Daily intelligence briefing: 8 August 2026

The strait has gone quiet at exactly the moment the paperwork matters most. No new engagement was reported overnight, the naval achievements promised after Thursday night’s explosions south of Qeshm Island have never been announced, and the framework agreed with Oman now sits with Iran’s Supreme National Security Council for approval. The friction has moved from the water to the text: Tehran’s draft would bar American and Israeli linked vessels and fine violators up to 20 per cent of cargo value, while Washington continues to insist on transit without approvals, permissions, tolls or charges of any kind. The market has priced the diplomacy, with Brent settling at 82.27 dollars on Friday, down more than 7 per cent on the week, even as ADNOC disclosed that 15 of its vessels have been hit since the conflict began, with one crew member killed. Etihad and Qatar Airways begin restoring Gulf regional routes today, London opens a six day heatwave at 28 degrees with 32 expected tomorrow, New York’s heat advisory is extended through this evening with severe afternoon thunderstorms forecast, and the Coldcard attacker has moved stolen Bitcoin for the first time.

United Kingdom and London

The national terrorism threat level remains at SEVERE, meaning an attack is highly likely. The Metropolitan Police closed the week with court results rather than new incidents: a Tottenham man was convicted of two murders and a rape, a man was found guilty of murdering his partner in Ealing, and a man was sentenced for the attempted robbery of a £250,000 watch after being caught by plain clothes officers, a reminder that watch robbery remains an active line of business on London’s streets and that high value pieces should continue to travel discreetly. An eleventh officer was dismissed over conduct at Charing Cross police station, and a man was charged with assault at a Soho nightclub. Nothing new has been published on the counter terrorism side, the Covent Garden position is unchanged following Thursday’s charge, and no fresh developments are reported from the Lambeth and Southwark operation. The Palestine Action proscription remains fully in force ahead of the autumn Supreme Court appeal, with no significant related gatherings identified for this weekend; the next announced action is at the Labour conference in Liverpool in late September.

The heatwave arrives today: sunny and around 28 degrees in London with high ultraviolet levels and high pollen, 32 degrees tomorrow as the hottest day of the spell, then a brief easing early next week before 33 degrees returns by Thursday. No weather warnings are in force, but six consecutive days above the heatwave threshold are now forecast, so hydration, shade and vehicle cooling should be planned into any principal movements and for staff posted outdoors. On the railways the day’s main friction is national rather than local: RMT members at East Midlands Railway strike today, with a reduced timetable between 07:00 and 19:00 on intercity services into St Pancras and a further date on 15 August. The weekend engineering list runs a little longer than first flagged: no Bakerloo trains between Harrow and Wealdstone and Queen’s Park on either day, the Lioness line suspended throughout, a reduced Mildmay service between Shepherd’s Bush and Clapham Junction today, no Suffragette trains until 09:45 tomorrow with a reduced service into the early afternoon, the Windrush line cut between Wandsworth Road and Clapham Junction tomorrow, and Barons Court still closed to westbound District and Piccadilly trains until November. The Arriva bus strikes remain the planning point for north London, beginning next Friday and Saturday, 14 and 15 August, then 18 to 21 and 25 to 28 August, with September and October dates now published as well. The drought picture holds at nine temporary use bans, with Thames Water’s ban still covering London and the Thames Valley and Southern Water now formally applying to the government for a precautionary drought order for Hampshire and the Isle of Wight. Two sizeable free festivals, at Thamesmead and at Stratford, will draw warm weather crowds in east and south east London this afternoon and evening.

Travel corridors

The overnight silence in the strait is itself the news. No new engagement was reported into Saturday morning, and the results promised after Thursday night’s confrontation south of Qeshm Island remain unpublished, which leaves the character of that episode unresolved. The diplomacy has advanced a step: Tehran describes the general framework of the arrangement with Oman as finalised, with the final text awaiting approval at the highest levels, understood to mean the Supreme National Security Council, and Washington says it expects a deal soon and will lift the blockade of Iranian ports once commercial shipping moves without impediment. The substance remains as previously described, inbound traffic through Iranian waters and outbound through Omani waters under a joint coordination centre, on a temporary footing of roughly two to four months with a 60 day window to negotiate something more durable. The new friction sits in the text itself: Iranian officials say the draft would bar American and Israeli linked vessels and fine violators up to 20 per cent of cargo value, positions difficult to reconcile with the American insistence on no approvals, permissions, tolls or charges of any kind. On the water nothing has yet changed: no first transit under the arrangement has been confirmed, throughput remains around 3 per cent of normal, war risk premiums are running at roughly thirty times their usual level, and more than 300 vessels are holding position. The human cost was given numbers on Friday, when ADNOC confirmed that 15 of its vessels have been hit by missiles or drones since the conflict began, three of them this week, with one crew member killed and 20 injured. Saudi Arabia, Turkey and Pakistan meanwhile signed a joint defence agreement in Mecca on Friday under which an armed attack on one is to be treated as an attack on all three, a structural shift in the region’s alignments whatever its immediate military effect.

