The latest published intelligence briefing for each active theater, most active first. Every section links to the live theater view on the dashboard.

All 13 events in this period are single-source and unconfirmed; no verified or partial-confidence reporting exists. The most significant unconfirmed pattern is a cluster of three Israeli ground and fire actions in western Daraa — a sharp departure from baseline.

Daraa recorded three unconfirmed events against a 7-day baseline of 0.1/day — a 2900% spike. All three are single-sourced and unverified, describing Israeli shelling and ground infiltration near Ma'ariya and Jumla in the Yarmouk Basin. No prior-period Israeli ground activity in Daraa appears in the baseline, making this cluster the sharpest observed shift.

Deir ez-Zor saw two unconfirmed IED strikes on Internal Security Forces, both claimed by ISIS, injuring at least six personnel. No fatalities were specified. These appear in a governorate with no prior baseline, but ISIS IED activity in Deir ez-Zor is a known recurring pattern; the clustering within two hours is notable.

In Al-Hasakah, a single unconfirmed report describes Turkish forces reinforcing positions at Ras al-Ayn rather than withdrawing, while reducing co-located Syrian faction numbers — a posture shift if confirmed.

Remaining unconfirmed single-source events span Aleppo (mine death during demining; armed attack on a civilian home), Latakia (mine casualty during clearance), Homs (two unexplained explosions), Hama (armed alert near al-Suqaylabiyah), Rif Dimashq (tribal clash fatality), and Raqqa (child injured by landmine).

The unconfirmed Daraa cluster, if substantiated, would represent a qualitative escalation — Israeli ground infiltration inside Syrian territory beyond the buffer zone. The ISIS IED tempo in Deir ez-Zor targeting security forces signals continued pressure on Internal Security Forces in the middle Euphrates valley. The Turkish posture report at Ras al-Ayn, if corroborated, would suggest a consolidation rather than drawdown dynamic in northeastern Syria.

Watch for independent corroboration of the Ma'ariya/Jumla ground infiltration reports; confirmation would indicate Israeli forces have expanded their operational footprint in western Daraa. Monitor for additional ISIS IED claims in Deir ez-Zor, which would indicate a sustained targeting campaign against Internal Security Forces. Observe Turkish troop movements at Ras al-Ayn for any signals of further reinforcement or faction displacement. Track the Homs explosions for follow-on reporting that would indicate the cause and any organized actor involvement.

Russian forces conducted a multi-axis strike package across Ukraine and cross-border into Belgorod Oblast during the 24-hour period, with Zaporizhzhia sustaining two separate strikes and a targeted IED attack on a military commissar in Odesa adding a distinct internal-security dimension.

All six events are provisional (partial confidence, no verified items this period).

Zaporizhzhia recorded two strikes — consistent with its baseline of 1.9 events/day — injuring at least 18 civilians across the city and district, including six children. A residential apartment building in the city center sustained direct structural damage.

Sumy saw one overnight guided aerial bomb strike injuring six people (three children, three adults), representing a 150% spike above its 7-day baseline of 0.4 events/day.

Mykolaiv recorded one strike on port infrastructure damaging a civilian vessel with no reported casualties — also a 150% spike above its 0.4/day baseline.

Belgorod Oblast (Shebekino) sustained a Ukrainian drone strike on a civilian passenger bus, injuring 19 people, six seriously. A cargo vehicle and passenger car were additionally damaged; no fatalities reported.

Odesa recorded an IED detonation under a vehicle reportedly belonging to a local military commissar, injuring the 49-year-old driver. This event is operationally distinct from aerial strike patterns and suggests targeted intimidation or sabotage against conscription infrastructure.

The Sumy and Mykolaiv spikes — both provisional — may indicate broadening of the Russian strike footprint beyond the established Zaporizhzhia-centric tempo. The Odesa IED targeting a commissariat-linked vehicle, if confirmed, would represent a rare instance of directed action against military administrative personnel inside Ukrainian-controlled territory.

Watch for: follow-on strikes in Sumy and Mykolaiv, which would indicate a sustained shift rather than isolated incidents. Monitor Odesa for additional incidents targeting conscription or military administrative figures. Track Belgorod Oblast for escalatory cross-border exchange patterns. Any casualty revision from Zaporizhzhia OVA would affect the period's injury count.

