The latest published intelligence briefing for each active theater, most active first. Every section links to the live theater view on the dashboard.

All nine events for the period are single-source and unconfirmed, but taken together they describe a sharp Houthi escalation in the Bab al-Mandeb corridor — combining declared maritime blockade of Saudi traffic, tanker strikes, and missile platform repositioning near the strait.

Bab al-Mandeb saw four unconfirmed events in 24 hours against a 7-day baseline of 0.3 events/day (+1,233%). Two separate vessel-diversion reports describe at least 16 ships rerouting away from the strait following a Houthi-declared naval blockade of Saudi ports — both single-sourced and provisional. Two unconfirmed strike events describe attacks on Saudi tankers: one tanker reportedly caught fire after being struck in the Red Sea approaches, and Houthi forces claimed hits on tankers *Encelia* and *Layla* north of the strait. No kinetic engagement has been independently verified.

On land, unconfirmed reporting describes Houthi shelling in Bilad al-Yubi district, Dhalea, wounding one civilian and damaging homes and a market. Separate unconfirmed reporting places coordinated Houthi attacks on government positions across al-Fakher, al-Jub, and Batar fronts in Al Dhale'e, described as the fiercest fighting in that area since 2019. A counter-attack by Yemeni army and popular committees against STC positions in western Al-Dale'a is also single-sourced. Unconfirmed reporting from Taiz describes Houthi transfer of two missile launch platforms to Mokha district, near the shipping lane, with assembly not yet complete. A Sanaa-sourced Houthi health ministry report claims 53 deaths and 592 injuries from U.S. airstrikes between July 6–22.

If the maritime events are corroborated, a declared Houthi blockade enforced by live strikes on Saudi tankers represents a qualitative escalation beyond the Red Sea campaign targeting Israel-linked shipping. Simultaneous missile platform repositioning to Mokha would place launch assets closer to the strait's chokepoint. The inland clashes in Al Dhale'e and Al-Dale'a suggest concurrent pressure on southern front lines.

Watch for independent vessel-tracking data (AIS divergence near Bab al-Mandeb) that would corroborate or refute the diversion claims. Monitor for damage reports or distress signals from tankers *Encelia* and *Layla*, which would indicate confirmed kinetic engagement. Any Houthi announcement of completed missile platform assembly in Mokha would indicate elevated strike risk to strait traffic. Renewed clashes on the Al Dhale'e fronts would indicate a sustained offensive rather than an isolated probe. Corroboration of the Taiz and Al-Dale'a reports from additional sources would indicate coordinated multi-front Houthi activity.

U.S. Central Command conducted a new round of strikes against Iranian military targets during the 24-hour period, while Iran simultaneously launched drone attacks into Kuwait and sustained Houthi Red Sea operations targeting Saudi oil tankers at a rate roughly seven times the 7-day baseline.

U.S.–Iran direct exchange. CENTCOM announced a series of strikes against Iran (provisional, four sources) concurrent with an attack attributed by Khuzestan's Deputy Governor to the "American enemy" at the Shalamcheh border crossing, killing two people (provisional). This represents the most kinetically significant delta versus baseline for Iranian territory proper.

Kuwait drone intercept. Kuwait's General Staff confirmed activation of air defenses to intercept an Iranian drone attack over Kuwait City (provisional). Activity in Kuwait fell below its 7-day average of 1.3 events/day in raw count but represented a qualitative escalation — a direct Iranian drone penetration attempt against a Gulf monarchy that has not featured in recent exchange cycles.

Red Sea surge. Three events were recorded off Al Hudaydah against the 7-day baseline of 0.4/day — a 650% spike. The Houthi spokesperson confirmed tankers ENCELIA and LAYLA were struck with ballistic missiles, cruise missiles, and drones, with fires reported on both vessels, and approximately ten additional ships diverted (provisional). ISW-CTP independently tracked the tanker attack, providing corroboration across separate monitoring streams.

