MEFILES — Daily Intelligence on the Region's Hard Questions

Iran File — Lead

Eight Shipowner Groups Asked the UN to Rule Out Hormuz Fees Before Any Party Published a Text

The world’s shipowner associations wrote to António Guterres and the IMO on 3 August opposing compulsory transit charges in the Strait of Hormuz. They are the first party in this negotiation to put a signed, published document on the table; Iran, Oman and Washington have produced only anonymous officials and a leaked draft. Brent rose 3.8 percent on Thursday when the restrictive draft surfaced, having fallen about 8 percent on the week when a deal looked imminent. The rest of the edition runs on the same distinction between what was announced and what was confirmed — in Addis Ababa, in Juba, in Dirksen 226 and in twelve American water utilities.

MEfiles · Iran File · August 7, 2026

Brent priced terms, not deal

Daily Brent settlement, 28 July to 6 August 2026

CNBC daily settlements, five sessions

Eight trade associations — the Asian Shipowners' Association, BIMCO, Cruise Lines International Association, European Shipowners, the International Chamber of Shipping, INTERCARGO, INTERTANKO and the World Shipping Council — sent a joint open letter dated Monday 3 August to UN Secretary-General António Guterres and IMO Secretary-General Arsenio Dominguez, publicised on 5 and 6 August. The text is public. “Introducing compulsory charges for transit, or service fees that are a toll in all but name, through the Strait of Hormuz would represent a significant departure from established international practice,” it reads. The associations argue that such charges would set a precedent for other international waterways, weaken the transit-passage framework under the UN Convention on the Law of the Sea, and feed into shipping costs, energy prices and inflation. gCaptain identifies the gap they are writing into: the June memorandum of understanding tasks Iran and Oman with negotiating the strait’s administration and its “maritime services” without defining what that phrase covers. The industry is trying to close a definition before a government fills it.

What the associations are writing against exists in at least four incompatible versions, all published within about thirty hours. Fars News, citing a member of the Iranian parliament, described a draft that would bar Israeli cargo and Israel-related vessels, extend restrictions to countries “that have caused damage to Iran” until that harm is compensated, and impose penalties of up to 20 percent of cargo value; CNBC relayed it, said the text is still under review, and reported that the plan would restrict US shipping and that Washington rejects any “impediments.” Fars is affiliated with the Islamic Revolutionary Guard Corps and the parliamentarian is unnamed. Against that, an Iranian official told MS NOW there will be “no fees or tolls,” and a US official told ABC News the deal “will not have tolls or charges” — two anonymous officials on opposite sides of the same table saying the same thing. The Times of Israel, citing one senior Iranian official, puts Iran at 5 to 7 percent of cargo value, Oman at around 3, Washington at zero. CBS reported Iran’s state agency saying the parties are close on arrangements but not on a full reopening. In the Oval Office on 6 August, Trump said no deal has been reached and the blockade of Iranian ports stays.

The market is pricing the terms rather than the existence of an agreement. CNBC’s settlements show Brent down about 8 percent over the week to 6 August after Treasury Secretary Scott Bessent said a deal might be imminent, then up 3.8 percent to $82.49 on Thursday as the restrictive draft circulated; WTI closed at $77.29, up 2.8 percent. Underneath the pricing, the waterway is barely moving: Al Jazeera counted eight transits on Monday 3 August against roughly 130 vessels a day before the war began on 28 February. The security frame hardened on the same day. A senior Saudi official, speaking anonymously to Reuters and CNN, said intelligence indicates Iraqi militias coordinating with the Houthis are preparing imminent attacks under IRGC guidance, with Saudi energy infrastructure, ports and airports named as targets. That warning arrived one day before Saudi Arabia, Turkey and Pakistan were due to sign a joint defence agreement — reported by Reuters on two regional sources and by AFP on a source close to the Saudi military, which says Jeddah where other copy says Riyadh. No government announced it on the record, and the contents were not available to any outlet.

Assessment: What changed today is that a non-state party got a document into the file first. Eight associations with named signatories and a published text now sit against three governments represented by unnamed officials and a leaked draft nobody will own. That asymmetry will shape how the eventual text is read: any charge Tehran and Muscat agree will be measured against a standing industry objection lodged in advance at the UN. Distrust in three directions. The Fars draft is one unnamed parliamentarian relayed through an IRGC-affiliated agency, and its 20 percent penalty should be treated as a bargaining position, not a term. The matching “no fees” lines from an Iranian and an American official are coordination, not corroboration. And Riyadh’s warning of imminent attacks came from a party to the conflict on the eve of a signing it conveniently justifies. The substantive fight is over a noun. Tehran has stopped saying tolls and started saying service fees for security and environmental protection; the associations wrote to say a service fee is a toll in all but name. Whoever wins the word wins the precedent, and not only here.

Sources: All About Shipping — full text of the eight associations' letter to the UN and IMO · gCaptain — industry warns against Hormuz transit fees; June MoU leaves “maritime services” undefined · Al Jazeera — Hormuz tolls would harm livelihoods worldwide, shipowners warn · CNBC — Fars-sourced draft would bar Israeli cargo and impose penalties up to 20% of cargo value · ABC News — US official says the deal “will not have tolls or charges” · CBS News — Iran’s state agency says close on new arrangements but not a full reopening · CNBC — Brent settles at $82.49, up 3.8%, as the restrictive draft surfaces · The Times of Israel — Trump says no deal reached; Iran seeks 5–7% of cargo value, Oman around 3%

The Cartoon — August 7

“It isn’t a toll, it’s a service fee. The sign is still being painted.”

MEFILES · the cartoon · Eight shipowner associations wrote to the UN and IMO on 3 August opposing Hormuz charges; no government has published a text

$82.49

Brent settled up 3.8 percent on Thursday as the restrictive draft surfaced, after falling about 8 percent on the week

CNBC daily settlements, 6 August 2026

5.6M

People projected to be forcibly displaced or stateless across the Sahel Plus region by end-2026, from 4 million in September 2025

UNHCR projection, Sept 2025 to Dec 2026

1.5 tonnes

Bullion the FT reports the RSF took from Sudan’s central bank and state refinery, worth $100m at the time; the RSF denies involvement

Financial Times via Semafor and Sudan Tribune, 4–6 August 2026

Senators in the room for the Senate’s Brotherhood hearing — the chair, with five Democrats boycotting and six Republicans absent

C-SPAN and Algemeiner, 5 August 2026

US states reporting water-utility intrusions by Thursday, up from seven on Sunday, with no agency naming an actor

The Record (12) and CBS News (7), 2–6 August 2026

Iran File

The regime, the IRGC, the proxies, the strait — read from the Gulf, not from Washington.

Hormuz traffic, before and now

Vessel transits per day: pre-war average against Monday 3 August 2026

Al Jazeera, 5 August 2026

Terms, Not Existence

Fars Published a Hormuz Draft That Excludes Israeli Cargo While Two Officials Said There Are No Fees

Three accounts of the same Iran–Oman text circulated inside fifteen hours on 6 August. No government has published the document, and the oil market moved on the most restrictive version.

