Saudi-led coalition spokesman Maj. Gen. Turki al-Maliki said Sunday, Oct 25, that 'air defenses intercepted and destroyed a ballistic missile launched by the terrorist Houthi militia toward Riyadh' (Arab News, AP). Arab News said armed drones aimed at the Riyadh region were downed shortly after 1 a.m. and around 5 a.m., and that just after 6 a.m. Saudi Civil Defense sounded an alert for an 'aerial threat' to the capital. Al-Maliki said on X that the coalition also intercepted a cruise missile fired toward Khamis Mushait (A News), and the coalition said it destroyed 10 ballistic missiles launched toward southern Saudi Arabia (Arab News, Iran International). On Oct 24, two ballistic missiles aimed at the Makkah and Madinah regions were among those intercepted, with debris falling in parts of Makkah, Jeddah, Taif and Rabigh, and Grand Mosque chief Sheikh Abdulrahman Al-Sudais condemned the Houthis' 'criminal approach' (Arab News). King Khalid International Airport reopened Terminal 1 for domestic flights and Terminal 2 for international flights by national carriers on Sunday (AP, Arab News) and told passengers with confirmed bookings to check with their airlines before heading out (The Arabian Post). After the reopening was announced, Houthi military spokesman Yahya Saree said the airport 'remained a military target' and warned airlines, employees and travelers against using it (Outlook India). A News reported no casualties from Sunday's interceptions.

• Indicators to watch · GACA or Saudi Press Agency statements on actual operations; Saudia, flynas and other national carriers' Riyadh schedules; further Houthi fire at the airport; extensions of foreign airlines' suspensions

• B2Weekend strike talk and Houthi fire set up a jumpy Sunday-evening openFriday's collected closes were Brent $111.70 (+2.80%), WTI $103.27 (+3.82%), gold $4,007.90 (-1.29%) and the S&P 500 7,623.68 (-0.52%). With Trump floating a strike 'maybe tomorrow' and Houthi attacks on Saudi Arabia continuing through the weekend, oil and equity futures could move sharply when trading resumes Sunday evening.

• C2Riyadh reopens, but international service is limited to Saudi carriers and foreign airlines stay awayOutlook India said Terminal 2 is open only to Saudi national carriers' international flights and that the State Department updated its Level 3 'Reconsider Travel' advisory for Saudi Arabia on Oct 23. The Arabian Post said Air India and Air India Express are keeping their Riyadh suspensions in place.
• C3Iran–Pakistan Gabd–Rimdan crossing reopens to liquefied-gas trucksIran International, citing the IRGC-linked Fars news agency, said the crossing reopened Oct 25 for trucks carrying liquefied gas and essential goods, while parliament speaker Mohammad Bagher Ghalibaf called for a national campaign to cut gas use by at least 10% before winter.

Watchlist next 12–48 hours and beyond

• Sun evening, Oct 25 (ET)
  First oil and equity-futures trading after Trump's 'maybe tomorrow' remark; Brazil runoff results
• Mon, Oct 26
  Typhoon Champi near Kyushu; China's Communist Party plenum opens in Beijing (through Oct 29); Oleshky truce takes effect at 9 p.m. ET (3 a.m. Tuesday in Kyiv)
• Tue, Oct 27
  Israel votes under a full West Bank closure; whether Saudi carriers expand Riyadh service
• Wed, Oct 28
  FOMC decision and any signal on a December hike
• By Sat, Oct 31
  North Korea's self-declared October deadline for border loudspeakers; confirmation of scheduled flights at Riyadh, the deadline on our call; further ship strikes in the Black Sea and the Gulf
• Tue, Nov 3
  Midterm elections and the deadline on our Iran-strike call

