Daily intelligence briefing: 24 August 2026

The ballot has landed and Tuesday’s doubled friction is now confirmed. Unite announced over the weekend that Arriva’s north London drivers have rejected the company’s offer on hot weather working, so the four day strike block across more than 40 north and east London routes begins tomorrow, the same day the Piccadilly line closes between Cockfosters and Uxbridge until Thursday, and further strike dates have been published deep into September. In the Gulf, today is the day Washington has been building towards: Secretary Bessent takes the podium at 2pm Washington time, 7pm in London, to detail what he has called the most sweeping coordinated economic isolation campaign in American history, with oil smuggling routes, exchange houses, ship registries and front companies among the declared targets. Brent eased to just under 93 dollars this morning as traders took profits ahead of the announcement, still up some 35 per cent on the year. Monaco has completed its handover: the Vuelta departed for Manosque yesterday, roads have reopened and normal movement resumes today, and Paris recovers its RER A this morning. Our travel test for the Gulf remains unmet: all Gulf travel, including Dubai, stays deferred.

United Kingdom and London

The national terrorism threat level remains at SEVERE, meaning an attack is highly likely. The weekend passed quietly on the public record: the Metropolitan Police newsroom published nothing new after Friday afternoon’s entries, which covered the investigation into the death of a 52 year old man in custody in Croydon, the murder investigation opened after bones found in Feltham were identified as human remains, and the guilty pleas from the gang caught tunnelling towards a south London jewellery shop as part of a series of break ins totalling more than 700,000 pounds. No major incident had been declared in the capital as of this morning. The seasonal advice now enters its final week: with many families still away until the school term resumes, the domestic perimeter, including fire and smoke detection alongside intrusion, should be treated as live rather than theoretical, and the Tooting tunnelling case remains the reminder that patient, researched attacks on high value premises are a current method in this city.

Movement planning for the week is now settled, and it is unwelcome. Unite confirmed that members have rejected Arriva’s offer, judging that it did not go far enough on hot weather working, with cab temperatures reported at around 40 degrees and the existing cooling systems taking off only two or three. Strike action therefore resumes tomorrow and runs to Friday the 28th, involving more than 1,500 drivers across the Barking, Edmonton, Enfield, Grays, Palmers Green, Stamford Hill, Tottenham and Wood Green garages and more than 40 routes across north and east London. Further blocks have been announced for the 4th and 5th, 7th and 8th, 18th and 19th, and 21st and 22nd of September, so this dispute now shapes movement planning for a month. Tomorrow is also the first day of the Piccadilly line’s midweek closure between Cockfosters and Uxbridge, running to Thursday the 27th, with the Metropolitan line operating normally between Rayners Lane and Uxbridge; Barons Court remains inaccessible to westbound District and Piccadilly trains into November. The next crowd fixture is Notting Hill Carnival this coming weekend: the ticketed Panorama competition on Saturday the 29th, J’Ouvert from sunrise on Sunday the 30th and the main parade on bank holiday Monday the 31st, with some two million attendees expected, stations liable to close on crowding, and the public debate over stewarding and funding still unresolved. The weather is benign: sunny intervals and around 23 degrees today with a brisk wind, warming towards 26 midweek, and no Met Office warnings are in force for London.

Travel corridors

Hormuz enters day 176 with the economic weapon finally being unsheathed. Secretary Bessent’s press conference is set for 2pm Washington time today, 7pm in London, and the advance briefing is expansive: a package described as the most sweeping coordinated economic isolation campaign in American history, targeting oil smuggling routes, swap lines, cash transfers, exchange houses, ship registries and front companies, with the declared objective of collapsing the regime’s finances on the Venezuela and Cuba model. The open question remains China, which buys more than 80 per cent of Iran’s shipped oil, has rejected Washington’s framing, and is due to send President Xi to Washington in September; whether Chinese financial institutions are named today is the detail that will move markets. Tehran’s signals remain split: its central bank governor concedes that oil exports have effectively fallen to zero, it has finalised a trade agreement with Oman that goes to its parliament next month, and Iraqi tankers continue to receive protected passage through the strait, yet the June memorandum expired on Saturday without a framework agreement and the military leadership continues to promise devastating responses to any miscalculation. Conditions at sea are unchanged and severe: two to three very large crude carriers transit daily against eight before the war, 67 commercial vessels remain blocked under the US measures, and war risk premiums sit at multiples of their pre war level. Brent eased to about 92.95 dollars this morning, down around one and a half per cent as traders took profits ahead of the announcement, still up some 35 per cent on the year. Pakistan’s army chief arrives in Tehran today and the Saudi crown prince meets President Macron in Paris, a reminder that the diplomatic channels have not closed even as the financial ones do.

