The Korea Shipowners' Association said on Wednesday, Oct 28, after checking with Sinokor, that the vessels Iran's Persian Gulf Strait Authority (PGSA) threatened with legal action are not owned by Sinokor but sub-chartered to an overseas oil company, and that they carry only foreign seafarers, with no South Korean crew (Financial News, Arab News). Sinokor said it had 'no information' on PGSA's separate legal-action warning and was checking the details (Financial News). PGSA said on Oct 27 that Sinokor vessels 'have committed the highest number of passage violations over the past three months,' that enforcement measures had been taken against at least seven of them and that legal action would be taken against all of the company's ships from Nov 1 (Korea JoongAng Daily, Arab News). Citing Bloomberg data, Korea JoongAng Daily said Sinokor-owned tankers carried about 105.6 million barrels of crude through Hormuz in September, roughly 40% of the month's crude shipments, and noted that PGSA published a list of 45 tankers in August and warned of fines, detention or confiscation. Arab News said Gulf producers have turned to 'dark transits' with tracking systems switched off and that the U.S. is enforcing a naval blockade against Iran-linked ships. HELIOS found no statement from South Korea's Foreign Ministry or Oceans Ministry by the end of the window.

• Indicators to watch · PGSA or IRGC statements about Sinokor after Nov 1; whether the names or number of targeted ships are disclosed; safety notices from South Korea's Foreign or Oceans ministries; rerouting of Sinokor-linked tankers; war-risk premiums for Gulf loadings

• B2Israeli stocks and the shekel slip on coalition uncertaintyThe Times of Israel said the TA-125 index fell and the shekel weakened against the dollar as investors waited for clarity on a coalition. Exact moves are not collected quotes and are left out.

• B2Core OPEC+ members expected to hold December targets on SundayReuters said core OPEC+ producers are expected to keep December output targets steady at a Nov 1 meeting, with most members producing below their targets.
• C2Saudi Arabia intercepts three ballistic missiles and four dronesOilPrice.com said Saudi Arabia intercepted three ballistic missiles aimed at the Eastern Province and four drones headed for the south on Oct 27, and that debris from two missiles aimed at Riyadh damaged buildings and vehicles; Riyadh has not confirmed damage at Ras Tanura (Reuters).

U.S. Impact Assessment

• Gulf energy and infrastructureIf the post-midterm campaign the WSJ describes goes ahead, Iran has threatened economic and civilian targets across the region, and its security officials told Reuters they have plans to hit Gulf undersea cables. U.S. refiners, airlines and fuel-intensive shippers should treat the days after Nov 3 as a risk window, and cloud and telecom operators should confirm alternate routes for traffic that transits Gulf cables. Collected quotes show Brent at $111.17 (+1.61%).
• Financial-sector cyber exposureTwo of the three Korean intrusions began at peripheral systems, an account-opening integration server and a mobile groupware platform, rather than core ledgers. U.S. firms with Korean subsidiaries, brokerage partners or crypto exchange integrations should review those third-party connections and watch for phishing that uses the leaked contact and account data.
• AI hardware supply chainSK hynix's record profit, which it ties to strong AI-driven memory demand, shows how much AI infrastructure spending flows to a few Korean suppliers. U.S. buyers of AI servers should keep memory lead times and supplier concentration on their procurement risk lists.
• RatesThe FOMC decides at 2 p.m. ET today, followed by the ECB on Thursday and the Bank of Japan on Friday, and New Zealand's central bank surprised markets with a hold. Collected quotes show the 10-year yield at 4.993% (+1bp); corporate treasurers should plan for a week of rate-driven volatility.

