MEFILES — Daily Intelligence on the Region's Hard Questions

Iran File — Lead

Versailles deadline expires unsigned, and Washington claims total control of a strait three ships crossed on Monday

The 60-day negotiating window Donald Trump signed at Versailles in June ran out on Monday 17 August with no wider deal, no reopening of the Strait of Hormuz and no lifting of the US naval blockade. Trump told reporters in the Oval Office that the United States has “total control over the Strait” and that he is not seeking an extension. Trackers counted between three and twelve commercial transits in a 24-hour period against a pre-war baseline of roughly 110 a day. Oil barely moved, which is the part neither capital’s account explains.

By Abdulaziz Alkhamis, editor · Iran File · August 18, 2026

Hormuz: whose count?

Daily commercial transits by tracker and window, against CNN's stated pre-war baseline

CNN citing MarineTraffic (24h, 17 Aug 2026); Windward Maritime Intelligence Operations Center (24h, 16 Aug 2026); baseline as given by CNN

Four prices, one day

Brent quotes published for 17 August 2026 by four outlets, plus Al Jazeera's 12 August print

$89.28

CNBC, front-month

$88.31

Trading Economics, CFD

$91.53

Fortune, 6am ET

$89.53

Al Jazeera, 12 Aug futures

CNBC (front-month, 0620 GMT), Trading Economics (CFD), Fortune (6am ET), Al Jazeera (October futures, 12 Aug)

The expiry itself is confirmed. Associated Press, in copy filed Monday by Joseph Krauss and syndicated through the Washington Post, PBS and NBC, reported the memorandum’s 60-day clock ending with detailed nuclear talks not yet begun and contacts running indirectly through mediators. AP’s added judgement — that the two sides are further apart than they were in June — is analysis, not an announcement, and should be read as the wire’s assessment. What is on the record from the American side is narrower and more revealing. Trump told reporters, per The Hill, that Washington has “total control over the Strait” and that Iran is not likely to “make the kind of deal that I feel is necessary”; CNBC reported he is not looking to extend the ceasefire framework and claimed informal contacts are under way. Asked whether his patience with Oman had run out, he said, per CBS News: “No, I don’t think they behaved very well, but we’d handle them very easily, just like we do other things.” The more incendiary line attributed to him — a threat to bomb Oman — reached print through a single channel and needs the caveat below.

Tehran’s position has not moved in three weeks, and it is a sequencing position. Foreign Ministry spokesman Esmail Baghaei said on 10 August, via Tasnim and quoted by CNBC: “As long as the U.S. naval blockade continues, the necessary conditions for the reopening of the Strait of Hormuz do not exist.” Foreign Minister Abbas Araghchi told cabinet on 2 August that the Tehran–Muscat track on shipping routes was close to finalisation, while Al Jazeera reported Iran insisting the waterway will never return to its pre-war status. Washington’s mirror image came from Defense Secretary Pete Hegseth in Panama on 13 August, speaking to reporters after addressing the crew of the destroyer USS Gridley: “Indefinitely the United States Navy can maintain a blockade.” Neither capital has conceded the order of operations, which is why the deadline passed without a document. Meanwhile CBS reported, on one unnamed US official, that the carrier George Washington has left Vietnam for the Middle East to relieve the Abraham Lincoln — an Indo-Pacific drawdown feeding the Gulf that has drawn almost no coverage.

The traffic data does not support the claim of control, and it does not support a total closure either. CNN, citing MarineTraffic over 24 hours on 17 August, counted at least three commercial transits of Hormuz — two tankers inbound, one vessel outbound — against a pre-war baseline it puts at about 110 ships daily. Windward’s operations centre counted twelve transits in its own 24-hour window on 16 August. CNBC, citing Kpler, said traffic “appeared to grind to a halt” on Sunday. Lloyd’s List Intelligence, on a weekly basis for 27 July to 2 August, logged 84 transits against 45 the week before, with a lower non-Iranian-linked subset of 52 against 28. Against all of it, Fortune reported the administration saying nine million barrels a day are still leaving the strait. CNN’s 15 August tally puts 56 reports of vessel damage since the war began on 28 February, and notes that 16 of 18 projectile strike incidents reported by UKMTO since 6 July occurred on the southern Omani workaround route. Bab al-Mandeb, in the same 24 hours, handled 37 ships.

Assessment: The deadline mattered less than what its passing exposed: two governments with identical structures and inverted sequences. Blockade then strait, or strait then blockade — nobody has moved, so nobody had to sign. Watch the price mechanism, because it is the only party to this without an incentive. Brent was flat to soft on the day a ceasefire lapsed and a president threatened an Arab state, which suggests traders believe barrels are still moving through channels neither side wants described. Four things to distrust. The Oman bombing quote reached the world through Fox’s Trey Yingst relaying a phone call on air, with no audio provided and no White House comment — that is a claim about a threat, not a threat on the record. The administration’s nine-million-barrel figure is unverified and contradicted by every independent tracker. The transit counts themselves use different methodologies, windows and vessel definitions; publish the spread, never an average. And treat the Wikipedia blockade metrics circulating as CENTCOM figures as untraced until CENTCOM says them.

Sources: AP via Washington Post — 60-day deadline for an Iran peace deal expires · The Hill — Trump says US has ‘total control over the Strait' · NBC News — Trump reported to threaten Oman; no audio of the interview provided · CNBC — Trump not seeking an extension; Kpler says Hormuz traffic ground to a halt · CNN liveblog, 17 August — MarineTraffic counts three Hormuz transits, 37 at Bab al-Mandeb · CNN, 15 August — 56 vessel damage reports; 16 of 18 UKMTO strike incidents on the Omani route · Reuters via Spokesman-Review — Hegseth says the Navy can hold the blockade indefinitely · Al Jazeera — Araghchi says Oman talks in final stages, strait will not return to pre-war status

The Cartoon — August 18

“Total control. Three of you came through yesterday, so mind the queue.”

