Saudi Arabia pushed air-raid alerts to Riyadh residents at 4am and 6am on Saturday. By afternoon a fuel tank bearing the Aramco logo was burning at a depot near King Khalid International Airport, and Yahya Saree was claiming two operations on Telegram. The coalition’s own account — one ballistic missile, destroyed at dawn, no casualties — does not describe the same thing as the smoke. And the nine-day lull it is said to have broken never covered Yemen in the first place.
By The Editor · Iran File · September 20, 2026
One night, four separate facts
What is established about 18–19 September, each from a different party
9
Days since the last Iranian missile launch on a host state
20
Missiles fired at Muwaffaq Salti air base, 8–9 September
0
Casualties reported from the Riyadh intercept
4
Additional locations the coalition says it defended
GlobalSecurity.org OPREP 18 Sept; Saudi-led coalition via AP; FlightRadar24 via France 24
What the war costs at the pump
US national average for regular gasoline, a year ago against 18 September 2026
GlobalSecurity.org daily operational report, 18 September 2026
Three propositions arrived in the same news cycle and have been collapsed into one almost everywhere. The first is confirmed: the Saudi-led coalition said on the record that its air defences destroyed a missile fired at Riyadh at dawn on 19 September, and said it foiled attacks on Bish, Farasan, Taif and Yanbu. The Associated Press reports no casualties or damage. The second is observed: Reuters video and photographs, and an AFP journalist on the ground, place a fire and a large plume of black smoke at the fuel storage area of King Khalid International Airport, on a tank carrying the Aramco logo. The third is claimed and nothing more: Saree’s Telegram statement said Yemeni forces used a “large number of ballistic and cruise missiles and drones” and that “the first targeted sensitive sites in the Saudi capital, Riyadh, and the second targeted Aramco facilities in Yanbu.” AP notes the claim came without evidence. No outlet has established what caused the depot fire — a strike, intercept debris, or something else. Aramco did not respond to AP’s request for comment.
The distinction the coverage lost is the one that matters militarily. GlobalSecurity.org’s daily operational report, timestamped to an 0500 ET cutoff on 18 September, put the Iranian fire pause in its ninth day, with no Iranian ballistic missile or drone attack on a host state since the twenty missiles fired at Muwaffaq Salti air base on the night of 8–9 September. If Saturday’s launches were Houthi, the pause on Iranian state forces is intact and the Yemeni front is simply a different war being fought on the same map. The economic damage is already booked regardless. The Saudi East-West pipeline has been shut since 11 September; Trading Economics reports satellite imagery and industry sources showing three pumping stations damaged, one more than previously known, on a line it describes as carrying seven million barrels a day toward the Red Sea. Bloomberg reports Saudi exports have plunged, with the Future Investment Initiative due in Riyadh next month. FlightRadar24 rated King Khalid at 5.0, its maximum disruption index.
The diplomacy moved in the same window and is even harder to verify. Four wires reported on Saturday that Iran had conveyed conditions to Washington through Qatar for re-engaging in talks and ending the war; none reported what the conditions are, and none carried a US response. ABC’s version attributes it to an Iranian figure speaking to Al Jazeera, unnamed in the text; the Pakistani outlet Aaj attributes the statement to Rezaei. The one item in the file that rests on a published government document runs on a different track entirely. Pakistan’s Foreign Office readout of Saturday’s call between Deputy Prime Minister Ishaq Dar and Abbas Araghchi says Dar pressed the importance of uninterrupted petroleum supply and the safe passage of maritime vessels, called dialogue the only viable path, and records that the two agreed to meet again on the sidelines of the 81st UN General Assembly in New York. It says nothing about Iranian terms.
Assessment: What to distrust, in order. Bloomberg put “Drone Attacks” in its headline when the coalition’s own statement described a ballistic missile — the display headline goes further than the slug, and further than the source. The ninety-percent figure for degraded Iranian air defences is, by the tracker’s own admission, largely unrevised since March; it is a carried-forward number, not a fresh judgement. Do not print a Saturday oil price: markets were closed, and the last verifiable marks are Thursday and Friday. The seven million barrels a day attached to the East-West line is a capacity allocation, not a measured flow, and the pumping-station damage rests on a market-data publisher citing unnamed industry sources. And treat the Iranian terms as a transmission, not a position: an unnamed source telling one broadcaster that conditions exist is the thinnest possible basis for four wires. The checkable thing is timestamps. If Saree’s claim post-dates the depot fire by hours, a claim has attached itself to an event.
Iran FileMEFILES tracking
Evidence8 cited sources · ABC News · Al Jazeera · France 24 · Bloomberg and 4 more
The file
Iran File · 61 editions since 19 July 2026 · 187 stories filed · 3 in this edition · rail shows the last 60
“Nine nights unstruck — and not one of them was ever Yemen’s to break.”
MEFILES · the cartoon · GlobalSecurity.org put the Iranian fire pause in its ninth day on 18 September; the Riyadh fuel-depot fire came the following afternoon
$4.37
US regular gasoline per gallon, against $3.19 a year earlier — the number Speaker Johnson says the war now turns on
GlobalSecurity.org daily operational report, 18 September 2026
27%
share of Asia–Europe container capacity routed through the Red Sea in September, both directions combined
Sea-Intelligence Sunday Spotlight Issue 782, September 2026 sample
5.0
FlightRadar24 disruption index at King Khalid International — its maximum, meaning long delays and several cancellations
FlightRadar24 via France 24/AFP, 19 September 2026
11
areas in western North Kordofan the Sudanese army says it took, none of them independently confirmed
Sudanese Armed Forces general command via Sudan Tribune and Radio Tamazuj, 17–18 September
under 2 min
time the Florida Cabinet took to approve a process for designating CAIR a domestic terrorist organisation
Florida Phoenix, reporting by Mitch Perry, 11 September 2026
Iran File
The regime, the IRGC, the proxies, the strait — read from the Gulf, not from Washington.
Houthi forces said they struck “sensitive” sites in Riyadh and the Red Sea port of Yanbu on Saturday. Saudi Arabia has not confirmed the cause of a fire at King Khalid International Airport’s fuel storage area.
The claim and the fire are two separate propositions, and only one of them is documented. ABC News published video on 19 September described as a large plume of black smoke rising from the fuel storage area at King Khalid International Airport in Riyadh; ABC’s own text states that Saudi Arabia had not immediately commented on the Houthi claims. Haaretz’s live blog carried the Houthi assertion that they had attacked “sensitive” sites in Riyadh and at Yanbu, the Red Sea oil port; Al Jazeera’s 19 September liveblog carried the same. Yanbu is a repeat target rather than a new one — on 24 August the Houthis claimed a strike on a Saudi oil tanker off the port, and Bloomberg reported on 10 September that the group escalated against Bab al-Mandeb traffic in July after Saudi Arabia shifted more of its crude exports to the Red Sea route.
The timing of the formal claim matters more than its content. The Times of Israel, reporting a mid-September round of Houthi attacks into Saudi Arabia, noted that military spokesman Brig. Gen. Yahya Saree did not specify when the attack took place and that the group often delays its claims by hours or days; Ansarullah Media Centre released undated footage on 12 September. Separately, GlobalSecurity.org’s daily operational report for Day 203, dated 18 September with an 0500 ET cutoff, recorded the fire pause entering its ninth day with no Iranian ballistic missile or drone attack on any host state — placing the pause’s start on or about 10 September, with 20 missiles fired at Muwaffaq Salti air base on the night of 8–9 September still the most recent Iranian attack of that type.
