Daily intelligence briefing: 11 October 2026

The war has had its bloodiest day in Saudi Arabia, and Washington’s promise of restraint is under examination within forty eight hours of being given. Saturday’s strike on King Khalid International, the third in a week, killed twelve people including an American citizen and wounded more than three hundred, and the American president, who said on Thursday there would be no strike on Iran before 3 November, now says the United States may join the war against the Houthi movement and will decide very quickly. Overnight the Revolutionary Guard said a supertanker struck a naval mine leaving the Strait of Hormuz by what it calls an unauthorised route, and American forces disabled a cargo vessel in the Gulf of Oman with a precision munition from a fighter aircraft.

United Kingdom and London

The national terrorism threat level remains at SEVERE. The Fairford investigation has produced no new public developments in the past twenty four hours: all seven men remain on police bail, the inquiry continues with the Central Criminal Court hearing on 23 October as the next procedural marker, and the base itself sits quieter following the withdrawal of the B-1 force to the United States. The death of an American citizen in the Riyadh airport attack will sharpen rather than soften official American attention to its interests abroad, and our protective guidance is unchanged: American affiliated addresses, and principals whose affairs touch them, should continue to assume sustained elevated attention, and protective screening for principals with visible connections to Jewish community institutions remains a live rather than an annual matter. London’s Sunday is the settled day the week has promised: sunny intervals with a high around fifteen degrees, light winds and next to no prospect of rain, with cloud and showers returning through Monday morning.

Travel corridors

Saturday belonged to Riyadh, and it was the worst day of the Saudi war so far. The third strike on King Khalid International in a week killed at least twelve people, among them four Saudi citizens, two Bangladeshis and one national each of the United States, Jordan, Palestine, Syria, Sudan and Egypt, and wounded more than three hundred, and the authorities suspended operations while the damage is assessed, with some three hundred and twenty four cancellations through the day, more than half of them Saudia services, and a further projectile reported near King Fahd International at Dammam. The Houthi movement did not immediately claim the strike, though its media chief later declared the airport shut down, and the coalition has called the attack a full fledged war crime and promised a decisive response. The diplomatic traffic was immediate: the American Secretary of State condemned the killing of civilians including an American citizen and said the attacks must stop now, the Canadian prime minister said there can be no justification for attacks on civilian infrastructure, and the Pakistani prime minister reaffirmed his country’s commitment to Saudi defence under the joint defence agreement. The consequential words, though, were the American president’s: asked about joining the fight against the Houthi movement he said we may, we are going to look at it, promised a decision very quickly, and said he would take a look at whether the attack changes his commitment not to strike Iran before 3 November, before adding later that the Saudis are good fighters and can defend themselves. The restraint window announced on Thursday is therefore already conditional, and should be treated as such.

Yesterday’s southern geometry needs correcting: the capture of the Bab el-Mandeb has not survived the day. Yemeni government forces now report advances near the strait rather than control of it, and the Houthi movement says it repelled the assault and still holds Mayyun Island, so the strait should be treated as contested rather than taken, which is precisely the condition in which a movement under pressure reaches for the spectacular retaliation Riyadh has just received. At sea the pattern we identified on Friday has hardened into a system. The Revolutionary Guard says a supertanker leaving the Strait of Hormuz by what Tehran calls an unauthorised route struck a naval mine, exploded and caught fire, the United Kingdom Maritime Trade Operations centre logged an incident between a tanker and military forces in the Gulf of Oman, and Central Command released footage of a fighter aircraft disabling the Panama flagged cargo vessel Ocean Molica with a precision munition after it left an Iranian port, putting its enforcement record since July at four vessels disabled, a hundred and thirty five turned back and ten shadow fleet tankers destroyed. Both navies are now policing the same water by force, each against the other’s traffic. The Kremlin says the Russian president relayed Iran’s views on a possible settlement to the American president in a telephone call on Friday, the Pentagon has raised its official toll to twenty one American service members killed and eight hundred and sixty five wounded since February, and Brent has held in the low hundreds with American diesel near its record while the Russian and German product releases proceed. The corridor judgement does not move: no Gulf movement should be planned, the Dubai corridor stays deferred, and any itinerary touching a Saudi airport or Saudi overflight should be rerouted. In Europe, today is the day of the Paris twenty kilometre race, with some thirty five thousand runners through the west of the city, Metro Line 6 closed throughout and Lines 11 and 13 closed until midday, so Paris movements should be planned around the west of the city until this evening. London, Geneva and Monaco are quiet, Zurich connections continue to route around the Gulf, and New York is routine, with federal funding carried to 11 December.

Health and privacy exposure

The United States entry order on Ebola reaches the end of its stated term today: it runs through 11 October, barring foreign nationals who have been in the Democratic Republic of the Congo, Uganda or South Sudan within the previous twenty one days, and as of this morning no renewal had been announced. Previous practice has been extension in roughly thirty day increments announced close to expiry, so a late renewal remains the likelier outcome, and travel history over the previous three weeks should continue to be checked before any North American movement this week. The comparable Canadian measures continue to apply.

The digital file adds detail to the malvertising campaign we have tracked through the week, and the detail is worth absorbing. Newly published research describes the operation impersonating the major artificial intelligence assistants, six brands in all, as a human operated phishing platform: the fraudulent portals draw a counterfeit browser window inside the page, its false address bar showing a trusted destination while the true address bar shows the attacker’s domain, and a live operator watches each session in real time, requesting passwords, text message codes and authenticator codes as needed and rejecting a code to demand a fresh one. Two defences defeat the method outright: a genuine login window can be dragged outside the browser while a counterfeit one cannot, and a passkey or hardware security key will not authenticate to a lookalike domain at all, so high value accounts should be moved to them. Our standing guidance is unchanged: such tools should be reached only through typed addresses or managed bookmarks, an unexpected approval prompt should be treated as evidence that a password is already lost, and the deepfake rule remains absolute, in that no financial or credential instruction, whatever its apparent source and however senior its apparent author, should be acted on without verification through a second, pre agreed channel.