Daily Brief, September 22, 2026

Top Story

France waives its winter diesel specification as pump prices set records on two continents

France let summer-grade diesel stay on sale two weeks into winter and asked Brussels to relax EU fuel-quality rules, which is what a government does when it doubts the fuel will arrive rather than when it dislikes the price.

Source: Le Monde / Le Figaro / Kommersant / OilPrice / Brazil Journal

United States

Cyber Threats

Colorado governor's office confirms foreign actors hacked two small water utilities, altering pump cycles and disabling alarms

Both utilities serve fewer than 200 people.

Source: Colorado Governor's office via The Epoch Times (GDELT)

Around the World

Enforcement & Liability

A live US prohibition against Egypt's Banque Misr returns clean on every OFAC list

FinCEN's proposed Section 311 action would cut US correspondent access for five UAE branches of Banque Misr, Egypt's state-owned bank, over roughly $1.8bn routed through 103 suspected Iranian front companies; comments close October 1. The bank has no match on OFAC's SDN or Consolidated lists.

Source: Federal Register (FinCEN NPRM, doc 2026-17871)

Ireland's data-protection regulator fines Google €403M over geolocation-data violations

Ireland's regulator put a nine-figure price on location-data consent, and the same consent chain runs through the ad-tech SDKs sitting in ordinary business apps.

Source: FAZ / Euractiv France / Vedomosti / Iran International

The EU moves to drop two Kremlin-linked billionaires from its Russia sanctions list, brokered inside a fight to renew 2,600 other designations

[RU · The Bell, Vedomosti]

Alisher Usmanov and Mikhail Fridman, sanctioned by the EU since 2022 over ties to Putin, would come off the list pending no member-state objection — folded into the EU's renewal of sanctions on roughly 2,600 other Russian individuals and entities, a vote that needed a one-week extension of its own to get done.

Source: The Bell / Vedomosti

Cyber Threats

EU Court of Auditors: member states may lawfully withhold critical-infrastructure attack information from each other

The auditors name insufficient information sharing as the biggest weakness in EU cyber readiness and point at the September 2025 airport attack across Germany, Belgium and Ireland that member states never properly reported to ENISA, the EU's cybersecurity agency, or to each other.

Source: European Court of Auditors via Heise Security

Kaspersky documents a ransomware campaign that used no malware and encrypted nothing

[RU · Securelist]

The PAYLOAD campaign ran its extortion entirely through Active Directory Group Policy management, with no malicious executables and no encryption.

Source: Securelist RU (Kaspersky)

Supply Chain Risk

Aeroméxico confirms breach of 15M+ customer records via third-party vendor platform, Mexican regulator investigating

The data left through a customer-data platform run by an external vendor.

Source: El Financiero / El Universal / Expansión / Proceso (Mexico)

EU's new steel "melt and pour" rule takes effect October 1, requiring documented proof of where the steel was made

An importer of covered steel must name the country where it was melted and poured, proved by a Mill Test Certificate carrying that country and the heat number — without it, there's no duty rate at which the steel clears.

Source: European Commission DG TRADE

Geopolitical Shocks

Turkish Airlines suspends all flights to Iran until at least March 2027

[FA · Iran International]

A major regional carrier has taken an entire market out of its schedule for at least two quarters, which is a commercial planning horizon rather than a rolling cancellation.

Source: Iran International

Iraqi lawmaker Shivan Dubardan says US pressure has left Iraq as Iran's only remaining route to US dollars

[FA · Iran International]

Shivan Dubardan of Iraq's parliamentary Security and Defense Commission describes a corridor narrowed to a single channel, which is the shape sanctions pressure takes before it produces a single point of failure somebody else is banking through.

Source: Iran International

The Kremlin publicly ties Germany's far-right gains to Berlin giving up cheap Russian gas

[ES · El País]

Moscow is claiming European energy policy as the cause of a domestic political shift in Germany, which tells you more about Russia's messaging line for Europe this winter than about German voters.

Source: El País

US reportedly to open two new military bases in Greenland, relayed by Russian state media without the usual framing

[RU · TASS, Russian state media]

TASS relayed a Reuters report on a US Arctic base build-out with no adversarial spin attached, which is itself unusual for the outlet's treatment of NATO basing.

Source: TASS

Ukrainian drones hit Russian refineries again as Moscow prepares to extend its diesel export ban

[RU · Meduza, Kommersant]

Drones set the Kuibyshevsky refinery at Samara alight and a Moscow-area refinery halted after a strike, while Russian government fuel procurement volumes rose 16 to 35 percent year on year and Bloomberg reports the export ban will run past September 30.

Source: Meduza / Kommersant / RBC

Regulatory Horizon

The US Trade Representative opens the first Section 301 case against a sovereign's own domestic drug-pricing law

Section 301, the US tariff-retaliation law normally aimed at unfair trade or IP practices, is now pointed at Germany's pharmaceutical reimbursement rules — the first time it has targeted how a country prices something inside its own borders rather than a trade practice. Retaliatory tariffs on German pharma are the outcome under consideration.

Source: USTR press office

Also Today

Panama Canal Authority holds the ship-draft limit at 48 feet, canceling the depth cut shippers had planned around

Source: Panama Canal Authority (pancanal.com)

Braskem bondholders demand a $3B injection from Petrobras, Brazil's state oil major and top shareholder; the board plans to reject it

Source: Estadão — Economia

Coca cultivation hits a record 385,100 hectares in 2024 as Mexican cartels expand through Latin American alliances

Source: Diálogo Américas

Qatar Energy says the equipment for its LNG expansion cannot be delivered

Source: Asharq Al-Awsat — Economy

Mercedes weighs further production cuts across all German plants as autoworkers protest layoff fears

Source: Handelsblatt / L'Usine Nouvelle / Asharq Al-Awsat

Get the full risk analysis every Sunday. Manage your subscription.