The latest published intelligence briefing for each active theater, most active first. Every section links to the live theater view on the dashboard.

CENTCOM conducted its 13th consecutive night of strikes on Iranian territory, hitting targets across Khuzestan and Hormozgan Provinces, while Iranian-attributed missile and drone salvos struck Kuwait and a verified strike destroyed infrastructure in Bahrain.

The dominant shift is the continuation and geographic expansion of U.S. strikes on Iran. Provisional reporting places explosions in Ahvaz (Khuzestan Province) and on Qeshm Island's southern coast (Hormozgan Province), both attributed by Iranian state-affiliated sources to U.S. missiles. A separate provisional event notes CENTCOM's formal announcement of the 13th strike round. Hormozgan activity (1 event vs. 2.3/day baseline) is down in volume but concentrated; Khuzestan is modestly elevated (+43% vs. baseline).

Three areas spiked well above baseline. Erbil International Airport recorded columns of smoke in provisional reporting sourced from Iranian state-affiliated Tasnim News — cause and actor unattributed. Khorramabad (Lorestan Province) sustained a confirmed projectile strike per the regional security deputy, with assessment teams dispatched. Both locations are at 900% above their 7-day averages.

In Kuwait, the army publicly confirmed active air-defense interceptions of Iranian-attributed missiles and drones — down slightly in raw event count from baseline but operationally significant given the official acknowledgment.

The sole verified event: Tasnim News published satellite imagery purporting to show destruction of Amazon server infrastructure in Bahrain, attributed to a penetrating warhead strike. No actor is named in the post.

An Iranian oil tanker entered the Sea of Oman in apparent disregard of an alleged U.S. naval blockade — provisional, no kinetic engagement reported. In South Lebanon, Israeli forces conducted a destruction operation in Kafr Tabnit. In the Red Sea, Houthi forces struck a Saudi vessel, drawing a formal condemnation from Qatar.

Thirteen consecutive nights of U.S. strikes indicate a sustained operational tempo rather than episodic escalation. The spread to Lorestan Province and Erbil International Airport — if corroborated — suggests either expanding target sets or a broadening of the conflict's geographic footprint into Iraqi Kurdistan. Kuwait's public acknowledgment of active interceptions marks a shift from passive monitoring to declared defensive engagement. The Bahrain infrastructure strike, the period's only verified event, signals targeting of civilian digital infrastructure with a specialized warhead.

Watch for official CENTCOM statements on the Erbil airport smoke reports, which would indicate whether the strike originated from U.S. or other actors. Monitor Lorestan Province for follow-on damage assessments, which would clarify target type and attacker. Sustained Kuwaiti air-defense activations at or above current tempo would indicate Iranian willingness to absorb regional escalation. Any Iranian tanker interdiction in the Sea of Oman would indicate active enforcement of the alleged blockade. Track Bahrain for attribution claims on the infrastructure strike, which would indicate broader targeting doctrine shifts.

A coordinated drone and missile strike campaign struck St. Petersburg, Leningrad Oblast, and Kirov during the overnight period, with the Avitek defense plant in Kirov the most significant confirmed target.

St. Petersburg / Leningrad Oblast saw a sharp spike from a 0.3–0.1 events/day baseline to four reported incidents. A UAV strike on a Wildberries warehouse in Novosaratovka, Vsevolozhsk District (Leningrad Oblast) is corroborated by the regional governor's acknowledgment of downed UAVs and ASTRA's geolocated footage — rated partial. Two fires at separate St. Petersburg warehouse complexes are verified across two sources each; weapon type and causation remain unconfirmed for both. An earlier alert reporting St. Petersburg under attack is single-sourced and provisional, with no target or weapon details.

Kirov spiked from 0.3 to 2 events. A Flamingo rocket strike on the Avitek plant — a known aerospace/defense manufacturer — is verified across six independent sources. A second confirmed strike geolocated a building impact approximately 850 metres from a point-of-view capture position, also in Kirov, verified across three sources.