Assessment: Read the pause and the Yemeni front as two clocks, not one. If the pause held through 18 September and Saturday’s events were Houthi, then what has stopped is Iranian state fire on host-state targets, not the war. Language about a broken ceasefire collapses that distinction and does the Houthis' work for them: being credited with a hit on the Saudi capital is worth more to Sanaa than the hit itself, which is precisely why an unspecified claim timing should be treated as unresolved. Saudi silence is not confirmation either way. One more caution: GlobalSecurity’s standing estimate that Iranian air defences are roughly 90 percent degraded is flagged in its own report as largely unrevised since March. It is a carried-forward number, not a fresh judgement.
Iran FileMEFILES tracking
9days of the Iranian fire pause as of GlobalSecurity’s 18 September cutoff
Evidence6 cited sources · ABC News · Haaretz · Al Jazeera · Times of Israel and 1 more
Pakistan’s foreign ministry confirmed a Saturday call between Ishaq Dar and Abbas Araghchi focused on oil supply and shipping. The parallel report that Iran has passed conditions to Washington via Doha and Islamabad rests on a single unnamed Iranian figure.
The documented item is the call. Pakistani Deputy Prime Minister and Foreign Minister Ishaq Dar spoke by telephone with Iranian Foreign Minister Abbas Araghchi on Saturday, according to a Pakistani Foreign Office statement reported by Aaj English TV. Dar stressed the importance of uninterrupted supply of petroleum products and the safe passage of maritime vessels, calling the issue especially significant for developing countries and global supply chains, and said dialogue and diplomacy remained the only viable path to peace and stability in the region. The two agreed to continue close cooperation and to meet again on the sidelines of the 81st session of the UN General Assembly in New York. What was said inside the call is not independently known; the readout is a statement of position, and it is silent on any Iranian conditions document.
The conditions story is thinner. An Iranian figure — unnamed in the material available, identified only as having spoken to Al Jazeera — said Iran’s terms for ending the war had been conveyed to Washington through Qatar and Pakistan, and that they include lifting the US naval blockade and an end to the war “on all fronts.” Haaretz’s live blog characterised the terms as awaiting a response. The Doha channel itself is established: Qatari Prime Minister and Foreign Minister Sheikh Mohammed bin Abdulrahman bin Jassim Al Thani met Araghchi in Tehran on 27 August, a visit Iranian Foreign Ministry spokesman Esmail Baghaei described as part of ongoing consultations including the continuation of Qatar’s mediation, and Foreign Policy reported on 4 August that Qatar had confirmed progress in indirect US–Iran talks. Araghchi told IRNA on 1 September that Washington must return to its commitments and to the Islamabad Memorandum of Understanding.
The pressure behind the diplomacy is priced. Saudi Arabia’s East-West Crude Oil Pipeline was shut on 11 September after attack; Trading Economics reported on 18 September that satellite imagery and industry sources indicated three pumping stations were damaged, one more than previously reported, and that Riyadh expected a restart “in the next days.” Brent stood at $104.33 on the morning of 18 September, around $37 higher than a year earlier, per Fortune. GlobalSecurity’s report put US regular gasoline at $4.37 a gallon against $3.19 a year ago, and recorded a House vote of 220 to 204 to limit the President’s power to strike Iran, with seven Republicans breaking ranks, alongside Speaker Mike Johnson’s summary of the majority position: “Iran will not have a nuclear weapon. That’s taken care of, and now we got to get gas prices down.” On 16 September, President Donald Trump said the United States was “hopefully toward the end” of the war and that he had spoken with Iranians “directly,” while repeating that the conflict would end after the November elections.
Assessment: Note the asymmetry in who is willing to be named. Islamabad puts its foreign minister on the record about oil cargoes and shipping lanes — low-cost, deniable of nothing, useful at the General Assembly. Tehran’s actual terms travel through an unnamed mouth to a single broadcaster, which lets them be disowned if Washington does not bite and amplified if it does. That is a negotiating technique, not a leak. Watch two things this week: whether IRNA or the foreign ministry ever attaches a name to the conditions, and whether the East-West pipeline restarts. Johnson’s line is the honest one about the American clock — the demand is not a settlement, it is a price at the pump before November.
Iran FileMEFILES tracking
$4.37US regular gasoline a gallon on 18 September, against $3.19 a year earlier
Evidence6 cited sources · Aaj English TV · Al Jazeera · ABC News · CBS News and 2 more
Niger’s junta has released no count, no names and no charges since late August. The gap is being filled by second-hand reporting the desk cannot yet match against a primary source.
The sequence is thin and it is worth stating plainly. Africanews published on 30 August 2026 under the headline “Dozens of soldiers arrested in Niger after attempted mutiny.” “Dozens” is the only quantity that has reached this desk, it is now three weeks old, and it is not attached in anything we have been able to read to a named official, a court filing or a CNSP communiqué. On 18 September The Africa Report published “After Niger’s coup attempt, Tiani is running out of people to trust,” a headline that implies the detentions have continued and moved upward through the officer corps. The Africa Report is genuinely well-sourced in Niamey and also frequently single-sourced on palace politics. Until a second outlet carries the same officer names, treat any roster of detainees as claimed rather than established.
Even the label is contested. The Egmont Institute published an analysis in late August asking whether what happened was a “moody mutiny or coup attempt” — disputing, in its framing, the characterisation that has since hardened into shorthand across the wires. That distinction is not pedantry. A coup attempt justifies a purge of general-officer rank and an emergency security posture; a pay-and-conditions mutiny does not, and the information apparatus of the Alliance of Sahel States has an obvious interest in which word sticks. One discrete and checkable fact sits underneath all of it: The Africa Report reported in early September that the journalist Moussa Kaka, a long-standing RFI correspondent, was missing as arrests followed the events in Niamey. That is a fact with a name on it, and it has not been resolved in anything this desk has seen since.
Assessment: Be honest about what this item is. Our sweep this weekend surfaced no wire copy datelined 18–20 September from Niamey at all — freshest material was two days old — and we were not able to read the body text of the pieces cited above. We are publishing the shape of the record, not its contents, and readers should discount accordingly. What the shape shows is a junta that has let an information vacuum stand for three weeks. Vacuums around detentions are rarely accidental: an unspecified “dozens” deters without committing the CNSP to charges, trials or a number anyone can later audit. The test to watch is not rhetoric from Niamey but whether any general-officer name is confirmed by two independent outlets. Until then, Moussa Kaka’s whereabouts is the more tractable question, and the one with a single phone call behind it.
Sahel MonitorMEFILES tracking
3 weekssince the last sourced arrest figure out of Niamey
Evidence5 cited sources · The Africa Report · Africanews · Egmont Institute · Critical Threats (AEI/ISW)
The file
Sahel Monitor · 61 editions since 19 July 2026 · 123 stories filed · 2 in this edition · rail shows the last 60
Maliweb reported the shortage over in August; a commercial risk vendor described the blockade as active through July. The desk is not able to say which is true.
The chronology is legible up to a point. AFP copy carried in October 2025 dated the imposition of the fuel blockade on Bamako to roughly September of that year. Maliweb, the Bamako outlet, reported a renewed shortage in March 2026, then published on 8 August 2026 under a headline announcing the end of the shortage in the capital — relief for users, a restart of activity. Against that, the risk vendor OpsCon published assessments on 16 June and 25 July 2026 describing the Bamako blockade and siege as ongoing. These cannot both be a full account. Maliweb is based in the capital and has previously been directionally optimistic on supply; OpsCon is a commercial intelligence product this desk cannot vouch for and whose sourcing is not public. We are not going to pick between them on reputation alone.