Edition archiveRSS

• Saturday, Oct 31 · Morning Edition · 05:42 ETAttacks on ships around Hormuz hit a wartime monthly high as Trump says the Iran war will be “wrapped up soon,” Binance finds more entry points behind its $6.3 billion theft, and Seoul weighs stretching its Cheonghae naval unit toward Oman
• Friday, Oct 30 · Evening Edition · 17:44 ETTankers keep getting hit around the Strait of Hormuz as Qatari mediators carry a U.S. letter into Tehran, a tech rout hands the S&P 500 its worst day since June, and the Secret Service joins the hunt for Binance's stolen $6.3 billion
• Friday, Oct 30 · Morning Edition · 05:40 ETA small boat attached explosives to a tanker in the Strait of Hormuz, Binance was hit by a roughly $6.3 billion hack that blockchain analysts tie to North Korea, and AI-spending worries sent South Korea's KOSPI down 3.48%
• Thursday, Oct 29 · Evening Edition · 17:46 ETIran's Revolutionary Guards say three tankers hit mines on Hormuz's southern route and Houthi missiles are downed over Riyadh, as a Russian drone kills at least 14 at a Dnipro rail station and Florida discloses a student-aid breach that may affect 4.9 million people
• Thursday, Oct 29 · Morning Edition · 05:42 ETNorth Korea fires about 10 short-range ballistic missiles six days after Seoul offered military talks, as DHS says it is working to contain a leak of 40,000-plus employee records and Trump says Vance's Iran outreach was about medical aid, not peace talks
• Wednesday, Oct 28 · Evening Edition · 17:40 ETIran dismisses Qatar's draft deal as 'unacceptable ideas' amid reports that U.S. and Israeli officials expect a week of strikes after the midterms if talks fail, while a leak exposes more than 40,000 DHS employees and the Fed holds with two votes for a hike
• Wednesday, Oct 28 · Morning Edition · 05:36 ET · CurrentThe U.S. has reportedly told Gulf allies to brace for a short, intense Iran campaign after the Nov 3 midterms as oil rebounds, while three South Korean financial firms, including crypto exchange Bithumb, disclose hacks
• Tuesday, Oct 27 · Evening Edition · 17:39 ETA cyberattack forces ambulance diversions at New Mexico's only Level 1 trauma center, the Houthis claim a missile hit on Saudi Arabia's largest refinery, and Iran threatens 'legal action' against every ship run by Sinokor, the biggest crude carrier through Hormuz
• Tuesday, Oct 27 · Morning Edition · 05:44 ETA local truce takes hold in occupied Oleshky even as Russian missiles hit Kyiv's Southern Bridge and a student dorm, the Houthis fire ballistic missiles at Saudi Arabia's Eastern Province hours after the Tehran talks, and CISA confirms PHP2Shell is under attack
• Monday, Oct 26 · Evening Edition · 17:45 ETIran and three Mecca pact powers agree to keep talking after a first four-way meeting in Tehran and oil eases, but the Saudi-led coalition widens strikes on Houthi missile sites and North Korea parks self-propelled guns in plain view of the South
• Monday, Oct 26 · Morning Edition · 05:47 ETMediators converge on Tehran and oil eases, but a Houthi missile again targets Riyadh and South Korea reports its first hacking-related customer data leak at an insurer
• Sunday, Oct 25 · Evening Edition · 17:44 ETTrump says it's decision time on Iran, 'finish it off' or make a deal, but rules out a strike Sunday, as the Houthis claim a ballistic-missile barrage on Riyadh's newly reopened airport and CENTCOM's commander says Hormuz shipping lanes are clear of mines
• Sunday, Oct 25 · Morning Edition · 05:50 ETTrump says a U.S. strike on Iran could come 'maybe tomorrow' while floating a 'big, beautiful agreement,' as Houthi missiles and drones fly at Riyadh and Khamis Mushait and Musk says SpaceX throttled Ukraine over 'offensive' Starlink use
• Saturday, Oct 24 · Evening Edition · 17:43 ETA U.S. intelligence memo warns Iranian plots against Americans abroad have reached 'advanced stages' as the State Department thins out Gulf embassies, Houthi ballistic missiles fly at Riyadh, Taif and Yanbu, and Ukraine says its Starlink speed caps are gone

Three South Korean financial firms disclosed hacking incidents on Wednesday, Oct 28, Reuters reported, citing Yonhap. Daishin Securities said it detected abnormal access by a hacker on Oct 17 on a server linked to non-face-to-face account opening for discretionary investment accounts, and that 38,490 customer records covering eight data fields leaked, including names, email and home addresses, telecom IDs, bank names, and encrypted deposit-withdrawal account numbers, Daishin account numbers and mobile phone numbers (Hankook Ilbo, MTN). Daishin said there were 'no signs of secondary damage or illegal access to core business systems so far,' and that it blocked the attacking IPs, reported to regulators and is investigating with the Financial Security Institute; CEO Jin Seung-wook apologized (Hankook Ilbo). Bithumb said an unauthorized outsider accessed its mobile groupware system on Oct 27, that a leak of employee data has been confirmed and that it is still analyzing whether member data was included (MTN, Reuters). Mirae Asset Global Investments said it found signs of abnormal access from external IPs on some web systems and blocked the path, adding that the affected systems are internal rather than customer-facing and that no leak of personal credit information has been confirmed (MTN). The Financial Supervisory Service sent on-site inspection teams to Daishin and Bithumb and will turn the reviews into formal examinations if it finds violations (MTN). Reuters said the incidents follow a wave of hacks at 16 South Korean financial firms, including banks, that the Financial Services Commission said earlier this month had caused around 100,000 data leaks.