MEFILES · the cartoon · Trump told reporters Monday the US has ‘total control over the Strait'; CNN, citing MarineTraffic, counted at least three commercial transits in 24 hours against a pre-war baseline of about 110 a day

commercial ships transiting the Strait of Hormuz in 24 hours, against a pre-war baseline of about 110 a day

CNN liveblog citing MarineTraffic, 17 August 2026

16 of 18

UKMTO-reported projectile strike incidents since 6 July that hit the southern Omani workaround corridor

CNN, 15 August 2026, citing UKMTO

53.5%

turnout in Likud’s slate primary — 75,177 ballots of roughly 140,000 members, down from about 58% in 2022

Official Likud figures via Haaretz and The Yeshiva World

civilians killed at Bosiye, Tillabéri, on 18 January — the last figure on the Niger file from an AU body

African Commission on Human and Peoples' Rights press release, 22 January 2026

4,800

hostile cyber incidents Israel says it registered in June 2026, against about 1,600 in June 2025

INCD director general Yossi Karadi to Die Welt, via Times of Israel, 29 June 2026 — agency self-reported intake

Iran File

The regime, the IRGC, the proxies, the strait — read from the Gulf, not from Washington.

The workaround is the kill zone

Where UKMTO-reported projectile strike incidents landed since 6 July 2026

CNN, 15 August 2026, citing UKMTO reports since 6 July (18 incidents)

Sequencing, Not Substance

Versailles clock expires with nothing signed, and both capitals restate the same order of operations

The 60-day window opened by the memorandum Trump signed in June ran out Monday without a wider deal, a reopened Strait of Hormuz or a lifted blockade. Tehran still wants the blockade gone first; Washington still wants the strait open first.

The negotiating period set by the memorandum of understanding Trump signed at Versailles in June expired on Monday 17 August, the Associated Press reported in a dispatch by Joseph Krauss carried by the Washington Post, NBC News, PBS NewsHour and others. None of the three things the interim deal contemplated had happened: no wider peace agreement, no reopening of Hormuz, no lifting of the US naval blockade. AP’s own reading is that the two sides “are further apart than they were” when the clock started, that there is no sign of compromise on the strait, that detailed nuclear talks have not visibly begun, and that contact runs mostly indirect through mediators. That characterisation is AP’s judgement, not an announcement by either government. CNBC dated the memorandum to 17 June, consistent with a clock running out on 16–17 August; The Files could not obtain the signing document.

Trump spent Monday narrowing rather than widening the opening. Asked in the Oval Office whether he had run out of patience with Oman, he said: “No, I don’t think they behaved very well, but we’d handle them very easily, just like we do other things,” per CBS News. The Hill reported him declaring the United States has “total control over the Strait” and saying Iran is unlikely to “make the kind of deal that I feel is necessary.” CNBC reported he is not seeking to extend the ceasefire arrangement while claiming informal contacts with Tehran are under way. Al Jazeera’s Monday liveblog led on his call for Iran to wave the “white flag.”

Tehran’s position has not shifted in three weeks or across two spokesmen. On 10 August, Foreign Ministry spokesman Esmail Baghaei told reporters, via Tasnim: “As long as the U.S. naval blockade continues, the necessary conditions for the reopening of the Strait of Hormuz do not exist.” Foreign Minister Abbas Araghchi told cabinet on 2 August, in remarks posted to Telegram, that the Tehran–Muscat talks on shipping routes were “on the way to being finalised,” while Al Jazeera reported Iran insists the waterway will never return to its pre-war status. In a 16 August account compiled by GlobalSecurity, Araghchi said Qatari and Pakistani mediators are exchanging messages with Iran “but this does not mean negotiations,” and that even a completed arrangement with Oman on commercial routes would leave reopening contingent on Washington meeting conditions already conveyed. The Hill reported Baghaei saying Monday that Iran and Oman had reached an understanding; the wording The Files retrieved was truncated and is not printed here.

Assessment: An expired deadline is not a collapse, and nobody involved has an interest in calling it one: the ceasefire on direct US–Iran strikes is the one thing both sides are quietly banking. What died Monday was the fiction that a date could substitute for a sequence. The dispute is not about terms but about which side moves first, and a deadline cannot arbitrate that. Watch the Muscat channel rather than the mediators' channel — if an Iran–Oman routing understanding is real, it hands Tehran partial commercial relief without Washington’s signature, which is precisely why Oman is now being talked about as a target rather than a broker.

Sources: Washington Post (AP) — the 60-day Iran deadline expires · NBC News (AP) — where things stand as the deadline lapses · CBS News — Trump on Oman: “we’d handle them very easily” · The Hill — Trump claims “total control” of the strait; Baghaei on Oman · CNBC — Baghaei via Tasnim on blockade-first sequencing · Al Jazeera — Araghchi says Oman talks in final stages

Three Ships, Four Prices

Trump says Washington controls Hormuz; the trackers count three transits in a day against a 110 baseline

Commercial traffic through the strait has all but stopped while the Red Sea keeps moving, and the alternative Omani corridor is absorbing almost every projectile strike UKMTO logs. Oil barely moved.

CNN’s Monday liveblog, citing MarineTraffic over a 24-hour window, counted at least three commercial vessels through the Strait of Hormuz — two tankers inbound to the Gulf, one outbound to the Gulf of Oman — against a pre-war baseline CNN puts at roughly 110 ships a day. CNBC, citing Kpler, reported traffic “appeared to grind to a halt” on Sunday 16 August. Windward’s Maritime Intelligence Operations Center logged 12 transits over its own 24 hours to 16 August, eight inbound and four outbound. Lloyd’s List Intelligence’s weekly Hormuz brief for 27 July–2 August carried two series in the same document — 84 transits, up from 45, and a narrower 52, up from 28, apparently excluding Iranian-linked tonnage — and noted non-Iranian gas carriers and containerships resuming after pauses, with a second tranche of vessels left stranded. Against all of that, Fortune reported the administration saying 9 million barrels a day are still leaving the strait. That number is a claim, and it is the one to interrogate.

The risk has migrated with the traffic. CNN counted 56 reports of damage to vessels in the strait and nearby waters since the war began on 28 February, a tally it notes may exclude two attacks reported on 13 August. Of 18 projectile-strike incidents UKMTO has reported since 6 July, 16 were on the southern Omani route — the temporary workaround corridor. UKMTO also reported minor damage to a vessel in a drone attack on 13 August. Over the same 24 hours in which three ships crossed Hormuz, CNN counted at least 37 commercial vessels at Bab al-Mandeb: 19 entering the Red Sea, 13 of them cargo and six tankers, and 18 exiting into the Gulf of Aden. The Red Sea, a year ago the closed lane, is functioning. The Gulf is not.