Moscow dropped to one event against a 2.0/day baseline. FSB authorities reported detaining a woman allegedly attempting to place an explosive under a security official's vehicle; the narrative of Ukrainian sabotage training is provisional and sourced to Russian state claims only.

The Avitek plant strike is operationally significant: targeting defense-sector production infrastructure inside Russia at this depth signals an elevated reach. The clustering of St. Petersburg and Leningrad Oblast warehouse strikes in a narrow three-hour window suggests a multi-vector drone raid rather than isolated incidents. The Moscow FSB case, if partially accurate, indicates continued covert sabotage activity inside Russian territory.

Watch for: damage assessment reporting from Kirov that would indicate Avitek production disruption; Russian MoD or governor acknowledgments in St. Petersburg that would clarify weapon type and confirm attack attribution; additional UAV activity along the St. Petersburg–Leningrad corridor that would indicate a sustained campaign against logistics infrastructure; and any follow-on FSB announcements regarding the Moscow detention that would indicate broader counterintelligence operations.

All seven events logged for Syria in the 24-hour period are single-source and unconfirmed; no verified or partial-confidence reporting exists for this window. The unconfirmed picture shows a notable and baseline-breaking concentration of activity in Daraa governorate.

Daraa recorded four unconfirmed incidents against a prior baseline of effectively zero, representing the sharpest geographic shift in the period. These include: tribal clashes in Tafas (two killed, three wounded, per SOHR); an attack on a security building in Daraa city apparently aimed at freeing detainees (four security personnel injured); a shooting targeting two former members of the "Mohsen Al-Hammad" group in the Daraa countryside (two killed, perpetrators unidentified); and an unconfirmed Israeli ground incursion into the western Daraa countryside, during which a barrier was installed for roughly 90 minutes before withdrawal (described by SOHR as a "new" incursion). In Rif Dimashq, a hand grenade explosion killed one and seriously wounded another; no actor was identified. An unconfirmed report of a missile strike on Moafaq al-Sulti air base in Jordan appeared but carried no actor attribution, casualty data, or corroboration. Separately, SOHR reported ten civilians, including children, killed or wounded by landmine explosions across three unspecified Syrian provinces within a 24-hour span.

The clustering of unconfirmed security incidents in Daraa — spanning tribal violence, an anti-detention raid, targeted killings, and a reported foreign military incursion — suggests compounding instability in a single governorate that had no established event baseline. The Jordanian air base report, if substantiated, would mark a significant regional escalation. The landmine casualties, while geographically unspecified, underscore persistent legacy explosive hazards affecting civilians.

Watch for corroborating sources on the Moafaq al-Sulti air base report; any confirmation would indicate a significant escalation with cross-border implications. Monitor whether the Israeli incursion into western Daraa generates follow-on reporting or a pattern of recurrence. Continued unattributed armed incidents in Daraa city and countryside would indicate sustained breakdown of local security arrangements. Track SOHR and local Syrian networks for province-level identification of the landmine casualties, which would indicate geographic spread of the hazard.

All six events covering the 24-hour period are unconfirmed and single-sourced; no verified or partial-confidence reporting exists for this cycle. The period nonetheless shows a notable geographic spread of Houthi internal-security activity across Ibb, Taiz, Al Jawf, and Al Bayda, alongside a single-sourced claim of Iranian IRGC resupply.

The 7-day baseline recorded activity only in Bab-el-Mandeb (0.3 events/day). This period produced unconfirmed reporting across five governorates with no prior baseline presence — Ibb, Taiz, Al Jawf, Al Bayda, and Sanaa — representing a geographic shift rather than a single-front escalation.

Two single-sourced, unconfirmed reports from Ibb (al-Shi'r/al-Amluk district, Rouhan village) appear to describe the same incident: a civilian detonating gas cylinders to resist a Houthi arrest operation, causing Houthi casualties, before being killed while fleeing. The overlap suggests duplicate sourcing of one event rather than two separate clashes.

