Daily intelligence briefing: 5 October 2026

Washington’s bombers left Britain over the weekend: every B-1 at RAF Fairford has been flown home to the United States, a precaution the Pentagon ties to the suspected plot that prompted last month’s arrests, and the clearest official judgement yet of how seriously the threat to American assets in Britain is taken. Tehran has meanwhile given its first substantive reading of Washington’s written answer, describing the propositions as much in line with previous American positions, while the Houthis claim strikes on Aramco facilities at Riyadh and Khurais and explosions are reported this morning from waters near Qeshm. The flydubai co-pilot has told interrogators he spent years seeking a cockpit in order to put an aircraft into Ben Gurion, and new monitoring research finds deepfake scam advertising aimed at the world’s wealthiest has grown sevenfold since January.

United Kingdom and London

The national terrorism threat level remains at SEVERE. The most visible development of the weekend took place in the sky rather than the courts: the United States has withdrawn every B-1 bomber from RAF Fairford, the Pentagon confirming that the aircraft have returned to their home stations while insisting the capability can be delivered anywhere at any time. The departure follows the arrests over the suspected plot against the base, all six of those held having now been released without charge while the investigation continues, and ministerial language on foreign state involvement having hardened rather than softened. We would read the withdrawal plainly: it removes the most obvious target set from British soil, and it is at the same time an official judgement that the threat to American assets in Britain is persistent enough to act on. The protective conclusion for our readers is unchanged in direction and sharpened in emphasis, because attention of this kind does not leave with the aircraft: American affiliated addresses, and principals whose affairs touch them, should continue to assume sustained elevated attention, and the networks that conducted the surveillance remain unaccounted for. On the Manchester case there is nothing procedural to add before the Central Criminal Court hearing on 23 October, and our guidance for principals with visible connections to Jewish community institutions stands: protective screening treated as a live rather than an annual matter. The capital begins the week as it ended the last, unseasonably kind: around twenty three degrees, dry with sunny intervals and a light westerly.

Travel corridors

Tehran has finally spoken, and said little that moves the file. The foreign ministry’s first substantive comment on Washington’s written answer describes the propositions as more or less in line with previous American positions, particularly on the nuclear question, which is a cool reading rather than a formal rejection; no further talks have been announced, Iran continues to insist that the strait must come first, reopening within seven days on its conditions, and the parliament speaker now lists seven conditions drawn from the Islamabad memorandum that must be met before the blockade ends. The foreign minister’s weekend warning that Iran is more prepared than before should military solutions return is pressure of the same vintage as Washington’s briefing about operations after November. The water meanwhile had its worst week in a month: incidents have been reported daily since 2 October, the crude carrier Kazimah III was struck and set alight on the first of the month, a further incident was logged sixty nautical miles south of Al Mukha, and this morning explosions were reported from waters near Qeshm Island and Sirik. The campaign has also widened beyond the strait: the Houthis claim missile and drone strikes on Aramco facilities at Riyadh and Khurais, and Yemen’s government has announced operations against them in Sanaa and Saada. Brent sits at around a hundred and three dollars, and Iran’s rial has fallen to new lows despite a two billion dollar intervention by the central bank. None of this changes the corridor judgement: no Gulf movement should be planned, the Dubai corridor stays deferred, and the standing American advisories for the Emirates and the wider Gulf remain in force.

The flydubai investigation has produced the fullest insider threat confession in civil aviation for years. The co-pilot has told Israeli interrogators that he planned the operation over a long period and applied to a succession of airlines in order to carry it out, that his intention was to put the Dubai to Tel Aviv service into Ben Gurion Airport or central Tel Aviv, and that he used earlier rostered visits to gather information; his dismissal from a previous carrier over extremist views, information that never reached the airline that hired him, completes the picture, and Israeli and Australian investigators are now examining whether he acted alone or with support. The lesson we drew last week is therefore confirmed rather than revised: vetting must follow the person, not the employer, and households running aviation, marine or close staff should satisfy themselves that adverse information moves with a candidate. Route suspensions by European and regional carriers run into mid and late October, the SWISS suspension remaining the one with practical bearing on Zurich connections. Paris offers engineering rather than industrial action this week: sections of RER C are interrupted today, including between Invalides and the Juvisy and Massy Palaiseau branches, metro Line 14 closes from ten each weekday evening for works that run to mid December, and RER D and RER E carry evening suspensions, with the network otherwise normal. London, Geneva and Monaco are quiet, and New York is routine, with federal funding carried to 11 December.

Health and privacy exposure

The United States entry order on Ebola enters its final scheduled week: it runs through 11 October, barring foreign nationals who have been in the Democratic Republic of the Congo, Uganda or South Sudan within the previous twenty one days, and travel history over the previous three weeks should be checked before any North American movement until the order lapses or is renewed. The comparable Canadian measures continue to apply.

The deepfake file has acquired its statistics. Monitoring research published this week finds that deepfake scam advertising aimed at the world’s wealthiest grew roughly sevenfold between January and August, from around fourteen and a half thousand placements a month to more than a hundred and three thousand, and that one in six of the fifty largest family offices outside the United States now has confirmed deepfake activity targeting a named principal. The method is industrial: authentic interviews and earnings calls are harvested, cloned voice video is generated, the material is distributed through paid advertising on disposable domains, and campaigns relaunch within days of takedown. Read alongside the Italian case, in which a cloned voice moved ninety five million euros, the figures say that last week’s fraud was not an outlier but the visible edge of a market. Our guidance is unchanged and absolute: no financial or credential instruction, whatever its apparent source and however senior its apparent author, should be acted on without verification through a second, pre agreed channel, and principals with a public profile should assume their voice and likeness are already in circulation. On Revolut there is no new disclosure, and our guidance on both exposures is unaltered: no engagement and no payment in the fraudulent data request affair, and continued vigilance for tailored phishing built on the share dealing data.