S2 Underground
@s2_underground • 121,249 subscribers
Intel Reports, Mapping Products, and Communications doctrine to help Prepared Citizens through the hard times ahead. Christ is King!
Videos
//The Wire//1300Z October 21, 2026// //SPECIAL REPORT// //BLUF: MAJOR CYBERSECURITY VULNERABILITIES EXPOSED GLOBALLY, AS TWO SEPARATE MAJOR CODING FLAWS AFFECT MAJORITY OF INTERNET-CONNECTED DEVICES.// -----BEGIN TEARLINE----- Global: Around the world, two major cybersecurity incidents are underway. The first incident involves an Indian cybersecurity firm using poor cybersecurity practices in generating Certificate Authorities, which might allow malign actors to exploit web-connected devices. The second issue revolves around an exploit discovered in the PHP programing language, which could allow malign actors to intercept traffic to and from affected web servers, and theoretically take control of them. Analyst Comment: Today will be a very interesting day for the internet. Neither issue is worth undue panic, but these incidents are causing questions for the bedrock of internet security. In terms of what the average user should do, today will be "update day" for the majority of the planet. Anyone who runs internet-connected home servers, hobby PC's, or muddles in the tech world at all, will probably want to update their systems sometime today. For more causal internet users, the immediate actions that would be helpful are simply to adhere to good internet security practices: Enabling two-factor authentication for web-connected devices, not re-using passwords, and being aware that phishing attempts will be extremely likely over the next few days, which will seek to capitalize on these major vulnerabilities. -----END TEARLINE----- Analyst Comments: The timing of two major cybersecurity incidents taking place at the same time is exceptionally rare and very remarkable. To be clear, these issues are totally separate from each other, with neither one causing the other. However, due to the sheer scale of both incidents, it's possible that some sort of compounding effect could be achieved. One major global tech vulnerability is bad enough, but two on the same day is very serious. Knowing the rough details of how both incidents came to be, is helpful for understanding the seriousness of these events. The first incident revolves around a vulnerability being discovered within the ecosystem for issuing certificates for various websites. Under normal conditions, when a person visits a website (such as (https:)//www.google.com), a certificate is used to ensure that the website is genuine. Essentially, the web browser itself cross-checks that website with a trusted authority (called a Certificate Authority), which vouches for that website being genuine. This happens after the website gives the webs browser it's certificate, which the browser or app can automatically check against a big list of genuine certificates, to make sure the certificate provided by the website matches what it should be. 18 months ago, the Indian cybersecurity firm eMudhra issued a series bad certificates that had extremely low security; instead of being a long string of numbers which would be hard to crack, some certificates ended up being only the number 4. Since these certificates were genuine, and came from a genuine trusted authority, websites and platforms which trusted these bad keys are now at major risk of exploitation, and malign actors could forge fake keys for any website on Earth, and the fakes would be accepted by most devices (because the keys are genuine, they're just bad). To frame the magnitude of this incident with an analogy, imagine that a large safe company builds a safe that uses a master code to get into their safes. And after selling and installing a bunch of those safes in homes around the world for 18 months, it becomes clear that the master code to get into most of those safes, was the number 4. Under the right conditions, someone who finds the safe could theoretically guess the code without the owner ever doing anything wrong on their part. More importantly, a thief could access the safe for as long as they want (using the master "code"), and the owner would be none the wiser. Now imagine that a thief actually had access to the safe company, and could generate a master key of their own, that would work with any safe sold by that company. That's essentially what has been happening for 18 months. As far as how many websites have actually been compromised, the true number is not known. Theoretically, this incident has the potential to affect every single website and internet-connected device on the planet. eMudhra themselves state that zero fake certificates have been issued using this vulnerability. So in terms of magnitude, the potential scale of this is somewhere between zero, and every device on Earth. Considering that eMudhra themselves allowed this shockingly bad incident to take place (and not being noticed by two separate security audits), trust in this company is quite low. Moreover, this vulnerability will probably be made worse by an exponentially more serious separate incident that was disclosed overnight. The second major cybersecurity incident which was revealed overnight, revolves around a problem being discovered within the PHP programming language. As noted with the eMudhra vulnerability, when a user visits a website, a lot of stuff happens in the background. Certificates get exchanged, databases are consulted, and if all goes well, data is sent to a user's device to load the webpage. PHP is one of the programming languages used to make all of this happen. As of early this morning, a vulnerability was discovered within this programming language itself, which can allow malign actors to breach web servers, by leveraging a vulnerability in the way that PHP handles data from the server. In this way, the PHP vulnerability is much like the eMudhra vulnerability, in that both can allow malign actors to gain unauthorized access to systems. The differences are that both vulnerabilities are completely separate and unrelated...but in theory one could compound on the other, especially since IT departments are scrambling to fix both issues right now. The PHP incident is more serious, because the details were leaked before patches were written, and malign actors were indeed observed trying to take advantage of the vulnerability ahead of it's discovery. Normally, major cybersecurity incidents are not disclosed on a more widespread basis, until patches have been rolled out to fix the problem. This is to prevent malign actors which might not have noticed the vulnerability from knowing about it and capitalizing on it. In this case however, the vulnerability was so severe, that the PHP Foundation released the notice before patches went live. The British National Cyber Security Centre even went as far as to suggest organizations bring their systems offline until a patch is released...in some cases this vulnerability is significant enough to warrant pulling server racks, and websites/servers going offline completely, until the fix is pushed out. As of this morning, many government websites were taken offline globally, and throughout the day millions of websites will also probably be taken offline by IT departments as a precautionary measure, until fixes can be rolled out. In terms of mitigating both events, the most substantial risk will be for internet connected devices which do not receive regular updates. Using a smartphone or a regular web browser will be fine as mass updates were already pushed out days ago, before the disclosure of the certificate vulnerability was made public. The real risk will be for 'Internet of Things' or IoT devices: Smart thermostats, portable power stations, lawn irrigation systems, doorbells, smart TV's and appliances, utility meters, streetlights, dash cams, remote data servers, and many other older devices that have internet connectivity, and still use the bad set of keys. These are the kind of IT disasters that get technicians woken up during the night, and in both cases IT departments around the world are rapidly patching their own devices to fix the vulnerability now that two major cybersecurity incidents are public, and have the potential to become much more serious problems within the cyber realm. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground43,496 просмотров • 3 дней назад
//The Wire//2100Z October 22, 2026// //ROUTINE// //BLUF: FRANCE ATTEMPTS TO CRACK DOWN ON PROTEST ACTIVITY BEFORE THE WEEKEND. INDICATIONS CONTINUE TO MOUNT REGARDING RETURN TO WAR IN MIDDLE EAST, STATE DEPARTMENT CONFIRMS PERSONNEL DRAWDOWNS IN SAUDI ARABIA. CONSEQUENCES OF MAJOR CYBERSECURITY EVENTS CONTINUE TO INCREASE IN SEVERITY.// -----BEGIN TEARLINE----- -International Events- France: This morning authorities have issued blanket bans on protests in some areas, due to the potential for last weekend's unrest to be repeated. All protests have been banned throughout the entire city of Lyon, and within Paris gatherings are prohibited in some districts as the curfews stay in place. Most major cities are banning protests unless conducted by unions and registered with the government. Middle East: Late-stage preparations regarding a return to the shooting phase of the war continue to mount. Last night, State Department spokesman Tommy Pigott attempted to fact-check a post on social media regarding personnel changes in the region, but in doing so he directly confirmed that State Department employees and their families are being evacuated from Saudi Arabia. Within the Strait of Hormuz, Iranian targeting efforts continue regularly. Yesterday, Iran struck a total of 4x tanker vessels, none of which have been confirmed by the UKMTO yet. Analyst Comment: On the rhetorical front, the situation is not looking good. Statements made by White House officials (and President Trump himself) indicate that a preemptive strike on Iran is possibly imminent. Last night while standing on the tarmac preparing to board Air Force One, President Trump directly stated that negotiations with Iran are not ongoing, and heavily implied that strikes will be taking place immediately after the midterms. Within Israel, PM Netanyahu has begun an intensive media campaign, stating that their intelligence indicates that Iran has decided to build a nuclear weapon, and that "there is only one way to remove this threat once and for all, to topple the regime in Iran, and that is my directive to the IDF". -----END TEARLINE----- Analyst Comment: Around the world, the cybersecurity incidents of the past few days continue to expand in severity. In short, this week is certainly one for the history books for the IT world. Regarding the PHP vulnerability, the NSA, FBI, CISA, most of Europe, and the Prime Minister of Japan have offered up two solutions, and two solutions only...immediately update servers, or unplug them completely. This applies to roughly 70% of the entire internet, and some estimates claim that roughly 35% of all websites are unpatchable as they run on a version of PHP which is too old to be fixed. Within a few days, up to a third of the entire internet might be gone forever, if those web servers are not manually rebuilt from scratch. Yesterday, thousands of websites went offline, to include the government websites of France, the Netherlands, Finland, Japan, and dozens of others relying on PHP. Everything from Wikipedia to home media servers are affected, and manual intervention is needed in order for most internet-connected servers to be fixed. More broadly, many professionals are calling it "Black October" due to the severity and the impact of the events that have unfolded over the past few days. In addition to the PHP vulnerability and the eMudhra saga, around a dozen other completely separate issues have popped up, nearly all of which would have grabbed headlines on their own. Most of these vulnerabilities were in place a decade ago, and are only being discovered (or exploited) right now, a short time before major elections in Israel and the United States. The nature of the problem itself also makes it worse: Unfortunately, a significant portion of the world depends on random servers running in someone's dusty closet since 2009, and since the solution right now is patch it or unplug it, the true impact of this will not be known until more bad things happen. To say that the IT world is freaking out would be putting it mildly, even though the full scale of what's happened will take weeks to determine. In terms of real-world impact, most normal people won't see the severity of what's happened (or even be aware of it at all) with the exception of various websites going down for a short time. The real damage will surface months from now, after malign actors have time to exploit whatever vulnerabilities existed, but weren't fixed fast enough. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground20,237 просмотров • 1 день назад
