The latest published intelligence briefing for each active theater, most active first. Every section links to the live theater view on the dashboard.

An unconfirmed but large-scale Ukrainian drone campaign struck deep inside Russia on 26–27 July 2026, with Udmurtia and Yaroslavl emerging as primary target areas alongside an attempted Moscow approach — all nine events in the period carry no verified or partial corroboration.

All activity this period is unconfirmed and single- or multi-sourced without independent corroboration. Udmurtia recorded four strike events — no baseline existed for this oblast. Reported targets include two Rosrezerv strategic reserve facilities: the FGKU "Prioritet" state oil depot in Borok (Kambarsky district) and the tank farm of FGUP "Gorizont" in Sarapul. The Udmurt governor described the attack as the most massive on the region in recent times; air defenses were reportedly active and no casualties were reported. Yaroslavl Oblast, also with no prior baseline, logged two events: a governor-confirmed UAV attack with road closures near Yaroslavl city, and a separate single-source report of strikes on oil infrastructure and an export terminal. Moscow saw one reported intercept — three UAVs reportedly destroyed before reaching the city, per Mayor Sobyanin — representing a 43% uptick against the 7-day baseline. An unspecified-location report claimed hundreds of drones were already launched as of 22:14 UTC on 26 July. A separate unconfirmed, undated pattern of strikes on Wildberries e-commerce warehouses at unspecified locations circulated on Russian social media but lacks location, date, or casualty data.

If corroborated, targeting of Rosrezerv strategic reserve infrastructure in Udmurtia would represent a notable shift toward disrupting Russia's state fuel and material stockpiles well behind the front. Yaroslavl's oil infrastructure sits on key logistics corridors. The geographic spread — Udmurtia, Yaroslavl, Moscow — suggests a coordinated multi-axis operation rather than opportunistic strikes.

Watch for official Russian damage assessments or satellite imagery confirming or denying fires at the Borok and Sarapul Rosrezerv sites, which would indicate whether strategic reserve infrastructure was successfully struck. Monitor Yaroslavl for reporting on the export terminal and oil facility referenced in single-source claims. Any additional sourcing on the Wildberries warehouse strikes would indicate whether that campaign represents a systematic pattern. Further UAV intercept announcements around Moscow would indicate sustained pressure on the capital air-defense envelope.

All eight events in the period are single-source and unconfirmed; no verified or partial-confidence reporting exists. The most operationally significant cluster is an apparent Israeli ground incursion into western Daraa, representing a sharp spike against a near-zero baseline.

Daraa registered five events against a 7-day baseline of 0.1/day — a near-complete departure from prior tempo. Four of those events center on western Daraa: two single-sourced, unconfirmed reports of Syrian armed force inspections of positions linked to Israeli activity, followed by an unconfirmed report of five Israeli military vehicles entering the area after residents reblocked a road despite warning leaflets, and a separate unconfirmed report of Israeli forces raiding and searching civilian homes in al-Ardah village with heavy gunfire. A fifth Daraa event — an unconfirmed armed clash in the eastern countryside during which a fuel shop burned — appears unrelated to the western incursion cluster. Homs produced two unconfirmed events: a sectarian killing (one woman dead, her son seriously injured) in the city, and three children injured by a cluster munition remnant in the countryside. Idlib recorded one unconfirmed event: a civilian killed by a legacy landmine in the eastern countryside. All eight events are single-sourced and unverified.

If corroborated, the western Daraa cluster would indicate a shift from Israeli standoff or aerial operations toward direct ground-force presence in southern Syria — a posture change with implications for the Syrian transitional government's authority in the border zone. The two UXO/ERW casualties across Homs and Idlib are consistent with chronic legacy contamination but carry no immediate escalation signal.

Watch for independent corroboration of the western Daraa ground incursion reports; corroboration would indicate a sustained Israeli ground posture rather than a transient patrol. Monitor Syrian government and Israeli official channels for any acknowledgment or denial. Watch for follow-on kinetic reporting from al-Ardah and the western Daraa countryside, which would indicate escalating friction. In Homs city, watch for additional sectarian incident reports, which would indicate a pattern rather than an isolated event.

All seven events logged across Myanmar in the 24-hour period are single-source and unconfirmed; no verified or partial-confidence reporting is available, but the geographic spread — Rakhine, Kayin, Naypyitaw, Sagaing, and Magwe/Magway — warrants monitoring as a potential indicator of broadening resistance activity.

Activity spiked across regions with little or no 7-day baseline. Rakhine State recorded one event against a baseline of 0.1/day (+900%); Kayin, Naypyitaw, Sagaing, Magwe, and Magway had no prior baseline at all.

