GLOBAL WATCH
FLASHCyber: Binance says the $6.3 billion theft ran through several entry points beyond a compromised employee laptop, has set aside $6.34 billion to cove…FLASHShipping: UKMTO counted more than 30 attacks on vessels around Hormuz in October, the most of any month since the war began, as the IRGC claimed four…FLASHDiplomacy: Trump said the Iran war is “going to get wrapped up soon” as Qatari mediators returned to Tehran with edits to a draft deal; a senior Iran…FLASHIndo-Pacific: Rubio, Cho Hyun and Toshimitsu Motegi reaffirmed North Korea’s complete denuclearization in Atlanta, signed a Trilateral Arctic Pacific…FLASHAllies: Seoul says it is weighing extending its Cheonghae naval unit’s operating area toward Oman and adding patrol aircraft, while ruling out any ro…Brent $113.43 ▲+2.37%WTI $104.12 ▲+2.08%Gold $3,898.90 ▼-3.29%Silver $49.28 ▼-5.93%Dow 51,770.31 ▼-1.09%S&P 500 7,580.07 ▼-1.82%Nasdaq 25,437.00 ▼-2.86%U.S. 10Y yield 4.929% ▼-6bp
ET --:--KST --:--
HELIOS GLOBAL WATCHNORTH AMERICA DESK · OSINT DESK
Saturday, Oct 24 · Evening Edition
Night pass from orbit · ISS time-lapse · NASA Goddard
A new edition has been published — Saturday, Oct 31 · Morning EditionRead it →
FLASHSecurity: DNI Jay Clayton warned Secretary of State Marco Rubio in a memo that Iran's lethal plotting against Americans has reached 'advanced stages'; the State Department has cut staff in Lebanon, the UAE, Qatar and Jordan, and Saudi Arabia remains on ordered departure (NBC News, Al Jazeera).6
  1. Security: DNI Jay Clayton warned Secretary of State Marco Rubio in a memo that Iran's lethal plotting against Americans has reached 'advanced stages'; the State Department has cut staff in Lebanon, the UAE, Qatar and Jordan, and Saudi Arabia remains on ordered departure (NBC News, Al Jazeera).
  2. Energy & shipping: The UAE closed all beaches in Umm Al Quwain after oil from a tanker reached the shore; a maritime risk firm identified the source as the Gem No.2, hit by a projectile on Oct 9, and UKMTO reported two more tankers struck in the Gulf on Oct 20–21 (Reuters, Anadolu, gCaptain).
  3. Ukraine: The Defense Ministry said Starlink and Starshield connections are stable again at speeds above 400 kph after a 10-day cap, and the Kremlin confirmed that talks in Abu Dhabi in the first half of November will be trilateral (NBC News, The Guardian, TASS, Al Jazeera).
  4. Middle East: The Saudi-led coalition said it shot down Houthi ballistic missiles aimed at Riyadh before dawn and at Taif and Yanbu around noon Saturday; Riyadh's King Khalid airport said its domestic and international terminals reopen Sunday (Arab News, Reuters).
  5. Indo-Pacific: Kim Jong Un spent Saturday in Dandong with Wang Huning, who conveyed Xi Jinping's greetings, according to Xinhua; Kim went home the same day without meeting Xi (SBS, AFP, Financial News).
  6. Cyber: Columbia, S.C., confirmed a ransomware attack that knocked several online city services offline, while police, fire, 911 and water systems kept running (WIS, WACH, WLTX).
HToday's assessmentTHREAT HIGH
HIGH
LOWGUARDEDHIGHSEVERE

A U.S. intelligence memo warns Iranian plots against Americans abroad have reached 'advanced stages' as the State Department thins out Gulf embassies, Houthi ballistic missiles fly at Riyadh, Taif and Yanbu, and Ukraine says its Starlink speed caps are gone