Sources 32

• A
  Arab TimesTrump Says US Could Strike Iran as Early as ‘Tomorrow’ or Reach Deal
  C
• T
  The Tribune (ANI)'There's a possibility...': Trump says US could strike Iran 'maybe tomorrow'; doesn't rule out 'big beautiful' deal
  B
• A
  Al JazeeraIran war live: Saudi downs Houthi ballistic missile targeting Riyadh
  B
• I
  Iran InternationalLive - Araghchi says war would not alter Iran policy as Trump raises prospect of strike
  C
• A
  Arab News (Reuters)Iranian army says it shot down US drone over Bandar Abbas, Tasnim reports
  B
• W
  WRAL (AP)Saudi Arabia reopens airport as attacks by Houthi rebels persist, and other Mideast news
  B
• C
  CBS NewsLive Updates: Iran warns that U.S. military not allowed in Gulf 'under any circumstance'
  B
• A
  Arab NewsGrand Mosque head slams Houthi strikes on Makkah, Madinah as coalition defenses thwart attacks
  C
• A
  A NewsSaudi-led coalition says it intercepted Houthi cruise missile over Khamis Mushait
  C
• O
  Outlook IndiaRiyadh Airport Reopens Two Terminals Amid Houthi Threats
  C
• T
  The Arabian PostRiyadh airport assigns separate terminals as flights resume
  C
• I
  Internazionale (Reuters)North Korea’s Kim Jong Un returns from China after war memorial visit, state media says
  B
• T
  The Korea HeraldIn Dandong, Kim Jong-un invokes wartime past, eyes economic future
  B
• E
  Electronic Times (Yonhap)KCNA reports Kim Jong Un's China visit; no meeting with Xi Jinping (translated headline)
  B
• O
  OhmyNewsKim Jong Un's Dandong trip reaffirms North Korea-China friendship and seeks economic cooperation (translated headline)
  C
• N
  Newstong (Yonhap)'More dangerous than Hormuz': the Black Sea becomes the world's deadliest shipping route (translated headline)
  B
• Y
  Yahoo News (CBC)Black Sea sailors thought a rescue boat was racing toward them. Instead, it was a drone that sank their ship
  B
• A
  A NewsRussia, Ukraine report casualties in overnight strikes
  C
• K
  Kyiv IndependentRussian attacks kill 8, injure 51 across Ukraine over past day as drone strikes residential building in Vinnytsia
  B
• Y
  Yahoo News (BBC)Musk says SpaceX restricted Ukraine's Starlink connection as service restored
  B
• U
  UPIStarlink fully restored as Musk says Ukraine violated terms of service
  B
• N
  News1Typhoon Champi brings heavy rain to Jeju and southern regions; trees toppled, flooding reported (translated headline)
  B
• T
  Top Star NewsTyphoon No. 30 Champi nears waters southwest of Jeju on the 25th, with up to 250 mm of rain (translated headline)
  C
• N
  Nippon.com (Jiji Press)Typhoon Champi Could Approach Kyushu Region Mon.
  B
• F
  France 24Israel to close all land crossings with West Bank on election day
  B
• A
  Al JazeeraLatest poll shows Bolsonaro maintaining edge over Lula in Brazil run-off
  B
• K
  Kitco (Reuters)Fed to skip October but raise rates again in December, nearly all economists say
  B
• H
  Help Net SecurityCapcom data breach exposes 11.7 million account records
  C
• M
  MalwarebytesResident Evil maker Capcom warns of phishing after 11.7 million records exposed
  C
• I
  InfoSec TodayLeaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
  C
• B
  BrandefenseLiteLLM 1.107.0 Compromised: What to Do Now
  C
• M
  Military TimesUS Army seeks manufacturers for 155mm howitzer barrels amid boost in demand
  C