//The Wire//2300Z October 19, 2026// //ROUTINE// //BLUF: MASS CASUALTY EVENT REPORTED AT CANADIAN MILITARY BASE AFTER WILDFIRE SPREADS RAPIDLY THROUGH TRAINING AREA. RIOTS CONTINUE TO DETERIORATE IN FRANCE. RIOTS REPORTED IN ALBANIA DUE TO CORRUPTION CONCERNS. MORE THREAT ADVISORIES ISSUED FOR THE MIDDLE EAST AS PREPARATIONS CONTINUE FOR A POSSIBLE WIDENING OF THE WAR.// -----BEGIN TEARLINE----- -International Events- Canada: Saturday afternoon, a mass casualty incident was declared at Canadian Forces Base (CFB) Wainwright, following a major incident that occurred during training. At approximately 4:00pm local time, a wildfire broke out in the training area at roughly the same time a strong outflow boundary was approaching the base. Within a matter of minutes, the resulting high winds caused the fire to shift direction toward hundreds of service members taking part in training operations. Due to the catastrophic nature of the fire, the true casualty count is unknown. A total of 4x fatalities have been confirmed, however more victims are expected. 39x others were injured, 19x of which are in critical care. Analyst Comment: The circumstances of the incident's origin are unclear, however claims have been made by eyewitnesses on the base disputing the origin of the fire. Officially, the cause of the fire is under investigation and has not yet been disclosed. However the press statements presented by officials have been extremely carefully worded to due to the ongoing investigations. Whatever the cause of the incident (either a training accident or a genuine wildfire situation) decisions were made which lead to the deaths of Canadian soldiers, so the investigation into what happened will take time. France: Riots continued to escalate over the weekend, as arson attacks and states of unrest remained constant in most major cities throughout the nation. Many government buildings and structures have been set alight, and looting has become commonplace in many cities due to the unrest. This afternoon, curfews were emplaced for the Republique and Châtelet districts of Paris, as more rioting is expected throughout the next few days. Albania: Mass riots have continued throughout the nation after the Supreme Court ruled that Jared Kushner's luxury resort project on Sazan Island can go forward. Protests began last week and have been intensifying for several days, before reaching a flashpoint over the weekend, which was spurred on by Prime Minister Rama refusing to resign. Yesterday the Supreme Court was burned down, after rioters breached the compound, and set the building on fire. Analyst Comment: This situation has been brewing for a while, and has been a major focus for Albanians for several months. The Kushner project on Sazan has been a major source of both protests, but also corruption concerns. Locals claim that their Prime Minister has been paid off, and that he's selling off major national real estate for personal gain. As a result, these riots will be worthy of monitoring more closely due to the potential for instability to spread throughout the Balkans. Middle East: Travel warnings throughout the region continue, as US Embassies in nearly the entire Middle East have issued more pressing travel advisories warning of an imminent increase in wartime conditions. Other than the United States, the diplomatic missions of most other western-aligned nations have issued similar warnings, indicating that preparations are being made for the war to expand at some point. -HomeFront- Washington D.C. - Early this morning a shooting was reported on 8th Street SE, which resulted in a National Guard soldier being wounded. Local authorities state that a street fight erupted in front of the Engine Company 18 Firehouse just before midnight. A vehicle containing a squad of National Guard soldiers was parked on the street at the time the fight broke out, with the soldiers exiting the vehicle to stop the fight. Immediately after the squad exited the vehicle, one suspect produced a firearm, which resulted in a small arms engagement in street, with three soldiers returning fire during the skirmish. One soldier sustained a gunshot wound to the leg, and the suspect was also shot during the engagement. -----END TEARLINE----- Analyst Comment: Many of the riots underway around the world are the real deal, and appear to be transitioning into more of a protracted state of global civil unrest. However, most of the reasons for the rioting vary widely between nations. In short, the various states of unrest around the world are summarized as follows: France: Student/economic protests turned riot, large migrant communes looting. Belgium: Student protests turned riot, inspired by French riots. Albania: Kushner/Rama protests turned anti-corruption riots. Argentina: Student protests turned anti-Milei/anti-corruption riots. Brazil: Riots over election integrity after Bolsonaro refuses to resign. Mexico: Riots due to drinking water contamination in Guadalajara. Italy: Riots due to rising fuel costs, some student riots similar to France. France is the epicenter for much of the unrest, and the development and motivations for the French riots are complicated. The origin of the riots is multi-fold; these events started as student protests regarding conditions in schools, as well as more general economic concerns. At the same time, there was an element of children from second and third-generation migrant families, which were protesting government spending being cut for them in schools. These protests started under relatively low-level social terms, but after the first day this initial spark rapidly transitioned (within a matter of hours) into a series of much larger issues, and now, several different factions are participating in the fray. What started small has turned out the be a pressure relief valve for tensions that have been boiling for weeks. Students are engaging in bedlam in most areas, migrant communities are looting whatever they can, pro-Palestine and ANTIFA activists are conducting their own riots for their own reasons, and now, many regular French citizens are protesting as well due to the high costs of fuel brought on by the war in the Middle East. Perhaps the clearest view of the types of demographics rioting, are the raw, unfiltered videos from the riots themselves. Many people are emotionally and politically invested in avoiding the migration element to the looting and violence throughout the nation. Many videos indicate a lot rioters are of African descent, and even for those who seek to be as neutral as possible, it is challenging to find videos (not still images that can be more easily selectively framed, but raw videos) which do not feature individuals of non-French heritage. To be sure, there are a lot of ethnic French citizens engaging in the original protests that started this all, and many are indeed rioting as well. Determining exactly how much of the unrest is local unrest vs. migrant unrest will take time, as the situation is incredibly nuanced and there are certainly interests on all sides which seek to scapegoat their adversaries while also downplaying other demographics. As of this evening, this is even more complicated as pro-police demonstrators have gathered in certain areas to protest against the riots (protests which have remained low-intensity gatherings for now). In terms of the riots in other nations that are coordinated with the French riots, the unrest in Belgium and Italy are most similar to the unrest that is underway in France. Belgium popped off around the same time as France, due to a lot of cross-border traffic allowing easy access to major metropolitan areas outside France. The riots in Italy are also somewhat related, however Italy's problems mostly have arisen more directly from the economic realm, as agricultural protests regarding fuel prices began a few days ago, which presented the distractions necessary for looters to break into stores. Most of the looting appears to have taken place a decent distance from the farmer protests, unlike in France which has presented the old standby tactic of "peaceful protesters" starting off just fine during the day, but putting on masks and breaking things once night falls. Within Argentina, Brazil, Albania, Mexico, and other nations currently experiencing unrest, riots are being conducted for their own reasons, which vary by locale. Timing wise, many are speculating that it's odd for all of these protests to come about on the same weekend. However this is not true; Mexico's riots have been brewing for months, with several smaller riots taking place earlier this month. France's protests have been ongoing for weeks, and Albania's protests have been constant for several months. It would be worthwhile to examine whether or not some of these riots are being funded more directly, however at this point it's going to be a case-by-case evaluation which is not going to be easy. What is certain, is that within France the riots will continue for some time, and likely grow in severity as the main elements driving the chaos (the migration situation, and the energy crisis) remain unaddressed. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground22,041 просмотров • 4 дней назад
//The Wire//2300Z October 20, 2026// //ROUTINE// //BLUF: SAUDI ARABIA CANCELS UPCOMING ECONOMIC SUMMIT DUE TO HOUTHI THREATS. FRANCE ACTIVATES ARMY TO PREPARE FOR UPCOMING WEEKEND PROTESTS/RIOTS. UKRAINE ACCUSES UNITED STATES OF HOLDING UP SHIPMENT OF PATRIOT MISSILES.// -----BEGIN TEARLINE----- -International Events- France: With the implementation of curfews throughout some districts of Paris, substantial deployments of police forces were noted throughout the city overnight. Before nightfall, riots had already broken out in some areas despite the curfews, but in other areas the situation remained calm due to the overwhelming police presence throughout many cities. Counter-protests have also become more common after the chaos of the weekend, and many random groups of citizens have begun the cleanup and restoration of order in Paris. This afternoon, France announced the deployment of the Army throughout major cities next weekend, with soldiers expected to provide security during the wave of protests expected on Saturday. Europe: This morning an IT outage was reported with Google Cloud services throughout the continent. Within the U.K. banking services were most heavily affected, though many other random services were affected within the tech sector. The outages did not affect customers' money or personal accounts, but systems were offline for a few hours. The cause of the outage has not been specified, however several companies have stated that it might have been the result of a power loss incident at a data center. Ukraine: This morning Zelenskyy stated that the Pentagon has blocked/delayed the latest shipment of munitions for Ukraine. Specifically, Zelenskyy claimed that his latest shipment of Patriot interceptor missiles has been delayed due to a hold up within SECWAR Hegseth's office. SECSTATE Marco Rubio acknowledged the delay this afternoon, however he did not state that it was due to policy but rather a supply issue due to the currently high demand for interceptor missiles. This comes a few days after the Starlink scandal, in which Zelenskyy also accused the US government and/or SpaceX of limiting the speed of Starshield (the military version of Starlink), which the US has denied having a role in affecting. United Kingdom: Overnight the Ministry of Defense announced the deployment of Royal Air Force Typhoon fighters to Saudi Arabia, to conduct missions in an air defense capacity throughout the Kingdom. Per the press release, British forces will not be conducting offensive missions targeting the Houthis in Yemen, but will instead be focused on intercepting missile attacks. -HomeFront- North Carolina: Last night the Department of Justice announced a settlement between the federal government and the University of North Carolina regarding their admission standards and academic operations. Per the terms of the settlement, in addition to abiding by all preexisting civil rights laws, all students will be required to take "mandatory antisemitism training". Per the exact terms of the settlement this training program was not described in detail, other than being mandatory for all students, faculty, and staff. -----END TEARLINE----- Analyst Comment: Within the Middle East, preparations continue to indicate most regional players are expecting the war to reignite within a few weeks. However, the focus of this expected intensification is up for debate...by now it could just as easily be the Houthis which escalate the war as it could be the United States and Iran. This is most clearly demonstrated within Saudi Arabia. The upcoming Future Investment Initiative (FII) Conference has been postponed until next year, due to the threats posed by Houthi missiles and drones. This conference being postponed is a big deal; this summit is colloquially called "Davos in the Desert" due to the hundreds of billions of dollars that are on the line in terms of investments within Saudi Arabia. Canceling this summit is a major loss of prestige for the House of Saud, however Crown Prince Mohamad bin Salman (MBS) is worried enough about the Houthis that the loss of prestige was worth the trade, to prevent very wealthy benefactors from being struck by missiles. With the United Kingdom now entering the war with the Houthis to some degree, this will present more flashpoints to watch out for. The Houthis know that third-party nations sending forces to the region is not exactly a de-escalatory measure, but they also know that Saudi Arabia and the United States have been bombing Yemen with the finest weapons money can buy for over a decade without much result at the strategic level. So even if the United Kingdom (and/or the US) were to kick off more strikes with the Houthis, another bombing campaign is not likely to put a dent in Ansar Allah's aspirations for autonomy. Even with the substantial missile defenses around the nation, and the supplement of British and American forces staging to help provide air cover in the desert skies, it's still not enough to prevent very embarrassing attacks by the Houthis. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground15,922 просмотров • 3 дней назад
