Geopolitical and cyber intelligence.
Daily briefings on the United States, United Kingdom, France, Germany, Ukraine, and Turkey, with continuous monitoring of global cyber threats.
- ▸ Trump warns Iran of 'very tough times' as Ukraine strikes 1,100 km deep into Russia. Taiwan invasion fears rise after Trump-Xi summit
- ▸ testing US resources
Top Stories
Highest-priority developments worldwide
Iran Ultimatum, Ukraine Drone Reach Test Washington
Trump told BFMTV Iran faces 'very tough times' if Pakistan-mediated talks fail, as the Pentagon priced the war at $29B and intelligence showed Iran has restored 30 of 33 Hormuz launchpads. Ukraine sent ~600 drones overnight across 14 Russian regions, killing four near Moscow; USF separately struck an FSB ship 1,100 km from the front near Kaspiysk. Trump advisers fear Xi may move on Taiwan within five years; Russian banks crossed the IMF's 10% crisis line for a third month and Putin signalled openness to talks. BASF cut 2,500 Ludwigshafen jobs while opening a €8.7B China complex.
Trump warns Iran of 'very tough times' as Pentagon readies $29B escalation plan
US President Donald Trump told French network BFMTV that Iran faces "very tough times, very tough times" if Pakistan-mediated talks on a 14-point Hormuz-and-uranium deal collapse, as the Pentagon prepared to reactivate a joint US-Israeli air campaign within a week. The Pentagon now puts the US war bill at $29 billion — up $4 billion from Defense Secretary Pete Hegseth's $25 billion congressional estimate two weeks ago — while classified intelligence shows Iran has restored 30 of 33 missile launchpads along the Strait of Hormuz and retains 70% of its ballistic inventory. Secretary of State Marco Rubio said Washington is pushing for a diplomatic exit because US military resources are finite.
Ukraine launches ~600 drones across 14 regions of Russia, killing four near Moscow
Ukraine struck 14 Russian regions, Crimea and the Black and Azov seas overnight with close to 600 drones, killing four — three in the Moscow region and one in Belgorod — and wounding more than a dozen in what Russian state agency Tass called the largest attack on Moscow in over a year. The SBU said strikes hit the Angstrem microchip plant in Zelenograd, the Moscow oil refinery and the Solnechnogorsk pumping station on the Moscow oil-and-gas ring, while at the Belbek military airfield in occupied Crimea a Pantsir-S2 system, an S-400 radar hangar and UAV control stations were damaged. President Volodymyr Zelensky said the strikes — using Ukrainian-developed RS-1 Bars, FP-1 Firepoint and BARS-SM Gladiator drones flown over 500 km from the border — were a justified response to Russia's three-day Wed–Fri barrage, which killed 24 people in a Kyiv apartment block.
BASF sells Ludwigshafen flats and cuts 2,500 jobs as €8.7bn China complex opens
German chemical giant BASF has cut around 2,500 jobs since 2022 at its Ludwigshafen headquarters and put thousands of company-owned apartments on the market, even as it inaugurated a €8.7 billion ($10 billion) complex in China last month — its largest-ever single investment. Works council chair Sinischa Horvat told AFP that "the mood is obviously not good" in the 175,000-person company town, where BASF still employs over 30,000 staff and has agreed to hold off on compulsory redundancies until at least 2028. The cuts sit inside a wider 124,000-job industrial drawdown across Germany in 2025 — roughly double the 2024 figure, according to consultancy EY — that has shrunk manufacturing's GDP share to 19.5%, with DIW president Marcel Fratzscher warning the losses are accelerating.
KDP-linked site claims SDG commander Mazlum Abdi met Öcalan on Imrali; Ankara silent
A KDP-linked Iraqi Kurdistan website, Darka Mazi, has reported that Syrian Democratic Forces commander Mazlum Abdi and SDG external-relations head Ilham Ahmed were secretly taken to Imrali island prison in March through "a channel prepared by Turkey" to meet imprisoned PKK founder Abdullah Öcalan, three days after an earlier 9 May claim that PKK leaders Sabri Ok and Bese Hozat had been brought there in June 2025 before that year's symbolic weapon-burning ceremony in Sulaymaniyah. As of 17 May, neither the Presidency's Disinformation Centre, the Justice Ministry nor MİT — which is coordinating the "Terror-Free Turkey" process under chief İbrahim Kalın — has issued a formal denial. The unverified claims have opened debate inside the AK Parti base over whether Parliament should pass process legislation before the PKK disarms, with columnist Fatih Altaylı arguing such contacts are ordinary statecraft.
Country Coverage
Daily snapshot across all six nations
Iran Impasse Hardens Around $29B Pentagon Plan
UK Fast-Tracks Foreign-State Proxies Bill Amid Security Crisis
France Cracks Down on Pro-Palestinian Speech, Epstein Probe Widens
BASF Cuts 2,500 Jobs, Sells Apartments in Ludwigshafen
Ukraine's Largest Drone Wave Hits Moscow; Russian Banks Cross IMF Crisis Line
Imrali Whisper Rattles Terror-Free Turkey Process
Cyber Threat Intelligence
Daily snapshot of attack categories, threat actors, and country exposure.
- Data Breach Indonesia 17 MayAlleged data breach of PT Perikanan Indonesia
- Ransomware Spain 17 MayRecambios Generales del Automóvil Dosocho S.L. falls victim to M3RX Ransomware
- Data Breach France 17 MayAlleged data breach of Gites de France
- Ransomware Spain 17 MayIngelan falls victim to DragonForce ransomware
- NoName057(16) 18 ev
- Neffex THe BlackHat 7 ev
- Kazu 6 ev
- Hax.or 5 ev
- Dark Storm Team 5 ev
Recent CTI Daily Briefs
Browse past daily cyber threat intelligence briefs.
- 17 May 2026· Latest140eventsKazu Actor Strikes Healthcare, Government; NGINX Zero-Day Exploited47 critical data exposures logged, with Kazu targeting health and government sectors globally. NGINX CVE-2026-42945 exploited in the wild. Grafana GitHub token breach disclosed.
- 16 May 2026165eventsMajor Data Breaches Hit Governments, Telecoms, and Education Worldwide165 events tracked; 66 critical exposures. Qilin, LockBit active. Multiple government, telecom, and education breaches reported globally.
- 15 May 2026175eventsBlackFile Shutdown Masks Vishing Surge; Cisco Zero-Day Under Active AttackUNC6671's BlackFile brand goes dark amid ongoing vishing extortion campaigns. Cisco SD-WAN zero-day CVE-2026-20182 exploited in the wild. Major breaches hit Coinbase, Eli Lilly, and U.S. Department of
- 14 May 2026197eventsGhostwriter Targets Ukraine, Foxconn Hit by Nitrogen RansomwareQilin, Pharaoh's Team drive 197 events; Foxconn confirms ransomware; Ghostwriter targets Ukraine; critical data exposures hit India, France, Chile.
- 13 May 2026128eventsAI-Driven Patch Tuesday Surge; Government, Finance Breaches DominateMicrosoft patches 138 flaws including zero-click Outlook bug; AI tools find 16 vulns. Breaches hit Egypt Education, Indonesia BNI, US govt agencies. UK reforms cybercrime law.