Geopolitical and cyber intelligence.
Daily briefings on the United States, United Kingdom, France, Germany, Ukraine, and Turkey, with continuous monitoring of global cyber threats.
- ▸ Pentagon finalizes three Iran contingency plans; Russia rebuilds missile reserves; Ukraine hits 23 high-value targets. Global great-power tracks converge
Top Stories
Highest-priority developments worldwide
Iran Escalation Options, Russia Missile Threat, Ukraine Strikes
Washington finalised Iran strike options — an Isfahan raid, a Kharg Island assault and expanded mainland bombardment — while Trump and Xi locked in a Beijing principle barring an Iranian nuclear weapon. Putin singled out the Kinzhal and Oreshnik as suited to strikes on Europe as Berlin loses its US Tomahawk promise. Ukraine tallied 23 deep-strike targets 1,000–1,500 km inside Russia; US forces killed IS deputy al-Minuki in Nigeria; Iran flagged a new Strait of Hormuz mechanism; Putin set a China visit days after Trump's summit; and Erdoğan tied Mideast stability to ending Israel's actions.
US finalizes Iran strike package for Isfahan nuclear raid and Kharg Island as classified review shows Tehran has rebuilt 30 of 33 missile positions
The US-Israeli joint command has finalized contingency plans to broaden Operation Epic Fury against Iran if the truce talks collapse, including a special-forces seizure of enriched material at the Isfahan nuclear facility, an amphibious assault to take Kharg Island, and expanded long-range bombardment of mainland targets, US Defense Secretary Pete Hegseth and a New York Times report disclosed. Classified assessments show Iran has restored 30 of 33 missile positions along the Strait of Hormuz and retains around 70 percent of its mobile launchers and ballistic inventory and 90 percent of its underground bunkers, contradicting earlier White House statements that the Iranian military was "crushed" or "decimated." Donald Trump and Xi Jinping locked in an in-principle understanding in Beijing that Iran cannot be permitted to acquire a nuclear weapon, with Washington weighing a targeted easing of secondary sanctions on Chinese state and independent buyers of Iranian crude to keep Beijing inside the pressure regime.
US arrests Iraqi militia commander accused of orchestrating international terror attacks
US authorities have arrested and charged Mohammad Baqer Saad Dawood al-Saadi, a 32-year-old Iraqi national alleged to be a senior commander of Iran-backed Kataib Hezbollah, with orchestrating at least 18 attacks across the US, Canada, and Europe. A criminal complaint unsealed Friday in Manhattan federal court accuses him of directing firebombings, a synagogue arson, a shooting at the US consulate in Toronto, and plotting attacks on Jewish targets in New York, California, and Arizona. FBI Director Kash Patel confirmed al-Saadi was arrested overseas and brought to the US, calling him “another high-value target responsible for mass global terrorism.”
Zelensky reports week-long Ukrainian deep-strike campaign hitting 23 strategic targets up to 1,500 km inside Russia, including Ryazan refinery and Caspian fleet
Volodymyr Zelensky said in a Saturday video posted to Telegram and X that Ukrainian long-range weapons struck 23 high-value targets across mainland Russia and occupied territories this week, at depths of up to 1,000 kilometres from the front and as far as 1,500 km in the Orenburg gas case, with most operations still ongoing. Unmanned Systems Forces commander Robert "Madyar" Brovdi said drone operators executed 55 confirmed strikes destroying a Be-200 amphibious aircraft and Ka-27 helicopter at Morskoy near Yeysk, a Tor-M2 system in occupied Luhansk, a Pantsir-S1 in Crimea, an ammunition-laden cargo ship in Berdyansk port, the Ryazan oil refinery operated by Rosneft, and missile and minesweeper ships at the Kaspiysk Caspian Sea naval base. "These are our entirely justified responses to what the Russians are doing," Zelensky said, vowing to increase both the range and scale of what he called Ukraine's "long-range sanctions."
Putin's Kinzhal and Oreshnik warning, US Tomahawk reversal and an ISW April loss tally narrow Germany's deterrence window
Vladimir Putin on May 16 said Russia's missiles "have no equal" in the world and singled out the hypersonic Kinzhal and the medium-range Oreshnik as suited to strikes on Europe, the FAZ reported, the latest in a February-to-May arc of Russian threats that began with Dmitry Medvedev's nuclear warning to Ukraine's allies and ran through Security Council Secretary Sergei Shoigu's April invocation of a "right of self-defence" against Finland and the Baltic states. The Institute for the Study of War said Russia lost more territory than it gained in April and is struggling to replace its dead even as the Konrad-Adenauer-Stiftung's "Monitor Luftkrieg Ukraine" tracks the construction of a fresh Russian missile reserve. Berlin is now seeking a European replacement for the Tomahawks Washington has reportedly walked back from stationing in Germany, with CDU defence policy lead Roderich Kiesewetter calling on the Bundestag to declare an Article 80a Spannungsfall to accelerate rearmament.
Country Coverage
Daily snapshot across all six nations
Pentagon Finalizes Iran Escalation Plans as Costs Rise
Van Wounding Arrest at Unite the Kingdom March
Bardella Positions for 2027 as Khashoggi Probe Opens in Paris
Germany's Deterrence Anxiety Fuels Rearmament Debate
Ukraine Hits 23 Russian Targets in Deep-Strike Campaign
Erdoğan Sets NATO Summit Agenda on Return Flight
Cyber Threat Intelligence
Daily snapshot of attack categories, threat actors, and country exposure.
- Hax.or 20 ev
- NoName057(16) 12 ev
- Qilin 8 ev
- Dark Storm Team 7 ev
- LOCKBIT 5.0 6 ev
Recent CTI Daily Briefs
Browse past daily cyber threat intelligence briefs.
- 16 May 2026· Latest165eventsMajor Data Breaches Hit Governments, Telecoms, and Education Worldwide165 events tracked; 66 critical exposures. Qilin, LockBit active. Multiple government, telecom, and education breaches reported globally.
- 15 May 2026175eventsBlackFile Shutdown Masks Vishing Surge; Cisco Zero-Day Under Active AttackUNC6671's BlackFile brand goes dark amid ongoing vishing extortion campaigns. Cisco SD-WAN zero-day CVE-2026-20182 exploited in the wild. Major breaches hit Coinbase, Eli Lilly, and U.S. Department of
- 14 May 2026197eventsGhostwriter Targets Ukraine, Foxconn Hit by Nitrogen RansomwareQilin, Pharaoh's Team drive 197 events; Foxconn confirms ransomware; Ghostwriter targets Ukraine; critical data exposures hit India, France, Chile.
- 13 May 2026128eventsAI-Driven Patch Tuesday Surge; Government, Finance Breaches DominateMicrosoft patches 138 flaws including zero-click Outlook bug; AI tools find 16 vulns. Breaches hit Egypt Education, Indonesia BNI, US govt agencies. UK reforms cybercrime law.
- 12 May 2026157eventsCanvas ransom, Shai-Hulud npm wave, NoName DDoS surgeInstructure pays ShinyHunters for 3.65TB Canvas data; Mini Shai-Hulud npm wave hits TanStack, Mistral AI, UiPath; 56 alleged breach/leak claims.