Elon Musk said SpaceX restricted Ukraine's high-speed Starlink access because 'Ukraine['s] military violated Starlink terms of service and used it for offensive drone strikes to kill people,' adding that 'using Starlink, a civilian commercial service, for offensive drone strikes to kill people has never been allowed, nor should it be,' the BBC reported Sunday, Oct 25. He said Starlink 'can be used for infrastructure that is military, but it cannot be used for unequivocally offensive strikes' (BBC). In posts reported by UPI on Oct 24, Musk also wrote that 'Starlink remains critical to the defense of Ukraine, as it is the only system that cannot be jammed or blown up, at least for now,' and that 'were Starlink to be turned off, the Ukrainian front line would collapse immediately. This is NOT a threat, it is simply a statement of fact.' UPI said Musk described the military Starshield version as controlled by the Pentagon and ultimately by the president. Serhii Beskrestnov, described by the BBC as a Ukrainian presidential adviser, said Starlink terminals in Ukraine are capped at 70–90 kph and do not work over Russian territory, making deep strikes with them technically impossible, and called Musk's position 'very strange.' According to the BBC, the earlier 161 kph cap has been lifted and connections now hold at more than 400 kph; it said the restrictions came amid tensions over Ukrainian strikes on Russian oil infrastructure.

• Indicators to watch · Statements from Ukraine's Defense Ministry and Digital Transformation Ministry on terminal performance; any White House or Pentagon comment on Starshield control; Musk posts on 'offensive' use; Ukrainian strike tempo against Russian oil infrastructure

North Korea's KCNA reported Sunday, Oct 25, that Kim Jong Un visited Dandong in China's Liaoning province the previous day and paid tribute at a memorial to Chinese soldiers who fought in the Korean War (Reuters, The Korea Herald). According to KCNA, Kim said in front of the memorial tower that North Koreans will always remember fighting alongside the Chinese people (Yonhap), called the Memorial Hall of the War to Resist U.S. Aggression and Aid Korea 'a precious testament, sealed in blood, to the invincible friendship,' and praised the leadership of the Chinese Communist Party with Xi Jinping at its core (The Korea Herald, Yonhap). Wang Huning, chairman of the Chinese People's Political Consultative Conference, hosted a banquet for Kim under Xi's special instructions, and Foreign Minister Wang Yi attended (The Korea Herald). OhmyNews said Wang called for wider personnel exchanges and economic and trade cooperation after the bridge opening, and that Kim said he hoped the cooperation would benefit the people of both countries. Kim toured a bus factory in Dandong and returned home over the New Yalu River Bridge, which opened Oct 15; KCNA said he looked out from the bridge's midpoint and expressed confidence it would 'fulfill its historic mission' (Reuters, The Korea Herald). His sister Kim Yo Jong, Foreign Minister Choe Son Hui, party secretary Jo Yong Won and First Vice Premier Kim Tok Hun were among those accompanying him (Yonhap). Kim did not meet Xi, and Reuters noted that President Trump plans a regional visit next month.

• Indicators to watch · The outcome of China's Oct 26–29 party plenum; cargo traffic on the New Yalu River Bridge and China–North Korea trade; the schedule of Trump's November trip to Asia and any sign of U.S.-North Korea contact; whether North Korea switches on its border loudspeakers

• —No JCS confirmation yet of North Korea's promised October loudspeaker broadcastsHELIOS again found no Joint Chiefs of Staff or Defense Ministry confirmation that North Korea has switched on the border loudspeakers Kim Yo Jong said on Oct 21 would operate in October. No notable activity confirmed.

U.S. Impact Assessment

• Energy and fuel pricesBrent ended the week at $111.70 (+2.80%) and WTI at $103.27 (+3.82%) in the collected data. With the president floating a strike on Iran 'maybe tomorrow' and Houthi fire at Saudi cities continuing, refiners, airlines and fleet operators should plan for sharp moves when futures reopen Sunday evening and keep an eye on war-risk premiums. The surge in Black Sea attacks adds to marine insurance and freight costs for grain and fuel cargoes moving out of that region.
• Protecting staff in Saudi Arabia and the GulfRiyadh's airport is open again, but only Saudi carriers fly international routes, the Houthis call it a military target, and the State Department rates Saudi Arabia 'Reconsider Travel.' Companies with people in the kingdom should confirm flights right before departure and keep evacuation plans current, since a U.S. strike on Iran could close Gulf airspace again on short notice.
• Commercial satellites and the defense industrial baseMusk's position that SpaceX decides what counts as 'offensive' use, while the military Starshield version answers to the Pentagon, means contractors and operators that depend on commercial satellite links in contested areas should write service-continuity and government-directed-change terms into their contracts and keep alternate links ready. The Army's hunt for a second source of 155mm barrels shows how a single government plant can cap munitions output; heavy-machining suppliers interested in the work face a Nov 23 response deadline.
• Software supply chain and phishingOrganizations running the LiteLLM AI gateway should check whether version 1.107.0 was ever installed, rebuild affected hosts from clean images and rotate every secret those hosts could reach, and pin package versions going forward. The Capcom exposure gives criminals fresh email lists for convincing phishing, so security teams should expect lures that cite gaming or platform accounts and keep multifactor authentication mandatory.

