Iran's Persian Gulf Strait Authority (PGSA), set up to police transit through the Strait of Hormuz, said on Oct 27 that 'the vessels belonging to Sinokor Shipping Company have committed the highest number of crossing violations over the past 3 months,' that 'appropriate enforcement actions have been taken against at least 7 of them' and that 'as of November 1, legal action will be taken against all vessels of this company' (gCaptain, Maritime Executive, Kyunghyang Shinmun). PGSA did not specify the action, but it says ships on its non-compliance list face restrictions on future passages, including fines, detention or confiscation (Kyunghyang Shinmun, Maritime Executive). Bloomberg's analysis of shipping data, as reported by Kyunghyang Shinmun, Seoul Economic Daily and gCaptain, shows Sinokor-owned tankers carried about 105.6 million barrels of crude through Hormuz in September, 37% of the month's flow and more than the next three operators combined. Seoul Economic Daily, citing Lloyd's List, said seven Sinokor VLCCs have already been damaged in missile and drone attacks, and Seoul Economic Daily and Aju Business Daily said PGSA's sanctions list has grown from 45 ships in August to 122 in October, while Washington has sanctioned PGSA itself and warned that complying with its demands could expose shipowners to U.S. penalties. Sinokor did not immediately respond to gCaptain's request for comment, and HELIOS found no official South Korean government response by the end of the window. Separately, CENTCOM rejected an IRGC navy claim that U.S. warships had pulled back, saying 'US forces deployed to the Middle East remain present and vigilant in the Strait of Hormuz and surrounding waters' (News.az).

• Indicators to watch · PGSA or IRGC announcements about Sinokor after Nov 1; Sinokor tankers rerouting or switching off transponders; safety notices from South Korea's Foreign or Oceans ministries; any new U.S. warnings on PGSA compliance; war-risk premiums and VLCC rates for Gulf loadings

• C2About $63 billion in Anthropic-linked financing lifts chipmakersDimsum Daily said a group including Bank of America, Citi, Morgan Stanley and Blackstone announced financing tied to Anthropic's planned use of Broadcom technology, lifting Broadcom, Micron and AMD. Individual stock moves are not collected quotes and are left out.

• —No Seoul response yet to Iran's Sinokor warningHELIOS found no statement from South Korea's Foreign Ministry or Oceans Ministry on the PGSA warning by the end of the window. No notable change confirmed.
• —No North Korean response to Seoul's military talks offerHELIOS again found no KCNA or Rodong Sinmun response during the window to the Defense Ministry's Oct 23 offer of military talks. No notable change confirmed.

Watchlist next 12–48 hours and beyond

• Wed, Oct 28, 2 p.m. ET
  FOMC decision, followed by Chair Kevin Warsh's press conference
• Thu, Oct 29–Fri, Oct 30
  Oleshky humanitarian mission (Oct 29) and the first civilian evacuations (Oct 30)
• Sat, Oct 31
  North Korea's self-imposed October deadline for border loudspeakers and whether the JCS confirms broadcasts
• Sun, Nov 1
  PGSA's legal action against Sinokor vessels is due to start; the Oleshky truce is scheduled to end at 10:59 p.m. Kyiv time (3:59 p.m. ET) unless extended
• Wed, Nov 4
  Certification of Israel's final election results (per JTA) and the start of the president's consultations
• Daily
  Whether BYOD posts UNM data on its leak site, and whether GMO's attackers release more at noon Tokyo time (11 p.m. ET)

