Daily intelligence briefing: 7 August 2026

The strait produced gunfire and diplomacy in the same evening, and the market listened to the gunfire. Two explosions were heard south of Qeshm Island at around 21:40 local time last night, with Iranian state media saying the armed forces had confronted hostile enemy targets at the entrance to the Strait of Hormuz, promising details of the navy’s achievements in the coming hours, and the local governorate reporting nothing hit ashore. Hours earlier Tehran had described the arrangement with Oman as agreed in principle, built around temporary routes, a joint coordination centre and, according to an American official, no approvals, permissions, tolls or charges of any kind. Brent rose almost 2 per cent this morning to just under 84 dollars, its sharpest move in a week, and the Houthis have promised to extend their tanker attacks to the northern Red Sea after striking an eighth Saudi vessel off Yanbu. In London the week ends warm and quiet at around 25 degrees, with a charge brought over the Covent Garden stabbings and new north London bus strike dates from next Friday, the Barcelona ground handling strike enters a fourth day, and New York spends today under a heat advisory with widespread thunderstorms and a flash flooding risk.

United Kingdom and London

The national terrorism threat level remains at SEVERE, meaning an attack is highly likely. The Covent Garden investigation moved quickly: a 47 year old woman was charged yesterday with four counts of wounding with intent and possession of an offensive weapon after four men aged between 34 and 56 were stabbed on Endell Street on Wednesday lunchtime. All four have been discharged from hospital, and the police continue to treat the episode as related to mental health rather than terrorism, so no wider inference for the capital’s security picture should be drawn from it. Beyond that the Metropolitan Police newsroom is quiet: the week long gang violence operation in Lambeth and Southwark, which produced nearly 300 arrests and 38 seized weapons, and the appeal after the fatal motorcycle collision on the Isle of Dogs remain the most recent items, with the Cyprus arrest under the National Security Act still the latest counter terrorism matter. The position on Palestine Action is unchanged: the proscription remains fully in force ahead of the autumn Supreme Court appeal, expressing support for the group is still an offence under the Terrorism Act, and any gathering linked to the group should continue to be given a wide berth.

The weather warms into the weekend: sunny intervals and around 25 degrees in London today with next to no chance of rain and moderate pollen, a fully sunny 28 degrees tomorrow when pollen rises to high, and temperatures back in the low thirties expected by the middle of next week. The Underground carries two minor irritations this morning, delays on the Jubilee line southbound and eastbound after an earlier signal failure at Neasden and on the Victoria line while a points failure at Northumberland Park is repaired, while the Piccadilly line has now run normally for three consecutive days; the Elizabeth line and the Heathrow Express remain the more dependable Heathrow options all the same. The weekend engineering stands as flagged: no Bakerloo trains between Harrow and Wealdstone and Queen’s Park on either day, the Lioness line suspended throughout, the Windrush line cut between Wandsworth Road and Clapham Junction on Sunday, and Barons Court still closed to westbound District and Piccadilly trains until November. The new planning point is on the buses: more than 1,500 Arriva drivers across eight north London garages, including Edmonton, Enfield, Palmers Green, Stamford Hill, Tottenham and Wood Green, will strike over cab temperatures on 14 and 15 August, then 18 to 21 and 25 to 28 August, with further dates running into October, so road movements across north London on those days should assume thinner bus cover and heavier traffic. The drought picture holds at nine temporary use bans, with Thames Water’s ban still covering London and the Thames Valley, and Southern Water’s consultation on a precautionary drought order for Hampshire and the Isle of Wight running its course.

Travel corridors

The negotiation and the shooting are now running in parallel, and last night the shooting had the louder voice. On the diplomacy, Tehran describes the arrangement with Oman as agreed in principle: temporary routes taking inbound traffic through Iranian waters and outbound vessels south through Omani waters, technical and security details and a proposed joint coordination centre still being settled, and an American official insisting that transit will carry no approvals, permissions, tolls or charges of any kind. Iran’s own framing remains deliberately narrow, a security model for vessel routing rather than a full reopening, with its foreign ministry repeating that the American naval blockade means the arrangement cannot by itself guarantee safe navigation. Then came the explosions south of Qeshm Island at around 21:40 last night, which Iranian outlets attribute to the armed forces confronting hostile enemy targets at the entrance to the strait, with achievements promised but not yet specified. Whatever the engagement proves to have been, the market read it plainly: Brent rose almost 2 per cent this morning to just under 84 dollars, leaving the price around 8 per cent higher on the month. The southern flank is deteriorating on its own schedule: the Houthis say they struck the Saudi tanker Wifa off Yanbu with ballistic missiles, the eighth Saudi vessel hit since their campaign against Saudi shipping began in late July, and have announced that attacks will now extend to the northern Red Sea to close all access points.

