The State of the Threat logo

The State of the Threat

Archives
Log in
Subscribe
September 23, 2026

Daily Brief, September 23, 2026

Daily Brief, September 23, 2026

Top Story

Iran names its price for reopening Hormuz: four conditions and a seven-day clock

[RU/FA · Kommersant, Donya-e-Eqtesad]

Iran has put a published price on the strait, and it is a list of four US concessions rather than a fee schedule.

Source: Kommersant (Russian, citing Reuters)

United States

Enforcement & Liability

Meta marketed an AI phone-calling agent that a human call centre was actually running

Meta promoted an AI phone-calling feature for its Muse assistant while human call-centre workers completed the calls, and internal staff flagged the privacy exposure.

Source: 404 Media

Geopolitical Shocks

Trump backed a US diesel export ban as Treasury studies a full or partial restriction

US benchmark diesel hit a record $6.529 a gallon, up nearly two dollars since early July, and Treasury Secretary Bessent said the administration is studying a ban.

Source: OilPrice

Around the World

Enforcement & Liability

OFAC designates more persons in Iran's digital-asset sector, again publishing the names only as unreadable image tables

The US Treasury's OFAC (Office of Foreign Assets Control) made the designations under the executive order targeting Iran's financial network. The Federal Register notice lists the designees as embedded images rather than machine-readable text — a recurring problem with OFAC's public notices that has now blocked direct verification three times in two months.

Source: OFAC

A Trump-led hemispheric coalition turned 24 criminal groups into a multi-jurisdiction sanctions target

[PT · G1]

The Trump administration pushed member governments of the Shield of the Americas, a hemispheric security coalition, to sign an agreement naming 24 groups as shared threats and sanctions targets, among them Brazil's two largest criminal organisations, Comando Vermelho and the PCC (Primeiro Comando da Capital).

Source: G1 — Mundo

The EU delisted two Kremlin-linked billionaires in the same deal that renewed sanctions on 3,000 other Russians for three years

[RU · Meduza]

Alisher Usmanov and Mikhail Fridman have their EU sanctions lifted; the remaining roughly 3,000 designations are extended three years in the same package. France and Slovakia pushed for the removals; Latvia initially blocked the whole package over it, then dropped its objection.

Source: Meduza

Colombia's competition regulator prioritised a two-trillion-peso (roughly $500 million) public contracting probe

[ES · El Tiempo]

The Superintendencia de Industria y Comercio ordered prioritisation of an investigation into a contracting network operating during the government of Colombian President Gustavo Petro.

Source: El Tiempo — Justicia

Supply Chain Risk

Rhine drought is squeezing barge, truck and rail capacity at the same time

The Rhine's navigable depth fell to about 4.25 feet, well below the low-water threshold, pushing shippers onto truck and rail, where finding a truck now takes up to two weeks and booking intermodal rail up to six weeks.

Source: FreightWaves

Brazil formally challenges the US's 37.5% tariff at the WTO, starting a 60-day clock before it can request a dispute panel

[PT · Estadão]

Consultations — the mandatory first step in a WTO trade dispute — begin in Geneva on September 25. If the two sides haven't resolved it within 60 days, Brazil can request a formal WTO panel to rule on the tariff.

Source: Estadão

Geopolitical Shocks

US aviation sanctions on Iran take effect; Baghdad and Muscat stop accepting Iran-origin flights within hours

[AR · Sky News Arabia]

The package halts Iranian airline operations outright and threatens dollar-system exclusion for any party that fuels or services the aircraft.

Source: Sky News Arabia — Business (Arabic)

A drone found near a German air force base matches the one used in an attack on a Ukrainian cargo plane at Leipzig

[DE · Der Spiegel]

A farmer found the drone near Wunstorf air base in Lower Saxony, Germany. Spiegel reports it matches the drone from the Leipzig airport attack.

Source: Der Spiegel

Regulatory Horizon

Austria's mandatory IT-incident reporting starts 1 October under its version of NIS2

[DE · Heise Security]

Austria is complying with NIS2, the EU directive requiring incident reporting, by standing up a Federal Office for Cybersecurity and creating registration obligations for companies and public authorities alongside the reporting duty.

Source: Heise Security

Mexico raised tariffs on more than 1,400 products in one day, issuing three separate trade and compliance instruments to do it

[ES · Expansión]

Mexico says it retains WTO-compliant room to go further against countries without a trade treaty.

Source: Expansión (Mexico)

Infrastructure & Capacity

Brazilian airline Azul reports a GPS malfunction tied to its aircraft model, not the airspace it flies

[PT · Estadão, G1]

Azul attributed schedule and route changes on more than 70 flights to a global GPS instability affecting its Embraer E2 regional jets specifically. Embraer says safety is unaffected.

Source: Estadão / G1

Germany's defence buildup is gated by an eight-month security clearance queue

[DE · Welt]

Berlin is spending billions and industry is building capacity, while government clearance checks now often take up to eight months.

Source: Welt

Also Today

Brent dipped near $98 as Saudi Arabia restarted its Hormuz bypass pipeline

Source: OilPrice

Commerce capped new polysilicon importers at 12 kilograms a week ahead of December tariffs

Source: Peacock Tariff Consulting

A federal watchdog finds two US agencies enforcing the same Chinese-telecom-equipment ban can't see each other's results

Source: GAO Reports

Vietnam is financing its infrastructure by selling land, with property revenue nearing 4.5% of GDP

Source: Fulcrum (ISEAS)

Microsoft disrupted a phishing platform that used machine learning to pick targets inside breached organisations

Source: Microsoft Security Blog


Get the full risk analysis every Sunday. Manage your subscription.

Don't miss what's next. Subscribe to The State of the Threat:
← Newer Daily Brief, September 24, 2026 Older → Daily Brief, September 22, 2026
stateofthethreat.com
LinkedIn
Powered by Buttondown, the easiest way to start and grow your newsletter.