Global Security Weekly Brief: 2026-W40

The week in brief #

1. The oil shock moved from crude to fuel: watch diesel and Dated Brent, not the Brent headline #

Context: ICE Brent crossed $100 both ways: $107.24 on 2026-09-28 after Trump rejected Iran's plan, and about $101 by 2026-10-02. On 2026-10-02, though, physical Dated Brent rose above $120. Kpler data show crude moving through Hormuz back at its pre-war rate (13.5M b/d, seven-day average). Refined products, by contrast, are at 677,000 b/d against 3.6M b/d before the war, and China's major refiners suspended most October fuel exports.
Impact: costs for diesel, jet fuel and cargoes priced off Dated Brent run about $19/bbl above what futures suggest. The G7 and IEA release of up to 100M barrels over four months is a cushion, but it may include barrels already pledged in March. European gas eased (TTF €71.90/MWh, from about €80 in W39).
Confidence: moderate · Detail: Commodities, Shipping & Sanctions

2. The Gulf war is spreading to Saudi Arabia and the Red Sea, with no deal in sight #

Context: Iran received US feedback on its seven-day plan on 2026-09-29. On 2026-10-04 it restated that Hormuz stays shut until its seven conditions are met. Gulf-based tankers kept being hit: at least six vessels in Hormuz this week, a second strike in four days on a Kuwaiti VLCC, and a projectile attack that briefly halted loading at Yanbu, Saudi Arabia's Red Sea bypass port. Saudi Arabia is planning a Yemeni-led ground offensive against the Houthis to retake Bab el-Mandeb. The US is sending a third carrier group, so three carriers and two amphibious groups will be in the region by the end of November.
Impact: war-risk premiums and VLCC rates stay high on both Saudi export routes, Hormuz and the Red Sea, so the Yanbu bypass is no longer a safe hedge. The Houthis' claimed strike on an Aramco site in Riyadh (2026-10-03) is unconfirmed, and the Saudi-led coalition calls it "misleading".
Confidence: moderate · Detail: Middle East & Gulf

3. Ethiopia's Tigray war has restarted and gone regional #

Context: this is the worst fighting since the 2022 Pretoria agreement ended a war that killed up to about 600,000 people. A seven-group rebel alliance, led by Tigrayans, launched an offensive on 2026-09-23. Federal forces retook Mekelle airport on 2026-10-03 and were reported in control of the city on 2026-10-04. Ethiopia expelled Eritrea's diplomats and Eritrea cut ties (2026-10-01). Bloomberg reports Ethiopia is preparing to pull more than 3,000 troops out of Somalia.
Impact: the risk to Red Sea and Horn trade rises: Ethiopia's trade runs through the Djibouti corridor, and Eritrea holds the coast. Ethiopian Airlines has halted flights to Tigray. A thinner AU force in Somalia gives al-Shabaab room.
Confidence: moderate · Detail: Africa

4. Russia escalates in the air and in rhetoric while losing ground net #

Context: Russian drones struck Kyiv's Dnipro bridges for the first time in the war (2026-10-01 to 10-03), and a new 40 kg steel-cutting warhead hit a power pylon. Moscow also threatened nuclear use if NATO isolates Kaliningrad. Despite this, ISW counts a net Russian territorial loss of 80.81 km² in September. Russia's draft 2027 defence budget is 17.1 trillion rubles, 27% above the earlier plan.
Impact: expect a hard winter for Ukraine's grid and transport. Black Sea shipping risk is rising again: a Liberian-flagged cargo ship was hit on 2026-10-03, killing one person. Demand for counter-drone systems in Europe is growing.
Confidence: moderate · Detail: Europe & Russia/Ukraine

5. Edge devices stay the main way in; criminal crews took real hits #

Context: CISA added 7 exploited flaws to its KEV catalog this week (W39: 10). They include the Citrix NetScaler zero-days, Cisco SD-WAN Manager and Fortinet FortiMail. CISA also warned of a critical pre-authentication flaw in MikroTik RouterOS (CVE-2026-84411). Police arrested a ShinyHunters suspect in Amsterdam (2026-09-15, confirmed this week), a suspected member was reportedly detained in Jordan, and Europe dismantled the KillSec ransomware gang.
Impact: perimeter appliances (VPN gateways, mail gateways, SD-WAN, routers) remain the patch priority for any business. Fewer ShinyHunters leaks are likely in the short term.
Confidence: high (KEV list), low (MikroTik fix version) · Detail: Cyber & Critical Infrastructure

Key judgments #

#	Judgment (estimative language)	Confidence	Basis
1	ICE Brent will likely stay above $95 through 2026-10-11, and Dated Brent will likely stay at least $10 above ICE Brent	moderate (Brent), low (spread)	Refined-product flows through Hormuz are at about 19% of pre-war, China's export halt and continuing tanker strikes. The spread rests on one outlet's report (OilPrice.com, rated C), and the G7 release starts within the window
2	A US-Iran deal that reopens Hormuz to normal traffic before 2026-10-18 is very unlikely; more attacks on merchant ships in or near Hormuz next week are very likely	moderate	Iran restated its seven conditions on 2026-10-04 after receiving US feedback; at least six vessels were hit this week; a third US carrier group is deploying. Iran is not publicly claiming the attacks, which makes attribution a gap
3	Another strike on Saudi energy or export infrastructure (Yanbu, the East-West pipeline, Riyadh sites) is likely by 2026-10-18	low to moderate	The Yanbu projectile attack (2026-10-02) and the Houthi Riyadh claim (2026-10-03) follow the 2026-09-10 pipeline strikes. Saudi confirmation is lacking, and the coalition disputes the Riyadh claim
4	Federal forces will likely hold Mekelle through 2026-10-11 while fighting continues elsewhere in northern Ethiopia (very likely); a direct Ethiopia-Eritrea clash that either government acknowledges by 2026-10-18 is unlikely	moderate (Mekelle), low (Eritrea)	Control reports come from a militia source and a local journalist relayed by wires. The TPLF calls its exit "temporary". There are no reports of cross-border fire
5	Russia will very likely keep striking Kyiv's bridges and energy infrastructure through October; a deliberate Russian military attack on a NATO member in the next month is very unlikely, but more drone or missile spillover into Moldova, Romania or Poland is likely	moderate	Four days of bridge strikes, the new pylon warhead, and ISW's winter-campaign assessment. Spillover precedent: five Russian weapons exploded over Moldova on 2026-10-03
6	CISA will very likely add at least one more edge or network-device flaw to KEV in the week to 2026-10-11	moderate	The edge share was 6 of 10 in W39 and 3 of 7 in W40. MikroTik CVE-2026-84411 is a candidate but is not yet in KEV

