Daily intelligence briefing: 1 August 2026

Iran’s promised punishment has begun to take shape at sea rather than in the air. The Islamic Revolutionary Guard Corps says it struck and halted two tankers attempting to transit the Strait of Hormuz under American air escort, claiming four more turned back, and traffic through the waterway has fallen to roughly a third of pre conflict levels, with only a handful of departures recorded early on Friday. Brent closed July around 89 dollars and 50 cents, a monthly gain of some 22 per cent. Saudi Arabia has convened close to 50 nations in Riyadh to build a maritime coalition for the Red Sea and the Gulf of Aden, while Washington reports progress on a Gaza disarmament road map even as both capitals continue to trade threats. In London the weekend turns on the Piccadilly line closure, which removes the Heathrow branch until Monday, under fine, dry skies of around 25 degrees. The digital picture rotates towards the sign in screen and the sitting room: a surge in device code phishing that Microsoft counts at 10 to 15 new campaigns every day, and a Chrome update fixing more than 1,400 flaws that household devices should take promptly.

United Kingdom and London

The national terrorism threat level remains at SEVERE, meaning an attack is highly likely. The most notable development in the past 24 hours is an arrest in Cyprus as part of the first overseas investigation under the National Security Act led by Counter Terrorism Policing London, a reminder that state threat casework now runs well beyond the capital. Separately, a man faces charges for assaulting several members of staff at HMP Belmarsh. The public order picture carries over from Thursday, when the Metropolitan Police arrested dozens at a rally in support of Palestine Action outside Westminster Magistrates’ Court; expressing support for the proscribed group is an offence under the Terrorism Act, and further arrests around related hearings and weekend gatherings remain likely, so any assembly linked to the group is best given a wide berth. A period of heightened awareness around United States linked premises remains prudent while the Gulf escalation runs.

The weather is set fair and a touch cooler. London reaches around 25 degrees today under mostly sunny skies with no rain expected, and the amber heat alerts have not returned. The dominant planning factor remains the railway. The Piccadilly line closure is now in its main phase: there is no service between Cockfosters and Heathrow on Saturday and Sunday, the whole line closes during the overnight hours, and Finsbury Park station is shut all weekend, with Barons Court closed until November. Heathrow movements should favour the Elizabeth line, the Heathrow Express or road transfers with generous margins. Sunday brings additional Overground and DLR closures, including no trains between Tower Gateway and Shadwell and gaps on the Windrush and Lioness lines. The drought backdrop is unchanged, with hosepipe restrictions still covering more than 20 million customers across England, and the summer peak continues at Heathrow, Gatwick and the Eurostar terminals, where extended check in buffers remain advisable.

Travel corridors

The strait is now the story. The Islamic Revolutionary Guard Corps announced on Friday that it had struck and halted two oil tankers attempting to transit the Strait of Hormuz by what it called an unauthorised route under American air escort, and claimed four further tankers turned back; Washington has not confirmed the strikes, but shipping data tell their own story, with transits running at 30 to 35 per cent of pre conflict levels and only four commodity vessels departing early on Friday against a normal 125 to 140. Brent rose to around 89 dollars and 50 cents, up some 22 per cent for July, and analysts now frame an 80 to 100 dollar range with the market trading the shipping data rather than the war. The retaliation Iran promised has otherwise arrived in fragments: Jordan intercepted five missiles, Kuwait downed drones after an attack on Ahmad al Jaber air base in which a worker died, and a drone struck an American owned vessel in an Egyptian port. Saudi Arabia convened nearly 50 nations in Riyadh to stand up a maritime coalition for the Bab al Mandeb, the Red Sea and the Gulf of Aden, with 14 countries pledging support, and is reported to be preparing an offensive against the Houthis. On the diplomatic track, Washington reports that Hamas has accepted a detailed disarmament road map expected to run seven to eight months, and the American administration speaks of friendly talks with Tehran even while declaring itself locked and loaded. Our advice is unchanged: all Gulf travel, including Dubai, should remain deferred, principals still in the region should depart early on refundable routings, and partial carrier restarts should be treated as reversible at short notice. Etihad, Air Arabia and Qatar Airways cancelled further Bahrain and Kuwait rotations on Friday while Emirates and flydubai held full schedules, 13 international carriers remain suspended from Dubai until October, and the European Union Aviation Safety Agency has extended its conflict zone advisory for the region to 31 August, with rerouted services running one to three hours longer.

In Europe, the picture is steady. The Foreign, Commonwealth and Development Office still does not advise against travel to the United Arab Emirates, though it warns conditions could shift at short notice, and standing advice holds across European capitals: a low profile near community and faith locations and near American diplomatic and commercial premises while the escalation runs. Paris remains in normal posture. In Monaco, the manhunt for the identified parcel bombing suspect continues across Europe, and parcel and courier discipline holds for principals with commercial exposure to Ukraine or Russia. Geneva and Zurich remain the weakest links in the European corridor, again posting hundreds of delayed flights on the worst days this week, so generous airport buffers remain advisable with hold luggage best avoided where practical. New York remains the weakest transatlantic node: the latest wave of disruption saw around 500 cancellations and more than 4,000 delays across the three fields as thunderstorms compounded the air traffic control staffing shortfall the Federal Aviation Administration expects to persist into next year. The disruption should continue to be treated as structural for the remainder of the summer, and transatlantic movements should carry generous margins and favour morning departures.

Digital and privacy exposure

The week closes with two developments that bear directly on households and family offices. Microsoft reports that device code phishing has escalated sharply, with 10 to 15 entirely new campaigns appearing every 24 hours: the attacker persuades the target to enter a short code at a legitimate Microsoft sign in page, which quietly grants the attacker access to the account without any password being stolen. The rule for family members and staff is simple: never enter a device code you did not generate yourself moments earlier on your own device, and treat any message urging you to do so as hostile. Alongside this, Google has shipped a Chrome update resolving more than 1,400 vulnerabilities across recent versions, the largest batch in years; Chrome on household computers, and browsers built on it, should be updated without delay. A third finding touches the sitting room: cheap Android television boxes have been found running advertising fraud and quietly renting out the household internet connection as a proxy for third parties, and the standing advice is to buy streaming hardware only from reputable manufacturers and to keep unknown devices off the main household network.

Two further items round out the picture. Researchers have detailed a spear phishing campaign against law firms using the HollowFrame loader and a Rust based backdoor, a reminder that the professional advisers who hold family documents remain a soft route to the principal; it is reasonable to ask counsel and other advisers what protections they have in place. In the United States, a cyberattack on municipal water systems in Minnesota has been attributed to Iranian hackers, though investigators caution the attackers may be impersonating Iranian operatives, and utilities and estates with building management systems should treat remote access hardening as current business. The standing agenda otherwise remains as set out this week: documents from outside the trust boundary should not be processed with Copilot for Word enabled while the hidden prompt flaw is mitigated, fake macOS update screens urging Terminal commands remain in circulation and Apple devices update only through System Settings, and call back verification on any change to payment instructions holds absolutely.