What would settle it is not another aggregator but a primary series: EDM load-shedding notices, statements from ONAP or the private fuel importers, or Malian customs volumes. There is one dataset with chartable potential — the ACLED and Bellingcat joint tracking published on 3 December 2025 under the title “Mali under siege: Tracking the fuel blockade crippling Bamako,” which counted attacks on fuel convoys. Whether that series has been carried forward into 2026 is exactly the question, and we have not confirmed that it has. Until it is confirmed, a monthly convoy-attack chart would be artwork in search of a finding.
Assessment: The interesting thing about a supply siege is that its status is itself a contested information object. A government that has restored fuel to the capital has every reason to say so loudly, and a government that has not has every reason to say so anyway. Equally, risk vendors sell subscriptions on continuing danger. Neither incentive is disqualifying, but neither is neutral, and the resulting contradiction is not a puzzle to be split down the middle — one of these accounts is closer to right. The honest position for a reader is that the blockade’s current force is unknown to us. We would rather print that than a confident sentence with a fifty per cent chance of being wrong, which is the sentence most of the trade will run.
Sahel MonitorMEFILES tracking
2irreconcilable 2026 accounts of the same blockade
The SAF general command’s account of a push toward the Darfur border is uncorroborated by any third party, and the RSF has said nothing. If it holds, the siege framing that dominated the first half of 2026 is obsolete.
On Thursday 17 September the Sudanese Armed Forces general command announced that its troops and allied forces had taken 11 areas in North Kordofan after fighting with the Rapid Support Forces: Kajmar, Sharshar, Al-Baniyah Al-Kurayniyah, Al-Qulay’at, Awlad Hazmah, Magwildat, Rayshan, Al-Qaa, Ghabat Al-Laqad, Al-Kukaiti and the area around Al-Mazrub. The offensive targeted RSF positions near Sodari, Umm Badr and Hamrat al-Sheikh in the west of the state; SAF said it pursued retreating fighters toward the Darfur border and is sweeping west of the state capital, El Obeid. Sudan Tribune places the push along the Forty Days Road, the desert corridor linking Kordofan to Darfur, and reports it follows weeks of SAF drone strikes along that route. An unnamed general command spokesperson said operations would continue until state authority is restored and civilians protected. Sudan Tribune states the RSF did not immediately respond and that it could not independently verify the account.
The claim sits on top of a real July shift. On 25 July SAF and allied forces retook Bara — North Kordofan’s second city, roughly 45 km east of El Obeid — along with Al-Baraka and Um Sayala, a sequence Ahram Online reported the following day from the General Command’s own announcement. Mutawakil Ali Wakeel, spokesman for the Joint Force, confirmed on the record that Al-Baraka, Um Sayala, Um Qurfa, Jabrat Al-Sheikh and Bara had been secured by the army, the Joint Force, Qashan forces and supporting troops. Sudan Tribune’s analysis at the time held that Um Sayala, near the export road to Omdurman, opened a supply corridor into El Obeid. Military officials, unnamed, told the same outlet 73 RSF armoured vehicles were destroyed at Bara — a battle-damage figure supplied by the winning side and worth nothing more than that. Minni Minawi, governor of the Darfur Region, praised this week’s advance on X.
Assessment: The useful thing here is not the 11 place names, which may or may not survive contact with satellite imagery, but what they retire. In January the Yale Humanitarian Research Lab was warning of an imminent RSF siege of El Obeid; by 6 July Al Jazeera was asking whether the city would be Sudan’s next el-Fasher. Any copy still running that frame is describing a battlefield that changed in late July. Note too the sourcing chain: Sudan Tribune’s own 18 September backgrounder misdates the Bara capture to late June, contradicting its reporting of 25 July. Small errors compound in a war covered largely through belligerent statements. Treat RSF silence as data, not as concession.
Sudan Crisis MonitorMEFILES tracking
11areas SAF claims to have taken in North Kordofan, none independently verified
Evidence6 cited sources · Sudan Tribune · Radio Tamazuj · Ahram Online · Al Jazeera
The file
Sudan Crisis Monitor · 61 editions since 19 July 2026 · 129 stories filed · 2 in this edition · rail shows the last 60
Five multilateral bodies consulted Burhan, his prime minister and allied political blocs on 9 September. No RSF-side interlocutor appears in any published account of the mission.
The international Quintet — the African Union, IGAD, the European Union, the Arab League and the United Nations — held consultations in Khartoum on Wednesday 9 September. The delegation comprised Mohamed Ibn Chambas, the AU High Representative for Silencing the Guns; Pekka Haavisto, the UN Secretary-General’s Personal Envoy for Sudan, who had arrived the preceding Friday; Annette Weber, the EU Special Representative for the Horn of Africa; Lawrence Korbandy, IGAD’s Special Envoy; and Ambassador Zaid Al-Sabban of the Arab League. They met Lt Gen Abdelfattah El Burhan, Prime Minister Kamel Idris, the Democratic Bloc Alliance and the Sudanese-Sudanese Dialogue Preparation Committee. Idris said the dialogue “belongs to the Sudanese people” — the rendering carried by the state agency SUNA; Dabanga translates the same Arabic as “the property of the Sudanese people”. His media office said he briefed the delegation on what it called “wrong narratives” about the war. Stéphane Dujarric, spokesman for the UN Secretary-General, called it a “good offices mission”.
Running alongside, and separately, is the Quad track — the UAE, Saudi Arabia, Egypt and the United States. Massad Boulos, the US Senior Adviser for Arab and African Affairs, told The National on 15 September there is “no future” for either Burhan or Mohamed Hamdan Dagalo in Sudan, and conceded the roadmap agreed last year has stalled. “We all bear the responsibility that it has not borne fruit yet,” he said. “If we want real results on the ground for the benefit of the Sudanese, our road map needs to be put into effect.” The same report says Washington has in recent weeks pushed to widen the UN arms embargo from Darfur to the whole of Sudan and imposed measures on the Sudanese government over alleged chemical weapons use, and that Burhan has vowed to fight until the RSF is defeated.
Assessment: Two cautions. First, a Sudanese-Sudanese dialogue convened in the capital under the authority of one belligerent, with its government, its allied political bloc and its preparatory committee in the room, is a consolidation exercise as much as a peace process. Whether the Quintet intends to travel to Nyala is the question its EU-issued statement should answer. Second, read The National’s framing against its address: it is Abu Dhabi-based, and the UAE is both a Quad member and the party most often accused of arming the RSF. An outlet in that position foregrounding “no future for either general” and new US measures against Khartoum is making an argument. The chemical weapons allegations remain, in everything we could verify, a second-hand characterisation of other outlets' reporting.
Sudan Crisis MonitorMEFILES tracking
0RSF-side interlocutors named in any published account of the Quintet’s Khartoum mission
Evidence5 cited sources · Dabanga · Arab News · allAfrica/SUNA · The National
The Security Council was told on 17 September that Syrians were protesting fuel price rises and that deadly clashes with an ISIS-affiliated group had taken place in the south. Almost every detail below that sentence is still unconfirmed.
The only independent confirmation retrieved for either story is the United Nations' own framing. Reporting the Security Council session of 17 September, UN News said the Council was discussing “recent reports of deadly armed clashes with an ISIS-affiliate terrorist group in the south and protests over rising fuel prices.” The detail comes from ANHA, the news agency aligned with the former AANES and SDF structures in the north-east, whose 17 September index carried “Protests in Damascus, Deir ez-Zor, Hasakah over fuel price hikes,” “Syrian Energy Ministry sets 3 diesel prices” and “Protests in Hasakah, Amuda over fuel prices.” Its 19 September index carried a further protest in Hasakah, which would put the demonstrations into a third day. No crowd figures, no confirmation of the pricing tiers from the Energy Ministry or SANA, and no account of whether security forces intervened, were available to this desk.