Last week's judgments, scored:

Iran deal before 2026-10-11 unlikely: on track.
Brent above $95 through 2026-10-04: held. Readings were $107.24 on 09-28 and about $101 on 10-02.
Brent-WTI gap above $8: $13.14 on 09-28, with no later reading.
Iran/Houthi escalation against Gulf energy or shipping within two weeks: happened. A direct US-Iran exchange of fire has not been observed.
EU storage entering November below its five-year average: no new AGSI reading. TTF eased to €71.90.
NetScaler added to KEV by 2026-10-04: correct (added 2026-09-27).
China keeps blocking or shadowing Philippine missions: partly. China deployed a WZ-7 drone and claimed an expanded zone (2026-09-27/28), but no new blocked mission was verified.

Watch list for next week #

[Commodities] The Dated-ICE Brent spread (about $19 on 2026-10-02) narrowing below $10, and the first G7/IEA barrels actually moving (whether the release is new supply or recycled pledges)
[Commodities] A US decision on diesel export curbs, and whether China's fuel-export halt extends beyond October (the two biggest swing factors for diesel)
[Commodities] Hormuz refined-product flows against 677,000 b/d (Kpler); TTF against €72 and €80; a first JKM reading
[Middle East] A Saudi-backed ground push on Yemen's Red Sea coast, or a Saudi or Aramco confirmation of a Houthi hit on energy sites (the second front becoming the main one)
[Middle East] Iran's formal answer to the US feedback, any change to its seven conditions, and the third US carrier group's arrival
[Middle East] The first CENTCOM kinetic release since 2026-09-08 (direct US-Iran fighting resuming)
[Africa] Independent confirmation (UN, ICRC, MSF) of who holds Mekelle; reports of Eritrean troops inside Ethiopia or cross-border fire
[Africa] Official confirmation of Ethiopia's Somalia drawdown, and al-Shabaab moves into areas it vacates
[Europe] Repeat strikes on Kyiv's bridges or on power feeding a nuclear plant; the Southern Bridge reopening or pontoon crossings appearing
[Europe] Further spillover into Moldova, Romania or Poland, and progress on Poland's "pre-war readiness" bill
[Cyber] A MikroTik advisory naming the RouterOS build that fixes CVE-2026-84411, or a KEV addition for it
[Cyber] NetScaler mass-compromise counts (Shadowserver, watchTowr) or a CISA emergency directive
[Americas] The judge's in-camera review of the boat-strike legal memo (due 2026-10-14); a first US land strike on cartel targets; the result of Brazil's 2026-10-04 election and its stance on the Shield of the Americas
[Indo-Pacific] The next Second Thomas Shoal resupply (due early to mid November) and any PLA aircraft basing at Ban Keun, Laos

Cross-desk links #

Hormuz and the Red Sea drive the fuel shock. Strikes on tankers in Hormuz and at Yanbu, plus Iran's closure conditions, keep refined-product flows from the Gulf at about a fifth of normal. That tightens physical crude (Dated Brent above $120) and diesel. The pressure produced a US threat to ban diesel exports, which led to the G7 stock release. China's halt of October fuel exports takes the main Asian swing supplier out of the market, so Asian and European buyers compete for the same Atlantic diesel. (Commodities, Middle East, Indo-Pacific)
Europe pays twice. European diesel prices react to Hormuz. Meanwhile Ukraine keeps striking Russian refineries, and Putin puts the cost at 1% of Russian GDP, which squeezes Russian product exports into the same tight market. Russia's 27% defence budget increase is financed in part by those same energy revenues. (Europe, Commodities)
The Red Sea is now threatened from both shores. The Houthis hold Bab el-Mandeb on the Yemeni side, and Saudi Arabia is planning to retake it. On the African side, Ethiopia and Eritrea have broken relations, and Ethiopia's army chief accuses Eritrea of backing the rebels. Shipping through the strait faces risk from both conflicts, and Ethiopia's trade corridor through Djibouti sits between them. (Middle East, Africa, Commodities)
Ethiopia's war weakens Somalia's security. A 3,000-plus Ethiopian drawdown from Somalia would arrive just as the UN-funded logistics for the AU mission expire in December 2026. (Africa)
Korea and Ukraine. Zelenskyy's disclosure at the UN that two North Korean prisoners were sent to South Korea caused a rift with Seoul, while North Korea is reportedly preparing another 10,000 troops for Russia. (Europe, Indo-Pacific)
Space rhetoric follows the Ukraine war. Dmitry Medvedev's threat to bring down Starlink satellites ties counterspace risk to Ukraine's dependence on Starlink. Germany's ATHENE-1 anti-jamming satellite and Russian GPS interference on NATO's northern flank are part of the same contest. (Space-Arctic, Europe)

Desk assessments #

Commodities, Shipping & Sanctions #

Bottom line: the market's problem is now fuel, not crude. Gulf crude is flowing again but refined products are not, so Dated Brent and diesel carry the stress while ICE Brent eases. The G7 release and lower European gas prices take some edge off, but China's export halt and continuing tanker strikes keep physical markets tight into mid-October.