//The Wire//1300Z February 28, 2026// //PRIORITY// //BLUF: WAR BEGINS WITH IRAN.// -----BEGIN TEARLINE----- -International Events- Middle East: This morning the war began as American and Israeli forces conducted pre-emptive strikes throughout Iran. Major bombings have been reported throughout most major cities around the county, with the heaviest concentrations of bombings taking place in Tehran. In response, Iranian forces have conducted missile strikes targeting American bases in Jordan, Qatar, Kuwait, the UAE, and several other locations. Missile impacts have been observed at Ali Al Salem Airbase in Kuwait, Al Udeid Airbase in Qatar, Al Dhafra Airbase in the UAE, Muwaffaq Airbase in Jordan, and at the headquarters of 5th Fleet in Manama, Bahrain. Missile impacts were also reported in Israel, mostly in the port city of Haifa at the moment. In Iraq, the Kataib Hezbollah al-Nujaba group announced that they will begin insurgent attacks on American forces throughout the region, to include the targeting of American civilians working at American-run oil facilities throughout Iraq. -----END TEARLINE----- Analyst Comments: President Trump posted an 8-minute video to his Truth Social page, explaining the rationale for the war. In the video, President Trump ordered all Iranian forces to lay down their arms and surrender, while urging all Iranian civilians to stay in their homes while the bombings are conducted. President Trump then urged civilians to rise up and overthrown their government. Beyond these basic details, not much else is known regarding the overall end-goal of this war, however bombings have continued constantly throughout the past few hours. President Trump is expected to conduct another address to the nation later this morning. Analyst: S2A1 Research: Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground704,515 просмотров • 7 месяцев назад
//The Wire//2300Z October 16, 2026// //ROUTINE// //BLUF: MASS SHOOTING REPORTED IN OREGON, GUNMAN KILLED BY PREPARED CITIZEN. PREPARATIONS CONTINUE AROUND MIDDLE EAST INDICATING RETURN TO MORE KINETIC WAR. CHINA DEMANDS CESSATION OF ISRAELI EXPANSION IN WEST BANK.// -----BEGIN TEARLINE----- -International Events- Russia: Overnight, Ukraine struck the Ryazan refinery again, with locals observing fires at the facility throughout the evening. Otherwise, Russian targeting continued as before, with strikes being reported at various logistics depots and gas stations in central and western Ukraine. Black Sea: Due to the rise in targeting of commercial vessels, Bulgaria has requested additional NATO assets to defend their airspace. Defense Minister Dimitar Stoyanov stated that Bulgaria has requested missile defense and anti-drone systems due to yesterday's targeting of two vessels off the coast of Bulgaria and Romania. Azerbaijan: The 7th Summit of the Conference on Interaction and Confidence-Building Measures in Asia continued in Baku, which is a geopolitical conference dedicated to managing international diplomacy and economic projects in Asia. This morning, Chinese Foreign Minister Wang Yi met with Israeli President Isaac Herzog, stating that Israel should stop their forced resettlement operations in the West Bank, and cease their territorial expansion ambitions in the region. Analyst Comment: This statement is incredibly important as China very rarely intervenes (even with words) to address such activity; Chinese diplomats are legendarily coy and usually take half an hour to get through greetings over tea, so a blunt statement that is akin to an order being given is, in a word...surprising. In the context of the wider war being waged in the Middle East, this comparatively bold statement is probably accompanied by a subtle warning...if the Israelis continue pushing their luck in the diplomatic space, China will probably more directly supply their chief adversary, which is Iran (at the moment). -HomeFront- Oregon: Yesterday afternoon, a mass shooting was reported at an elementary school in Bend. At approximately 1:00pm local time, one gunman entered the Silver Rail Elementary School in Bend, and began shooting. Shortly after the shooting began, one armed and prepared citizen observed the shooter entering the school, and pursued the suspect into the facility. After making contact, the good Samaritan shot and killed the suspect. Nevertheless, three children and one teacher were killed during the engagement. The suspect has been identified as 16-year-old John J. Griffin, though no motive or manifesto has been released. Washington D.C. - This morning newly appointed White House Press Secretary Katie Zacharia is reportedly transitioning out of her role after conducting her first press briefing yesterday. Her resignation has not been formalized yet, however President Trump confirmed to the press pool that he recommended her to reconsider taking the job. -----END TEARLINE----- Analyst Comment: As the usual weekend targeting window opens this afternoon, indications continue to mount regarding another round of American targeting within Iran. This afternoon, crude prices spiked upon the news that Iran has placed military forces on high alert, and that the Israelis have begun digging in and distributing portable concrete bunkers throughout Tel Aviv. Right now, most theories center around the US trying to carry out a 3-day targeting campaign, which is alleged to conduct some form of bombing at Pickaxe Mountain. As of this afternoon, these tensions are mostly based on a lot of circumstantial evidence, so it's hard to pinpoint exactly what might happen (and when). Predicting the exact day and hour of a resumption of strikes is going to be nearly impossible, but more generally it's exceptionally likely that some form of targeting will be taking place within a few weeks, probably close to the midterm elections (either before or shortly after). In any case, weekends tend to be a window for more increased targeting potential all around, and the volatility within financial markets is another indicator of the uncertainty of how this war will continue. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground17,345 просмотров • 7 дней назад
//The Wire//2300Z October 14, 2026// //ROUTINE// //BLUF: CYBERATTACKS CONTINUE TO PLAGUE GROCERY CHAINS IN EUROPE, SOME US RETAILERS AFFECTED. SABOTAGE ATTACK REPORTED IN BULGARIA. UKRAINE AND RUSSIA CONTINUE TARGETING OF ENERGY INFRASTRUCTURE. INDICATIONS AND WARNINGS CONTINUE TO SUGGEST EXPANSION OF THE WAR IN MIDDLE EAST.// -----BEGIN TEARLINE----- -International Events- Ukraine/Russia: Mutual targeting of energy infrastructure continues as before. Ukraine struck the Saratov and Ryazan refineries yesterday, and Russia struck electrical substations in Kiev overnight. This morning, Zelensky accused the United States of limiting Ukrainian access to Starlink due to Ukraine's continued targeting of Russian infrastructure. This afternoon, Elon Musk stated that his companies have no control over Starshield (the military version of Starlink), but the commercial-grade Starlink has been restricted for offensive operations since the start of the conflict. Analyst Comment: This continued targeting is concrete evidence that the "energy ceasefire" never existed. Neither side is interested in halting the targeting, and the conflict is likely to continue for some time. As a result, the American deal for diesel is at risk to some degree, and the next flashpoint will be the potential targeting of tankers intended to transport diesel to the United States. Bulgaria: Overnight, reporting came to light regarding a sabotage attack that took place near Sofia several days ago. On October 9th, two masked assailants set fire to 11x Starlink terminals at the Teleport Plana communications facility just north of Sofia. The incident itself was deliberately concealed from the public, and only leaked after MP Ivaylo Mirchev stated the attack took place. Analyst Comment: Recent satellite imagery indicates that there are actually 18x Starlink terminals at this location, with this site being co-located with the much larger Teleport Plana communications and intelligence collection station. This is an incredibly important facility which is host to much secrecy regarding exactly what NATO uses this facility for. As a result, more details are not expected to come to light regarding this arson attack. Strait of Hormuz: This morning a containership was struck while attempting an inbound transit into the Persian Gulf. The M/V GFS PRIDE (IMO: 9349045) was struck by an unidentified munition which resulted in her sinking after uncontrolled flooding took place in the aft engineering spaces. Analyst Comment: Iran targeting a cargo vessel that was headed into the Gulf (instead of out of the Gulf) is another indicator that Iran is not just interested in the petroleum front. The overwhelming majority of trade arrives in the Gulf States via containership, so this is probably a reminder to other regional players that everything from televisions to Twinkies arrives on ships within Iranian missile range. Middle East: Houthi targeting continues in Saudi Arabia. The airports in Riyadh and Dammam were hit yesterday, after Saudi forces struck targets in Sana'a. The headquarters building for ARAMCO in Riyadh was also struck, with locals reporting a large fire being observed at the main office building. Around the region, politicians and diplomatic sites continue to prepare for a return to the more kinetic phases of the war. A few days ago, the Emir of Qatar urged citizens to prepare for a worst-case scenario, as increased targeting is expected soon. -----END TEARLINE----- Analyst Comments: Around the world, cyberattacks continue to plague grocery chains, as the hacking of IT systems in Europe has begun to spread to the United States. Within Europe, the hardest hit companies are the various subsidiaries nestled under the Ahold Delhaize group. As this major corporation owns many small companies, many of the IT systems used by local grocers end up being managed by higher corporate teams, which tend to be centralized. As several American companies are subsidiaries of the higher corporate structure, what started off as more direct cyberattacks on European stores, has also affected American establishments as well. For instance, the corporate websites for Stop & Shop, Food Lion, and Hannaford all went down this morning, due to the follow-on effects of the cyberattacks in Europe. When the parent company's data centers were targeted by malign actors, the subsidiaries also went down. As with most cyberattacks, truly attributing the attack to one specific malign actor is challenging, but the end result is effectively the same (a degradation of services). Thankfully, the effects of these cyberattacks within the U.S. are not yet as bad as in Europe. Within the EU, refrigeration units within grocery stores are held to extremely strict data-logging standards for food safety reasons, which results in most larger chains controlling and monitoring the temperatures at a central corporate office. This allowed hackers to breach the temperature controls, and defrost thousands of refrigeration units around Europe. In the United States, it turns out that our lower health standards do offer some benefit on the modern digital battlefield...no internet connectivity means fewer attack vectors. The FDA does mandate (and inspect) the temperatures of refrigeration units in stores, but does not mandate digital or internet-connected meters. More broadly, cyberattacks are likely to continue both in severity and prevalence. Every time a major election is upcoming within the United States, it's field day for malign actors, who might seek to benefit from a more active news cycle. Likewise, both the war in Europe and the two wars in the Middle East are escalating all around, which brings more incentive for malign actors to take the fight to the cyber realm. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground19,488 просмотров • 9 дней назад