Erbil explosion. A single explosion was reported in Erbil, Kurdistan Region (provisional, three sources). Cause, target, and casualties remain unknown.

Konarak explosions. Multiple explosions were reported in Konarak, Sistan and Baluchestan Province, via Tasnim News Agency (provisional). No attribution or damage assessment is available.

The simultaneous occurrence of U.S. strikes on Iran, an Iranian drone attack on Kuwait, Houthi tanker strikes, and unexplained explosions in Erbil and Konarak indicates a broad, multi-vector operational tempo across the theater within a single 24-hour window. The Shalamcheh border crossing attack — a key Iran–Iraq land route — carries logistical and symbolic significance. The Kuwait intercept marks a direct Iranian aerial action against a GCC state, which could pressure Gulf partners' postures toward the U.S.–Iran confrontation. Saudi commercial shipping disruption in the Red Sea, if sustained, compounds existing maritime security concerns in a high-traffic chokepoint.

Watch for: official Kuwaiti government statements on the drone intercept that would indicate a formal diplomatic or security response toward Iran. Monitor CENTCOM channels for battle damage assessments on the Iran strikes, which would indicate targeting priorities and escalation ceiling. Track maritime reporting (AIS data, Lloyd's, ISW-CTP) for ENCELIA and LAYLA status, which would indicate the operational impact on Red Sea shipping. Any follow-on explosions in Konarak or Erbil without attribution would indicate a widening of unacknowledged strike activity. Houthi announcements referencing additional Saudi or U.S.-linked vessels would indicate continuation of the "encirclement" campaign framing.

All seven Syria events logged in the 24-hour window are single-source and unconfirmed; no verified or partial-confidence reporting exists for the period. The pattern warrants monitoring but cannot support operational conclusions.

Activity spiked relative to the 7-day baseline across multiple governorates with no prior baseline presence. In Rif Dimashq, two unconfirmed events cluster around Al-Jarajir: a young man was reportedly killed by Syrian border guard fire on the Syria-Lebanon border strip, followed by a security convoy deployment and house-search campaign in the town — both single-sourced and unverified. In Daraa, two unconfirmed reports describe Israeli ground and air incursions into southern Syria — five reportedly within a single day — and a separate incident of heavy machine gun fire on agricultural land west of Daraa; both sourced solely to the Syrian Observatory for Human Rights. Three additional unconfirmed, single-source incidents were logged with no baseline comparison: a gunshot wounding of a security patrol member in Hama city, a war-remnant landmine detonation killing one civilian in Raqqa countryside, and stray gunfire killing military personnel in Latakia city.

The geographic spread — Rif Dimashq, Daraa, Hama, Raqqa, Latakia — in a single 24-hour window is atypical given the low baseline. The Al-Jarajir sequence, if corroborated, would indicate heightened border-security friction on the Syria-Lebanon line. The Daraa reporting, if confirmed, would represent a notable Israeli operational tempo in southern Syria. Neither thread is currently verifiable.

Watch for independent corroboration of the Al-Jarajir border killing and subsequent security sweep. Additional sourcing would indicate whether this is an isolated incident or part of a broader enforcement pattern on the Lebanon border strip. Monitor for follow-on reporting on the Daraa incursion claims; corroboration or denial from a second independent source would materially change the confidence picture. Track any further landmine or IED reports in Raqqa countryside as a potential indicator of ERW density in active transit zones.

Russian strikes on Black Sea port infrastructure and Ukrainian food-industry targets dominated the 24-hour period, with Odesa's Chornomorsk port disruption triggering a Maersk service suspension and an emergency UN session called by Kyiv.

Odesa (above baseline): Two corroborated port-sector strikes mark the most operationally significant cluster. Russian shelling of Chornomorsk Fishery Port (provisional, 3 sources) caused Maersk to temporarily suspend Ukraine port calls — the first confirmed commercial-carrier suspension in the current period. A separate partial-confidence report records Ukraine convening an emergency UN session, with Foreign Minister Sybiha accusing Russia of weaponizing grain shipments.