Developments

Brent was at $107.24 and WTI at $94.10 on 2026-09-28 after Trump rejected Iran's proposal. By 2026-10-02 ICE Brent had slipped to about $101 while Dated Brent rose above $120. OilPrice.com attributes the gap to the European diesel stock release, which EU governments were still weighing, to "droned tankers" in Hormuz, and to China reinstating its product export ban. reported (OilPrice.com; OilPrice.com)
The G7 and partners will release up to 100 million barrels of emergency oil and diesel over four months. The release is coordinated by the IEA and follows pressure from the Trump administration. A later G7 statement says the total may include barrels not yet delivered under the March release. confirmed (gCaptain/Bloomberg)
Trump said a US diesel export ban could have "a negative impact on gasoline" but did not rule it out. Reuters sources say Washington pressed Germany and France to release diesel or face a ban. reported (OilPrice.com)
Kpler data: crude through Hormuz reached a seven-day average of 13.5M b/d, matching the pre-war baseline, while refined products were at 677,000 b/d against 3.6M b/d before the war. reported (Hellenic Shipping News, citing Kpler)
At least six vessels were reported hit in the Strait of Hormuz in the week to 2026-10-02. Kuwait Oil Tanker Company suffered its second VLCC strike in four days, and a projectile attack briefly disrupted loading at Yanbu. reported (gCaptain; Splash247)
Saudi Arabia restarted crude loadings at Yanbu on 2026-09-29 after the East-West pipeline resumed partial service. Full flows of about 4M b/d will likely take weeks. reported (OilPrice.com, citing Reuters)
China's major refiners suspended most refined-fuel exports for October. reported (OilPrice.com, citing Reuters)
An estimated 21 LNG cargoes left Hormuz in September, the most in any month since the war began but well below pre-war levels. The Dutch TTF front-month fell to €71.90/MWh on 2026-10-02. reported (OilPrice.com, citing Reuters; Hellenic Shipping News)
On 2026-10-01 Treasury sanctioned Iran's state railway and two rail operators, the carmakers Iran Khodro and SAIPA, and HEPCO and its China-based subsidiary. In a separate action it targeted the Russia-linked A7 financial network. confirmed (OFAC; gCaptain)
The UK sanctioned five LNG carriers, including three Arc7 ice-class vessels tied to Arctic LNG 2, in a new Russia package. reported (gCaptain)
The US Strategic Petroleum Reserve held 284.6M barrels in the week to 2026-09-18, its lowest since 1982 (406.0M a year earlier). DOE is offering a final 40M-barrel tranche of its IEA pledge. reported (OilPrice.com, citing EIA)

Context and baseline

Metric	W39	W40	Source
ICE Brent	~$104 to $106	$107.24 (09-28) to ~$101 (10-02)	OilPrice.com
Dated Brent	not tracked	above $120 (10-02)	OilPrice.com
Brent-WTI	~$12	$13.14 (09-28)	OilPrice.com
TTF	~€80/MWh	€71.90 (10-02)	HSN
Hormuz crude	2 to 4 commodity transits/day (Reuters counts)	13.5M b/d seven-day average, at pre-war level (Kpler)	Kpler via HSN
Hormuz refined products	not tracked	677k b/d vs 3.6M pre-war	Kpler via HSN
US SPR	not tracked	284.6M bbl (lowest since 1982)	EIA via OilPrice.com

The W39 transit count and this week's Kpler volume measure different things: vessel numbers against barrels, much of it loaded by ship-to-ship transfer and under US escort. They cannot be reconciled from the sources in hand.

Third-party analysis

Goldman Sachs (Yulia Zhestkova Grigsby) argues Gulf exports have recovered and the remaining premium reflects escalation risk and record-low stocks. Goldman expects Brent to ease to $85 by year-end and $80 in 2027, and warns a US diesel ban would raise US gasoline prices (Hellenic Shipping News).
BRS Shipbrokers says a US diesel export ban would upend Atlantic clean-tanker demand, and the hit to MR tanker earnings would be "swift and severe" (Hellenic Shipping News).
Where the evidence points: Goldman's fading-premium view fits crude. The physical data (Dated above $120, products at about 19% of pre-war, China's halt) favour continued tightness in fuels for the next few weeks. The G7 barrels arrive over four months and may partly be recycled.

Assessment ICE Brent will likely stay above $95 through 2026-10-11 (moderate confidence), and fuel prices will likely stay elevated relative to crude. A US diesel export ban in the next two weeks is unlikely now that the G7 has acted, though Trump has not ruled it out (low confidence). Hormuz tanker attacks are very likely to continue (moderate).

Business and commodity impact

Diesel and jet fuel: prices point up. China's halt and Gulf product shortfalls outweigh the G7 cushion.
Physical crude: cargoes priced off Dated Brent cost about $19/bbl more than the futures headline implies.
Clean tankers (MR): volatile, hinging on the US diesel decision.
Crude tankers: war-risk premiums stay high on both Saudi routes.
European gas: eased but storage-sensitive into winter.

Framing vs. primary data

Headlines such as "oil falls as Gulf flows recover" coexist with Dated Brent above $120. Both are true: the futures-versus-physical gap is the story.
"Hormuz at pre-war levels" (Kpler, crude) and "the strait stays closed" (Iran, 2026-10-04) describe different things: crude moving under escort and transfer arrangements against normal commercial transit.
The G7 "100 million barrels" may include barrels already pledged in March, so the new supply is likely smaller than the headline.

Middle East & Gulf #

Bottom line: diplomacy has stalled and the war is widening south. Iran has the US reply and restated its conditions; meanwhile tankers, Yanbu and (by Houthi claim) Riyadh are being hit, Saudi Arabia is planning a Yemen offensive, and the US is adding a third carrier.