Sources 28

• g
  gCaptainIran Says It Will Take Action Against Sinokor Ships in Hormuz
  C
• T
  The Maritime ExecutiveIranian Forces Threaten Sinokor with “Legal Action” for Hormuz Violations
  C
• K
  Kyunghyang ShinmunIran warns South Korea's Sinokor, No. 1 crude carrier through the Strait of Hormuz, of 'legal action' (translated)
  B
• S
  Seoul Economic DailyIran warns Sinokor of legal action; seven VLCCs already damaged (translated)
  B
• A
  Aju Business DailyIran issues 'sanctions warning' to Sinokor, No. 1 Hormuz crude carrier (translated)
  B
• G
  GV Wire (Reuters)Yemen's Houthis Say They Hit Saudi Ras Tanura Oil Refinery With Missile
  B
• A
  Anadolu AgencyYemen’s Houthis claim missile attack on Saudi Arabia’s Ras Tanura oil refinery
  B
• M
  Middle East EyeHouthis hit Saudi refinery as Iran warns of ‘devastating’ response to further US-Israeli attacks
  C
• B
  BusinessDay (Reuters)Oil drops $2 as Middle East talks ease supply fears
  B
• T
  The Kyiv IndependentOleshky ceasefire 'expanded within Kherson Oblast,' Melania Trump says
  B
• O
  Office of the President of FinlandPresident Stubb and Prime Minister Støre held a phone call with President Putin
  A
• T
  The Moscow TimesFinnish, Norwegian Leaders Call Putin Ahead of Ukraine Peace Talks
  C
• J
  Jewish Telegraphic AgencyNetanyahu leads in exit polls, but Eisenkot's change bloc has more seats
  C
• F
  France 24Live: Israeli exit polls show narrow edge for opposition but no clear majority against Netanyahu
  B
• T
  The RecordUniversity of New Mexico hospital diverts ambulances after cyberattack
  C
• H
  Help Net SecurityCyberattack disrupts University of New Mexico hospitals, extortion group claims attack
  C
• T
  TechCrunchJapan internet giant GMO says hackers posted stolen customer data
  C
• K
  Kitco (Reuters)S&P 500, Nasdaq advance as oil eases ahead of Fed decision
  B
• D
  Dimsum DailyChip gains support Wall Street as oil eases and Fed meeting gets under way
  C
• D
  Defense NewsUS taps Poland to host European PAC-3 missile maintenance facility
  C
• B
  Breaking DefenseDefense Department selects Poland for new PAC-3 maintenance facility
  C
• M
  MeduzaTrump weighs lifting sanctions on Russian fund once described by U.S. Treasury as Putin’s ‘slush fund,’ NYT reports
  C
• S
  SBS (English)Iran Claims Oil Tanker Catches Fire After Striking Mine in Strait of Hormuz
  B
• N
  News.azUS military rejects Iranian reports of warships withdrawing from Hormuz
  C
• K
  Korea JoongAng DailyKim Jong-un vows deeper North Korea-Vietnam ties in message to To Lam
  B
• A
  Air & Space Forces MagazineAir Force Launches ARRW, Its First Hypersonic Weapon, into Production
  C
• S
  Stars and StripesAir Force hypersonic missile project moves into production
  C
• 1
  112 UkraineCeasefire in Oleshky from Oct 27 to enable humanitarian mission
  C

Houthi military spokesman Yahya Saree said on Tuesday, Oct 27, that the group fired a ballistic missile at the Ras Tanura refinery in Saudi Arabia's Eastern Province, that it hit its target and that it caused large fires at the site (Anadolu, Reuters). Reuters said Saudi authorities did not immediately confirm the strike and reported that Bloomberg, citing a source, said Saudi Arabia had contained a fire near Ras Tanura's terminal (Reuters, Middle East Eye). Ras Tanura has a capacity of 550,000 barrels per day and includes a shipping terminal on the Gulf, making it a critical Saudi export point (Reuters). Reuters said the Saudi-led coalition reported intercepting and destroying two ballistic missiles aimed at Riyadh, and Anadolu said Saudi Civil Defense issued alerts for Najran, Abha and Khamis Mushait before announcing the danger had passed. Middle East Eye, citing Tasnim, said Abdollah Haji Sadeghi, the supreme leader's representative to the IRGC, warned that further U.S. attacks would draw a 'harsher and more devastating' response. Gelber & Associates told Reuters that continued Houthi attacks on Saudi Arabia 'are keeping supply risks in place.' Collected quotes show Brent at $109.74 (-0.90%) and WTI at $100.20 (-1.53%).

• Indicators to watch · Any damage statement from Saudi Arabia's Energy Ministry or Aramco; changes to Ras Tanura loading schedules; further claims, or a halt announcement, from Yahya Saree; any confirmed hit on the East-West pipeline or the Yanbu terminal; a date for the next four-way session

Tetiana Shelest, head of communications for Ukraine's human rights ombudsman, said the local ceasefire around occupied Oleshky now covers all of Kherson Oblast, and U.S. first lady Melania Trump said it had been 'expanded… within Kherson Oblast' (Kyiv Independent). Ombudsman Dmytro Lubinets said the truce runs from 3 a.m. on Oct 27 until 10:59 p.m. Kyiv time on Nov 1 and that no breaches had been recorded by either side (112 Ukraine, Kyiv Independent); at 5:30 p.m. on Oct 27 he said it was being 'fully honored.' The Kyiv Independent said demining is under way, the humanitarian mission is due to begin Oct 29 and civilian evacuation Oct 30. On the same day, Finnish President Alexander Stubb and Norwegian Prime Minister Jonas Gahr Støre held a phone call with Vladimir Putin; Stubb's office said it was held in consultation with Ukraine and was related to the upcoming meetings in Abu Dhabi. 'The discussion was frank and substantive,' Stubb said, adding, 'Ending the war requires direct discussions.' The Kremlin said Putin 'reiterated the root causes' of the invasion and pointed to the 'confrontational policies of EU and NATO member states,' and said it is willing to resume U.S.-mediated talks as soon as next month, with no dates set (The Moscow Times). Danish Prime Minister Mette Frederiksen said, 'I think we should keep Europe together instead of going solo' (The Moscow Times).