In Taiz (Damna Khedir district), an unconfirmed report describes a child killed by stray fire during Houthi live-fire maneuvers, with Houthi elements allegedly detaining residents afterward to suppress information.

In Al Bayda (al-Zaher district), an unconfirmed landmine detonation attributed to Houthi forces killed two children and wounded a third.

In Al Jawf (Rayan area), unconfirmed reporting describes tribal armed gatherings under a "dignity uprising" banner, with Houthi forces mobilizing and clashing near gathering sites over approximately one month.

A single-sourced Reuters-cited claim reports Iranian IRGC commanders and missile-related equipment delivered to Houthi forces in Sanaa during July 2026.

If corroborated, the Ibb resistance incident would illustrate armed civilian pushback against Houthi enforcement operations in a non-frontline governorate. The Al Jawf tribal mobilization, if sustained, would represent internal pressure on Houthi territorial control in a historically contested area. The Iranian resupply claim, if verified, would indicate continued material replenishment despite ongoing regional pressure.

Watch for independent corroboration of the Ibb incident to determine whether it reflects an isolated case or a pattern of resistance to Houthi arrest operations. Monitor Al Jawf for reports of expanded Houthi security deployments, which would indicate escalating attempts to suppress tribal mobilization. Track any further sourcing on the IRGC resupply claim; corroboration would indicate active Iranian logistical engagement during this period. Watch for civilian casualty reports from al-Zaher district (Al Bayda) that would suggest additional landmine incidents on the same road network.

All five events in the 2026-07-23 to 2026-07-24 window are single-source and unconfirmed; no verified or partial-confidence reporting exists for this period. The provisional picture shows civilian harm from drone strikes across multiple Sudanese states and a spike in Red Sea maritime activity.

Against a baseline that recorded no prior activity in Blue Nile, Khartoum State, or Northern State, this period produced unconfirmed reporting across all three. Two single-sourced, unverified reports describe drone strikes in Blue Nile — one attributed to the SAF, the other unattributed — with civilian and child casualties claimed. A third unconfirmed report places drone strikes in Northern State, with combined SAF and RSF attribution and more than twenty civilians reportedly killed or wounded near the northern border. In Khartoum State, a single-source report describes a security forces raid on a human trafficking network, with 74 foreign hostages allegedly freed and Starlink devices seized. In the Red Sea off Al Hudaydah — where the 7-day baseline sits at 0.4 events/day — one unconfirmed Houthi claim of attacks on two Saudi oil tankers represents a 150% spike; one vessel was reportedly ablaze per a Saudi news outlet.

If the Blue Nile and Northern State strike reports are corroborated, they would indicate an expansion of drone warfare into civilian displacement zones on two separate axes simultaneously. The Khartoum raid's reported seizure of Starlink devices, if verified, would suggest non-state armed networks have acquired satellite communications infrastructure. The Red Sea tanker incident, even unverified, fits an established Houthi interdiction pattern and warrants tracking given maritime shipping exposure.

Watch for independent corroboration of the Blue Nile drone strikes from humanitarian organizations or additional media. Confirmation would indicate a pattern of SAF strikes on displaced-civilian concentrations. Monitor Northern State border reporting for any second-source verification of dual SAF/RSF strikes. In the Red Sea, watch vessel-tracking services and maritime insurers for responses to the tanker incident, which would indicate operational impact assessment. Watch for any official SAF or RSF statements on Blue Nile and Northern State activity.

Russia conducted a multi-axis strike campaign on 23–24 July, with a verified coordinated port attack across Odesa, Izmail, and Mykolaiv standing as the period's most operationally significant event, alongside provisional reports of strikes on Slavyansk, Kyiv, Izyum, and Simferopol.