Director of National Intelligence Jay Clayton told Secretary of State Marco Rubio in a memo that Iran's lethal plotting against U.S. citizens has reached 'advanced stages,' NBC News and Al Jazeera reported, and the State Department has cut staff in Lebanon, the UAE, Qatar and Jordan on top of an ordered departure from Saudi Arabia. The Saudi-led coalition said it intercepted Houthi ballistic missiles aimed at Riyadh, Taif and Yanbu on Saturday, Riyadh's main airport said it will reopen two terminals Sunday, and the UAE closed every beach in Umm Al Quwain after oil from a tanker washed ashore. Ukraine's Defense Ministry said Starlink and Starshield links are back to pre-restriction speeds, the Kremlin confirmed three-way talks in Abu Dhabi in the first half of November, and Kim Jong Un returned home from a day in Dandong with China's No. 4 official, Wang Huning. Markets were closed for the weekend, so quotes reflect Friday's close: Brent $111.70 (+2.80%), Dow 52,215.16 (-1.23%).

The threat level is set from security news and market reaction only. The Pizza Index is not used.
  • Security newsElevatedA DNI warning of Iranian plots against U.S. personnel and new Gulf embassy drawdowns; Houthi ballistic missiles at Riyadh, Taif and Yanbu; a tanker oil spill on the UAE coast and fresh tanker strikes in the Gulf; Ukrainian strikes on petrochemical plants deep in Russia and restored Starlink speeds; Kim Jong Un's same-day trip to China
  • Market reactionWeekend close: oil sharply higher, stocks lower, metals softBrent $111.70 (+2.80%) · WTI $103.27 (+3.82%) · Gold $4,007.90 (-1.29%) · Silver $53.95 (-1.92%) · Dow 52,215.16 (-1.23%) · S&P 500 7,623.68 (-0.52%) · Nasdaq 25,955.34 (-0.21%) · U.S. 10Y yield 4.988% (+4bp) · VIX 19.45 (+2.21%) · USD/KRW 1,325.40 · Bitcoin $80,231 (-1.05%)
GGeopolitics & securityTop 4B2
GEO-04Houthis fire

Houthis fire ballistic missiles at Riyadh, Taif and Yanbu; Riyadh's main airport says two terminals reopen Sunday

Saudi-led coalition spokesman Brig. Gen. Turki al-Maliki said shortly after 4 a.m. Saturday, Oct 24, that 'air defenses intercepted and destroyed a ballistic missile launched by the terrorist Houthi militia towards Riyadh,' and the coalition said it also downed a drone over the Eastern Province and, around noon, two ballistic missiles fired toward Taif and Yanbu (Arab News, Reuters). Civil Defense alerts for Taif, Yanbu, Makkah and Jeddah were lifted about 10 minutes later (Reuters). Per Reuters, the Houthis claimed Oct 22 attacks on the Saudi defense ministry in Riyadh, Aramco facilities in Yanbu and King Fahd International Airport in Dammam; Saudi authorities confirmed two deaths at Dammam but not the Riyadh and Yanbu strikes, and Aramco evacuated headquarters staff in Dhahran on Oct 23. On Saturday evening, King Khalid International Airport said it would reopen Terminal 1 for domestic flights and Terminal 2 for international flights by national carriers on Sunday, about two weeks after an Oct 10 Houthi missile strike killed 13 people and wounded more than 300, and told passengers to check with their airlines before heading out (Arab News). Semafor reported Oct 20 that the airport had reopened but most scheduled flights were canceled, that a NOTAM requires prior permission for every flight, and that Lufthansa has suspended service until Nov. 18. Gulf News said Etihad has canceled Abu Dhabi–Dammam and Riyadh flights through Nov. 5 and flydubai its Riyadh, Dammam and Abha flights through Oct 29.

Analytic judgmentThe airport has announced Sunday's terminal reopening, but a ballistic missile was fired at Riyadh as recently as early Saturday and foreign carriers are still canceling, so it is likely that King Khalid International Airport resumes scheduled commercial passenger flights by Oct 31, 2026.
Likelihood Likely (55–80%)Confidence Moderate
Scored callDue 2026-10-31 · Resolves yes if, between Oct 16 00:00 and Oct 31 23:59 UTC, Saudi Arabia's General Authority of Civil Aviation (GACA) or the airport operator announces the resumption, including partial resumption, of scheduled commercial passenger flights at King Khalid International Airport, and GACA or the state-run Saudi Press Agency (SPA) states, or Reuters or AP reports, that at least one scheduled passenger flight took off or landed there within that period. Announcements of a resumption schedule alone, and operations limited to military, cargo-only or emergency special flights, do not count. Sources: GACA and SPA announcements, Reuters and AP reporting. Scorecard →
  • Indicators to watch · Whether Saudia, flynas and other national carriers actually operate at Riyadh on Sunday; statements from GACA or the Saudi Press Agency; further Houthi fire at Riyadh and western cities; extensions of Gulf carriers' Saudi cancellations
MMarkets & financeMKT3 items
MKT · EconomyFed meets