• Indicators to watch · Entry of the humanitarian mission on Oct 29 and the first evacuations on Oct 30; demining of the access route; whether the truce is extended past Nov 1; a firm date for the Abu Dhabi talks; Russian missile strikes outside Kherson

• C2CENTCOM rejects Iran's claim that U.S. warships left HormuzCENTCOM said 'US forces and regional partners control the international waterway — clearly not Iran' (News.az).
• C3Russia seeks sanctions relief for RDIF to take part in diesel sales to the U.S.Meduza, citing The New York Times, said the Treasury is reviewing the Russian Direct Investment Fund's application under standard procedures; no White House or Treasury comment was found.

U.S. Impact Assessment

• Hospital cyber resilienceThe UNM attack shows how an intrusion spanning a university campus and its hospital can reach emergency care: ambulances were diverted from the state's only Level 1 trauma center within hours. U.S. academic medical centers should check that campus and hospital identity systems are separated and rehearse diversion and downtime procedures before an attacker forces them to.
• Energy supplyA claimed strike on Ras Tanura, the kingdom's largest refinery and a key export terminal, came on a day when collected quotes show Brent down to $109.74 (-0.90%). Until Riyadh or Aramco reports on damage, U.S. refiners and fuel-intensive operators should not read the price dip as a sign that Gulf supply risk has eased.
• Tanker market and sanctions complianceSinokor's fleet carries a large share of Hormuz crude, so any Iranian action against it after Nov 1 could tighten VLCC availability for every charterer. U.S. charterers and traders face a two-sided problem: Washington has sanctioned PGSA and warned against complying with it, while ignoring PGSA now carries physical risk in the strait.
• RatesMarkets expect a hold on Wednesday but are pricing at least two more hikes by mid-2027 (Reuters), and collected quotes show the 10-year yield at 4.993%. Corporate treasurers should stress-test refinancing plans against rates that stay high.

