Daily Edition No. 79Friday, October 2, 2026 · Updated 12:00 Gulf · 𝕏 @mefilesnews · Instagram @mefiles.news · Facebook

MEFILES

Ten files · One region · Zero illusions
@mefilesnews @mefiles.news Facebook
Iraq File — Lead

Iraq and the United States both announced on 1 October that the anti-ISIS coalition’s mission in Iraq is over, and Baghdad called the day Sovereignty Day. The deadline that was supposed to travel with it — no weapons outside state control by 30 September — did not survive the ceremony, and now runs to 30 June 2027. The day before, the cabinet approved the Popular Mobilisation Forces law and sent it to parliament. All of this happens in the seventh month of a US–Iran war, with the Erbil air defences that intercepted Iranian missiles among the equipment that left.

Iraq's disarmament deadline
Date by which weapons outside state control were to be addressed, as stated in August and as stated on 1 October
Weapons outside state control30 Sept 202630 June 2027
The National, 12 August 2026; al-Zaidi statement text via Iraq Business News, 1 October 2026
What Sovereignty Day counted
Figures attached to the coalition departure and the PMF bill approved the day before
12 yrs
Length of the coalition mission, per the Pentagon
238,075
PMF personnel in the budget-law schedules
4.5tn
PMF allocation for 2024, Iraqi dinars
~70
Predominantly Shia armed groups in the force
Pentagon statement; Rudaw and Rudaw Arabic citing Iraqi budget-law schedules

Prime Minister Ali Faleh al-Zaidi congratulated Iraqis on “this great day, 1st October 2026” and on “the attainment of full and comprehensive Iraqi sovereignty,” crediting the Supreme Religious Authority and the 2014 fatwa of collective-duty jihad rather than the Iraqi army, according to the full statement text published by Iraq Business News. In Baghdad he said “a new phase has begun, defined by Iraq’s sovereignty, the strength of its institutions, the readiness of its forces, unity of decision-making, and balanced partnerships with its friends.” The Pentagon matched him the same day: chief spokesperson Sean Parnell said “the orderly departure of Coalition forces and equipment from Erbil Air Base marks the successful conclusion of the military mission that defeated ISIS in Iraq,” calling it a twelve-year campaign. Xinhua carried the Baghdad declaration at 18:29 local. The multinational task force against regional ISIS activity moves its headquarters to Jordan. Two governments on the record on the same day is as close to confirmation as this file gets — but Parnell named one base, and no US or Iraqi official has stated a residual figure.

The deadline that mattered domestically slipped. In August, The National reported the framing that militia groups were “also required to disarm by September 30”; Rudaw notes the weapons-restriction deadline was pushed. Al-Zaidi’s 1 October text now describes “a serious beginning” to the weapons question under “a clear roadmap and an agreed timetable that will not extend beyond 30th June 2027.” Nine months of new runway were announced in the same breath as sovereignty. The day before, on Tuesday evening 29 September, the Council of Ministers approved the Popular Mobilisation Forces draft law in its twenty-first session and referred it to the Council of Representatives — timestamped by Shafaq at 19:57 UTC and confirmed by the prime minister’s office. Rudaw Arabic reports the draft defines the PMF as part of the Iraqi armed forces and links it to the commander-in-chief; budget-law schedules put the force at 238,075 personnel with a 2024 allocation of 4.5 trillion dinars across roughly seventy predominantly Shia armed groups. The 2016 law that legalised the force had three provisions. This one covers service, retirement and organisation.

What left with the coalition is the part nobody has replaced. Al Jazeera reported on 7 September that the withdrawal includes removal of US air defence systems stationed in Erbil — the layer used to intercept Iranian ballistic missiles and drones during the war now in its seventh month. Al-Zaidi’s answer, announced the same day as the departure, is immediate procurement of a comprehensive national air defence system: a plan, not a capability. He also reaffirmed that Iraqi territory and airspace may not be used as a launchpad or transit corridor against neighbouring states, which is the formula that makes Baghdad acceptable to Tehran and to Washington simultaneously and commits it to neither. In the same 29 September session the cabinet cancelled the committee created under Diwani Order 25274 of 2025 and told the foreign ministry to coordinate directly with the US Treasury, case by case, on designations of individuals and suspect companies — a procedural change in how Iraq handles American sanctions, made the day before the Americans left.

Assessment: Distinguish three things announced on the same day. The coalition departure is confirmed: two governments, both on the record, one named airbase. That US personnel in Iraq now number zero is not confirmed — nobody has said so, and Harir has not been addressed. The PMF law is a cabinet referral, not a statute; the bill died in 2025 over a retirement age of sixty, and the chamber that must pass it may still lack confirmed interior and defence ministers, nine portfolios having been vacant as recently as August. Treat Shafaq’s unnamed “informed sources” on which clauses were cut to clear a reported US veto as exactly that: one outlet, anonymous, and the draft text is unpublished. We found no dated US statement responding to the 29 September vote, which is itself worth watching. And ignore the claim circulating on a currency-speculation newsletter that Kataib Hezbollah will bring the government down over Iranian overflights until it appears on the faction’s own channels.

Iraq FileMEFILES tracking
Evidence8 cited sources · Iraq Business News · Overt Defense · Iraqi News · Xinhua and 4 more
The file3 Aug: 0 stories4 Aug: 0 stories5 Aug: 0 stories6 Aug: 0 stories7 Aug: 0 stories8 Aug: 0 stories9 Aug: 0 stories10 Aug: 0 stories11 Aug: 0 stories13 Aug: 0 stories14 Aug: 0 stories15 Aug: 0 stories16 Aug: 0 stories17 Aug: 0 stories18 Aug: 0 stories19 Aug: 0 stories20 Aug: 0 stories21 Aug: 0 stories22 Aug: 0 stories23 Aug: 0 stories24 Aug: 0 stories25 Aug: 0 stories26 Aug: 0 stories27 Aug: 2 stories28 Aug: 2 stories29 Aug: 2 stories30 Aug: 2 stories31 Aug: 2 stories1 Sept: 2 stories2 Sept: 3 stories3 Sept: 2 stories4 Sept: 0 stories5 Sept: 2 stories6 Sept: 0 stories7 Sept: 2 stories8 Sept: 2 stories9 Sept: 2 stories10 Sept: 2 stories11 Sept: 2 stories12 Sept: 2 stories13 Sept: 2 stories14 Sept: 2 stories15 Sept: 2 stories16 Sept: 2 stories17 Sept: 2 stories18 Sept: 2 stories19 Sept: 2 stories20 Sept: 2 stories21 Sept: 2 stories22 Sept: 2 stories23 Sept: 2 stories24 Sept: 2 stories25 Sept: 2 stories26 Sept: 2 stories27 Sept: 2 stories28 Sept: 2 stories29 Sept: 2 stories30 Sept: 3 stories1 Oct: 3 stories2 Oct: 3 stories
Iraq File · 73 editions since 19 July 2026 · 74 stories filed · 3 in this edition · rail shows the last 60
The Cartoon — October 2
NIGHTS OF THE WAR 30 JUNE 2027
“The deadline moved. The weapons stayed where they were.”
MEFILES · the cartoon · Baghdad declared Sovereignty Day on 1 October; disarmament now has until 30 June 2027
238,075
Popular Mobilisation Forces personnel, per the schedules of Iraq’s budget law, as the cabinet sends the PMF bill to parliament
Rudaw Arabic, citing budget-law schedules
25
Weekly vessel transits through the Red Sea after Houthi missile strikes resumed in July, carrying 750,000 metric tons
Africa Center for Strategic Studies, published c. 30 September 2026
5 killed, 47 hurt
Preliminary toll from a drone strike on a University of Kordofan dormitory in El Obeid — one medical group’s statement, replicated by four outlets
Sudanese Doctors Network via Sudan Tribune and Radio Tamazuj, 1–2 October
5 Nov 2026
Date Florida’s designation of the Muslim Brotherhood, CAIR and CAIR-Florida as terrorist organisations takes effect under HB 1471
WUSF, reporting the 29 September Cabinet vote
14,000 ft
Descent of flydubai FZ1073 in under 30 seconds during the cockpit attack — a figure found in one outlet and absent from the headlines built on the story
ABC Australia, 1 October 2026

Iran File

The regime, the IRGC, the proxies, the strait — read from the Gulf, not from Washington.
Strike or Deal

The president told reporters the standoff ends “very soon” either by agreement or by force, days after the State Department ordered Abbas Araghchi’s delegation out of New York. The diplomatic channel that remains runs through Doha.

Speaking to reporters late on Wednesday 30 September, President Donald Trump framed American options on Iran as a binary and said the confrontation would end “very soon” one way or the other. Asked how he would deal with Iranian officials, he replied: “Maybe you blow them up.” He also said: “I’m ensuring that Iran will be very quickly ended.” The remarks were carried by CBS News, Al Jazeera’s 1 October liveblog and Gulf News, which added a prediction that fuel prices would drop sharply once the war ended in an American victory. CBS separately reported Trump describing Iran as “ready to fold up” and characterised him as threatening attacks after the midterms — a CBS framing of timing rather than a quoted commitment to a date. The Independent placed the remarks after Tehran said it had received an official US response to its own proposal to end the war; neither document has been published.

Four days earlier, on Monday 28 September, Secretary of State Marco Rubio ordered Iran’s UN General Assembly delegation, Foreign Minister Abbas Araghchi included, to leave the United States ahead of schedule after talks stalled. The story originated with Axios and was subsequently carried by ABC News, Haaretz, the Jerusalem Post and Yeni Şafak; the operational detail remains Axios-sourced. Per Axios, as relayed by Jordan News, the delegation reached the airport hours after the order and boarded a 01:20 Tuesday flight from New York to Doha. Araghchi had said Iranian–Qatari talks took place in New York on the Monday. A single unnamed US official told Haaretz that Rubio judged the Iranians had “overstayed their welcome.” Tehran’s position, reported by Yeni Şafak, is that the departure was pre-scheduled. Neither account is independently verified.

What Iran has put on the record is narrower and more concrete than either capital’s rhetoric. In an interview with NBC News, carried by TASS around 28 September, Araghchi said: “We offered a deal on our 60% [enriched nuclear] material in 2025 and 2026, and it is still something that could be considered” — conditioned on trust being rebuilt first. The chain here is NBC original, TASS carry. Iran’s UN mission, posting around the Security Council session on the veto, said the Council must uphold the Charter rather than serve “the narrow interests of those who violate them,” and that Washington and its allies “have no credibility to lecture Iran on non-proliferation or international law” while shielding Israel. The architecture both sides are arguing over is the June Islamabad Memorandum, a 14-point MoU signed remotely on 17 June that extended the ceasefire by 60 days and, in a draft published by Mehr, provided for the release of $24bn in frozen assets.