Fars News, which is affiliated with the IRGC, reported a draft plan citing a member of the Iranian parliament who was not named: it would bar Israeli cargo and Israel-related vessels from the Strait of Hormuz, extend restrictions to “countries and individuals that have caused damage to Iran” until that harm is “compensated,” and impose penalties of up to 20 percent of cargo value on violators. CNBC, relaying the report, said the text remains under review, that the plan would restrict US shipping, and that Washington rejects any “impediments.” Hours earlier an Iranian official described as “linked with the agreement” told MS NOW that shipping would face “no fees or tolls” under the temporary arrangement, and a US official told ABC News at 15:03 EDT that the deal “will not have tolls or charges.” At 21:08 EDT, CBS News reported Iran’s state news agency saying the two sides were close on new arrangements for the strait but not on a full reopening. Trump said “a lot of progress had been made.”

The price series is the cleanest record of what changed. On CNBC’s settlements, Brent closed at $84.09 on 28 July, jumped 7.9 percent to $90.74 on 29 July, fell 4.7 percent to $83.77 on 3 August as Treasury Secretary Scott Bessent said a deal might be imminent, and then rose 3.8 percent to $82.49 on Thursday 6 August as the restrictive draft surfaced. WTI settled at $77.29, up 2.8 percent. CNBC put the week’s cumulative decline at roughly 8 percent before Thursday’s reversal. What the market repriced was not the existence of an agreement — that had been briefed all week — but its contents. Traffic itself has not recovered: Al Jazeera reported eight vessels transited the strait on Monday 3 August, against roughly 130 ships a day before the war began on 28 February.

The industry moved before either draft was published. Eight associations — the Asian Shipowners' Association, BIMCO, Cruise Lines International Association, European Shipowners, the International Chamber of Shipping, INTERCARGO, INTERTANKO and the World Shipping Council — wrote to UN Secretary-General António Guterres and IMO Secretary-General Arsenio Dominguez on Monday 3 August. “Introducing compulsory charges for transit, or service fees that are a toll in all but name, through the Strait of Hormuz would represent a significant departure from established international practice,” the letter says, arguing the precedent would weaken transit passage under UNCLOS and feed energy costs. gCaptain notes the June memorandum of understanding tasks Iran and Oman with negotiating the strait’s administration and “maritime services” without defining the term. CNBC dates that memorandum to 17 June, with a 60-day free-transit window; other outlets say only June, so the 16 August expiry rests on one outlet.

Assessment: Two leaks, two audiences. The Fars version is a negotiating position dressed as a text: an unnamed legislator, an IRGC-linked outlet, and clauses — Israeli cargo, compensation for damage — that read as demands to be traded away rather than terms agreed with Muscat. The “no tolls” line is equally interested, carried by one anonymous Iranian official and one anonymous American one, both of whom benefit from calm before a clock runs out. The shipping associations are the only party on this file with a signed, published, attributable document, and their target is precise: not tolls, which nobody admits to, but the undefined phrase “maritime services” that the June memorandum left for Tehran to fill in.

Sources: CNBC — Fars-sourced draft would restrict Israeli and US shipping, 20% cargo penalty · ABC News — US official says the deal “will not have tolls or charges” · CBS News — Iranian state agency says close on arrangements but not full reopening · CNBC — Brent settles $82.49, up 3.8%, as restrictive draft surfaces · All About Shipping — full text of the eight associations' letter to the UN and IMO · Al Jazeera — eight transits on 3 August against roughly 130 a day pre-war

A Warning Before a Signature

Riyadh Warned of Imminent Attacks One Day Before Signing a Defence Pact With Turkey and Pakistan

A senior Saudi official, unnamed, told Reuters that Iraqi militias coordinating with the Houthis are preparing strikes under IRGC guidance. The agreement due to be signed Friday has no published contents.

The warning came on Thursday 6 August from one senior Saudi official who spoke anonymously. CNN’s version has the official citing “multiple intelligence reports” from Saudi, American and regional services indicating that Iraqi militia members, “in coordination with the Houthis,” are planning to attack “in the very near future” under IRGC guidance; Ynet reports the target set as Saudi civilian infrastructure — energy facilities, ports and airports. The same official said Saudi–US cooperation remains “very high” at all levels, including operationally with CENTCOM. There is a kinetic precedent nine days old: the Jerusalem Post notes that on 29 July Saudi Arabia said it had struck Iran-backed groups in Iraq jointly with CENTCOM, after blaming them for drone attacks on Saudi oil facilities, and that the militias said they would respond. The Critical Threats Iran Update of 1 August reports IRGC covert cells established in Iraq during the ceasefire, per eight Iraqi sources speaking to Reuters.

The pact itself is thinly sourced on everything except the date. Reuters cites two regional sources with direct knowledge; AFP cites one source close to the Saudi military and one close to the Saudi government, quoting the latter: “It was under discussion for a long time but the latest developments in the region expedites it.” AFP places the signing in Jeddah; Reuters-derived wire copy has Erdoğan travelling to Riyadh. The principals are Crown Prince Mohammed bin Salman, President Recep Tayyip Erdoğan and Prime Minister Shehbaz Sharif, with Roya News reporting that Sharif and army chief Asim Munir had already arrived in the kingdom. No outlet has obtained the contents. Saudi Arabia and Pakistan already hold a Strategic Mutual Defence Agreement, signed 17 September 2025 at Al-Yamamah Palace, with a clause treating an attack on one as an attack on both.

The southern half of the threat picture remains claimed rather than confirmed. On Wednesday 5 August, Houthi military spokesman Brigadier General Yahya Saree said his forces “successfully targeted the Saudi oil tanker Wafa in the northern Red Sea, off the coast of Yanbu, with a number of ballistic missiles,” and in a later statement claimed a missile strike on the Saudi tanker Daisy in the Gulf of Aden. Gulf News reports these were the eighth and ninth Saudi tankers targeted since the blockade of Saudi ports began, on figures supplied by the Houthi spokesman. Seatrade Maritime wrote that the Wafa incident “has not been independently verified”; TWZ said the same of Saree’s account. On Thursday the Houthis claimed attacks on Saudi troop concentrations inside Yemen and a “sensitive target” at Najran Airport. No Saudi military or maritime authority has commented on damage or casualties.

Assessment: Read the warning as a document with a function rather than as intelligence. It is one anonymous official from a government that is a party to the fighting, briefed the afternoon before that government signs a defence agreement it has not described, and it pre-authorises whatever Riyadh does next. The variable worth watching is not the threat but the clause: whether Turkey is joining the collective-security language Pakistan already has, or a looser training and industrial arrangement. Nobody has reported which, and the distinction determines whether Ankara has just taken on Iranian-aligned attacks on Saudi soil. Note also what the hedge implies about the Hormuz talks — a settlement that leaves Tehran collecting anything is a settlement Riyadh insures against.