Prices did not react. CNBC, timestamped 06:20 GMT Monday, had Brent rising as much as 1 percent to $89.40 before trading 24 cents lower at $89.28, with WTI down 67 cents at $81.74; both contracts had gained more than 5 percent the previous week after attacks on ADNOC-operated tankers and a Saudi Aramco refinery. Trading Economics put Brent at $88.31, down 0.24 percent on the day and up 32.60 percent year-on-year. Fortune printed $91.53 for the same morning, roughly $3 higher. Different contracts and snapshot times explain part of the spread; it should not be averaged. Underpinning the standoff, Defense Secretary Pete Hegseth told reporters in Panama on 13 August, after addressing the crew of the destroyer USS Gridley during PANAMAX 2026, that “indefinitely the United States Navy can maintain a blockade,” rotating ships in and out. CBS News reported, citing a single unnamed US official, that the carrier USS George Washington left Vietnam last week bound for the Middle East to relieve the USS Abraham Lincoln.

Assessment: Two claims cannot both be true: total control and 9 million barrels a day moving. If the strait were functioning at that volume, tanker rates and Brent would not be flat, and the trackers would not be counting in single digits. The likelier picture is a trickle of covert and convoyed cargo, which Trading Economics gestures at, plus prices anaesthetised by the absence of a hard outage. The number that actually describes the war is 16 of 18 — the workaround corridor is where the shooting is, which means whoever is striking it is targeting the escape valve, not the chokepoint. Note also what the Gridley and the George Washington imply: the Gulf is being resourced by stripping the Indo-Pacific.

Sources: CNN — MarineTraffic counts for Hormuz and Bab al-Mandeb, 17 August · CNN — 56 damage reports since 28 February; 16 of 18 strikes on the Omani route · CNBC — Kpler says Hormuz traffic ground to a halt · Lloyd’s List Intelligence — Strait of Hormuz Brief, 5 August 2026 · CNBC — Brent and WTI, 17 August · Fortune — administration says 9m bpd still leaving Hormuz

Sahel Monitor

Mali, Burkina, Niger, the AES bloc, JNIM, and the Russian bargain — security as economics.

The last verified tolls

The only Niger casualty figures with a traceable state or AU source, January and July 2026

ACHPR press release, 22 Jan 2026 (Bosiye); official toll via Agence Nigérienne de Presse, carried by regional outlets (Téra, 17 Jul 2026)

Announced, Not Constituted

A Dakar financial outlet asks where the AES bank went, and the question is the story

The Alliance of Sahel States has been producing institutions on paper since its Bamako summit. On 16 August, a regional financial publication put the obvious test question in a headline: does the bank exist?

The AES confederation of Mali, Burkina Faso and Niger has spent the past eight months announcing structures. Its December 2025 Bamako summit closed with Ibrahim Traoré taking the rotating chair, as reported at the time by West Africa Democracy Radio, and the confederation’s foreign ministers met again in Bamako around 21 June 2026. On 16 August, Financial Afrik, a Dakar-based regional financial outlet generally credible on West African banking, published a piece under the headline “But where has the AES bank gone?” THE FILES has not obtained the body of that article and therefore cannot say what capitalisation figure, launch date or governing statute it reports, or whether it reports any. What we can say is that the headline poses the correct test. A confederal bank is not a communiqué: it is subscribed capital, a legal charter, a supervisory arrangement and correspondent relationships with institutions outside the three states. Separately, Capmad, a Madagascar-based aggregator whose copy we do not cite, has pointed to an AES move to harmonise mining policy across the three countries around 13 August. The underlying ministerial text has not been located.

The same gap between announcement and constitution runs through every file on this desk. Burkina Faso’s authorities said on 7 January 2026 that they had foiled a further coup plot, a claim carried by Africanews and by Anadolu citing the security minister; it remains an announcement, not an independently confirmed event. On Niger’s uranium, the Foreign Policy Research Institute argued in April 2026 that the state can seize the resource but cannot sell it, and no contracted buyer has since been confirmed. On Mali’s fuel blockade, convoy arrivals are announced by the Malian state — a claim that a convoy of 880 tankers reached Bamako circulated in late July via the outlet Trends n Africa, on a headline THE FILES has not verified — while ACLED and Bellingcat maintain the tracking that would actually support a time series. And on 16 August, SOFREP, a US special-operations-community outlet with a settled editorial line on Russian deployments, asserted that Africa Corps has lost ground in Mali that Wagner once held. That piece, too, is unread here, and it is not a wire.

Assessment: Read the AES as an information operation with a treasury attached. Its output is documents, and documents travel faster than institutions: a bank announced in Bamako is reported in Ouagadougou, aggregated in Antananarivo and arrives in Western coverage as a fact. The mirror error is equally live — the alliance’s critics generate claims about Russian retreat and mining seizures at a speed no verification cycle can match. Tonight this desk can name what is being asserted about the AES’s financial architecture and by whom. It cannot yet tell you that the bank clears a payment. Distrust anyone who tells you either way this week.

Sources: Financial Afrik — “But where has the AES bank gone?” (16 August 2026) · SOFREP — claims Africa Corps has lost ground Wagner once held in Mali · ACLED / Bellingcat — tracking the fuel blockade crippling Bamako · Africanews — Burkinabè authorities say new coup plot foiled, 7 January 2026 · FPRI — why Niger can seize uranium but cannot sell it · Trends n Africa — unverified headline claim of an 880-tanker convoy reaching Bamako

Three Borders

The last verified tolls from Tillabéri are a month and seven months old, and both came from the state

Niger’s most recent confirmed casualty figures — sixteen soldiers at Téra in July, thirty-one civilians at Bosiye in January — illustrate how narrow the documentary record on the three-borders zone has become.

On Friday 17 July 2026, an attack on an army position near Téra, in the Tillabéri region of western Niger close to the Mali and Burkina Faso frontiers, produced an official toll of 16 Nigerien soldiers killed and 23 wounded, nine of them in serious condition, with 15 assailants reported killed. The figures originate with Agence Nigérienne de Presse, the state news agency, and reached THE FILES through two regional carriers, Planète Afrique and Ivorian.net, both reproducing the same ANP-derived text. Reporting noted that air assets were engaged. No armed group was named. The carriers framed the attack as a setback testing the security record of the authorities who took power in July 2023. This is a state toll relayed by secondary aggregators, and it has not been matched here against ANP directly or against wire copy.