Edition archiveRSS

• Saturday, Oct 31 · Morning Edition · 05:42 ETAttacks on ships around Hormuz hit a wartime monthly high as Trump says the Iran war will be “wrapped up soon,” Binance finds more entry points behind its $6.3 billion theft, and Seoul weighs stretching its Cheonghae naval unit toward Oman
• Friday, Oct 30 · Evening Edition · 17:44 ETTankers keep getting hit around the Strait of Hormuz as Qatari mediators carry a U.S. letter into Tehran, a tech rout hands the S&P 500 its worst day since June, and the Secret Service joins the hunt for Binance's stolen $6.3 billion
• Friday, Oct 30 · Morning Edition · 05:40 ETA small boat attached explosives to a tanker in the Strait of Hormuz, Binance was hit by a roughly $6.3 billion hack that blockchain analysts tie to North Korea, and AI-spending worries sent South Korea's KOSPI down 3.48%
• Thursday, Oct 29 · Evening Edition · 17:46 ETIran's Revolutionary Guards say three tankers hit mines on Hormuz's southern route and Houthi missiles are downed over Riyadh, as a Russian drone kills at least 14 at a Dnipro rail station and Florida discloses a student-aid breach that may affect 4.9 million people
• Thursday, Oct 29 · Morning Edition · 05:42 ETNorth Korea fires about 10 short-range ballistic missiles six days after Seoul offered military talks, as DHS says it is working to contain a leak of 40,000-plus employee records and Trump says Vance's Iran outreach was about medical aid, not peace talks
• Wednesday, Oct 28 · Evening Edition · 17:40 ETIran dismisses Qatar's draft deal as 'unacceptable ideas' amid reports that U.S. and Israeli officials expect a week of strikes after the midterms if talks fail, while a leak exposes more than 40,000 DHS employees and the Fed holds with two votes for a hike
• Wednesday, Oct 28 · Morning Edition · 05:36 ETThe U.S. has reportedly told Gulf allies to brace for a short, intense Iran campaign after the Nov 3 midterms as oil rebounds, while three South Korean financial firms, including crypto exchange Bithumb, disclose hacks
• Tuesday, Oct 27 · Evening Edition · 17:39 ETA cyberattack forces ambulance diversions at New Mexico's only Level 1 trauma center, the Houthis claim a missile hit on Saudi Arabia's largest refinery, and Iran threatens 'legal action' against every ship run by Sinokor, the biggest crude carrier through Hormuz
• Tuesday, Oct 27 · Morning Edition · 05:44 ETA local truce takes hold in occupied Oleshky even as Russian missiles hit Kyiv's Southern Bridge and a student dorm, the Houthis fire ballistic missiles at Saudi Arabia's Eastern Province hours after the Tehran talks, and CISA confirms PHP2Shell is under attack
• Monday, Oct 26 · Evening Edition · 17:45 ETIran and three Mecca pact powers agree to keep talking after a first four-way meeting in Tehran and oil eases, but the Saudi-led coalition widens strikes on Houthi missile sites and North Korea parks self-propelled guns in plain view of the South
• Monday, Oct 26 · Morning Edition · 05:47 ETMediators converge on Tehran and oil eases, but a Houthi missile again targets Riyadh and South Korea reports its first hacking-related customer data leak at an insurer
• Sunday, Oct 25 · Evening Edition · 17:44 ETTrump says it's decision time on Iran, 'finish it off' or make a deal, but rules out a strike Sunday, as the Houthis claim a ballistic-missile barrage on Riyadh's newly reopened airport and CENTCOM's commander says Hormuz shipping lanes are clear of mines
• Sunday, Oct 25 · Morning Edition · 05:50 ET · CurrentTrump says a U.S. strike on Iran could come 'maybe tomorrow' while floating a 'big, beautiful agreement,' as Houthi missiles and drones fly at Riyadh and Khamis Mushait and Musk says SpaceX throttled Ukraine over 'offensive' Starlink use
• Saturday, Oct 24 · Evening Edition · 17:43 ETA U.S. intelligence memo warns Iranian plots against Americans abroad have reached 'advanced stages' as the State Department thins out Gulf embassies, Houthi ballistic missiles fly at Riyadh, Taif and Yanbu, and Ukraine says its Starlink speed caps are gone