Sources: CNN — Saudi official cites multiple intelligence reports on Iraqi militia and Houthi coordination · Jerusalem Post — Saudi warning, and the 29 July joint strikes with CENTCOM in Iraq · Ynet — target set named as Saudi civilian energy, port and airport infrastructure · Manila Times/AFP — Saudi Arabia, Turkey and Pakistan to sign defence pact Friday, per sources · Roya News — Sharif and army chief Asim Munir already in Saudi Arabia · Critical Threats — Iran Update, 1 August: IRGC cells in Iraq per eight Iraqi sources to Reuters

Sahel Monitor

Mali, Burkina, Niger, the AES bloc, JNIM, and the Russian bargain — security as economics.

Last Body Still Seized

The African Union Sits on the Sahel Today for Three Governments That Have Left Everything Else

The AU Peace and Security Council receives a Sahel briefing on Friday, according to a preview published a day ahead by the Addis Ababa tracker Amani Africa. No outcome document existed at filing.

Amani Africa, a non-partisan specialist tracker of AU process, published on 6 August that the Peace and Security Council would be briefed on the situation in the Sahel on Friday 7 August, with the session opening on remarks by a Permanent Representative it names as Mohamed Khaled; the preview does not specify his delegation. A preview is not a readout, and no communiqué has been issued. The same preview carries a casualty figure that has not been matched in any wire dispatch reviewed here: that JNIM attacked Niamey’s international airport in June 2026, killing more than 30 troops and civilians. It sits in a procedural tracker’s scene-setting, not in an investigation, and it should be read that way until a news agency confirms it.

What the Council is seized of is a file whose three governments have spent eighteen months exiting the institutions that used to hold it. Mali, Burkina Faso and Niger formally withdrew from ECOWAS on 29 January 2025 after declining a six-month extension, per Amani Africa; Niger’s exit took effect on 29 July 2025, according to the IOM’s Niger Crisis Response Plan 2026. All three have withdrawn from the International Criminal Court, recorded in a 2 July 2026 dispatch by Tamara Aburamadan of Human Rights Watch’s International Justice Program. Burkina Faso forced the closure of the UN Human Rights Office, per an HRW dispatch by Sahel researcher Ilaria Allegrozzi dated the same day; HRW’s country page puts displacement inside Burkina Faso at more than two million. UNHCR expects 5.6 million forcibly displaced and stateless people in the Sahel Plus region by the end of 2026, against four million in September 2025.

Assessment: The measurable thing today is not the briefing but the language of whatever follows it. A communiqué that names the Russian-controlled Africa Corps, or the ICC withdrawals, costs the AU its remaining access to Bamako, Ouagadougou and Niamey; a communiqué that expresses solidarity costs nothing and means nothing. The AU’s institutional incentive is the softest text available, which is why the South African outlet defenceWeb framed the file this week as demanding action beyond assurances of solidarity. The AES states have already absorbed the price of walking out of ECOWAS. That is the ceiling on what any continental body can now charge them.

Sources: Amani Africa — preview of the PSC’s Sahel briefing, 6 August 2026 · Amani Africa — the AES withdrawal from ECOWAS and regional integration instruments · Human Rights Watch — Mali country page, including the 2 July 2026 ICC-withdrawal dispatch · Human Rights Watch — Burkina Faso country page, UN rights office closure and displacement · IOM — Niger Crisis Response Plan 2026, date of ECOWAS exit · UNHCR — Sahel emergency, 5.6 million projection for end-2026

Eight Dead at Kyrnia

Human Rights Watch Puts Russia’s Africa Corps Over a Cattle Market, and Nobody Has Answered

HRW’s investigation into 15 June airstrikes in central Mali found eight civilians killed, three of them children, and no confirmed JNIM fighters among the dead. Neither Africa Corps nor the Malian authorities have responded in material reviewed here.

In a release dated 31 July 2026, Human Rights Watch found that the Russian government-controlled Africa Corps carried out airstrikes in central Mali on 15 June that killed eight civilians, three of them children. Two munitions struck near the village chief’s residence and a cattle market at Kyrnia. HRW reports no confirmed JNIM fighters among the dead. This is an investigative finding by a rights organisation, not a claim by a belligerent — and also not a fact independently established by a news agency. It was picked up secondhand by Eurasia Review on 1 August. In the material reviewed for this desk, neither Africa Corps nor the Malian authorities have offered a response, and no wire has matched the finding.

The same force has been losing ground. On 25 April 2026, JNIM and the Azawad Liberation Front executed a coordinated nationwide offensive and recaptured Kidal; Malian Defence Minister General Sadio Camara was killed the following day in a vehicle-borne suicide attack on his home at Kati, a death confirmed by government spokesperson Issa Ousmane Coulibaly and reported by Al Jazeera. Africa Defense Forum — which is published by US AFRICOM and has an editorial interest in the failure of the Russian model — described Africa Corps on 12 May as a 2,500-member successor to Wagner, first deployed to Mali in 2021, and called Kidal its latest defeat. Its 31 March piece argued that after Prigozhin’s death in 2023 the Russian defence ministry took control, kept fighters close to base flying drones and training Malian soldiers, and centred decisions in Moscow. CFR’s Global Conflict Tracker describes a Russian retreat from northern Mali in 2026.

The command question inside the alliance holding Kidal remains open. Militant Wire, in analysis published around 4 August, argues the April offensive brought into the open what had long been suspected: growing military cooperation between the FLA and JNIM. Small Wars Journal, on 11 May, identified Alghabass Ag Intalla — photographed in Kidal on 26 April — as the FLA figure handling relations with the al-Qaeda affiliate. Both are analyses rather than reporting from the ground.

Assessment: The airstrike finding and the loss of Kidal are one fact seen from two angles: a force that fights from the air and from behind the wire generates civilian dead and does not hold terrain. That is the shape of the bargain Bamako bought. Discount AFRICOM’s publication where it is grading its own competitor, and discount equally the assumption that a separatist front and an al-Qaeda affiliate can co-govern a city indefinitely — that arrangement collapsed in 2012–13. The readable signals are the first public friction over Kidal’s administration, the first FLA distancing from the fuel campaign, and whether Assimi Goïta, who took the defence portfolio himself in May, appears in public.

Sources: Eurasia Review — HRW says Africa Corps airstrikes killed civilians in Mali · Human Rights Watch — Mali country page carrying the 31 July release · Al Jazeera — Mali’s defence minister Sadio Camara killed amid coordinated attacks · Africa Defense Forum (US AFRICOM) — Mali siege reveals weakness of mercenary model · Africa Defense Forum (US AFRICOM) — Africa Corps' hands-off approach in Mali proves costly · CFR Global Conflict Tracker — violent extremism in the Sahel

Sudan Crisis Monitor

SAF versus RSF, the sieges and the famine, the gold economy, and the diplomacy of press releases.

The bullion and its market

Stolen central-bank gold and the trade it is laundered into

1.5t

Bullion taken from the central bank and state refinery

$100M

Its value at the time, per the FT

$1BN

Sudan–UAE gold trade in 2025, per an Emirati official

29t

UAE gold imported directly from Sudan in 2024, from 17t in 2023

Financial Times via Semafor and Sudan Tribune (Aug 2026); Swissaid 2024 data; Emirati official via Semafor

Laundering the Ingots

The Stolen Bullion Has a Named Buyer and a Single-Source Route Out Through Juba

Sudan Tribune’s 6 August field report supplies the mechanics the Financial Times investigation left as a border crossing — and rests them on one anonymous trader.

