Daily intelligence briefing: 14 October 2026

The war has reached Aramco. A missile struck an administrative building at Saudi Aramco’s headquarters complex in Dhahran on Tuesday evening, causing a limited fire and, on the official account, no casualties, hours after the Houthi movement named Aramco installations and Riyadh’s airport as targets and told civilians near them to evacuate. Debris from two intercepted cruise missiles fell on residential Riyadh the same evening, injuring four, the closure of King Khalid International has been extended to Saturday, and the Saudi led coalition has ordered civilians out of part of Sanaa ahead of what it calls a targeted operation. Washington’s language hardens again without a decision, Iran and Oman have discussed a temporary shipping route even as the Revolutionary Guard claims three supertankers in two days, and Brent trades above a hundred and six dollars.

United Kingdom and London

The national terrorism threat level remains at SEVERE. The Fairford investigation has produced no new public developments: all seven men remain on police bail and the Central Criminal Court hearing on 23 October remains the next procedural marker. Our protective guidance is unchanged, and the strike on Aramco’s headquarters sharpens rather than alters it: American affiliated addresses, and principals whose affairs touch them, should continue to assume sustained elevated attention, since a direct American entry into the Yemen fight would raise the symbolic value of American linked targets in European capitals, and protective screening for principals with visible connections to Jewish community institutions remains a live rather than an annual matter. London’s weather is a gift after yesterday’s rain: dry and largely sunny through the day at around nineteen degrees, with an afternoon breeze gusting towards twenty five miles per hour, and tomorrow looks similar and slightly warmer.

Travel corridors

Riyadh’s King Khalid International will now stay closed through Saturday 17 October, with Jeddah and Dammam operating under delays and cancellations, and Delta has postponed its planned Atlanta to Riyadh service to March 2027. The American State Department now requires special authorisation for government employees using any Saudi airport and has barred its personnel from travel within twenty miles of the Yemen border, a measure worth copying: we would treat all Saudi aviation as closed to planning and the kingdom’s south as out of bounds. The exchange itself escalated on both sides of the border on Tuesday. The coalition announced an evacuation of civilians from part of Sanaa ahead of a targeted operation and confirmed strikes on oil sites across western Yemen, at Sanaa, Dhamar and Saada; the Houthis threatened a harsh and painful response in Riyadh, named Aramco installations and the capital’s airport as legitimate targets, and told civilians near Aramco facilities to leave. By evening a missile had reached an administrative building at Aramco’s Dhahran headquarters, causing a limited fire with no reported casualties, the coalition had intercepted drones north of Riyadh and ballistic missiles aimed at the Eastern Province, and falling debris had injured four people and damaged fifteen homes in residential Riyadh. The American president wrote that Iran stands behind the movement, said he might ask Turkey to assist the kingdom, and again declined to say whether the United States will join: a fourth consecutive day of hardening language without a decision.

At sea there are two signals pointing in opposite directions. Tehran says it has reached an understanding with Oman on a temporary shipping route, the first constructive signal on the maritime track in a week; the Revolutionary Guard meanwhile claims strikes on three supertankers in two days, United Kingdom Maritime Trade Operations reported a tanker and a container ship struck by projectiles of unknown origin on Monday, and analysts assess that Iran is now deliberately targeting ship to ship transfers. Central Command’s enforcement record stands at four vessels disabled and a hundred and thirty five turned back since mid July. Brent trades above a hundred and six dollars this morning, with analysts sceptical that the announced Russian diesel release will materially restrain product prices. The corridor judgement does not move: no Gulf movement should be planned and the Dubai corridor stays deferred. In Europe the date to work around is Saturday. France’s 17 October day of action combines street mobilisation called by Yellow Vest groups and the CGT with the one confirmed industrial action, a flight crew strike notice running from 17 to 21 October covering some thirty six thousand crew at Air France, Transavia and Corsair, so any principal flying French carriers between Saturday and Wednesday should expect schedule notices from Thursday and have alternatives held; no demonstration routes have yet been filed with the Paris prefecture, and the national rail operator reports no strike notice. London, Geneva and Monaco are quiet, Zurich connections continue to route around the Gulf, and New York is routine, with federal funding carried to 11 December.

Health and privacy exposure

The American Ebola question has resolved as we expected. The Centers for Disease Control renewed the entry order on 11 October for a further thirty days, so the restrictions barring foreign nationals who have been in the Democratic Republic of the Congo, Uganda or South Sudan within the previous twenty one days now run to early November, and travel history over the previous three weeks should continue to be checked before any North American movement. The comparable Canadian measures continue to apply.

The digital file this week concerns the assistants themselves. Research published on Monday documents phishing emails written for two readers at once: the human sees an ordinary message, while instructions concealed in the markup, in comments, invisible styling or zero width characters, address any artificial intelligence assistant asked to summarise it, telling it to vouch for the message’s legitimacy or to insert an invented action such as updating a supplier’s payment details. For family offices adopting such tools the lesson is immediate: an assistant’s summary is a convenience, not a verification, and no payment or credential change should ever rest on one; the original message, and the second pre agreed channel, remain the standard. The same discipline applies to the passkey themed campaigns Microsoft continues to track, in which a telephone call from a purported information technology help desk precedes a text message linking to a counterfeit sign in page: an unexpected call about updating a passkey or approving authentication is itself the attack. Our standing guidance is unchanged: such tools reached only through typed addresses or managed bookmarks, high value accounts on passkeys or hardware security keys, and no financial or credential instruction acted on without verification through a second, pre agreed channel. On the ShinyHunters matter the complaint remains sealed and we trace no new public developments; advisers engaged during an incident should continue to be retained through counsel and verified independently.