Developments

Iranian FM Araghchi received US feedback on Iran's seven-day trust-building plan via Qatari mediators in Doha on 2026-09-29. reported (Al-Monitor, citing Reuters)
On 2026-10-04 Iran said the Strait of Hormuz will not reopen until seven conditions set out in a June interim agreement with the US are met. reported (HuffPost, citing Reuters and Iranian state media)
Saudi Arabia is planning an offensive against the Houthis aimed at reversing their seizure of Bab el-Mandeb. Officials say it will be led by Yemeni ground forces overseen by Riyadh, which will provide air support; Pakistan has not decided whether to send troops. reported (Times of Israel, citing Reuters)
On 2026-10-03 the Houthis claimed a ballistic-missile and drone attack on Aramco in Riyadh. A witness told Reuters a large plume of smoke and fire rose near an Aramco facility. A spokesman for the Saudi-led coalition called the Houthi claims "misleading". unconfirmed (Al Jazeera; Al-Monitor, citing Reuters)
The US is sending a third aircraft carrier strike group toward Iran, followed by the Makin Island MEU with more than 2,000 Marines. By the end of November, three carriers and two amphibious groups will be near Iran. The Wall Street Journal (via Al Jazeera) puts the addition at 9,000 to 10,000 troops. reported (Al Jazeera; Al Jazeera)
US forces were set to leave their last bases in Iraq by 2026-09-30, which Iran and its allies celebrated as a victory. reported (Al-Monitor, citing Reuters)
On 2026-09-30 the co-pilot of flydubai FZ1073 (Dubai to Tel Aviv) attacked the pilot. The UAE prosecutor general said he attempted a "terrorist attack" with an axe. The crew and passengers overpowered him, and the aircraft landed at Tabuk, Saudi Arabia, carrying about 180 passengers, most of them Israeli. confirmed (Al-Monitor, citing Reuters; Times of Israel)

Context and baseline Last week's baseline was a coercive stalemate. Trump rejected Iran's plan on 2026-09-26, the last CENTCOM kinetic release was on 2026-09-08, and Houthi missiles at Riyadh were intercepted. This week the formal US reply arrived and was answered with the same seven conditions. No new CENTCOM kinetic release was found. The pressure moved onto shipping and Saudi infrastructure: on top of this week's strikes, the East-West pipeline had been out of service from 2026-09-10 until its partial restart on 2026-09-29. Two carriers plus a third is the heaviest US naval posture in the region since at least late September.

Third-party analysis

Al Jazeera's analysis of the deployment asks whether the build-up signals escalation and gives the troop figures above (Al Jazeera). Note the outlet is Qatari state-funded, and Qatar is a mediator.
Goldman Sachs reads the remaining oil premium as escalation risk rather than lost supply (see Commodities).
Gap: we found no named think-tank analysis of the US reply or the Saudi offensive plan this week. Crisis Group, the Washington Institute and Carnegie were silent in our sources.

Assessment

A deal before mid-October is very unlikely (moderate confidence).
Attacks on shipping and Saudi infrastructure are likely to continue (low to moderate), with the Saudi offensive the main escalation risk later in October.
A resumed direct US-Iran exchange of fire within two weeks remains a roughly even chance (low). The carrier build-up raises capacity, but no release shows intent.

Business and commodity impact

War-risk cover for Gulf and Red Sea loadings stays high.
Yanbu is not a reliable bypass while it is being hit.
Gulf-Israel aviation security costs rise after the flydubai attack.

Framing vs. primary data

Al-Monitor's headline "US forces exit Iraq" ran over a body saying they were "set to pull out", so completion is not confirmed in our sources.
One Al Jazeera headline says the deployment "includes 50,000 troops", while another piece cites 9,000 to 10,000 additional troops. The first is likely total presence, the second the increment. The sources do not reconcile them.

Europe & Russia/Ukraine #

Bottom line: Russia is raising pressure through strikes on infrastructure and nuclear signalling rather than ground gains, which ISW finds went net negative in September. NATO's eastern flank faces more hybrid and spillover risk but no sign of a conventional attack.

Developments

Kyiv bridges. Russian drones attacked Kyiv's Southern Bridge over the Dnipro on 2026-10-01 and 10-02, and it remains closed to cars and metro trains. The Northern Bridge was hit on 2026-10-03. Meduza says the bridges had not previously come under attack in the war. reported (Meduza; Kyiv Independent)
Pylon-cutting warhead. Russia for the first time used a jet drone with a warhead designed to cut high-voltage pylons and steel bridges, according to Zelensky adviser Serhii Beskrestnov (2026-09-30). It has a 40 kg main charge and four extra modules. reported (Kyiv Independent)
"Rules of war" claim. Zelensky told the FT that Putin ordered commanders to abandon the rules of war in airstrikes, citing intercepts. The Kremlin says Russia does not strike civilian infrastructure. unconfirmed (Meduza)
Kaliningrad warning. On 2026-09-30 Russia warned, in an embassy post and a document Reuters obtained, that it would be ready to use "all its arsenal, including nuclear weapons" if NATO tries to isolate Kaliningrad. Putin echoed the warning on 2026-10-01; the Kyiv Independent headline renders it as "all weapons at our disposal". confirmed (Meduza; Kyiv Independent)
Poland's readiness bill. Poland has drafted a "pre-war" readiness law allowing earlier deployment of Polish and allied troops. The bill's text and status have not been verified. reported (Kyiv Post)
Moldova spillover. Five Russian weapons, including Banderol missiles and drones, violated Moldovan airspace and exploded on its territory, President Sandu said on 2026-10-03. reported (Kyiv Independent)
Black Sea. A Russian strike on a Liberian-flagged cargo ship in the Black Sea killed one crew member and injured three (2026-10-03). reported (Kyiv Independent)
Milrem arson. Estonian FM Margus Tsahkna said Estonia can say "with certainty" that the 2026-08-15 arson at Milrem Robotics was sabotage ordered by Russian special services. confirmed (Kyiv Independent; Euromaidan Press)
Leipzig sabotage. The Telegraph named a suspected organiser of the Leipzig airport sabotage and linked the operation to GRU unit 29155. reported (Meduza, citing The Telegraph)
2027 defence budget. Russia's draft 2027 budget sets defence spending at 17.1 trillion rubles (6.9% of projected GDP), 3.6 trillion (27%) above the 13.5 trillion set in the 2025 budget. Vlast reports that Ukrainian strikes on refineries and warehouses drove the increase. confirmed (Meduza, citing Reuters; Meduza, citing Vlast)
Operation Vivaldi. Ukraine's operation near Lyman retook Ridkodub, Nove and Katerynivka, with 51 km² of newly reported gains (Ukrainian 3rd Army Corps claim). ISW says Ukrainian forces advanced without coming under Russian drone strikes. reported (Kyiv Independent; Euromaidan Press, citing ISW)
Mobilization and North Korean troops. Zelensky warned that Russia has begun "additional mobilization" and that North Korea is preparing another 10,000 troops on top of more than 8,000 already in Russia. unconfirmed (a party's claim) (Kyiv Independent)