The Financial Times published an investigation around 4 August which, as relayed by Semafor the same day, found that the UAE received more than $100 million in gold bullion stolen by the Rapid Support Forces from Sudan’s central bank and the state refinery. Sudan Tribune’s rendering is more specific: at least 1.5 tonnes of bullion, worth $100 million at the time, plus jewellery taken from commercial bank vaults, moved across borders into Chad and South Sudan. Sudan Tribune describes the FT’s sourcing as an eyewitness account corroborated by three sources familiar with the event. The RSF denies involvement, and Sudan Tribune states that details of the raid remain disputed. The Files could not open the FT original; every figure in this paragraph reaches us at one remove.

What was new on 6 August was the route rather than the theft. Sudan Tribune, reporting from Juba, quotes a trader identified only by changed initials, “F.A.”, who describes raw unrefined ingots arriving continuously by truck and motorcycle through unmonitored corridors from the mines of Darfur and South Kordofan; purchase in cash US dollars at prices significantly above the Central Bank of Sudan’s official rate; resmelting, recasting and consolidation to legitimise the metal; then export by air from Juba International Airport. That is one anonymous trader. It sits inside a documented pattern: Swissaid recorded 29 tonnes imported by the UAE directly from Sudan in 2024, up from 17 tonnes in 2023, alongside 27 tonnes via Egypt, 18 via Chad and 9 via Libya, and puts undeclared African artisanal gold reaching Dubai at roughly $30 billion a year.

Two figures complicate the standard framing. Central Bank of Sudan data cited by Swissinfo shows the UAE took about 90 percent of Sudan’s official gold exports in the first half of 2025, meaning the licit and illicit channels share a destination. And the Sudan Transparency and Policy Tracker, in an April 2026 report carried by Radio Dabanga, estimates 50 to 80 percent of Sudanese production is smuggled and argues that Khartoum’s own centralisation of gold exports “counterproductively encouraged smuggling.” On the destination side, Swissinfo reported in January 2026 that the UAE, grey-listed by the Financial Action Task Force from 2022 to 2024 and delisted after tightening gold and free-zone oversight, is due its next FATF review in 2026. Nothing in the retrieved record indicates that review has been scheduled or held.

Assessment: The buyer has been reportable for two years; the corridor is what changes behaviour, and the corridor is currently carried by one trader with altered initials. Treat the Juba mechanics as a lead, not a finding, until a second source walks the same route. The STPT line is the item most likely to be dropped in retelling, because it implicates the internationally recognised government’s export policy rather than the paramilitary’s looting. Note also what the calendar offers: the only instrument with a fixed date attached to it is the FATF review, and no one has published when it falls.

Sources: Sudan Tribune — Juba field report on gold laundering route · Semafor — UAE procured $100m in stolen Sudanese gold, investigation finds · Swissaid — UAE more than ever a hub for conflict gold · Dabanga — STPT report: embargo squeezes economy, encourages smuggling · Swissinfo — Sudan war, UAE gold trade and the FATF record · UN News — Security Council told 8 million in South Sudan face crisis hunger

Announced, Not Driven

SAF Says the El Obeid Road Is Open; Dabanga Reports Locals Dispute the Reopening

The Al Sadarat highway recapture is the army’s largest claimed gain of the year, and the only reporting of residents contradicting it reaches The Files through an aggregator.

Sudan War Monitor recorded the offensive that began on Saturday 25 July as one of the army’s largest of the year, taking settlements along the Al-Sadarat Highway — also rendered the Al-Ingaz Al-Gharbi Highway — which links greater Khartoum to El Obeid via Jabra al-Sheikh and Bara. By Sunday morning army-aligned forces held the main settlements, restoring a direct road link severed since April 2023. Al Jazeera reported the army’s claim of control on 27 July. Ahram Online notes that Bara, North Kordofan’s second city roughly 45 kilometres east of El Obeid, has changed hands several times in the war. Security Council Report’s What’s In Blue uses the careful verb: SAF “announced” recapture of the highway and five key towns, and the Council assesses the gain significantly improves the army’s ability to reinforce positions around El Obeid.

The gain and its usability are separate questions. A cross-outlet comparison by the aggregator NewsCord records Al Jazeera framing the story as regained access while Radio Dabanga reported that locals dispute the road reopening — The Files could not open the Dabanga original, and flags the contradiction as second-hand. Meanwhile the siege of El Obeid is being prosecuted from the air, where a road matters less. MSF, citing the International NGO Safety Organisation, reports North Kordofan recorded the highest number of drone strikes in Sudan in 2026, at least 141 attacks between 1 January and 8 July. UNFPA’s 2 July flash update described near-daily drone attacks on El Obeid systematically targeting power substations, fuel stations, water facilities and healthcare infrastructure.

Both commands converted the same week into mobilisation announcements. Long War Journal — a project of the Foundation for Defense of Democracies, with a declared posture on Gulf and Iranian arms flows — assessed on 6 August that Al Sadarat is the army’s most significant success against the RSF in the war’s fourth year, and reported a 31 July speech in which Mohamed Hamdan Dagalo called on supporters to assemble fighters for a renewed offensive toward Khartoum and announced mobilisation for Kordofan. Sudan Tribune’s Arabic service, reporting from Nyala on 4 August, framed the same turn toward tribal mobilisation in Darfur on a single informed RSF source. On 3 August in Khartoum, Sudan Tribune reported Yasser al-Atta telling an assembly of fighters the army was applying a doctrine of “moving on all axes” to eliminate the RSF before the end of this year.

Assessment: A corridor is verified by traffic, not by communiqués, and nobody has yet published a convoy that used this one. Watch for that before treating the reopening as a humanitarian fact. Note too that the two sides' announcements are complementary rather than contradictory: an army promising eradication by December and a paramilitary summoning tribal levies are both recruiting, and both need the road to sound decisive. The gold ledger above is the other half of this page — the drone counts over North Kordofan are the expenditure line for which Juba and Dubai supply the revenue.

Sources: Sudan War Monitor — army restores Khartoum–El Obeid road link · Al Jazeera — Sudan’s army claims control of major highway · Security Council Report — Sudan closed consultations, What’s In Blue · Long War Journal — SAF gains force strategic adjustment from RSF · MSF — El Obeid services limited as drone attacks intensify · Sudan Tribune — army vows to eliminate RSF before year’s end

The Brotherhood Brief

The organization as structure — designations, networks, finances, legal battles. Structure over slogans.

One Chair Filled

Cruz Held His Brotherhood Hearing Alone, and Six of His Own Republicans Also Stayed Away

The Senate Judiciary subcommittee heard three witnesses on 5 August with a single senator in the room. The absent majority has drawn no questions from anyone covering it.

