Intelligence Briefing

Daily intelligence briefing: 12 August 2026

Daily intelligence briefing: 12 August 2026

Daily briefing12 August 2026Open source

The strait enters day 164 of closure with enforcement and diplomacy sharpening together. American forces fired two Hellfire missiles into the steering gear of a Panama flagged cargo ship overnight after it ignored warnings and attempted to run the blockade towards an Iranian port, the first kinetic action against a blockade runner in weeks, while Qatar reported that the Omani channel on future shipping arrangements is making major progress and Tehran’s Supreme National Security Council restated its price in full. Brent approached 90 dollars this morning, a sixth consecutive session of gains. London wakes to an amber heat health alert now in force through Friday evening, with today sunny at around 32 degrees and tomorrow forecast at 35 under a Met Office amber extreme heat warning, before bus strikes and the first Wembley nights arrive together on Friday. This evening’s total solar eclipse draws heavy traffic to Iceland and northern Spain. On the digital side the Coldcard attacker has gone quiet again and the fuller picture of the telephone extortion crew’s use of personal mobile numbers is now in mainstream reporting.

United Kingdom and London

The national terrorism threat level remains at SEVERE, meaning an attack is highly likely. The Metropolitan Police newsroom’s Monday output was routine for our purposes: homicide detectives are investigating the death of a woman in Islington with six people arrested, a man has been charged following the fatal collision in Stepney Green, and the supercar seizures from the antisocial driving crackdown continued to lead the releases. Nothing in the last 24 hours bears on the standing picture, the Palestine Action proscription remains fully in force, and no major public events are scheduled in central London today. The operational calm holds until Friday, when the schedule thickens sharply.

The heat is now the week’s dominant feature. The UK Health Security Agency upgraded London to an amber heat health alert as anticipated, running from 09:00 yesterday to 21:00 on Friday, signalling likely significant impacts across health and social care. Today is sunny and around 32 degrees, and Thursday is forecast at 35 with a Met Office amber extreme heat warning in force from 09:00 to midnight, which would make it the hottest day of the summer so far, easing to around 32 on Friday. The standing guidance on hydration, shade and vehicle cooling therefore applies at full weight through Friday, with particular care for older family members and staff posted outdoors. The hosepipe bans are unchanged, and the Barons Court westbound District and Piccadilly closure remains the standing rail constraint. The back of the week is unchanged in shape and now confirmed in detail: Unite’s Arriva North London walkout runs from 04:00 on Friday to 04:30 on Saturday, taking out 41 routes including night services across eight garages at Barking, Edmonton, Enfield, Grays, Palmers Green, Stamford Hill, Tottenham and Wood Green, with further blocks from the 18th to the 21st and the 25th to the 28th and dates into October, and TfL warns that planned Piccadilly line closures coincide with some strike dates. RMT members at East Midlands Railway strike again on Saturday, and The Weeknd opens five nights at Wembley Stadium on Friday, playing the 14th, 15th and 16th and returning on the 18th and 19th, so movements in north and north west London from Friday should carry generous margins, and in this heat drivers on the affected corridors should expect crowded alternatives.

Travel corridors

Hormuz produced its sharpest night in some time. American forces fired two Hellfire missiles into the steering gear of a Panama flagged cargo vessel that ignored repeated warnings while attempting to reach an Iranian port, disabling rather than destroying it, in the first kinetic enforcement of the counterblockade in weeks. The diplomacy moved in the opposite direction at the same moment: Qatar reported that the negotiations between Oman and Iran over future shipping arrangements through the strait are making major progress, President Trump, who said late last week that an agreement could come soon, described the United States as in total control of the waterway, and the Revolutionary Guards’ conditions were restated by Supreme National Security Council secretary Mohsen Rezaei in a tighter three part form: a complete end to the American war and blockade, the release of frozen assets, and a regional ceasefire. The market reads the mixture as progress with friction: Brent traded at just under 90 dollars this morning, up for a sixth consecutive session and nearly 8 per cent on the month, even as American crude inventories posted their largest weekly build since February. Our test is unchanged and unmet: no verified commercial transit has occurred, and all Gulf travel, including Dubai, should remain deferred until an agreement is not only signed but verified at sea.

The carrier picture continues its slow sorting into tiers. Emirates has still not restored Bahrain or Kuwait, while Etihad and Qatar Airways have resumed them; British Airways remains away from Dubai, Tel Aviv, Bahrain and Amman until 25 October and has dropped Jeddah permanently, with reduced frequencies to Doha and Riyadh; Lufthansa and SWISS remain away from Dubai until 13 September, which continues to bear on the Zurich corridor, with the wider group’s regional suspensions running to 24 October; Singapore Airlines is away until 24 October and Cathay Pacific until the 25th and 26th; and Air Canada holds to the middle of January 2027. The nearest term dates to watch are Air France’s, with Riyadh due back from Friday and Dubai and Beirut from the 18th, restorations that would be the first meaningful European re entries of the crisis and should be treated as reversible until flown. Specific flights should be confirmed before any movement is built around them.