Context and baseline

Front line. Last week's baseline was slow, village-level Russian gains. ISW now counts 175.54 km² seized by Russia in September against 256.35 km² lost, a net loss of 80.81 km². That figure includes at least 147 km² near Lyman liberated in earlier months and recorded only in September (Euromaidan Press, citing ISW). Even adjusted, September was not a month of Russian progress.
Strikes. W39 brought mass strikes on Odesa and Kyiv. W40 adds the bridges and the pylon warhead, which is a qualitative escalation toward transport and grid backbone targets.
Defence spending. 17.1 trillion rubles in 2027 against 13.5 trillion in the 2025 plan.

Third-party analysis

ISW (pro-Ukraine framing) assesses that Russia is likely trying to force Ukraine's capitulation by spring 2027 through long-range strikes, and that Putin may hold off on new mobilization until he sees whether the strikes work (Euromaidan Press).
Phillips O'Brien (St Andrews, opinion) argues that Russia's land and sea struggles leave it relying on a ranged campaign to make Ukraine "unliveable", which he calls "a strategy based on War Crimes" (Substack). Separately, he argues the US is trying to divide European NATO (Substack).
Peter Dickinson (Atlantic Council, hawkish and pro-NATO): "Putin aims to break Ukraine by terrorizing the civilian population" (Atlantic Council).
Disagreement. On mobilization, Zelensky says it has begun, ISW thinks Putin may wait, and the Kremlin calls the talk "nonsense". The evidence favours ISW: no mobilization decree has been reported, only routine autumn conscription.

Assessment

Russia will very likely keep striking Kyiv's transport and energy infrastructure through October (moderate). Drones alone are unlikely to drop the bridges, according to Ukrainian experts cited by Meduza.
A deliberate attack on a NATO state in the next month is very unlikely, while spillover incidents are likely (moderate).
A large Russian encirclement at Dobropillia or in Kharkiv in the next two weeks is very unlikely (moderate).

Business and commodity impact

Black Sea: shipping and grain-export insurance stay elevated after a second straight week of strikes on civilian ships.
Counter-drone and defence electronics in Europe: demand rises.
Russian refining: Ukrainian strikes continue to curb Russian product exports into an already tight diesel market (see Commodities).

Framing vs. primary data

"Russia advancing" narratives meet ISW's net-loss figure. The gap is mostly accounting: Vivaldi gains were recorded retroactively, and Ukraine keeps operational secrecy.
The mobilization claim is not backed by any decree.

Africa #

Bottom line: Ethiopia's renewed war is the desk's dominant story and has become an interstate crisis with Eritrea. Federal forces appear to have retaken Mekelle, but the rebels call their exit temporary, and Ethiopia's possible Somalia drawdown spreads the risk across the Horn.

Developments

A seven-group Ethiopian Peoples' Forces Alliance, including the TPLF and the Fano National Movement, was announced on 2026-09-20 and began fighting on 2026-09-23. MSF says more than 720 wounded have reached Tigray hospitals since 2026-09-22. reported (AllAfrica, citing MSF; Responsible Statecraft)
Hospital sources told the BBC that at least 52 civilians were killed during three days of fighting around Alamata. reported (BBC)
Ethiopia ordered the closure of its embassy in Eritrea and gave 10 Eritrean diplomats 48 hours to leave. Eritrea severed all diplomatic ties on 2026-10-01. Explosions were heard in Addis Ababa on 2026-09-30 and 10-01. confirmed (Al Jazeera; MSN, citing Reuters)
An anonymous source linked to the rebel alliance claimed drone strikes on Addis Ababa. unconfirmed (MSN, citing Reuters)
Ethiopia's army chief accused Eritrea of financing the rebels and suggested that they would need support from Sudan and Egypt. Cairo rejected the accusation. reported (Newsday, citing AP; Middle East Monitor)
Federal forces retook Mekelle airport on 2026-10-03. On 2026-10-04 a local journalist said they were in full control of the city, and the TPLF said it had "temporarily moved out of Mekelle". reported (Rio Times; Yahoo, citing AFP; Al Jazeera)
Ethiopia is preparing to withdraw more than 3,000 troops from Somalia, Bloomberg reports, citing people familiar with the plan. reported (Hiiraan Online, citing Bloomberg)
Sudan: the SAF captured Mazroub, the administrative capital of West Bara locality in North Kordofan, on 2026-10-02. Neither Sodari nor Sheikan locality is fully under SAF control. reported (Sudan War Monitor)
DRC Ebola: deaths reached 4,018 and confirmed cases 8,300 across seven provinces. Six new cases were recorded in areas held by AFC/M23, according to the group. An Ebola transit camp was burned by soldiers during a weapons search, and 19,000 people fled. reported (Al Jazeera; US News, citing Reuters)
Niger: more than 50 members of Niger's security forces were killed in two attacks in the west, claimed by the Islamic State's Sahel affiliate. reported (TimesLIVE, citing AFP)

Context and baseline

Last comparable episode: the 2020 to 2022 war, in which "as many as 600,000 people may have died", ended in the November 2022 Pretoria agreement, which did not produce a wider political settlement (The Conversation). This round's toll so far: more than 720 wounded admitted, at least 52 civilians killed around Alamata.
What is new: the war has reached the capital's airspace, there is an interstate diplomatic break, and Fano, which fought alongside the government last time, is now allied with the TPLF.
Sudan: last week the SAF took Sodari town; this week it added Mazroub, and the RSF still holds Umm Badr and Hamrat al-Sheikh.
DRC Ebola: deaths are now more than a third of the 2014 to 2016 West Africa toll of about 11,300. The WHO, per Al Jazeera, projects the outbreak could exceed it.