The Subcommittee on Federal Courts, Oversight, Agency Action, and Federal Rights met at 2:30pm on Wednesday 5 August in Dirksen 226 under the title “Hidden in Plain Sight: Confronting the Muslim Brotherhood Network in America,” chaired by Sen. Ted Cruz (R-TX). Three witnesses testified: Lara Burns, a retired FBI special agent who worked the Holy Land Foundation financing case and is now a senior research fellow at George Washington University’s Program on Extremism; Arielle F. Klepach of the National Jewish Advocacy Center; and Kyle Shideler of the Center for Security Policy. C-SPAN’s programme note records that Cruz “was the only committee member in attendance,” and that beyond the five boycotting Democrats “no other Republican members attended.” The Algemeiner reported the same count independently. Six subcommittee Republicans other than the chair therefore did not appear at their own party’s flagship hearing on the file.

The hearing had been postponed from 20 May. As late as Saturday 1 August, Legis1 reported that the committee page still carried it as postponed with no new date, and Egypt Today wrote that until official notice was published the August date “remains a possibility rather than a confirmed congressional event.” It was stood up on roughly seventy-two hours' visible notice after an eleven-week gap. C-SPAN states flatly that the hearing “came a day after Abdul El-Sayed became the Democratic nominee for U.S. Senate in Michigan,” and that Cruz repeatedly tied El-Sayed to the Brotherhood. From the chair, Cruz said El-Sayed, “the son-in-law of a leading member of several Brotherhood groups, won Michigan’s Democrat primary for U.S. Senate. Perfect timing for this hearing.” No response from El-Sayed’s campaign appears in any of the coverage reviewed for this desk.

On substance, Cruz told the room that the Holy Land Foundation trial “produced an extraordinary body of evidence: wiretaps, internal memos, organizational charts, meeting transcripts, laying bare the Brotherhood’s sprawling American infrastructure,” and that post-October 7 campus protests “were not spontaneous. They were not organic.” Shideler testified that Brotherhood-linked organisations operate on “nearly every college campus” and had at times recruited young American Muslims who later committed violence, per the Algemeiner. All of it is assertion under oath in a proceeding with no minority-called witnesses and no cross-examination, because the minority did not attend. The Holy Land record is real as to what prosecutors alleged; CAIR and the Islamic Society of North America were listed as unindicted co-conspirators, which is a prosecutorial designation, not a charge or a conviction. CAIR denies acting for the Brotherhood and says it condemns all terrorism, including by Hamas.

Assessment: The reportable fact of the week is not the testimony, which was predictable, but the seating chart. A subcommittee majority that cannot field a second senator for its own signature hearing is telling you something about how much political weight the designation push carries inside the Republican conference, and no outlet in the coverage set asked a single absent Republican why. Note also what did not appear: no AP, Reuters or AFP staff copy on the hearing surfaced at all. That leaves the record in the hands of the committee page, C-SPAN and advocacy outlets, several of which are rewriting the same two originals. Treat dollar figures circulating through aggregators on El-Sayed’s donors as unverified until the underlying methodology is published.

Sources: Senate Judiciary — hearing page and written testimonies, 5 August 2026 · C-SPAN — full video and note that Cruz was the only member present · Sen. Cruz — opening remarks as delivered · Algemeiner — Cruz the only senator present; Shideler on campuses · Legis1 — hearing still listed as postponed on 1 August · Egypt Today — hearing “a possibility rather than a confirmed congressional event”

Venue, Not Premise

Five Democrats Refused the Hearing, and One of Them Reportedly Conceded the Object of It

The boycott was framed as a rejection of the threat. Blumenthal’s reported remarks, and the single legislative ask that came out of the room, both point somewhere narrower.

Sheldon Whitehouse (D-RI), Richard Blumenthal (D-CT), Mazie Hirono (D-HI), Alex Padilla (D-CA) and Peter Welch (D-VT) announced on Tuesday 4 August that they would not attend, and did not. Their joint statement, published by Whitehouse’s office, called the hearing a “political creepshow” and said “scapegoating Muslims may be a Texas Republican strategist’s idea of ‘solid gold' to whip up their voters,” adding that Democratic focus was on “rampant, non-stop Trump corruption.” Jewish Insider broke the boycott plan; asked to respond, a Cruz spokesperson said only, “Of course they are.” Fox News Digital, syndicated by WFMD, reports that Blumenthal said he planned to meet members of the Muslim community who had raised concerns about the Brotherhood, “which appears to be a terrorist organization,” while advocating tolerance and inclusion. That is reported speech reaching this desk through a syndication partner rather than the original, and it needs verification before it carries weight.

The hearing produced one concrete legislative ask. The National reports witnesses urged Congress to close what they described as a loophole letting designated organisations evade accountability by relaunching under new names. No bill text, sponsor or markup date for that has been reported. What exists instead is four measures live in the 119th Congress, including H.R.4097, styled the “Designate CAIR as a Terrorist Organization Act,” which per Egypt Today does not designate CAIR at all but directs the Secretary of State to review whether it meets the statutory criteria. Meanwhile the machinery has been moving through Treasury: three chapters designated on 13 January, and on 23 July one senior Egyptian Brotherhood official plus three individuals and three entities, with Secretary Scott Bessent saying those “operating under the guise of charities, businesses, or underground financial networks” would be “exposed, sanctioned, and held accountable.”

The sharper test is in Florida, where HB 1471 took effect on 1 July and Gov. Ron DeSantis designated CAIR, Antifa and the Muslim Brotherhood as domestic terrorist organisations the same day. CAIR and its Florida affiliate sued that day in the Northern District of Florida, represented by the ACLU and the Southern Poverty Law Center. Their complaint argues the statute “does not require that the designation be based on evidence; does not require State officials to satisfy any burden of proof; does not allow for review by a neutral decisionmaker prior to designation,” and that a designated organisation “simply cannot function or exist in Florida in any meaningful sense.” Under the law, state police recommend and the governor’s cabinet has seven days to approve or reject. Five weeks on, no ruling has surfaced.

Assessment: If Blumenthal’s reported line holds up against the Fox original, the American argument over the Brotherhood is not about whether the organisation is what its critics say it is. It is about who gets to hold the gavel and what the designation attaches to in practice — which is precisely the question the witnesses' “relaunch loophole” ask concedes is unanswered. Designation by name is cheap; designation that survives a successor entity is the hard part, and nobody has put it on paper. Watch the Northern District of Florida rather than Dirksen 226. A preliminary-injunction ruling there would be the first judicial test of a sub-federal Brotherhood designation, and it would set the terms the federal push has to live with.

Sources: Whitehouse Senate office — joint statement of the five boycotting Democrats · Jewish Insider — Democrats plan to boycott the hearing · WFMD, syndicating Fox News Digital — Blumenthal’s reported remarks · The National — witnesses urge Congress to close the relaunch loophole · US Treasury — OFAC action of 23 July 2026 · Bloomberg Law — CAIR challenges Florida’s designation statute

Western Media Watch

How NYT, WaPo, FT, BBC and the wires frame the region — what is emphasized, what is omitted, and what the gap reveals.