In Europe the Barcelona ground handling strike has ended, and routings through the city can return to normal planning, though Madrid Barajas carries a minor residual constraint with baggage system maintenance stoppages on Thursdays, Fridays and Sundays through to the end of September. The larger Iberian factor today is the total solar eclipse, which crosses western Iceland and reaches northern Spain near sunset this evening: booking data shows a heavy surge of travel into both countries, and roads, regional airports and private aviation slots across northern Spain should be treated as congested today and tomorrow morning, with a deep partial eclipse visible from the UK, France and Switzerland during the evening. Paris remains in the heaviest week of its August engineering programme with the position as previously reported, the RER B and RER D interruptions running to Saturday, the RER C works to 22 August, Nation on the RER A closed to 30 August and metro Line 13 cut until the 17th, and the Assumption holiday on Saturday will put the network on a reduced service, so airport transfers by road with generous margins remain firmly preferable to rail. Geneva and Zurich are steady with no strike action listed, and the corridor’s main constraint is still the SWISS suspension from Dubai. Monaco is quiet, with the principality’s attention on the eclipse and the August season and no new security developments reported; the Var forest closures west of the principality continue amid the heat. New York has cleared Tuesday’s storm cleanly: the flood watch has lapsed, today is partly sunny around 30 degrees with only a small storm chance, the outlook into the weekend is settled, and the three airports have returned to normal operations, so transatlantic planning through Kennedy and Newark can resume its usual shape.

Digital and privacy exposure

The Coldcard position is unchanged in substance and firmer in documentation. The attacker has made no further movement since the transfer of just over 30 Bitcoin to a fresh wallet late last week, leaving roughly nine tenths of a haul now put at some 2,055 Bitcoin, around 130 million dollars drained from more than 5,200 addresses, sitting unmoved, and blockchain analysts continue to read that first transfer as the likely opening of a laundering route rather than its conclusion. TRM Labs’ full post mortem, now circulating widely, confirms the mechanics as previously reported: a firmware version shipped in March 2021 silently bypassed the device’s hardware randomness chip, leaving weak keys exposed on the public chain for five years. The guidance holds without change: assets on an affected Coldcard device should move to a fresh seed generated on updated firmware without delay, ownership of these devices should be treated as a matter of record, and any unsolicited offer to recover stolen Bitcoin is hostile, whatever channel it arrives through.

The telephone extortion reporting has moved from scale to method, and the method matters for families. The latest analysis of the crew tracked as UNC6671 confirms that first contact now routinely arrives on personal mobile numbers rather than corporate lines, with callers posing as helpdesk staff walking targets through urgent security migrations onto adversary in the middle pages that harvest credentials and multi factor tokens in real time, then registering the attacker’s own device for future authentication and deleting the security notifications inside Microsoft 365 and Okta as they go. The tracked payments stand at more than 10.6 million dollars for the year to mid May, with opening demands north of 3 million dollars settling near three quarters of a million, and the target set has continued its drift through hedge funds and private equity into law and finance. For family offices the personal phone is now the front door: phishing resistant authentication where systems allow it, callback verification through known channels for every credential, code and payment instruction, and access restricted to managed devices are the defences that hold. With the eclipse and the Assumption weekend drawing families abroad in peak burglary month, the standing rule against real time holiday posting from any family account applies with particular force this week.

Valorous assessment

The strait now shows both faces of an endgame at once: missiles into a blockade runner’s steering gear overnight, and the most positive third party read of the Omani channel since the crisis began. Both can be true, and neither changes our test, which remains practical and unmet: no verified transit, no change in posture, and Gulf travel, including Dubai, stays deferred, with Air France’s Friday and Monday restorations the first genuine signal worth watching. London’s week runs to script: the amber alert arrived as forecast, tomorrow is the peak of the heat, and Friday stacks the bus strike, the railway action and the first Wembley night under it, so the prudent movements this week happen before Thursday evening. On the digital side nothing new has broken and that is precisely the point: the Coldcard remediation and the callback discipline against a crew that now dials family members’ personal phones are both procedural, and both reward being done before the quiet ends.

Compiled from open sources by the Valorous Group intelligence function. This briefing is general in nature and is not client advice. Sources: GOV.UK and Counter Terrorism Policing threat level notices; Metropolitan Police newsroom; UK Health Security Agency heat health alert dashboard; Met Office forecasts and warnings; ianVisits, Unite the Union and Time Out London strike reporting; Wembley Stadium event notices; Hormuz reporting via Al Jazeera, Fox News, The Hill and CNN; oil market data via TradingEconomics; Gulf aviation reporting via The National; Spanish strike status via the Generalitat de Catalunya and sector strike monitors; eclipse travel reporting via Amadeus and NASA; Paris engineering works via Sortiraparis; Monaco reporting via Monaco Life; New York weather via the US National Weather Service; Coldcard reporting via TRM Labs, Bitcoin.com News, Fortune and The Hacker News; UNC6671 reporting via Google Threat Intelligence Group, The Hacker News and SecurityWeek, August 2026.
Confidential by design

Speak with us in confidence.

Tell us, in outline, what you need to protect. We reply promptly and privately, and only ever hold the detail you are comfortable sharing.

Previous Post
Daily intelligence briefing: 11 August 2026
Next Post
Daily intelligence briefing: 13 August 2026