Third-party analysis

Alemayehu Fentaw Weldemariam (Indiana University) argues that the root is "an unresolved constitutional struggle over federalism", and that Pretoria was "never followed by wider political negotiations". He also sees a risk of interstate escalation over Red Sea access (The Conversation).
Dan M. Ford (Responsible Statecraft, Quincy, restraint view) warns the fighting "threatens to engulf the entire region" (Responsible Statecraft).
Horn Review (Addis Ababa-based; leans toward the federal government's view) argues Ethiopia can consolidate in the north without advancing on Asmara. In its reading, Eritrea must either accept the loss of its buffer or escalate (Horn Review).
Amnesty International (advocacy) urged an emergency session of the AU Peace and Security Council (The Reporter Ethiopia).
Where the evidence points: the spillover reading. The embassy rupture, Egypt's denial, and regional rivals meeting in Egypt all point that way, though no interstate fighting is reported.

Assessment

Federal forces will likely hold Mekelle through 2026-10-11 (moderate), and fighting elsewhere is very likely to continue.
A direct, acknowledged Ethiopia-Eritrea clash by 2026-10-18 is unlikely (low).
The RSF very likely still holds Umm Badr and Hamrat al-Sheikh on 2026-10-11 (moderate).

Business and commodity impact

Aviation: Ethiopian Airlines halted flights to Tigray airports, and Ethiopia's hub is exposed if fighting reaches the centre (speculative).
Trade routes: risk is rising on the Djibouti corridor and the Red Sea.
DRC mining: Ebola in seven provinces threatens logistics in mining areas. No price effect yet.

Framing vs. primary data

On Mekelle, Al Jazeera's "government forces seize capital" headline sits alongside Rio Times's "control unclear" and the TPLF's "temporarily moved out". This is the same event reported with different certainty.
The army chief's accusation is headlined as targeting "Eritrea, Sudan and Egypt", but the body has him accusing Eritrea directly and only insinuating a role for the other two.
Earlier reporting placed stranded Israelis "in Tigray". Later reports put them in Lalibela, in Amhara.

Cyber & Critical Infrastructure #

Bottom line: internet-facing appliances remain the main way in, with exploited flaws this week in NetScaler, Cisco SD-WAN and FortiMail, plus a critical RouterOS warning. Law enforcement had its best week against criminal crews in months: ShinyHunters and KillSec.

Developments

KEV additions, 2026-09-27 to 10-02 (7 in total):
- 09-27: Citrix NetScaler CVE-2026-88771 and CVE-2026-88772.
- 09-29: Apple CVE-2026-86950.
- 09-30: Cisco Catalyst SD-WAN Manager CVE-2026-76504.
- 10-01: Fortinet FortiMail CVE-2026-104286.
- 10-02: Zammad CVE-2026-102489 and CVE-2026-102490. confirmed (CISA: 09-27, 09-29, 09-30, 10-01, 10-02)
MikroTik RouterOS. CISA warned of CVE-2026-84411, a critical pre-authentication integer underflow in RouterOS's web-management HTTP handling that could allow remote code execution or denial of service. CISA lists versions below 7.24 as affected and relays vendor advice to update to 7.23 or later. MikroTik had not published an advisory. reported (BleepingComputer)
ShinyHunters, Netherlands. Dutch police confirmed that a 24-year-old Amsterdam man arrested on 2026-09-15 is suspected of a role in ShinyHunters. The FBI urged other members to turn themselves in. confirmed (BleepingComputer; BleepingComputer)
ShinyHunters, FBI data. ShinyHunters said it never intended to publish the stolen FBI data, calling the episode a "marketing campaign". reported (Nextgov/FCW)
ShinyHunters, Jordan. A suspected member known as "Rey" (named as Saif al-Din Khader) was reportedly detained in Jordan and is cooperating with the FBI. This rests on Reuters and two unnamed sources. reported (BleepingComputer)
KillSec. "Operation KillSwitch" seized the KillSec ransomware gang's leak site and servers, made three arrests, and identified a 16-year-old as the alleged administrator. reported (BleepingComputer)

Context and baseline KEV took 7 additions this week against 10 in W39. Edge and network devices were 3 of the 7 (NetScaler, SD-WAN Manager, FortiMail), against 6 of 10 last week. The drop is in count, not in kind: every edge flaw this week affects internet-facing gateways. The last comparable law-enforcement week was rare in the baseline, which had no ShinyHunters arrests until now.

Third-party analysis

Reporting this week came from BleepingComputer, Krebs on Security and Nextgov. We found no named analyst assessment of the edge-device trend or the ShinyHunters arrests. Microsoft Threat Intelligence published on Star Blizzard tradecraft, and Cisco Talos on China-nexus activity, but neither addresses this week's KEV pattern.
Gap: no Shadowserver or watchTowr compromise counts for NetScaler were found.

Assessment

At least one more edge or network-device KEV addition next week is very likely (moderate).
NetScaler mass compromise is likely given exploitation in default configurations, but unmeasured (low).
ShinyHunters leak activity is likely to fall in the near term (low).

Business and commodity impact

No commodity effect.
Security teams should prioritise patching gateways (NetScaler, FortiMail, SD-WAN) and routers. Exposure carries extortion risk rather than physical disruption.

Framing vs. primary data

BleepingComputer, citing Dutch police, dates the Dutch ShinyHunters arrest to 2026-09-15; the confirmation, not the arrest, came this week.