B2Fed meets Oct 27–28: 94 of 100 economists in a Reuters poll expect a hold, all 100 a December hike

Reuters polled 100 economists Oct 16–20; 94 expect the Fed to keep its 3.75%–4.00% target range next week and all expect a December increase. At Friday's close, the 10-year Treasury yield was 4.988% (+4bp) and the VIX 19.45 (+2.21%) (Kitco/Reuters).

  • B2Netanyahu says Israel may face banking sanctions and has ordered a blockchain-based fallback planIn a Channel 10 interview days before Israel's Oct. 27 election, Netanyahu said there could be banking sanctions, that Israel must prepare an alternative economic system, and that he had asked for a blockchain plan; he also suggested an end to U.S. military aid is only a matter of time. The head of an Israeli crypto industry group noted that public blockchains are traceable and are 'not a haven for hiding money' (Jerusalem Post, Decrypt).
  • B2Japan begins reviewing the subsidies that hold gasoline near 170 yen a literPrime Minister Takaichi told industry minister Akazawa on Oct 24 to review the program, saying, 'We will consider this matter flexibly, including the amount of subsidies and an exit from the assistance program.' The aid has cost about 1.2 trillion yen since it resumed in March, with 560 billion yen left at the end of September (The Japan Times).
CCyberCYB4 items
CYB · CyberColumbia S.C.

C1Columbia, S.C., confirms ransomware attack; MyColaSC and other online services remain down

City Manager Teresa Wilson confirmed the ransomware attack in a video on Oct 23. MyColaSC, Animal Services, parks reservations and GIS services are offline, while police, fire, 911, Columbia Water and the City Payment Center keep running. The South Carolina Law Enforcement Division is leading the investigation, and the city is still determining whether sensitive data was accessed (WIS, WACH, WLTX).

  • C2Quest Diagnostics says some patient data was likely accessed in its Quanum Lab Services Manager systemQuest paused access to the system doctors use to order tests and view results, said it is working with law enforcement, and said the incident did not involve the recent PHP vulnerabilities. No group had claimed responsibility as of the report (The Record).
  • C2Johns Hopkins Bayview notifies 3,182 patients after a worker uploaded their data to an unapproved AI toolThe hospital said a staff member uploaded a spreadsheet with names, admission dates, medical record numbers, medications and provider names to an outside AI platform on Sept. 21; Social Security numbers and financial details were not included. The hospital asked the AI vendor to delete the data and is offering 12 months of credit monitoring (WMAR).
  • B2Japan's Takaichi calls cyber incidents a 'serious crisis' as LDP proposes a new response headquartersAfter unauthorized-access incidents at multiple Japanese companies, Prime Minister Takaichi pledged action on Oct 23, and the ruling party's cybersecurity strategy panel proposed a response headquarters under the prime minister's office, more awareness among listed-company executives and training for cyber professionals (Bernama/Kyodo).