Zaporizhzhia (2× baseline): Two partial-confidence events. A drone strike on the "Olis" food-industry enterprise killed one and wounded three, igniting a roughly 1,000 m² warehouse fire; firefighting was constrained by re-strike threat. A second strike, single-sourced and provisional, targeted a warehouse GeoConfirmed-geolocated to coordinates consistent with a military logistics site in Zaporizhzhia city.

Dnipropetrovsk (2.5× baseline): A Russian attack on Pavlograd (provisional, 3 sources) killed 3 and wounded at least 19; a food-industry facility was damaged — mirroring the Zaporizhzhia targeting pattern.

Voronezh (10× baseline): Verified explosions near a Wildberries distribution warehouse in Voronezh, corroborated across 2 independent sources. Cause and attribution not confirmed in the source record.

Krasnodar (3.3× baseline): Provisional reporting of strikes on tankers carrying Kazakhstani oil near Novorossiysk; Ukraine's ambassador denied AFU responsibility. Attribution remains disputed and the sourcing is primarily political commentary.

The Chornomorsk strike and resultant Maersk suspension demonstrate direct coercive effect on Black Sea commercial shipping. The parallel targeting of food-processing infrastructure in Zaporizhzhia and Pavlograd, alongside the UN food-security framing by Kyiv, suggests a coordinated Ukrainian diplomatic response to an observable Russian targeting pattern against agri-industrial sites. The Voronezh warehouse explosion, the sole verified event, indicates continued deep-strike activity against Russian logistical infrastructure.

Watch for additional commercial shipping operators announcing service changes to Ukrainian Black Sea ports, which would indicate escalating disruption to grain export capacity. Monitor whether the Maersk suspension extends beyond temporary status or other carriers follow. Track any Ukrainian MoD or GUR acknowledgment of the Voronezh strike, which would clarify attribution. Any further drone strikes on food-industry or logistics nodes in Zaporizhzhia or Dnipropetrovsk would indicate a sustained targeting pattern rather than isolated incidents. Watch Novorossiysk tanker traffic reporting for clarification of the Kazakhstani oil strike attribution dispute.

Lithuania activated protective military deployments around critical infrastructure amid a cluster of unconfirmed, non-kinetic activity on the NATO eastern flank; no verified events were recorded for the period.

All three events in this period are single-sourced and unconfirmed; no verified or partial-confidence reporting exists for the NATO_FLANK theater this week, and no 7-day baseline is available for comparison.

The most operationally relevant unconfirmed item is Lithuania's precautionary deployment of military personnel to guard the Klaipėda LNG terminal and other critical infrastructure, following public warnings from President Nausėda and regional leaders about potential Russian provocations. No kinetic incident accompanied the deployment.

Separately, a NATO reconnaissance aircraft was reported — via a TASS-cited source attributed to EU air traffic control — to have conducted flight activity along Kaliningrad's borders with Poland and along its eastern and northern perimeters. No NATO airspace violation is described.

A third unconfirmed item involves a series of false bomb threats sent by email to businesses and emergency services in Vilnius and Kaunas on 17 July; Lithuanian police confirmed the warnings were false after investigation.

Taken together, even as unconfirmed events, the three incidents fit a pattern of low-level pressure on a critical chokepoint. The Klaipėda LNG terminal is a strategic energy node for the Baltic states. A precautionary military posture there — regardless of the trigger's confirmation status — signals elevated official concern about infrastructure vulnerability in the Suwalki corridor proximity.

Watch for any corroborating reporting on the Kaliningrad border flight activity from NATO or Lithuanian defense sources, which would indicate elevated ISR tempo around the exclave. Monitor Lithuanian government statements on the Klaipėda deployment's duration or scope changes, which would indicate an evolving threat assessment. Watch for additional false-alarm or disruption events targeting emergency services in Baltic capitals, which would indicate a sustained harassment campaign warranting formal attribution effort.

Two military aircraft incidents in Moscow Oblast — including a partially corroborated Su-57 crash — dominated the 24-hour period, alongside a provisional report of an attack on an energy facility in Ulyanovsk Oblast.