//The Wire//2100Z October 13, 2026// //ROUTINE// //BLUF: CYBERATTACK TARGETS FRENCH GROCERY STORES. SABOTAGE REPORTED ON DUTCH RAIL LINES. POSSIBLE HIJAKING REPORTED ONBOARD AIRCRAFT IN EUROPE, SITAUTION RESOLVED WITHOUT ANY THREAT. HOUTHI TARGETING CONTINUES IN SAUDI ARABIA. CONCERNS GROWING REGARDING DISCOVERY OF SPY CHIPS IMPLANTED IN CRYPTO HARDWARE WALLETS GLOBALLY.// -----BEGIN TEARLINE----- -International Events- Strait of Hormuz: Yesterday the UKMTO published a series of time-late reports regarding the targeting of merchant vessels in the region. All total, the UKMTO states that at least 6 different vessels were struck all on October 11th, as Iranian attacks within the Strait have intensified. Saudi Arabia: Following Houthi attacks, the disruptions to civil aviation continued overnight, with many global airlines canceling flights in and out of the region. Severe GPS jamming has been observed in Jeddah, Dammam, and Riyadh as Saudi forces attempt to use electronic jamming means as a countermeasure against Houthi drones. Qatar Airways has canceled all flights to Riyadh and Dammam, and the US Embassy in Riyadh has elevated their threat warning to "Reconsider Travel" due to the threats posed by drones and missiles. The British Embassy in Riyadh issued similar warnings, and published a 'duck-and-cover' infographic regarding what to do in the event of future attacks. Analyst Comment: Based on the current warnings and flight delays expected over the next week, indications are growing suggesting the Saudis will be ratcheting up their counteroffensives against the Houthis. This will in turn result in more Houthi targeting of Saudi infrastructure, thus the threat warnings that were issued overnight. Overall, the situation is deteriorating, and more strikes are expected over the next few days, as both sides have issued target lists of what they are expected to hit. The Saudis will be targeting the Yemeni Oil Company in Sana'a (which they have already been striking), and Ansar Allah (Houthis) will be targeting the airports in Riyadh and Dammam, as well as several Saudi refineries. France: Yesterday a major cyberattack was noted nationwide, affecting the refrigeration units used by a variety of grocery store chains around the nation. As these refrigerators were connected to the internet, malign actors were able to breach their control devices, and set the temperature much higher than was safe, causing food to spoil. The main victims of the attack have been the Intermarché supermarket chain (which reports 300x affected stores) and Coopérative U locations (which report 100x stores affected). Netherlands: This morning a series of suspected sabotage incidents resulted in the national rail network experiencing disruptions during the commute this morning. At least one signal switch box was set on fire early this morning between Rotterdam and Delft, which resulted in the line being shut down for some time. Other reported instances of sabotage were indicated elsewhere, which involved metal pipes being placed on other lines to shut down the tracks. Germany: This morning a possible hijacking incident was reported onboard a flight bound for Nuremburg. Corendon Airlines Flight XR456 took off from the Greek island of Corfu at 9:45 pm local time last night. At some point during the flight, the aircraft began squawking the transponder code of 7500, indicating a hijacking. The aircraft continued it's flight, landing at Nuremberg where authorities had already closed the entire airport due to the emergency. Some time after landing, German police stated that there was no threat. Analyst Comment: The exact details of what happened are unclear. No radio traffic was noted during the incident, as German police stated that all radio contact was lost with the aircraft during the emergency. Even the initial statements by police indicate they did not know what was going on either. The pilots switching their transponder code to the one used for hijackings is no-joke, and a loss of radio contact as well is a major indicator that something was wrong. There is a dedicated transponder code for the loss of radio communications (Code 7600), and while it is possible that a mistake was made in selecting the right code, if that's the case it would have been a very serious mistake. Due to the circumstances of an aircraft declaring a hijacking and not responding to radio calls, Eurofighters were scrambled to intercept this aircraft and escort it to the airport. Also of note, this morning drone sightings were reported at the Nuremberg airport shortly before the hijacking concern. More details are expected to clarify exactly what took place during this incident. -HomeFront- Washington D.C. - Last night, operators at the PJM Interconnection power grid declared an emergency Maximum Generation Alert, as generation capacity has become strained due to unusually warm fall weather throughout the northeastern United States. Analyst Comment: Last week, federal regulators rejected plans by PJM to mitigate the effect of data centers on their already strained power grid. PJM had proposed to cut power to large data centers during times of extreme stress on the grid, so as to prevent rolling blackouts. The Federal Energy Regulatory Commission rejected this idea, and is still working with PJM to come up with a plan to account for the higher strain placed on current electrical infrastructure by large data centers which have recently been constructed. -----END TEARLINE----- Analyst Comments: In the world of cryptocurrency, a major scandal is brewing surrounding compromised hardware wallets made by Ledger, one of the largest manufacturers of cryptocurrency storage solutions globally. Users of several different models of Ledger Nano hardware wallets discovered extra circuitry within the physical devices, which contained an eSIM board that was wired to the screen. When users first set up the device the seed phrase was logged as it flashed on screen, and was transmitted via a cellular connection back to the hacking group. For those not familiar with cryptocurrency, hardware wallets provide a form of offline cryptologic "proof" of what crypto is owned by a particular user on the blockchain. Cryptocurrency is not stored digitally on these devices themselves; hardware wallets are convenient ways to store the cryptologic keys used to access that cryptocurrency. In this case, Ledger wallets appear to have been "bugged" at some point in the supply chain, possibly even before they left the factory and/or distributor. This is the financial version of the infamous Israeli pager attack in Lebanon (which itself was a continuation of Project ELDEST SON from the Vietnam era). However, instead of explosives being implanted in devices, malign actors installed spy chips which stole the keys on devices, and transmitted that data back to the hackers. As it stands, this is a major scandal as the compromised devices were sold through official distributors. Ledger has confirmed that CryptoBilis was the main authorized dealer affected by these "bugs", which mostly serves southeast Asia. However once this hit the internet, users in Europe cracked open the cases of their brand-new/still-sealed Ledger devices, to confirm that devices sold in Europe by MediaMarkt are also compromised. Users have also reported finding suspicious hardware inside other models of Ledger devices, such as their brand-new Stax and Flex lines. MediaMarkt has pulled all Ledger products from their shelves while the investigation continues. So far, the true impact of this hardware breach is not known, but there are claims of upwards of 102 million dollars being stolen so far by the spy chips reportedly being found implanted in over 500x devices. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground21,325 просмотров • 10 дней назад
//The Wire//1300Z September 28, 2026// //PRIORITY// //BLUF: INCIDENT REPORTED AT RAF FAIRFORD AS MULTIPLE MEN ARRESTED IN MULTIPLE VEHICLES NEAR THE AIRBASE PERIMETER.// -----BEGIN TEARLINE----- -International Events- United Kingdom: Yesterday a possible terror attack was foiled at Fairford Airbase, after a group of men were discovered acting suspiciously in the vicinity of the base. Local authorities state that a local farmer visually observed three vans parked in the roadway just outside the base. When the farmer approached the vehicles blocking the road, a group of masked men fled from the scene. After the alarm was raised, authorities responded and a total of five men were detained after being found hiding in the woods near the van site. A search of their vans revealed large containers of hazardous material, which prompted a mass evacuation of the local area. A total of 85x homes were evacuated for several hours while EOD personnel examined the contents of the vans, with residents being allowed to return to their homes last night. All five suspects have been detained, and government officials have declined to officially attribute motive. -----END TEARLINE----- Analyst Comments: As this is a developing situation, many of the details as presented to the public either are not clear, or do not make much sense in terms of what attack might have been planned. Right now, the finger is being pointed at Iran for this incident for obvious reasons, however before attribution can be laid on any group or nation, the basic facts of the case must be ironed out. Government officials and media groups are insinuating that this was a Vehicle Borne IED (VBIED) attack that was foiled before it could materialize. Other claims are being made suggesting that this incident is not terrorism...but rather a group of thieves who were trying to steal diesel from the farm that they were discovered at. Examining the Most Deadly theory first, if it was a VBIED attack, it would be one of the most unorthodox VBIED attacks in history, for many different reasons. First of all, multiple people being located in each vehicle is odd; these types of attacks almost never result in multiple attackers being located in the same vehicle...it's almost always just one person inside the VBIED. If multiple people are to take part in an attack, it would have made more sense for the additional personnel to travel to the site in separate vehicles, to conduct a more complex attack (such as the infamous Bataclan attack back in 2015). In this case however, local authorities have not stated whether or not any small arms were found inside the vehicles, and no ideological material (such as flags, banners, or other paraphernalia) was found either. Additionally, the local farmer who claims to have been the original source for visually observing these individuals stated that she initially became suspicious after these men were seen wearing hoods and masks. If this observation is true (and it probably is), this is another detail that does not make sense. VBIED attacks are usually a one-way trip, and therefore the attackers aren't normally concerned with keeping their identity a secret. On the contrary, they usually want to be known publicly as martyrs, so wearing masks goes against nearly all other similar attacks. Furthermore, the attackers were spotted by the farmer blocking the roadway, and fled from the scene on foot after the farmer drove up on them. This is once again another clue that something is amiss. Normally, once a terrorist begins moving into the final stages of their attack and starts maneuvering to the attack site, a series of events is in place that would be difficult to stop. Once they've committed to the attack, violence from authorities is usually the only thing that can stop an attack at that point. Following the narrative as presented, five very physically fit Military Aged Males spent months planning an attack, had obtained three vehicles packed with explosives, had arrived at the attack site, and were preparing the attack...but were shooed away by an unarmed British lady right as they were about to detonate. This framing makes absolutely zero sense unless the story as presented is missing large and very critical details. Another discrepancy is the exact location of where the vehicles were discovered blocking the road. The farmer who made the discovery found these men and their vehicles at a junction on Horcott Road, a quiet English lane just to the east of the base itself. This road is nowhere near a main entrance to the facility. Speculating a bit (and following the VBIED theory), it is possible that the attackers intended to attack the perimeter fence itself, and not a main gate. Right at the junction where the vehicles were parked is a farm which features a small path that leads somewhat close to the perimeter fence itself. However, based on the satellite imagery (which the attackers surely would have had) this is a rather poor attack site. There is no High-Speed Avenue of Approach, and even if they detonated their cargo right where they were sitting, it's not very likely that any military aircraft at the base would have been damaged (although a LOT of citizens would have been killed). There are several other points where the attackers could have breached the perimeter, including one site that is directly on a main road, easily accessible, and offered absolutely zero resistance to a vehicle ramming through the flimsy fence to drive directly onto the runway itself. If the attackers were dedicated enough to fill three vans with explosives in an attempt to carry out one of the most substantial IED attacks in British history...they would have had to drive past one of the most devastatingly vulnerable parts of the base, to pick a far less effective target. Now that the jig is up and base security is heightened, there is no risk to pointing out this glaring vulnerability, because base security have parked heavy vehicles near all of the gates that are easy to ram through. This indicates that the vulnerabilities along the base perimeter were genuine...and the alleged terrorists did not choose to exploit them for some reason. Finally, the vehicles themselves provide a major clue which adds helpful context that must be considered in the broader context of what might have happened. At least one of the vans was marked with the logo of "Fuel 2You" a fuel delivery company, which provides fueling services to machinery and industrial sites, for customers who need small fuel deliveries. However, the logo is NOT the same as the company...they misspelled the name. The vans are marked with "Fuel 2YOU", but the actual company is stylized as "FUEL2U" with the letter "U". The logo is also green in the United Kingdom; the red logo that the suspects copied is from an American company. This small detail alone is the strongest evidence of malign action. Camouflage is an act that, when discovered, betrays intent to conceal something. And in this case, it's fantastic camouflage, because if a terrorist were to be pulled over with barrels full of flammable liquid, there is no better camouflage than to take on the identity of a company that is known for operating mobile gas stations. The problem is that the suspects googled "Fuel 2 You" and got the logo from the American company, instead of the British company that is called "Fuel2U". The actual company released a statement confirming that their company likeness was used by the suspects without their permission, and that these vehicles had no affiliation with their company whatsoever. As a result of this final detail, the suspects were almost certainly up to no good, but exactly what they were planning is up for debate and will have to be determined later on. The use of camouflage on their vans is a clever