On the southern clashes the UN named no group, no location and no casualty figure in the passage retrieved. That matters, because the ISIS remnant has been concentrated in the Badia and the north-east rather than in Daraa or Quneitra, and a jihadist formation operating in the south would be a change in the threat map rather than a continuation of it. ANHA’s 19 September index also reported that security tensions had continued in al-Sanamayn, in Daraa governorate, for a third day amid house searches — dating the operation to roughly 17 September — and a young man killed in a motorcycle explosion in the Daraa countryside, with no name and no attribution. Both are single-sourced. Sweida, further east, remains outside Damascus’s control: Arab News reported at least ten Internal Security Forces members wounded there in renewed fighting on 31 August.
Assessment: The pairing is what to watch, and what to distrust. A fuel grievance that surfaces simultaneously in the capital, in Arab-majority Deir ez-Zor and in the formerly Kurdish-administered north-east is a fiscal story, not a regional one, and it cuts across the constituencies Damascus has spent a year trying to keep separate. ANHA has an institutional interest in documenting exactly that, and in documenting house searches in Daraa; the UN’s one-line reference confirms the protests existed, not their scale. Note too how the Council’s framing welds street protest and jihadist violence into a single sentence. Governments find that pairing useful. Reporters should not adopt it.
Syria FileMEFILES tracking
3governorates with reported fuel protests: Damascus, Deir ez-Zor, Hasakah
Evidence5 cited sources · UN News · ANHA · Arab News
The file
Syria File · 61 editions since 19 July 2026 · 51 stories filed · 2 in this edition · rail shows the last 60
Mazloum Abdi now works for the presidency and still holds public meetings in Kobani. The friction has moved from military command to language rights and the dismantling of AANES-era institutions — the files the integration deal left blank.
The sequence is firmly established. On 19 January 2026 the SDF agreed to cede military, administrative and territorial control across much of the north-east under a fourteen-point, US-brokered ceasefire and integration agreement negotiated through envoy Tom Barrack; Anadolu Agency published the full terms, which included withdrawal of YPG/SDF formations east of the Euphrates and the handover of Raqqa and Deir ez-Zor governorates, the ISIS detention camps, the border crossings and the oil fields to Damascus. Anadolu is Turkish state media and describes the SDF as dominated by “the terrorist group YPG”; it is cited here for the text of the terms, not the characterisation. On 25 August, from the People’s Palace in Damascus, Abdi announced the end of the SDF’s mission and its dissolution as an independent force. Two days later Sharaa appointed him Adviser to the Presidency, per Arab News.
What that produced is now visible in the north-east’s complaints, and they are no longer about command structures. Across ANHA’s 17 and 19 September indices: students in Qamishli concluding a sit-in for mother-tongue education; a Hasakah workshop on the status of the Kurdish language; the Tel Tamr Women’s Council calling Kurdish a cultural and linguistic right; a school strike in Deir ez-Zor over the abolition of the Euphrates Educational Complex; residents of the Deir ez-Zor countryside demanding the reversal of a decision to close several educational complexes. The same indices show Abdi meeting the presidential adviser for tribal affairs and the governor of Aleppo on the return of residents, and holding a public meeting in Kobani. ANHA is the outlet with the strongest interest in documenting this particular grievance, and none of these items was corroborated elsewhere.
There is one fixed date against which all of it will be measured. The FY2026 NDAA, signed 18 December 2025, repealed the Caesar Syria Civilian Protection Act, but required the President to certify to Congress on a recurring basis for four years that Damascus is acting against ISIS and other terrorist groups, removing foreign fighters from government, upholding religious and ethnic minority rights, refraining from unprovoked military action against neighbours including Israel, implementing the 10 March 2025 government–SDF agreement, and conducting credible investigations into post-December 2024 abuses. Reporting on the interval conflicts: Just Security describes a 180-day cycle, Karam Shaar Advisory a 120-day one.
Assessment: Integration did not end the north-eastern question; it relocated it. A dispute over brigade structures is negotiable between commanders. A dispute over whether Kurdish is taught, and whether AANES-era educational administration is absorbed or abolished, is constitutional, and the January agreement was silent on it — as SyriacPress’s own headline on the dissolution conceded. Abdi’s dual position, presidential adviser in Damascus and public figure in Kobani, is the mechanism holding that silence together, and it is not obviously durable. Watch the YPJ: reporting on whether it was ever actually dissolved remains contradictory, and that is the quietest available place for the deal to fail.
Syria FileMEFILES tracking
6conditions Washington must certify to keep Syria’s sanctions relief in place
Evidence6 cited sources · Anadolu Agency · SyriacPress · Arab News · ANHA and 2 more
A consultancy’s modelled share of Asia–Europe container capacity, not a Suez Canal Authority count — and the recovery is being carried almost entirely by ships heading back to Asia.
Sea-Intelligence’s Sunday Spotlight, Issue 782, put combined Asia–Europe Red Sea routing “normalisation” at 27 percent for September 2026, a figure picked up by trade press on or about 17 September. The estimate is built from the consultancy’s Trade Capacity Outlook database, which identifies named container vessels that have recently transited the Red Sea or are scheduled to. The directional split is the substance. Head-haul capacity from Asia to Europe held in a 13–25 percent band, essentially unchanged. Back-haul capacity from Europe to Asia moved from 18–26 percent in August to 25–47 percent in September. Mediterranean–Asia services were routing 57 percent of capacity through the Red Sea; North Europe–Asia services, 27 percent. Sea-Intelligence’s own explanation, as reported, is unromantic: carriers are repositioning tonnage toward Asia after congestion and delays at Asian hubs, and Mediterranean departures are prioritised because they offer the shortest return leg.
The carrier-level picture behind this was reported in late August by Splash247, and should be dated as such rather than read as new. MSC had officially restored Suez routings on four east–west services — Jade and Tiger on Asia–Mediterranean, Albatros on Asia–North Europe, Himalaya on India–Mediterranean. Linerlytica counted eleven Bab el-Mandeb transits by Maersk in both directions in a single week, and fifteen by CMA CGM. Maersk said more than 30 percent of its previously Cape-routed volumes had returned to Suez, a company claim not independently verified. The analyst Lars Jensen wrote on LinkedIn that “at this pace it might be reasonable to see a normalization by end-2026,” while cautioning in the same breath that some services may keep sailing around Africa deliberately, to soak up the surplus capacity that shorter voyages release. Round-Africa routing became the industry standard after the Red Sea crisis began in December 2023.
Assessment: Distrust the round number. Twenty-seven percent is a consultancy’s model of container capacity share, not transits and not receipts, and a back-haul surge driven by repositioning empty-ish tonnage toward congested Asian hubs is the kind of move that reverses in a month. Jensen’s caveat is the more durable insight: the Cape route is now partly a capacity-absorption mechanism, which means carriers have a commercial reason to return slowly even if the security picture allows speed. October’s sample settles whether September was a decision or a logistics accident. For Cairo, the distinction is fiscal — capacity share arriving before toll revenue does nothing for the external accounts.
Egypt FileMEFILES tracking
27%Asia–Europe container capacity routed via the Red Sea, September 2026 (Sea-Intelligence)
The most recent hard figures on Suez revenue and Egypt’s external position predate this window by weeks or months, and the two series that matter most are routinely conflated.