The one primary document on the file is older. In a press release dated 22 January 2026, the African Commission on Human and Peoples' Rights, an African Union organ, recorded 31 civilians killed on 18 January at Bosiye village, in the Gorouol commune of Tillabéri, again in the three-borders zone. The Commission attributed the killings to armed individuals and named no group. Around the same corridor, Al Jazeera reported on 18 July that armed groups attacked a Malian military convoy in the Gao region, and the Africa Center for Strategic Studies argued on 6 May that JNIM’s expansion into western Mali is reshaping the conflict’s geography. Nothing in Tillabéri, and nothing in Burkina Faso, has been independently confirmed to this desk inside the past 48 hours.

Assessment: Two structural points, neither of them about the numbers themselves. First, in Niger the state is now effectively the sole publisher of casualty figures, and the assailant count is the least reliable line in any such toll; the soldier and civilian counts are what survive scrutiny. Second, silence from Burkina Faso this week is not evidence of a quiet week — it is the absence of reporting from the country with the region’s highest attack tempo, which is a different fact and a more troubling one. When the documentary record thins, the AES’s own communiqués fill the space by default. That is the connection to the bank.

Sources: Planète Afrique — official toll from the Téra attack, 17 July 2026 (ANP-derived) · Ivorian.net — 16 soldiers killed in Tillabéri attack · African Commission on Human and Peoples' Rights — press release on the Bosiye attack, 22 January 2026 · Al Jazeera — armed groups attack Malian military convoy in Gao region, 18 July 2026 · Africa Center for Strategic Studies — JNIM attacks in western Mali

Sudan Crisis Monitor

SAF versus RSF, the sieges and the famine, the gold economy, and the diplomacy of press releases.

Claim, Not Event

Army claims an RSF drone downed over North Kordofan; independent confirmation is absent

A Sudanese Armed Forces shoot-down claim relayed by Sudan Tribune is the only fresh item on the Kordofan file inside 48 hours. It is a belligerent’s assertion, and this desk cannot yet say more than that.

Sudan Tribune published, roughly 14 hours before this edition went out, an item headlined to the effect that the Sudanese Armed Forces shot down a Rapid Support Forces drone in North Kordofan. The Files has the headline, the URL and the timestamp; it has not read the body, and therefore cannot say whether the outlet has wreckage imagery, a named SAF spokesman, or a military communiqué and nothing else. That distinction is the whole story. Shoot-down claims are the cheapest category of war reporting: they are unfalsifiable at distance, they cost the claimant nothing, and they arrive pre-shaped for a narrative of control. The surrounding record is thin in the same way. Sudan Tribune reported SAF and RSF clashing around El Obeid, the North Kordofan capital, on about 14 August, and SAF-aligned forces repelling an RSF attack in West Darfur on about 11 August.

On 4 August, Sudan Tribune quoted the SAF chief claiming advances “on all fronts” to eliminate the RSF — a leadership claim, and it should be read as one. On 13 August The New Arab published analysis on what the RSF’s battlefield setbacks mean for the war; on 16 August the syndication platform PRNigeria carried a signed analysis by Yechale Degu on the narrowing military gap between the two forces. Both point the same way as the SAF’s own line. Against that, the El Obeid clashes suggest the RSF retains offensive capacity in Kordofan. The most consequential open question is one none of these sources settles: whether El Obeid is under active ground assault or sustained standoff drone attack. NPR reported the city under sustained drone strikes on 7 August; the UN human rights chief, Volker Türk, warned on 18 June that an imminent RSF offensive on El Obeid must be halted.

Assessment: When a belligerent’s communiqué and an independent analyst’s read converge, the analyst is the one to check, not the belligerent. The SAF has an obvious interest in a Kordofan momentum narrative six months into a war it has repeatedly declared nearly won; that interest does not make the setbacks thesis wrong, but it means the thesis needs sourcing that does not originate in Port Sudan. Two further cautions, both about this desk rather than the parties: our own sweep surfaced no Reuters, AFP, AP or Bloomberg copy and no Arabic-language regional reporting, and that is a failure of our search, not evidence the file was quiet. Ground assault and drone siege produce different casualty curves and different displacement. Until that is resolved, treat Kordofan as unread.

Sources: Sudan Tribune — SAF says it downed an RSF drone in North Kordofan (headline retrieved, body unread) · Sudan Tribune — SAF and RSF clashes around El Obeid, ~14 August · Sudan Tribune — SAF-aligned forces report repelling RSF attack in West Darfur, ~11 August · Sudan Tribune — SAF chief claims advances “on all fronts”, ~4 August · The New Arab — analysis: what the RSF’s battlefield setbacks mean · NPR — El Obeid under sustained drone strikes, 7 August

Baseline Unknown

Sudan’s famine numbers and its reported peace deal both rest on records nobody has refreshed

The most-quoted hunger figure on the Sudan file cannot be tied to a reference period, and the Quad “peace deal” announced in February has never been reported as collapsed. Both gaps flatter the parties.

The primary document on Sudanese hunger available to this desk is an IPC country analysis covering September 2025 with projections running to May 2026. Whether a newer round has superseded it is unresolved, and everything downstream depends on the answer. UNICEF carries a release framed around roughly 19.5 million people in acute food insecurity with famine risk persisting; the page returned no date in our retrieval, which means the figure currently circulates without the window it describes. UNICEF and the World Food Programme both carry releases stating that famine conditions have been confirmed in El Fasher and Kadugli, with hunger and malnutrition easing where conflict subsides — also undated in our results. IFPRI wrote on famine spread on 13 November 2025; UN News reported catastrophic child malnutrition on 5 February 2026. Amnesty International’s 14 July report characterised RSF conduct in El Fasher as a stain on the conscience of humanity; that phrasing is Amnesty’s, not ours.

The diplomatic record has the same shape. The Quad framework rests on a joint statement issued by the US State Department on 15 September 2025. On 24 November 2025, Sudan Tribune reported an RSF commander agreeing to a three-month humanitarian truce — an announcement, not a confirmed cessation. On 4 February 2026, Sudan Tribune reported a US adviser saying the Quad had reached a peace deal. A claim by an official that a deal exists is not a deal, and no source this desk reached states that it lapsed, was rejected or was never signed. What exists instead is circumstantial: fighting around El Obeid in mid-August, six months later. The International Crisis Group set out on 1 October 2025 how Washington and its partners might push peace; the Atlantic Council argued on 21 May 2026 for trust-but-verify on any ceasefire; Horn Review examined the limits of the Quad process on 30 April 2026.