• Indicators to watch · Whether Bithumb confirms member data was exposed; whether the FSS turns its on-site checks into formal examinations; the final scope at Mirae Asset Global Investments; any new security measures from the Financial Services Commission; notices from other brokerages about account-opening integration servers

Ukraine's human rights ombudsman Dmytro Lubinets and Russia's ombudsperson Yana Lantratova both said on Wednesday, Oct 28, that the local ceasefire in occupied Oleshky had held for 30 hours without a violation (AP, Kyiv Independent). AP said the six-day truce began Tuesday and runs through Sunday, with the aim of delivering food and medicine to about 2,000 remaining residents and evacuating those who wish to leave. The White House said U.S. first lady Melania Trump brokered the humanitarian mission, and Pope Leo XIV spoke with both Volodymyr Zelenskyy and Vladimir Putin, urging them to allow aid and safe evacuation (AP). 'We are grateful that they are organizing this possibility to evacuate people,' Zelenskyy said (AP). Outside the truce zone, Russian attacks killed two people and injured 17 over the past day, and overnight Russia launched one ballistic missile and 88 Shahed drones, 71 of which Ukraine said it shot down (Kyiv Independent). AP said U.S.-led plans aim to bring Russian and Ukrainian officials to technical talks next month, though neither side shows signs of dropping key demands.

• Indicators to watch · Entry of the humanitarian mission and the first announced evacuations; demining of the access route; whether the truce is extended past Nov 1; a date for next month's technical talks; Russian strikes outside Kherson

• C3Taiwan tracks six Chinese military aircraft and several ships in 24 hoursTaiwan News said Taiwan's defense ministry tracked six aircraft, six naval vessels and one official ship from 6 a.m. Tuesday to 6 a.m. Wednesday, bringing October's totals to 175 aircraft and 329 ship sightings.
• —No JCS confirmation of North Korean loudspeaker broadcastsHELIOS found no announcement during the window from South Korea's Joint Chiefs of Staff confirming that North Korea has started the border loudspeaker broadcasts Kim Yo Jong said would run by the end of October. No notable change confirmed.

Intelligence gaps · unconfirmed

• Price conflicts: Reuters reported Brent at $115.90 (+1.8%) and WTI at $101.91 in Asian trade on Oct 28, and OilPrice.com had Brent at $115.70, versus collected quotes of $111.17 (+1.61%) and $101.80 (+1.90%); AP had Brent at $111.10. These likely reflect contract-month and timing differences. AP put the Kospi at 6,023.73 (+6.8%), versus 6,012.44 (+6.63%) in collected quotes and Korea JoongAng Daily. Only collected quotes are used in the text.
• Korean financial hacks: Hankook Ilbo describes Daishin's leak as 38,490 records, while MTN says 38,490 customers. Whether Bithumb member data was exposed, and what data Mirae Asset Global Investments lost, remain unconfirmed. Reports of a police preliminary inquiry could not be opened and are not used.
• WSJ report: The original could not be opened; it was confirmed only through investingLive and Aaj English TV, and it relies on unnamed people briefed on the conversations. The White House did not confirm that any plan exists.
• Qatar draft: Reuters cites a single official briefed on the talks; whether the draft covers the Strait of Hormuz and which countries would act as guarantors could not be confirmed, and HELIOS found no official U.S. or Iranian reaction.
• Ras Tanura: Damage rests on the Houthi claim alone; HELIOS found no statement from Saudi Arabia's Energy Ministry or Aramco. The interception counts come from OilPrice.com alone.
• Sinokor: The association says the targeted ships are sub-chartered rather than Sinokor-owned, but the names and number of those ships, and what PGSA's 'enforcement measures' against at least seven ships involved, could not be confirmed. No statement from South Korea's Foreign or Oceans ministries was found. Sinokor's September share is described as 37% (prior edition, Bloomberg data via Korean outlets) and about 40% (Korea JoongAng Daily).
• Israel: Seat counts differ by time of count: 54, 47 and 19 seats at 76.8% counted (Times of Israel) versus 54, 48 and 18 at 72% (Al Jazeera).
• Taiwan: The Taiwan News headline says eight Chinese ships, while the body lists six naval vessels and one official ship.
• Palm Beach air defenses: Confirmed through WFLX alone; how long the systems will stay has not been disclosed.
• Unverified: Reports of a U.S. Eighth Army commander warning about North Korean combat experience, BBC's report on cruise passengers stranded in Cambodia by fuel costs, and a Korean report that SK hynix has sold out three years of output could not be opened and are not used.
• Grading notes: Daishin's Oct 28 disclosure of a hacking-related customer data leak appears to meet the criterion for 'kr-financial-hack-new-disclosure-oct31' (a new disclosure by a South Korean financial company between Oct 17 and Oct 31). The Register's report that CISA added both PHP2Shell CVEs to KEV on Oct 26 appears to meet the criterion for 'cisa-kev-php2shell-nov5'. 'fed-hike-oct-2026-fomc' resolves on the Oct 28 FOMC statement at 2 p.m. ET, after this window closes.

