Geopolitical and cyber intelligence.
Daily briefings on the United States, United Kingdom, France, Germany, Ukraine, and Turkey, with continuous monitoring of global cyber threats.
- ▸ Iran war's afterlife: Iraqi national charged with Ivanka Trump assassination plot; Berlin's EU compromise rejected; Paris bars Israeli minister Ben-Gvir; Ukraine strikes deep inside Russia
Top Stories
Highest-priority developments worldwide
Iran War Afterlife: Brooklyn Arrest, Berlin EU Compromise Fails, Paris Bars Ben-Gvir
Federal prosecutors charged Iraqi national Mohammad Baqer Saad Dawood Al-Saadi over a plot to kill Ivanka Trump in revenge for the 2020 strike on Qasem Soleimani; the U-Mich consumer sentiment index fell to a record 44.2. Ukrainian drones halted Metafrax Chemical 1,700 km inside Russia in Perm and hit the Sheskharis terminal at Novorossiysk. Volodymyr Zelenskyy rejected Friedrich Merz's "associate" EU offer. France banned Itamar Ben-Gvir over a flotilla-detention abuse video. Turkey hosted 501 personnel from both Libyan armies at Efes 2026; China deployed over 100 vessels around Taiwan.
Iran-linked Iraqi suspect held in Brooklyn allegedly plotted to kill Ivanka Trump
Mohammad Baqer Saad Dawood Al-Saadi, a 32-year-old Iraqi national arrested in Turkey on May 15 and extradited to the United States, had sworn to kill Ivanka Trump in revenge for the 2020 US drone strike that killed Iranian Quds Force commander Qasem Soleimani, the New York Post reported. Federal prosecutors have charged Al-Saadi in connection with 18 attacks or attempted attacks across Europe and the United States, including the London stabbings of two Jewish victims in April and the Toronto shooting at the US consulate building in March. He is being held in isolation at the Metropolitan Detention Center in Brooklyn.
Zelenskyy refuses 'associate' EU offer as Ukrainian drones hit Sheskharis terminal and Perm chemical plant
Volodymyr Zelenskyy rejected German Chancellor Friedrich Merz's proposal for an "associate" EU membership without voting rights, insisting in a letter to EU leaders that Ukraine must enter with the full rights of any other state. Overnight, Ukrainian drones struck the Sheskharis oil terminal at Novorossiysk and the Grushovaya storage operated by Transneft, hit the tanker Chrysalis in the Black Sea, and forced Metafrax Chemical 1,700 km away in Perm -- which Kyiv says supplies components for Russian drones, rocket engines and explosives -- to halt production. The strikes coincide with an E3-Ukraine video call between Zelenskyy, Merz, Emmanuel Macron and Keir Starmer on reviving peace diplomacy.
Russia strikes Naftogaz oil and gas facilities in Kharkiv and Poltava oblasts for over 24 hours
Russian forces have been conducting a large-scale attack on Naftogaz Group oil and gas facilities in Kharkiv and Poltava oblasts for more than 24 hours, causing serious damage and major fires. Naftogaz CEO Serhii Koretskyi said personnel have been evacuated and it is currently impossible to assess the aftermath due to the risk of further strikes. The attack follows a series of recent Russian strikes on Naftogaz infrastructure, including a missile strike on 19 May in Chernihiv Oblast and a combined attack on 5 May that forced the company to import additional gas.
US intelligence chief Tulsi Gabbard resigns; Trump faces multiple domestic and foreign policy challenges
US Director of National Intelligence Tulsi Gabbard announced her resignation on Friday, citing her husband's cancer diagnosis, effective June 30. The White House posted an AI-generated video of President Donald Trump throwing comedian Stephen Colbert into a trash can after Colbert's final late-night show. Separately, a federal judge dismissed the criminal case against Salvadoran migrant Kilmar Ábrego García, calling the prosecution an abuse of prosecutorial power.
Country Coverage
Daily snapshot across all six nations
Iran-Linked Plot to Kill Ivanka Trump Revealed
Milburn NEET Report Warns of 'Anxious Generation' in Britain
France Bars Israeli Minister Ben-Gvir Over Activist Violence
Zelenskyy Rejects Merz's Associate EU Status for Ukraine
Zelenskyy Rejects 'Associate' EU Status as Drones Hit Perm, Black Sea
Ankara Deepens Eastern Med, Syrian Reach; CHP Duel Set for June 2
Cyber Threat Intelligence
Daily snapshot of attack categories, threat actors, and country exposure.
- Web Defacement Thailand 23 MayEXADOS targets the website of Royal Irrigation Department
- Ransomware Thailand 23 MayBangkok Metropolitan Administration falls victim to KRYBIT ransomware
- Data Breach Indonesia 23 MayAlleged data breach of SMP Negeri 29 Pekanbaru
- Web Defacement Thailand 23 MayEXADOS targets the website of Prom Khiri Subdistrict Municipality
- NoName057(16) 14 ev
- Hax.or 8 ev
- N2LX 7 ev
- EXADOS 5 ev
- BABAYO EROR SYSTEM 5 ev
Recent CTI Daily Briefs
Browse past daily cyber threat intelligence briefs.
- 23 May 2026· Latest140eventsPro-Russian DDoS dominates; Lazarus hits Tashkent educationNoName057(16) led 14 listings, Lazarus leaked Westminster International University in Tashkent, and Drupal Core SQLi plus Laravel-Lang join CISA KEV.
- 22 May 2026182eventsIranian APT Hits Defense as KimWolf DDoS Operator ArrestedUnit 42 maps Iranian APT Screening Serpens; FBI arrests Canadian KimWolf DDoS operator behind 1M+ devices; 60 breach claims include BMW AG and FSB.
- 21 May 2026120eventsLAPSUS GitHub, NoName Ukraine DDoS Lead 120-Event Forum DayLAPSUS-GROUP claims a GitHub data sale; The BlackH4t MD-Ghost names NATO; NoName057(16) hits Ukraine with 11 DDoS; 32 of 120 events are data-breach claims.
- 20 May 2026157eventsGitHub Breach, npm Supply Chain Attack, and Mass Data Leaks Dominate May 20GitHub confirms internal repo theft via VS Code extension; Microsoft disrupts Fox Tempest signing service; 53 critical data exposure events hit US, France, India.
- 19 May 2026137eventsExchange Markets Targets Gulf Finance; Fox Tempest DisruptedExchange Markets claims breaches at Qatar, Kuwait financial entities. Microsoft disrupts Fox Tempest malware-signing service. Drupal warns of critical patch. JAX7 targets Indonesian govt data.