Three verified drone/fire incidents struck Moscow Oblast within a three-hour window early on 28 July, alongside a partially corroborated Ukrainian missile strike on an unlocated Russian defence-industrial facility producing air-defence and cruise-missile components.

Moscow Oblast recorded three events in the 24-hour period against a 7-day baseline of 1.1 events/day — a 173% spike. A confirmed drone strike hit the ZAO "Gidrostalkonstruktsiya" plant in Chekhov at 01:52 UTC, striking a pipe with additional drones reported in the area (three sources, verified). Approximately two hours later, a Wildberries warehouse in Koledino was reported on fire, with OSINT geolocation accounts tagging the post as conflict-related (two sources, verified). A separate warehouse fire in Berezhki was reported concurrently; the post explicitly excludes Wildberries as an operator, and no actor or weapon type is attributed (two sources, verified). The Chekhov plant strike is the only event with a confirmed weapon type (drone). The two warehouse fires lack confirmed cause.

Separately, Kyiv claimed a missile strike against a defence-industrial enterprise — location undisclosed — that manufactures Tor air-defence system components and Kh-101/Kh-59M2/Kh-59M2A cruise missile parts. This is seven-source but provisional: no independent site confirmation or casualty figures have been provided.

The Chekhov strike indicates drone penetration to at least 70 km south of central Moscow. A successful strike on the unnamed defence-industrial facility, if confirmed, would represent direct attrition of Russian air-defence and long-range strike munition production capacity. The clustering of fires in Moscow Oblast within hours of each other elevates the probability they are related, though cause for the two warehouse incidents remains unconfirmed.

Watch for independent geolocation or damage assessment of the Koledino and Berezhki fires that would clarify whether drone or other conflict-related causes are involved. Watch for identification and imagery of the struck defence-industrial enterprise, which would indicate the scale of production disruption to Tor and Kh-series munition lines. A further tempo increase in Moscow Oblast events would indicate a sustained targeting campaign against the region's logistics and industrial nodes.

Two strike events in the 24-hour period — one verified in Erbil, Iraq, and one partially corroborated near Abqaiq, Saudi Arabia — represent significant spikes above baseline activity, suggesting an elevated Iranian proxy operational tempo across the theater.

The period recorded two events against a combined baseline of roughly 0.2 events/day across both locations, representing a sharp departure from recent norms.

Erbil, Iraq (verified, 3 sources): Multiple explosions were reported in Erbil on 27 July at 21:53 UTC. The event is corroborated across three independent sources. No casualties, targets, or point of origin have been confirmed. Activity in Erbil Governorate is running at approximately 900% above its 7-day average.

Abqaiq, Eastern Saudi Arabia (partial, 2 sources): Earlier the same day at 14:25 UTC, Houthi forces claimed an attack on crude oil infrastructure near Abqaiq. The Saudi government stated it intercepted drones and attributed their origin to Iraq. This claim is provisional — two sources, with attribution to Iraq as yet unverified independently. The Abqaiq location is also running 900% above its 7-day baseline.

No verified events were recorded in other regularly active areas — Tehran Province, Khuzestan, Hormozgan, or the Red Sea off Al Hudaydah — during this period.

A claimed strike on Abqaiq — one of Saudi Arabia's most critical oil processing nodes — combined with an unexplained explosion cluster in Erbil in the same 24-hour window indicates potential coordinated proxy activity. Saudi attribution of the Abqaiq drones to Iraqi-origin actors, if corroborated, would implicate Iran-aligned militia networks operating from Iraqi territory.

Watch for independent corroboration of the Saudi claim attributing the Abqaiq drones to Iraqi-origin launch sites, which would indicate cross-border proxy coordination. Monitor Erbil for follow-on strikes or claim of responsibility, which would help clarify whether the explosions are linked to the Abqaiq event. Watch for any response activity in Khuzestan Province or Hormozgan Province, which have elevated baselines and could indicate retaliatory or escalatory signaling. Track Houthi communications for additional claims targeting Saudi energy infrastructure.

Lithuanian border authorities have discovered a tunnel crossing from Belarus and reported dozens of associated smuggling attempts at the Lithuania–Belarus border; both events are unconfirmed and single-sourced, warranting close monitoring but not yet corroborated.