The revenue record is thinner than the routing commentary suggests. Egyptian Streets reported on 30 June 2026 that Suez Canal receipts rose 23 percent year-on-year in fiscal 2025/26. In February, the canal authority’s chairman was quoted by Amwal Al Ghad and Daily News Egypt putting early-2026 revenue at $449m across 1,315 ships. The State Information Service — the government’s own outlet, so a target rather than a forecast — said in December 2025 that the authority projects 30 percent revenue growth by 2027. Against that, the widely repeated line that traffic remains 41 percent below pre-crisis volumes, and the authority’s description of a “considerable increase” in Maersk containership passages, reach us second-hand through Splash247’s late-August account rather than from a retrieved SCA release. No August or September monthly figure from the authority was obtained. The gap between the consultancies' capacity share and the canal’s own receipts is the number to watch, not the headline.
The financing side is equally static. The IMF Executive Board completed the fifth and sixth reviews under the Extended Fund Facility and the first under the Resilience and Sustainability Arrangement in a single action on 26 February 2026, bundled with a rephasing of access, an extension of the arrangements, a waiver of nonobservance of a performance criterion and modification of others. AGBI put the disbursement unlocked at about $2.3bn. The architecture of that decision — two reviews merged, the calendar rephased, a missed criterion waived — describes a programme being kept in step with reality rather than one running to plan. Banking-sector net foreign assets stood at $28.418bn in July 2026, or EGP 1.45 trillion, per the central bank. That is not the CBE’s own net foreign asset series, which was $15.22bn in May; the two are frequently confused. Figures circulating for August reserves and the pound rest on an aggregator with no Egypt reporting and are not published here.
Assessment: The seventh review date is the live variable and it is not public. February’s waiver matters less for what was forgiven than for whether the same criterion slips again, because that determines whether the next board action is routine or another bundle. Readers should treat Cairo’s growth prints and the Fund’s outlook as two different documents — the divergence has been a standing feature since April. And the Gulf question the desk keeps asking remains unanswered: not new tourism or real-estate FDI announcements, which are plentiful, but what the Gulf central banks are doing with deposits already sitting at the CBE. Silence there is not the same as rollover.
Egypt FileMEFILES tracking
$28.418bnEgyptian banking-sector net foreign assets, July 2026 (CBE, via Daily News Egypt)
Evidence6 cited sources · IMF · AGBI · Daily News Egypt · Egyptian Streets and 2 more
Washington’s end-September ultimatum on the Iran-aligned factions lands on a government that filled 14 of 23 cabinet posts in May and has not closed the two that run the security file since.
The Council on Foreign Relations' conflict tracker, updated 29 July, records that Prime Minister Ali al-Zaidi faces a September 2026 deadline to disarm pro-Iran militias and to convince Washington that Iraq is not beholden to Tehran, a task the tracker notes is complicated by continuing US and Israeli strikes on Iranian-backed factions. Shafaq News carried a 15 September piece framing two deadlines as converging at month’s end — the disarmament ultimatum and the end of the American military presence — under the headline “September’s deadline besieges Iraq… a final warning to the factions: Washington will act.” That item sits in Shafaq’s translations section, meaning the agency is rendering foreign reporting rather than its own, and the originating outlet is not identified on the page; the line about Washington acting should not be read as Shafaq’s own reporting. The withdrawal half of the calendar, in what this desk could retrieve, rests on tertiary sourcing, and we are not asserting it.
What is documented is the state of the government that would have to execute any disarmament. The Congressional Research Service records that Zaidi was sworn in in May after parliament approved his programme and 14 of 23 cabinet nominees. Al Jazeera reported the same day that lawmakers had failed to agree on key postings including interior and defence; the Foundation for Defense of Democracies' Long War Journal, a Washington outlet that campaigns against Iranian influence in Iraq, confirms those two ministries were among the nine unfilled. The Arab Weekly notes a confidence vote carries on half the ministries plus one. The timeline compiled by the Turkish think tank ORSAM runs from the 11 November 2025 election to a speaker on 29 December, a president on 11 April, a prime minister-designate on 27 April and the confidence vote on 14 May. Al Arabiya reported that day that Zaidi vowed to ensure a state monopoly on arms.
The pressure instruments are itemised by the UK House of Commons Library in its 8 July briefing: further sanctions on the Popular Mobilization Forces, sanctions on those alleged to supply it with oil revenue, and a halt on some Iraqi oil export revenues. The same briefing records that Washington ended the waiver permitting Iraqi imports of Iranian electricity in April 2026, while the gas waiver — covering roughly 40 percent of Iraqi needs — survived. On 19 September the US Mission in Iraq issued a security alert saying that “due to tensions in the Middle East, the security environment remains complex with the potential for unforeseen escalation.” Mission Iraq issues such alerts routinely and we could not compare it against the previous one; absent that comparison it is boilerplate, not signal. The same day, the state Iraqi News Agency led its front page with a Baghdad screening of the Iranian film “Natour Dasht,” part of an “Iran Cinema in Baghdad” season run by the Iranian cultural counsellor’s office.
Assessment: Deadlines of this kind are usually instruments, not cliffs. Nothing retrieved this week establishes what Washington does on 1 October if the factions are not disarmed, and no statement from Zaidi, Kataib Hezbollah or Asaib Ahl al-Haq has surfaced to say what they expect. Treat CRS’s “hundreds of attacks since February” as a characterisation without a published method, not a count. The load-bearing fact is structural: a prime minister with no confirmed defence or interior minister has no bureaucratic instrument for disarmament even if he wants one, which makes partial compliance and quiet extension the likeliest outcome. Watch who holds the acting security portfolios, not the rhetoric.
Iraq FileMEFILES tracking
14 of 23ministries approved at Zaidi’s May confidence vote; defence and interior still unfilled
Evidence6 cited sources · CFR Global Conflict Tracker · shafaq.com · congress.gov · Al Jazeera and 2 more
The file
Iraq File · 61 editions since 19 July 2026 · 47 stories filed · 2 in this edition · rail shows the last 60
Throughput on the Ceyhan line and the share of Erbil’s budget Baghdad has actually paid are both cited as facts. Both are assertions by interested parties, and the federal counter-accounting is not public.
The northern export route reopened on 27 September 2025 after two and a half years shut over the handling of revenues between Baghdad and Erbil, OilPrice reported that December, citing Rudaw’s account of an agreement extending the arrangement to March 2026 — a three-step chain in which the State Oil Marketing Organization chief who supplied the quote is not named, and what replaced the deal after March has not been established. In April, the KDP-aligned Kurdistan24 reported that Basra crude would begin moving through the Kurdistan pipeline to Ceyhan, lifting total exports on the route to 330,000 barrels per day — a projection, not realised throughput. Al Arabiya’s Iraq index on 1 September carried the Kurdistan Region saying output had resumed at up to 230,000 bpd. Shafaq News reported a one-day interruption in March attributed by a single anonymous North Oil Company source to technical problems.
The money side rests on a February 2025 mechanism under which federal salary transfers to the Kurdistan Region were tied to Erbil moving 120 billion dinars a month in non-oil revenue to Baghdad, a linkage Shafaq News reported in May citing prior statements from both the Iraqi Finance Ministry and the KRG. Against that, The New Region reported in late June the KRG’s claim that the federal government had sent only 42 percent of the region’s budget share over the past seven years. The figure originates with the party it benefits, the official who gave it is not named in the report, and no federal counter-figure has been published. The Commons Library briefing separately records that Washington has halted some Iraqi oil export revenues as part of its pressure campaign — a lever that runs through the same pipes and the same budget.
Assessment: The pattern to hold onto is that the oil file is argued in numbers nobody audits. A KRG production claim, a KDP-aligned projection and a KRG budget-shortfall percentage are all reported as though they were measurements; loading data at Ceyhan or SOMO’s own series would settle most of it and is not in circulation. One genuinely large question sits unresolved: tertiary reference sources assert an International Chamber of Commerce arbitration placing Kurdish hydrocarbons under central authority. This desk could not verify that against the award or wire reporting and does not print it as fact — but if it stands up, it reframes every salary dispute below it, and it would arrive while Baghdad is being squeezed on revenue from Washington.