Edition archiveRSS

• Saturday, Oct 31 · Morning Edition · 05:42 ETAttacks on ships around Hormuz hit a wartime monthly high as Trump says the Iran war will be “wrapped up soon,” Binance finds more entry points behind its $6.3 billion theft, and Seoul weighs stretching its Cheonghae naval unit toward Oman
• Friday, Oct 30 · Evening Edition · 17:44 ETTankers keep getting hit around the Strait of Hormuz as Qatari mediators carry a U.S. letter into Tehran, a tech rout hands the S&P 500 its worst day since June, and the Secret Service joins the hunt for Binance's stolen $6.3 billion
• Friday, Oct 30 · Morning Edition · 05:40 ETA small boat attached explosives to a tanker in the Strait of Hormuz, Binance was hit by a roughly $6.3 billion hack that blockchain analysts tie to North Korea, and AI-spending worries sent South Korea's KOSPI down 3.48%
• Thursday, Oct 29 · Evening Edition · 17:46 ETIran's Revolutionary Guards say three tankers hit mines on Hormuz's southern route and Houthi missiles are downed over Riyadh, as a Russian drone kills at least 14 at a Dnipro rail station and Florida discloses a student-aid breach that may affect 4.9 million people
• Thursday, Oct 29 · Morning Edition · 05:42 ETNorth Korea fires about 10 short-range ballistic missiles six days after Seoul offered military talks, as DHS says it is working to contain a leak of 40,000-plus employee records and Trump says Vance's Iran outreach was about medical aid, not peace talks
• Wednesday, Oct 28 · Evening Edition · 17:40 ETIran dismisses Qatar's draft deal as 'unacceptable ideas' amid reports that U.S. and Israeli officials expect a week of strikes after the midterms if talks fail, while a leak exposes more than 40,000 DHS employees and the Fed holds with two votes for a hike
• Wednesday, Oct 28 · Morning Edition · 05:36 ETThe U.S. has reportedly told Gulf allies to brace for a short, intense Iran campaign after the Nov 3 midterms as oil rebounds, while three South Korean financial firms, including crypto exchange Bithumb, disclose hacks
• Tuesday, Oct 27 · Evening Edition · 17:39 ET · CurrentA cyberattack forces ambulance diversions at New Mexico's only Level 1 trauma center, the Houthis claim a missile hit on Saudi Arabia's largest refinery, and Iran threatens 'legal action' against every ship run by Sinokor, the biggest crude carrier through Hormuz
• Tuesday, Oct 27 · Morning Edition · 05:44 ETA local truce takes hold in occupied Oleshky even as Russian missiles hit Kyiv's Southern Bridge and a student dorm, the Houthis fire ballistic missiles at Saudi Arabia's Eastern Province hours after the Tehran talks, and CISA confirms PHP2Shell is under attack
• Monday, Oct 26 · Evening Edition · 17:45 ETIran and three Mecca pact powers agree to keep talking after a first four-way meeting in Tehran and oil eases, but the Saudi-led coalition widens strikes on Houthi missile sites and North Korea parks self-propelled guns in plain view of the South
• Monday, Oct 26 · Morning Edition · 05:47 ETMediators converge on Tehran and oil eases, but a Houthi missile again targets Riyadh and South Korea reports its first hacking-related customer data leak at an insurer
• Sunday, Oct 25 · Evening Edition · 17:44 ETTrump says it's decision time on Iran, 'finish it off' or make a deal, but rules out a strike Sunday, as the Houthis claim a ballistic-missile barrage on Riyadh's newly reopened airport and CENTCOM's commander says Hormuz shipping lanes are clear of mines
• Sunday, Oct 25 · Morning Edition · 05:50 ETTrump says a U.S. strike on Iran could come 'maybe tomorrow' while floating a 'big, beautiful agreement,' as Houthi missiles and drones fly at Riyadh and Khamis Mushait and Musk says SpaceX throttled Ukraine over 'offensive' Starlink use
• Saturday, Oct 24 · Evening Edition · 17:43 ETA U.S. intelligence memo warns Iranian plots against Americans abroad have reached 'advanced stages' as the State Department thins out Gulf embassies, Houthi ballistic missiles fly at Riyadh, Taif and Yanbu, and Ukraine says its Starlink speed caps are gone

The University of New Mexico Health Sciences Center said at 2:30 p.m. MDT on Monday, Oct 26, that it was dealing with a cybersecurity issue, was diverting ambulance traffic to other hospitals and had canceled all clinic appointments for the day; Help Net Security said the intrusion was detected around 11:30 a.m. The Record said ambulances were diverted to health systems in Albuquerque and Santa Fe for about two hours and noted that the system runs the state's only burn unit, children's hospital and Level 1 trauma center. UNM Health said 'the cybersecurity threat is affecting the entire University of New Mexico Health Sciences Center' and that because the matter 'remains an active law enforcement investigation, we are limited in what we can share' (The Record). Hospitals and clinics resumed appointments on Tuesday, Oct 27, but classes, including online ones, were canceled Tuesday at the schools of medicine, nursing, pharmacy and population health, and academic and research units were closed (The Record, Help Net Security). The BYOD extortion group claimed responsibility Monday evening, saying it compromised '36,000 machines, both on the UNM main campus and hospital environments' and stole student and employee personal data including Social Security numbers, Oracle HR and payroll records and EHR rosters; Help Net Security said the attackers also played a synthetic voice message describing the data they say they took. None of these claims has been confirmed. State and federal law enforcement have been notified.

• Indicators to watch · Whether UNM confirms data exfiltration or starts breach notifications; any sample data posted by BYOD; a filing on the HHS breach portal; further ambulance diversions or EHR downtime; whether shared identity infrastructure between campus and hospital was the entry point

Iranian security chief Mohsen Rezaei met Supreme Leader Mojtaba Khamenei after talks with representatives of Saudi Arabia, Turkey and Pakistan, and state media said Khamenei 'had emphasised the importance of pursuing Iran's interests and maintaining its conditions for ending the war' (Reuters). Rezaei said 'Washington's inability to provide security guarantees has become evident' (Middle East Eye). Reuters said oil fell for a second session as the Tehran talks raised hopes of de-escalation; collected quotes show Brent at $109.74 (-0.90%), WTI at $100.20 (-1.53%) and gold at $4,073.10 (+0.86%). Reuters said the Fed is widely expected to hold rates steady on Wednesday after raising them last month, though markets are pricing in at least two more hikes by mid-2027. Chip and tech stocks led, and Dimsum Daily said Broadcom rose after a consortium including Bank of America, Citi, Morgan Stanley and Blackstone announced about $63 billion in financing tied to Anthropic's planned use of Broadcom technology. Collected quotes show the S&P 500 at 7,722.60 (+0.60%), the Nasdaq at 26,477.81 (+1.18%), the Dow at 52,377.57 (+0.03%), the 10-year Treasury yield at 4.993% (+1bp) and the VIX at 17.52 (-4.73%).

