Key Takeaways

Recent waves of Iranian attacks on vessels in and near the Strait of Hormuz indicate that Iran retains the ability to effectively target vessels in the strait, which suggests that Iran has either overcome previous operational challenges or is adapting to such constraints through new tactics or capabilities.

The Houthis are attempting to domestically produce a variant of the Iranian Kheybar Shekan missile with People’s Republic of China (PRC)-manufactured components.

Houthi development and use of Kheybar Shekan variants with maneuverable re-entry vehicles that can change the missile’s trajectory mid-flight present a challenge to Saudi air defenses as the Houthis continue to fire missiles and drones targeting Saudi critical infrastructure.

Key Takeaways

Ukrainian officials reported in-motion speed restrictions on SpaceX’s Starshield communications network over Ukraine overnight on October 13 to 14 that will significantly disrupt Ukraine’s jet-powered drone interception efforts and intermediate-range strike campaign.

Ukrainian forces do not have access to Starshield or Starlink services over Russia, such that the latest Starshield in-motion speed restrictions cannot affect Ukraine’s ability to conduct long-range strikes against targets in Russia.

The speed restrictions on Starshield could have major implications for Ukraine’s interception efforts against Russia’s faster jet-powered drones.

The Starshield restrictions will significantly impact Ukraine’s ability to conduct the intermediate-range strikes that have facilitated Ukraine’s counteroffensive operations in key frontline sectors throughout 2026.

The Starshield speed restrictions come as Ukraine’s 3rd Army Corps publicized more details on Operation Vivaldi in the Lyman direction, which has heavily relied on a coordinated, months-long intermediate-range strike campaign to facilitate successful Ukrainian ground advances.

Ukraine’s Operation Vivaldi continues to generate cascading effects on neighboring sectors immediately north and south of the Lyman area.

Ukrainian forces struck a data center of the Russian state-owned bank Sberbank in Saratov Oblast and industrial infrastructure in Rostov Oblast on the night of October 13 to 14. Russian forces launched 39 Iskander-M, KN-23, and S-400 ballistic missiles, Zircon and Onyx anti-ship missiles, and 128 drones and loitering munitions against Ukraine overnight.

Neither Russian nor Ukrainian forces advanced on October 14.

“They don’t hold our territory; they’re unable to strike our locations, and that’s what victory looks like for us,” he said.

NATO is a defensive alliance, Grynkewich said.

“So we don’t have any desire here to escalate the situation, and we don’t have any need to do it,” he said.

“All we need to do is make sure no one can threaten us, no one’s going to threaten our territory or our people, and that’s our main objective.”

https://www.theepochtimes.com/world/risk-of-major-attack-by-russia-relatively-low-says-natos-top-commander-6102423?utm_source=ref_share&utm_campaign=copy

Key Takeaways

North Korean Military Enhancement: North Korea conducted two ballistic missile launch tests on October 12 and may have tested its short-range ballistic missile’s ability to follow quasi-ballistic trajectories, which complicate missile detection and interception. North Korea could use these missiles to strike critical chokepoints and isolate the frontline during an inter-Korean conflict.

South Korean Domestic Politics: The Lee Jae Myung administration’s response to the September 21 explosion of a North Korean landmine in the Demilitarized Zone and the subsequent injury of South Korean soldiers is being widely criticized in South Korea and may contribute to a further decline in Lee’s approval ratings. The Lee administration has thus far not finalized any countermeasures against North Korea for the incident, likely due to internal divisions within the administration.

A first-ever agreement between the European Public Prosecutor’s Office and China’s Supreme People’s Procuratorate raises eyebrows. Given the European Parliament’s repeated majority assessments on the risks of police and judicial cooperation with China, some tough questions ought to be asked of the European Chief Prosecutor and her successor.

Join us for an event featuring a panel discussion refocusing attention on North Korean human rights by examining conditions at the Alabuga drone-production facilities in Russia. It will also mark the launch of a new joint CSIS–Bush Institute report analyzing the North Korean regime’s state-sponsored trafficking and how these drones are enabling and intensifying the unprovoked war in Ukraine. The report illustrates how China, Russia, Iran, and North Korea—collectively referred to as CRINK—are increasingly supporting one another and how CRINK cooperation challenges America’s leadership and the rules-based international order.