Asked by reporters on Saturday, Oct 24, whether he would attack Iran, President Trump said, 'Maybe tomorrow… There's a possibility I will. There's also a possibility we'll have a nice, big, beautiful agreement' (ANI, Arab Times). 'They want to make a deal, but the problem is, will they hold the deal?' he said, adding, 'I've got to make it permanent. That's the only reason I'm doing it,' and 'I may have to finish it off, or maybe they'll make a deal. But I'm not sure. Either way, we win' (Arab Times). Al Jazeera said Trump hinted at a possible Sunday attack or a deal. On Sunday, Oct 25, Foreign Minister Abbas Araghchi warned against renewed strikes and said 'our policies will remain in place' regardless of war threats (AP); Iran International quoted him as saying 'the decisive action of our armed forces shattered all foreign security calculations.' Iran's army said Sunday that its air defenses shot down a U.S. LUCAS drone over the southern port city of Bandar Abbas, Reuters reported citing the semi-official Tasnim news agency; the report carried no U.S. response (Arab News/Reuters, Iran International). On Oct 24, Ali Abdollahi, identified by CBS News as Iran's armed forces chief of staff, said, 'We will not allow U.S. military ships in the Persian Gulf under any circumstances and at any time.' HELIOS found no CENTCOM, Pentagon or White House announcement of a strike on Iranian territory during the window.

• Indicators to watch · CENTCOM or Pentagon announcements on Iran; any U.S. confirmation or denial of the Bandar Abbas drone claim; more specific Iranian threats against U.S. bases and warships in the Gulf; the first oil-futures trading of the week Sunday evening

Citing the Financial Times, Yonhap reported Oct 25 that data from maritime security firm Ambrey and the International Maritime Organization show more than 570 ships attacked in the Black Sea this year and at least 40 seafarers killed, compared with 24 deaths around the Strait of Hormuz over the same period. About 387 vessels were attacked in the third quarter, more than five times the previous quarter and over four a day, and 90% of attacks in the past 45 days were attributed to Russia (Yonhap/FT). The head of Ukraine's maritime union likened calling at Ukrainian ports to a near-suicide mission, and the head of Lloyd's List Intelligence said he had never seen such a situation. Ambrey data shared with CBC News on Oct 24 show more than 500 attacks on commercial vessels in the Black Sea and the Sea of Azov this year and 45 in October, 40 of them attributed to Russia. CBC said 11 of the 16 crew are missing from the HS Dignity, a cargo ship sunk by a sea drone off Bulgaria early on Oct 13, and 10 from the Alfa Watan, struck Oct 6. Russia's Defense Ministry said on Oct 25 that it struck a dry cargo vessel bound for Ukraine's Chornomorsk; the claim has not been independently verified (A News).