trick that would support either the VBIED theory or the diesel theft theory, but adding up all of the details that are known, every factor lines up more with the diesel theft theory than the VBIED theory. Speculating on the diesel theft theory, everything so far makes sense. A band of thieves masquerading as a fuel delivery service company, and using that as cover to steal fuel would be a rather slick criminal operation (that is, if they weren't dumb enough to use the wrong logo). Since the suspects were captured alive, it is certain that some information will be obtained, but for now a lot of guesswork is required both to determine what actually was being planned, and also what future threats might be still on the horizon. The discrepancies in the other details of the case indicate that this case is not as cut-and-dry as depicted in the media...there is very clearly something that the authorities are not telling the public. This does not necessarily indicate much on it's own; there is certainly enough wiggle room in the official story for everything to technically be true. Maybe the attackers got lost, or had a breakdown, or were not that great at planning. Maybe they weren't trying to conduct an attack at the time of their discovery, and were instead trying to stage IEDs for later on. On the other hand, it's also possible that these individuals were not terrorists, but rather thieves attempting to steal fuel from the farm at which they were caught. As it stands, the possibilities vary widely, and until more details are known we just don't know. More broadly, this incident is a high profile matter that will have several follow-on effects even if it was just diesel theft. First and foremost, the American B-1B bombers will probably be moved around the base, since news helicopters revealed where they are parked. Fairford is not the only base where American bombers are located, and these assets are rotated around fairly regularly anyway. Random Antiterrorism Measures (RAM) are certain to increase at all British bases where American forces are staged, with this incident highlighting the security vulnerabilities at major military installations throughout Europe. If pro-Palestine activists can break into a military airbase and damage aircraft with paint (as they did last summer at RAF Brize Norton), then legitimate and serious terrorists certainly can do worse. This latest incident is too close for comfort, and if this was an attack that was indeed imminent (before it was stopped), this would be a miracle that highlights the critical importance of a prepared and observant citizenry. Until we know more details, from a planning perspective it would be wise to treat this as a very serious threat that could have killed a lot of people. Regardless of who was behind it (and for whatever reason) if this was an attack and if it were to be carried out as claimed by initial reports, many lives would have been lost, nearly all of which would have been civilian. And the threat might not be over just yet. The local farmer who made the initial discovery has adamantly assured that she saw more than just the five men who were detained. If this is true and if there are other suspects on the loose, this could present a more persistent threat to the local area until they are found. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground47,174 просмотров • 26 дней назад
//The Wire//2000Z October 12, 2026// //ROUTINE// //BLUF: HOUTHI STRIKES ON SAUDI INFRASTRUCTURE CONTINUE. PRESIDENT TRUMP ANNOUNCES ENERGY CEASEFIRE IN UKRAINE, IMPLEMENTATION PENDING BOTH SIDE'S AGREEMENT. ENERGY DEPARTMENT AUTHORIZES SPR RELEASE DUE TO DISRUPTIONS CAUSED BY HURRICANE.// -----BEGIN TEARLINE----- -International Events- Ukraine: President Trump claimed that Russia and Ukraine have agreed to an "energy ceasefire", to halt the targeting of petroleum infrastructure. Neither Russia nor Ukraine have publicly verified this claim, and Ukraine has stated that any ceasefire depends on Russia to reciprocate. Poland: This morning one arrest was made regarding what is being described as an assassination attempt on Prime Minister Donald Tusk, as well as the Polish Defense Minister. The nature of the alleged plot has not been disclosed, and the identity of the suspect has not yet been released. Analyst Comment: The details of this case are not clear, as authorities have not stated whether or not the assailant had taken physical action to conduct an attack. So far, all official statements have indicated that a 60-year-old man made threats against the Prime Minister on social media, but no physical act of violence (or preparation for such) has been noted so far. Saudi Arabia: Over the weekend, Houthi targeting continued with more strikes on Saudi airports. On Saturday, Ansar Allah (the Houthis) launched one ballistic missile toward King Khalid International Airport, with the missile directly impacting Terminal 3. Video footage from the time of impact confirms that no warning was given, and the terminal was packed with travelers at the time of the strike. As a result, over 300x people were wounded and 12x people were killed instantly. The next day, Ansar Allah struck Terminal 4 in a similar manner. Saturday night, missile strikes were also reported at King Fahd International Airport in Dammam, with unknown success. Separately, a total of three gas and petroleum facilities were also struck, including the Ghawar Oil Fields, the Shedgum Gas Complex, and the Tanajib Oil and Gas Complex. Strait of Hormuz: Strikes on merchant shipping continued to escalate over the past 48 hours. Several ships were struck over the weekend with a variety of munitions, and strikes continued throughout the day within the Strait itself, as well as the Gulf of Oman. Analyst Comment: At this point, there are so many ships getting struck daily in the Strait of Hormuz that it's challenging to confirm each one. The UKMTO has mostly been withholding reporting for several days, and only releasing "time late" reports at least a day after a strike takes place. The United States did strike one tanker over the weekend, however Iran has been striking several ships per day for about two weeks. -HomeFront- Gulf Coast: Due to the disruptions caused by the arrival of Hurricane Isaias, the Department of Energy authorized an emergency release of 4 million barrels of crude from the Strategic Petroleum Reserve (SPR). This latest release will take the SPR below 279 million barrels in the Reserve all total, minus whatever crude is drained as part of the 40 million barrel exchange that was authorized last week. Washington D.C. - Yesterday the Department of Homeland Security conducted a raid at the residence of Rep. Ilhan Omar as part of an ongoing investigation. Analyst Comment: No details or acknowledgement of the raid has been provided by officials regarding what this was about, however based on recent statements by the White House this could be related to the years-long allegations that she married her brother to secure his greencard status, or her own immigration status. More details are expected later on. -----END TEARLINE----- Analyst Comments: The escalation of targeting in Saudi Arabia is incredibly serious, and is starting to bring about long-term problems for the Kingdom. In short, Mohammad bin Salman (MBS) is in trouble, and if the Houthi targeting keeps up (and civilians keep getting killed), his inability to protect his nation is starting the threaten the throne itself. Missile strikes are bad enough, but ever since the East-West Pipeline was first taken offline by Houthi missiles a few weeks ago, the very GDP of the nation itself is at risk. Due to their main source of national income being mostly offline, two weeks ago Saudi Arabia requested a series of emergency loans totaling roughly $8 billion USD from various banks, just to keep the lights on in the Kingdom. The economic status of the House of Saud has always been a complicated affair, but generally speaking for a nation that is built upon a financial bedrock of crude....things aren't going so well. Ansar Allah expanding their targeting efforts to include airports is (unfortunately for Saudi Arabia) a very effective means of both taking the fight to their enemy's capital city, but also in exerting some ability to impact airspace thousands of miles away from the front lines on the ground. This morning a Notice to Airmen (NOTAM) was issued for the majority of Saudi airspace, warning of continued fighting, and that the security situation presents risk to aircraft at all altitudes. Also, King Khalid airport remains fully closed for at least a week due to the airstrikes. Though the strikes around the region have been desensitizing after almost 8 months of war, the inability for Saudi Arabia to protect their own capital city is extremely significant for the political situation in the Kingdom. MBS has been unable to protect his nation's income source, and now is incapable of protecting the airport where his family keeps their private jets. If this keeps up, the House of Saud is going to face some very serious threats, not just from outside the nation...but from within. Throughout the war, MBS himself has reportedly been physically traveling between bunker facilities each night, and even though Saudi Arabia is not likely to experience regime change anytime soon, that possibility remains on the table as the tensions within government keep escalating with each Houthi missile. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground21,086 просмотров • 11 дней назад
//The Wire//2300Z October 15, 2026// //ROUTINE// //BLUF: BANK OF AMERICA FINED FOR PLATFORMING CARTEL FINANCIAL NETWORKS. U.S. NAVAL ASSETS CONTINUE STAGING IN MIDDLE EAST, AS FUTURE STRIKE POTENTIAL LOOMS. STRIKES CONTINUE WITHIN BLACK SEA TARGETING MERCHANT VESSELS.// -----BEGIN TEARLINE----- -International Events- Russia: Overnight, Ukraine conducted an attack at Borisoglebsk Airfield, which resulted in the destruction of roughly 4-6x Russian fighter aircraft. Russia also continued sporadic strikes around Kiev as well as along the southern front with drone strikes targeting infrastructure in the vicinity of Odessa. Black Sea: Two more commercial vessels were targeted in drone strikes overnight. The M/T WINE TRADER (IMO: 8808707) was struck by a drone off the coast of Romania, suffering damage to the bridge as a fire spread throughout the superstructure. A total of 8x crew members remain missing following this strike. Separately, the M/T YARA J (IMO: 9221803) was also struck in a similar manner in the same general area. Strait of Hormuz: Strikes on merchant vessels continue as before. The UKMTO issued two time-late reports of strikes on merchant vessels yesterday, at least one of which involved a large containership which was separate from the M/V GFS PRIDE (IMO: 9349045) that sank yesterday afternoon. Yemen: Last night, Houthi forces claimed to have engaged a Saudi Eurofighter Typhoon aircraft over Saada. Ansar Allah has not claimed to have shot down the aircraft, as the missile was a narrow-miss, and the pilot appears to have survived the detonation of the missile in close proximity to the aircraft. -HomeFront- Washington D.C. - Yesterday, the Treasury Department's Financial Crimes Enforcement Network (FinCEN) levied a $1.2 billion fine on Bank of America, after the bank reportedly failed to enforce (or even report) money laundering efforts undertaken in violation of Office of Foreign Assets Control regulations. Analyst Comment: The Treasury Department stated that this was in relation to a series of money laundering efforts undertaken by nationstate actors (such as China) and cartels in Central America. The exact nature of what kinds of networks were being run has not been disclosed, however Bank of America has already mostly written off the fine as a line item, and no one has been arrested for knowingly using Bank of America resources to help cartels funnel money throughout their organizations. -----END TEARLINE----- Analyst Comments: Over the past few days, the USS George H.W. Bush CSG arrived on station in the Arabian Sea after conducting a short R&R port call in Thailand. The USS Makin Island ARG and the USS Teddy Roosevelt CSG should also be arriving within a few days after crossing the Pacific. In terms of aviation assets, nothing major has been moving around for about a week. Cargo flights into the region are fairly routine, though the baseline for what is considered normal military aviation has changed somewhat since the war began. No heavy bombers have forward deployed yet, but considering how far the United States has withdrawn from Iranian missile range, this might not be an indicator of much. The Carrier Strike Groups are holding hundreds of miles from the Gulf of Oman, the US airbase in Erbil is no longer an asset after the drawdown of American forces in Iraq, and Al Udeid Airbase has a lot more aircraft staged on the parking aprons as of this morning (indicating that strikes are probably not imminent within the next 24 hours). However some commercial satellite imagery companies have outright banned all imagery of Diego Garcia, the infamous base which has become one of the main logistical staging areas that is being used to continue the war. This ban on all paid future (and prior) satellite imagery is more strict than in the past as even during the height of the war, historic satellite imagery that had no intelligence value was still offered for sale. Now, all imagery has been scrubbed, at least from some American companies. The intense censorship crackdown due to OPSEC reasons is a fairly significant indicator that something is being planned which requires Operational Security in the first place. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground15,660 просмотров • 8 дней назад