This event is co-hosted by CSIS and the George W. Bush Institute.

Key Takeaways

The Houthis fully encircled Taiz City on October 12, which will impose multiple dilemmas on Yemeni government-aligned forces. A complete encirclement further restricts Yemeni government-aligned forces’ ability to reinforce and resupply their positions, withdraw forces, and sustain defensive operations in and around Taiz City.

The Houthis likely perceive Saudi Arabia’s temporary closure of King Khalid International Airport and reports of Saudi Arabia’s air defense constraints as indicators that the group is successfully mounting pressure on Saudi Arabia. Such a perception would incentivize the Houthis to sustain attacks on Saudi critical infrastructure. Saudi Arabia has not indicated any willingness to agree to Houthi demands at the time of this writing, however.

Iran appears to be targeting commercial vessels conducting ship-to-ship oil transfers in and near the Strait of Hormuz in order to try to undermine vessels’ ability to move energy through the strait.

Iran has increased its threats against vessels in the strait, likely to reinforce the Iranian threat to shipping and reestablish control over the waterway by deterring vessels from using non-Iranian-approved routes.

Iran may be developing its anti-ship missile capabilities to improve its ability to target vessels.

Iran is threatening to attack US-linked digital infrastructure in response to potential future US strikes, likely in order to try to deter the United States from resuming military action against Iran. Iran likely seeks to threaten to expand the potential US targets for Iranian attacks in order to raise the United States’ perceived costs of renewed conflict with Iran.

Key Takeaways

Russia and Ukraine have not agreed to a ceasefire against energy infrastructure as of October 12, as Russian forces continued to strike Ukrainian energy infrastructure overnight on October 11 to 12.

Senior Russian officials confirmed that there is no ceasefire agreement as of October 12 and outright rejected any ceasefire proposal that would allow Ukraine to hold elections.

A Russian State Duma deputy and a Russian ultranationalist mouthpiece supported the Kremlin’s rejection of an energy ceasefire proposal and openly stated that Ukrainian strikes against Russian refineries are not the primary driver of global diesel shortages.

Ukrainian forces delayed a Russian strike package by striking Russian ballistic missile launchers located in Russia.

Ukrainian forces did not strike Russian oil refineries on October 11 to 12 due to President Trump’s energy ceasefire announcement on October 11. Russian forces launched 121 drones against Ukraine overnight.

Ukrainian forces recently advanced in the Oleksandrivka direction.

“Flax Typhoon” Actors Associated with Integrity Technology Group Used “Microscan” and “FishHub” To Target Critical Infrastructure and Other Networks Today the Justice Department and FBI announced court-authorized seizures to deny malicious cyber actors access to two hacking tools, “Microscan” and “FishHub,” used to scan and, in some cases, hack, U.S. and foreign critical infrastructure systems and other networks. As alleged in court documents unsealed in the Western District of Pennsylvania, malicious cyber actors working for Integrity Technology Group (Integrity Tech), a company based in the People’s Republic of China (PRC), operated and used the tools. Integrity Tech has contracts with the PRC government.

“The United States will not allow China or its proxies to operate against United States interests with impunity in cyberspace,” said Assistant Attorney General for National Security John A. Eisenberg. “The National Security Division will continue to respond decisively and use every tool at our disposal to disrupt the Flax Typhoon threats, dismantle the infrastructure sustaining them, and protect the critical networks that power our daily lives and on which our Nation’s security depends.”

“These state-sponsored hackers continue to aggressively target and access networks and systems throughout the world in an effort to identify and steal files and otherwise exploit victims’ vulnerabilities,” said U.S. Attorney Troy Rivetti for the Western District of Pennsylvania. “These seizures, our second disruption of Integrity Tech’s massive operations in as many years, send another clear message to cybercriminals from the PRC and elsewhere of the Department’s dedication to defending and maintaining cybersecurity in the United States and abroad.”