Iraq FileMEFILES tracking
42%share of its budget the KRG says Baghdad has transferred over seven years; Baghdad has published no counter-figure
Evidence6 cited sources · OilPrice · Kurdistan24 · Al Arabiya Iraq index · The New Region and 2 more
The statement is confirmed as a document; the event it responds to is not. Two days later, a state-aligned Cairo daily recast the group as an information-warfare threat rather than a violent one.
The Muslim Brotherhood published a statement on its official outlet Ikhwan Online on Thursday 17 September, timestamped 18:53, condemning “in the strongest terms the targeting of Mecca” and rejecting any violation of the Meccan Haram and Islamic holy sites — “whatever party stands behind it” (أياً كانت الجهة التي تقف وراءه). The statement is issued in the name of the organisation, not a named official, which is the norm on that outlet. It is a self-publication: no wire service, Saudi outlet or third party that The Files could reach has reported the underlying incident, and no denial has surfaced. Readers should treat the document as established and the event as unestablished. The same front page carried, on 7 September at 22:02, a notice that “our positions on events are expressed through the institutions of the Group” — internal-discipline language, published when individuals are speaking out of turn.
On Saturday 19 September at 17:21, the Cairo daily Al-Dostor, a state-aligned title, quoted Colonel Hatem Saber, whom it described as an international counterterrorism expert, arguing that the Brotherhood has shifted “from armed violence to confronting Egyptian society through information war and psychological operations,” and that the shift “was expected and monitored.” This is a single source and a claim rather than an event; retired security figures of this type routinely carry official framing in the Egyptian press without official attribution. The framing matters because it runs against the grain of Washington’s January designation of the Egyptian chapter, which Treasury and the State Department grounded in material support to Hamas under E.O. 13224 — a violence rationale, not a propaganda one.
Assessment: An organisation that calls the Egyptian government “the coup regime” on its own front page does not accidentally omit a perpetrator. “Whatever party stands behind it” is a deliberate refusal to attribute, and the most plausible reading is a group with no constituency to gain and several Gulf relationships to lose by naming anyone. Do not let the statement become evidence that the incident occurred; that verification is still outstanding. The Cairo line is the more consequential shift: a state that spent a decade prosecuting the Brotherhood as an armed conspiracy is now describing it as a messaging problem, at precisely the moment its foreign partners are designating it for material support to Hamas. Those two cases cannot both be the strong one.
The Brotherhood BriefMEFILES tracking
0Independent outlets that reported the Mecca statement; it is a Brotherhood self-publication
The Cabinet vote of 11 September created a procedure, not a proscription. It sits on top of an existing federal injunction, a Texas suit, and a federal order that carefully designates chapters rather than the organisation.
On 11 September the Florida Cabinet, with Governor Ron DeSantis, approved a process to designate the Council on American-Islamic Relations and other organisations as domestic terrorist groups. The Florida Phoenix, whose Mitch Perry filed the original report syndicated across the state’s public radio network, clocked the procedure at less than two minutes. What was approved is a process, not a designation — a distinction that will be blurred in most coverage of it. The backdrop: DeSantis attempted to designate CAIR by executive order in December 2025; CAIR Florida challenged it in March 2026 and a federal judge issued a temporary injunction; and in early July the ACLU, the ACLU of Florida, the Southern Poverty Law Center and two law firms sued state officials over what the ACLU called an “imminent and baseless” designation. Whether the March injunction survives the new procedure is not established.
Texas is running a parallel construction. On 23 December 2025 the Attorney General’s office announced action to defend “Texas’s lawful designation of the Muslim Brotherhood and the Council on American-Islamic Relations as foreign terrorist organizations under Texas law,” and on 5 February 2026 Ken Paxton announced a suit in the district court in Collin County against CAIR, three of its Texas chapters and the Brotherhood. (The February filing reaches us via the Charity & Security Network, a nonprofit-sector body explicitly opposed to the designations; the filing itself should be read from county records.) The federal spine is narrower than either state text. Executive Order 14362, signed 24 November 2025 and published in the Federal Register four days later, designates certain Brotherhood chapters — not the organisation. Implementation on 13 January covered Egypt, Jordan and Lebanon; the Sudanese Muslim Brotherhood followed on 9 March, with State asserting, without published methodology, that it “has contributed upwards of 20,000 fighters to the war in Sudan.”
One thing has not happened. On the day of the January designations, an Egyptian Brotherhood official told Al Jazeera the group denied “all allegations that the Egyptian Muslim Brotherhood has directed, funded, provided material support for or engaged in terrorism,” called the designation “unsupported by credible evidence,” and said it would pursue all legal avenues. Eight months later, The Files has found no record of any such challenge being filed.
Assessment: A US state purporting to designate a foreign terrorist organisation under state law is the novel legal fact here, and it is more interesting than the politics attached to it. Watch two things. First, the semantic slide: a Cabinet approving a procedure will be reported within a week as a state having banned CAIR, and the injunction question will vanish in the process. Second, the missing lawsuit. A designated organisation that announces it will exhaust legal avenues and then files nothing is either without standing, without US counsel willing to take it, or without the appetite for discovery. Each explanation implies something different about what the designation actually did.
The Brotherhood BriefMEFILES tracking
<2 minTime the Florida Cabinet took to approve the designation process, per the Florida Phoenix
Evidence6 cited sources · Florida Phoenix · ACLU · Texas Attorney General · Federal Register and 2 more
Headlines on Saturday’s events in the Saudi capital split into four grammatical frames — the Saudi state, its air defences, the Houthis, or nobody at all — while the single unresolved fact, what set the airport fuel depot alight, went unaddressed in every version.
Saudi authorities pushed “hostile aerial threat” alerts to Riyadh residents at 4 a.m. and again at 6 a.m. on Saturday 19 September, according to Bloomberg, with further warnings to Jeddah, Yanbu, Al-Kharj and Farasan Island. Later that day an AFP journalist saw firefighters working on a blaze at a fuel tank bearing the Aramco logo near King Khalid International Airport. The Saudi-led coalition said on the record that its defences destroyed a ballistic missile fired at Riyadh at dawn and foiled attacks on Bish, Farasan, Taif and Yanbu; AP reported no casualties or damage. Houthi military spokesman Yahya Saree claimed by Telegram that two operations using a “large number of ballistic and cruise missiles and drones” hit “sensitive sites in the Saudi capital, Riyadh” and “Aramco facilities in Yanbu.” AP noted the claim came without evidence. Aramco did not respond to an AP request for comment.
No outlet in the sample established what caused the depot fire — strike, intercept debris, or something else. The headlines diverged anyway. CNBC (Reuters copy) and NBC News (AP copy) ran the identical line “Flames, smoke seen near Riyadh airport; Houthis claim attacks on Saudi capital” — two US broadcasters, two different wires, one sentence. UPI reduced it to “Houthis claim attack near Riyadh airport.” Al Jazeera made the coalition’s air defences the subject: “Saudi-led coalition says defences intercept Houthi missile fired at Riyadh.” Bloomberg was alone in naming a weapon in the headline — “After Drone Attacks” — which conflicts with the coalition’s own description of a ballistic missile; the URL slug ends at “riyadh,” indicating the phrase was appended to the display headline. France 24’s slug reads “smoke-flames-seen-near-riyadh-airport”; the live headline reads “Saudi Arabia says air defences intercepted Houthi ballistic missile targeting Riyadh,” the page timestamped 14:53 and modified 22:31.