No verified or partial-confidence events were recorded in this period. Two unconfirmed, single-sourced reports emerged on the Lithuania–Belarus border segment. The first describes the physical discovery of a tunnel assessed as likely intended for irregular migration. The second, reported approximately 16 hours later, cites the Lithuanian border guard chief stating that dozens of smuggling attempts via tunnels have been detected and that Minsk is most likely involved in orchestrating the operation. No 7-day baseline exists for this theater, so frequency comparison is not possible.

If corroborated, tunnel-based border infiltration on the Lithuania–Belarus border would represent a qualitative escalation in hybrid pressure tactics against a NATO flank state — moving beyond documented surface-level irregular migration pressure to engineered subterranean crossing infrastructure. Attribution to Belarusian state authorities, asserted by Lithuanian officials but currently unverified, would carry significant diplomatic and collective-defense implications for the alliance's eastern flank.

Watch for independent corroboration of the tunnel discovery from Lithuanian government or EU border agency (Frontex) sources, which would upgrade these events from unconfirmed to at least partial confidence. Monitor for any official Belarusian or Lithuanian government statements, which would indicate whether this is being escalated diplomatically. Additional tunnel discoveries or a sustained spike in crossing attempts along the Lithuania–Belarus line would indicate a structured, ongoing operation rather than an isolated incident.

No verified or partial-confidence events were recorded in Yemen during the 24-hour period; all activity consists of two unconfirmed, single-sourced claims that require corroboration before operational weight can be assigned.

The period produced zero verified or partial events against a baseline of approximately 0.3 events/day across monitored zones. Two unconfirmed, single-sourced reports emerged in locations with no prior baseline activity:

• Sanaa / Saudi Arabia (deep strike): A Houthi military source cited by Al-Akhbar claimed a drone strike on Saudi oil facilities, asserting that Saudi energy infrastructure is now a declared target category. Saudi authorities attributed the attack to Iraq; the Houthi source denied this. Single-sourced and unverified — no independent corroboration.
• Bab al-Mandeb Strait: Tasnim News Agency's political director reported that two Saudi vessels were targeted by Yemeni forces in the strait. The same post referenced separate incidents near the Strait of Hormuz. Single-sourced and unverified — no independent corroboration.

Both reports originate from sources with known affiliations and cannot be treated as confirmed without cross-verification.

If corroborated, the claimed deep strike into Saudi energy infrastructure would represent a significant escalation in Houthi target selection beyond Red Sea shipping. The Bab al-Mandeb claim, if verified, would indicate resumed interdiction operations against Gulf-state vessels — a pattern that had previously disrupted regional energy transit.

Watch for Saudi official statements or independent damage assessments regarding oil facilities, which would indicate whether the deep-strike claim has merit. Monitor maritime tracking data for the Bab al-Mandeb corridor for vessel disruptions or diversions, which would lend credibility to the shipping interdiction report. Any Houthi formal media release formalizing Saudi energy infrastructure as a target category would indicate a declared doctrinal shift worth elevated monitoring.

A single unconfirmed report alleges a surge of Israeli ground activity in Quneitra, southern Syria, during the 24-hour period — no verified events were recorded for the Israel theater in this window.

The 7-day baseline shows negligible recorded activity in adjacent areas (Aqaba Governorate averaging 0.1 events/day) and no prior baseline for Quneitra. The sole event in this period is a single-sourced, unconfirmed SOHR report claiming 11 Israeli incursions into southern Syria over 48 hours, during which three Syrian civilians were allegedly arrested and homes demolished. The report notes these incidents occurred despite two field tours by UNDOF in the area. No corroborating sources have been identified; this item is treated as provisional only.

If even partially accurate, an 11-incursion tempo over 48 hours in Quneitra would represent a meaningful operational shift from baseline activity levels in southern Syria. The reported presence of UNDOF patrols during the alleged incidents introduces a potential escalation dynamic, as UN observer forces would be in proximity to any ground activity. The absence of verified corroboration prevents any firm assessment of scale or intent.

Watch for independent corroboration of the Quneitra incursion report from additional open sources, official Syrian or Israeli statements, or UN reporting — confirmation would indicate a notable and documentable uptick in Israeli ground activity along the Syria buffer zone. Monitor UNDOF reporting channels for any public incident disclosures, which would indicate direct proximity of UN observers to contested activity. Continued silence from all parties would leave the single-source claim unresolved.