Moscow Oblast recorded two near-simultaneous aviation incidents within four minutes of each other, both in the western Moscow region. A verified event (corroborated across three independent sources) reports a military aircraft crash near Zvenigorod, with eyewitnesses describing pilot ejection prior to explosion; pilot survival remains unknown. A separate, partially corroborated report (two sources, no official acknowledgment) describes footage of a Su-57 crash in Odinovsky District. Whether these represent one incident or two distinct events is not yet established. Combined, this represents an elevated tempo against Moscow Oblast's 7-day baseline of 1.9 events/day, with potential qualitative significance given the aircraft type involved.

Ulyanovsk Oblast logged one partial-confidence report of an attack on a liquefied gas base operated by LLC "NS-Oil" in Novospasskoye — a 900% spike above its 7-day baseline of 0.1 events/day. No weapon type, actor, or casualty information is available; the report remains provisional.

A potential Su-57 loss — if the two Moscow Oblast reports describe separate incidents — would carry significant force-structure implications given the aircraft's advanced designation. Even as a single-incident reading, a fifth-generation fighter crash inside Moscow Oblast without official acknowledgment warrants close monitoring. The Ulyanovsk energy infrastructure report, though unverified in detail, fits a pattern of targeting fuel-logistics nodes deep inside Russian territory.

Watch for official Russian MoD acknowledgment or denial regarding the Moscow Oblast aviation incidents, which would indicate whether information suppression is in effect. Monitor for additional sourcing on the Ulyanovsk gas facility incident; corroboration would indicate an emerging pattern of energy-node targeting in the Volga region. Track whether the Su-57 aircraft type is confirmed or revised by subsequent reporting.

Houthi forces struck two Saudi oil tankers in the Red Sea off Al Hudaydah on July 22, with fires reported on both vessels and approximately 10 additional ships diverting routes — a significant spike against a low baseline.

Activity in the Red Sea off Al Hudaydah jumped to 2 events in the 24-hour period against a 7-day baseline of 0.3 events/day, a 567% increase. Both events are partial-confidence, corroborated across two sources each. Houthi spokesperson Brigadier General Yahya Saree claimed the group targeted the Saudi-linked tankers ENCELIA and LAYLA using a combined package of ballistic missiles, cruise missiles, and drones, framing the operation as an "encirclement against encirclement" campaign against Saudi Arabia. Fires were reported aboard both vessels. ISW-CTP separately confirmed initial tracking of the attack on both tankers but provided no additional detail on method or damage at time of reporting. The strikes prompted roughly 10 vessels to abandon their planned routes through the area.

The simultaneous targeting of two named tankers with a multi-vector strike package — ballistic missiles, cruise missiles, and drones — represents an escalation in both scale and claimed targeting logic compared to the recent baseline. The route disruption to approximately 10 additional vessels indicates a measurable commercial shipping impact beyond the two struck ships. The Houthis' explicit framing against Saudi Arabia, rather than Israel-linked shipping, signals a potential shift or expansion in declared targeting criteria.

Watch for independent vessel-tracking confirmation of fire or damage to ENCELIA and LAYLA, which would upgrade these events from partial to verified. Monitor Houthi official channels for follow-on strike announcements or further articulation of the "encirclement" campaign scope. Any Saudi government or shipping-industry response would indicate the diplomatic and commercial escalation trajectory. Watch for additional route-diversion reports from maritime traffic data as a measure of sustained disruption.

Activity in the Israel theater during this 24-hour period is minimal, with a single unconfirmed reported movement in Quneitra and no verified or partial-confidence events recorded.

The only event logged for this period is a single-sourced, unconfirmed report of an Israeli force entering the Mantra Dam area in the Quneitra countryside on 22 July. The Syrian Observatory for Human Rights (SOHR) characterized it as a new incursion and part of a pattern of violations; however, no kinetic engagement or casualties were reported. This represents an activity spike above the Quneitra baseline, which has no prior recorded events, though the report's unconfirmed status means it cannot be treated as established fact. No events were recorded in any other monitored sub-theater. The low-level Aqaba Governorate baseline (0.1 events/day) saw no activity this period.