“Integrity Technology Group provided China-linked threat actors with capabilities used to conduct widespread vulnerability scanning and, in some cases, intrusions targeting U.S. and foreign critical infrastructure,” said Assistant Director Brett Leatherman of the FBI’s Cyber Division. “The PRC relies on contractor and enabling companies to expand the reach and scale of its malicious cyber activity. By exposing and disrupting these enablers, we make it harder for the PRC to target American networks and infrastructure.”

“Today’s seizures underscore the FBI’s unwavering commitment in disrupting PRC state-sponsored cyber criminals who threaten our critical infrastructure and national security,” said Special Agent in Charge Mark Remily of the FBI San Diego Field Office. “FBI San Diego and our law enforcement partners around the world will continue to employ the full force of our investigative authority to protect the American people and safeguard our networks from malicious foreign cyber actors.”

According to court documents, Integrity Tech created and used a botnet of internet-of-things devices infected with a variant of Mirai malware. Among other things, this botnet facilitated Integrity Tech’s computer vulnerability scanning using Microscan. Integrity Tech developed Microscan to conduct reconnaissance, via the botnet and otherwise, of victim computer networks for vulnerabilities that its clients would later exploit. Targets of Microscan vulnerability scanning include a U.S. power company based in South Carolina, a multi-national Non-Governmental Organization, Japanese and Polish airports, Taiwanese critical infrastructure companies in the natural gas and power sectors, and two Taiwanese universities. Integrity Tech accessed Microscan through one of the seized domains, c0cc[.]cc.

A second Integrity Tech tool, FishHub, is alleged to have facilitated the exploitation of computer networks through spear phishing. After an initial network compromise, FishHub downloaded additional malware to the victim network. This malware provided Integrity Tech’s clients with unauthorized remote access to the victim network or searched for specific files and sent them to servers controlled by Integrity Tech. Confirmed victims of FishHub activity included approximately 20 Taiwanese universities. Five of the seized domains helped deliver this malware: 98aicai[.]com, 98aicode[.]com, outlook3650[.]com, youtubecard[.]com, and linkedinns[.]net.

Today’s action marks the Department’s second public technical disruption of Integrity Tech’s hacking infrastructure. In September 2024, the Justice Department announced the court-authorized disruption of Integrity Tech’s Mirai malware botnet which consisted of more than 200,000 consumer devices in the United States and worldwide. In conjunction with the seizures announced today, the FBI, along with other U.S. and foreign-partner agencies, published a cyber security advisory. This advisory provides indicators-of-compromise associated with Integrity Tech intrusion activity and is designed to help network defenders identify and respond to Integrity Tech’s malicious activity.

The FBI San Diego and Baltimore Field Offices are investigating the case, in coordination with the FBI’s Cyber Division.

Assistant U.S. Attorney Brendan McKenna for the Western District of Pennsylvania and Trial Attorney Jacques Singer-Emery of the National Security Division’s National Security Cyber Section are prosecuting the case. Substantial assistance was provided by Assistant U.S. Attorney Thomas Sullivan for the District of Maryland and the National Police Agency of Japan.

Note: View the affidavit here.

View the seizure warrant here.

Updated October 8, 2026

Light attack aircraft and military vehicles have arrived at the new China-Laos joint training facility announced last Tuesday, according to satellite images reviewed by Reuters.

The images, taken by commercial satellite provider Vantor, show what security analysts believe are eight K-8 light attack jets ‌and more than two dozen support vehicles on a runway that is still being built — China's latest expansion of its overseas military presence.

Taken on September 30, the day after China's defence ministry announced it had set up the facility at Ban Keun outside the capital Vientiane, the images also show extensive construction work around the runway.

The swift development of the new facility is being closely watched by regional military attaches and security scholars, some of whom say its construction potentially marks China's first fully fledged overseas military base in Southeast Asia.

Despite more than 20 years of intense military modernisation, China is widely perceived to lack a strong network of overseas facilities ⁠beyond the South China Sea, port access in Ream, Cambodia and a logistics base in Djibouti.

Rachel Vandenbrink, a senior analyst at the Australian Strategic Policy Institute, said the selection of Ban Keun for a facility that the People's Liberation Army could access "is likely more about a target of opportunity than filling an obvious operational need."