• Indicators to watch · Bulgarian and Romanian government statements on strikes; Black Sea war-risk premiums and grain and fuel loadings; Russian and Ukrainian strikes on ports; any new IMO statement

• B2Overnight drone raids: Russian attacks kill eight and injure 51 in Ukraine, while Moscow claims 532 Ukrainian drones downedThe Kyiv Independent tallied eight killed and 51 injured from Oct 24–25 Russian attacks, including in Dnipropetrovsk and Kharkiv, and Ukraine's Air Force said it downed 119 of 153 drones. Russia's Defense Ministry said it intercepted 532 Ukrainian drones over 25 regions, and Russian officials said three people were killed in Bryansk and Belgorod (A News).
• B2Brazil votes Sunday in a runoff between Sen. Flavio Bolsonaro and President LulaThree polls published Oct 16 (CNT/MDA, Quaest and Datafolha) had Bolsonaro at 46–47% and Lula at 44–45.9%, within the 2-point margin of error, and Bolsonaro also led the Oct 4 first round, Al Jazeera reported. Results are expected Sunday evening ET.

• C1LiteLLM traces malicious 1.107.0 release to a master key leaked in May and never revokedAn attacker used a master key committed to a public repo on May 27 to steal GitHub tokens on Oct 10, then pushed a credential-stealing, remote-access version 1.107.0 to PyPI and Docker on Oct 21; PyPI quarantined it the same day. LiteLLM published its root-cause analysis Oct 23, and 1.106.2 is the last safe version (InfoSec Today, Brandefense).

Intelligence gaps · unconfirmed

• Price conflict: Some market reports put Brent's Oct 23 settlement at $116.72 (+3.14%) and CBS News cited $117, while the collected quote is $111.70 (+2.80%); WTI's $103.27 matches. HELIOS used only collected figures.
• Trump's remarks: ANI placed them in Florida after he voted, while 24NewsHD placed them after a rally in Perry, Georgia; HELIOS could not open the Reuters or AP originals. 24NewsHD's account, citing The Wall Street Journal and The Hill, of munitions preparations aboard the USS George Washington and follow-up strike plans was not independently checked and was left out.
• Bandar Abbas drone: The shootdown rests on the Iranian army's claim via Tasnim; HELIOS found no U.S. confirmation or denial, and neither the drone's mission nor the time was disclosed.
• Houthis and Riyadh airport: AP counted one drone aimed at Riyadh early Sunday, while A News and Arab News counted two. AP put the Oct 10 airport attack toll at 17 dead and more than 330 wounded; Reuters and Arab News put it at 13 dead and more than 300 wounded. HELIOS found no GACA, Saudi Press Agency, Reuters or AP confirmation that a scheduled passenger flight actually took off or landed on Oct 25.
• Black Sea figures: The FT, via Yonhap, counts more than 570 ships attacked and at least 40 seafarers killed this year, while Ambrey data shared with CBC count more than 500 attacks, so the two tallies may use different bases. HELIOS could not open the FT original; KBS and Chosunbiz also cited the FT and were not counted as independent. Russia's claim of striking a cargo ship bound for Chornomorsk is unverified.
• Israel: France 24 put the number displaced in Hebron at about 2,000, while AP said hundreds.
• Starlink: It is unclear from the reporting which terminals or services Beskrestnov's '70–90 kph' cap refers to, versus the Defense Ministry's statement that links are stable above 400 kph.
• Typhoon: HELIOS did not find totals for flight or ferry cancellations in Jeju on Oct 25; the Korean track figures are from the Korea Meteorological Administration's 4 a.m. Oct 24 update.
• Pending grades: 'taiwan-champi-landfall-oct26' appears not to have happened, since Japan's Meteorological Agency placed Champi about 250 km north of Yonaguni moving north-northeast at 3 p.m. Oct 24 and Korean forecasters tracked it north into the East China Sea; HELIOS did not see Taiwan's Central Weather Administration statement. 'ukraine-starlink-speed-cap-lifted-nov6' appears to have happened, since the BBC also reported on Oct 25 that connections are back above 400 kph.