If the Quneitra movement report is substantiated, it would represent continued Israeli ground presence in the Syrian buffer zone area, consistent with posture adjustments following the post-Assad transition. The absence of any kinetic activity or casualties limits immediate operational significance, but persistent incursion reporting in this corridor — even when unverified — warrants tracking given the area's historical sensitivity along the Golan frontier.

Watch for corroborating sourcing on the Mantra Dam movement, which would elevate it from unconfirmed to at least partial confidence and indicate an ongoing Israeli ground presence pattern in Quneitra. Monitor for any UNDOF or Syrian interim authority statements regarding the area, which would indicate escalating diplomatic visibility. A second movement event in the same corridor within 72 hours would indicate a deliberate operational tempo rather than an isolated incident.

A single unconfirmed report from Tanintharyi Region describes three aid workers killed during alleged regime clearance operations near the Dawei Special Economic Zone; no verified or partially corroborated events were recorded in the 24-hour period.

The 24-hour period produced one event against a baseline with no prior Tanintharyi Region data, making trend comparison impossible. The sole report — single-sourced and unconfirmed — alleges that three humanitarian aid workers were abducted, used as human shields by regime forces conducting clearance operations around the Dawei Special Economic Zone, and later found dead. No independent corroboration has been established. No verified or partial-confidence events were recorded for Myanmar during this period.

If corroborated, the deliberate use of aid workers as human shields during a security operation at an economically sensitive site would constitute a serious violation of international humanitarian law. The Dawei Special Economic Zone carries regional economic significance; sustained or escalating regime clearance activity in its vicinity could affect humanitarian access corridors and the operational posture of organizations working in Tanintharyi Region.

Watch for independent reporting from Tanintharyi Region that either corroborates or contradicts the aid worker incident near Dawei. Secondary confirmation from humanitarian organizations, local civil society networks, or additional media outlets would indicate the event warrants escalation in confidence. Monitor for any regime statements or troop movement reporting around the Dawei Special Economic Zone, which would indicate whether clearance operations are ongoing or concluded.

A mass Israeli ultranationalist incursion into the Al-Aqsa Mosque compound in East Jerusalem — led by senior government figures — drove a sharp spike in Jerusalem District activity, reaching 900% above the 7-day baseline.

Jerusalem District recorded one event against a baseline of 0.1 events/day. On 23 July at approximately 07:50 UTC, thousands of Israeli ultranationalists entered the Al-Aqsa Mosque compound in occupied East Jerusalem under heavy police escort. The incursion was led by National Security Minister Itamar Ben Gvir and Likud lawmaker Amit Halevi. The Palestinian Ministry of Endowments reported at least 2,300 Israelis had entered the courtyards by 10:00 local time. Israeli forces barred a number of Palestinians from pre-dawn prayers ahead of the entry. This event is rated partial — corroborated across two sources but not fully verified. No verified events were recorded in the period. Gaza Strip sub-districts (Gaza City, Khan Younis) and West Bank recorded no events above baseline.

The incursion involved active Israeli cabinet-level participation, elevating its political weight beyond routine compound access disputes. State-facilitated entry by senior officials during a restricted prayer period carries documented precedent for triggering broader protest or escalatory responses across Palestinian territories and among regional actors for whom Al-Aqsa holds high symbolic significance. The scale — over 2,300 entrants reported — is notable relative to prior episodes.

Watch for protest mobilization or clashes in East Jerusalem and the West Bank in the 24–48 hours following the incursion, which would indicate localized escalation. Monitor statements from Palestinian Authority, Hamas, and regional governments (Jordan holds custodianship over the compound) for formal condemnation or retaliatory framing. Any restriction on Palestinian access to the compound in subsequent days would indicate a sustained enforcement posture worth tracking.