• Indicators to watch · Wednesday's FOMC statement and Chair Kevin Warsh's signals on further hikes; any White House or Iranian Foreign Ministry statement on talks; a date for the next four-way session; earnings from Alphabet, Microsoft and Amazon later this week

• A1Finland and Norway hold a direct call with PutinStubb and Støre said the call was held in consultation with Ukraine and tied to the Abu Dhabi meetings; the Kremlin said Putin criticized the 'confrontational policies' of EU and NATO states, and Denmark's Frederiksen warned against 'going solo.'
• C1Pentagon picks Poland for Europe's PAC-3 interceptor maintenance hubUnder Secretary of Defense for Acquisition and Sustainment Michael Duffey announced the choice on Oct 27 at NATO's Conference of National Armaments Directors; Germany, the Netherlands and Sweden will support the supply chain, and Lockheed Martin builds the interceptors (Defense News, Breaking Defense).
• C1Air Force moves the ARRW hypersonic missile into productionThe Air Force disclosed on Oct 26 a $694 million Lockheed Martin contract, signed Sept 29, that takes the AGM-183A boost-glide weapon into production for the B-52; quantities and delivery dates were withheld (Air & Space Forces Magazine, Stars and Stripes).

• —No victim count yet from Mirae Asset LifeHELIOS found no statement during the window from Mirae Asset Life or South Korea's financial regulators giving the number of customers affected by its hacking-related leak. No notable change confirmed.

Intelligence gaps · unconfirmed

• Price conflicts: Reuters reported Brent settling at $113.88 (-1.7%) and WTI at $99.90 (-1.8%) on Oct 27, versus collected quotes of $109.74 (-0.90%) and $100.20 (-1.53%), likely a contract-month or timing difference. Only collected quotes are used in the text.
• Ras Tanura: Damage rests on the Houthi claim alone; HELIOS found no statement from Saudi Arabia's Energy Ministry or Aramco. The contained-fire report is Bloomberg's unnamed source as relayed by Reuters and Middle East Eye, and the coalition's interception of two missiles aimed at Riyadh was confirmed in one Reuters report only.
• Sinokor: Counts of PGSA-listed ships differ (122 per Seoul Economic Daily and Aju Business Daily, 125 per Maritime Executive), and Sinokor's share is described as 37% of September crude volumes (Bloomberg data via Korean outlets), 'nearly 40%' (gCaptain) and about half of all transits (Maritime Executive), which measure different things. The form of the 'legal action' and the dates of the seven VLCC attacks could not be confirmed.
• Hormuz mine claim: The IRGC's Oct 27 announcement was confirmed only through SBS, and the vessel and crew status were not disclosed. HELIOS found no CENTCOM rebuttal of this specific claim; CENTCOM's earlier rebuttal about the tanker El Gaia concerned a September incident and is not used.
• U.S. presence in Hormuz: The IRGC navy commander's name and exact words could not be confirmed, and CENTCOM's rebuttal was read only via News.az, which cited Dawn.
• Oleshky: The Oct 29 mission and Oct 30 evacuation dates come from the Kyiv Independent alone, and the BBC and CNN reports on the truce's expansion could not be opened. The 90-minute length of the Putin call appears only in search summaries and is not used.
• Israel: Seat projections vary by broadcaster (52 or 53 seats for Eisenkot's bloc), and turnout figures differ by time of measurement: 74.3% at 8 p.m. (France 24) and about 77.7% by 10 p.m. (JTA).
• Khamenei: Remarks reported by CNBC and Bloomberg about ending a state of 'neither war nor peace' and keeping control of Hormuz could not be opened at the source and are not used.
• UNM: The Record dated the attack 'Monday, October 27,' but Monday was Oct 26, which is used here. BYOD's claims of 36,000 compromised machines and stolen data are unconfirmed.
• RDIF: The New York Times report could not be opened; only Meduza's account is used. Iran International's report on Iran-Russia oil and gas projects could not be verified and is not covered.
• Pending grades: 'fed-hike-oct-2026-fomc' resolves on the Oct 28 FOMC statement, after this window closes.