and the big Wall Street banks start reporting third-quarter results on Tuesday.
• B1Gold and silver climbGold rose to $4,216.30 (+1.43%) and silver to $61.05 (+2.73%), while bitcoin was at $83,007 (+0.11%).
• B2Bank of Korea weighs a third straight hike on Oct 22The Bank of Korea, which raised its policy rate by 25 basis points in both July and August to 3.00%, decides on Oct 22; Korean media reported September consumer inflation of 2.9% and a 1-point gap with U.S. policy rates after the Fed's September hike (Financial News, SBS Biz).

• C2FBI arrests another suspected ShinyHunters co-conspiratorFBI Director Kash Patel said agents arrested another suspected co-conspirator of the ShinyHunters group, which the bureau believes is responsible for the FBIjobs.gov incident; charges were not disclosed (BleepingComputer).

Watchlist next 12–48 hours and beyond

• Mon, Oct 12
  Our Hormuz strike-count forecast window closes (late UKMTO reports count through Oct 14)
• Tue, Oct 13
  Big Wall Street banks open third-quarter earnings season
• Wed, Oct 14, 8:30 a.m. ET
  September CPI
• Coming days
  Trump's decision on joining strikes on the Houthis; King Khalid airport reopening
• Coming days
  Iran's formal reply to the U.S. proposal; first Russian diesel cargoes under the Treasury license
• Tue–Wed, Oct 27–28
  FOMC meeting

Intelligence gaps · unconfirmed

• Riyadh strike date: Al Jazeera and Fortune (AP) put it on Saturday, Oct 10, while parts of the CBS and HuffPost (AP) articles as we read them say Oct 9; we use Oct 10. Al Jazeera said the Houthi media office claimed to have shut the airport, while CBS said the Houthis had not claimed this strike as of its writing.
• BBC articles on Riyadh, Isaias deaths, Trump and Zelenskyy, and Zaporizhzhia were blocked, as were The Washington Post, CNBC, USNI News, WWL-TV and Cybernews; we confirmed through other outlets or left items out.
• Oct 9 ship strike: the IRGC claimed it hit the Vietnam-flagged LPG carrier NV Sunshine, while UKMTO and Reuters identified the Panama-flagged crude tanker GEM NO.2 in the same waters; we could not confirm whether these are the same incident.
• IRGC's Oct 10 supertanker mine claim: no ship name, flag or casualty figures were given, and neither UKMTO nor an owner has confirmed it.
• Hormuz strike count (forecast hormuz-3-ship-strikes-oct6-12): we did not open the UKMTO advisories themselves, and Reuters described the GEM NO.2 location as outside the Hormuz area, so whether it counts as “near” the strait is left to scoring.
• CENTCOM's tallies (four vessels disabled, 135 turned around) come via Middle East Eye and The Express Tribune (Anadolu); we did not open CENTCOM's post itself.
• Diesel license: The Tribune (ANI) calls it General License 135 while a Newsquawk headline says 13, so we omit the number. The 4.8 million-ton total is Trump's schedule, not a figure confirmed by Moscow, and outlets differ on whether the Trump-Putin call was Thursday or Friday. We did not cite outside diesel price figures.
• Isaias: NBC, citing NHC, gives 105 mph at landfall while CBS's article says 90 mph; both describe a Category 2 landfall, and we did not open NHC's landfall statement. AP's article (via WUSF) counted at least two deaths at publication; the at-least-four figure comes from CBS, ABC and CNN headlines. Chevron's statement that its Pascagoula refinery stayed operational reached us only in search results, so we left it out.
• SonicWall: SonicWall had not confirmed exploitation in the material we reviewed; reports rely on Previdian's telemetry. Our KEV check covered the catalog's most recent entries, not a full search.
• Outside index values from Yahoo Finance differ from our collected values by a few hundredths; we use collected values only.
• IDCF: encryption figures (225 databases and more) are attacker claims and were not used, and whether data was stolen is under investigation. A WWL-TV report on class actions over a New Orleans ID-verification company's breach was blocked and not used.