The most notable development is a verified, corroborated strike on three Ukrainian ports simultaneously: fuel storage at Odesa Sea Trade Port, drone-related infrastructure at Izmail (including warehouses storing Magura USVs and a facility for autonomous underwater vehicles), and a vessel carrying military cargo at Mykolaiv — a coordinated effort targeting naval and logistics capacity. Activity in Crimea spiked 233% above the 7-day baseline, driven by a partially corroborated strike on a logistics hub in Simferopol. Donetsk and Kyiv each logged one event, both up approximately 67% vs. baseline: provisional reporting describes an air-bomb strike on Slavyansk killing 5 and wounding 9, with damage to a Latvian consulate; and a missile strike on Kyiv confirmed by Ukrainian Air Forces but with limited damage detail. In Kharkiv, three guided bombs struck Nova Poshta warehouses in Izyum (partial, two sources), causing infrastructure damage and a partial power outage but no reported casualties. Odesa activity fell 41% below its 7-day baseline in event count, though the port strike alone represents a qualitative escalation regardless of frequency.

The simultaneous targeting of three port facilities — particularly the destruction of Magura USV storage and underwater vehicle infrastructure at Izmail — suggests a deliberate effort to degrade Ukraine's naval drone capability ahead of or in response to maritime operations. Striking a dry-cargo vessel unloading military cargo at Mykolaiv indicates interdiction of the military supply chain at the point of entry.

Watch for Ukrainian damage assessments from Odesa, Izmail, and Mykolaiv ports, which would indicate actual degradation of naval drone stocks. Monitor Slavyansk casualty updates, as current figures are provisional. Renewed strike activity against Kyiv infrastructure would indicate sustained strategic pressure. Observe Simferopol for follow-on reporting that could upgrade the logistics-hub strike from partial to verified.

Lithuania activated precautionary infrastructure protection measures during the period amid a cluster of unconfirmed, low-level incidents — no verified events were recorded and no kinetic activity occurred.

No verified or partial-confidence events were recorded for the NATO_FLANK theater this period, and no baseline exists for comparison. All three events are single-sourced and unconfirmed.

The most operationally notable development is Lithuania's military deployment to guard the Klaipėda LNG terminal and other critical infrastructure, described as a precautionary response to warnings from President Nausėda and other regional leaders about potential Russian provocations — no incident triggered the deployment. Separately, false bomb threats emailed to businesses and emergency services in Vilnius and Kaunas prompted evacuations on 17 July; Lithuanian police confirmed the warnings were fabricated after investigation. A third unconfirmed report, attributed to a single TASS-cited source in EU air traffic control services, describes a NATO reconnaissance aircraft flying along Kaliningrad's borders with Poland, then its eastern and northern borders on 21 July — no NATO airspace violation is alleged.

The convergence of infrastructure-protection posturing, a coordinated false-alarm campaign, and heightened border surveillance activity — even if each item remains unconfirmed — reflects an elevated threat perception among Lithuanian authorities. The Klaipėda LNG terminal is a critical Baltic energy node; precautionary military presence there signals that officials assess the facility as a plausible target for below-threshold interference. False bomb threats against civilian infrastructure are a recognized gray-zone harassment tactic.

Watch for Lithuanian authorities upgrading precautionary deployments to named threat-response postures, which would indicate a shift from precaution to credible warning. Monitor for additional false-alarm or disruption incidents in Baltic capitals, which would suggest a sustained harassment pattern. Track official NATO or Lithuanian MoD statements on the Kaliningrad reconnaissance activity for corroboration or denial. Any kinetic or confirmed interference event at Klaipėda or comparable infrastructure would represent a significant escalation from the current baseline of zero verified incidents.

Two separate armed clashes in Nablus and Jenin mark a sharp spike above baseline activity in the northern West Bank, with one Israeli settler reported killed in Nablus in a provisional account.

Activity in West Bank — Nablus and West Bank — Jenin each registered one event over the 24-hour period, representing a roughly 900% increase over the 7-day baseline of 0.1 events/day in each area. Both events are rated partial, corroborated across two sources each, and treated as provisional.