Our travel advice is unchanged, and last night is the reason why: all Gulf travel, including Dubai, should remain deferred until an agreement is not only signed but verified at sea, principals still in the region should hold departure options on refundable routings, and any carrier restart should be treated as reversible at short notice. Dubai International remains open, with Emirates, flydubai, Etihad and Qatar Airways operating with adjustments; Etihad plans to restore a single daily service each to Bahrain and Kuwait from tomorrow, while Emirates has yet to list either route again. The long suspensions hold: British Airways away from Dubai, Bahrain, Amman and Tel Aviv until 25 October, Lufthansa and SWISS away from Dubai until 13 September, which continues to bear on the Zurich corridor, KLM into late August, and Singapore Airlines and Cathay Pacific until 24 October. The Barcelona ground handling strike enters its fourth day with no negotiations in prospect and roughly 40 cancellations across its first two days; the minimum service tiers of 80 per cent to the islands, 58 per cent for international routes and 35 per cent for domestic flights with ground alternatives continue to hold the worst at bay, but routings through Barcelona should still be avoided where practical while Palma operates normally. Paris remains in normal posture with no strike action listed, Geneva and Zurich are steady with generous airport buffers advisable through the holiday peak, and the Monaco parcel bombing investigation reports no fresh developments. New York is the day’s weather risk: the heat advisory runs until eight this evening with temperatures feeling between 35 and 38 degrees, thunderstorms are expected to be more widespread today than yesterday with a flash flooding risk from any downpour, the city has activated its heat and flood emergency plans and opened cooling centres across the five boroughs, and with the air traffic control staffing shortfall still structural, generous margins remain essential on transatlantic movements.

Digital and privacy exposure

The Coldcard totals are broadly stable: 1,596 Bitcoin confirmed taken, a little over 100 million dollars from some 7,300 addresses, with the suspected fourth wave keeping the probable total near 130 million dollars and roughly 90 per cent of the stolen coin still unmoved and traceable on chain. The spectacle around the principal attacker’s wallet continues to draw pleas and hustles, and yesterday’s warning has already aged well: the recovery fraud wave that follows every large theft is under way, and any unsolicited approach promising to retrieve stolen Bitcoin for a fee, however credentialled it appears, should be treated as hostile. The core instruction stands unchanged: any principal or family office holding assets on an affected device, meaning a single key wallet whose seed was generated on the March 2021 firmware, should move them to a fresh seed generated on updated firmware without delay, taking specialist advice on the transfer.

The overnight research points at the household network itself. More than twenty models of Zbtlink routers, Chinese made equipment sold widely online, have been found shipping with a factory installed backdoor that opens an unauthenticated root shell and signals to command servers in China every 35 seconds; the immediate action for households and family offices is an audit of what actually sits between the family and the internet, at home and in any secondary property, with unbranded or budget routers replaced by vetted equipment under professional management. The campaigns flagged earlier in the week remain live and the rules they sharpen bear repeating: never enter a sign in code you did not generate yourself moments earlier, take software only from within the application itself or an official store, particularly on Macs, and use only official, organisation controlled AI subscriptions. Elsewhere the news cuts both ways: the creator of the Ransom Cartel ransomware service received a sixteen year prison sentence in the United States, while an actively exploited flaw in JetBrains TeamCity, now on the American cyber agency’s known exploited list, should be patched today by any family office running its own development infrastructure. The EY exposure is unchanged, with the verification discipline we set out still in force. The standing agenda is unchanged: treat every hotel and airport network as hostile and route all traffic through a trusted VPN, and hold absolutely to call back verification on any change to payment instructions.