Assessment: An undated casualty or hunger figure does not stay honest. It outlives its reference period, becomes furniture, and eventually describes a situation that has either improved or catastrophically worsened without anyone noticing. The 19.5 million framing should not be printed on a tile until the round and window are pinned. On diplomacy, the absence of a reported collapse is not evidence of a surviving agreement; it is more often evidence that no one followed up. Note also what our sweep returned nothing on: gold routing, Emirati, Saudi, Egyptian and Russian patronage, and the sanctions calendar. That is where the war is financed, and a silent file there is the gap most likely to matter next.

Sources: IPC — Sudan country analysis, September 2025 with projections to May 2026 · UNICEF — risk of famine persists, nearly 19.5 million facing acute food insecurity (page undated in retrieval) · WFP — famine conditions confirmed in El Fasher and Kadugli, easing where conflict subsides · Amnesty International — report on RSF atrocities in El Fasher, 14 July 2026 · Sudan Tribune — US adviser says Quad reached a peace deal, 4 February 2026 · US State Department — joint statement on restoring peace and security in Sudan, 15 September 2025

The Brotherhood Brief

The organization as structure — designations, networks, finances, legal battles. Structure over slogans.

State Power, Federal Authority

Oklahoma governor orders terror probe of Brotherhood and CAIR without alleging a crime

Kevin Stitt’s 12 August executive order makes Oklahoma the third state to act on a designation power that, as the state’s own public broadcaster notes, belongs to Washington.

Governor J. Kevin Stitt signed an executive order on Wednesday 12 August directing the Oklahoma Office of Homeland Security and the Oklahoma Department of Public Safety to investigate the Muslim Brotherhood, the Council on American-Islamic Relations and their affiliates, and to determine whether measures are immediately necessary to prevent terroristic activities in the state. The order asks both bodies to press the federal government to designate the Brotherhood and CAIR as foreign terrorist organisations under 8 U.S.C. § 1189, and asks the state legislature to legislate to the same end. KOSU and KGOU, Oklahoma’s NPR stations, reported the order and added the qualifier that its own text does not: “CAIR was not accused of a crime. Stitt’s order does not offer any proof that CAIR or the Muslim Brotherhood in Oklahoma are colluding with terrorist groups.”

KGOU placed the order in a sequence, noting it follows one signed by President Trump in November aimed at designating “certain Muslim Brotherhood chapters as foreign terrorist groups,” and that Florida and Texas counterparts have already moved, “even though such authority lies with the federal government.” The station’s own evidentiary basis for the linkage is narrower than the order’s reach: that members of the Lebanese and Jordanian branches of the Brotherhood have worked with Hezbollah and Hamas, and that the United States has treated Hamas as a foreign terrorist organisation since 1997. The Files did not obtain a response from CAIR-Oklahoma or CAIR nationally before publication.

Assessment: The order commissions an investigation with no predicate offence and no stated deadline, which means the reportable event in Oklahoma arrives in roughly sixty days, when the two agencies either produce a finding or do not. Read the sequence rather than the document: three states have now claimed a power the federal statute reserves to the Secretary of State, and each has been sued or enjoined for it. Distrust the equivalence the orders rely on. Just Security notes that apart from a small 501(c)(3) in Trenton, New Jersey called “International Muslim Brotherhood Incorporated,” the IRS has no record of a “Muslim Brotherhood” organisation in the United States — the entity being designated is an inference, not a filer.

Sources: KGOU — Stitt orders investigation, possible terrorist designation for Oklahoma Muslim groups · KOSU — Stitt CAIR executive order · PJ Media — Oklahoma governor wants CAIR federally designated a terrorist group · Just Security — The dangers of Florida’s new terrorist designations · Texas Attorney General — Paxton sues Muslim Brotherhood and CAIR

Two Portals, One Guide

An acting General Guide signs for the Brotherhood as The Economist maps two rival leaderships

Mahmoud Hussein’s 8 August statement welcoming the Mecca joint defence agreement is unremarkable in content and revealing in its signature line.

A statement dated Saturday 8 August 2026 and carried by the Freedom and Justice Party portal, sourced to ikhwan.online, welcomed the “Mecca joint defence agreement.” It asserted that unity and cooperation among Islamic states across all fields is a foundational pillar for entrenching independence and strengthening their national security, said the agreement raises those states' capacity to face shared challenges, and expressed the hope that the step would be “a nucleus and foundation for comprehensive Arab and Islamic unity.” The signature reads Prof. Dr. Mahmoud Hussein, acting General Guide. Two Brotherhood-aligned portals, ikhwan.online and ikhwan.site, were publishing separately through August; The Files has not established that they answer to the same command structure.

The organisational context comes from an assessment The Economist published on 11 August, which The Files reached only through the aggregator OnTime Brief and which should be read directly before it is relied upon. As relayed, the magazine judges the Brotherhood at its weakest point since the Arab spring and split into two rival leaderships, notes Washington’s 13 January listing of the Egyptian and Jordanian branches as global terrorists and Jordan’s April 2025 ban, and argues that repression removes the organisation but not the economic grievances that recruit for it. On Egypt it reports that supreme guide Muhammad Badie is in prison, that President Sisi issues holiday pardons but rarely for Brotherhood members, and that he has shut the businesses that once funded the group’s welfare programme. On Syria, it reports that Ahmed Zeidan, an adviser to President Ahmed al-Sharaa with longstanding Brotherhood ties, has suggested the Syrian branch fold itself up.

Assessment: The Syrian item is the one to watch, and it is also the one held at two removes — a magazine reporting an adviser’s suggestion, read here through an aggregator. If a Syrian Brotherhood body formally accepts or refuses, a chapter will have disappeared by its own hand, which no designation has achieved anywhere. Note what the Egypt reporting actually describes: not a crackdown on preaching but the closure of the businesses that financed welfare, which is how you remove a patronage network rather than a creed. That is the same theory of the case as OFAC’s 23 July action against UK-based Secretary General Mahmoud al-Abyari. The state-level orders in Oklahoma and Texas are chasing a unified American structure; the financial files are chasing accounts.