Intelligence gaps · unconfirmed

  • Price conflict: Some reports and a strait-monitoring site put Brent's Friday settlement at $116–117, while the collected quote is $111.70 (+2.80%); HELIOS could not resolve the gap and used only collected figures.
  • DNI memo: HELIOS did not see the memo itself and relied on NBC News and Al Jazeera; the Oct 23 date comes from press accounts, and Axios and Washington Post coverage could not be opened. NBC lists staff cuts in Lebanon, the UAE, Qatar and Jordan, while Al Jazeera adds Bahrain and Kuwait.
  • Riyadh airport: Semafor reported on Oct 20 that the airport had reopened with most scheduled flights canceled, while Arab News said Oct 24 that it had been closed for about two weeks and would reopen Terminals 1 and 2 on Sunday, so it is unclear whether any scheduled flights operated in between. HELIOS did not find the GACA or Saudi Press Agency statement or confirm who issued the announcement. SBS, citing the Houthi-run Al-Masirah TV, reported coalition airstrikes on Sanaa that killed at least four; Reuters did not report this and it was left out of the main text.
  • Kim Jong Un: SBS quotes lawmaker Youn Kun-young as saying the Li Qiang plan changed, while AFP quotes him as saying Kim was 'understood' to have met Li. SBS and earlier reports said Kim crossed the bridge by special train, but Financial News said he rode the train to Sinuiju and crossed the vehicle-only bridge by car. No KCNA report on the trip was found as of collection.
  • Ukraine: The Omsk strike rests on the governor's statement and monitoring-channel footage; HELIOS found no General Staff confirmation. On who ordered the Starlink cap, there are only Zelenskyy's ('a message from the American government'), Musk's ('owned and controlled by the US government') and NBC's (citing Reuters, the White House) accounts; the White House has not confirmed.
  • Hormuz and the UAE: The Gem No.2 was identified by a private risk firm, not the UAE government, and the 160-square-kilometer slick is a researcher's estimate. The IRGC still has not named or located the two tankers it says hit mines. Cumulative UKMTO incident counts cited by some outlets were not used because HELIOS could not check them against UKMTO's own products. Japan's subsidy review is confirmed by The Japan Times only.
  • Other: CBS's headline says more than 1,000 were arrested in France, while its text and France 24 quote the interior minister's 'nearly 1,000.' WLTX dates the discovery of the Columbia breach to Oct 20 and WIS to Tuesday, Oct 21; HELIOS could not confirm whether Quest restored its system by Friday as promised. The Reuters Fed poll was published Oct 20.
  • Pending grades: 'ukraine-starlink-speed-cap-lifted-nov6' appears to have happened, since Ukraine's Defense Ministry said Oct 24 that links are stable at speeds above 400 kph. 'cisa-kev-velocloud-114625-nov12' appears to have happened, since CISA announced on Oct 23 that it added CVE-2026-114625 to the KEV catalog. For 'cisa-kev-sonicwall-cve-2026-102255-oct25', the only Oct 23 addition was the VeloCloud flaw and no Oct 24 addition was found. For 'ukraine-strike-russian-refinery-oct31', the Oct 24 targets were rubber, petrochemical and electronics plants rather than refineries, and a Moscow Times report on an Oct 15 fire at the Ryazan refinery was not opened.
$Markets
Brent
$111.70
▲ +2.80%
WTI
$103.27
▲ +3.82%
Gold
$4,007.90
▼ -1.29%
Silver
$53.95
▼ -1.92%
Dow
52,215.16
▼ -1.23%
S&P 500
7,623.68
▼ -0.52%
Nasdaq
25,955.34
▼ -0.21%
U.S. 10Y yield
4.988%
▲ +4bp
VIX
19.45
▲ +2.21%
USD/KRW
1,325.40
Bitcoin
$80,231
▼ -1.05%
Collected Sat, Oct 24 17:15 ET · each tile shows its quote time
Green = up, red = down (U.S. convention). Hover a tile for its source.
SSupply chain & energyTop 2B2
SCM-02Tanker oil

Tanker oil spill shuts every beach in Umm Al Quwain as projectile strikes on Gulf tankers continue; Japan starts reviewing its fuel subsidies

