Daily intelligence briefing: 3 August 2026

The week opens with the first substantive sign of an off ramp in the Gulf. President Trump called off the strikes on Iranian energy infrastructure that had been ordered for the weekend, citing requests from Saudi Arabia, the United Arab Emirates, Qatar and Iran itself, and negotiations resume today with Tehran’s foreign minister describing the Oman mediated talks on the strait as in their final stages and Washington speaking of an imminent deal. Brent has answered quickly, falling more than four per cent this morning to around 84 dollars after a 24 per cent July, though an explosion near a tanker off Khasab on Sunday is a reminder that the waterway is not yet safe. In London the Piccadilly line has failed to resume normal service this morning despite the scheduled end of engineering works, and the city faces a hot, sunny day of around 31 degrees. The digital picture is led by the Coldcard hardware wallet losses, now put at 88.6 million dollars with a third wave of thefts suspected, and by a claimed breach of client tax data at the accountancy firm EY that bears directly on wealthy families.

United Kingdom and London

The national terrorism threat level remains at SEVERE, meaning an attack is highly likely. The Metropolitan Police newsroom was quiet over the weekend, with the most recent items dating from Friday, when a man was charged over assaults on prison staff at HMP Belmarsh and an arrest in Cyprus opened the first overseas investigation under the National Security Act. The legal picture around Palestine Action has moved: the Supreme Court has granted the group’s founder permission to appeal against the proscription, with an expedited hearing expected in the autumn, but the ban remains fully in force in the meantime and expressing support for the group is still an offence under the Terrorism Act. Arrests outside Westminster Magistrates’ Court on Thursday ran into the dozens, with campaigners and police citing differing figures, and any gathering linked to the group is still best given a wide berth. The heightened awareness we have advised around United States linked premises can be maintained at a lower intensity while the negotiation track runs, but should not yet be stood down.

The weather is hot and settled, with London reaching around 31 degrees under sunny skies, high pollen levels, no rain expected and no heat alerts in force, cooling towards 27 degrees tomorrow. The transport picture has not followed the script: the Piccadilly line was expected to return to normal service this morning after its summer closure, but as of early today the line is reporting no service across its northern and eastern sections, with trains running only between Acton Town and Heathrow and the Metropolitan line and replacement buses covering the gaps. Until the line settles, Heathrow movements should continue to favour the Elizabeth line, the Heathrow Express or road transfers with generous margins, and journeys through the affected sections should be checked shortly before departure. Barons Court remains closed until November. The drought backdrop is unchanged, with drought declared across seven regions of England and eight hosepipe bans in force, including Thames Water’s covering London and the Thames Valley.

Travel corridors

The strikes ordered for the weekend were not carried out. President Trump announced late on Friday that he had called them off at the request of Saudi Arabia, the United Arab Emirates, Qatar and Iran, while adding that the United States remains ready to act if negotiations fail, and the Saudi crown prince spoke with him on Sunday to urge de-escalation. Iran’s foreign minister says the Oman mediated negotiations over the Strait of Hormuz are in their final stages, and talks resume today covering both the strait and the nuclear file, with Trump describing a new deal as imminent. Markets have priced the change rapidly, Brent falling more than four per cent this morning to around 84 dollars after its strongest monthly rise since the crisis began. The sea itself has not caught up: the United Kingdom Maritime Trade Operations agency reported an explosion in the water near a tanker some 20 nautical miles north east of Khasab on Sunday, with the vessel and crew safe, transits remain far below normal, and Iran’s foreign minister has warned that any renewed American action would draw a decisive and proportionate response.

Our travel advice is unchanged until an agreement is signed and verified at sea: all Gulf travel, including Dubai, should remain deferred, principals still in the region should hold departure options on refundable routings, and any carrier restart should be treated as reversible at short notice. Dubai International remains open with a three hour check in recommendation. Emirates has cancelled its Kuwait, Bahrain and Amman rotations, Etihad and Air Arabia continue to trim Gulf services, flydubai is broadly holding its schedule, and Qatar Airways has extended its suspension of flights to Bahrain, Erbil and Kuwait until 7 August. The longer suspensions hold, with British Airways away from the Gulf until the end of October, Lufthansa and SWISS until 13 September, which continues to bear on the Zurich corridor, and Singapore Airlines and Cathay Pacific until 24 October. The State Department’s advice to Americans across the region to consider departing stands, the American consulate in Dubai remains on ordered departure status, and the Foreign, Commonwealth and Development Office still does not advise against travel to the United Arab Emirates but warns that airports and airspace can close at short notice. In Europe the picture is steady: Paris remains in normal posture, the Monaco parcel bombing investigation reports no fresh developments, and Geneva and Zurich return to a normal weekday rhythm after the Swiss National Day weekend, with generous airport buffers still advisable, while travellers connecting through Spain should note the ground handling strike at Barcelona reported to begin today. New York is the day’s friction point: city emergency management has issued a flash flood alert for heavy rain and thunderstorms between ten this morning and six this evening, with rainfall rates of up to two inches an hour and gusts to 60 miles an hour, and with the air traffic control staffing shortfall still structural, ground stops at all three New York airports are probable, so transatlantic movements should depart before mid morning or be planned with wide margins.

Digital and privacy exposure

The Coldcard hardware wallet compromise has grown considerably since the weekend briefing. Losses are now put at around 88.6 million dollars, some 1,367 Bitcoin drained from more than 4,500 addresses, and researchers report a suspected third wave of thefts, with devices running vulnerable firmware from the affected years generating recovery seeds weak enough to be reproduced offline. The critical point is unchanged and bears repeating: updating the firmware does not repair an existing wallet. Any principal or family office holding assets on an affected device should generate a fresh seed on updated firmware and move the funds without delay, taking specialist advice on the transfer. The hotel network threat has also widened: alongside the fake update campaign that plants surveillance malware on travellers’ devices, researchers now describe compromised hotel Wi Fi gateways and captive portals being used to steal Microsoft 365 sign in tokens, giving attackers entry to corporate mailboxes without a password. The discipline for travelling principals and staff is absolute: treat every hotel and airport network as hostile, route all traffic through a trusted VPN from the moment a device connects, and never accept a software update, certificate or sign in prompt offered through such a network.

The advisers who surround wealth remain the softest route to it. A criminal group claims to have stolen client tax data from the accountancy firm EY and is threatening publication. The claim is not yet verified, but families and family offices whose affairs the firm handles should assume that convincing approaches referencing genuine tax matters may follow, verify any unexpected contact through known numbers, and ask their advisers directly what data was held and what protections apply. Elsewhere, a macOS information stealer is being distributed through fake installation guides for the Claude AI assistant, harvesting passwords and cryptocurrency wallets from those who follow them, Apple’s iOS 26.6 update patches kernel level flaws that permit deep access to the device and should be applied across the household estate, and Chrome 151 resolves 370 flaws including seven critical. The standing agenda is unchanged: never enter a sign in code you did not generate yourself moments earlier, keep unbranded streaming boxes off the main network, and hold absolutely to call back verification on any change to payment instructions.