Sources: Freedom and Justice Party portal — Brotherhood statement welcoming the Mecca joint defence agreement, signed by acting General Guide Mahmoud Hussein · OnTime Brief — relaying The Economist on the Brotherhood’s prisons, splits and US terror listings · US Treasury — OFAC designates senior Egyptian Muslim Brotherhood official Mahmoud al-Abyari · AP — Trump administration labels 3 Muslim Brotherhood branches as terrorist organizations

Israel Press Review

Reading Haaretz, Times of Israel, Ynet and the Hebrew press — what Israeli media and officials are actually saying.

Likud turnout falls again

Share of eligible party members voting in the slate primary, 2022 against 17 August 2026

Official Likud figures via Haaretz and The Yeshiva World; 75,177 of about 140,000 members in 2026

Three Officials, Three Accounts

Kushner leaves Jerusalem with an agreement no two officials describe the same way

After four hours with Netanyahu, the American side briefed that a path forward had been agreed. The Israeli side briefed that the IDF is not moving. Both accounts came from unnamed officials.

The sequence is not in dispute. On 30 July a 15-point, US-backed roadmap was announced under which the IDF would withdraw from Gaza in step with Hamas disarmament; Hamas accepted it and Netanyahu rejected it. On Sunday 16 August Jared Kushner met senior Hamas officials and mediators in Egypt — a two-hour meeting, per the Washington Post; NBC News called the talks “rare.” On Monday Kushner met Netanyahu in Jerusalem alongside Board of Peace Gaza envoy Nickolay Mladenov, Tony Blair and US Ambassador Mike Huckabee. CNN, cited by The Hill, put the meeting at four hours; NBC called it “hourslong.” According to Times of Israel’s liveblog, Netanyahu pressed Kushner on why he had met Hamas officials at all; Kushner said he wanted to hear the disarmament commitment “face-to-face,” and noted that his last in-person meeting with Hamas officials, with Steve Witkoff, produced the October 2025 hostage release.

What was agreed depends on which anonymous official briefed which outlet. Reuters, quoting a Board of Peace official, reported the meeting was “lengthy, in depth, and very productive” and that agreement had been reached with Netanyahu on a path forward. NBC, quoting a senior Israeli official, reported the two men agreed demilitarisation “should start with a Hamas weapons handover supervised by an American military general,” that no reconstruction begins before Hamas disarms, and that “necessary measures” be taken on sanitation and environmental concerns — and that Netanyahu “made it clear” the IDF will not redeploy but will “continue to thwart” threats. The White House did not immediately respond to NBC’s request for comment on that account. Times of Israel’s own headline at 5:19 p.m. read: “Meeting with Kushner, PM doubles down on IDF remaining in Gaza until Hamas disarmed.” A Board of Peace official told ToI: “Israelis are going to give this a chance. Now it’s up to Hamas to show if it truly intends to comply.”

At 2:40 a.m. on Tuesday, ToI’s Jacob Magid reported that the Board of Peace is weighing a new disarmament framework — abandoning the phased approach to a Hamas weapons handover, already accepted by Hamas and rejected by Netanyahu, in favour of a wholesale plan. The item rests on one official involved in the talks. A separate wire report, carried by the Denver Gazette, said Israel had agreed to “working groups” on demilitarisation. A US official told ToI’s liveblog that the gaps with Israel “are not huge,” but that Washington wants Jerusalem to take limited steps to give the process room to test whether Hamas begins surrendering weapons at all.

Assessment: Read the two briefings against each other and the seam shows. “Agreement on a path forward” and “the IDF will not redeploy” are not obviously compatible, because redeployment against disarmament is the entire mechanism of the 30 July plan. Reuters' quote came from the American side and says nothing; the Israeli account is the only one containing an operative commitment, and it is also the account calibrated for a Likud electorate mid-primary. Watch two things: whether the American general supervising a handover is ever named, and whether Magid’s single source is joined by a second. If the panel adopts wholesale disarmament, Hamas’s acceptance of the phased version becomes worthless. Note also what Israeli outlets did not carry: any official response to the lapse of the 60-day Iran window on Monday, which Trump told CNBC he will not extend.

Sources: Reuters via US News — Kushner, Netanyahu agree on path forward, Board of Peace official says · NBC News — Senior Israeli official on weapons handover supervised by a US general, no redeployment · Washington Post — Kushner’s two-hour meeting with Hamas officials in Egypt · The Hill — CNN’s four-hour figure for the Jerusalem meeting · Denver Gazette — Israel agrees to working groups on demilitarisation · CNBC — Trump rules out extending the Iran framework, on Hormuz “blockade”

Turnout as Verdict

Likud’s slate vote drew 53.5% turnout, and a friendly daily printed the order first

75,177 of roughly 140,000 Likud members voted on Monday for a list Netanyahu had already largely fixed. Before any count was published, Israel Hayom ran a 700-voter exit poll as a slate.

Polls were open eleven hours and closed at 9 p.m. Monday. Official turnout was 53.5% — 75,177 ballots of approximately 140,000 eligible members — down from roughly 58% in the 2022 primary. Even that figure arrived unevenly: a Times of Israel liveblog entry at poll close said turnout was “estimated at a low 51%,” the liveblog headline said 53%, and Haaretz and The Yeshiva World both settled on 53.5%, with Haaretz calling the drop 4.5 points and Yeshiva World “roughly five percentage points.” The vote decided less than usual. ToI reported Netanyahu had secured control of “a third of the top 30 slots” in advance, with the party polling at 22–24 seats for the October election; Haaretz put Likud at about 22 seats, “leaving many current ministers and lawmakers at risk of losing their Knesset seats.” Yeshiva World cited estimates that as many as half of Likud’s sitting MKs and ministers could fall outside realistic slots. The party, per ToI, touted a “celebration of democracy.”

Minutes after polls closed, Israel Hayom — a Netanyahu-friendly daily — published an exit poll by the DRI Institute, sample 700 Likud voters, giving a full order: Knesset Speaker Amir Ohana first, then Yariv Levin, Eli Cohen, Almog Cohen, Moshe Saada, Miri Regev, Boaz Bismuth, Tally Gotliv, Amichai Chikli and Ofir Katz. It is an exit poll for a closed party ballot, its methodology unpublished in the version available to us, and we reached it through Yeshiva World’s aggregation rather than the original. It is not a count. Separately, ToI’s liveblog carried a senior aide to Heritage Minister Amichai Eliyahu of Otzma Yehudit saying he had signed up hundreds of people, including Haredim, as Likud members — self-reported, single-sourced.