The UAE's Ministry of Climate Change and Environment said Oct 23 that 'all beaches and coastal areas in Umm Al Quwain have been temporarily closed until technical teams complete their assessments' after oil from a tanker reached the shoreline, and Sharjah closed Al Hamriyah Beach as a precaution. The ministry said odors reported in Sharjah, Ajman and Umm Al Quwain posed no health risk, imposed fishing restrictions and began cleanup (Anadolu, Arab News/Reuters). The government did not name the vessel, but Martin Kelly, CEO of Orbital Risk Intelligence, identified it as the Gem No.2, which was struck by an unidentified projectile on Oct 9, and a Conflict and Environment Observatory researcher put the slick at about 160 square kilometers (Arab News/Reuters). Gulf News said closures and cleanup were still under way on Oct 24. UKMTO reported that a tanker caught fire after a projectile hit it about 11 nautical miles west of Bukha, Oman, at 0145 UTC on Oct 21, and that another was struck about 30 nautical miles southeast of Al Faw, Iraq, at 1830 UTC on Oct 20 (gCaptain). HELIOS still found no vessel names or independent confirmation for the IRGC's Oct 23 claim that two supertankers hit mines. In Japan, Prime Minister Sanae Takaichi on Oct 24 told industry minister Ryosei Akazawa to review subsidies that have held gasoline near 170 yen a liter (The Japan Times). At Friday's close, Brent was $111.70 (+2.80%) and WTI $103.27 (+3.82%).

Analytic judgmentTankers were still being hit in the Gulf on Oct 20–21 and oil from a ship struck on Oct 9 has now reached the UAE coast, but no merchant ship has been confirmed sunk since Oct 15, so there is a roughly even chance that at least one merchant ship attacked in the Strait of Hormuz, the Persian Gulf or the Gulf of Oman sinks by Nov 15, 2026.
Likelihood Roughly even chance (45–55%)Confidence Low
Scored callDue 2026-11-15 · Resolves yes if, between Oct 15 00:00 and Nov 15 23:59 UTC, the flag state's maritime authority, the International Maritime Organization or UKMTO announces, or Reuters, AP or Bloomberg reports, that a merchant ship (not a warship or government vessel) damaged by a missile, drone, projectile, mine or unexplained explosion in the Strait of Hormuz, the Persian Gulf or the Gulf of Oman has sunk. Ships struck before Oct 15 that sink during the period count. Ships that are only hit, set on fire, grounded or taken under tow without sinking, and ships deliberately scuttled by their crews, do not count. Sources: flag-state maritime authority statements, IMO and UKMTO, Reuters, AP and Bloomberg reporting. Scorecard →
  • Indicators to watch · UKMTO advisories and vessel identities; whether the Gem No.2's leak is stopped or the ship is towed; spread of the slick toward ports and desalination intakes in Sharjah and Ajman; Gulf war-risk premiums; fuel-price relief decisions in Japan and other importers
KKorea & Indo-PacificTop 5B1
KOR-05Kim Jong

Kim Jong Un tours Dandong with Wang Huning, who brings Xi's greetings, then heads home the same day without meeting Xi

Kim Jong Un crossed into Dandong in China's Liaoning province via the New Yalu River Bridge on Saturday, Oct 24, where Wang Huning, chairman of the Chinese People's Political Consultative Conference and the fourth-ranking member of China's leadership, received him and accompanied him to the Memorial Hall of the War to Resist U.S. Aggression and Aid Korea and a local auto factory (SBS, Financial News). Xinhua said Wang conveyed Xi Jinping's 'cordial greetings and best wishes,' called the visit significant for 'consolidating public goodwill towards the friendship (and) deepening political mutual trust and jointly pursuing cooperation and development,' and saw Kim off at the bridge (Dawn/AFP, Taipei Times/AFP). SBS said Kim told his hosts he came 'to pay tribute to the martyrs of the Chinese People's Volunteers' and was 'grateful for China's long-standing support and assistance,' and AFP said Foreign Minister Wang Yi also took part. There was no meeting with Xi, and Kim returned home the same day (Financial News, Dawn/AFP). SBS said an earlier South Korean account that Premier Li Qiang met Kim was walked back by Democratic Party lawmaker Youn Kun-young, who said the plan had changed. The trip came a day before the 76th anniversary of China's entry into the Korean War, and Financial News said Xi is focused on the Oct. 26–29 party plenum. Yang Moo-jin, former president of the University of North Korean Studies in Seoul, said Kim may have pressed Beijing to move faster on earlier commitments and coordinated on possible talks with President Trump (Dawn/AFP).

