The latest published intelligence briefing for each active theater, most active first. Every section links to the live theater view on the dashboard.

Iran launched a sequence of drone and missile strikes against US military installations in Kuwait and Bahrain during the period, while Israeli forces conducted verified demolitions of a Hezbollah tunnel network beneath a UNESCO heritage site in southern Lebanon.

Kuwait (spike: +900% vs. baseline): Two provisional events document Iranian strikes on Kuwait. Iranian army forces claimed a drone strike against Ahmad al-Jaber Air Base, targeting fighter jet shelters, satellite communication systems, and equipment warehouses — framed as retaliation for a US strike on a residential home on Qeshm Island (partial, two sources). A separate IRGC claim described a broader "retaliatory attack" on Kuwait with no weapons or casualty detail (partial, two sources). Neither was independently confirmed by Kuwaiti or US authorities.

Bahrain (spike: +900% vs. baseline): Iranian state media reported an attack on US assets at Sheikh Isa Air Base, home to the US Navy's Fifth Fleet. US and Bahraini authorities had not confirmed the claim at time of reporting (partial, two sources).

Hormozgan Province (+43% vs. baseline): A US strike on Qeshm Island killed a family of three. This event, provisional but two-sourced, was cited by Iranian forces as the direct trigger for the Kuwait strikes.

South Lebanon (+400% vs. baseline): Israeli forces destroyed a Hezbollah tunnel beneath Beaufort Castle (Qalaat al-Shaqif), a 900-year-old UNESCO World Heritage Site seized by Israel in May. The tunnel demolition is verified across two independent sources via a joint Netanyahu–Defense Minister Katz statement. A second partial report describes demolition of additional tunnel features beneath the castle ridge.

The Iran–Kuwait and Iran–Bahrain strike claims, if confirmed, represent direct Iranian conventional military action against two Gulf Cooperation Council states hosting US forces — a significant geographic escalation beyond prior targeting patterns. The Qeshm airstrike–Kuwait drone retaliation sequence suggests a tightening action-reaction cycle. In South Lebanon, the Beaufort Castle demolition marks continued Israeli military activity at a culturally significant site, with potential diplomatic ramifications.

Watch for independent confirmation from Kuwaiti, Bahraini, or US sources of damage at Ahmad al-Jaber and Sheikh Isa air bases — corroboration would indicate Iran has expanded its direct-strike envelope to Gulf host-nation infrastructure. Monitor Iranian state media for claims of additional retaliatory waves, which would indicate an escalating sequential strike posture. Watch for US or allied force-protection posture changes in the Gulf, which would indicate assessment of the threat as credible. In South Lebanon, observe Israeli military statements for any indication of further tunnel demolition operations at or near the Beaufort Castle area.

All five events this period are single-source and unconfirmed, but they collectively describe a Belarus-linked tunnel-construction and migrant-smuggling pattern along Lithuania's eastern border, with a secondary spillover indicator in Estonia.

No verified or partial-confidence events were recorded for the NATO_FLANK theater this period; all activity is provisional and single-sourced. With no prior baseline, relative scale cannot be quantified, but four unconfirmed reports from 27–29 July describe Lithuanian border guards (VSAT) discovering multiple unfinished tunnels running from Belarus into Lithuania — spanning both the southeastern border and the Vilnius/Alytus region. VSAT's border guard chief is cited as assessing Belarusian state involvement in orchestrating the operations, though this attribution remains unverified at this confidence tier. A fifth unconfirmed report from 29 July indicates Estonia deployed additional police and border guard assets to the Latvia border following detention of several dozen migrants who transited Belarus and Latvia — suggesting the pressure is not confined to Lithuania.

If corroborated, coordinated tunnel construction along NATO's eastern flank would represent a qualitative escalation beyond surface-level migrant pressure tactics previously documented at the Polish, Lithuanian, and Latvian borders. Tunnel infrastructure requires sustained engineering effort and implies pre-planned, organized logistics. Estonian reinforcement of a secondary border point would indicate the route is diversifying westward along the Baltic corridor. Both dynamics, if confirmed, carry implications for alliance border-security coordination.

Watch for independent corroboration of the tunnel reports from Lithuanian, EU, or third-party sources, which would indicate an upgrade from unconfirmed to partial or verified status. Monitor whether Estonia formalizes its border reinforcement as a bilateral or NATO-coordinated measure, which would indicate broader alliance recognition of the pressure pattern. Additional tunnel discoveries or migrant detentions in Latvia would indicate route diversification is ongoing.