Two quieter fights over who votes in October are running in parallel, neither picked up by the wires. ToI reported Monday that Likud is threatening legal action against an initiative bringing Israelis abroad home to vote, claiming the organisation operates illegally and in breach of party financing law; the AID Coalition says it is non-partisan and provides no funding. We have that item only as headline and dek text from ToI’s index. And ToI’s liveblog reports that after the coalition advanced legislation last month to block ballot boxes in care facilities, the Central Elections Committee has submitted an outline to the Supreme Court placing boxes only in facilities that requested them and meet criteria — a reduction from the number of facilities that previously served as polling places, with the exact figures unclear in the text we could read. The liveblog states the logic plainly: older voters lean against Netanyahu.

Assessment: The billboard is the cheapest item of the cycle and the one that will travel furthest; the care-home ballot boxes are the one that could move seats. Treat the exit-poll slate as a political instrument rather than information: published by a friendly paper before any count, it sets expectations, tells wobbling MKs where they stand, and is unfalsifiable for a day. The turnout number is the harder signal. Members turned out less for a list whose top third was reserved in advance, which is what pre-cooking a primary costs. Marc Schulman’s framing is the right test — how successful Netanyahu was in engineering the list he wanted — and it will be answerable only against the official count, not the DRI order.

Sources: Haaretz — Likud primary voting ends amid low turnout · The Yeshiva World — Polls close with 53.5% turnout as party awaits results · Times of Israel liveblog — 17 August, turnout, Eliyahu aide, care-home ballot boxes · Times of Israel — “Likud polls close with turnout estimated at a low 51%” · Haaretz (Ben Kroll) — Likud casts Mamdani alongside Iran and Hezbollah leaders in campaign ad · Marc Schulman, Tel Aviv Diary — “Likud goes to the polls”

Evicting the Besieged

In Qusra, the army ordered the Palestinian families under settler siege to leave their homes

Haaretz reported that during an operation to remove a settler outpost, the IDF told besieged families to evacuate. They refused. Israeli outlets have been well ahead of the wires on this for ten days.

Settler activists besieged Palestinian homes in Qusra, in the northern West Bank, from around 8 August. Times of Israel’s running coverage by Nurit Yohanan and Emanuel Fabian documents the army failing to remove the settlers on 12 August after clashes with soldiers, calling the settler outposts “reprehensible” while not demolishing them, and saying troops found to have participated “will face disciplinary action”; by day six residents were still blocked from delivering food. Haaretz’s Rawan Suleiman reported on 13 August that during the operation to remove the outpost the IDF ordered several of the besieged Palestinian families to evacuate their homes — they refused — while the army said it was deploying forces to protect residents and “prevent the continuation of the serious incidents.” The Jerusalem Post reported on 12 August that Central Command chief Maj.-Gen. Avi Bluth toured the area, spoke with a Palestinian family, and left while the incident was still ongoing; Border Police dismantled a tent erected inside a closed military zone.

The load-bearing claim in the Israeli coverage is also the least corroborated. Haaretz’s Yaniv Kubovich reported on 13 August that a senior Israeli security source called the West Bank “a powder keg that could explode at any moment,” and that sources in Central Command said many IDF officers avoid acting against settlers, fearing damage to their careers and promotion prospects. That is anonymous, exclusive to Haaretz, and uncorroborated elsewhere. What is observable is the outcome: Matan Golan reported on 15 August that despite a days-long military operation to evacuate outposts in two Palestinian villages, settlers continued on Saturday to roam and harass residents. The chief executive of the Israeli legal NGO Yesh Din called the episode “an extreme manifestation of the Israeli policy in the West Bank.” UN News reported in July that settler attacks displaced nearly 700 Palestinians across nine West Bank communities in the first half of 2026, with attacks and outpost creation described by a UN official as at an “all-time high.”

Assessment: Note the three grammars the Israeli press is holding at once: the army condemns outposts as “reprehensible” without demolishing them, promises disciplinary action against its own soldiers without naming any, and evacuates the victims rather than the besiegers. Enforcement here is announced, not performed — which is why the Kubovich career-incentive claim matters even unconfirmed: it supplies a mechanism for a pattern already visible in the photographs. Two items from Monday circulated as index headlines only and we do not treat them as verified: a reported instruction from Defence Minister Israel Katz giving the IDF two weeks to draft a plan transferring West Bank civilian enforcement to the police, and a reported condemnation by Ambassador Huckabee. Both are worth chasing; neither is yet an event.

Sources: Haaretz (Rawan Suleiman) — IDF evicts several Palestinian families during operation to end settler siege · Haaretz (Yaniv Kubovich) — Senior security source: settler violence pushes West Bank to verge of explosion · Haaretz (Matan Golan) — Settlers continue to roam Palestinian villages despite massive IDF presence · Jerusalem Post — Bluth visits Qusra area, Border Police dismantle tent · Times of Israel — settler violence running coverage (Yohanan, Fabian) · UN News — nearly 700 Palestinians displaced by settler attacks in nine communities

Digital Front Monitor

Cyber operations, information warfare and the infrastructure of control across the region.

Announced, Not Confirmed

Shin Bet says Iranian operatives are posing as colleagues to reach Israeli reporters' phones

Israel’s security service and its national cyber directorate issued a joint warning on Sunday. It is an official statement, not a documented incident, and an automated risk-scoring site has already added details Haaretz never reported.

Israel’s Shin Bet security service and the Israel National Cyber Directorate issued a joint public statement on Sunday 16 August, saying Iranian intelligence operatives are approaching Israeli journalists on WhatsApp and Telegram while impersonating people the targets already know, offering interviews or proposing collaboration on projects. The stated objective is to compromise devices, take over accounts and obtain sensitive information. Haaretz reported the statement at 14:29 IDT the same day under its national security desk byline. What the retrievable material does not contain is any of the detail that would let an outside party test it: no count of targeted journalists, no named individual, no named threat cluster, no indicators of compromise, and no direct quotation from a named official at either body. The Files did not reach the primary Hebrew-language INCD notice.