Analytic judgmentKim saw China's No. 4 official rather than Xi, on a same-day border trip, and HELIOS found no sign of U.S.-North Korea contact during the window, so it is very unlikely that Trump and Kim meet in person by Nov 30, 2026.
Likelihood Very unlikely (05–20%)Confidence Moderate
Scored callDue 2026-11-30 · Resolves yes if, between Oct 13 and Nov 30 23:59 UTC, the White House or North Korea's KCNA announces, or Reuters, AP or Yonhap report, that the two leaders met face to face, including a brief encounter such as at Panmunjom. Exchanges of letters, phone calls, envoy or working-level contacts, and announcements of plans or willingness to meet do not count. Sources: White House and KCNA statements, Reuters, AP and Yonhap reporting. Scorecard →
  • Indicators to watch · KCNA coverage of the trip and Kim's remarks; Oct. 25 anniversary events; the outcome of the Oct. 26–29 plenum; the start of cargo traffic on the New Yalu River Bridge; any signals of U.S.-North Korea contact around the Nov. 18–19 APEC summit in Shenzhen
KKorea & Indo-PacificKOR2 items
KOR · Indo-PacificNorth Korea

B2North Korea says its border loudspeakers will be running in October; no JCS confirmation of broadcasts yet

After Kim Yo Jong said on Oct 21 that loudspeakers along the entire border would be switched on in October, South Korea's military said it had seen maintenance on existing North Korean speakers but no forward deployment of new weapons such as 600mm rocket launchers, and the Defense Ministry said it would consider 'proportional measures' if the North acts (Financial News). HELIOS found no JCS confirmation of actual broadcasts during the window.

  • B2China's Communist Party plenum opens in Beijing Oct. 26–29Financial News said Xi Jinping was focused on the Oct. 26–29 plenum at the time of Kim's Dandong trip. Watch for foreign-policy and economic signals from the meeting and any follow-up China–North Korea exchanges.

U.S. Impact Assessment

  • Energy and fuel pricesBrent ended the week at $111.70 (+2.80%) and WTI at $103.27 (+3.82%) in the collected data. With tankers still being hit in the Gulf, oil washing up on the UAE coast and a fresh U.S. intelligence warning on Iran, refiners, airlines and fleet operators should plan for sharp moves when trading resumes Sunday evening and keep an eye on war-risk premiums. Japan's move toward an exit from fuel subsidies could also shift demand and pricing among Asian importers.
  • Protecting staff in the GulfThe DNI memo, embassy drawdowns across the region and continued Houthi missile fire at Saudi cities point to a higher threat to Americans in the Middle East. Companies with employees in Saudi Arabia, the UAE, Qatar or Jordan should refresh shelter, travel and evacuation plans, and expect flight disruptions to Saudi Arabia to outlast the Riyadh terminal reopening.
  • Reliance on commercial satellite linksThe Starlink episode shows that service on commercial satellite networks used for military and critical operations can change abruptly, and both Kyiv and Musk say the decision came from the U.S. government. Defense contractors and operators that depend on commercial satellite connectivity in contested areas should build in fallback links and contract terms that address government-directed service changes.
  • AI tools and municipal ransomwareThe Johns Hopkins Bayview case shows a data exposure needs no hacker when staff paste records into unapproved AI tools; organizations should enforce approved-tool lists, upload controls and logging. Columbia's outage is a reminder for local governments and their vendors to keep offline fallbacks for resident services and tested restoration plans.

Edition archiveRSS

GGeopolitics & securityTop 1B2
GEO-01DNI memo

DNI memo: Iranian plots to kill Americans abroad at 'advanced stages'; State Department cuts staff at four more Middle East posts

Director of National Intelligence Jay Clayton warned Secretary of State Marco Rubio in a memo that 'the lethal plotting efforts by the Iranians against U.S. citizens have reached advanced stages,' NBC News reported; Al Jazeera said the memo describes Iran as having 'substantially increased efforts to target US personnel.' According to NBC, the State Department has reduced staff in Lebanon, the United Arab Emirates, Qatar and Jordan, while the embassy in Saudi Arabia is on ordered departure with emergency staff only. Al Jazeera said posts in Bahrain and Kuwait have also quietly cut staff, and that the Pentagon has confirmed 21 U.S. service members killed since the war began Feb. 28. President Trump said Friday, Oct 23, that the U.S. 'may do another little Epic Fury,' and NBC said he pointed to nuclear facilities and strategic islands as possible targets. Iranian Foreign Minister Abbas Araghchi said, 'We don't care about U.S. midterm elections. We care about our national interests,' and Al Jazeera reported that Iran had not responded to the memo.