CENTCOM said a U.S. fighter jet struck the stern of the Panama-flagged cargo ship Ocean Molica, also known as Arika Sun, with a precision munition in the Gulf of Oman on Oct 10 after it left an Iranian port, ignored repeated warnings and tried to head into the Arabian Sea, fully disabling its propulsion without harming the crew (Middle East Eye, The Express Tribune citing Anadolu). CENTCOM said it has disabled four commercial vessels and turned around 135 ships since the blockade resumed on July 14. Reuters (via Arab News and Baird Maritime) reported that the fully laden, Panama-flagged supertanker GEM NO.2 was hit by an unknown projectile at about 1000 GMT on Oct 9 while anchored 13 nautical miles west of Al Jazeera in the UAE, sparking a fire that was later put out; UKMTO said authorities were investigating, and Reuters described the location as outside the Hormuz area, a sign the danger zone is widening. The same day, the IRGC claimed it struck an LPG carrier crossing the strait by an “illegal” southern route and said enforcement would no longer be limited to the Strait of Hormuz, with ships on unauthorized routes to be “punished” anywhere in the region (The New Arab). On Oct 10 the IRGC also claimed that a supertanker of about 2 million barrels that had switched off its navigation systems hit a mine and exploded while leaving the strait by an unauthorized route; it did not name the ship or its flag, and there was no independent confirmation (Anadolu, Middle East Eye).

• Indicators to watch · Locations in UKMTO advisories, especially the Gulf of Oman and Fujairah anchorage; further CENTCOM blockade enforcement; IRGC statements; Iran's formal reply to the U.S. proposal; strait transit counts and war-risk premiums

SonicWall patched CVE-2026-102255, a pre-authentication server-side request forgery flaw rated CVSS 10.0 in the WorkPlace interface of SMA1000 6210, 7210 and 8200v remote-access appliances, on Tuesday, Oct 6; it does not affect the SMA 100 series or SSL-VPN on SonicWall firewalls (BleepingComputer, SecurityOnline). Researcher Ryan Dewhurst of Previdian observed exploitation attempts by Friday, Oct 9, using crafted OPTIONS requests aimed at the appliance's internal CouchDB service with default admin credentials, and Shadowserver tracks more than 400 SMA1000 appliances exposed online (BleepingComputer). SecurityOnline said there is no workaround and the hotfixes must be applied. Separately, Citrix on Oct 9 urged customers to upgrade NetScaler ADC and Gateway 14.1 and 13.1 builds to fix CVE-2026-107406, a memory overflow that can allow remote code execution or denial of service; Citrix said it was not aware of exploitation, and Shadowserver tracks about 21,000 internet-exposed NetScaler appliances (BleepingComputer). CVE-2026-102255 did not appear among the most recent entries in CISA's Known Exploited Vulnerabilities catalog when we checked.

• Indicators to watch · SonicWall advisory updates confirming exploitation; CISA KEV additions; ransomware groups targeting SMA1000 and NetScaler; any Citrix exploitation reports; Shadowserver exposure counts

• B2Riyadh flights halted after the airport strikeCBS reported that King Khalid airport operations were suspended through midnight with entrances blocked, 291 flights canceled in 24 hours and multiple airlines suspending Riyadh service.

