Geopolitical and cyber intelligence.
Daily briefings on the United States, United Kingdom, France, Germany, Ukraine, and Turkey, with continuous monitoring of global cyber threats.
- ▸ Iran war ceasefire collapses after 50 hours; Ukraine pause violated within hours. Western alliance disagreements surface as Trump
- ▸ Netanyahu
Top Stories
Highest-priority developments worldwide
Two Ceasefires in Iran, Ukraine as Western Alliance Splits
Trump's Project Freedom safe-zone in the Strait of Hormuz collapsed after 50 hours; leaked CIA assessments put Iran's surviving stockpile at 70 percent of missiles, CENTCOM disabled two Iranian tankers, and the Trump-Netanyahu alliance showed visible strain. Hezbollah claimed 26 attacks Friday, two inside Israel; the UAE reported a fresh Iranian strike. The US-brokered May 9-11 Ukraine ceasefire took effect even as Russian drones killed civilians in Polohy and Chernihiv. Four retired generals warned in the F.A.S. of a five-year window for a Russian probe into the Baltics.
Trump's 'Project Freedom' safe-zone in Strait of Hormuz collapses after 50 hours as Iran retains 70% of missile stockpile
Donald Trump's unilateral Project Freedom — a safe-shipping zone on the Omani side of the Strait of Hormuz protected by more than 100 fighter jets and several naval destroyers — collapsed after 50 hours, defeated by Saudi objections, an absence of consultation with the shipping industry, and the fact that only two merchant vessels used it. Leaked CIA assessments put Iran's surviving capability at 70 percent of its missiles, 75 percent of its launchers and roughly half of its Shahed attack drones, while a leaked US intelligence estimate, published this week by the Washington Post, gives Tehran three to four months before more severe economic hardship sets in.
Russian FPV drone kills 67-year-old driver in Polohy district as US-brokered May 9-11 ceasefire takes effect
A Russian FPV drone struck a civilian car in the Polohy district of Ukraine's Zaporizhzhia region on May 9, killing the 67-year-old driver on the spot and injuring a 62-year-old man and a 61-year-old woman, hours into a US-brokered May 9-11 humanitarian pause meant to enable an exchange of 1,000 prisoners on each side. The same overnight Russian assault, launched at 18:00 on May 8 with one Iskander-M ballistic missile from Crimea and 43 drones, also killed a 70-year-old man and his 49-year-old son in a strike on an agricultural enterprise in the Chernihiv region's Novhorod-Siverskyi district.
Four retired generals tell F.A.S. NATO faces a five-year window in which Russia could attack the Baltics, with Germany pulled in as logistics hub
Air Marshal Greg Bagwell (UK), Lt Gen Ben Hodges (US), Maj Gen Mick Ryan (Australia) and Lt Gen Jürgen-Joachim von Sandrart (Germany) told the Frankfurter Allgemeine Sonntagszeitung that Russia could attack NATO inside roughly five years, most likely a limited push into the Baltics designed to test Article 5 — and that Germany would be drawn in because every major NATO supply route runs through it. Bagwell put the window at "perhaps five years"; Von Sandrart said the greatest danger runs "until" 2029, not from it. The warnings land as Donald Trump moves to pull at least 5,000 US troops from Germany and shelve the Tomahawk battalion Joe Biden had pledged for this year, depleted further by the $25 billion Iran campaign.
Labour MP Catherine West threatens to collect signatures for a leadership contest by Monday after Starmer loses 1,400 council seats
Catherine West, Labour MP for Hornsey and Friern Barnet and a former junior Foreign Office minister, told the BBC's PM programme she will start collecting signatures from the Parliamentary Labour Party on Monday morning to trigger a leadership contest if no cabinet challenger to Keir Starmer has emerged. Her preferred outcome, she said, is a cabinet reshuffle that moves Starmer to an "international role." Labour has lost more than 1,400 English council representatives, control of Bradford, Calderdale, Wakefield, Leeds and Barnsley — the latter ending more than 50 years of Labour rule — and First Minister Eluned Morgan's Senedd seat in Wales, where Ken Skates has taken over as interim leader.
Country Coverage
Daily snapshot across all six nations
Gulf War Trump Cannot End Opens Cracks in Netanyahu Alliance
Labour Loses 1,400 Council Seats as Reform UK Surges
59 Arrested at Far-Right March in Paris; RN Struggles for Loan
German Generals Warn Russia Could Attack NATO by 2029
Russia-Ukraine Truce Shatters as Drones Kill Civilians
Turkey Triangulates Iran War, Cyprus, Iraq in One Day
Cyber Threat Intelligence
Daily snapshot of attack categories, threat actors, and country exposure.
- The GODFATHER of all 22 ev
- xorcat 13 ev
- Qilin 11 ev
- Dark Storm Team 7 ev
- Hider_Nex 6 ev
Recent CTI Daily Briefs
Browse past daily cyber threat intelligence briefs.
- 9 May 2026· Latest188eventsGODFATHER of All Actor Claims Massive Data Leak Targeting Finance, GovernmentActor The GODFATHER of all claims breaches of BlackRock, Vanguard, Palantir, and others. XORCAT and Qilin remain active. Critical infrastructure and healthcare targeted.
- 8 May 2026181eventsCanvas Breach, Water ICS Attacks, and Data Leak Surge Hit Global TargetsShinyHunters claims 9,000 schools impacted by Canvas breach; Polish water plants hit by ICS attacks; 74 critical data exposures include US DoD, Taiwan Military, and financial firms.
- 7 May 2026132eventsData Leak Surge Targets Telecoms, Government; Cisco Patches Critical Flaws32 critical data exposure events today, led by telecom and government leaks in France, Canada, and Israel. Cisco and PAN-OS zero-day patches urgent. Cloud worm PCPJack steals credentials at scale.
- 6 May 2026159eventsCritical Palo Alto Zero-Day, Supply-Chain Attack on Daemon Tools, and WidespreadPalo Alto PAN-OS zero-day exploited in the wild; Daemon Tools supply-chain attack; MuddyWater false-flag ransomware; 54 critical data exposures including US, Brazil, France, and Indonesia.
- 5 May 2026185eventsCritical Linux Kernel Flaw, Apache HTTP/2 Bug, and Data Breaches SurgeToday's brief covers a critical Linux kernel LPE, an Apache HTTP/2 RCE, and a DAEMON Tools supply chain attack. Over 50 data exposure events hit Israel, Mexico, and Ecuador, with Cinzz and NoName057(1