Daily intelligence briefing: 5 August 2026

The negotiation over the strait has narrowed from whether to talk to how a reopening would work. Qatar has joined Oman as a mediator and describes the discussions as at a very advanced stage on what it calls a short term solution, Secretary of State Marco Rubio confirms progress while cautioning that no final agreement has been reached, and diplomatic sources in Tehran have suggested a deal could be completed as early as the end of today. Iran is pressing for relief from American restrictions on its ports, is weighing whether to allow European navies to clear the mines its Revolutionary Guards laid, and continues to claim a service fee on transits, a demand Mr Rubio warns would set a very dangerous precedent. The market believes the direction of travel: Brent has fallen for a third consecutive session to around 78 dollars and 50 cents, down roughly ten per cent on the week. The strait itself has passed a quiet night after three incidents in four days, though a vessel sank off Yemen yesterday after a projectile strike. In London the operating picture is settled, cooler at around 25 degrees with a good service across the Underground. The digital picture remains dominated by the Coldcard losses, now confirmed above 100 million dollars with a suspected fourth wave taking the total towards 130 million.

United Kingdom and London

The national terrorism threat level remains at SEVERE, meaning an attack is highly likely. The Metropolitan Police newsroom carries nothing new on the counter terrorism side: the most recent items concern images released after incidents at the Arsenal victory parade, a £20,000 reward in the Finbar Sullivan murder investigation and new retail crime technology, with the Belmarsh charge and the Cyprus arrest under the National Security Act still the latest security matters. The position on Palestine Action is unchanged. The Supreme Court appeal against the proscription is expected in the autumn, the ban remains fully in force, expressing support for the group is still an offence under the Terrorism Act, and any gathering linked to the group should continue to be given a wide berth.

The weather cools a little while remaining settled: sunny intervals and around 25 degrees in London today with a small chance of an early shower, high ultraviolet levels and moderate pollen, easing to around 22 degrees tomorrow under similar skies. The Underground is reporting a good service across the network this morning, including the full length of the Piccadilly line, which has now banked the full day of normal running we asked for after Monday’s failed start, so journeys through the line can return to normal planning, with the Elizabeth line and the Heathrow Express still available as resilient alternatives for Heathrow movements. Barons Court remains closed until November. The drought picture has tightened by one notch: a ninth temporary use ban came into force on 3 August, Essex and Suffolk Water joining the eight already in place, and Thames Water’s ban continues to cover London and the Thames Valley.

Travel corridors

The mechanics under discussion are now reasonably clear. The framework being negotiated would route inbound shipping through Iran’s side of the strait with Tehran coordinating traffic and outbound vessels through Omani waters under Muscat’s management, with a service fee divided between the two states. Qatar’s foreign ministry describes the talks as at a very advanced stage and is explicit that the arrangement under discussion is a short term solution rather than a settlement. Mr Rubio confirmed last night that progress has been made without finality, while warning that a precedent in which a state controls an international waterway and charges a toll would be a very dangerous one, and Treasury Secretary Scott Bessent has repeated his view that agreement could come within a day. Tehran’s additional demands give the shape of the remaining distance: relief from American restrictions on its ports, and authority over the lanes and the fees. Iran is separately weighing whether to allow European navies to clear the mines laid by the Revolutionary Guards, whose consent for any arrangement remains uncertain, and the strikes remain called off while the track runs. Brent trades around 78 dollars and 50 cents this morning, a third consecutive decline that has taken roughly ten per cent off the price in a week. The strait itself passed a quiet night with no new incident reported after three in four days, but the southern flank is live: an Indian cargo vessel sank off Yemen yesterday after being struck by a projectile, with all 14 crew rescued, and Saudi Arabia’s Najran airport suspended operations after a reported Houthi drone strike.

Our travel advice does not change on optimism: all Gulf travel, including Dubai, should remain deferred until an agreement is signed and then verified at sea, principals still in the region should hold departure options on refundable routings, and any carrier restart should be treated as reversible at short notice. Dubai International remains open, with Emirates, flydubai, Etihad and Qatar Airways operating with adjustments, and the long suspensions hold: British Airways away from Dubai, Bahrain, Amman and Tel Aviv until 25 October, Doha reduced to a single daily service and Riyadh reducing to one from Friday, Lufthansa and SWISS away from Dubai until 13 September, which continues to bear on the Zurich corridor, KLM until 6 September, and Singapore Airlines and Cathay Pacific until 24 October. In Europe the Spanish picture needs correcting in one respect: the indefinite ground handling strike that began yesterday is confined to Barcelona, where around 1,200 Groundforce staff walked out and some 20 flights were cancelled on the first day, while the separate action at Palma was called off at the last minute. Routings through Barcelona should still be avoided where practical, with minimum service levels of between 35 and 80 per cent of flights guaranteed, and Palma can be treated as normal while monitored. Paris remains in normal posture with no strike action listed for the coming days, Geneva and Zurich are steady with generous airport buffers still advisable in the peak holiday period, and the Monaco parcel bombing investigation reports no fresh developments. New York offers another workable window: today is partly sunny at around 28 degrees with only a 20 per cent chance of an afternoon thunderstorm, though tomorrow deteriorates, with the storm risk doubling and a heat index near 37 degrees, and the air traffic control staffing shortfall remains structural, so margins remain advisable on transatlantic movements.

Digital and privacy exposure

The Coldcard picture has firmed. Galaxy Research now confirms 1,596 Bitcoin taken, a little over 100 million dollars, from some 7,300 addresses across three organised waves and 14 smaller incidents, with a suspected fourth wave of around 450 Bitcoin identified through on chain pattern matching taking the probable total towards 130 million dollars. Two points from yesterday carry forward and one is new. The flaw remains the March 2021 firmware build that generated recovery seeds with a predictable software randomiser, and only single key wallets are affected, not multisignature arrangements. The replace by fee route remains open in some fourth wave cases, allowing a victim who sees a hostile transaction in the mempool to outbid it before confirmation. The new point is encouraging: roughly 90 per cent of the stolen coins have not yet been moved on and remain traceable on chain, which supports recovery efforts but does not reduce the urgency. The instruction stands: any principal or family office holding assets on an affected device should move them to a fresh seed generated on updated firmware without delay, taking specialist advice on the transfer.

Three fresh campaigns deserve attention from households and family offices. The Greatness phishing service has added device code phishing, a technique that walks a target through entering a short code on a legitimate sign in page and hands the attacker a valid session token that bypasses multi factor authentication, which sharpens our standing rule: never enter a sign in code you did not generate yourself moments earlier. A separate campaign is circulating fake Adobe and Zoom update prompts that install the ScreenConnect remote access tool, giving an attacker persistent control of the machine; software updates should only ever be taken from within the application itself or an official store, and household and estate IT support arrangements should be reminded of this. Researchers have also documented a Chinese threat actor deploying the GHOSTBLADE implant on Apple devices through fake Amazon Web Services login pages, a targeted risk for staff who hold cloud administration duties. The EY exposure is unchanged from yesterday, with American class action investigations under way and the verification discipline we set out still in force. The standing agenda is unchanged: treat every hotel and airport network as hostile and route all traffic through a trusted VPN, and hold absolutely to call back verification on any change to payment instructions.