//The Wire//2300Z August 26, 2026// //ROUTINE// //BLUF: MAJOR FLASH FLOODS AND MUDSLIDES DEVASTATE TIBET AND NEPAL. STRATEGIC DEVELOPMENTS CONTINUE FOLLOWING CIA DIRECTOR VISIT TO RUSSIA. STABBING ATTACK REPORTED IN AUSTRALIA.// -----BEGIN TEARLINE----- -International Events- Europe: The war remains constant as Ukraine and Russia continue their targeting efforts. Overnight, Ukraine continued their strikes on Russian oil infrastructure, targeting the Lukoil Refinery in Kstovo. Similarly, Russia has continued striking gas stations within Ukraine. Both sides have also continued strikes on each others consumer industry, with Ukraine hitting Wildberries and Ozon warehouses, and Russia hitting shopping malls in Ukraine. Western Asia: This morning a major mudslide was reported in Tibet, after flash flooding throughout the region caused instability in the terrain. The small Himalayan town of Gyirong was nearly completely destroyed by mudslides, along with many other mountain villages. Analyst Comment: As this disaster took place mostly in Tibet, the administration of recovery efforts is complicated. China is the most capable entity in the general region, and has mobilized around a hundred soldiers that were already at the far-flung outposts on the border of the autonomous region. Chinese authorities have stated that this is a mass casualty event, and video footage of the mudslides confirm several dozen fatalities outright, with potentially hundreds of people being killed by the disaster. Australia: Yesterday afternoon, a stabbing attack was reported in Melbourne, after an African man attacked a 10-year-old boy randomly on the street directly outside the main entrance of the Victoria Police Headquarters. After attacking the child, the assailant stabbed the boy's mother with a pair of scissors. Several bystanders immediately counterattacked the assailant, subduing him while police responded from their headquarters building. The assailant has been identified as Jerry Sowood, a Liberian man who proudly confessed to the crime in court shortly after his arrest. -----END TEARLINE----- Analyst Comments: Strategic indications and warnings keep stacking up concerning American and Russian military assets, though right now it's not entirely clear what it all means. Shortly after Ratcliffe's visit to Moscow, a total of 5x E6-B MERCURY TACEMO aircraft took off and flew patterns over the American interior all at roughly the same time. This has happened a few times before during exercises, but it's not that common to see this many strategic communication aircraft airborne at the same time. This morning, a strategic Russian radio station was active again, repeating several coded messages for unknown recipients on 5135 kHz. This frequency has occasionally been used by strategic Russian assets in the past, and starting about two weeks ago this frequency began being used more frequently. Normally, messages that begin with the prefix DMITRI are higher priority messages, or at least that's a common theory among shortwave listeners. These transmissions repeated throughout the day, mostly conveying the same coded message. Normally, the movement of strategic aircraft or cryptic radio messages can't be pinned down to a singular event or cause, and the entire purpose of the whole strategic readiness posture is to make an exercise indistinguishable from a real-world event. However, when we add up the events of the past 48 hours, the situation is revealed to be more interesting than at face value. In isolation, an interesting plane flying around or a random radio message is not worthy of mention, but in aggregate these events become vastly more interesting, even though it's impossible to know why. More broadly, the very minute details and observances by planewatchers, shortwave listeners, and hobbyists alike are extremely early indicators of some kind of strategic event. These observances are at the very bleeding edge of what is possible to perceive within the open source world, and must be weighted accordingly. It is impossible to make decisions based on so little data, so right now all of this is just evidence supporting the hunch that strategic moves are being made. The CIA Director flying to Moscow at the same time 5x "Doomsday" communications planes are active in the US, and the Russians are more active on their own strategic radio frequencies...is all extremely coincidental to be nothing. Much more analysis will be needed to maybe determine what's going on but as it stands, high-level diplomatic and strategic moves continue behind the scenes, as both the war in Ukraine and Iran remain in the balance. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground88,590 просмотров • 1 месяц назад
//The Wire//2000Z September 17, 2026// //ROUTINE// //BLUF: SAUDIS CLAIM THAT THE EAST-WEST PIPELINE WILL BE REPAIRED SOON, DESPITE THE TOTAL DESTRUCTION OF SEVERAL PUMPING STATIONS. UNITED STATES WEIGHS MITIGATION ACTIONS TO PREVENT DIESEL CRISIS FROM EXPANDING. PRESIDENT XI AND PRESIDENT RAMAPHOSA REPORTEDLY FELL ILL DURING BRICS SUMMIT.// -----BEGIN TEARLINE----- -International Events- India: Multiple world leaders have reportedly fallen ill after attending the BRICS summit in New Delhi. Chinese President Xi Jinping skipped the gala dinner and returned to China early, and South African President Cyril Ramaphosa also had to depart India early due to an unspecified illness. His Deputy President, Paul Mashatile, also fell ill at the same time, as has been confirmed by the South African government. Analyst Comment: Right now, it's not clear as to if the illnesses are the result of malign action, or just the natural reaction to being in India. Multiple leaders from separate countries falling ill at around the same time is a big clue, but Chinese sources are speculating that President Xi might have had a stroke. At the moment, there is nothing confirming this as Xi's personal life tends to be extremely private, and there has been no official confirmation regarding why he departed the BRICS summit early. Saudi Arabia: Repair work up and down the East-West Pipeline continues, along with repairs at Yanbu. Saudi forces have also requested air defenses from various European nations, as the United States has declined to become involved in defending their refineries. -HomeFront- Washington D.C. - Concerns continue to mount regarding the status of Senator Mitch McConnell. Yesterday, he was transported to the Capitol to vote on an agricultural spending bill, and footage of him continues to indicate that he is very visibly not well or coherent. Sen. McConnell has generally been conscious, but unresponsive to verbal comments made by journalists attempting to ask him questions. USA: Around the nation, reports of gasoline and diesel shortages are beginning to manifest, as several gas stations have announced that they are out of gas. Gas stations in North Texas, Florida, and California have all reported being out of gas as of last night. Analyst Comment: Right now it's hard to pinpoint exactly what is causing these specific shortages. To be sure, a handful of gas stations running out of gas is not indicative of a dire and imminent nationwide shortage; based on the EIA's Weekly Status Report, last week gasoline stocks in the US were only down 4.6% from what they were last year. However the empty pumps don't lie, and right now the most likely explanation for localized gasoline shortages is a combination of logistical issues delaying shipments to individual gas stations...and panic buying which will drain a gas station much faster than normal. Due to oil execs saying gas prices are going to increase over the next few days, people are probably trying to get ahead of the curve. Since most gas stations only have a day's worth of gas (and rely on nearly daily deliveries to refill their underground tanks), it doesn't take much of an increase in demand to generate a localized shortage. -----END TEARLINE----- Analyst Comments: Saudi oil contracts continued to be canceled as the scale of Houthi attacks continues to expand. All oil onloading at Yanbu has been halted for at least six days, and the only other source for Saudi exports is now through smaller ports, or through Ras Tanura via the Strait of Hormuz. Despite the devastation, some Saudi officials claim that the East-West Pipeline will return to at least 50% of it's capacity within a few days, though this appears to be wishful thinking at best. At the moment, formalized force majeure declarations have not taken place, but Aramco has "deferred" deliveries of crude for the rest of the month of September, and various contracts continue to be canceled. As it stands, Saudi Arabia is seriously in trouble and it's extremely unlikely that Saudi Arabia will be exporting any sizable amount of oil for a while. European oil traders seem rather adamant that Saudi Arabia has already canceled most of their contracts with various customers for oil deliveries, however Saudi officials assure the world that everything is fine and they will be back to full capacity soon. Saudi sources have claimed that the SUMED pipeline (with it's capacity of 2.5 million barrels per day) can be used as a partial-backup to the East-West Pipeline being down. However there is one problem with this plan...geography. The SUMED pipeline is not in Saudi Arabia, it's in Egypt. And the only way that the Saudis can use this pipeline, is to load oil at Yanbu, sail it on ships across the Red Sea, and deposit the crude in Egypt to be sent down the pipeline. The single point of failure for this "backup" pipeline is the same point of failure for the East-West Pipeline...Yanbu. Which is currently offline due to Houthi strikes. Whatever the truth is regarding exactly how much oil is able to exit the Middle East, it will be discovered rather quickly as crude cannot be conjured up out of thin air, and at some point the sheer lack of volume will have to be acknowledged. Within the homeland, the United States has begun more serious mitigation efforts due to the Saudis being offline for presumably a long time. The Department of Transportation has issued a 90-day waiver for truckers carrying fuel, easing Hours-of-Service (HOS) regulations to allow truckers to drive more hours in a 24 hour period. The White House is also still considering an export ban on diesel, in order to ease rising costs in the United States. If this were to be enacted, domestic prices would probably dip, but the shock to the system could result in unintended consequences in the long term. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground49,600 просмотров • 1 месяц назад
//The Wire//2300Z October 5, 2026// //ROUTINE// //BLUF: SAUDI PIPELINE HIT AGAIN BY HOUTHIS, STATUS OF PIPELINE UNCLEAR. BRITISH AUTHORITIES ISSUE DISPERSAL ORDER FOR ENTIRE TOWN TO CONCEAL ILLEGAL MIGRANT INVASION. RESEARCHER DIES OF PLAGUE FOLLOWING LAB ACCIDENT IN SIBERIA. EPSTEIN INVESTIGATOR FOUND DEAD AFTER EXPOSING HOWARD LUTNICK'S FINANCIAL TIES TO EPSTEIN.// -----BEGIN TEARLINE----- -International Events- Russia: Concerns are growing regarding an accident involving pneumonic plague at the Irkutsk Research Anti-Plague Institute of Siberia. A few days ago, one researcher at the facility died from the plague after accidentally breaking a test tube containing the Yersinia pestis virus. Analyst Comment: Though this story seems quite alarming, this is not to the level of outbreak just yet. The researcher who caused her own initial infection did so accidentally, and immediately followed the proper procedures for such an incident. She was promptly hospitalized, but nevertheless died from the plague a few days later. This will be important to monitor just in case additional infections appear, and 197 people are currently under observation. So far, the only infected person has been the original researcher who broke the test tube. United Kingdom: Over the weekend authorities issued a Section 34 dispersal order for the entire town of Gosport, effectively locking down the entire population of this town. This order has been issued specifically to protect the migrant arrivals in the town, as major deployments of police are underway to aid and abet the migrants arriving on small boats, which are being escorted into the country. At the same time the lockdown of Gosport was announced, large and coordinated groups of migrants arrived on the beaches in France, to facilitate the highly organized illegal migration during the time that the Section 34 mandate was in place. Analyst Comment: This is a major concern. To be clear, the Section 34 order is not to the level of outright martial law, but right now if a locals in the town Gosport were to take out their phones and record the migrant hordes being protected and escorted into the country by the police, the police could order that person to leave or be arrested. United Kingdom: Over the weekend, reports emerged claiming that Simon Andriesz was found dead a few days ago under unclear circumstances. Andriesz was a former employee of Commerce Secretary Howard Lutnick's firm, who turned whistleblower after unearthing new data confirming Lutnick's direct link to Jeffrey Epstein. He testified before the House Oversight Committee, and his work was used to directly summon Lutnick for closed-door testimony before the Committee regarding his financial ties to Epstein. Previously, Lutnick had claimed that he had briefly stopped at Epstein's island for lunch on one occasion, however Andriesz discovered emails between Lutnick and Eptsein, indicating that they were exploring the creation of a business together. On August 9th, Andriesz posted this discovery on social