Indo-Pacific #

Bottom line: China consolidated rather than escalated this week. It brought a new surveillance drone to Scarborough, claimed an expanded control zone, and opened its first overseas air base in Laos, while Taiwan finally received its first F-16Vs. The Korea-Ukraine POW row is a diplomatic side effect of the Russia war.

Developments

WZ-7 at Scarborough. On 2026-09-27 China deployed a WZ-7 high-altitude reconnaissance drone at Scarborough Shoal for the first time, alongside frigates and a corvette. Chinese state media claimed expanded "control" around Scarborough and Second Thomas Shoals beyond 24 nautical miles. confirmed for the deployment, with the state-media claim attributed (USNI News; Global Times)
Laos air base. China opened its first overseas air force base this week: a joint training centre at Ban Keun airfield, north of Vientiane in Laos. Analysts said it signals a growing foreign military footprint. reported (RFI, citing AFP)
Taiwan F-16Vs. Taiwan received its first two F-16V Block 70s at Chihhang Air Base, Taitung, on 2026-10-02. They are part of an $8bn deal for 66 aircraft approved in Trump's first term. reported (Al Jazeera; US News)
Korea-Ukraine POW row. Zelenskyy said at the UN General Assembly that Ukraine had transferred two captured North Korean soldiers to South Korea. President Lee Jae Myung called on Kyiv to acknowledge the agreement and apologise. Seoul says the transfer was meant to be secret; Kyiv says no secrecy agreement existed. reported (Al Jazeera; AP)

Context and baseline

Philippine resupply. The July 2024 provisional arrangement allowed 13 unimpeded resupply missions through 2026-03-04 (AMTI). China blocked a mission on 2026-09-24, then held drills around Scarborough on 2026-09-27. This week added the drone and the zone claim, but no new verified blocking.
North Korea. The baseline is 15 missiles on 9 occasions in 2026 to 2026-09-20. No new launch was verified this week.

Third-party analysis

Analysts quoted by RFI/AFP read the Laos base as the start of a wider overseas footprint (RFI).
Gap: we found no named analyst assessment this week of the Scarborough zone claim or the F-16V delivery, and no dissent to weigh. AMTI's earlier work frames the 2024 understanding as tacit, with unpublished terms.

Assessment

China will likely keep shadowing or obstructing Philippine activity around both shoals over the next month (moderate).
The next real test is the resupply due around early to mid November.
The Laos base is very unlikely to host combat aircraft in the near term on current reporting, which describes it as a training centre (low).

Business and commodity impact

No immediate market effect.
Rising gray-zone pressure keeps a risk premium on South China Sea routes, and on Philippine and Vietnamese offshore energy work (speculative).

Framing vs. primary data

Chinese state media's "expanded control" claim is a claim, not a verified change on the water.

Americas #

Bottom line: SOUTHCOM is building permanent capacity (an autonomous-warfare site at Guantanamo) and keeping land strikes on cartels "on the table". Courts and Congress are converging on the legal basis for the boat strikes and the terms of the Venezuela oil deal, both on 2026-10-14.

Developments

Guantanamo autonomous-warfare site. SOUTHCOM announced that Guantanamo Naval Base will host the first training and mission support site for the SOUTHCOM Autonomous Warfare Command. reported (CiberCuba)
Drone defence memo. A Hegseth memo says the "fence line" should not limit defence against drones, which matters for Guantanamo. reported (CiberCuba)
82nd Airborne. SOUTHCOM says the 82nd Airborne can deploy within 18 hours across its region, which includes Cuba. reported (Rio Times)
Land strikes. SOUTHCOM's top general said land strikes on cartels are "options" and that "all options are on the table". reported (MSN)
Boat-strike memo. A federal judge ordered the government to give him the legal memo underpinning the boat strikes by 2026-10-14 for in camera review. The government had claimed secrecy on three grounds, and officials had repeatedly cited the memo in public. reported (Rio Times)
Venezuela oil deal. Five senior House Democrats asked Secretary Rubio for the Venezuela oil-deal text and related records by 2026-10-14. reported (Rio Times)
Brazil election. Brazil voted on 2026-10-04 in a close race between Lula and Flávio Bolsonaro. confirmed (Al Jazeera)

Context and baseline

Strike tempo. The baseline is the Lead IG Q3 count: 19 vessels struck and about 56 killed, three-quarters in the eastern Pacific. No new strike count was verified this week. The Q4 report is due around late October.
Cuba. Planning was assessed as routine in W39. This week's moves (an autonomous-warfare site, drone-defence guidance, airborne readiness messaging) add infrastructure and signalling, but no mobilization orders, NOTAMs or evacuation advisories were found.

Third-party analysis

Michael Mattler (Just Security) asks how Congress and the public will learn the terms of what the administration calls "the biggest oil deal in world history" (Just Security).
Antonio De Loera-Brust (Responsible Statecraft, Quincy, restraint view) argues that US intervention blowback in Latin America "always" has a long fuse, using Sandino's 1927 insurgency in Nicaragua as the precedent (Responsible Statecraft).
Gap: there is no pro-operation analyst voice in our sources this week to set against the restraint view.

Assessment

A US strike on Cuba within 30 days remains unlikely (moderate).
A first US land strike on cartel targets in Q4 is a roughly even chance (low), with the 2026-10-14 court and congressional deadlines a possible constraint.

Business and commodity impact

Venezuelan oil-deal terms remain opaque; oversight could delay or reshape investor exposure. No price effect yet.
A Lula or Bolsonaro win sets Brazil's stance on the Shield of the Americas and on Chinese mineral investment.

Framing vs. primary data

Pro-exile outlets frame SOUTHCOM's 18-hour readiness message as a signal to Havana. The statement itself is standard readiness messaging, and no orders accompany it.

Space & Arctic #

Bottom line: the Arctic build-up continued on several fronts this week, with Finland's F-35s, Danish MQ-9B trials, Royal Marines in the Faroes and US-Canadian exercises. In space the escalation stayed verbal, Medvedev's threat to Starlink being the headline example.