The Red Sea produced no new maritime attack on Friday or overnight, the first pause since the tanker Wafa was struck off Yanbu, though a Houthi attack on Saudi Arabia’s Najran region injured 11 civilians on Friday and the stated intention to extend attacks to the northern Red Sea stands. Our travel advice does not move: all Gulf travel, including Dubai, should remain deferred until an agreement is not only signed but verified at sea, principals still in the region should hold departure options on refundable routings, and any carrier restart should be treated as reversible at short notice. The restarts have nonetheless begun: Etihad has loaded a single daily service each to Bahrain and Kuwait from today, though the first rotations had not been confirmed as flown at the time of writing, and Qatar Airways resumes daily services to Bahrain, Kuwait and Erbil today, while Emirates has yet to relist either route. The long suspensions hold: British Airways away from Dubai, Bahrain, Amman and Tel Aviv until 25 October, Lufthansa and SWISS away from Dubai until 13 September, which continues to bear on the Zurich corridor, Singapore Airlines and Cathay Pacific until 24 October, and Air Canada now extending its Dubai suspension to the middle of January 2027. Reroutings continue to add between one and three hours to Gulf sector timings and a three hour check in margin remains sensible.

The Barcelona ground handling strike enters its fifth day with negotiations formally blocked, no mediation in place and the regional government urging both sides back to the table; around 42 cancellations were recorded across the first three days and no figures have been published since, so routings through Barcelona should continue to be avoided where practical. Palma has resolved, with the Swissport strike there called off after a settlement, and the island’s hub is operating normally. Paris lists no strike action, but August engineering works are heavy and bear on ground moves: RER A is suspended between Vincennes and Noisy le Grand until 23 August, RER B carries major disruption until 16 August with heavy crowding expected at Gare du Nord, RER D is cut between Gare du Nord and Gare de Lyon until 16 August, and Metro line 13 is partially closed until 17 August, so airport transfers by road with generous margins are preferable to rail for the next fortnight. Geneva and Zurich are steady with no disruptions identified. In Monaco the parcel bombing investigation produced its first substantive update in some days: the Prosecutor General confirms the investigation is continuing actively in liaison with several countries including Ukraine, a joint investigation team with the Ukrainian authorities is envisaged but not yet formed, and two men have been detained in Ukraine, one a serving intelligence officer, over the killing of the named suspect, with financial links to the Monaco attack under examination. New York remains the weather risk: the heat advisory has been extended until eight this evening with the heat index near 37 degrees, strong to severe afternoon thunderstorms are expected with flash flooding and damaging winds the principal hazards, and conditions improve tomorrow. With air traffic control staffing still structurally short, storm driven ground stops this afternoon are plausible and generous margins remain essential on transatlantic movements.

Digital and privacy exposure

The Coldcard theft has entered a new phase: the attacker moved a little over 30 Bitcoin, worth around 1.9 million dollars, to a fresh wallet on Friday, the first movement on chain since the theft waves and about 1.5 per cent of the stolen funds. Analysts read the transfer as a possible precursor to laundering, and the working total now stands near 2,055 Bitcoin, some 130 million dollars, once the suspected fourth wave is included. The instructions stand unchanged: any principal or family office holding assets on an affected device, meaning a single key wallet whose seed was generated on the March 2021 firmware, should move them to a fresh seed generated on updated firmware without delay, and any unsolicited approach promising to recover stolen Bitcoin for a fee should be treated as hostile. On the router backdoor, the manufacturer now denies any intentional access, describing the code as after sales maintenance, while pausing its own firmware downloads to fix what it calls security vulnerabilities; the researchers maintain the access was deliberate. The denial changes nothing operationally: unbranded or budget routers should be replaced with vetted equipment under professional management, and until replacement the device’s network should be treated as untrusted.

The sharper development for family offices is on the telephone. A coordinated wave of artificial intelligence voice phishing has been directed at major American investment firms this week, using cloned voices of colleagues and IT staff to harvest credentials and sign in codes, and a separate extortion group tracked by Google is calling employees’ personal mobiles while spoofing help desk numbers, posing as IT running urgent security migrations and concentrating on firms involved in mergers, acquisitions and capital deployment, with demands running into millions of dollars. The read across is direct: an unsolicited call about a security migration, however plausible the voice, should be terminated and verified through a known channel, and no sign in code should ever be read out or entered on a page reached from such a call. The same discipline covers a widespread Microsoft 365 phishing campaign now aimed specifically at finance and payroll staff as a precursor to payment fraud, so call back verification on any change to payment instructions holds absolutely. On the Mac, a new stealer delivered through paste into terminal lures is taking browser passwords, the iCloud Keychain and cryptocurrency wallets, with a function that drains wallets slowly to avoid notice, which reinforces the rule that software comes only from within the application itself or an official store. Two exposures bear on personal privacy: the laptop maker Framework has notified all customers that names, home addresses and telephone numbers were taken through a flaw in a third party analytics tool, a targeting concern for any household that owns its hardware, and the data broker LexisNexis is investigating possible exposure through the same flaw. Finally, the London courts have delivered convictions over the 2025 kidnapping of two young French cryptocurrency investors, held for 52 hours in an east London flat until a ransom was paid; the prosecution noted that the victims had displayed their wealth on social media, and the lesson requires no elaboration.