All claims below are single-sourced and unverified. Reported events include: approximately a dozen airstrikes on civilian areas in Ponnagyun and Thandwe townships — including the Ngapali resort area — in Rakhine State; a car bomb or IED in Myawaddy, Kayin State, killing eight Karen National Army members; two overlapping reports of a PDF assault on the Shwepan police station and checkpoint on the northwestern approaches to Naypyitaw, with nine junta personnel reportedly killed; shelling of Mone Hla village in Sagaing Region that killed one civilian with no active combat reported nearby; junta forces burning Pakhannge Village in Chauk Township, Magwe Region; and a PDF attack on a highway checkpoint in Myothit Township, Magway Region, reportedly killing nine regime troops.

If corroborated, the Naypyitaw-area clash would represent a notable resistance probe against a security node guarding the administrative capital. The Rakhine airstrike cluster, including a tourist area, and the Sagaing civilian shelling, if confirmed, would extend a pattern of strikes on non-combatant areas. The Myawaddy IED introduces a distinct threat modality targeting armed non-state actors within contested urban space.

Watch for independent corroboration of the Naypyitaw-area clashes, which would indicate whether resistance forces have sustained capability to threaten capital-perimeter security nodes. Monitor Rakhine State for follow-on strike reporting or displacement indicators from Thandwe and Ponnagyun. A second IED incident in Myawaddy would indicate an escalating sabotage campaign against KNA-affiliated forces. Any confirmed reporting on Pakhannge Village would help assess the scale of junta scorched-earth operations in Magwe.

All seven events in the period are single-sourced and unconfirmed; no verified or partial-confidence reporting exists. Provisional SAF claims describe a broad offensive push along the Khartoum–El Obeid axis, with unverified assertions of road control, town captures, and RSF atrocities in North Kordofan.

The 24-hour period produced no baseline comparison for Sudan's interior theaters, making frequency assessment impossible. Against that context, seven unconfirmed events cluster across North Kordofan, Khartoum State, and South Kordofan — all single-sourced with no independent corroboration.

SAF-attributed claims (all provisional) describe: seizure of the ~350 km Omdurman–El Obeid road following two days of clashes with RSF forces; separate but overlapping claims of control over the Al Sadarat highway linking Khartoum to El Obeid; recapture of Um Qurfa and Jariqa areas in Omdurman al-Abyad, with SAF Deputy Commander Yasir al-Atta announcing an ordered advance toward Um Dafuq; and unspecified town captures in North Kordofan. A single-sourced report from South Kordofan cites a friendly fire incident involving Joint Forces Brigadier Abdulaziz Ismail and claims destruction of RSF-affiliated Arab fighter vehicles. A separate unconfirmed report alleges RSF forces looted and militarized Jabrat al-Sheikh hospital in North Kordofan prior to SAF advances in the area.

If even partially accurate, SAF control of the Khartoum–El Obeid road axis would represent a significant logistical shift, cutting a primary RSF movement corridor and resupply route toward El Obeid. The hospital militarization allegation, if corroborated, would constitute a serious IHL violation. Both dimensions warrant close sourcing scrutiny.

Watch for independent visual or satellite confirmation of SAF positions along the Al Sadarat and Omdurman–El Obeid corridors, which would indicate the road-control claims have operational substance. Monitor for RSF counter-movement reporting from North Kordofan, which would indicate a contested rather than consolidated SAF gain. Any corroborating medical or humanitarian source reporting on Jabrat al-Sheikh would indicate the IHL allegation warrants escalation. The volume of unconfirmed single-source claims in this period should itself be treated as a signal to watch — coordinated information operations cannot be excluded.

The 24-hour period saw low overall event volume, with notable spikes in Mykolaiv and Rostov above baseline and a significant dip in Zaporizhzhia activity; the most operationally significant strikes targeted port infrastructure in Mykolaiv and a residential area in Zaporizhzhia city.

Mykolaiv recorded one strike event against port infrastructure (provisional, three sources), above its 7-day baseline of 0.3 events/day — a 233% increase. Russian forces damaged three civilian vessels and injured one person. This marks a shift toward maritime economic infrastructure targeting in the region.

Zaporizhzhia logged one strike (provisional, two sources): a Russian guided aerial bomb hit a private house in Zaporizhzhia city, killing one 67-year-old man and wounding two others. The local military administration flagged possible additional casualties beneath rubble. This is below the oblast's 7-day baseline of 1.7 events/day, suggesting a tempo reduction, though the single confirmed strike carried significant civilian impact.

Rostov recorded one verified strike event (nine sources) near the end of the period. Details on actor, target, and weapon type remain absent; the event is confirmed but operationally opaque.

Belgorod recorded one verified strike (six sources), reported by local residents with no additional detail on nature, casualties, or specific location.