Assessment: The expulsion and the enrichment offer point in opposite directions, and only one of them is cheap. Removing a delegation from New York costs Washington nothing and signals resolve to a domestic audience; keeping a Qatari channel alive costs Tehran nothing and preserves an exit. The Doha routing of that 01:20 flight is the operative fact in the file — the mediation did not end, it changed cities. Treat Trump’s “very soon” as a pressure instrument rather than a calendar, and treat the competing accounts of the departure as what they are: two governments describing the same aircraft. The unpublished Iranian proposal and the unpublished US reply are where the real position sits, and neither has surfaced.

Iran FileMEFILES tracking
$24bnFrozen Iranian assets in the June memorandum draft published by Mehr
Evidence6 cited sources · CBS News · Al Jazeera · Gulf News · ABC News and 2 more
The file3 Aug: 3 stories4 Aug: 3 stories5 Aug: 3 stories6 Aug: 3 stories7 Aug: 3 stories8 Aug: 3 stories9 Aug: 3 stories10 Aug: 2 stories11 Aug: 4 stories13 Aug: 4 stories14 Aug: 3 stories15 Aug: 3 stories16 Aug: 3 stories17 Aug: 3 stories18 Aug: 3 stories19 Aug: 3 stories20 Aug: 3 stories21 Aug: 3 stories22 Aug: 4 stories23 Aug: 3 stories24 Aug: 0 stories25 Aug: 4 stories26 Aug: 4 stories27 Aug: 3 stories28 Aug: 4 stories29 Aug: 3 stories30 Aug: 3 stories31 Aug: 3 stories1 Sept: 3 stories2 Sept: 3 stories3 Sept: 3 stories4 Sept: 4 stories5 Sept: 4 stories6 Sept: 4 stories7 Sept: 3 stories8 Sept: 3 stories9 Sept: 3 stories10 Sept: 3 stories11 Sept: 3 stories12 Sept: 3 stories13 Sept: 4 stories14 Sept: 3 stories15 Sept: 3 stories16 Sept: 3 stories17 Sept: 3 stories18 Sept: 3 stories19 Sept: 4 stories20 Sept: 3 stories21 Sept: 3 stories22 Sept: 4 stories23 Sept: 4 stories24 Sept: 4 stories25 Sept: 3 stories26 Sept: 4 stories27 Sept: 4 stories28 Sept: 3 stories29 Sept: 3 stories30 Sept: 3 stories1 Oct: 3 stories2 Oct: 3 stories
Iran File · 73 editions since 19 July 2026 · 228 stories filed · 3 in this edition · rail shows the last 60
Claim Before Finding

Three jurisdictions hold pieces of the case against the co-pilot accused of stabbing his captain on an Israel-bound flight. None of them has published a finding of Iranian involvement.

Asked at the White House on Thursday 1 October about the FlyDubai co-pilot accused of stabbing the captain of an Israel-bound flight and attempting to crash the aircraft, President Trump said the man was linked to Iran “based on what I’m hearing.” He provided no further detail, according to CBS News; the Associated Press and Sinclair’s National Desk carried the same hedge. What investigators have said is different in kind. CNN’s 1 October live file reports that the accused has not been publicly identified, that Israel describes him as an Omani national, and that the suspect has been transferred to the UAE. Prime Minister Benjamin Netanyahu said the alleged attacker is being interrogated and that it has been established he “underwent Islamist radical indoctrination” — a statement about ideology, not about state direction. Iran International reports that Israel has opened an investigation into whether Tehran played a role, which is a question rather than an answer.

Assessment: Three capitals now hold separate pieces of this case — Israel the interrogation, the UAE the custody, Oman the nationality — and the one who spoke first holds none of them. That is the structural problem with attribution in this war: the political statement travels in hours, the forensic finding in months, and the gap between them becomes the record. The Omani detail is the uncomfortable one. Muscat has been the quiet channel in every US–Iran negotiation of the past decade; a suspect with that passport complicates the mediation track regardless of what the investigation concludes. No Omani comment has been reported. Watch for whether the UAE releases an identification, which would be the first independent fact in the file.

Iran FileMEFILES tracking
3Jurisdictions holding the case: Israel, the UAE and Oman
Evidence4 cited sources · CBS News · AP · CNN · Iran International
Degraded Data

PortWatch’s event page for the strait now carries a caution about GPS jamming and vessels going dark. In the Red Sea, the Africa Center counts 25 weekly transits carrying 750,000 tonnes.

The 2026 Strait of Hormuz crisis has run since 28 February — seven months and one day. The IMF’s PortWatch platform maintains an active event page for trade disruption in the strait, logging reduced traffic since that date and listing the disruption as ongoing. It also tells users to treat its own AIS data with care, citing GPS jamming, AIS spoofing and vessels going dark. The commercial tracker Windward illustrates the problem: a VLCC struck on 20 July in the southern strait near Kumzar had been AIS-dark for eight days before the attack. UKMTO’s JMIC advisory note 080 of 4 August, stale but geographically unchanged, reported a tanker attacked at 0200 local by a suspected UAV, warned of drifting or uncharted mines in and near the Traffic Separation Scheme, and stated that “focus remains on Limah–Khasab axis.” United Against Nuclear Iran, an advocacy group campaigning against the Iranian government, said in its 1 October shipping update that Hormuz security remains highly volatile.

The southern front has the cleaner number. The Africa Center for Strategic Studies, a US Department of Defense–affiliated research institution, published around 30 September that following the reinitiation of Houthi missile strikes in July, Red Sea shipping contracted to 25 weekly vessel transits carrying 750,000 metric tons; the Center notes Houthi claims to be targeting only Saudi-flagged vessels. US primary documents fill in the method: MARAD advisory 2026-013 records the M/T AMZAN and M/T DAISY reportedly struck by Houthi missiles off Yanbu on 24 August, while 2026-006 lists the threat set as one-way UAVs, USVs, UUVs, ballistic and cruise missiles and small-arms fire from small boats. Two regional officials told the Associated Press on 16 September that Saudi Arabia is running short of interceptors and has asked France, the United Kingdom, Pakistan and Egypt to deploy air defences. The SCMP notes the United States has drawn down its own interceptor stocks because of the war with Iran.

Assessment: The interesting disclosure this week is epistemic, not kinetic. When the IMF attaches a spoofing warning to its own dataset, every transit count downstream — including the ones used to argue the strait is open or closed — inherits the uncertainty, and both governments gain room to assert whatever tonnage suits them. Read the tracker ecosystem accordingly: UANI is an advocacy organisation, Windward is a commercial vendor, and the Africa Center figure lacks a published pre-crisis baseline, so resist converting 25 transits into a percentage collapse. The Saudi interceptor story is the one with compounding consequences. A customer short of interceptors and a supplier short of interceptors is not a procurement problem; it is a ceiling on how long the air-defence phase of this war can be sustained.

Iran FileMEFILES tracking
25Weekly Red Sea vessel transits after July, per the Africa Center
Evidence6 cited sources · IMF PortWatch · UKMTO · africacenter.org · MARAD MSCI 2026-013 and 2 more

Sahel Monitor

Mali, Burkina, Niger, the AES bloc, JNIM, and the Russian bargain — security as economics.
Claim Before Confirmation

The gap between an asserted attack on Russian Africa Corps personnel in central Mali and a jihadist claim of one is the entire story — and as of Friday neither Bamako nor Moscow had filled it.

AfricActu published on or about 1 October under a headline stating flatly that JNIM struck Africa Corps near Niono, in Mali’s Ségou region. Norafrik, writing in the same window, framed the same episode differently: an armed group claiming an attack on fighters it called the “Légion africaine.” One formulation describes an event; the other describes an assertion. The Files has not seen a Malian armed forces communiqué, a Russian defence ministry statement, or any independent confirmation of casualties, location or date, and no casualty figure appears in either report. Both outlets are of unestablished reliability for this desk, and both may ultimately rest on a single claim circulated through JNIM’s az-Zallaqa media arm — meaning two datelines may represent one source.

The surrounding commentary is running ahead of the incident reporting. The Abidjan daily Fratmat published a piece on or about 30 September asking whether the Africa Corps deployment is heading toward “enlisement” — becoming bogged down. Côte d’Ivoire is not a neutral party in its coverage of Bamako, and a single columnist’s framing is not evidence of a shift in Malian elite opinion. Separately, Africa Defense Forum reported in July that Africa Corps stood accused of atrocities in Mali; that publication is produced by US Africa Command, a participant in the information contest over the Russian presence in the Sahel, and should be read as such. The Dakar-based Timbuktu Institute argued in late July that Niger’s security gains coincided with a weakening Russian military partnership — a reading that cuts against the prevailing account of Russian entrenchment.

Assessment: Treat this as an open file, not a result. The useful signal over the weekend is not confirmation but denial: a FAMa communiqué or a Russian channel rebuttal would tell you as much about the incident’s reality as a body count, because both Bamako and Moscow have reasons to answer a claim that lands on Africa Corps specifically. Insurgent media economies reward claimed strikes on Russian personnel above strikes on Malian conscripts, which inflates the claim rate and depresses the verification rate. Until a second, independent chain of evidence appears, the honest position is that something was claimed near Niono and nothing has been established.