"Laos does have some geostrategic value as an accessible foothold in mainland Southeast Asia, given its shared border with China and infrastructure links, including (its) railway," Vandenbrink said.

The Chinese defence ministry did not immediately respond to Reuters' request for comment.

The Lao embassy in Bangkok and the Lao foreign ministry did not immediately respond to requests for comment.

Singapore-based security analysts Collin Koh and Alexander Neill, as well as Vantor specialists, said the planes appeared to be Hongdu JL-8 aircraft, which both the Chinese and Lao air forces operate.

Also known as the K-8, the two-seater aircraft is extensively used for training as well as having light attack capabilities. It was jointly developed by ‌China and ⁠Pakistan and is exported to other militaries.

Laos currently has four of the planes, according to the London-based International Institute for Strategic Studies' annual assessment of the world's militaries. Koh, a scholar at the S. Rajaratnam School of International Studies, described the Laotian planes as being of "questionable serviceability".

As construction continues, diplomats and analysts are keeping watch for any sign of air defences, ammunition and fuel storage as well as surveillance facilities — all of which could point to the base serving broader military functions beyond training.

Neill said while the airfield looked relatively short and innocuous ⁠at present, it could in future serve larger aircraft, including signals intelligence and electronic-surveillance planes to extend China's reach into Southeast Asia.

"It looks like the airfield has been engineered to accommodate a runway extension allowing larger aircraft to operate," said Neill, an adjunct fellow at Hawaii's Pacific Forum think-tank.

In helping Laos build up Ban Keun, China is now occupying a site the ⁠US used covertly at the height of the Vietnam War.

During the US war against communist forces in Laos in the 1970s, Ban Keun was an airfield known as "Lima Site 44" used by Air America, an airline discreetly owned by the Central Intelligence Agency, according to records shared with Reuters by Ryan Wolfson-Ford, a Southeast Asia specialist at ⁠the Library of Congress.

The airline carried American-backed troops from the country’s Hmong highland minority as well as supplies into rough mountain airstrips known as "Lima Sites".

As early as 1968, Ban Keun was used as a point from where Air America helicopters delivered Hmong troops to other combat zones, said Dr Joachim Leeker, an academic who has written about the history of the airline.

The Trump administration has discussed beginning reciprocal nuclear site visits with China and plans to continue pushing for that possibility during in-person meetings in the coming months, according to sources familiar with the matter.

The discussions, which have been informal and preliminary, come amid mounting US concerns about China’s rapidly growing nuclear weapons program and after the last remaining arms control agreement between the US and Russia expired last year. The effort to establish a trilateral agreement began in Trump’s first term, but no tangible progress has been made and formal talks on a new accord have not begun, with China and Russia largely ignoring substantive US outreach efforts.

The idea of reciprocal visits was initially raised by the Chinese while meeting US officials this year, one source said, giving some indication that the communist nation may be open to pursuing confidence building measures that could pave the way for a grander agreement. Visits to the US Department of Energy national labs and to China’s equivalent facilities were discussed, and the US would be open to discussing visits to nuclear testing sites, the source said.

The nuclear discussions between the US and Chinese officials at the working level so far this year have largely occurred on the sidelines of gatherings by the five permanent members of the United Nations Security Council, known as the P5, sources said.

The concept of allowing nuclear site visits could move the needle on the US efforts to engage China on issues related to strategic stability and potentially serve as a building block for a trilateral agreement, but China remains adamant that they will not engage on discussions that could limit their nuclear buildup. The US currently has a much bigger nuclear arsenal with about 5,000 total nuclear warheads while China has about 600, but it is expanding its nuclear weapons infrastructure and has been projected to produce hundreds more warheads over the next decade.

A State Department spokesperson referred questions to the White House, which did not provide a comment. CNN has requested comment from the Chinese embassy in Washington, DC. Last Thursday, China began its weeklong National Day holiday, during which all government offices are closed.

Paul Dean, who previously served as an acting assistant secretary of state overseeing US arms control efforts, told CNN that the administration needs to approach any Chinese nuclear negotiations with its “eyes wide open,” but said that reciprocal visits would be “an extremely valuable confidence-building measure” that could lay the informational and diplomatic foundation for additional work to reduce nuclear risk between the two countries.