The Mykolaiv port strike, if confirmed at higher confidence, would represent deliberate pressure on Black Sea-adjacent logistics and civilian maritime assets — a target set with potential export and supply-chain implications. The Zaporizhzhia residential strike underscores continued exposure of urban civilian areas to guided munitions. The information vacuum around Rostov and Belgorod events limits assessment but indicates cross-border activity remains active.

Watch for follow-up reporting from Mykolaiv port authorities or maritime tracking sources that would indicate the scale of damage to vessel operations. Monitor Zaporizhzhia city for casualty updates as rubble clearance continues, which would indicate whether the death toll rises. The absence of detail on the Rostov strike warrants close tracking — any attribution or target characterization would indicate the nature of cross-border activity. Continued Belgorod reporting would indicate whether that strike is part of a sustained pattern or an isolated incident.

All four events recorded in this period are single-source and unconfirmed; no verified or partial-confidence reporting exists for the 24-hour window, requiring the following to be treated as provisional watch items only.

Against a quiet 7-day baseline (Saada: 0.1 events/day; Bab-el-Mandeb: 0.3 events/day; Al Jawf: no prior baseline), four unconfirmed incidents were logged — a marked nominal spike that cannot be assessed for operational significance without corroboration.

Unconfirmed Houthi claims include two separate drone-shootdown assertions: one over Al-Jawf province, purportedly targeting a Bayraktar Akıncı attributed to Saudi forces, accompanied by wreckage imagery (single-sourced, unverified); and one over northwestern Saada, with no location or method detail provided. A third single-source claim, also from Saada, cites footage published by Tasnim News of an alleged drone intercept but provides no verifiable location or casualty data. At Bab al-Mandeb, Al-Mayadeen — citing an unnamed source — reported strikes on three Saudi oil tankers within a 48-hour window and claimed 16 Saudi vessels were turned back under an ongoing blockade; this claim is unverified and single-sourced.

If any portion of the Bab al-Mandeb reporting is substantiated, it would represent a significant escalation in Houthi interdiction of Saudi-flagged commercial traffic along a globally critical chokepoint. The drone-intercept claims, if corroborated, would indicate an active Saudi ISR presence over Saada and Al Jawf. Neither conclusion is supportable at current confidence levels.

Watch for independent corroboration of the Bab al-Mandeb tanker-strike and blockade claims, which would indicate an active Houthi interdiction campaign against Saudi shipping. Monitor for satellite or maritime-tracking data consistent with vessel diversions or damage reports. Additional drone-intercept claims from Saada or Al Jawf, if corroborated, would indicate sustained Saudi aerial reconnaissance over northern Yemen. Any upgrade of these events from unconfirmed to partial or verified status should be treated as the primary analytical trigger for reassessment.

All three events in the Israel theater for this 24-hour period are unconfirmed and single-sourced; no verified or partial-confidence activity was recorded, but the pattern of reported Israeli operations in southern Syria and a drone intercept near Navatim warrants continued monitoring.

The 7-day baseline recorded no prior events in Quneitra or the Southern District. Against that baseline, three unconfirmed incidents emerged. In Quneitra, SOHR — single-sourced and unverified — reported Israeli artillery fire on the village of Tarnaja and separately described ongoing Israeli raids across southern Syria, citing 435 reported incursions into Syrian territory since January 2026, with 51 in July alone. In the Southern District, Israeli media — single-sourced and unverified — reported two drones intercepted near the Jordan border around the time Prime Minister Netanyahu's aircraft departed Navatim Air Base. No casualties or damage were reported in any of the three accounts.

If the SOHR figures are even partially accurate, the reported operational tempo in southern Syria — 51 incursions in a single month — would represent a sustained, escalating Israeli ground presence beyond the occupied Golan, with implications for UNDOF's monitoring capacity and Syrian civilian populations in Quneitra. The reported drone intercept near Navatim, proximate to a senior leadership movement, would, if confirmed, suggest adversaries retain the intent and some capability to target high-value Israeli assets or signal awareness of leadership travel patterns.

Watch for corroborating sources on the Navatim drone intercept — confirmation would indicate an adversary with real-time or near-real-time awareness of Israeli leadership movements. Monitor UNDOF reporting and Syrian state media for any acknowledgment of the Tarnaja artillery strike or Israeli ground activity in Quneitra; absence of official denial or confirmation from multiple sources would keep both items provisional. Watch for any escalation in drone or rocket activity along the Jordan–Israel border corridor.

Two provisional events mark the 24-hour period: a reported drone strike on a US base in Erbil and an Israeli ground incursion in Quneitra — both partial-confidence — with activity levels above baseline in both locations.