Sahel MonitorMEFILES tracking
Evidence5 cited sources · AfricActu · Norafrik · Fratmat (Abidjan) · adf-magazine.com and 1 more
The file3 Aug: 2 stories4 Aug: 2 stories5 Aug: 2 stories6 Aug: 2 stories7 Aug: 2 stories8 Aug: 2 stories9 Aug: 2 stories10 Aug: 2 stories11 Aug: 2 stories13 Aug: 2 stories14 Aug: 2 stories15 Aug: 2 stories16 Aug: 2 stories17 Aug: 2 stories18 Aug: 2 stories19 Aug: 2 stories20 Aug: 2 stories21 Aug: 2 stories22 Aug: 1 story23 Aug: 2 stories24 Aug: 3 stories25 Aug: 3 stories26 Aug: 2 stories27 Aug: 2 stories28 Aug: 2 stories29 Aug: 2 stories30 Aug: 2 stories31 Aug: 2 stories1 Sept: 2 stories2 Sept: 3 stories3 Sept: 2 stories4 Sept: 2 stories5 Sept: 2 stories6 Sept: 2 stories7 Sept: 2 stories8 Sept: 2 stories9 Sept: 2 stories10 Sept: 2 stories11 Sept: 2 stories12 Sept: 3 stories13 Sept: 2 stories14 Sept: 2 stories15 Sept: 2 stories16 Sept: 3 stories17 Sept: 2 stories18 Sept: 2 stories19 Sept: 2 stories20 Sept: 2 stories21 Sept: 2 stories22 Sept: 2 stories23 Sept: 3 stories24 Sept: 2 stories25 Sept: 2 stories26 Sept: 2 stories27 Sept: 2 stories28 Sept: 2 stories29 Sept: 2 stories30 Sept: 3 stories1 Oct: 2 stories2 Oct: 2 stories
Sahel Monitor · 73 editions since 19 July 2026 · 149 stories filed · 2 in this edition · rail shows the last 60
After the Mutiny

The Timbuktu Institute says Tiani is tightening his grip on the army. Almost everything that would make that measurable — arrest numbers, officers' names, an official statement — is missing from the public record.

The Dakar-based Timbuktu Institute published on or about 28 September under the title “Niger: after the mutiny, Tiani tightens his grip on the army.” It is the most credible item the desk has found on the episode, and it is analysis rather than incident reporting. The Files has located no AFP or Reuters wire account of the mutiny, no CNSP communiqué, no figure for detentions and no names of detained officers. An English-language encyclopedia entry on a 2026 Nigerien coup attempt was edited around 27 September; the existence of such a page records that people are writing about an event, not that one has been documented, and this desk does not cite it.

The only item inside the 30 September–2 October window is a report by Bénin Web TV that Abdourahamane Tiani convened the Conseil consultatif de la refondation on agriculture and ended the functions of Hadiza Adamou. The outlet’s reliability is unestablished for this desk, the post Adamou held is not identified in what we have seen, and a single dismissal is as consistent with routine administration as with a post-mutiny purge. Reading it as consolidation requires evidence that does not yet exist in the record. Niamey has not published an account of the late-September events, and silence from a government that controls the broadcast environment is itself a decision about what the public is permitted to measure.

Assessment: Two things are being conflated across the coverage: that a mutiny occurred, and that it was a coup attempt. The first is being asserted by a specialist institute with a Sahel track record; the second is circulating largely in aggregation. The distinction matters because it sets the scale of what follows — a barracks incident justifies a few retirements, an attempted seizure of power justifies a purge. Watch for the shape of the dismissals rather than their number: if removals cluster in one garrison or one intake cohort, that is a purge with a map. Isolated civilian reshuffles like the Adamou notice prove nothing either way.

Sahel MonitorMEFILES tracking
Evidence3 cited sources · Timbuktu Institute · Bénin Web TV

Sudan Crisis Monitor

SAF versus RSF, the sieges and the famine, the gold economy, and the diplomacy of press releases.
Sequencing, Not Peace

Amjad Farid told Reuters the army’s amendments to Massad Boulos’s 90-day ceasefire proposal were ignored, days after Burhan said publicly he did not need the US visa he had been denied.

Amjad Farid, adviser to army chief Abdel Fattah al-Burhan on political and international affairs, told Reuters on 30 September from New York that the ceasefire proposal advanced by Massad Boulos, the US Senior Advisor for Arab and African Affairs, risked freezing the war on current lines. “Mr Boulos seems to be putting pressure on us to accept a de facto partitioning of the country similar to Libyan model,” Farid said, adding: “Our concern is that the approach Mr Boulos continues to advance appears to accommodate the militia’s continued existence and preserve a place for it in Sudan’s political future.” Reuters describes the plan as a 90-day ceasefire followed by negotiations to end the war and restore a civilian transition. Farid said Port Sudan had submitted amendments — chief among them an internationally monitored RSF withdrawal from urban areas — and that Washington appeared to have ignored them. Boulos has not publicly responded in anything retrieved for this brief.

The remarks close a fortnight that began with a visa. On 21 September Sudan’s permanent representative wrote to the UN asking it to intervene, warning that if the situation persisted “it would effectively prevent the Head of State of a Member State of the United Nations from participating in person in the work of the General Assembly.” Burhan had been scheduled to address the Assembly on 24 September. The claim that the visa was being withheld to force his signature on the Boulos plan rests on two anonymous sources — a Sudanese diplomatic source and a Western analyst described as close to American and Sudanese officials — and has not been confirmed by the State Department, which Al Jazeera reported declined to comment, as did the Sudanese government. On 26 September, at a youth rally at Khartoum Stadium, Burhan rejected the conditions and said he did not need the visa.

Assessment: “Libya-style partition” is the army’s frame, not a finding, and it is doing specific work: it converts a dispute about sequencing into a dispute about sovereignty. What Port Sudan actually wants is RSF urban withdrawal priced into the ceasefire rather than deferred to the talks that follow it — a demand the RSF has no battlefield reason to accept, which is why Farid’s objection functions as a refusal. Distrust the visa storyline’s motive, which is single-track anonymous sourcing; the non-issuance itself is documented by Sudan’s own letter. The tell to watch is whether Washington restates the 90 days unchanged or rewrites the withdrawal clause. Silence counts as an answer.

Sudan Crisis MonitorMEFILES tracking
90days of ceasefire in the Boulos proposal, before talks begin
Evidence5 cited sources · Al-Monitor (Reuters wire) · Arab News (Reuters wire) · Dawn · Al Jazeera and 1 more
The file3 Aug: 2 stories4 Aug: 2 stories5 Aug: 2 stories6 Aug: 2 stories7 Aug: 2 stories8 Aug: 3 stories9 Aug: 2 stories10 Aug: 2 stories11 Aug: 2 stories13 Aug: 2 stories14 Aug: 3 stories15 Aug: 2 stories16 Aug: 2 stories17 Aug: 2 stories18 Aug: 2 stories19 Aug: 2 stories20 Aug: 2 stories21 Aug: 0 stories22 Aug: 2 stories23 Aug: 2 stories24 Aug: 2 stories25 Aug: 2 stories26 Aug: 2 stories27 Aug: 2 stories28 Aug: 2 stories29 Aug: 2 stories30 Aug: 2 stories31 Aug: 2 stories1 Sept: 2 stories2 Sept: 2 stories3 Sept: 2 stories4 Sept: 2 stories5 Sept: 2 stories6 Sept: 2 stories7 Sept: 2 stories8 Sept: 2 stories9 Sept: 2 stories10 Sept: 3 stories11 Sept: 2 stories12 Sept: 2 stories13 Sept: 3 stories14 Sept: 3 stories15 Sept: 3 stories16 Sept: 3 stories17 Sept: 3 stories18 Sept: 2 stories19 Sept: 2 stories20 Sept: 2 stories21 Sept: 2 stories22 Sept: 2 stories23 Sept: 2 stories24 Sept: 2 stories25 Sept: 2 stories26 Sept: 2 stories27 Sept: 3 stories28 Sept: 2 stories29 Sept: 3 stories30 Sept: 3 stories1 Oct: 3 stories2 Oct: 2 stories
Sudan Crisis Monitor · 73 editions since 19 July 2026 · 157 stories filed · 2 in this edition · rail shows the last 60
Drones Over Kordofan

A medical monitoring group says a drone struck student housing in El Obeid on Thursday. In New York, Russia and China have objected that the draft sanctions renewal overemphasises unmanned systems.

The Sudanese Doctors Network said a drone hit student housing belonging to the University of Kordofan in El Obeid, capital of North Kordofan, on Thursday 1 October. “According to preliminary information, the attack resulted in the deaths of five civilians and injuries to 47 others, marking yet another incident in a continuing pattern of violations targeting civilians and civilian infrastructure across the country,” the group said, calling the strike a “worrying escalation” and asking the UN and international humanitarian and human rights organisations to condemn it. The toll was carried by Sudan Tribune, Radio Tamazuj, Kenya’s Eastleigh Voice and India’s UNI — four outlets tracing to one statement, not four sources. Attribution to the RSF comes from the medical group rather than any independent investigation, and no RSF response appeared in the material reviewed. The same campus was struck on 28 February 2026; on 25 September a drone strike in El Obeid killed two and wounded 20, according to state authorities, themselves a party to the war.

Security Council Report’s October forecast, published 1 October, says the Council is expected to vote this month on extending the 1591 sanctions regime, alongside the regular 120-day briefing. In the preceding negotiation the three African members — DRC, Liberia and Somalia — together with China, Pakistan and Russia pressed for a straightforward one-year renewal confined to Darfur, with China and Russia arguing the draft overemphasised the role of unmanned aerial vehicles and systems and their impact on civilians. The same forecast describes the SAF holding the reopened Khartoum–El Obeid corridor and towns retaken in late July while the RSF contests the road and strikes the city by drone, with El Obeid’s population roughly doubled by displacement, water shortages worsening and cholera present.

Assessment: Two clocks are running in opposite directions. The drone campaign against El Obeid is now routine enough to be a pattern rather than an event, while the instrument the Council has for naming it may emerge from October confined to Darfur with its UAV language thinned. A Darfur-only renewal in the month Kordofan is hit from the air is a measurable outcome, not a procedural footnote. Treat the dormitory toll as preliminary and single-sourced; in El Obeid such figures have historically risen. The harder question is what the drones are for — three months of warnings about an imminent RSF assault have produced attrition instead, which may be the strategy rather than the prelude.

Sudan Crisis MonitorMEFILES tracking
47wounded in the El Obeid dormitory strike, per one medical group’s preliminary count
Evidence5 cited sources · Sudan Tribune · Radio Tamazuj · Eastleigh Voice · Security Council Report

Syria File

The transition after Assad — the new government, the armed factions, the returns, and who is paying for it.
Two Tracks at Once

Reuters reported on Thursday that Turkish intelligence convened the first known face-to-face talks between the Syrian government and Hezbollah since Assad’s fall. Damascus and Ankara both say it did not happen.