The Wall Street Journal reported that the United States has told several Gulf Arab countries to prepare for a possible short, intense military campaign against Iran after the Nov 3 midterm elections, citing people briefed on the conversations (as relayed by investingLive and Aaj English TV). According to the report, a Patriot air defense system is being moved to the region from Texas, another carrier strike group and a Marine expeditionary unit are set to join roughly 20 U.S. warships already deployed, and President Trump, who has not decided, leans toward a large post-election strike on infrastructure and nuclear sites. Trump had earlier pledged not to attack Iran before the midterms, and the White House, declining to discuss 'sensitive military plans that may or may not exist,' said it was keeping 'all options open to prevent Iran from acquiring a nuclear weapon' (Aaj English TV). Separately, Reuters reported that Qatari mediators handed Iran a new draft deal in Tehran on Sunday, Oct 25, setting a seven-day timeline of daily confidence-building steps by each side, with several countries acting as guarantors; an official briefed on the talks said Tehran is expected to respond by the end of the week. In the same report, Reuters said Iranian security officials told it Tehran had drawn up detailed plans to attack Gulf undersea cables if the U.S. and Israel resumed strikes. Oil rebounded after the Houthis claimed a ballistic missile hit on Saudi Arabia's Ras Tanura refinery, which Saudi authorities have not confirmed (Reuters, OilPrice.com). Collected quotes show Brent at $111.17 (+1.61%) and WTI at $101.80 (+1.90%).

• Indicators to watch · Movements of the additional carrier strike group and the Patriot battery around Nov 3; Iran's reply to Qatar's draft by the weekend; White House or Iranian Foreign Ministry statements; any damage report on Ras Tanura from Saudi Arabia's Energy Ministry or Aramco; warnings about Gulf undersea cables

SK hynix reported record third-quarter revenue and operating profit on robust memory demand tied to the AI boom and announced a shareholder return program worth more than 100 trillion won ($75.3 billion) (Korea JoongAng Daily); AP put the quarter's operating profit at a record 83.3 trillion won ($62.8 billion). Collected quotes show the Kospi closing at 6,012.44 (+6.63%). Korea JoongAng Daily said a buy-side sidecar halted program buy orders for five minutes after Kospi 200 futures rose at least 5%, and that foreign investors and institutions were net buyers of 815.83 billion won and 960.79 billion won, respectively, while individuals sold a net 1.8 trillion won. AP said Samsung Electronics and Japan's Kioxia also rallied and that markets in Japan and Taiwan rose. Collected quotes show USD/KRW at 1,338.28 (+0.86%), meaning the won weakened even as stocks surged.

• Indicators to watch · The FOMC decision at 2 p.m. ET and foreign flows into Korean chip stocks; USD/KRW; earnings from other memory and AI hardware makers; the Bank of Japan decision on Friday

• B1Israel's count leaves Netanyahu's bloc at 54 seats, short of a majorityWith 76.8% of ballot boxes counted, the Times of Israel put Netanyahu's bloc at 54 seats, Eisenkot's at 47 and Arab parties at 19, against the 61 needed. Al Jazeera said the final tally is expected by Friday, official results on Nov 4, and the nominee will have up to 42 days to form a government.
• B2Russia keeps striking outside the Oleshky truce zoneThe Kyiv Independent said overnight attacks hit eight locations, with debris at two more, and that one person each was killed in Dnipropetrovsk and Donetsk oblasts over the past day.