media, and over the weekend he was found dead. The cause of Andriesz's death has not yet been confirmed by authorities. Saudi Arabia: Last night Houthi forces struck another pumping station along the East-West Pipeline, with heavy smoke plumes being observed by locals being emitted from the facility. Fighting continued throughout the day, with Houthi strikes being reported in Riyadh, Yanbu, and Jizan, which was prompted by continued fighting on the ground between Houthi forces and Saudi backed militia groups. Analyst Comment: Saudi sources claim that the East-West pipeline is still operational, however if the Saudi-backed militia groups keep poking the bear and making gains on the ground, the Houthis will continue hitting the extremely exposed and undefended Saudi oil infrastructure. In any case, a smoke plume 30 miles long is not exactly good news for pipeline repairs. The Houthis have already demonstrated multiple times that they will wait for the pipeline to be repaired, before hitting it once again, and will continue to do so until something changes on the diplomatic front. Persian Gulf: Strikes have continued on merchant shipping in the Strait of Hormuz. A total of two vessels were struck over the weekend, and two more were hit today. Also this morning the UKMTO reported one vessel turning back after being hailed by Iranian forces, and warned to not proceed further. Analyst Comment: If this report is true, this would be an indicator that at least the crew of this vessel did not have any confidence in the American abilities to protect them, so they turned back before being struck. -----END TEARLINE----- Analyst Comments: Over the weekend, the United States withdrew the flight of B-1B Lancer bombers that were stationed at RAF Fairford. This withdrawal was reportedly of an emergency nature; the bombers departed England before the usual refueling tankers had departed the United States to refuel them along the way, and unconfirmed closed-source reporting from personnel at the base suggest that the movement was not announced very far in advance. Currently the Pentagon is insinuating that this movement is being conducted for security reasons. However, this is almost certainly not the case. Right now, at this very moment, a dozen U.S. Air Force refueling tankers are sitting on the tarmac at Al Udeid airbase, the same base which got hit hard by Iran during the height of the war. This is also the same base that has so far been a key indicator of escalations...when Al Udeid empties out, major strikes are likely to follow within a couple of days. If the US is going to keep these aircraft in Qatar, there is absolutely zero chance that they would move B-1's from England due to being struck by Iran directly, or via proxy groups. Also, the United States maintains a significant presence at other bases in England, such as RAF Mildenhall and RAF Lakenheath. Both of these bases are arguably more important for the United States, with both having been used to house bombers as well. Both of these bases remain at a heightened security posture, but the American presence remains the same as before. As to why the US is moving these bombers, it's anyone's guess. It could be a de-escalatory measure, or it could be a feint and they're going to forward-deploy somewhere else. For launching additional strikes on Iran, the B-1's would be helpful (as they launch long-range cruise missiles and larger bombs), but not strictly necessary. B-2's can always deploy from within the United States and fly directly to Iran for precision strikes on certain locations, and considering that the main armament of the B-1B's includes the JASSM cruise missile, and the JDAM smart bomb (both of which are reportedly in short supply), the cost/benefit analysis of keeping the B-1's in the U.K. might suggest this deployment is no longer necessary. Either way, it will be interesting to see what other movements might take place over the next few days, as the war in the Middle East remains as kinetic as before. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground23,486 просмотров • 18 дней назад
//The Wire//2300Z October 2, 2026// //ROUTINE// //BLUF: VIOLENT RIOTS CONTINUE IN FRANCE. SECURITY INCIDENT REPORTED AT GRAND MOSQUE IN MECCA. TROOP DEPLOYMENT SURGE OBSERVED AT SOUTHERN US BORDER. UNITED STATES CONTINUES STAGING NAVAL FORCES AND MISSILE DEFENSES IN MIDDLE EAST.// -----BEGIN TEARLINE----- -International Events- Europe: This morning the United States and other G7 countries gathered to examine the release of strategic diesel fuel reserves, to combat the current global fuel crisis. Following morning meetings, the G7 nations agreed to release a total of 100 million barrels of diesel, 50 million of which will be released by the United States. France: Overnight riots continued to grow in size and scope, with mobs increasing attacks on random citizens. Fire has remained a constant weapon, with schoolteachers and firefighters alike being doused with gasoline and set on fire, or having been hit with Molotov incendiary devices. Reports of looting have emerged in some areas as authorities are not able to maintain order. Saudi Arabia: Last night, an incident was reported at the Grand Mosque in Mecca. Initial reports circulated suggesting that a man had been arrested after being discovered wearing an explosive vest which failed to detonate. After a few hours, Saudi officials stated that one individual had been arrested for harassing people and "causing panic and alarm", without any mention of any sort of terrorism concern. Analyst Comment: At face value, it does not make sense for an Islamic terrorist to conduct an attack at the most revered site within Islam, and accounts of what happened very widely. In this case, the cultural significance of the site warrants further investigation to determine exactly what happened. In the videos of the incident that have circulated on social media, bystanders don't seem to be too concerned with evacuating, and the response by security guards is rather lackluster for this to have been a terror attack. -HomeFront- Texas: Following a cross-border shooting in the vicinity of Garceño a few days ago, a surge of US military forces was conducted this morning, reinforcing the border region with approximately 500 soldiers. Helicopter Assault Force (HAF) operations were conducted today, inserting several platoons to combat outposts along the border. -----END TEARLINE----- Analyst Comments: Within the Middle East, indications and warnings are growing to suggest significant logistical efforts are being conducted by the United States and Iran, to prepare for a further intensification of the conflict. Earlier this week the USS THEODORE ROOSEVELT (CVN-71) Carrier Strike Group (CSG) departed port San Diego, bound for the Middle East. The USS MAKIN ISLAND (LHD-8) Amphibious Ready Group (ARG) also departed port San Diego the next day, also bound for the Middle East. The crucial unknown detail is whether or not the US intends to replace the assets on station with these new platforms. If this is a standard relief-in-place operation, this is normal and not an indication of much. However, if these new battle groups are not intended to replace, but rather supplement the assets already on station, this would be a major indicator that major escalations of the war are very likely within a few weeks. As it stands, the current disposition of US forces in the region includes the USS GEORGE WASHINGTON CSG, the USS GEORGE HW BUSH CSG, and the USS BOXER ARG already on station in the Indian Ocean. Of these three, the BUSH has been on station the longest, having been in the region since April, and should be approaching the end of a standard deployment. Similarly, the BOXER has been on station since the end of June, and should be about halfway through her deployment. Considering the fiasco with the USS LINCOLN which resulted in her rapid withdrawal from theater, it's possible that the US Navy is playing it safe and trying to replace battle groups more frequently. However, if these new groups arrive on station and the already-deployed groups stay on station (which happened during the lead up to the war), this would put a total of three aircraft carriers, two amphibious assault ships, and at least one Special Forces Expeditionary Sea Base...a total of six flattops...in the region at the exact moment to be within the predicted window for an intensification of the war. In addition to naval movements, cargo flights continue to take place around the Middle East. Following the combat loss of the headquarters for US 5th Fleet in Bahrain, much of the logistical effort to keep the Navy supplied has been relocated to Diego Garcia. Concerning air defenses, Axios claims that the US has moved two Patriot air defense batteries to Saudi Arabia and Qatar, to bolster defenses in the region. The battery in Qatar was destroyed earlier in the war, and would need to be replaced in any case, and the relocation of another Patriot battery to Saudi Arabia would explain the sudden effectiveness (or existence) of air defenses that intercepted Houthi missiles last week. All things considered, purely in terms of the hardware that is moving into the region, capabilities are stacking up to support whatever (if any) escalation of force that might be in store for the next few months. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground25,808 просмотров • 21 дней назад
//The Wire//2300Z October 9, 2026// //ROUTINE// //BLUF: UNITED STATES LIFTS DIESEL EXPORT SANCTIONS ON RUSSIA IN ATTEMPT TO MITIGATE FUEL CRISIS. ESCALATIONS CONTINUE IN MIDDLE EAST. PROTESTS CONTINUE IN BELGIUM AND FRANCE.// -----BEGIN TEARLINE----- -International Events- Belgium: Following the widespread riots in France, protests have transitioned into riots in Liège. As within France, nearly all of the riots are being conducted by second and third generation children of migrants, who have decided to engage in their own form of student riots in Belgium. Similar riots have remained constant in Brussels, with riot police being deployed throughout the city to handle unrest. Saudi Arabia: Battle damage assessments indicate that yesterday's missile attack at King Khalid International Airport in Riyadh resulted in the destruction of 1-3x commercial aircraft, and the possible damage of several more airframes. This morning more flight disruptions were reported in Riyadh, after another missile strike targeted the airport once again with unknown success. To the east, large-scale emergency flaring was observed at the Abqaiq Processing Plant this morning, indicating that an unknown incident might have transpired. No missile or drone strikes were reported, but Saudi Arabia has quietly halted their drone/missile alerts so as to conceal strikes on refineries, so exactly what strikes have been conducted so far is not clear. Analyst Comment: This morning, the USS George H.W. Bush CSG departed port Phuket in Thailand, and was observed steaming south. If this battle group is intended to return to combat operations in the Middle East, this scheduling would put her back in the northern Arabian Sea within a week at the latest. -HomeFront- Gulf Coast: Overnight Hurricane Isaias strengthened into a Category 3 hurricane, picking up energy over the Gulf before it's expected landfall sometime tonight or tomorrow. Analyst Comment: In addition to the standard concerns of flooding and storm damage, this year's hurricane season is complicated by the extremely fragile petroleum situation in the United States. During hurricanes, localized fuel shortages always take place, but as the war in Iran has stretched our refining and logistical capacity to a breaking point, the addition of Mother Nature into the mix can cause chaos. Washington D.C. - This afternoon, President Trump announced a trade deal with Russia, removing the sanctions on the sale of Russian diesel in western markets, much of which is expected to be imported within the United States. The Treasury Department issued a license for American companies to buy diesel from Russia, with President Trump stating that Russia is to provide 300,000 tons of diesel immediately, with an additional 500,000 tons next month, and a further shipment of 1,000,000 tons and an additional 3,000,000 tons later on. -----END TEARLINE----- Analyst Comments: Whether or not the Russian diesel will help the global market is hard to determine at the moment; surely the lifting of sanctions on a major global fuel producer will alleviate some pressure in the short term. However the second and third order effects might be more of a problem later on, and this decision is a bit of a mixed bag that complicates the situation quite a bit. All total, the 4.8 million tons of diesel equates to roughly 36 millions barrels...which is not much. Depending on the season, the US consumes about 4 million barrels of diesel each day, so if all of this diesel is directly imported into the United States, this would supply us for less than ten days. Additionally, Russia also has an export ban on diesel in effect right now, and it's not clear as to if the White House clarified that detail. Questions also remain as to whether or not Russia can even increase exports to fulfill this agreement, but the proof will be in the shipments that arrive in western ports over the next few months. Even though every little bit helps, by the stated numbers this won't help the fuel crisis by much. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground17,919 просмотров • 14 дней назад