Headline Versus Body

MS NOW Headlined a Hormuz Agreement Its Own Body Called a Framework and Temporary

Across 4–6 August, the same unsigned Iran–Oman arrangement was rendered as progress, as a claim by a party, as a market event and — in one case — as an accomplished fact. No government has published a text.

The sequence is narrow and the copy is wide. AP, carried by PBS NewsHour on 4 August, hedged twice — “Iran and Oman make progress on deal to reopen Strait of Hormuz, officials say” — and credited the origin: the potential agreement “was first reported by The New York Times.” Bloomberg put the source in the headline at both ends on 6 August: “Iran Says Deal With Oman on Strait of Hormuz Agreed in Principle.” CBS News, in its live file updated 6 August, was alone in putting the limit in the lede, reporting Tehran close to agreeing new arrangements “but not for a full reopening,” per Iran’s state news agency. MS NOW, at 6:11pm EDT on 6 August, ran “Oman, Iran reach agreement to reopen Strait of Hormuz” — the only headline in the set to state the deal as an event with no attribution whatever. Its own body says Oman agreed to “the framework of a deal” to “temporarily” reopen, and that “It’s unclear whether the U.S. will support the deal.” The URL slug reads “over” where the headline reads “to reopen,” the signature of a late headline change.

The second divergence is about whose deal it is. CNN’s analysis, published 5 August, organised a bilateral Iran–Oman arrangement around Washington’s preferences: “An agreement on the Strait of Hormuz is taking shape – but not one Trump wants.” Al Jazeera the same day gave three parties three sets of interests and put the operative word in scare quotes: “Iran, Oman, US ‘close' to Hormuz deal: What do they all want?” NBC News, on a Cairo dateline, built the unresolved question into the headline and reported that Iran “has insisted on some measure of control over the strait, saying it will not go back to being an open international waterway, as it was before the war.” CNBC’s contribution was to price it: Trump’s remarks “drove oil prices lower and sent stocks soaring.” Before the war, one-fifth of the world’s traded oil and gas transited the strait, per AP.

One claim ran against the whole wave and almost nobody led on it. ABC copy, carried by AOL, reports that after letting a handful of ships through on a Wednesday — including two oil tankers — Iran said it had closed the strait again, accusing Israel of violating the ceasefire with an attack on Lebanon. That closure claim rests on Fars News, which the copy itself identifies as “affiliated with the Islamic Revolutionary Guard Corps.” Credit ABC for flagging the affiliation; this desk cannot date the underlying Israeli operation from the record available and does not treat the reclosure as established. It should be said plainly that we have not read the New York Times piece the wires credit, and are working from AP’s own crediting line.

Assessment: The pattern worth watching is not that outlets disagree — it is that the careful qualifiers live in the body and the confident verbs live in the headline, where aggregators, terminals and social cards harvest them. MS NOW’s slug change shows the editing went in the direction of certainty, not away from it. Distrust any figure attached to this story that lacks a named source: the brief for this desk turned up a $2m-per-vessel toll on a crypto-exchange news flash and an undated 40 percent transit figure, both of the type that get laundered into real copy within a week. The tell for a real agreement remains a published bilateral text. Nobody has one.

Sources: AP via PBS NewsHour — Iran and Oman make progress on deal, officials say; credits NYT as first report · MS NOW — headline states agreement reached; body says framework, temporary, US support unclear · Bloomberg — attribution to Iran carried in the headline itself · CNN analysis — an agreement taking shape, “but not one Trump wants” · Al Jazeera — three parties, three sets of interests, “close” in scare quotes · ABC via AOL — Iran says strait closed again, sourced to IRGC-affiliated Fars News

Two Wires, Two Cities

A Friday Defence Signing Reported by Reuters and AFP With No Named Official and No Agreed Venue

Saudi Arabia, Türkiye and Pakistan are said to be signing a joint defence pact today. Both wires rest on anonymous sources, and they place the ceremony in different cities.

The claim is that Mohammed bin Salman, Recep Tayyip Erdoğan and Shehbaz Sharif sign a joint defence agreement on Friday 7 August. Reuters attributes it to “two regional sources with direct knowledge of the matter” and locates it only “in Saudi Arabia.” AFP attributes it to “a source close to the Saudi army” — rendered by France 24 as “a source close to the Saudi military” — and names Jeddah, which France 24 then carried into its live-blog headline. The market wire First Squawk has Erdoğan travelling to Riyadh. That is three accounts, two cities and no on-record official from any of the three governments at the time this desk compiled. Downstream, the copy hardens: Ajel and Roya News each ran the story credited simply to “Reuters” and “AFP” in the headline, and the Times of Israel liveblog states the signing venue as Saudi Arabia flatly.

The aggregation layer is doing visible damage. One syndicated version of the story sits on a Daily Sun URL whose slug reads “the-phoenix-mercury,” an American basketball team — a pipeline error that would be invisible to any reader arriving by search or share. Against that, the most useful line in the set came from a Saudi outlet rather than a Western wire: Ajel was alone in supplying lineage, describing the pact as building on a previously signed “Joint Strategic Defense Agreement” involving the Crown Prince. Neither wire summary retrieved for this desk gave readers that continuity, which is the difference between a new alignment and the widening of an existing one.

Assessment: A single anonymous source close to one country’s military is thin ground for a trilateral treaty, and the venue discrepancy is the tell: sources with direct knowledge of a signing generally know the city. Expect the pact to be confirmed in some form today and expect the confirmation to be narrower than the trailer — that is the usual shape when a story is seeded to two wires before any government fronts it. The more durable point is structural. Western wire copy on Gulf security keeps arriving without institutional history, while the regional outlet that supplies it gets read as a national mouthpiece and discounted.

Sources: France 24 live — Saudi Arabia, Pakistan and Turkey set to sign defence pact in Jeddah, per AFP source · Ajel (Saudi) — pact to be signed today per Reuters; supplies the earlier Joint Strategic Defense Agreement lineage · Roya News — Saudi Arabia, Turkey, Pakistan to sign joint defense pact, credited to AFP · Times of Israel liveblog — signing placed in Saudi Arabia on Friday · Newsmax — syndicated version of the Turkey–Saudi–Pakistan pact report

Israel Press Review

Reading Haaretz, Times of Israel, Ynet and the Hebrew press — what Israeli media and officials are actually saying.

Three positions on one fee

Transit charge sought by each party as reported on 6 August; the Iranian and Omani figures rest on one unnamed senior Iranian official

The Times of Israel liveblog, 6 August 2026

Right of the Right

Erdan and Edelstein Launched a Party With Four Principles, No Name and No Slate

Two former Likud ministers announced a right-wing list in Tel Aviv on Thursday built on universal conscription and a refusal to sit with the Haredi parties. Only Bloomberg wrote down the second half of that.