U.S. Impact Assessment

• Force protection and the defense industrial baseA U.S. citizen was among the dead in Riyadh, and the U.S., British, Irish and Canadian embassies issued travel advisories (Al Jazeera). If Washington joins strikes in Yemen, Houthi retaliation could widen to U.S. personnel, contractors and shipping, and Saudi Arabia's request for more air defense help as U.S. interceptor stocks shrink points to more pressure on missile-defense production lines. Companies with staff in Saudi Arabia should review Riyadh and Abha travel and confirm alternate air routes.
• Shipping and sanctions complianceStrikes have now reached anchored tankers off the UAE and the IRGC says its enforcement zone has no fixed edge, which raises war-risk costs for any U.S. cargo moving through Gulf ports. The Russian diesel license opens a U.S. lane that EU and U.K. rules still close, so traders, insurers and banks with European exposure should confirm which regime governs each transaction and keep the license's carve-outs for Russian state accounts in view.
• Gulf Coast fuel and powerIsaias knocked out power to hundreds of thousands across the Florida Panhandle, Alabama and Georgia and briefly took more than 70% of Gulf oil output offline. Fleets, airlines and utilities in the Southeast should watch how fast platforms restart and local terminals resume deliveries over the next week.
• Cyber: edge devices and cloud concentrationThe SonicWall SMA1000 flaw was under attack within three days of its patch, and remote-access gateways like it and Citrix NetScaler are prime entry points for ransomware crews. U.S. organizations should patch both now and review access logs, and the IDCF case is a reminder to keep backups and recovery plans that do not depend on a single cloud provider.

Sources 33

• A
  Al JazeeraSaudi Arabia says 12 killed, 300 wounded in Houthi attack on Riyadh airport
  B
• C
  CBS NewsAt least 12 people killed, more than 300 injured in strike on Riyadh airport, Saudi officials say
  B
• F
  Fortune (AP)Trump says he's evaluating whether the U.S. should join Saudi Arabia's fight against Iran-backed Houthi rebels in Yemen after fresh attacks on Riyadh
  B
• H
  HuffPost (AP)12 Killed And Over 300 Hurt In Latest Attack On Riyadh Airport, Saudi Authorities Say
  B
• T
  The Express Tribune (Anadolu)US military says it disabled vessel attempting to violate blockade
  B
• M
  Middle East EyeCentcom says cargo vessel trying to run Iran blockade disabled
  C
• A
  Arab News Pakistan (Reuters)Oil tanker struck by projectile off UAE coast amid surge in attacks
  B
• B
  Baird Maritime (Reuters)Danger zone widens as unknown projectile strikes vessel off UAE
  C
• T
  The New ArabIRGC say struck tanker transiting Hormuz via 'illegal route'
  C
• A
  Anadolu AgencySupertanker explodes after striking mine in Strait of Hormuz, Iran's Revolutionary Guards say
  B
• M
  Middle East EyeIRGC says oil supertanker hit mine in Strait of Hormuz
  C
• N
  NBC NewsTrump eases Russia sanctions, says Putin will release diesel amid massive price spikes
  B
• T
  The Tribune (ANI)US Treasury's OFAC issues licence permitting Russian-origin diesel fuel imports until April 7, 2027
  B
• U
  UPICriticized on Russia diesel deal, Trump says Ukraine needs new leader
  B
• F
  Fox NewsTrump calls for Ukraine to replace Zelenskyy after clash over Russia diesel deal: 'Get a new president'
  B
• G
  Global Banking & Finance Review (Reuters)Germany Sticks to Russia Sanctions After Trump Announcement on Diesel
  C
• A
  Al JazeeraRussia kills 20 in Ukraine as US hosts 'productive' talks to end war
  B
• N
  NBC NewsIsaias weakens to a post-tropical cyclone after making landfall near Destin, Florida
  B
• W
  WUSF (AP)Hundreds of thousands are without power after Isaias slams the Florida Panhandle and Alabama
  B
• C
  CBS NewsHurricane Isaias makes landfall on Gulf Coast. See maps, forecast path.
  B
• T
  The Korea Herald (Yonhap)N. Korea marks party anniversary on modest scale
  B
• N
  NewspimNorth Korea marks party's 81st anniversary quietly, with a performance and no parade or Kim speech (translated)
  C
• N
  NewspimNIS: claim that U.S. provides only North Korean missile intelligence is completely untrue (translated)
  C
• H
  Herald Business (Yonhap)NIS says U.S.-provided North Korea intelligence has not declined, cooperation continues across fields (translated)
  B
• F
  Financial NewsU.S. rates jump and inflation nears 3%: Bank of Korea at a crossroads between a third straight hike and an October hold (translated)
  B
• S
  SBS BizWhat next for the October base rate? Governor Shin flags price pressures (translated)
  B
• N
  NewspimSamsung Electronics third-quarter operating profit tops 100 trillion won at 107.4 trillion (translated)
  C
• B
  BleepingComputerMax severity SonicWall SMA1000 flaw now exploited in attacks
  C
• S
  SecurityOnlineSonicWall SMA1000 Vulnerability Exploited in the Wild
  C
• B
  BleepingComputerCitrix warns admins to patch new NetScaler RCE flaw immediately
  C
• B
  BleepingComputerRansomware attack disrupts Japan's IDCF Cloud used by govt clients
  C
• I
  ITmedia NEWSRansomware attack on IDCF Cloud affects 495 companies and municipalities; some told restoration is difficult (translated)
  C
• B
  BleepingComputerFBI arrests another suspected ShinyHunters hacker after agency breach
  C