Developments

Starlink threat. Dmitry Medvedev, deputy head of Russia's Security Council, warned of "a full-scale space war" and said Starlink satellites "will then come dropping like decorations off a dried-out Christmas tree". The Sun's headline attributed the threat to Putin. unconfirmed (tabloid relay of a Russian official's remarks) (The Sun)
ATHENE-1. Germany's military research satellite ATHENE-1 reached orbit on SpaceX Transporter-18 on 2026-10-01, carrying 15 experiments. It is described as an anti-jamming research satellite. reported (MSN)
DoD space policy. The Pentagon replaced Marc Berkowitz as space policy chief. His former deputy Michael Gancio, most recently an adviser to Senate intelligence chair Tom Cotton, is acting assistant secretary. reported (Breaking Defense)
Greenland agreement detail. The US-Denmark-Greenland agreement, signed at the UN on 2026-09-22, has no expiration date and stays binding if Greenland becomes independent. It does not transfer sovereignty. It permits US defence areas at Narsarsuaq and Mestersvig, and bars non-NATO states from military installations without all three parties' consent. reported (Latin Times)
Finland's F-35s. Finland presented its first two F-35As in Rovaniemi on 2026-10-01. reported (Defence Industry Europe)
Danish MQ-9B trials. Denmark began testing MQ-9B drones to practise tracking Russian ships in the Arctic. Their main mission will be watching the GIUK gap for Northern Fleet vessels. reported (Militarnyi)
Royal Marines in the Faroes. Royal Marines returned to the Faroe Islands for the first time since the Second World War. reported (The National)
Operation Tundra Merlin. Alaskan Command's Lt. Gen. Robert Davis described Operation Tundra Merlin as preparing US and Canadian forces "to detect, deter and defeat threats approaching North America". reported (Yahoo)

Context and baseline

W39 events: the US acknowledged on-orbit "space control weapons" (2026-09-14), China and Russia condemned it, and the Greenland deal was signed (2026-09-22).
W40: no ASAT test, proximity operation or Greenland construction start was reported. The change is in allied force presence across the North Atlantic and the Arctic, and in Russian rhetoric.

Third-party analysis

No named-analyst assessment of this week's developments was available. A reported Chinese satellite-refuelling milestone could not be confirmed from a primary source, so it is not assessed here.

Assessment

Arctic militarization continuing through Q4 is almost certain.
A destructive Russian or Chinese ASAT test in Q4 is very unlikely (moderate).
Medvedev-style threats against Starlink are likely to continue without action (moderate).

Business and commodity impact

Defence demand rises for Arctic ISR (MQ-9B) and anti-jam navigation.
Greenland's mining investment will face consent screening for non-NATO capital (speculative on timing).

Framing vs. primary data

The Sun's headline says "Putin threatens". Its body quotes Medvedev.

Cross-cutting: commodities and markets #

Driver	Affected market	Direction	Magnitude or evidence	Horizon
Gulf refined-product shortfall; China's October export halt	Diesel, jet fuel (Europe, Asia)	Up	Hormuz products 677k b/d vs 3.6M pre-war (Kpler)	Weeks
Physical squeeze against futures	Cargoes priced off Dated Brent	Up	Dated above $120 vs ICE ~$101 (10-02)	Weeks
G7/IEA stock release	European diesel, crude	Down	Up to 100M bbl over four months; may include March barrels	Months
US diesel-export ban threat	MR clean tankers, Atlantic diesel	Volatile	BRS: MR earnings hit "swift and severe" if imposed	Weeks
Tanker strikes in Hormuz and at Yanbu	War-risk premiums, VLCC rates	Up	At least 6 vessels hit; Yanbu loading briefly disrupted	Weeks
Partial Gulf LNG recovery	European gas (TTF)	Down	€71.90/MWh (from ~€80 in W39); 21 LNG cargoes in September	Weeks
US SPR depletion	US crude buffer	Up risk	284.6M bbl, lowest since 1982	Months
Russian strikes on Black Sea ships	Black Sea freight and grain insurance	Up	Cargo ship hit 10-03 (1 killed), second straight week	Weeks
Ethiopia war and Eritrea break	Djibouti corridor, Red Sea risk, regional aviation	Up risk	Ethiopian Airlines halted Tigray flights	Months

Framing checks #

Brent is down, oil is not. ICE Brent fell toward $101 while Dated Brent rose above $120. The futures headline understates physical tightness.
Hormuz "at pre-war levels" against "closed". Kpler's crude volume of 13.5M b/d is at the pre-war level. Iran says the strait stays shut, and product flows are at about 19% of normal. The measures differ: crude moving under escort and transfer arrangements, against commercial transit.
The G7 "100 million barrels". A later G7 statement says this may include barrels not yet delivered from the March release, so the new supply is likely smaller.
"US forces exit Iraq". The headline runs over a body that says US forces were "set to pull out" by 2026-09-30.
US troop numbers. One Al Jazeera headline says the deployment "includes 50,000 troops", while its analysis piece cites 9,000 to 10,000 additional troops (WSJ). The first is likely total presence, the second the increment.
"Putin threatens space war". The Sun's headline attributes it to Putin. The quoted remarks are Medvedev's.
Ethiopia's accusations. Headlines say the army chief accused "Eritrea, Sudan and Egypt". The body has a direct accusation only against Eritrea.
Russian advances against ISW's data. ISW counts a net Russian loss of 80.81 km² in September, partly because of retroactive recording of 147 km² of Ukrainian gains.

Sources #

Commodities

Middle East

Europe

Africa

Cyber

CISA KEV alerts: 09-27, 09-29, 09-30, 10-01, 10-02
BleepingComputer, MikroTik
BleepingComputer, Dutch arrest
BleepingComputer, FBI
Nextgov/FCW
BleepingComputer, Jordan
BleepingComputer, KillSec

Indo-Pacific

Americas

Space & Arctic

How this was made: methodology and limits.