Gilad Erdan, Israel’s ambassador to the UN from 2020 to 2024, announced the formation of a new right-wing party under his leadership at a Tel Aviv press conference on Thursday 6 August, joined by Yuli Edelstein, Knesset Speaker from 2013 to 2020 and chair of the Foreign Affairs and Defense Committee until 2025. The platform as stated: universal conscription legislation, a “broad Zionist government,” a refusal to sit in a narrow government, and — per Haaretz — a “national” probe into the October 7 failures. “The law will establish a simple principle: In the State of Israel, every citizen has rights and also duties,” Erdan said, per the Times of Israel liveblog. “Every citizen will serve in the military or national service.” The party has no name. Ynet reported on 2 August that Erdan had held talks with former Beit Shemesh mayor Aliza Bloch, reserve Col. Hezi Nechama and Olympic judo medallist Oren Smadga; the slate is not settled.

Erdan spent the launch defining the party by what it is not. “My entire life, I have been a right-winger. I never zig-zagged,” he told Israel National News. “I believe in the land of Israel, in settlement, and in governance, and I fiercely oppose the creation of a Palestinian state.” On tone: “I vehemently oppose the left’s views. But I never hated those who thought differently from me... Our enemies are in Tehran, Gaza, and Lebanon.” Asked by The Jerusalem Post whether he could partner with Gadi Eisenkot or Naftali Bennett, he said: “We’re not against anyone. It depends on what principles they believe in.” The one flat exclusion came not from him but from Bloomberg, which reported the pair launched “pledging not to sit in a future government with representatives of the ultra-Orthodox.” Edelstein resigned from Likud last month after the conscription bill presented by his Netanyahu-aligned successor Boaz Bismuth included wide-ranging yeshiva exemptions and a freeze on prosecuting draft evaders.

Assessment: The interesting divergence is not the Jerusalem Post’s date error — its copy says Tuesday, against Thursday everywhere else — but which outlet carried the binding commitment. Erdan’s own language keeps every door open, including to Eisenkot and Bennett; the Haredi exclusion appears in a Bloomberg summary, not in a quoted line. That asymmetry is how a coalition veto becomes deniable in September. Watch also for a correction that never comes: Ynet had Edelstein simultaneously talking to Benny Gantz inside Ayelet Shaked’s merger effort, and nobody has said on the record that the thread is dead. A party with four principles and no name is a bargaining position before it is a list.

Sources: Haaretz — Ex-Likud lawmakers launch party to woo right-wingers opposed to Netanyahu · Bloomberg — Israeli breakaway party eyes Netanyahu voters over draft impasse · Israel National News — Erdan on the right, settlement and political opponents · Jerusalem Post — Erdan at the launch on partnering with Eisenkot or Bennett · Times of Israel — Erdan and Edelstein to launch new right-wing party (curtain-raiser) · Ynet — Erdan’s talks with Bloch, Nechama and Smadga

Walking It Back

Trump Said No Hormuz Deal Exists, and the Israeli Press Split on Whether to Print the Caveat

In the Oval Office on 6 August the US president said no agreement had been reached and the blockade of Iranian ports stays. Israel National News led with the deal being near; the Times of Israel led with Iran’s negotiator mocking him.

Speaking to reporters on 6 August, Trump said no deal has yet been reached with Iran to reopen the Strait of Hormuz and that Washington will maintain its blockade of Iranian ports in the meantime. His characterisation: “We’re doing very well. I’m involved in the negotiation. I think we’re doing fine. It could be soon.” Israel National News rendered the same session on its 7 August homepage as: “President Trump predicts the war with Iran will end soon, stating that negotiations are going well and a deal to secure the Strait of Hormuz could be near.” The Times of Israel’s 6 August liveblog led instead on Iran’s Parliament Speaker and chief negotiator Mohammad Bagher Ghalibaf mocking Trump for repeatedly walking back military threats, and carried the standfirst into 7 August. The verbatim Ghalibaf line has not been sourced to an Iranian original.

On munitions the divergence is sharper. Trump again claimed the US has an “unlimited supply” of missiles, adding “We’re in great shape, but we always want more.” The Times of Israel set the quote explicitly against “mounting reports that Washington is actually running out of them.” The load-bearing figure behind those reports — that the US Army’s THAAD stockpile was depleted by nearly 80 percent during the war — reached Haaretz’s 5 August liveblog prefixed “Report:”, with no original publisher identified in the indexed text. Amit Segal, writing in Israel Hayom on 6 August, took the number as settled and argued a war of a few weeks had left the US military “in a position similar to that of the IDF before Oct. 7.”

The commercial terms remain two anonymous chains pointing opposite ways. A senior Iranian official, unnamed, told the Times of Israel Tehran is seeking 5–7 percent of cargo value from ships transiting the strait, with Oman discussing around 3 percent and Washington wanting no fees at all; the International Maritime Organization told ToI it could not comment. On 4 August, two regional officials told the Associated Press ships would enter through an Iranian-controlled route and exit through an Omani one, with service fees for security and environmental protection. An anonymous US official said any temporary routes would involve no Iranian approvals or charges, and that Washington remains committed to a status quo in which “no party controls the lanes or the ability to transit through them.”

Assessment: Two Israeli newsrooms heard the same president say a deal does not exist and filed it as, respectively, imminence and humiliation — the split tracks their readerships, not the transcript. The Segal column shows the mechanism that matters: a percentage that entered Haaretz labelled “Report:” with no named originator is a load-bearing premise in Israel Hayom’s magazine within a day, and from there it becomes an argument about American reliability. Note what nobody in the Israeli press has produced: a named source for either the 80 percent or the 5–7 percent. The Turkey–Saudi–Pakistan defence signing said to occur today rests on two regional sources to Reuters. Wait for the signature.

Sources: Times of Israel — 6 August liveblog: Trump says no Hormuz deal yet, blockade stays, ‘unlimited supply' of missiles · Times of Israel — 7 August liveblog: Ghalibaf standfirst, Turkey–Saudi–Pakistan signing per Reuters · Haaretz — 5 August liveblog: ‘Report:' THAAD depleted by nearly 80 percent; Vance denies confrontational Netanyahu meeting · Times of Israel — 4 August liveblog: AP’s two regional officials on the two-lane fee structure, US official contradicting · Al Jazeera — 6 August liveblog: Trump says war to end ‘pretty soon', Hormuz deal nears · Israel National News — homepage, 7 August: Trump predicts war will end soon

Digital Front Monitor

Cyber operations, information warfare and the infrastructure of control across the region.

Water incidents, four days apart

US states reporting water-utility intrusions, 2 August against 6 August 2026

CBS News (seven states) and The Record (twelve states)

Attribution Not Hardened

Five More States Joined the Water-Utility Count in Four Days, and No Agency Named the Actor

Reported intrusions at US water and wastewater systems expanded from seven states to twelve between 2 and 6 August. Every mainstream outlet in the window still hedges the attribution to Iran.

CBS News reported on or about 2 August that the United States was “investigating if Iran was behind” cyberattacks on water systems in seven states, naming Minnesota and Michigan. By 6 August, The Record, published by Recorded Future News, put the figure at twelve states, adding South Dakota and Georgia. That is a five-state expansion in roughly four days, and it is the only chartable series this desk found in the window. The per-state incident counts have not been verified here, and the disclosures have not been separated into new intrusions and old intrusions newly discovered — two different stories that the running total merges. The Hill carried a news piece on the morning of 7 August under the formulation “Iran-linked,” and Bloomberg used the same compound on 5 August.