In Nablus, an Israeli individual identified as "Baniaho Milat" — described as a member of an emergency unit, head of an agricultural department, and a founder of the "Gilaad" settlement — was reportedly killed in an attack. Identity confirmation is reported but the event remains partial; no confirmed account of perpetrators, weapons, or full circumstances is available.

In Jenin, Israeli media reportedly referenced an unspecified "anti-Zionist operation." No details on actors, casualties, methods, or scope have been confirmed. This event is single-account in substance despite two sources and provides no actionable operational detail beyond the fact of a reported incident.

Simultaneous elevated activity in both Nablus and Jenin within the same 24-hour window is atypical against recent baseline levels. The reported killing of a settler with institutional roles in Nablus, if confirmed, would represent a higher-profile targeting than typical friction incidents. Coordinated or concurrent operations in two northern West Bank nodes would indicate a broadened operational tempo in that corridor.

Watch for Israeli security force activity in Nablus and Jenin, including raid operations or closures, which would indicate a response posture. Monitor for Palestinian militant claims of responsibility in either location. Any corroboration upgrading either partial event to verified status should be treated as a key indicator for assessing scale and actor attribution.

A single-sourced, unconfirmed report claims Mossad disrupted an Iranian-linked cell allegedly smuggled into Israel to assassinate senior officials; no verified events were recorded in the period.

The 24-hour period produced no verified or partial-confidence events for the Israel theater. Against a near-zero baseline (0.1 events/day in adjacent Aqaba Governorate, Jordan, and no established Israel baseline), one unconfirmed movement event was logged. Israeli media, citing Mossad, reported that an Iranian-directed operational cell intended to target senior Israeli officials was intercepted before becoming active, with the disruption attributed to multi-service foreign intelligence cooperation. This report is single-sourced and unverified and is treated here as a watch item only.

If corroborated, the claim would indicate an Iranian willingness to conduct lethal operations inside Israeli territory targeting government-level figures — a significant escalatory threshold. The alleged multi-service interdiction, if confirmed, would also suggest active intelligence-sharing among partners specifically focused on Iranian human-intelligence penetration routes into Israel. Neither conclusion can be drawn from the current single-source reporting.

Watch for corroborating statements from Israeli government officials or foreign intelligence partners, which would indicate the Mossad claim has cross-source support. Monitor Iranian state media for denial or counter-narrative, which would indicate acknowledgment of exposure. Watch for any Israeli security posture changes — heightened protection details, travel restrictions on officials, or border procedure announcements — which would indicate operational concern beyond public messaging. Any named arrests or judicial proceedings would indicate the cell interdiction has moved from intelligence to law-enforcement phase.

A single unconfirmed report describes a Myanmar regime airstrike on Ngapali beach resort in Rakhine State, injuring at least seven civilians — no verified or partial-confidence events were recorded in the period.

There is no 7-day baseline for any Myanmar theater zone, making trend comparison impossible. The sole event in the period is a single-sourced, unverified report of airstrikes striking Ngapali beach resort in Thandwe Township, Rakhine State, on 24 July at approximately 08:24 UTC. The reported casualties include seven injured, among them a child and a monk. Because this event carries an unconfirmed confidence rating, it is treated here as a watch item only and not as an established fact.

If corroborated, a strike on Ngapali — a civilian coastal resort area in Thandwe Township — would represent regime air activity in a location not typically associated with frontline Arakan Army operations. Strikes injuring monks carry particular social sensitivity in Myanmar's Buddhist-majority context. No verified data from this period allows broader pattern assessment.

Watch for independent corroboration of the reported Ngapali strike from local civil society networks, rescue teams, or satellite imagery, which would indicate whether the event occurred and clarify the scale of damage. Monitor for any Arakan Army or regime official statements regarding Thandwe Township activity. A second reported strike in coastal Rakhine within this window would indicate a shift in the geographic focus of regime air operations worth further assessment.