Reuters reported on Thursday 1 October that representatives of the Syrian government and Hezbollah met face to face in Turkey in September, the first such known contact since Assad’s fall. The account rests on six sources briefed on the meeting, among them two Syrian officials, a US official and a senior Lebanese security source; per that sourcing the Syrian side came from the intelligence services and the Foreign Ministry, and the session was convened at the invitation of Turkish security and intelligence agencies. CFR’s conflict tracker, summarising the report the same day, says the agenda covered avoiding intervention in each other’s affairs and countering cross-border smuggling. Syria’s Ministry of Information denied that government representatives held direct talks with Hezbollah in Turkey. Turkey’s Presidency Directorate of Communications called the report “entirely unfounded,” per Al Jazeera. No Hezbollah response was captured in the material reviewed for this item.

Within roughly 48 hours of that report, Syrian state television quoted an official statement saying intelligence services and security forces “thwarted a sabotage plot in the Yarmuk basin in Daraa (province) and arrested a Hezbollah-affiliated cell composed of three individuals,” who had attempted “to prepare rocket launch platforms with the aim of carrying out attacks to destabilize security and stability.” No intended target was named. The New Arab and the Times of Israel date the announcement to Tuesday 29 September; Al-Modon, carried by the Syrian Observer, dates it to Wednesday — it is not established whether these were two statements or one reported twice. Hezbollah’s media office “categorically denies any relationship or connection between Hezbollah and the alleged cell” and said it “has no presence whatsoever on Syrian territory.” The Long War Journal recorded a near-identical SANA announcement on 19 April, with rockets found near Quneitra.

Assessment: The venue carries more weight than the meeting. If Turkish intelligence convened it, Ankara is advertising itself as broker between Damascus and the Iran-aligned axis rather than merely as the new government’s patron — a role it cannot claim and deny at once, which is why the denial came from the Presidency’s communications directorate. Note also that the Syrian denial is narrow: “direct talks.” Distrust the symmetry readers will want. Six anonymous sources and two on-record denials do not cancel out, and a government that announces rocket cells for an Israeli and American audience can also be deconflicting with the same organisation in a third country. Watch for independent Lebanese sourcing, and for whether the Daraa statement ever names a target.

Syria FileMEFILES tracking
6sources briefed on the reported Syria–Hezbollah meeting, all anonymous
Evidence6 cited sources · Reuters (syndicated) · Turkish Minute · Haaretz (Reuters) · The New Arab and 2 more
The file3 Aug: 0 stories4 Aug: 0 stories5 Aug: 0 stories6 Aug: 0 stories7 Aug: 0 stories8 Aug: 0 stories9 Aug: 0 stories10 Aug: 0 stories11 Aug: 0 stories13 Aug: 0 stories14 Aug: 0 stories15 Aug: 0 stories16 Aug: 0 stories17 Aug: 0 stories18 Aug: 0 stories19 Aug: 0 stories20 Aug: 0 stories21 Aug: 0 stories22 Aug: 0 stories23 Aug: 0 stories24 Aug: 0 stories25 Aug: 0 stories26 Aug: 0 stories27 Aug: 2 stories28 Aug: 2 stories29 Aug: 2 stories30 Aug: 2 stories31 Aug: 3 stories1 Sept: 2 stories2 Sept: 2 stories3 Sept: 2 stories4 Sept: 2 stories5 Sept: 2 stories6 Sept: 1 story7 Sept: 2 stories8 Sept: 2 stories9 Sept: 2 stories10 Sept: 3 stories11 Sept: 2 stories12 Sept: 2 stories13 Sept: 2 stories14 Sept: 2 stories15 Sept: 2 stories16 Sept: 2 stories17 Sept: 2 stories18 Sept: 2 stories19 Sept: 2 stories20 Sept: 2 stories21 Sept: 2 stories22 Sept: 2 stories23 Sept: 2 stories24 Sept: 2 stories25 Sept: 2 stories26 Sept: 2 stories27 Sept: 2 stories28 Sept: 2 stories29 Sept: 2 stories30 Sept: 2 stories1 Oct: 3 stories2 Oct: 2 stories
Syria File · 73 editions since 19 July 2026 · 76 stories filed · 2 in this edition · rail shows the last 60
Governing the Edges

Latakia’s governor installed interim executive offices in Qardaha and 13 towns “until new elections,” with no date set. In the north-east, Mazloum Abdi is lobbying for Kurdish as an official language from an advisory chair rather than a command post.

Latakia Governor Ahmad Ali Mustafa issued decisions on Wednesday 30 September forming interim executive offices for the Qardaha city council and 13 town councils in the governorate, with the offices assuming the full powers and responsibilities of the councils until new elections are held, according to Syria TV, carried by the Syrian Observer on 1 October. The named appointees include Majed Salim Habib in Qardaha, Ahmad Aziz Saqr in Ain al-Sharqiya, Ahmad Adnan Jadid in Ain al-Arous, Ziad EzzEddin Nasser in Hammam al-Qarahta and Milad Ali Saeed in Beit Yashout. No election date was given. Qardaha is the Assad family’s home town and the symbolic centre of Alawite Latakia. The report is single-outlet in English and the text of the gubernatorial decision was not retrieved.

On 30 September, Mazloum Abdi — adviser to the Syrian presidency since 27 August and former commander of the dissolved SDF — said efforts were continuing to make Kurdish an official language in Syria and urged families to send their children to schools where Kurdish is taught, The New Arab reported. The same piece notes a demonstration in Qamishli on 22 September at which protesters demanded the right to education in Kurdish. The military file is closed on paper: Anadolu’s January factbox set out the ceasefire and integration terms, including SDF withdrawal east of the Euphrates and handover of territory and institutions to Damascus, and the Media Line reported on 26 August that Abdi had announced the SDF’s dissolution into state institutions — though other outlets reported he stopped short, with the Women’s Protection Units question still open.

Both files run against the same absence. Security Council Report’s October forecast, published 1 October, says Deputy Special Envoy Claudio Cordone and an OCHA representative are expected to brief the Council this month on political and humanitarian developments; Cordone told the Council on 22 June that “there has been no progress on the implementation of the September 2025 roadmap of confidence-building and reintegration in Sweida.” The legitimacy architecture above these appointments is itself provisional: two-thirds of the October 2025 parliament was chosen by electoral colleges and the remainder appointed by al-Sharaa, and the Constitutional Declaration sets a five-year transitional period.

Assessment: Read the coast and the north-east as one question with two answers. In Latakia the interim government is filling local executive seats by decree and calling them placeholders for an election it has not scheduled; in Qamishli the argument has moved from who holds the rifles to whose language the schools teach. Resist the replacement narrative on Qardaha: several appointees carry conventionally Alawite names, and the decision text is not public. Abdi’s position is the sharper test. He traded a command for an advisory chair, and language rights are the first thing he is asking the chair to deliver. If nothing arrives by the constitutional committee, the Qamishli street will draw its own conclusion about what integration bought.

Syria FileMEFILES tracking
13+1Latakia town councils plus Qardaha city council handed appointed interim offices
Evidence6 cited sources · Syrian Observer · The New Arab · Anadolu · The Media Line and 2 more

Egypt File

The economy that cannot close its gap, the border it will not open, and the river it cannot control.
Egypt's banking-sector foreign assets
Net foreign assets of the Egyptian banking sector, three CBE monthly prints; August and September not yet published
$22.6bnOct 2025$25.5bnDec 2025$28.4bnJul 2026
Central Bank of Egypt data as reported by Daily News Egypt and Egypt Today
Choreography of a Single Day

The president announced “Egypt Forum 2026” on 1 October, eighteen days before it opens, with public registration and an invitation to submit proposals. No outlet outside Egypt has reported it.

On 1 October the presidency announced the launch of preparatory sessions and a registration website for a conference called Egypt Forum 2026 (منتدى مصر 2026), to convene from 19 to 24 October, with citizens invited to register and submit proposals and opinions. The announcement was carried the same day by Egyptian Streets, Egypt Today, Al-Ahram Gate, Youm7, Masrawy and Cairo Mubasher. Every one of those outlets is Egyptian and is either state-owned, state-aligned, or operating inside the domestic licensing regime; Egypt Today described the conference as one intended to highlight achievements and address public concerns, which is the state’s own framing of its own event. The Files found no pickup by any non-Egyptian publication. We have not retrieved the text of the presidency readouts, and no direct quotation from the president about the forum is verified here.

The announcement sat inside a crowded first of October. Sisi had summoned the House of Representatives to convene that day for the opening of its second legislative session, per Masrawy on 28 September; the new Criminal Procedure Law entered into force the same day, an effective date reported by Daily News Egypt on 17 August; and the State Information Service published a presidential decree appointing a new batch of assistant public prosecutors. None of those is remarkable on its own. Together they make 1 October the day on which the state reset its legislative, judicial and consultative machinery at once — and then opened a public suggestion box with eighteen days' notice. What the forum is actually for will be legible from the preparatory-session agenda on its own site, which nobody appears yet to have read.

Assessment: A presidential forum that solicits grievances is a measuring instrument as much as a messaging one: it tells the palace where the pressure sits before anything is priced. The temptation is to read it straight onto the IMF subsidy calendar — a stretched programme, a fuel step, a forum to absorb the reaction. That link is an argument, not a finding, and nothing in the sourcing makes it. Distrust equally the state framing of achievements and the reflex that every Egyptian convocation is a pre-emptive buffer. The test is cheap and near: the government’s programme statement to the new session, and whether bread or fuel pricing language appears in it.

Egypt FileMEFILES tracking
18Days between the announcement and the forum’s opening
Evidence6 cited sources · Egyptian Streets · Egypt Today · Al-Ahram Gate (Arabic) · Masrawy (Arabic) and 1 more
The file3 Aug: 0 stories4 Aug: 0 stories5 Aug: 0 stories6 Aug: 0 stories7 Aug: 0 stories8 Aug: 0 stories9 Aug: 0 stories10 Aug: 0 stories11 Aug: 0 stories13 Aug: 0 stories14 Aug: 0 stories15 Aug: 0 stories16 Aug: 0 stories17 Aug: 0 stories18 Aug: 0 stories19 Aug: 0 stories20 Aug: 0 stories21 Aug: 0 stories22 Aug: 0 stories23 Aug: 0 stories24 Aug: 0 stories25 Aug: 0 stories26 Aug: 0 stories27 Aug: 2 stories28 Aug: 2 stories29 Aug: 2 stories30 Aug: 2 stories31 Aug: 2 stories1 Sept: 2 stories2 Sept: 2 stories3 Sept: 2 stories4 Sept: 2 stories5 Sept: 2 stories6 Sept: 2 stories7 Sept: 2 stories8 Sept: 2 stories9 Sept: 2 stories10 Sept: 2 stories11 Sept: 2 stories12 Sept: 2 stories13 Sept: 2 stories14 Sept: 2 stories15 Sept: 2 stories16 Sept: 2 stories17 Sept: 2 stories18 Sept: 2 stories19 Sept: 2 stories20 Sept: 2 stories21 Sept: 2 stories22 Sept: 2 stories23 Sept: 3 stories24 Sept: 3 stories25 Sept: 2 stories26 Sept: 2 stories27 Sept: 3 stories28 Sept: 2 stories29 Sept: 2 stories30 Sept: 2 stories1 Oct: 2 stories2 Oct: 2 stories
Egypt File · 73 editions since 19 July 2026 · 77 stories filed · 2 in this edition · rail shows the last 60
Announced Versus Counted

The Suez Canal’s September traffic figures and the central bank’s August foreign-asset print are both due. Until they land, the 2026 normalisation narrative rests on mixed bases and headline arithmetic.