Russia struck a U.S.-operated drone factory in Kyiv in what provisional reporting describes as the first direct targeting of an American company in the conflict, while a Ukrainian drone attack on the Russian port of Taman — a significant spike above baseline — signals continued Black Sea pressure operations.

All five events for the period carry partial confidence ratings; none are fully verified.

Kyiv: A Russian missile hit a drone production facility operated by American company Terminal Autonomy. This is provisionally the first strike on a U.S.-linked manufacturing site in Ukraine, marking a qualitative shift in Russian targeting — though the partial-confidence rating means attribution and intent require further corroboration.

Taman (Krasnodar Krai): A Ukrainian drone attack on the Russian Black Sea port of Taman resulted in fires at the port. At 900% above the 7-day baseline (from 0.1 to 1 event), this is the sharpest statistical deviation of the period. The event is two-source and provisional.

Dnipropetrovsk: A missile strike on a residential home in Radushne, Kryvyi Rih district, killed both parents and at least three children. Three-source reporting provisionally suggests the weapon may have been a North Korean ballistic missile — which, if confirmed, would be the first such use in approximately a year.

Odesa: Russian forces struck port fuel and lubricant storage in Odesa and separately targeted a vessel allegedly carrying military cargo. Slightly above the 7-day baseline; three-source and partial.

Zaporizhzhia: A Russian strike on Zaporizhzhia city caused a fire; below the 7-day baseline of 1.6 events/day, suggesting a quieter-than-average period for this oblast.

The Kyiv factory strike, if confirmed, introduces a new escalatory dimension — direct Russian targeting of U.S. corporate assets could carry diplomatic consequences beyond the immediate tactical effect. The provisional North Korean missile use in Dnipropetrovsk, if corroborated, would reestablish an active DPRK munitions pipeline after a reported gap. The Taman strike reflects Ukraine's sustained effort to degrade Russian Black Sea logistics infrastructure.

Watch for U.S. government or Terminal Autonomy responses to the Kyiv factory strike, which would indicate diplomatic escalation or acknowledgment of targeting. Monitor Russian MoD and Ukrainian official channels for confirmation or denial of the Taman strike damage. Observe whether additional reporting corroborates the North Korean missile claim in Dnipropetrovsk — independent munitions analysis or OSINT imagery would indicate whether the DPRK supply line is active. Any follow-on strikes against Odesa port infrastructure would indicate a sustained campaign against Black Sea export capacity.

Ukraine struck deep inside Russian territory on the night of 30–31 July, with corroborated or partially corroborated attacks across Volgograd, Tatarstan, and Dagestan — the last representing a penetration of roughly 1,000 km of Russian airspace.

All three affected oblasts spiked sharply above their 7-day baselines. Volgograd recorded two events against a baseline of 0.3/day (+567%): verified explosions in the city at 23:33 UTC (7 independent sources), followed 39 minutes later by a partially corroborated fire at the Volgograd refinery's industrial zone, cause unconfirmed. In Tatarstan (+900% vs baseline), a partially corroborated drone strike — two sources, supported by ASTRA eyewitness footage showing smoke — hit the Wildberries logistics complex in Zelenodolsk for the second time in eight days, the first strike having occurred on 23 July. In Dagestan (+900% vs baseline), a partially corroborated strike by a Ukrainian A-22 Foxbat modified light aircraft hit the port of Kaspiysk on the Caspian Sea — three sources. The Volgograd refinery fire and the Zelenodolsk strike are provisional; the Kaspiysk and Volgograd city events are corroborated but not fully verified.

The Kaspiysk strike, if confirmed, would mark one of the deepest Ukrainian drone penetrations on record, reaching a Caspian port with no prior strike history in this period's baseline. The repeat targeting of the Zelenodolsk logistics hub within eight days suggests deliberate pressure on supply-chain infrastructure. A potential refinery strike in Volgograd, if attributed, would extend an established pattern of attacks on Russian energy processing facilities.

Watch for: Russian air-defense posture adjustments along the Volga corridor and in Dagestan, which would indicate acknowledgment of the airspace breach. Monitor the Volgograd refinery for damage-assessment reporting that could confirm or rule out a strike cause. A third strike on the Zelenodolsk facility would indicate a sustained targeting campaign against that logistics node. Secondary reporting on Kaspiysk port infrastructure damage would indicate the operational scale of the A-22 Foxbat employment.

All three events in the 2026-07-30 to 2026-07-31 period are unconfirmed and single-sourced; no verified or partial-confidence activity was recorded. The period is notable only as a watch item, with unverified reporting of Israeli ground activity in Quneitra and an alleged internal discipline incident at Sde Teiman.