//The Wire//2300Z October 8, 2026// //ROUTINE// //BLUF: CIVIL DEFENSE EFFORTS CONTINUE AROUND EUROPE. RIOTS CONTINUE IN FRANCE. CONGRESSIONAL AGENCY CONFIRMS COMBAT LOSSES DURING IRAN WAR ARE DOUBLE WHAT PENTAGON CLAIMED. INDICATIONS GROWING CONCERNING POTENTIAL RESUMPTION OF STRIKES ON IRAN.// -----BEGIN TEARLINE----- -International Events- France: Nationwide riots have continued over the past 48 hours. various pockets of unrest remain constant in many major cities, with rioters burning debris in the street, as well as looting various commercial businesses whenever tensions become inflamed in local areas. Clashes with police have remained a constant, and arson events have continued in hundreds of cities around the nation. Europe: Throughout the continent, Civil Defense plans continue, with various communities and groups conducting training exercises related to the homeland responses to a potential escalation of the war in Ukraine. Last week, citizens in the town of Grums, Sweden conducted what they claim is the first overnight exercise testing out the bunker under the Edsholms Retirement Home, which familiarized locals with the concepts of shelter life. Over the past two days, Latvia conducted a nationwide readiness drill, testing out various evacuation routes and plans in the event of a Russian ground invasion. Similar exercises have been observed in Romania, Lithuania, Poland, and most other NATO members in eastern Europe. Middle East: Flight delays have been reported in Saudi Arabia, as Houthi targeting of critical infrastructure has remained constant. This morning, the airport in Riyadh was struck again by Houthi ballistic missiles, as the Houthis targeted the airports fuel point as well as parked aircraft. Videos from the ground confirm that several commercial airliners were destroyed during the strikes. -HomeFront- Washington D.C. - Yesterday the DoJ announced the creation of a nationwide initiative, the American Tour Against Hate, which is being led by the DoJ Task Force to Combat Anti-Semitism. The first stop on this nationwide tour is scheduled to be in Southfield, Michigan next Wednesday. Also in Washington, the Congressional Research Service released a report detailing the combat losses of equipment so far during the current war with Iran. This update indicates that previous data provided by the Pentagon was inaccurate, and that all total, 81x fixed wing and rotary wing aircraft have been lost or damaged during the war. Previously the Pentagon had claimed that 42x aircraft had been damaged or destroyed, when in reality the number was nearly double the figure stated in May. Gulf Coast: Overnight, Hurricane Isaias strengthened and is expected to make landfall as a Category 2 hurricane tomorrow night. Heavy rain is expected throughout much of the American southeast over the weekend, as the hurricane drives north into Florida, Alabama, and Tennessee. -----END TEARLINE----- Analyst Comments: Overnight, a blitz of mainstream media reports were published (originating from Axios) claiming that plans are being made by the Pentagon to reengage targeting within Iran. Specifically, some claims state that the targeting campaign is planned for the next two weeks, before the midterm elections, and could possibly include a wider range of targeting options than witnessed so far. Some claims have stated that the decision has already been made, whereas others state that options are only being considered at the moment. Right now, these reports are based on unconfirmed rumors and leaks from insiders, and therefore can't be given that much weight considering the information war that's been spun so far on all sides during this war. The timing of these plans does align with the general atmospherics surrounding the conflict in the region, but if this is the chosen course of action, a lot more resources are going to be needed in theater before any major American offensive is conducted. The USS George H.W. Bush CSG is off station conducting an R&R port call in Thailand, and the USS Theodore Roosevelt CSG has not yet arrived in CENTCOM's area of responsibility. As of three days ago, the most recent satellite imagery confirms that a lot of aircraft are still sitting on the ground at Al Udeid Airbase in Qatar, so those will have to be moved before any major targeting begins. Timeline wise, targeting kicking off again immediately after the midterms is supported by the forces currently in the region. At the shorter-end of the possible escalation window, strikes could take place as early as next week (if the midterms are not a concern), either by the United States or Israeli forces, if the decision is made to return to the war. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground19,031 просмотров • 15 дней назад
//The Wire//2300Z August 18, 2026// //ROUTINE// //BLUF: KINETIC TARGETING CONTINUES WITHIN MIDDLE EAST AS HOUTHIS LAUNCH MISSILES TOWARD DUBAI. TONGAN CRIP THREAT REMAINS SIGNIFICANT IN SALT LAKE CITY.// -----BEGIN TEARLINE----- -International Events- Middle East: Iran struck two more ships in the Strait of Hormuz last night, continuing the trend of the past couple of weeks. This morning, the UKMTO retroactively admitted to a merchant vessel being struck on August 15th, with the ship sustaining damage and one crew casualty. This afternoon, Houthi forces conducted a ballistic missile strike on the UAE, with missile warnings being issued in Dubai, for the first time since May. No locals reported witnessing any interception, and government officials stated that one missile splashed down in the Gulf, and another landed outside their territory. Analyst Comment: On the rhetoric front, this morning President Trump continued claiming control of the Strait of Hormuz, posting a graphic which claims the Strait is now U.S. territory. Even though waterways traditionally can't be claimed as land territory, and while this may just be a more lighthearted meme, at the other end of the spectrum this could be more serious. If the White House is indeed serious about making a territorial declaration of some kind, this could be an effort to move the goalposts to allow for the use of more substantial weapons. If Hormuz is America, then the US can claim that Iran is attacking the homeland. Of course, this logic is a stretch at best, but it's exactly the kind of reasoning that would make sense for the White House to rely on at this stage in the war. -HomeFront- Utah: One suspect has been arrested in conjunction with yesterday's events in Salt Lake City. Afuhia Masiu Manatau was arrested for his role in yesterday's shooting at the Tongan funeral in Kearns. During the funeral, a fight broke out among the congregation, between his 17-year-old son, and several others. During the fight, Manatau gave a firearm to his son, which resulted in the son attempting to murder the others. Manatau's son (the shooter) was shot in the chest during the engagement, and Manatau himself has been arrested. Analyst Comment: Concerning casualties, so far one fatality was reported as a result of the funeral shooting. The victim has been identified as Vilisoni (Soni) Angilau, a confirmed Tongan Crip who was recently released from prison after murdering a member of a rival gang in 2013. Soni Angilau's immediate relative, Naisa Angilau, was also recently released from prison for a completely different shooting as well, after he attempted to kill a gas station clerk in 2009. Of note, Soni's brother Siale also met a violent end as he was also shot and killed during a high-profile shooting that took place inside the courtroom during his trial. Siale Angilau was shot and killed by federal Marshals after attempting to stab a witness to death during his trial for racketeering back in 2014. All of these family members have an extensive presence on social media, and all self-identify as Tongan Crips. -----END TEARLINE----- Analyst Comments: In Utah, additional details are helpful for understanding how serious yesterday's shooting actually was, especially considering the long history of similar murders. Despite assurances to the contrary, Intermountain Medical Center remained locked down throughout the evening last night, as the threats to the hospital remained constant. Many non-essential employees were escorted out of the hospital by SWAT, and patients' medical procedures were canceled due to the security threat. Intermountain Public Relations officials issued statements claiming that everything was fine and that there was no threat to the hospital, however employees within the hospital confirmed that these statements were not true. Intercepted radio traffic from 911 dispatch also confirms that the reason for the overwhelming police response at the hospital, was due to the Tongan Crip Gang attempting to breach the entrance to the Emergency department. At least one employee was assaulted and wounded in the ER, and a large crowd of Tongans also attempted to break through the Emergency Room entrance on the south side of Unit 4. After this breach attempt, local authorities responded in force, with SWAT officers responding immediately to reinforce the hospital and prevent the facility from being overrun. Snipers were deployed to the rooftops, and at least two Bearcat armored vehicles were posted at the Emergency Department to secure a perimeter around the facility. Concerning future threats, the circumstances of yesterday's funeral shooting are still unclear, with much of the eyewitness testimony being verifiably false as gang members seek to cover up the crime. The main question is whether or not this will result in a wider gang war, and right now the answer to that question is not so clear. The Tongan Crip Gang is known to engage in mutual combat within the gang itself, as rival factions settle internal disputes with violence and murder. Funerals are a common way for hostile TCG factions to meet up, and tensions flare. However, the Tongans also have many rivals locally which might also be inclined to stoke up a gang war. The TCG originally had a foothold in Inglewood, California, where the gang achieved it's extremely brutal reputation. After expanding this foothold to Salt Lake City, the TCG became one of the most legendarily violent gangs in the entire nation. Though small in numbers, they make up for their lack of footsoldiers with sheer violence. Even so, many locals prefer to call them "nice" and ignore this brutality, due to the affiliation this gang has within facilities owned by the LDS Church. This gang is known to murder people randomly without a second thought, and despite Tongans being less than one percent of the population of Utah, they make up over 13% of all gang member affiliation in the region. For those who want to make the argument that "not all Tongans" are causing problems, unfortunately in Salt Lake City specifically, this does not appear to be the case based on the case history and preponderance of evidence. During the Tongan Crip funeral murder at an LDS Ward back in January...not a single churchgoer came forward to name the killer. 100% of the congregants at the Ward where the murder took place, refused to speak to the police or provide a statement regarding what they saw. Police set up an anonymous hotline to protect witnesses, but among the hundreds of Tongans that witnessed that shooting, not a single person came forward to testify and the shooters were eventually charged based on evidence of the murder plans being found on their phones. Even the small handful of Tongans who are not documented gang members are extremely loyal to tribal allegiances; quite literally every single Tongan with a social media presence in Salt Lake County has expressed support for their guy who attempted to murder a gas station clerk with a shotgun. No one within this diaspora has condemned the actions of the man who's funeral even resulted in further bloodshed. The Tongan community has not tried to distance themselves from the frequent murders that are conducted within their areas, and most of the Tongan Wards within Salt Lake close ranks around those who commit violent murders. Concerning yesterday's shootings, posts on social media indicate that other family members of yesterday's deceased have been observed flashing Tongan Crip Gang signs and generally confirming their gang affiliation, specifically within the Tongan Wards. On Facebook, most of the Salt Lake Tongans don't wish each other a "Happy B-Day"...they change it to "C-Day" because the letter "B" is too closely affiliated with their arch rivals...the Bloods. This is a callback to their Inglewood origins...many of the TCG's rivals are much the same as in California. The Rose Park Bloods are their main external adversary within Salt Lake, as both gangs have been expanding into each other's turf. In the same area, the Rose Park Taliban (a gang formed from the children of refugees from the Middle East) also maintains some presence, and is allied with the Bloods. Back in March, a Rose Park Taliban member tried to murder a liquor store employee in Taylorsville (near Tongan Crip territory), so gang violence in southwest Salt Lake specifically from these gangs is a constant. As yesterday's "victim" had previously killed a member of the Baby Regulators gang, it's possible that this was a revenge killing that was unrelated to the other Angilau who's funeral was being held at the time. As a result of this complicated web of alliances and relationships between extremely violent gangs, more violence is expected. Despite the grass skirts, barbeques, and disarming smiles, most of these people are killers, and the killing is only likely to escalate. Since one person was killed during the funeral shooting, the funeral for that person will undoubtedly be another opportunity for another shooting, as the cycle of violence and vengeance continues. Analyst: S2A1 Research: NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//
S2 Underground68,279 просмотров • 2 месяцев назад