The arc the Egyptian press has reported through 2026 is one of recovery. Daily News Egypt framed early February around $449m in canal revenue and 1,315 transits year-to-date as regional stability returned; Rio Times reported second-quarter revenue of $1.26bn, up 13% year-on-year; Daily News Egypt reported on 20 September that August traffic rose 27%, and CairoScene that August revenue rose 57% year-on-year. On 22 September the Suez Canal Authority chairman, Adm. Osama Rabie, announced the first transit of the mega-boxship OOCL Portugal in a north convoy, and on 23 September Amwal Al Ghad reported major carriers gradually resuming transits. The Files has verified these as published headlines and has not retrieved the article bodies; the figures are headline-sourced. They also sit on incompatible bases — year-to-date, quarterly, and monthly year-on-year — which should not be plotted together.

The external position is cleaner but equally incomplete. On the central bank’s monthly series as reported by Daily News Egypt, banking-sector net foreign assets ran $22.6bn in October 2025, $25.5bn at end-December 2025 and $28.418bn in July 2026, the last figure carried by Arab Finance in pounds as EGP 1.45tn. No August print surfaced. On the fund programme, the IMF announced a staff-level agreement on the seventh EFF and second RSF reviews on 29 June, reported as unlocking about $1.6bn and taking cumulative disbursement to roughly $7.2bn. The earlier combined review, in Country Report 26/69, required a rephasing of access, an extension of the arrangements and a waiver for non-observance of a performance criterion. No date for the eighth review was found.

Assessment: Separate normalisation that has been announced from normalisation that has been counted. Carrier announcements in late September are intentions; September transit volumes, due from the Authority in the first half of October, are the audit. On the foreign-asset series the level matters less than its composition — a climb financed by portfolio inflows and remittances is a different country from one financed by Gulf deposits, and this week’s sweep surfaced no Gulf deposit, rollover or sovereign-fund item at all. Treat that silence as not-found rather than not-happening. The fund’s own documents, not the press rewrites, are where the rephasing and the financing assumptions are legible.

Egypt FileMEFILES tracking
$28.4bnBanking-sector net foreign assets, July 2026 (CBE, via Daily News Egypt)
Evidence6 cited sources · Daily News Egypt · Amwal Al Ghad · Cyprus Shipping News · IMF and 1 more

Iraq File

Government formation, the militias on the payroll, the oil that funds both, and the American question.
Sovereignty Day

Iraq and the Pentagon both announced on 1 October that the anti-ISIS coalition had completed its withdrawal. Inside the same statement, the deadline for weapons outside state control slipped from 30 September 2026 to 30 June 2027.

Prime Minister Ali Faleh al-Zaidi congratulated Iraqis on “this great day, 1st October 2026” and on “the attainment of full and comprehensive Iraqi sovereignty,” according to the full statement text published by Iraq Business News. Chief Pentagon spokesperson Sean Parnell said in a statement that “the orderly departure of Coalition forces and equipment from Erbil Air Base marks the successful conclusion of the military mission that defeated ISIS in Iraq,” calling it a 12-year campaign. The multinational task force against regional ISIS activity relocates its headquarters to Jordan, Overt Defense reported. The date had been locked for weeks: al-Zaidi told reporters on 12 August, after meeting CENTCOM commander General Brad Cooper, that 30 September was “fixed and final,” and on roughly 3 September government spokesman Haider al-Aboudi said Baghdad had rejected a proposal to retain any coalition forces past the deadline, per the state agency INA.

The second deadline did not hold. Al-Zaidi’s published text describes 1 October as “a serious beginning” on weapons outside state control, under “a clear roadmap and an agreed timetable that will not extend beyond 30th June 2027” — the same endpoint carried by Xinhua. On 12 August, The National had reported the framing as militia groups “also required to disarm by September 30,” with Iraq from 1 October “free from any foreign military presence and no weapons outside the control of the state.” Rudaw notes the weapons-restriction deadline “was initially set at September 30 but was recently pushed.” Al-Zaidi also announced immediate procurement of a comprehensive national air defence system and reaffirmed that Iraqi territory and airspace may not be used as a launchpad or transit corridor against neighbouring states.

Two things the ceremony did not settle. Al Jazeera reported on 7 September that the withdrawal includes removal of the US air defence systems stationed in Erbil — the layer used to intercept Iranian ballistic missiles and drones during the US-Israel war on Iran. Nobody has said on the record where those systems went or what replaces them; the procurement announcement is a plan, not a capability. And the Pentagon statement names Erbil Air Base specifically. No US official has stated a residual figure for Iraq, and this desk found no independent confirmation — satellite, congressional notification or named official — that the number is zero.

Assessment: Read the two deadlines together and the shape of the bargain appears. The foreign-troop deadline was the one Baghdad could meet by doing nothing, and it met it on the day. The domestic-weapons deadline was the one that required confronting armed groups inside the governing coalition, and it was quietly re-dated into the second half of 2027, past the point where anyone will remember it was promised for 2026. Al-Zaidi credited Sistani’s 2014 collective-duty fatwa rather than the Iraqi army for the sovereignty he declared — a tell about whose legitimacy he is borrowing. Treat “withdrawal complete” as announced by both governments and plausible; treat “zero US personnel” as unverified. Watch whether any faction ever acknowledges being bound by 30 June 2027.

Iraq FileMEFILES tracking
30 Jun 2027New deadline for weapons outside state control, moved from 30 September 2026
Evidence6 cited sources · Iraq Business News · Overt Defense · Xinhua · Al Jazeera and 1 more
One Day Earlier

Iraq’s Council of Ministers approved the Popular Mobilization Forces bill on the evening of 29 September and referred it to the legislature. Referral is not passage, and the text has not been published.

The Council of Ministers, meeting in its 21st regular session on Tuesday evening 29 September under al-Zaidi, voted to approve the PMF draft law and refer it to the Council of Representatives; Shafaq timestamped the decision 19:57 UTC. The prime minister’s office said the cabinet “voted in favour of the Popular Mobilisation Forces bill” and “approved referring the bill to parliament for a vote, in accordance with constitutional provisions,” in language carried by The National. The PMO framed the move as part of the government’s commitment to organising the administrative framework of security institutions and “in recognition of the sacrifices made” by PMF members. Rudaw Arabic reports the draft defines the PMF as part of the Iraqi armed forces and links it to the commander-in-chief; Rudaw English says it covers service, retirement and organisation, filling in the three-provision 2016 law that recognised the force without addressing its structure.

The bill has a history of dying. The current draft was approved under Mohammed Shia al-Sudani in February 2025 and stalled over retirement provisions and US opposition, The National reports; Rudaw identifies the sticking point as a retirement age of 60, which would have retired many veteran commanders. Rudaw also reports earlier iterations went further — a separate military academy, independent staff command and economic independence, modelled on the IRGC. Al-Zaidi sent the draft back to parliament in August. Shafaq reports, citing unnamed “informed sources” and uncorroborated elsewhere, that contentious provisions facing what those sources called a “US veto” were removed to get the two amended drafts moving, while some provisions still draw US objections. Until the text is published, nobody outside the cabinet knows which version this is.

Assessment: The sequencing is the argument. A bill institutionalising a 238,075-strong force — budgeted at 4.5 trillion dinars in 2024, composed of around 70 predominantly Shiite armed groups — cleared cabinet on the eve of the day Baghdad declared no weapons would remain outside state control. Both things can be true at once only if “state control” means absorbing the force rather than dissolving it. That is the policy, and it is coherent; it is simply not what disarmament means. Two cautions. The National characterises a standing US position against the bill, not a response to this vote — no dated Washington statement on 29 September has surfaced, and silence on the day of a declared withdrawal would itself be worth explaining. And the chamber that must now vote may still lack confirmed interior and defence ministers.

Iraq FileMEFILES tracking
238,075PMF personnel, per the schedules of the Iraqi budget law (Rudaw Arabic)
Evidence5 cited sources · Shafaq · The National · Rudaw English · Rudaw Arabic and 1 more

The Brotherhood Brief

The organization as structure — designations, networks, finances, legal battles. Structure over slogans.
State Law, Federal Gap

The DeSantis cabinet voted Tuesday under a law that took effect in July, nine months after a federal judge blocked an earlier executive order on the same question.

On Tuesday 29 September, Governor Ron DeSantis and the Florida Cabinet voted to designate the Muslim Brotherhood, the Council on American-Islamic Relations and its state chapter CAIR-Florida, and Antifa as terrorist organizations under Florida law. The same vote applied state designations to roughly 90 organizations already carried on US federal terrorist lists, among them Tren de Aragua, two Mexican cartels and Iran’s Islamic Revolutionary Guard Corps; al-Qaeda, the Houthis and the Continuity Irish Republican Army were labelled foreign terrorist organizations under state law. The vehicle is HB 1471, which took effect on 1 July. DeSantis described it on X as “the anti-sharia law signed earlier this year.” A 427-page supporting document asserts “there is substantial evidence that CAIR is engaging in terrorist activity” and alleges connections to Hamas and Palestinian Islamic Jihad. The designations take effect 5 November 2026.