Assessment: Slug-versus-headline divergence is documentary, not inferential: it shows editors changing the subject of a sentence during a live news cycle. AP moved from “air raid alerts across the country” to “first alert in the capital since escalation” — a sharpening, defensible. Bloomberg’s “Drone Attacks” is the outlier, because it asserts a causal instrument no party on the record has claimed. The wider problem is the pairing of a Houthi claim headline with a photograph of smoke nobody has attributed. If Monday establishes the depot fire was intercept debris, those headlines are not wrong in their words and still wrong in their effect. Watch whether Aramco’s silence keeps doing the Houthis' work for them.
Western Media WatchMEFILES tracking
5.0FlightRadar24 disruption index at King Khalid International, its maximum rating
Evidence6 cited sources · Bloomberg · France 24/AFP · CNBC (Reuters) · NBC News (AP) and 2 more
The file
Western Media Watch · 61 editions since 19 July 2026 · 114 stories filed · 2 in this edition · rail shows the last 60
Tehran’s Supreme National Security Council said Saturday it had conveyed conditions for re-engaging in talks via Qatar. Every version retrieved carries the transmission; none carries the substance, and none carries a US response.
On Saturday 19 September the head of Iran’s Supreme National Security Council said Tehran had passed to Washington, through Qatar, its conditions for returning to talks and ending the war. Reuters ran it as “Iran says it has conveyed conditions to re-engage in talks, end war with US,” syndicated across BOE Report, Business Recorder and A News. Al Jazeera’s headline named the channel: “Iran says conditions to re-engage in talks, end war sent to US via Qatar.” The Pakistani outlet Aaj English attributed the statement to Rezaei and likewise put the mediators in the headline. AP folded it into its daily Middle East roundup. The Jerusalem Post and a Times of Israel liveblog carried it too. In none of the versions retrieved are the conditions themselves described, and in none is there a response from Washington acknowledging receipt.
Assessment: This is what a diplomatic story looks like when the diplomacy is the message rather than the content. Tehran gains from the fact of transmission being reported — it establishes willingness without conceding a term — and the wires supply that for free, because “Iran says X” is publishable the moment Iran says it. Note who gets named: Reuters keeps Qatar out of the headline, Al Jazeera and Aaj put it in. Doha’s mediating role is a reputational asset, and headline placement is how it accrues. The test is Monday: if the conditions never surface and Washington never confirms receipt, four wires will have carried an announcement, not a negotiation.
Western Media WatchMEFILES tracking
0Retrieved versions that state what Iran’s conditions actually are
Evidence5 cited sources · Reuters · Al Jazeera · Aaj English · Business Recorder and 1 more
The president shortened to zero the remaining expungement period on the criminal record of the soldier convicted of killing an incapacitated Palestinian in Hebron, acting on a July recommendation from Defence Minister Israel Katz. Haaretz reported he did so over objections from the military.
On the evening of Saturday 19 September, President Isaac Herzog signed an order shortening to zero the remaining expungement period on the criminal record of Elor Azaria, the former IDF soldier convicted of manslaughter for shooting Abdel Fattah al-Sharif, an already-incapacitated Palestinian assailant, in Hebron in March 2016. Azaria was convicted by a military court in 2017 and sentenced to 18 months, reduced to 14 on appeal; Al Jazeera reports he was released in May 2018 after serving nine months. The President’s Residence said Herzog “accepted Defense Minister Israel Katz’s recommendation to immediately shorten the period of Elor Azaria’s criminal record,” a recommendation submitted in July 2026. Haaretz security correspondent Yaniv Kubovich, filing at 8:01 pm local time, reported that Herzog acted despite objections from the military. i24NEWS reports Azaria stated in his request that he did not intend to reopen the case.
The framing from the President’s Office is religious and restorative rather than legal. “After many long years in which Azaria bore the consequences of his actions,” the statement carried by the Jerusalem Post reads, “the president believes that the circumstances as a whole, the passage of time, and the regret he expressed justify allowing him to open a new chapter in his life. This decision was made in the spirit of these days as well, and out of a belief in the importance of repair, reconciliation and the ability to move forward.” A separate statement to i24NEWS insists Herzog “views the military justice system as an essential means of upholding the rule of law, the IDF’s values and principles, and particularly the principle of purity of arms,” and that “the institution of pardon is an act of mercy, not an appeals court.” JFeed noted the order was signed on a Saturday night, framed around the Days of Awe and the eve of Yom Kippur.
Assessment: Read the two presidential statements against each other and the design becomes visible: one paragraph honours the military justice system in the abstract, the next dissolves its most contested verdict in practice, and the Days of Awe supply a vocabulary — repair, reconciliation — that makes the second read as grace rather than reversal. Note what the office did not claim: not that the conviction was wrong, only that enough time has passed. Note also the handling downstream. The Jerusalem Post snippet dates the start of Azaria’s prison term to August 2024, which cannot sit alongside a May 2018 release; it is almost certainly a typo for 2017, and it is the kind of error that survives in this file because few readers check. Treat the Katz reaction as unpublished until the full sentence surfaces.
Israel Press ReviewMEFILES tracking
9months served of an 18-month sentence
Evidence5 cited sources · Haaretz · i24NEWS · Jerusalem Post · Al Jazeera and 1 more
The file
Israel Press Review · 61 editions since 19 July 2026 · 140 stories filed · 2 in this edition · rail shows the last 60
Haaretz reported on 8 September that Mohammed bin Zayed personally warned Netanyahu of a coming Hamas “earthquake.” The prime minister called it “an absolute lie” and moved to sue. On 19 September a second outlet found its own source.
Times of Israel diplomatic reporter Lazar Berman filed at 12:05 am on 19 September with two things at once. The first was a formal Emirati non-denial: the UAE does not “discuss such details at the level of national leaders.” The second was heavier — that an Emirati source familiar with the conversation confirmed the Haaretz report to The Times of Israel. The underlying story, published 8 September by Haaretz correspondents Shlomi Eldar and Ruth Yuval and drawn from their book, holds that in a 45-minute call at the end of September 2023, roughly ten days before 7 October, UAE President Mohammed bin Zayed warned Netanyahu that Yahya Sinwar was threatening an “earthquake” and that Hamas was preparing a major move. Netanyahu, the report says, responded calmly, said he believed Hamas intended to act in the West Bank, briefed neither the Shin Bet chief, the Mossad chief nor the Chief of Staff, and did not raise it in a 1 October 2023 discussion on Gaza and Hamas. MBZ did not respond to a request for comment.
The government position has not moved. The Prime Minister’s Office, quoted by the Jerusalem Post and i24NEWS, says “Netanyahu did not speak with the president of the United Arab Emirates during the period in question and did not receive any warning from him,” and calls the report “an absolute lie.” On 9 September Netanyahu sent a pre-litigation warning letter ahead of a libel suit against Haaretz and against Eldar and Yuval personally. The evidentiary position is now two outlets, each resting on its own sourcing — Haaretz on three senior foreign sources, ToI on a single Emirati source it describes as familiar with the call — and no government confirming anything on the record. Israeli outlets are not yet agreed on the book’s title: Israel Hayom renders it “Hostages: 843 Days of Abandonment,” the Times of Israel “Kidnapped: 843 Days of…”.