Saudi Arabia's General Authority of Civil Aviation said a missile hit the complex housing domestic Terminals 3 and 4 at King Khalid International Airport in Riyadh on Saturday, Oct 10, killing at least 12 people and injuring 309, some critically (Al Jazeera, CBS News, AP). The dead were four Saudis, two Bangladeshis and one each from the U.S., Egypt, Jordan, Syria, the Palestinian territories and Sudan. Saudi-led coalition spokesman Maj. Gen. Turki al-Maliki called it a “terrorist attack” and a “full-fledged war crime” and said the coalition would “respond decisively” (Al Jazeera), and AP reported that the coalition blamed the Houthis. Al Jazeera said the Houthi media office claimed to have “shut down Riyadh international airport,” while CBS reported that the Houthis had not claimed this strike as of its writing. Airport operations were suspended again, and CBS said 291 flights were canceled in the past 24 hours. Asked whether the U.S. would get involved, Trump said, “We may. We're going to look at it… So we'll make a decision. We move very quickly,” and Secretary of State Marco Rubio condemned the attacks (Fortune and HuffPost, citing AP). AP reported that the U.S. has already provided intelligence, target identification and planning support for the Saudi-led offensive against the Houthis launched last week. This attack meets the “yes” condition of our Oct 8 forecast (houthi-hit-saudi-airport-energy-oct21).

• Indicators to watch · A White House or CENTCOM announcement on joining strikes; the scope of coalition strikes in Yemen; any Houthi return to attacks on Red Sea and Gulf of Aden shipping; King Khalid airport reopening and how long foreign carriers stay out; State Department travel guidance

Hurricane Isaias made landfall near Destin, Fla., at about 8:30 p.m. CDT (9:30 p.m. ET) on Friday, Oct 9, as a Category 2 storm with 105 mph sustained winds, NBC News reported citing the National Hurricane Center, and NHC said it had weakened to a post-tropical cyclone with 65 mph winds by 2 a.m. ET Saturday. NBC said about 668,000 customers in Alabama, Florida and Georgia had lost power by late Friday, and AP reported downed trees and power lines, damaged roofs, flooded roads from Pensacola to Destin and southern Alabama, and a death in Escambia County, Fla., where a tree fell on a home (WUSF). Later CBS, ABC and CNN headlines put the death toll at at least four. Before landfall, the Marine Minerals Administration said more than 70% of daily Gulf of Mexico oil production and nearly 60% of gas output were shut in, with personnel evacuated from 129 of 371 production platforms and 8 of 11 offshore rigs (NBC). CBS noted Isaias was the season's first hurricane, the latest first hurricane since 1905. The Category 2 landfall resolves our Oct 8 forecast (isaias-cat2-landfall-oct12) as yes; we had rated it unlikely.

• Indicators to watch · Marine Minerals Administration shut-in updates; platform re-manning and any damage reports; power restoration across the Florida Panhandle and Alabama; Southeast diesel and jet fuel supply; flash flooding as the remnants move inland

• B2Germany and the EU hold the line on Russia sanctionsBerlin said on Oct 10 it remains committed to sanctions on Russia and is working with European partners on more (Reuters), and EU foreign policy chief Kaja Kallas said this is not the time to ease pressure on Moscow (Al Jazeera).
• B2U.S. backs the Saudi offensive with intelligence as Riyadh seeks more air defenseAP reported that the U.S. is providing intelligence, target identification and planning support for the Saudi-led offensive against the Houthis, and that Saudi Arabia has asked several countries for more air defense help as U.S. interceptor stocks have shrunk during the Iran war (Fortune).