The practical effect, as reported by WUSF, WLRN and CBS Miami: the designated groups are barred from public funding and state contracts, may be legally dissolved, and students who support them may be expelled from academic institutions. The ACLU said in a release timestamped 11:30 am on 29 September that when DeSantis and four Cabinet members voted, its counsel stood and asked to be heard on behalf of CAIR and CAIR-Florida, and were refused. Hina Shamsi, director of the ACLU National Security Project, said attorneys intended to file on Thursday 1 October for a preliminary injunction; as of this edition the filing was announced but not confirmed. The ground is familiar. On 4 March the Northern District of Florida enjoined DeSantis’s earlier executive order designating CAIR; a fresh federal suit, case 4:25-cv-00516-MW-MJF, was filed the day HB 1471 took effect. Florida officials paused the designation plan in mid-July. The pause ended Tuesday.

Assessment: The 5 November date is the thing to watch, not the vote. Florida has already lost once on this ground and has spent the interval replacing an executive order with a statute and an emergency rule — the architecture of a decision designed to survive judicial review rather than to produce one. Note the gap the designation exploits: the federal government has never designated CAIR, and the four Brotherhood chapters designated since January — Lebanon, Jordan, Egypt, Sudan — are foreign bodies, not American organisations. State law is being used to reach a target federal instruments cannot. Whether that holds is a First Amendment question, and the answer will arrive before the designations bite.

The Brotherhood BriefMEFILES tracking
5 NovDate Florida’s designations take effect
Evidence6 cited sources · WLRN · WUSF · CBS Miami · ACLU and 2 more
The file3 Aug: 2 stories4 Aug: 2 stories5 Aug: 3 stories6 Aug: 2 stories7 Aug: 2 stories8 Aug: 2 stories9 Aug: 2 stories10 Aug: 2 stories11 Aug: 2 stories13 Aug: 2 stories14 Aug: 2 stories15 Aug: 2 stories16 Aug: 2 stories17 Aug: 2 stories18 Aug: 2 stories19 Aug: 2 stories20 Aug: 2 stories21 Aug: 2 stories22 Aug: 2 stories23 Aug: 2 stories24 Aug: 2 stories25 Aug: 2 stories26 Aug: 2 stories27 Aug: 2 stories28 Aug: 2 stories29 Aug: 2 stories30 Aug: 2 stories31 Aug: 2 stories1 Sept: 2 stories2 Sept: 2 stories3 Sept: 2 stories4 Sept: 2 stories5 Sept: 2 stories6 Sept: 2 stories7 Sept: 2 stories8 Sept: 2 stories9 Sept: 2 stories10 Sept: 2 stories11 Sept: 2 stories12 Sept: 2 stories13 Sept: 2 stories14 Sept: 2 stories15 Sept: 2 stories16 Sept: 2 stories17 Sept: 2 stories18 Sept: 2 stories19 Sept: 2 stories20 Sept: 2 stories21 Sept: 2 stories22 Sept: 2 stories23 Sept: 2 stories24 Sept: 2 stories25 Sept: 2 stories26 Sept: 2 stories27 Sept: 2 stories28 Sept: 2 stories29 Sept: 2 stories30 Sept: 2 stories1 Oct: 2 stories2 Oct: 2 stories
The Brotherhood Brief · 73 editions since 19 July 2026 · 143 stories filed · 2 in this edition · rail shows the last 60
Who Built The List

A leaked-document investigation published this week traces a 2018 report on US Muslim organisations to Alp Services, the Geneva firm already documented as working for Abu Dhabi in Europe.

Drop Site News reported this week, citing an archive of leaked documents it obtained, that Alp Services — a Geneva-based private intelligence firm working for the United Arab Emirates — commissioned a report on American Muslim organizations from a US researcher as part of a campaign to damage their reputations through allegations of Muslim Brotherhood links. The commission produced a 2018 report; the resulting blacklist, per Drop Site, names mainstream American Muslim groups and dozens of American citizens. The same piece notes two bills now pending in Congress: the Muslim Brotherhood Terrorist Designation Act, from Representative Mario Diaz-Balart and Senator Ted Cruz, requiring annual government reports identifying Brotherhood branches and evaluating them for designation and sanctions; and a bill from Representative Chip Roy to designate CAIR a Specially Designated Global Terrorist, freeze its assets, revoke its tax exemption and bar Americans from dealing with it.

The European record behind the claim is older and better corroborated. European Investigative Collaborations, working from 78,000 confidential documents obtained by Mediapart, reported that between 2017 and 2020 Alp Services compiled files on individuals from 18 European countries and 400 organisations for Emirati intelligence, for a reported €5.7 million, with orders placed at €20,000 to €50,000 per individual. Belgium summoned the UAE ambassador over the campaign. The New Yorker reported the financing in March 2023; pitch documents recovered by Hazim Nada after the 2019 bankruptcy of his firm Lord Energy state that Alp offered “tested advanced confidential techniques in ‘dark PR'” to “discredit and embarrass key targets.” Alp has told reporters the circulating material was based on “stolen data” and was “partly falsified.”

Assessment: Hold the two halves apart. The European file is multi-source and documented; the American commission rests on a single outlet holding a single archive, and no one has yet matched it. That is plausibility, not corroboration. The temptation this week is to draw a line from a 2018 Geneva commission to a Tallahassee cabinet vote eleven days ago. Nothing in the record does that, and the Florida document is 427 pages of its own making. What the two stories share is a structural fact worth more than any causal claim: designation campaigns run on dossiers, and dossiers have authors and invoices. Ask who paid for the paper before arguing about what is in it.

The Brotherhood BriefMEFILES tracking
€5.7mReported Emirati payment to Alp Services, 2017–2020
Evidence5 cited sources · Drop Site News · Middle East Eye · Amwaj.media · The New Arab

Western Media Watch

How NYT, WaPo, FT, BBC and the wires frame the region — what is emphasized, what is omitted, and what the gap reveals.
One Speaker, Many Headlines

Every motive claim circulating about the co-pilot who tried to crash FZ1073 traces to one Israeli politician speaking to one American broadcaster. Western headlines differed mainly in whether they said so.

On Wednesday 30 September, flydubai FZ1073 left Dubai for Tel Aviv with 174 people aboard, mostly Israelis. The co-pilot stabbed the captain, Indian national Smit Machchhar, and attempted to put the Boeing 737 into the ground; passengers and crew subdued him and the aircraft landed in Saudi Arabia. What Saudi and Emirati authorities have said on the record since is narrow. The Saudi Interior Ministry, in a statement on 1 October carried in CNN’s live file, said preliminary investigations with a UAE security team participating “revealed an assault on the captain by the co-pilot, resulting in various injuries”, and that the suspect had been transferred to the UAE once medically cleared. The UAE said its own team had begun examining the attack and “whether it was linked to any terrorist purpose”, citing jurisdiction over a UAE-registered aircraft, per AP. Neither named the man, his nationality, or a motive.

The motive came from Benjamin Netanyahu, on Fox News, on Thursday. He said the co-pilot “underwent Islamist radical indoctrination” and was “suicidal” — the Washington Post called it “the first indication of a motive for the attack”. He said the man was an Omani national. CNN’s live file stated plainly: “The accused pilot has not been publicly identified, but Israel says he is an Omani national.” Asked about Iranian involvement, Netanyahu said it was “too early to say”, per AP. He also said UAE President Sheikh Mohamed bin Zayed Al Nahyan had agreed Israel would join the interrogation of the suspect — a claim sourced only to Netanyahu, with no Emirati confirmation surfaced. A Washington Post story carried an unnamed Israeli official saying the co-pilot had “the motive to kill Jews”.

The headlines then diverged on a single verb. ABC Australia: “Israeli PM Benjamin Netanyahu claims flydubai co-pilot underwent ‘radical indoctrination'”. France 24: “Netanyahu says flydubai co-pilot was radicalised as UAE probes terror link”. CBS, off the AP wire: “FlyDubai co-pilot stabbed captain, tried to crash flight to Israel after ‘radical indoctrination,' Netanyahu says” — the contested motive inside the causal chain, attribution appended. Bloomberg went furthest: “FlyDubai Pilot Who Tried to Crash Plane Identified as Omani”. Its own URL slug preserves the original: “israel-s-netanyahu-says-flydubai-hijacker-pilot-was-from-oman”. Bloomberg’s newsletter the same day kept the attribution — “Netanyahu Says FlyDubai Pilot Who Tried to Crash Plane Is Omani”. One newsroom, one day, two epistemics. AP itself held the line, headlining “Investigators work to determine why a pilot apparently tried to crash a FlyDubai flight to Israel” and withholding motive entirely.

Assessment: The interesting failure here is not bias toward Israel; it is deference to availability. Riyadh and Abu Dhabi issued procedural statements and no names. Netanyahu gave a television interview full of nouns. Desks on deadline took the copy that had something in it. “Identified as” is the tell: it implies an identifying authority where none exists. Note what the same copy buried — ABC Australia reported initial investigations found the attacker “likely to have been acting alone”, which cuts against both the Iran line and the “external direction” frame. Distrust anything downstream of the Israel-joins-the-interrogation claim until the UAE says it. And treat a 14,000-foot descent figure carried by one outlet as unconfirmed.

Western Media WatchMEFILES tracking
174people aboard FZ1073, mostly Israelis
Evidence6 cited sources · AP · Washington Post · Bloomberg · Bloomberg newsletter and 2 more
The file3 Aug: 2 stories4 Aug: 3 stories5 Aug: 2 stories6 Aug: 2 stories7 Aug: 2 stories8 Aug: 2 stories9 Aug: 1 story10 Aug: 2 stories11 Aug: 1 story13 Aug: 3 stories14 Aug: 2 stories15 Aug: 2 stories16 Aug: 2 stories17 Aug: 2 stories18 Aug: 0 stories19 Aug: 3 stories20 Aug: 0 stories21 Aug: 2 stories22 Aug: 2 stories23 Aug: 2 stories24 Aug: 2 stories25 Aug: 3 stories26 Aug: 2 stories27 Aug: 2 stories28 Aug: 2 stories29 Aug: 2 stories30 Aug: 2 stories31 Aug: 2 stories1 Sept: 2 stories2 Sept: 2 stories3 Sept: 2 stories4 Sept: 2 stories5 Sept: 1 story6 Sept: 2 stories7 Sept: 2 stories8 Sept: 2 stories9 Sept: 2 stories10 Sept: 2 stories11 Sept: 2 stories12 Sept: 2 stories13 Sept: 2 stories14 Sept: 2 stories15 Sept: 2 stories16 Sept: 2 stories17 Sept: 2 stories18 Sept: 2 stories19 Sept: 2 stories20 Sept: 2 stories21 Sept: 2 stories22 Sept: 2 stories23 Sept: 3 stories24 Sept: 2 stories25 Sept: 3 stories26 Sept: 2 stories27 Sept: 2 stories28 Sept: 2 stories29 Sept: 2 stories30 Sept: 2 stories1 Oct: 1 story2 Oct: 2 stories
Western Media Watch · 73 editions since 19 July 2026 · 139 stories filed · 2 in this edition · rail shows the last 60
The Slug Is the Fossil

On the flydubai story, three outlets left evidence of headlines they abandoned. In each case the discarded version pointed at institutions rather than at a motive.