Analytic judgmentThe intelligence warning and the drawdowns show Washington bracing for Iranian action against U.S. personnel, but the president keeps pairing strike talk with an opening for a deal and earlier reporting pointed to restraint before the midterms, so it is unlikely that U.S. forces strike a target on Iranian territory by Nov 3, 2026.
Likelihood Unlikely (20–45%)Confidence Moderate
Scored callDue 2026-11-03 · Resolves yes if, between Oct 8 00:00 and Nov 3 23:59 ET, CENTCOM, the Pentagon or the White House announces, or Reuters or AP reports citing U.S. officials, that U.S. aircraft, missiles or drones struck a target on Iran's mainland or on an Iranian island. Attacks on vessels at sea, interceptions, cyber operations and Israel-only strikes do not count. Sources: CENTCOM statements, Reuters and AP reporting. Scorecard →
  • Indicators to watch · Further embassy drawdowns or travel-advisory upgrades; CENTCOM or Pentagon announcements on Iran; concrete IRGC moves against U.S. bases in the Gulf; any reported incident targeting U.S. diplomats or facilities abroad
GGeopolitics & securityTop 3B1
GEO-03Ukraine says

Ukraine says Starlink and Starshield are back to full speed; Kremlin confirms trilateral Abu Dhabi talks as Kyiv hits synthetic-rubber plants deep in Russia

Ukraine's Defense Ministry said on Telegram on Saturday, Oct 24, that 'connectivity remains stable at speeds exceeding 400 km per hour' (NBC News), and President Zelenskyy said in a video address that 'Starlink and Starshield have resumed operations at their pre-restriction speeds' (The Guardian). The 160 kph cap imposed 10 days earlier had hampered Ukraine's ability to intercept Russian drones and forced it to cancel some strike missions (The Guardian, NBC News). Zelenskyy called it 'a message from [the] American government to limit the speed… And technically, SpaceX did it,' while Elon Musk wrote that Starshield systems are 'owned and controlled by the US government'; NBC, citing Reuters, said the throttling order came from inside the White House. Kremlin spokesman Dmitry Peskov said Oct 23 that the talks 'scheduled for the first half of November in Abu Dhabi will be held in a trilateral format' (TASS, Al Jazeera). On Oct 24, Ukraine's General Staff said it struck the Togliattikauchuk synthetic-rubber plant in Russia's Samara region and the Proton electronics plant in Oryol; Togliatti's mayor said several industrial facilities were damaged with no casualties (Reuters). In Omsk, roughly 2,400 km from Ukraine, the regional governor said 'enemy UAVs have reached the northern industrial hub,' and the Ukrainian outlet Militarnyi reported fires at the Omsky Kauchuk rubber plant and an Ozon logistics center. Oryol's governor said a Ukrainian missile strike killed three people on Oct 23, and the Kyiv Independent counted four killed and 78 injured across Ukraine from Russian attacks over the past day.

Analytic judgmentWith the Kremlin now confirming a trilateral format and timing that match Kyiv's account, but no date or delegations named and an October round having already fallen through, it is likely that official Russian, Ukrainian and U.S. delegations hold an in-person trilateral meeting by Nov 30, 2026.
Likelihood Likely (55–80%)Confidence Moderate
Scored callDue 2026-11-30 · Resolves yes if, between Oct 22 00:00 and Nov 30 23:59 UTC, official delegations of Russia, Ukraine and the United States meet face to face in a single three-way session on ending the war, including technical-level talks, as confirmed by the Kremlin, Ukraine's presidential office, the White House or the State Department, or as reported by Reuters or AP. Separate bilateral meetings, video or phone calls, contacts limited to prisoner exchanges, and announcements of planned talks do not count. Sources: Kremlin, Ukrainian presidential office, White House and State Department statements, Reuters and AP reporting. Scorecard →
  • Indicators to watch · A date and named delegations for Abu Dhabi; the Oleshky truce taking effect early Oct 27; whether Starshield speeds hold; further Ukrainian strikes on Russian refineries and petrochemical plants; the scale of Russian drone and missile raids
GGeopolitics & securityGEO2 items
GEO · SecurityNearly 000