• B1Seoul denies reports that Washington now shares only missile intelligenceSouth Korea's National Intelligence Service said on Oct 11 that reports the U.S. now shares only North Korean missile information are “completely untrue” and that overall U.S. intelligence sharing has not declined, and the Defense Ministry said there are no limits on sharing needed for military readiness; the U.S. has reportedly restricted some nuclear-related sharing since March (Newspim, Herald Business citing Yonhap).
• C2Samsung posts a record preliminary third-quarter operating profitSamsung Electronics reported preliminary third-quarter revenue of 195 trillion won and operating profit of 107.4 trillion won on Oct 8, the first time a Korean company has topped 100 trillion won in quarterly operating profit (Newspim).

Edition archiveRSS

• Saturday, Oct 10 · Evening Edition · 03:09 ET · CurrentA missile strike on Riyadh's airport kills 12, including an American, as Trump weighs joining strikes on the Houthis, while U.S. forces disable a blockade runner in the Gulf of Oman and Iran's Revolutionary Guards threaten ships beyond Hormuz
• Thursday, Oct 8 · Evening Edition · 17:37 ETTrump rules out striking Iran before the midterms, but a delayed report of another Hormuz tanker strike, Houthi missiles over Riyadh and Hurricane Isaias shutting in about 63% of Gulf of Mexico oil output keep Brent up 3.71% at $103.92
• Thursday, Oct 8 · Morning Edition · 05:41 ETThe Houthis claim a missile strike on Riyadh's main airport as explosions are heard across the Saudi capital, a report that the White House sought pre-midterm Iran strike options helps push Brent up nearly 4%, and Isaias becomes the season's first hurricane on its way to the Gulf Coast
• Wednesday, Oct 7 · Evening Edition · 17:43 ETA tanker is hit with casualties deep inside the Gulf, Houthi strikes on two Saudi airports kill three, and the 10-year Treasury yield touches its highest since 2002 as Fed minutes point to another hike
• Wednesday, Oct 7 · Morning Edition · 05:39 ETA Russian missile and drone barrage kills at least 12 across Ukraine as North Korea expands a launch-prep site near Wonsan and Hormuz tanker captains command up to $100,000 a month
• Tuesday, Oct 6 · Evening Edition · 17:49 ETA Hormuz strike leaves 12 tanker crew injured and drones sink a ship inside NATO member Bulgaria's economic zone, while North Korea threatens an “immediate” response at the border
• Tuesday, Oct 6 · Morning Edition · 05:43 ETThe Houthis claim strikes on Riyadh's main airport and a Saudi Red Sea refinery as Hormuz attacks keep coming and the U.S. blockade bottles up Iran's tankers
• Monday, Oct 5 · Evening Edition · 17:40 ETStrikes on Hormuz shipping continued Monday as Iran's president called talks with Washington “meaningless” and Trump tied the Fairford bomber pullout to Iran-linked threats
• Monday, Oct 5 · Morning Edition · 05:40 ETIran's strikes on Hormuz shipping pick back up as Gulf oil exports recover, and the U.S. pulls its bombers out of RAF Fairford
• Sunday, Oct 4 · Evening Edition · 17:38 ETYemen's government launches an offensive against the Houthis as a tanker reports explosions near Bab el-Mandeb and Hormuz stays shut
• Sunday, Oct 4 · Morning Edition · 10:06 ETTwo more tankers are hit near Hormuz as Iran refuses to reopen the strait until its seven conditions are met
• Saturday, Oct 3 · Evening Edition · 23:55 ETHouthis claim a strike on Aramco's Riyadh refinery as the Pentagon Pizza Index holds at DOUGHCON 2 overnight