Activity in the Kurdistan Region of Iraq and in Quneitra both ran above their 7-day baselines (up ~67% and ~233%, respectively). Arabic-language sources cited by Tasnim News — assessed as partial confidence — report a drone attack targeting a US military installation in Erbil late on 26 July; no casualty or damage figures are available. Separately, Israeli forces conducted a ground incursion into the middle Quneitra countryside on the afternoon of 26 July, during which one individual was detained; this event is also rated partial confidence, drawn from three sources. No verified events were recorded in the period. Locations that have historically registered elevated activity — Hormozgan Province, the Red Sea off Al Hudaydah, Bahrain — produced no events in this window.

If the Erbil drone strike is confirmed, it would represent continued pressure on US forward positions in Iraqi Kurdistan, a pattern associated with Iran-aligned militant groups. The Quneitra incursion indicates Israeli ground operations extending into Syrian border areas, with detention activity suggesting intelligence-gathering intent. The quiet across maritime and Gulf locations contrasts with their baseline rates and may reflect operational pause or reporting gaps.

Watch for corroborating reporting on the Erbil strike — confirmation of responsible party or damage assessment would indicate escalation posture toward US forces in Iraq. Monitor Quneitra for follow-on Israeli ground activity or retaliatory movement, which would indicate a broadening operational footprint. Track whether Hormozgan Province and Red Sea activity resumes toward baseline; a continued absence would warrant reassessment of reporting coverage.

Lithuania has deployed military forces to guard the Klaipėda LNG terminal and other critical infrastructure amid heightened warnings of potential Russian provocations — both events driving this assessment are single-sourced and unconfirmed.

No verified or partial-confidence events were recorded in the NATO_FLANK theater during this period, and no 7-day baseline exists for comparison. Activity is limited to two unconfirmed, single-source reports from 2026-07-21. First, Lithuanian military forces were reportedly positioned at the Klaipėda LNG terminal and other critical infrastructure sites as a precautionary measure, following public warnings from President Nausėda and other regional leaders about possible Russian provocations; no kinetic incident is described. Second, a NATO reconnaissance aircraft was reported by TASS — citing an unnamed EU air traffic control source — to have conducted a flight along Kaliningrad's borders with Poland, then its eastern and northern borders; no airspace violation is described.

Taken together — and with the explicit caveat that both reports are unconfirmed and single-sourced — the events suggest an elevated precautionary posture along the Kaliningrad corridor and in Lithuania. The Klaipėda LNG terminal is a critical energy node for Baltic energy independence; any disruption would carry regional supply implications. The reported reconnaissance flight, if accurate, is consistent with routine NATO situational-awareness activity around Kaliningrad but has not been corroborated independently.

Watch for official Lithuanian or NATO confirmation or denial of the Klaipėda force-protection deployment, which would indicate the degree to which the precautionary posture is being formalized. Monitor Baltic defense ministry statements for any escalation in threat-level language. Any corroboration of the Kaliningrad border flight from non-TASS sources would indicate heightened mutual surveillance activity in the corridor. Watch for additional critical-infrastructure protection announcements from Estonia or Latvia, which would indicate a broader regional coordination response.

A settler incursion into the village of Tell left six dead, including four Palestinians, and triggered an IDF announcement of a large-scale anti-terror operation in Nablus — a 186% spike above the 7-day baseline for the sub-district.

Both events are partial-confidence, corroborated across two sources each. Against a 7-day baseline of 0.7 events/day for West Bank — Nablus, the period recorded 2 events — a 186% above-baseline surge concentrated within a two-hour window.

At 14:38 UTC, a group of settlers entered the Palestinian village of Tell in Areas A and B. The incident, characterized by Israeli rights organization Yesh Din as a deliberate provocation framed as a "hike," resulted in six deaths, including four Palestinians and two Israelis (partial, 2 sources).

At 16:25 UTC, an IDF spokesman announced the launch of a large-scale anti-terror operation in Nablus and adjacent security zones, citing the killing of two Israelis as the trigger. The IDF indicated the operation is being prepared for expansion (partial, 2 sources).

The sequence — a lethal settler incursion followed within two hours by an announced IDF operation framed as counter-terror — marks a significant escalation in the Nablus sub-district. Area A designations carry Palestinian Authority civil and security jurisdiction under Oslo frameworks; settler entry resulting in fatalities in that zone raises the operational and political stakes beyond a routine friction event. An expanding IDF operation in an urban sub-district historically generates secondary displacement, access restrictions, and further confrontation.

Watch for official confirmation of IDF operational boundaries and troop composition in Nablus, which would indicate the scale of the planned expansion. Monitor Palestinian Authority and armed faction statements for indications of coordinated response. Watch for access or checkpoint changes along routes into Nablus city that would indicate a tightening cordon. Any further settler movement in Tell or adjacent villages in the coming hours would indicate elevated friction risk beyond the declared operation area.