• C2CISA added the two PHP2Shell flaws to KEV on Oct 26 with an Oct 29 deadlineThe Register said CVE-2026-109618 and CVE-2026-109619 allow unauthenticated remote code execution and that Delft University's threat intelligence lab tracked more than 50,000 exploitation requests from over 600 IP addresses in 70 countries.
• —No victim count yet from Mirae Asset LifeHELIOS found no statement during the window from Mirae Asset Life or South Korea's financial regulators giving the number of customers affected by its hacking-related leak. No notable change confirmed.

Watchlist next 12–48 hours and beyond

• Wed, Oct 28, 2 p.m. ET
  FOMC decision, followed by Chair Kevin Warsh's press conference
• Thu, Oct 29–Fri, Oct 30
  ECB decision (Thu, 9:15 a.m. ET) and Bank of Japan decision (Fri); Swiss Foreign Minister Ignazio Cassis in Pyongyang to open Switzerland's diplomatic office
• By Sat, Oct 31
  Iran's expected reply to Qatar's draft deal; North Korea's self-declared October deadline for border loudspeakers and whether the JCS confirms broadcasts
• Sun, Nov 1
  PGSA's legal action against Sinokor-linked vessels is due to start; core OPEC+ members meet on December output; the Oleshky truce is scheduled to end at 10:59 p.m. Kyiv time (3:59 p.m. ET) unless extended
• Tue, Nov 3
  U.S. midterm elections, the point after which the WSJ says a U.S. campaign against Iran could begin
• Wed, Nov 4
  Official publication of Israel's election results (per Al Jazeera) and the start of coalition consultations

Sources 22

• T
  The Star (Reuters)Three South Korean financial firms including Bithumb report data breaches, Yonhap says
  B
• H
  Hankook IlboDaishin Securities leaks over 38,000 personal data records; Mirae Asset Global Investments and Bithumb also breached (translated)
  B
• M
  MTN (Money Today Network)Hacking incidents at Bithumb, Mirae Asset Global Investments and Daishin Securities; FSS begins on-site inspections (translated)
  B
• K
  Korea JoongAng DailyKospi surges past 6,000 as SK hynix record earnings reignite AI rally
  B
• W
  WSLS (AP)Shares in Asia rise after a rally on Wall Street, and oil prices gain more than 1%
  B
• Y
  Yahoo News (Reuters)Qatari mediators present Iran with new deal to end the war, official says
  B
• i
  investingLiveUS warns Gulf allies of possible short, intense Iran campaign after midterms: WSJ
  C
• A
  Aaj English TVUS tells Gulf allies to prepare for possible post-election attack on Iran
  C
• G
  Global Banking & Finance Review (Reuters)Oil up over $2 as Saudi Arabian refinery attack reignites supply risk concerns
  B
• F
  Financial News (fnnews)Shipping association: vessels Iran warned of legal action are not owned by Sinokor (translated)
  B
• A
  Arab NewsIran says Sinokor vessels face legal action; South Korean shipowners deny link
  B
• K
  Korea JoongAng DailyIran warns Sinokor of legal action over Strait of Hormuz violations
  B
• T
  The Kyiv IndependentCeasefire in Oleshky enters 30th hour as Russian strikes kill 2, injure 17 elsewhere in Ukraine over past day
  B
• W
  WSLS (AP)A ceasefire in a devastated Ukrainian city holds for its first 30 hours, officials say
  B
• T
  The Times of IsraelLikud-led bloc leads count with 54 seats, short of majority; Eisenkot-led bloc at 47, Arab parties at 19
  B
• A
  Al JazeeraFive key takeaways from Israel's parliamentary elections
  B
• N
  NZ CityA surprise decision by the Reserve Bank's Monetary Policy Committee this afternoon - keeping the Official Cash Rate unchanged at 2.75 percent
  C
• S
  SecurityWeekCISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
  C
• T
  The RegisterCISA confirms PHP2Shell under attack as researchers clock successful exploits
  C
• N
  News1Swiss foreign minister to visit North Korea Oct 29–30, opening a diplomatic office in Pyongyang for the first time in 52 years (translated)
  B
• T
  Taiwan NewsTaiwan tracks 8 Chinese ships, 6 military aircraft
  C
• W
  WFLXSurface-to-air missile systems deployed near Trump airport, Mar-a-Lago in Palm Beach
  C