A second “source” for the same story is circulating and should not be treated as one. A post on blog.rankiteo.com restates the Haaretz lede, then adds that the campaign “specifically targeted reporters from Haaretz, among others,” assigns a machine-generated “severity: 85” score, and characterises the episode as an “attack with significant impact with customers data leaks.” Neither the Haaretz-targeting detail nor the data-leak characterisation appears in the Haaretz text. The page carries visible raw Python dictionary fragments, the signature of an automated third-party-risk product rather than reporting. For scale, and with the caveat that these are the defending agency’s own intake numbers with no published methodology: INCD director general Brig. Gen. (res.) Yossi Karadi told Die Welt in late June that Israel logged roughly 1,600 hostile cyber incidents in June 2025 and about 4,800 in June 2026, and that the directorate handled more than 26,000 in 2025, a 55 percent rise on 2024.

Assessment: Two things are worth separating. The first is the announcement’s timing: states publish spearphishing warnings when they want a target community to change behaviour, or when an operation is already running and they have decided disclosure costs the adversary more than silence. Nothing released so far tells us which. The second is more durable. Machine-written risk-scoring pages now sit high enough in search results to function as corroboration for stories they have only paraphrased, inventing specificity — a named victim, a “data leak,” a severity number — that the original never claimed. Within a day that invented specificity becomes the version people cite. Treat Karadi’s counts the same way: an agency measuring its own inbox.

Sources: Haaretz — Shin Bet: Iranian intel trying to hack Israeli journalists' phones and accounts · blog.rankiteo.com — automated risk-score page adding unreported detail (cited as the derivative, not as reporting) · Times of Israel — INCD chief Yossi Karadi on 2026 attack volumes

Capability, Not Incident

A video call to a cheap handset now reaches the Android kernel, and nobody is patching it

SSD Secure Disclosure published the second half of an exploit chain against Unisoc modem firmware on 17 August. The precondition — the attacker must run the cellular network — describes a state, not a criminal.

SSD Secure Disclosure published an advisory on 17 August describing a two-stage chain that achieves full Android kernel access on devices running Unisoc modem firmware, delivered through a VoLTE video call. It completes work the researchers began in March 2026, when they disclosed remote code execution in the same firmware via a malformed SIP video call. The chain has two demanding preconditions: the attacker must control a private 4G cellular network, and the victim must answer the incoming call. There is no fix from the chipset maker. “We have tried to reach out to the vendor through multiple channels (email and LinkedIn) but have not been able to receive any response,” the advisory states. The Hacker News carried the disclosure on 17–18 August. No exploitation in the wild has been reported. This is a capability, not an incident.

The precondition is the point. Controlling a private 4G network is the working profile of an operator running a cell-site simulator or a compliant carrier environment, not of a ransomware crew. It sits alongside Citizen Lab’s April report, “Bad Connection,” by Gary Miller and Swantje Lange, which documented two telecom surveillance campaigns combining 3G and 4G signalling protocols with direct device exploitation over SMS — including a message carrying hidden SIM card commands that extracted location and turned the handset into a covert tracking beacon — and customised tooling to spoof operator identities and steer traffic through chosen interconnect paths to mask attribution. That report has been recirculating this month reframed by advocacy accounts as a story about Israeli-linked infrastructure. Israel is one of five jurisdictions Citizen Lab names, alongside the UK, China, Thailand and Sweden.

Unisoc basebands are common in low- and mid-tier handsets across the Middle East, Africa and South Asia, which is why the disclosure belongs on this desk — but The Files has not verified Unisoc’s share of any Gulf, Levantine or Sahel market and will not assert regional exposure without it. Two adjacent threads remain open. SecurityWeek’s index carries an undated line describing a “novel private APN pivot” used to sabotage a second Polish energy facility, technically close to the same access model, which The Files has not read or dated. And the July 22 update to the CISA/FBI/EPA advisory AA26-097A on “Iran-affiliated” actors — four weeks old, though circulating this week as current — documents access to industrial controllers over internet-exposed OT ports 44818, 2222, 102 and 502 and via modems on SSH port 22. Network-level access, in each case, is the whole game.

Assessment: Device exploitation is drifting from the endpoint back into the network, and that shifts who can plausibly be behind an intrusion. A bug requiring the attacker to own the radio access network is not a bug most buyers can use; it is one a government or a lawful-intercept intermediary can. The corollary is that unpatched, low-cost basebands function as a policy question about handset markets rather than a vendor-response question — Unisoc has not answered SSD at all. Two habits to hold: do not upgrade a capability into an incident because it is alarming, and note that recirculated reports acquire sharper politics than their own findings support, in both directions.

Sources: The Hacker News — SSD advisory: Unisoc modem kernel access via VoLTE video call · Citizen Lab — “Bad Connection: Uncovering Global Telecom Exploitation by Covert Surveillance Actors,” Report No. 192, 23 April 2026 · CISA — advisory AA26-097A on Iran-affiliated actors targeting ICS devices · SecurityWeek — US warns of Iranian hackers targeting Siemens, Schneider and Rockwell ICS devices

Watch Tomorrow — The Files' Forward Radar

Iran File: Whether UKMTO publishes advisories for 17–18 August, and whether Esmail Baghaei’s truncated line about an Iran–Oman “understanding” appears in full on the Foreign Ministry’s own Persian-language readout.
Sahel Monitor: Whether the AES publishes a capitalisation figure or a constitutive instrument for its confederal bank, after Financial Afrik’s 16 August piece asked where the institution has gone.
Sudan Crisis Monitor: Whether the IPC issues an analysis round superseding the September 2025 file, which is what the 19.5 million acute-food-insecurity figure and the El Fasher and Kadugli famine classifications currently rest on.
The Brotherhood Brief: Whether Oklahoma’s Office of Homeland Security or Department of Public Safety names a predicate offence or a deadline for the investigation Governor Stitt ordered on 12 August, and whether CAIR files in response as its Texas and Florida chapters did.
Israel Press Review: Whether the certified Likud slate matches the DRI exit-poll order that Israel Hayom printed on Monday night from a sample of 700, and how many sitting ministers land outside realistic slots.
Western Media Watch: Whether any wire independently confirms US Ambassador Mike Huckabee’s reported condemnation of “Israeli terrorists” over the Qusra siege, and whether the embassy stands behind the phrase.
Digital Front Monitor: Whether the original Hebrew Shin Bet and INCD notice names a threat cluster, a number of targeted journalists or any indicators of compromise, none of which appear in the Haaretz text.