Tatmadaw forces recaptured Htinzin village from the PDF in Tamu Township, Sagaing Region — a provisional single-source report representing a notable spike above the area's near-flat 7-day baseline.

Sagaing Region recorded one clash event against a 7-day average of 0.1 events/day — a 900% rise, though the low baseline means a single incident drives the figure. A partial-confidence report (single-sourced, provisional) indicates Tatmadaw units expelled PDF fighters from Htinzin village in Tamu Township, along the Kalay-Tamu road, on 28 July. No casualties were reported by either side. Rakhine State recorded no events during the period, consistent with its baseline. The Htinzin action follows a reported regime operation at Kammagyi village on 21 July, suggesting a localized sequential clearing pattern along the Kalay-Tamu corridor, though this inference rests entirely on the single provisional report.

The Kalay-Tamu road is a logistically significant axis connecting interior Sagaing to the India-Myanmar border at Tamu. Sequential regime clearing operations — Kammagyi on 21 July, Htinzin on 28 July — would indicate an effort to consolidate control over this corridor. Because the Htinzin report is single-sourced and unverified, operational significance remains provisional and should not be weighted heavily until corroborated.

Watch for additional reporting on Htinzin from independent sources, which would either corroborate or revise the current partial-confidence assessment. Monitor the Kalay-Tamu road corridor for further Tatmadaw village-clearing activity; additional operations would indicate a deliberate sequential campaign rather than an isolated action. Watch for PDF counter-movement or resupply attempts along the corridor as a secondary indicator.

A single verified clash between Palestinian youths and Israeli forces occurred in Nablus during the 24-hour period, consistent with the area's established baseline activity.

One verified incident was recorded: Palestinian youths clashed with Israeli forces during an Israeli raid in Nablus city, setting fire to car tires on Faisal Street (corroborated across two independent sources). No events were recorded in Gaza Strip, Jerusalem District, Jenin, Qalandia, or the broader West Bank during the period. The Nablus rate of one event in 24 hours aligns with the 7-day baseline of 0.9 events/day — no statistically notable shift.

The Nablus clash follows the established pattern of friction accompanying Israeli military raids into the city. The incident did not represent an escalation above baseline. No casualty figures are reported in the verified record. Activity in all other sub-districts remained below or at baseline, indicating no theater-wide shift during the period.

Watch for follow-on Israeli raid activity in Nablus, which would indicate whether the Faisal Street incident is part of a sustained operational tempo or an isolated event. Monitor Palestinian health ministry and local municipal sources for any casualty reporting associated with this clash that has not yet entered the verified record. Any uptick in events across Jenin or Qalandia — both currently at low baseline — would indicate a broader West Bank mobilization pattern worth tracking.

Sudanese Armed Forces (SAF) reportedly seized the Al-Sadarat Highway in North Kordofan, restoring the Khartoum–El Obeid road link and dealing a claimed significant blow to Rapid Support Forces (RSF) control of the route — though this claim remains provisional, drawn from a single source.

One partial-confidence event was recorded during the period. SAF forces are reported to have taken control of the Al-Sadarat Highway near North Kordofan, severing RSF's hold on the Khartoum–El Obeid corridor as of 27 July at approximately 17:14 UTC. This represents a spike of roughly 900% above North Kordofan's 7-day baseline of 0.1 events/day. The claim is single-sourced and provisional; independent corroboration has not been established.

The Khartoum–El Obeid road is a strategically significant logistics artery connecting the capital to North Kordofan. If the SAF seizure is confirmed, it would represent a meaningful shift in ground control along a corridor that enables resupply, troop movement, and economic access to central Sudan. RSF loss of this route — if sustained — would constrain their operational reach in the region. Given the single-source nature of the report, the extent of SAF consolidation and RSF casualties cannot be assessed at this time.

Watch for independent reporting corroborating or contradicting SAF control of the Al-Sadarat Highway, which would indicate whether the claimed seizure is sustained or contested. Monitor for RSF counter-movement or attempted route denial in North Kordofan. Any further activity on the Khartoum–El Obeid corridor would indicate escalating priority on this axis for both sides.