Against a 7-day baseline of 0.1 events/day in Quneitra, two unconfirmed events were reported in the southern Quneitra countryside — a spike of roughly 1,900% above baseline, though this figure reflects the low baseline rather than confirmed kinetic activity. One single-sourced report (Syrian Observatory for Human Rights) described an Israeli incursion into the southern Quneitra countryside as a continuing violation; a separate single-sourced local report alleged shelling and a new ground incursion in southern Quneitra with no casualties or damage confirmed. Both are provisional and unverified. In the Southern District, where no prior baseline exists, one unconfirmed single-sourced report alleged that dozens of Israeli soldiers walked out of the Sde Teiman military base in what was characterized as a mutiny; no kinetic engagement was reported.

If corroborated, Israeli ground activity in southern Quneitra would represent a continuing pattern of cross-boundary operations into Syrian territory. The Sde Teiman report, if verified, would indicate internal disciplinary strain within the IDF at a named detention facility. Neither finding can be assessed with confidence at this time.

Watch for independent corroboration of the southern Quneitra incursion reports — confirmation from a second source would indicate a sustained operational footprint beyond the buffer zone. Monitor IDF official channels and Israeli domestic media for any acknowledgment of, or response to, the Sde Teiman walkout claim; official silence or denial would itself be an indicator worth tracking. Watch for casualty reports or damage assessments from Quneitra, which would shift the event classification from movement to confirmed kinetic activity.

All three events covering the period are unconfirmed and single-sourced; no verified or partial-confidence reporting exists. Nonetheless, the reported activity in North Kordofan represents a sharp spike above baseline and warrants close monitoring.

North Kordofan recorded two reported events against a 7-day baseline of 0.1 events/day — a roughly 20-fold increase. Both are unconfirmed and single-sourced, and should be treated as provisional. First, an airstrike was reported on Sharshar, North Kordofan, with witness and rights-group accounts alleging at least 24 civilian fatalities, described as predominantly women and children; a subsequent RSF ground attack on El Jamama reportedly killed at least nine and displaced residents. Second, the Sudanese Air Force was reported to have conducted airstrikes along the Omdurman–Bara road axis targeting RSF positions across North and West Kordofan, following claimed SAF advances along that axis.

North Darfur had no prior baseline. A single unconfirmed report describes approximately 14,300 people displaced from al-Jamamah village in Sudri locality, with families moving into surrounding areas of the Gharb Bara region, attributed to a deteriorating security situation.

If corroborated, the Sharshar strike would represent one of the higher single-incident civilian casualty tolls reported in North Kordofan in recent weeks. Activity along the Omdurman–Bara axis, if confirmed, would suggest SAF is seeking to pressure RSF supply and movement corridors in Kordofan. The North Darfur displacement, if verified at the reported scale, signals localized population movement consistent with active ground-level insecurity in Sudri locality.

Watch for independent corroboration of the Sharshar civilian casualty report — confirmation would indicate a significant escalation in harm to non-combatants. Monitor the Omdurman–Bara road axis for additional strike or movement reporting that would indicate sustained SAF air operations. Track humanitarian sources for displacement figures from Sudri locality and Gharb Bara; rising numbers would indicate broadening insecurity in North Darfur. Any verified reporting emerging from these three locations would materially change the confidence picture for this period.

All three events recorded in Syria's theater for this 24-hour period are unconfirmed and single-sourced; no verified or partial-confidence reporting is available. The most strategically notable item is an IRGC information operation contesting CENTCOM's damage assessment at a Jordanian air base.

Against a quiet 7-day baseline averaging 0.1 events/day in Daraa and Hama, three new locations generated activity — all unconfirmed.

In western Daraa countryside, unverified reporting describes vehicle movements by "ANDOF" forces characterized as logistical in nature, with no kinetic engagement. This represents a spike of approximately 900% over the 7-day Daraa average, though the single-source, unconfirmed status makes trend assessment unreliable.

At Mawafaq Salti Air Base in Jordan's Mafraq Governorate — a location with no prior baseline — Iran's IRGC published what it described as imagery of a maintenance bay for U.S. fighter aircraft, directly challenging CENTCOM's claim that all Iranian missiles were intercepted and no equipment was damaged. This is single-sourced and unverified; image provenance and authenticity have not been independently corroborated.

In Homs, also with no prior baseline, a single unverified report describes an armed individual on a motorcycle opening fire inside a returnees camp, wounding six people. No group affiliation has been established.

The IRGC's public release of alleged damage imagery at Mawafaq Salti is a deliberate information operation targeting CENTCOM's credibility. Even unverified, it signals an Iranian intent to contest the official U.S. narrative in an open-source space. The Daraa movement and Homs shooting, if corroborated, would indicate renewed instability in two areas that had been near-dormant.