B1Nearly 1,000 arrested as 410,000 march across France, with clashes in Paris, Lyon, Marseille and other cities

Interior Minister Laurent Nuñez said Saturday, 'we are at nearly 1,000 arrests,' and expected the figure to rise; the ministry counted 410,000 people at about 298 protests (organizers claimed about 800,000). Some 70,000 security forces were deployed for marches over the cost of living, fuel prices and public services, and Yellow Vest activists called another protest for Oct. 31 (CBS News, France 24).

  • B2Russian attacks kill four and injure 78 across Ukraine in a day; drone hits a Kyiv apartment buildingThe Kyiv Independent tallied deaths and injuries from Oct 23–24 attacks in Chernihiv, Donetsk, Dnipropetrovsk and other regions; a drone struck a residential building in Kyiv's Obolon district early Saturday, injuring two. Ukraine's Air Force said 101 of 126 Russian drones were shot down or suppressed overnight.
SSupply chain & logisticsSCM3 items
SCM · Supply ChainUKMTO reports

B2UKMTO reports two tankers hit by projectiles in the Gulf on Oct 20–21

A tanker caught fire after a projectile struck it about 11 nautical miles west of Bukha, Oman, at 0145 UTC on Oct 21; the fire was put out and the crew was safe. Another tanker was hit by an unknown projectile about 30 nautical miles southeast of Al Faw, Iraq, at 1830 UTC on Oct 20, with no damage reported. Neither ship was named and no attacker was identified (gCaptain).

  • C2Gulf carriers extend Saudi cancellations; Etihad out through Nov. 5Gulf News said Etihad has canceled Abu Dhabi–Dammam and Riyadh flights through Nov. 5, Emirates has suspended several Dubai–Saudi services, and flydubai has canceled Riyadh, Dammam and Abha flights through Oct 29.
  • B2GM ended its long-term deal with a new South Carolina rare-earth magnet plant; supplier VAC has filed for arbitrationDocuments reviewed by Reuters on Oct 23 show GM terminated its 2023 supply agreement with Germany's Vacuumschmelze on July 1, and VAC's U.S. unit is seeking damages for 'wrongful termination.' GM was slated to take 90% of the roughly 2,000-tonne-a-year plant's output and has not publicly explained the move (Free Malaysia Today/Reuters).

Watchlist next 12–48 hours and beyond

  • Sun, Oct 25
    Riyadh's Terminals 1 and 2 reopen: whether scheduled flights actually operate; KCNA and Chinese state media coverage of Kim's trip on the Korean War anniversary
  • Sun evening, Oct 25
    First oil and equity-futures trading of the week after Friday's oil surge
  • Mon, Oct 26–Thu, Oct 29
    Chinese Communist Party plenum in Beijing; Oleshky truce takes effect at 9 p.m. ET Monday (3 a.m. Tuesday in Kyiv); Israel votes Tuesday, Oct 27
  • Wed, Oct 28
    FOMC decision and any signal on a December hike
  • By Sat, Oct 31
    North Korea's self-declared October deadline for border loudspeakers; Yellow Vest protests in France; further ship strikes or sinkings around Hormuz
  • Tue, Nov 3
    Midterm elections and the deadline on our Iran-strike call; whether a date and delegations for the Abu Dhabi talks are announced

Sources 36

Grading: source and information reliability use the Admiralty (NATO) 6×6 scale (A–F / 1–6); judgments use ICD 203 likelihood language with analytic confidence (high · moderate · low). Major items are cross-checked against at least two independent sources; single-source items are listed under intelligence gaps.

Market colors follow U.S. convention: green for gains, red for losses. The Pentagon Pizza Index is a side indicator shown for interest only — public figures from uspizzaindex.com, cross-checked with pizzint.watch — and is not used in the threat level or any judgment. This page is open-source reference material, not investment advice.