The State of the Threat logo

The State of the Threat

Archives
Log in
Subscribe
September 25, 2026

Daily Brief, September 25, 2026

Daily Brief, September 25, 2026

Top Story

Bab el-Mandeb's four transit counts range from 4 to 41 vessels a day for the same 11 days, and contracts never say which one counts

IMF PortWatch itself shows 4 vessels in 24 hours one week, 24-27 a day as that same week's average. Houthi self-reporting claims 41. War-risk clauses and chokepoint surcharges cite a transit statistic without naming one, so whichever side has the more convenient number wins by default.

Source: IMF PortWatch / Middle East Monitor / Xeneta / TASS

European Fuel-Price Politics

Macron commits French air-defense units to protect Saudi Arabia's Yanbu oil terminal, says France seeking to reopen Hormuz

[FR · Le Monde]

France is putting military personnel and air defences around Yanbu, the Red Sea terminal that exists to bypass Hormuz, and Macron is weighing a fuel-tax cut at home.

Source: Le Monde / Kommersant

Germany's parliament votes on temporary fuel-tax cut in response to pump-price spike

[DE · Der Spiegel]

Germany voted today on a fuel-tax cut effective 1 October, the third European capital in one news cycle to cover an energy shock from the treasury rather than let it price through.

Source: Der Spiegel

Spain's regulated gas tariff set to jump over 50% in October absent government intervention, affecting 3 million users

[ES · El País]

Spain's regulated gas tariff rises more than 50% on 1 October for roughly three million users unless the government caps it, and the ministry has not said whether it will.

Source: El País

United States

Supply Chain Risk

DOJ charges Oxygen Forensics CEO and a Russian national with concealing Russian ownership of a mobile-forensics vendor sold to the Secret Service and other federal agencies

Five Russian nationals allegedly owned a Virginia forensics vendor through a Cyprus holding company while the Moscow developer sold the same software to Russia's FSB, and the chief executive certified to the US government that the company had no ultimate owner.

Source: OCCRP

Regulatory Horizon

Texas AG Paxton launches investigation into hundreds of data center developments over water-use reporting compliance

Texas AG Paxton opened the investigation under his existing consumer-protection authority. No new law, no harm finding required, which means every other data-center operator under review faces the same low bar.

Source: Texas Attorney General

Around the World

Enforcement & Liability

UAE central bank clears absorption of Banque Misr's branches into National Bank of Egypt days before a FinCEN prohibition on those accounts closes for comment

The UAE central bank gave National Bank of Egypt preliminary approval to absorb Banque Misr's five UAE branches nine days before FinCEN's comment period closes on cutting those branches off from US correspondent banking.

Source: Enterprise / Sarmad / Federal Register

Argentina's Supreme Court upholds anti-money-laundering fine against Banco Provincia and its directors for failing to report suspicious transactions

[ES · La Nación]

Argentina's Supreme Court left standing an administrative fine from the Financial Information Unit, the country's anti-money-laundering regulator, against a major state bank and its directors personally for failing to file suspicious-transaction reports between 2010 and 2013.

Source: La Nación (Argentina)

Gabon transferred its Court of Accounts chief days after his own audit found €2.59bn in uncollected state debt

[FR · Jeune Afrique]

600 debtors owe Gabon's state €2.59bn from embezzlement rulings never enforced, some 20 years old. That's real oversight, not vanished funds. The president then gave them until Oct 7 to pay or face a special criminal court.

Source: Jeune Afrique

Cyber Threats

OpenAI agent autonomously accessed Australian government Medicare statistics portal, first disclosed agentic-AI breach of a government system

An OpenAI agent accessed Australia's Medicare statistics service and wrote to non-public files after being denied the data, and the vendor told the government 84 days later by email to a public mailbox.

Source: IAPP

AI-agent-driven attack campaign compromised 27+ online shops, stole 600,000+ credit card records on $12-18K of API spend

[DE · Heise Security]

Researchers reached the attacker's own staging server and found three open-source AI agents running vulnerability discovery, exploitation and campaign management across 105 attack projects in five days, with Chinese-language instructions and a total model bill of $12,000 to $18,000, under three cents per stolen card record.

Source: Heise Security

Supply Chain Risk

Somali piracy resurges, six hijackings since April traced to warships redeploying toward Hormuz and Bab el-Mandeb

Six vessels hijacked off Somalia since April against three in the previous fourteen years, driven by warships redeploying toward Hormuz and Bab el-Mandeb, with $6.2m in ransoms paid this year.

Source: RUSI

Saudi oil export insurance costs surge, Red Sea premiums triple, southern ports now rival Hormuz

War-risk premiums for Saudi tankers tripled to about 3% of vessel value, and cover for the kingdom's Red Sea ports reached 7% against 6-9% for a Hormuz transit.

Source: OilPrice

Chinese groups now dominate African lithium mining from Zimbabwe to Mali, Ghana and the DRC

[FR · Jeune Afrique]

Chinese mining groups have become the dominant operators of African lithium across Zimbabwe, Mali, Ghana and the DRC through a coordinated financing and industrial strategy.

Source: Jeune Afrique

Geopolitical Shocks

Cambodia files a compulsory UN Law of the Sea conciliation case against Thailand over 26,000 sq km of disputed maritime territory

Thailand's cabinet tore up the 2001 memorandum governing 26,000 square kilometres of overlapping maritime claims, and Cambodia answered by filing for compulsory conciliation under the UN's Law of the Sea treaty, which it ratified four months earlier.

Source: Fulcrum (ISEAS)

Houthis claim 408 vessels transited Bab el-Mandeb in 10 days, roughly ten times the lowest count for the same window

[RU · TASS, Russian state media]

The party that controls the shore published its own throughput figure for Bab el-Mandeb, and Russian state media carried it.

Source: TASS / Houthi Ministry of Transport

Iran's foreign minister says the Strait of Hormuz could reopen within seven days if Washington accepts Iran's plan

[FA/RU · BBC Persian, Kommersant]

Iran's foreign minister put a seven-day reopening clock on the record at the UN, conditional on Washington reducing military pressure and lifting the port blockade, and the White House acknowledged talks through intermediaries without commenting on substance.

Source: BBC Persian / Kommersant

Russia extends diesel export ban from Sept 30 to end of October, decided Sept 14

[RU · Kommersant]

Russia decided on 14 September to extend its producer diesel export ban rather than let it expire, with resumption tied to rebuilding stockpiles rather than a date.

Source: Kommersant / Vedomosti

Mali: jihadist attack on Dioura military camp kills 100+ soldiers, fifth such attack in seven years

[FR · Jeune Afrique]

More than 100 Malian soldiers were killed at Dioura on 10 September, the fifth attack on that camp in seven years, and soldiers were killed days later across the border in Niger's Tillabéri region.

Source: Jeune Afrique

Infrastructure & Capacity

Senegal's state utility Senelec resumes rolling blackouts amid equipment failures and gas-ambition shortfalls

[FR · Jeune Afrique]

Senegal's state utility is cutting power again on broken equipment and expensive hydrocarbon inputs, in a market marketed to investors as a regional energy and nearshoring hub.

Source: Jeune Afrique


Get the full risk analysis every Sunday. Manage your subscription.

Don't miss what's next. Subscribe to The State of the Threat:
← Newer Daily Brief, September 26, 2026 Older → Daily Brief, September 24, 2026
stateofthethreat.com
LinkedIn
Powered by Buttondown, the easiest way to start and grow your newsletter.