The verbs are the story. The Washington Post wrote on 1 August that spy agencies “suspect” Iran is targeting water. CBS wrote “investigating if.” The Hill and Bloomberg wrote “Iran-linked.” No outlet retrieved in this window carries a flat declarative attribution to the Iranian state, and this desk found no formal on-the-record US government attribution statement. On the same morning it ran its news piece, The Hill sent a technology newsletter headlined “Is Iran to blame for America’s water system cyberattacks?” — a mainstream outlet putting the central question mark in its own subject line on day three. Fortune, on 5 August, framed the intrusion vector as unchanged default passwords on programmable logic controllers, which describes opportunistic scanning of exposed equipment rather than a directed campaign. No vendor has published named-APT research tying these intrusions to a tracked cluster. Tehran has issued neither denial nor claim.

Assessment: A disclosure curve is not an attack curve. Twelve states reporting is a measure of how many utilities looked and how many press offices published, and until someone separates fresh intrusions from newly-found old ones, the rising number will be read as escalation regardless of what it contains. The Fortune vector claim, if it survives a pull, points the other way: default credentials on internet-facing controllers are found by scanning, not selected by a state. Note what has not happened. Three days of coverage, no named US official attributing on the record, no denial from Tehran, no tracked-cluster research. The hedge is holding because the evidence has not yet forced it open — and hedges that hold this long usually break in one direction only when someone needs them to.

Sources: CBS News — US investigating if Iran was behind cyberattacks on water systems in seven states · The Record — Water system cyberattacks expand to 12 states as South Dakota and Georgia announce incidents · The Hill — Iran-linked cyberattacks target US water systems in multiple states · The Hill technology newsletter — “Is Iran to blame for America’s water system cyberattacks?” · Washington Post — Several states report cyberattacks; spy agencies suspect Iran targeting water · Fortune — Iranian hackers and America’s Achilles heel on water: default passwords

Wrong Week, Right Search Rank

A Late-July Advisory and an April One Are Circulating as Responses to This Week’s Intrusions

The federal warnings ranking highest on the water-utility story predate the incidents they appear to answer. So does most of the spyware and Israeli-cyber material surfacing alongside them.

The joint CISA, FBI and EPA update on Iran-affiliated threat actors targeting programmable logic controllers is roughly two weeks old, dating to late July. It is being recirculated this week as though it were a response to the Minnesota incidents; it predates them. Beneath it sits an EPA, FBI, CISA and NSA joint advisory on water systems and Iranian activity dated 7 April 2026 — four months old — which is also ranking high on searches for this week’s events. The Tenable blog post on the Minnesota utilities, published on or about 5 August, cites a CISA advisory identifier, AA26-097A; Tenable sells operational-technology exposure management, and the identifier has not been checked here against CISA’s own text or its date. Two documents written before an event do not become evidence about it by appearing above it in a results page.

The same dating problem runs through the adjacent files. Middle East Eye’s report on a Moroccan whistleblower describing Pegasus use against dissidents is about two weeks old and is surfacing in fresh-spyware searches. The Times of Israel piece on the national cyber chief describing a surge in Iranian attacks is dated 29 June. Symantec’s research on the Seedworm cluster and US infrastructure is from March. Citizen Lab’s “Hide and Seek” Pegasus survey is from 2018. SOCRadar’s Iran–Israel dashboard is continuously updated and undated, which makes it permanently appear current; it is a vendor marketing asset. On the partisan edge, legalinsurrection.com is still running the seven-state figure The Record superseded, and a piece on Iran and Minnesota water is circulating on a domain registered as cambridgeanalytica.org. This desk found no in-window activity on platform takedowns, AI-generated propaganda operations, new wiper deployments, or Israeli and Gulf offensive cyber.

One in-window item deserves separating from the pile rather than folding into it. Bloomberg reported on 6 August that Wall Street firms were targeted by attempted cyberattacks. The word in Bloomberg’s own headline is “attempted.” No attribution is visible at headline level. An attempt against a bank and an intrusion into a utility are not the same class of fact, and the pressure this week runs toward stacking them into one narrative about one state. A note on this desk’s own limits: the sweep behind this section verified publishers, headlines, URLs and publication dates, but not article bodies. There are no quotes in this section because none were verified. Where a claim rests on a vendor blog or a partisan site, it is labelled above.

Assessment: Recirculation is the cheapest form of escalation. Nobody has to fabricate anything: a search engine promotes a four-month-old federal advisory to the top of a live story, and readers reasonably infer that Washington has responded when Washington has said nothing new. The vendor dashboards make this worse by design, since undated continuous updating is indistinguishable from breaking news. Watch two things into the weekend. Whether the Wall Street attempts acquire an Iranian subject without new evidence, and whether the water-versus-electricity regulatory gap — mandatory standards for the bulk grid, voluntary for water — becomes the legislative vehicle this story is eventually spent on.

Sources: CISA — Updated warning on Iran-affiliated threat actors targeting PLCs (late July, predates the Minnesota incidents) · EPA — Joint EPA, FBI, CISA and NSA cybersecurity advisory on water systems, 7 April 2026 · Tenable — Coordinated cyberattack on Minnesota water utilities, citing CISA advisory AA26-097A (vendor source) · Bloomberg — Wall Street firms targeted by attempted cyberattacks · Middle East Eye — Whistleblower says Morocco spied on dissidents with Pegasus (roughly two weeks old) · Bloomberg — Iran-linked cyberattacks on US water utilities continue

Watch Tomorrow — The Files' Forward Radar

Iran File: Whether the IMO or the UN Secretary-General responds on the record to the eight associations' 3 August letter, and whether any of the three governments publishes a Hormuz text rather than briefing it anonymously.
Sahel Monitor: Whether the AU Peace and Security Council communiqué from Friday’s Sahel session names Russia’s Africa Corps, the Kyrnia airstrikes or the AES withdrawal from the ICC, or confines itself to solidarity language.
Sudan Crisis Monitor: Whether any wire matches Radio Dabanga’s report that residents dispute the reopening of the Al Sadarat highway, or SAF publishes convoy movements into El Obeid to substantiate its claim.
The Brotherhood Brief: Whether any of the six absent subcommittee Republicans explains the no-show, and whether the Fox News Digital original confirms Blumenthal’s reported description of the Brotherhood as a body that “appears to be a terrorist organization.”
Western Media Watch: Whether MS NOW amends its headline — “Oman, Iran reach agreement to reopen Strait of Hormuz” — to match its own body text, which says framework and temporarily, and whether any wire obtains a named official on the Jeddah-or-Riyadh signing.
Israel Press Review: Whether Erdan and Edelstein name their party and publish a slate, and whether Ynet and Israel Hayom carry Trump’s on-the-record statement that no Hormuz deal has been reached.
Digital Front Monitor: Whether CISA, the FBI or the EPA issues a formal attribution naming an actor rather than “Iran-linked,” and whether the state count moves past twelve — and if so, whether the new disclosures are fresh intrusions or old ones newly found.