URL slugs are generated from the first headline a desk writes and rarely updated. The Washington Post’s 1 October piece sits at a slug reading “inquiry-into-flydubai-attack-turns-security-lapses”; it published as “Co-pilot who tried to crash FlyDubai jet was ‘radicalized,' Israel says”. Bloomberg’s first-day story carries the slug “dubai-tel-aviv-flight-lands-in-saudi-arabia-after-on-board-issue” and published as “Passengers Avert Crash by Subduing Pilot Who Stabbed Captain” — “on-board issue” to “Avert Crash” inside a day. ABC News US went further: one article, ID 19895882, ran under at least two headlines across its owned stations, “Modi praises FlyDubai co-pilot credited with preventing disaster as UAE investigates incident” on abc7news and a version with flydubai stripped out on abc11. The page JSON retains an alternativeHeadline field: “UAE says it will lead investigation...”, matching the slug. A jurisdiction headline was written, demoted to metadata, and replaced on the front by the Indian prime minister praising a crew member.

What the abandoned headlines had in common was institutions. The question Bloomberg alone put in its lede was how an Omani national obtained permission to fly a Dubai–Tel Aviv route “despite a strict security screening process”, and the pressure this puts “on the airline and security forces to explain how he ended up on the Dubai-to-Tel Aviv flight despite Oman and Israel having no diplomatic relations”. The Irish Times — outside this desk’s usual outlet list — supplied the structural fact: under the terms of the Abraham Accords, pilots flying between Israel and Dubai or Abu Dhabi must come from countries that have relations with Israel, and Oman does not. It also ran the only frame nobody else attempted, “Flydubai hijacking attempt could aid Netanyahu’s re-election bid”. Separately, the Times of Israel liveblog carried Channel 12’s claim that dozens of Omani pilots have flown the Dubai–Tel Aviv route in recent years — single-sourced, no date range, and directly relevant to the screening question none of the front pages asked.

Assessment: Two different errors are being conflated and should not be. The abandoned-slug pattern is editorial judgement — defensible, if you think motive is the story and procurement of flight crew is not. The role inversion is not. France 24’s second 1 October piece describes “the pilot” as having stabbed “his copilot”, reversing attacker and victim against the Saudi Interior Ministry statement and against France 24’s own other story that day; Bloomberg’s headline furniture carries the same inversion. The man Narendra Modi praised is, in two Western outlets, the man who did it. That is an accuracy failure with a named correctable fix, and it has gone uncorrected while the motive debate absorbed the attention.

Western Media WatchMEFILES tracking
3headlines run off one ABC News article ID
Evidence6 cited sources · Washington Post · Bloomberg · ABC7 News · ABC11 and 2 more

Israel Press Review

Reading Haaretz, Times of Israel, Ynet and the Hebrew press — what Israeli media and officials are actually saying.
Blocs after the slates closed
Knesset seats by bloc in a poll published 1 October, against the 61 needed to govern
Netanyahu bloc54 seatsOpposition bloc52 seatsNeeded for a majority61 seats
Haaretz, poll published 1 October 2026; pollster and sample not stated in the report
Arithmetic and Disqualification

Sami Abou Shahadeh ended his candidacy on 1 October after nine justices told him his disqualification would be upheld, on the same day the first post-slate polls put the pro-Netanyahu bloc back in front.

The Central Elections Committee voted on 23 September to disqualify the Balad chairman; under Israeli law the Supreme Court must approve any individual candidate’s removal, and Attorney-General Gali Baharav-Miara filed a position on Tuesday 29 September asking the court to do so. An expanded panel of nine justices convened on 1 October to hear that case alongside the committee’s moves against Hadash MK Ofer Cassif and against Mansour Abbas’s Ra’am as a list. Itamar Ben Gvir, who sought the disqualification, argued it in the courtroom himself with his ally MK Gotliv. The justices told Abou Shahadeh a majority would uphold the ban and urged him to withdraw; he ended his candidacy. Balad says he remains party leader and that the Joint List will keep working to unseat Netanyahu. Ben Gvir celebrated the result while complaining the court had given him a window to quit. The rulings on Cassif and on Ra’am were not reported as of Thursday evening.

The seat tables moved the same day. Haaretz reported a new poll putting Netanyahu’s bloc on 54 and his opponents on 52, with the opposition’s refusal to work with Arab parties supplying the edge. A television poll carried by the Times of Israel — the broadcaster is not identified in the published entry — showed the Netanyahu bloc regaining the lead while still far short of 61, with Gadi Eisenkot’s Yashar first on 21 seats, down one, and Likud on 19. A separate Times of Israel survey the same day had the bloc leading and Likud tied for first. For comparison, a Kan poll in early September had the camps at 52 and 51. Haaretz’s own recent headline run has read “tied,” then “Eisenkot’s bloc beats Netanyahu,” then “Eisenkot bloc leads by one.”

Assessment: Three lead changes in a fortnight is not movement, it is noise inside the margin of error; the only stable finding is that neither camp reaches 61 without the twelve-odd seats both sides have agreed to treat as untouchable. That is what makes the disqualification docket arithmetic rather than symbolism. Each Arab-list seat removed or suppressed shifts the effective majority threshold downward for the bloc that does not need those votes. Watch the pending dispositions on Cassif and Ra’am before concluding anything: a court that pushed one candidate to withdraw rather than issue a ruling has avoided writing the precedent down. Treat the Middle East Forum tracker, an American advocacy outfit, as a convenience rather than an authority.

Israel Press ReviewMEFILES tracking
54–52Netanyahu bloc against his opponents in a poll reported by Haaretz on 1 October
Evidence6 cited sources · Times of Israel · Jerusalem Post · Haaretz
The file3 Aug: 3 stories4 Aug: 2 stories5 Aug: 2 stories6 Aug: 3 stories7 Aug: 2 stories8 Aug: 3 stories9 Aug: 2 stories10 Aug: 4 stories11 Aug: 2 stories13 Aug: 2 stories14 Aug: 3 stories15 Aug: 0 stories16 Aug: 2 stories17 Aug: 3 stories18 Aug: 3 stories19 Aug: 2 stories20 Aug: 2 stories21 Aug: 2 stories22 Aug: 2 stories23 Aug: 3 stories24 Aug: 3 stories25 Aug: 2 stories26 Aug: 3 stories27 Aug: 2 stories28 Aug: 3 stories29 Aug: 3 stories30 Aug: 2 stories31 Aug: 3 stories1 Sept: 2 stories2 Sept: 2 stories3 Sept: 3 stories4 Sept: 2 stories5 Sept: 2 stories6 Sept: 3 stories7 Sept: 2 stories8 Sept: 2 stories9 Sept: 2 stories10 Sept: 2 stories11 Sept: 2 stories12 Sept: 3 stories13 Sept: 2 stories14 Sept: 3 stories15 Sept: 3 stories16 Sept: 2 stories17 Sept: 3 stories18 Sept: 3 stories19 Sept: 3 stories20 Sept: 2 stories21 Sept: 2 stories22 Sept: 3 stories23 Sept: 2 stories24 Sept: 2 stories25 Sept: 2 stories26 Sept: 3 stories27 Sept: 3 stories28 Sept: 2 stories29 Sept: 3 stories30 Sept: 3 stories1 Oct: 3 stories2 Oct: 3 stories
Israel Press Review · 73 editions since 19 July 2026 · 171 stories filed · 3 in this edition · rail shows the last 60
October 7 in Open Court

Three and a half weeks before the vote, the attribution of blame for 7 October 2023 is being litigated by both the prime minister and the leader of the Democrats.

Haaretz reported on 29 September that Netanyahu had filed a libel suit against the paper over its September investigation saying he disregarded an explicit warning before the Hamas attack, and that he is suing other outlets and journalists as well. ABC News in Australia, writing on 30 September, described the wider pattern: with only weeks to the election, “an unrelenting stream of well-sourced, detailed stories has suddenly appeared documenting multiple failures by Netanyahu,” including reporting that by early October 2023 two Egyptian warnings about signs of an impending attack from Gaza had gone unheeded. The underlying source for the Egyptian-warnings claim is not identified in ABC’s account and should be read as ABC’s characterisation, not as a primary document.

The traffic runs both ways. The Times of Israel reported on 2 September that Yair Golan was preparing to present a timeline of his own movements on 7 October 2023, with supporting documents, in his libel lawsuit — filed as the charge of “betrayal” on that day became central to Likud’s official campaign. Two of the three figures with a plausible claim on the premiership are now asking civil courts to establish, under rules of evidence and before a vote, what each of them knew and did on a morning the state’s own inquiries have not conclusively settled.

Assessment: Libel actions are a slow instrument aimed at a fast target: nothing filed in late September will be adjudicated before 27 October. The function is in the filing. For Netanyahu a writ converts an investigative report into a contested allegation that broadcasters must hedge; for Golan a document-backed timeline turns a campaign slogan into something an opponent must substantiate or withdraw. The side-effect is that discovery may put warning-chain material into the public record that no commission of inquiry has yet extracted — which is why the filings themselves, not the coverage of them, are the thing to read. Note also the timing question ABC raises without answering: who is releasing this material, and when it was available.

Israel Press ReviewMEFILES tracking
2Egyptian warnings ABC News reports went unheeded before 7 October 2023
Evidence3 cited sources · Haaretz · ABC News (Australia) · Times of Israel
Three Gulf States, One Flight

The Dubai–Israel route is suspended and investigations are running in Riyadh, Jerusalem and at the airline. In Israel the story moved to the screening failure, and to the election, almost immediately.