Assessment: The useful distinction here is between corroboration and confirmation. A second newsroom finding its own Emirati source raises the cost of the PMO’s flat denial considerably, because the denial is categorical — no call at all — and categorical denials break on a single verified phone record. But nothing has been confirmed by any government, and Abu Dhabi’s line is engineered to be neither: it declines to discuss leader-level detail while letting an unnamed source do the work. That is a state keeping a card, not playing one. Watch the libel suit rather than the headlines; discovery is where a denial of this shape either survives or does not. Two further Times of Israel items on an internal Shin Bet warning and a former Palestinian Authority minister’s mediation claim remain unverified by this desk and are not reported here.
Israel Press ReviewMEFILES tracking
45minutes, the reported length of the MBZ–Netanyahu call
Evidence4 cited sources · Times of Israel · Haaretz · haaretz.com
An Iranian-linked group says it breached California Water Service and the FBI director’s personal email. The same group’s Saudi Aramco claim was found to be recycled data.
The National, in Abu Dhabi, reported on 2 September that “Iran’s cyber attacks on US critical infrastructure, including water and energy systems, have intensified following American and Israeli strikes on the country”, and recorded that “the Iranian-linked group Handala claimed responsibility for breaching California Water Service and hacking FBI director Kash Patel’s personal email” and cloud storage. Neither the utility nor the Bureau appears on the record confirming anything in the material this desk holds. The same day, NBC News reported that Iranian hackers had targeted US telecommunications, energy and water systems “according to four people with access to government and industry information about cyberthreats” — four sources, all anonymous, and described as holding access to information rather than first-hand knowledge. A Fox News segment on 3 September featured House Intelligence Committee chairman Rick Crawford and TJ Sayers of the Center for Internet Security warning on the same theme; that is a network summary, not a transcript.
Against that sits a documented pattern. Industrial Cyber, summarising Symantec, records that Handala claimed multiple high-profile breaches through late 2025 and early 2026, and that “some claims, including an alleged breach of Saudi Aramco, appear exaggerated or based on previously circulating data, suggesting potential information or psychological operations aimed at generating a” perception of capability. Symantec’s own write-up gives a second instance: in December 2025 the group said it had compromised the phones of former Israeli prime minister Naftali Bennett and Benjamin Netanyahu’s chief of staff Tzachi Braverman and leaked material from them, but “analysis by researchers disputed some of these claims, saying that the attacks appeared to be” less extensive than presented. The Canadian Centre for Cyber Security’s February bulletin describes the sober baseline: DDoS, defacement, ransomware, wiper malware and hack-and-leak.
Assessment: The asymmetry here is the point. A claim costs nothing to make and travels in hours; a forensic disconfirmation takes weeks and reaches a fraction of the audience. Handala’s record gives two vendor-documented instances of inflation, which is enough to move the burden of proof onto the claimant rather than the utility. Treat the California Water Service and Patel claims as unresolved until someone with access to the systems says otherwise, and note that the likeliest outcome is neither confirmation nor denial but silence — which will be read by many as confirmation. This desk could not verify the 17–20 September window itself; that failure is stated rather than papered over.
Digital Front MonitorMEFILES tracking
2Handala claims researchers found exaggerated or built on previously circulating data
Evidence6 cited sources · The National · NBC News · Industrial Cyber · Security.com (Symantec) and 2 more
The file
Digital Front Monitor · 61 editions since 19 July 2026 · 122 stories filed · 2 in this edition · rail shows the last 60
The most authoritative-looking artefacts in this space are the stalest. A dashboard frozen in spring, a two-month-old federal advisory labelled new, and two anniversaries falling this weekend.
SocRadar’s Iran–Israel Cyber Conflict Dashboard presents as a live tracker. Its own footer reads “Map & incident data last updated: March 2026”, with the page “last updated on April 6”. Anyone screenshotting it this week is circulating incident counts that are five to six months old as current posture. The strongest primary document available is the joint advisory AA26-097A, issued by the FBI, CISA, NSA, the Environmental Protection Agency, the Department of Energy and US Cyber Command, which expands manufacturer scope “to include observed targeting of Schneider Electric, Siemens, and potentially other branded/manufactured PLCs, emphasizing the importance of restricting direct internet access”. It is marked on CISA’s own page “(New, July 22, 2026)” — two months old. Vendor research carries no dates at all: Halcyon’s page on MuddyWater’s “Operation Olalampo” is undated, and Trellix’s APT34 page describes an Iraq campaign that began in September 2024.
The numbers age the same way. The best attack-volume figure available comes from Brig. Gen. (res.) Yossi Karadi, director general of Israel’s National Cyber Directorate, who told Die Welt in an interview reported by The Times of Israel on 29 June that Israel “recorded 4,800 Iranian attacks this month, up from 1,600 last June”. That is a belligerent’s own cyber authority counting attacks on itself, with no published definition of “attack”, reported at second hand, and it measures June rather than September. The shutdown record is worse: Human Rights Watch on 6 March called on Iran to “immediately end the ongoing internet shutdown”, dating onset to 28 February, while the Freedom Online Coalition’s 4 February statement records a near-total shutdown imposed on 8 January. Georgia Tech’s Amanda Meng, Alberto Dainotti and Zachary Bischof documented a blackout that extended to phones and Starlink. Whether restrictions persist now is not established by anything on file.
Two anniversaries fall inside the weekend and both reliably generate recycled imagery. On 17–18 September 2024, thousands of pagers and hundreds of walkie-talkies intended for Hezbollah detonated across Lebanon and Syria, killing 42 people including 12 civilians and injuring between 3,500 and 4,000. On 17 September 2025, the Cyber Jihad Movement launched a coordinated campaign against its designated targets. Defacement claims and casualty imagery dated 17 September will circulate this week without a year attached.
Assessment: Staleness is not a minor hygiene problem in this field; it is the delivery mechanism. A dashboard interface confers the authority of measurement on data that stopped moving in spring, and a federal seal confers urgency on an advisory that is two months into its life. The result is a threat picture that looks continuously updated and is in fact a composite of March counts, June interviews and 2024 campaigns. Check the datestamp before the claim. The unresolved Iranian shutdown chronology matters most: until NetBlocks, IODA or OONI measurement settles whether January and February were one event or two, no duration figure should be published by anyone.
Digital Front MonitorMEFILES tracking
6 monthsAge of the incident data on a dashboard still presenting as a live Iran–Israel tracker
Evidence6 cited sources · SocRadar · CISA · The Times of Israel · Human Rights Watch and 2 more
Iran File: Whether the timestamp on Yahya Saree’s Telegram claim falls before or after the King Khalid fuel-depot fire, and whether Aramco says anything at all about the tank bearing its logo.
Sahel Monitor: Whether any named Nigerien official, court filing or CNSP communiqué replaces “dozens” as the arrest figure from the late-August Niamey mutiny.
Sudan Crisis Monitor: Whether the RSF responds at all to the army’s claim of eleven areas in western North Kordofan, and whether Azernews' 20 September item is a new claim or a recycled one.
Syria File: Whether the Energy Ministry publishes the text of its three-tier diesel pricing decision, and whether the Hasakah protests run to a fourth consecutive day.
Egypt File: Whether the Suez Canal Authority issues an August or September monthly transit and revenue figure that can be set against Sea-Intelligence’s 27 percent.
Iraq File: Whether parliament schedules a vote on defence and interior nominees before the 30 September disarmament deadline, or lets both ministries stay in acting hands.
The Brotherhood Brief: Whether any Saudi authority, wire or Houthi statement identifies the event behind the Brotherhood’s 17 September condemnation of “the targeting of Mecca.”
The Files in your inbox
Get every morning's edition — free
Ten files, one region, zero illusions. The full daily edition, delivered at dawn Gulf time. No noise. Unsubscribe anytime.
Thanks — check your inbox to confirm your subscription.
We use MailerLite to send the edition. Confirm via the email you'll receive. · Browse past editions