The carrier ladder faces its test tomorrow. Air France’s Dubai and Beirut resumptions remain pencilled for the 25th with no announcement either way as we compiled, and after a week that produced the UAE’s full suspension of trade, commercial exchange and financial transactions with Iran, a further extension remains the base case; the airline itself says resumption depends on its assessment of a rapidly evolving security situation. The rest of the ladder is unchanged on paper: Emirates operates its single daily Dubai to Bahrain rotation with Kuwait still suspended, KLM remains away from Riyadh, Dammam and Dubai until 6 September, British Airways from Dubai, Tel Aviv, Bahrain and Amman until 25 October with Jeddah dropped permanently, Lufthansa and SWISS from Dubai until 13 September, which continues to bear on the Zurich corridor, Singapore Airlines and Finnair until 24 October, Cathay Pacific until the 25th and 26th of October, United’s rebooking options run to 7 September, Air Astana to the end of the month and Air Canada to the middle of January 2027. Specific flights should be confirmed before any movement is built around them.

Monaco is back. The Vuelta rolled out from Place du Palais Princier yesterday and left for Manosque, closures lifted progressively behind the caravan, and the Principality returns to normal movement today; anything held over the race weekend can now move. Paris recovers its eastern artery this morning: the RER A reopens between Vincennes and Noisy le Grand after the summer engineering block, though Nation station on the line remains closed to the 30th, tram T1 stays suspended between Asnieres Quatre Routes and Gare de Saint Denis into late summer, and residual works elsewhere on the network run into early September. Geneva recorded no overnight development; the burglary series against prominent lakeside residences remains the standing concern, and the guidance on residential security and social media discipline is unchanged. Zurich’s constraint remains the SWISS suspension from Dubai. New York is operating normally, though the structural warning stands: air traffic control staffing in the New York area remains chronically short, slot waivers at JFK and LaGuardia have been extended into 2027 precisely because of it, and late August storm cells can produce ground stops at short notice.

Digital and privacy exposure

Both standing cases hold their shape. The Coldcard tally remains at between 112 and 116 million dollars, roughly 1,778 Bitcoin drained across more than 4,500 affected addresses, and the guidance is unchanged: seeds generated on affected firmware between March 2021 and the patch remain compromised regardless of the firmware now installed, funds should be moved from any potentially affected wallet via a clean device, and every unsolicited approach concerning recovery should be treated as hostile. UNC6671 likewise: the group, built around former BlackFile affiliates, runs extortion under at least four brands, Redact, Pink, Helix and Falcon, its operators call employees on their personal phones posing as IT help desks, harvest credentials and MFA tokens through adversary in the middle pages, and steal from Microsoft 365 and Okta estates before demanding payment, with hedge funds and private equity firms confirmed among recent victims alongside the legal sector. The lesson for family offices is unchanged: the advisers, lawyers and managers around a family hold the family’s data, and attackers have noticed. The controls are the same ones we listed last week: phishing resistant authentication actually enforced, single sign on with session controls, access restricted to managed devices, and callback verification through known channels for every credential and payment instruction.

Today’s designations move the cyber question from theory towards timetable. A sanctions programme designed to sever Iran from the financial system invites retaliation in the domain where Tehran can reach furthest at least cost, and this evening’s announcement is the trigger event; FINRA’s heightened warnings to the financial sector and CISA’s standing advisory on Iranian exploitation of industrial control systems both remain in force. For principals and their offices the implications remain practical rather than dramatic: out of band verification for payment instructions, offline copies of critical records, and continuity arrangements that do not depend on a single bank, communications channel or cloud tenant. The social media lesson carries added weight this week: Carnival weekend and the last days of the holiday season are precisely when burglary gangs harvest real time location signals, so posting discipline from family, staff and guest accounts remains the cheapest exposure to close.