A Flydubai flight from Dubai to Israel made an emergency landing in Saudi Arabia on Wednesday 30 September after what CBS News, citing passengers and Israeli officials, described as a violent attempt by the co-pilot to seize control of the aircraft and crash it. Newsweek reported the trajectory changed roughly two hours into the flight as it briefly entered Jordanian airspace, and that Saudi, Israeli and airline investigators are examining what was known before departure, how the suspect came to be assigned to the route, and whether warning signs were missed. CNN quoted an airline spokesperson saying Flydubai flights to and from Israel are temporarily suspended; Israel has called it an attempted terrorist attack without publishing details of motive. Israeli journalist Neria Kraus told Fox News that an Israeli father rushed the cockpit as the incident unfolded.

Netanyahu told Fox News on 1 October that the Omani co-pilot “underwent Islamist radical indoctrination,” and quoted him as saying, “Kill me, kill me.” Israel’s defence minister — not named in the Fox News account captured here — called it an “attempted jihadist terrorist attack.” At 10:17 pm on 1 October the Times of Israel liveblog carried a line reading “Prior to attack, Shin Bet didn’t enforce ban on pilots from unfriendly states — report,” relaying an Israeli outlet it does not identify. The site’s own index that day summarised the day’s politics as the Flydubai attack becoming “political fodder” for candidates. Four weeks earlier, ToI reported Netanyahu met officials from Middle Eastern countries without ties to Israel during a visit to the UAE.

Assessment: Hold two things apart. The event — a cockpit seizure attempt on a scheduled commercial flight — is corroborated by wires, the airline and a diversion that is visible in the flight record. The explanation is not: radicalisation, mission and motive have so far been asserted by Israeli political principals, not by any of the three investigating authorities. The Shin Bet screening line is the item to watch and the item to discount for now: a single unattributed Israeli report about a security-service failure, surfacing the day after the prime minister made the attack a campaign theme, is exactly the shape a contested leak takes. For Gulf readers the operative number is the suspended route. A UAE carrier, an Omani crew member and a Saudi diversion field is a normalisation architecture being stress-tested in public.

Israel Press ReviewMEFILES tracking
3Gulf states inside one incident: a UAE carrier, an Omani co-pilot, a Saudi diversion
Evidence6 cited sources · CBS News · CNN · Newsweek · Fox News and 1 more

Digital Front Monitor

Cyber operations, information warfare and the infrastructure of control across the region.
Custody, Not Code

The extradition is the rare physical act in a field made of indictments nobody can serve. The $3.4 billion attached to it is a prosecution allegation, and it is not even stable across two renderings of the same wire.

Montenegro has extradited an Iranian-Turkish dual national, surname Barati, to the United States, where he faces computer fraud charges in the Southern District of New York over an alleged campaign against more than 150 US universities. He was arrested by Montenegrin police in June 2026 at US request. According to the wire copy, Barati and sixteen other Iranian nationals — seventeen defendants in total — were named in a superseding indictment in August 2026. ABC News puts the alleged loss at USD 3.4 billion; the syndicated regional carrier Local 3 News, running what appears to be the same agency story, puts it at USD 3 billion. The Files could not establish which agency originated the copy, could not locate a Department of Justice release, and found no named DOJ, FBI or Montenegrin official quoted in either version.

The conduct described — mass targeting of university faculty, intellectual property theft valued in the low billions, Iranian nationals charged in SDNY — closely tracks a fact pattern US prosecutors have been working since the Mabna Institute case years ago. We were not able to confirm how the August 2026 superseding indictment relates to that earlier matter, and readers should treat any framing of this as a newly discovered intrusion campaign as unsupported. What is new and documented is narrower: a man in custody in Montenegro is now a man in custody in New York, and the defendant list has grown to seventeen. The dollar figure is not a finding of loss. It is a number in a charging document, and the two published versions of it differ by four hundred million.

Assessment: Indictments of Iranian nationals are routine and nearly costless, because the defendants are in Iran. Extradition is the only part of the apparatus that imposes a real price, and it is imposed not on the state but on the individual who travelled. The signal is aimed at that population: the operational risk is holidays, transit and third countries with US treaties, not the keyboard. Distrust the headline number. Intellectual-property loss figures are constructed estimates of what stolen research was worth to its owner, and a figure that moves between renderings of one wire story is a figure that should carry its source and its status every time it is printed.

Digital Front MonitorMEFILES tracking
17defendants named in the August 2026 superseding indictment
Evidence2 cited sources · ABC News · Local 3 News
The file3 Aug: 2 stories4 Aug: 2 stories5 Aug: 2 stories6 Aug: 2 stories7 Aug: 2 stories8 Aug: 2 stories9 Aug: 2 stories10 Aug: 2 stories11 Aug: 2 stories13 Aug: 2 stories14 Aug: 2 stories15 Aug: 2 stories16 Aug: 2 stories17 Aug: 2 stories18 Aug: 2 stories19 Aug: 2 stories20 Aug: 2 stories21 Aug: 2 stories22 Aug: 3 stories23 Aug: 2 stories24 Aug: 3 stories25 Aug: 3 stories26 Aug: 2 stories27 Aug: 2 stories28 Aug: 2 stories29 Aug: 2 stories30 Aug: 2 stories31 Aug: 2 stories1 Sept: 2 stories2 Sept: 2 stories3 Sept: 2 stories4 Sept: 2 stories5 Sept: 2 stories6 Sept: 3 stories7 Sept: 2 stories8 Sept: 2 stories9 Sept: 2 stories10 Sept: 2 stories11 Sept: 2 stories12 Sept: 2 stories13 Sept: 2 stories14 Sept: 2 stories15 Sept: 2 stories16 Sept: 2 stories17 Sept: 2 stories18 Sept: 2 stories19 Sept: 2 stories20 Sept: 2 stories21 Sept: 2 stories22 Sept: 1 story23 Sept: 2 stories24 Sept: 2 stories25 Sept: 2 stories26 Sept: 2 stories27 Sept: 2 stories28 Sept: 2 stories29 Sept: 2 stories30 Sept: 2 stories1 Oct: 2 stories2 Oct: 2 stories
Digital Front Monitor · 73 editions since 19 July 2026 · 145 stories filed · 2 in this edition · rail shows the last 60
The Re-Timestamp Problem

The dashboard refreshes daily, so it reads as breaking. The shutdown it describes ended on 26 May 2026. The same mechanism is quietly ageing most of the Middle East cyber material circulating this week.

A tracker at state-of-iranblackout.whisper.security surfaces in a 72-hour sweep timestamped zero days old. It describes a near-total shutdown imposed on 8 January 2026 in response to protests driven by economic crisis, and says it aggregates IODA, Cloudflare Radar and RIPE RIS. It refreshes daily. The blackout it documents ran from 8 January to 26 May 2026. NPR reported on 28 May that Iranians were back online under heavy restrictions, with traffic at roughly 40 percent of normal and, per Iranian cybersecurity analyst Amir Rashidi, continuing widespread disruption. The Conversation established the comparative scale in January: longer than the 48.5-hour shutdown of June 2025, longer than the near-seven-day cut of November 2019, and more complete than the nightly mobile cuts of September–October 2022 because fixed-line was closed as well. All of that is real. None of it is new.

The same dynamic runs through the vendor layer. SOCRadar’s Iran–Israel/US cyber war dashboard carries undated entries under a continuously updated banner, including an assertion that Jordan’s National Cybersecurity Centre confirmed blocking an Iranian attack on the national wheat silo management system — with no date and no NCC statement linked. The same vendor’s April 2026 blog supplies the 4-percent-connectivity, IRNA-offline, Tasnim-defaced set that still circulates without its date. Positive Technologies' Gulf figures for H1 2026 — UAE 35 percent, Iran 17 percent, Saudi Arabia 15 percent of regional attacks — were published around 19–22 September and are being rewritten this week; they are vendor telemetry, not an incident count. The National, reporting CloudSek ransomware data on 16 September, said plainly that its figures were threat-intelligence indicators rather than confirmed successful attacks. That caveat is the exception.

Meta’s removal of an Iran-based network using generative AI to pose as ordinary Americans, reported by Axios on 27 August, involved 23 Facebook accounts and 11 Instagram accounts. Five weeks later, low-grade aggregators are still presenting it as a current takedown. The honest framing of 34 accounts is not that the operation was trivial but that persona networks are cheap to stand up and cheap to lose, which is precisely why headcount is a poor measure of anything.

Assessment: A dashboard converts a standing condition into an apparent event, and a daily refresh does the rest. The incentives are aligned and unremarkable: vendors need recency to sell detection, aggregators need volume, and regional desks need a chart. The state-level benefit is the one worth watching. Recycled alarm devalues real alarm, and an audience that has read four versions of the same blackout will not react to the fifth, actual one. The remedy is mechanical, not editorial judgement: put the date of the measurement on the tile, not the date of the page, and name whose telemetry it is.

Digital Front MonitorMEFILES tracking
40%of normal Iranian internet traffic when the blackout lifted, 26 May 2026
Evidence6 cited sources · NPR · The Conversation · Whisper Security · SOCRadar and 2 more
Watch Tomorrow — The Files' Forward Radar
  1. Iraq File: Whether any US or coalition personnel remain at Harir Air Base — the Pentagon statement named only Erbil, and no residual figure has been stated by either government.
  2. Iran File: Whether a State Department or Treasury primary notice surfaces for the $15 million reward offered against IRGC Aerospace Force financial mechanisms, which so far exists only in Gulf News’s account.
  3. Sudan Crisis Monitor: Whether the RSF responds to the Sudanese Doctors Network’s account of the El Obeid dormitory strike, and whether the preliminary toll of five dead and 47 wounded moves.
  4. Syria File: Whether any outlet matches Reuters' six-source account of Syrian–Hezbollah talks in Turkey with independent sourcing, and whether Damascus’s denial stays narrowed to “direct talks”.
  5. Egypt File: The Suez Canal Authority’s September traffic and revenue figures, due in the first half of October, which will show whether the carrier return reported on 23 September appears in transits.
  6. Sahel Monitor: Whether FAMa or the Russian Africa Corps issues any statement on the claimed JNIM attack near Niono — a denial would settle as much as a confirmation.
  7. The Brotherhood Brief: Whether the ACLU’s preliminary-injunction motion for CAIR-Florida was actually filed in case 4:25-cv-00516-MW-MJF, after counsel said on 29 September they intended to file on 1 October.
The Files in your inbox

Get every morning's edition — free

Ten files, one region, zero illusions. The full daily edition, delivered at dawn Gulf time. No noise. Unsubscribe anytime.

We use MailerLite to send the edition. Confirm via the email you'll receive.  ·  Browse past editions