Watch for independent corroboration of the IRGC imagery from Mawafaq Salti — verification or refutation would indicate the operational and informational stakes of the Iran-U.S. exchange. Monitor Daraa's western countryside for follow-on ANDOF activity that would indicate a shift from logistical posturing to operational deployment. Watch for additional reporting on the Homs returnees camp shooting that would indicate organized armed presence rather than an isolated incident.

Military regime forces have provisionally recaptured key positions along the Kalay–Tamu highway in Sagaing Region, threatening PDF control of Myanmar's primary overland trade corridor to India.

Activity in Sagaing Region spiked to one reported event against a 7-day baseline of 0.3 events/day (+233%). The sole event for the period — provisional and single-sourced — reports that regime forces recaptured strongholds along the 81-mile Kalay–Tamu highway following a two-month counteroffensive. The PDF is reportedly preparing a strategic withdrawal from the corridor. No verified events were recorded in the period; this single partial-confidence report is treated as provisional. Northern Shan State produced no reportable activity.

The Kalay–Tamu highway is the principal overland trade route linking Myanmar's interior to the Indian border town of Moreh. Regime consolidation of this axis, if confirmed, would significantly constrain PDF logistics and cross-border supply lines in Sagaing Region. A two-month counteroffensive reclaiming this corridor would also represent a notable reversal of resistance momentum in a region that has seen sustained PDF activity. The strategic and economic implications are substantial, but current confidence is partial — the picture rests on a single source.

Watch for independent corroboration of regime control claims along the Kalay–Tamu corridor; confirmation would indicate a durable shift in the area's military balance. Monitor for PDF statements or satellite-observable movement that would indicate whether the reported withdrawal is underway or contested. Any renewed fighting near Kalay or Tamu would suggest the corridor has not been fully secured. Watch also for Indian border-crossing data or trade disruption reports from Moreh, which would indicate operational impact on the highway.

A verified strike on civilians in al-Karamah, Gaza City, marks the sole recorded kinetic event in the 24-hour period, representing a relative spike in Gaza Strip activity against a low baseline.

One verified event was recorded in the period: a strike targeting a group of Palestinian civilians in the al-Karamah area of the Gaza Strip, reported at 08:46 UTC on 31 July 2026. The event is corroborated across two independent sources. No casualty figures have been reported. Gaza Strip activity for the period registers at 1 event against a 7-day baseline of 0.3 events/day — a 233% increase, though the absolute volume remains low. No events were recorded in the West Bank, Nablus, Qalandia, or Gaza City sub-zones during this window.

The al-Karamah strike directly involves civilians as the reported target group, which is operationally significant regardless of casualty figures. The absence of any reported toll may reflect information gaps rather than the absence of harm. The spike in Gaza Strip activity, while based on a single event, breaks a notably quiet 7-day baseline and warrants continued monitoring for escalation indicators.

Watch for: follow-on casualty reporting from al-Karamah, which would indicate the information gap is closing or widening. Monitor Gaza Strip for additional strike events; a second event within 24 hours would indicate the baseline shift is sustained rather than isolated. Any West Bank activity emerging alongside renewed Gaza Strip strikes would indicate multi-zone pressure. No unconfirmed events are pending elevation to the verified tier at this time.

Activity in the Yemen theater for the 24-hour period is minimal, with a single unconfirmed explosion report in Sana'a and no verified or partial-confidence events to anchor an assessment.

The 7-day baseline shows low but consistent activity in Saada (0.3 events/day) and Al Hudaydah (0.1 events/day), with no prior baseline for Sana'a. During this period, Sana'a registers one event — a single-sourced, unconfirmed report of an explosion heard in the city on 30 July, attributed to Tasnim News. No cause, target, casualties, or responsible party have been identified. This report is excluded from the verified record and carried only as a watch item.

With zero verified or partial-confidence events, no operationally significant confirmed change can be assessed for this period. The unconfirmed Sana'a report, if corroborated, would represent a notable geographic shift — Sana'a has no established baseline — but its current evidential weight is insufficient to draw conclusions. Saada and Al Hudaydah, the two areas with established baselines, produced no reportable activity in this window.

Monitor Sana'a for any corroborating reports of the 30 July explosion; independent sourcing would indicate an event worthy of escalation to the verified record and potential re-assessment of activity patterns in the capital. Watch Saada and Al Hudaydah for any deviation above their established baselines, which would indicate a broader uptick in theater tempo. Absence of follow-on reporting from Sana'a within 48 hours would suggest the single report remains isolated and unverifiable.