US Eyes New Iran Strikes As Oil Spikes; Refineries Hit Again
US Eyes New Iran Strikes As Oil Spikes; Refineries Hit Again
Severity: WARNING
Detected: 2026-04-30T08:26:48.959Z
Summary
Around 07:23–07:40 UTC on 30 April, reports indicate former US President Trump will today review a plan for a “short and powerful” new wave of strikes on Iran’s infrastructure, while warning Iran’s oil blockade could last months. In parallel, at ~08:01 UTC, Ukrainian drones again struck Russia’s major Lukoil Perm refinery complex about 1,000 miles from Ukraine, with ongoing UAV waves reported. Brent crude futures on ICE are trading near $124 with public Iranian commentary pointing to a potential move toward $140, raising the risk of a sustained energy shock.
Details
- What happened and confirmed details
Between 07:23 and 07:40 UTC on 30 April 2026, multiple reports cite Axios that Donald Trump will today receive a briefing on a plan for a “short and powerful” new wave of US strikes on Iran focused on infrastructure targets. This is framed as a follow-on to the late-February CENTCOM presentation that preceded prior joint US–Israeli strikes on Iran. Concurrent commentary notes Trump warning that Iran’s ongoing oil blockade could last months, and spot Brent futures on ICE for June delivery are quoted at roughly $124 per barrel, with an Iranian parliamentary speaker publicly suggesting $140 as a next level.
At approximately 08:01 UTC, Ukrainian-linked channels reported that drones are again attacking the Lukoil-Permnefteorgsintez refinery complex in Russia’s Perm region, with an update stating that UAVs “continue the raid” and imagery references a burning primary crude distillation unit. This is at least the second major strike on the same facility in recent days and lies roughly 1,000 miles from Ukraine, underscoring sustained long-range strike capability against Russian refining.
Separately, at 07:49 UTC, Belgian sources reported that Belgium plans to buy nuclear assets (seven reactors operated by Engie’s Electrabel) to secure energy supply, effectively pausing previous nuclear phase-out plans. At 07:56 UTC, cybersecurity sources disclosed that a critical authentication bypass in cPanel (CVE-2026-41940, CVSS 9.8) has been actively exploited as a 0‑day for weeks, granting unauthenticated administrative access and potential root compromise via CRLF injection.
- Who is involved and chain of command
On the Iran front, the initiative is driven from the US executive level: Trump as US president, with operational planning under US Central Command (CENTCOM), commanded by Gen. Michael Erik Kurilla (assumed, based on typical structure, though not named in the report). The prior similar briefing on 26 February by CENTCOM’s Cooper to the president strongly suggests any new wave of strikes would again be US-led, potentially in coordination with Israel and regional partners already engaged in the anti-Iran coalition that struck Iran’s Anzali port on 18 March.
The Perm refinery strikes are an element of Ukraine’s long-range drone campaign directed by Ukraine’s military-intelligence and air force commands, targeting Russian energy and industrial assets in depth. Lukoil and Russian regional/federal authorities manage response on the Russian side.
Belgium’s nuclear move is a decision by the Belgian federal government (Prime Minister and Energy Ministry) to acquire assets from Engie/Electrabel. The cPanel vulnerability affects hosting providers, enterprises, and potentially financial institutions globally that rely on cPanel-based management of web infrastructure.
- Immediate military and security implications
New US strikes on Iran—if approved—would represent a major escalation in a crisis already involving an Iran-led blockade that is materially constraining oil flows. Strikes on infrastructure inside Iran would likely target air defenses, command-and-control, missile and drone infrastructure, ports, and possibly energy nodes, raising the risk of direct Iranian retaliation against US forces, Gulf shipping, and regional energy facilities. The prior anti-Iran coalition strike on Anzali port shows willingness to hit economic infrastructure, threatening Caspian and regional trade.
Iran has multiple retaliatory options: increased attacks on shipping in and beyond the Strait of Hormuz, expanded missile/drone strikes on Gulf and Israeli targets, cyber operations against Western energy and financial infrastructure, and leverage over proxy militias. A months-long blockade, if maintained or intensified, risks drawing in additional naval assets from NATO and Asian importers, increasing chances of miscalculation near critical chokepoints.
The renewed Ukrainian drone strikes on the Perm refinery, especially hitting a primary distillation unit, could substantially reduce that plant’s throughput if damage is significant and repairs are protracted. Repeated hits may force Russia to reconfigure fuel logistics, drawing on other refineries and potentially prioritizing military over civilian exports. It also demonstrates persistent Ukrainian ability to strike very deep into Russian territory, pressuring Russia’s air-defense coverage and forcing increased resource allocation to homeland protection.
Belgium’s nuclear nationalization reduces medium-term energy insecurity in Western Europe and may influence other EU states reconsidering nuclear phase-outs. The cPanel 0‑day under active exploitation implies ongoing mass compromises of websites and backend systems. If weaponized against financial, trading, or energy companies, it could be used for credential theft, ransomware, data manipulation, or disruptive attacks against online banking and brokerage interfaces.
- Market and economic impact
Oil: The combination of (a) a credible prospect of new US strikes on Iran’s infrastructure, (b) Iran’s own signaling that the blockade may last months, and (c) continued kinetic pressure on Russian refining capacity is strongly bullish for crude and refined products. Brent at $124 with narrative anchoring on $140 increases the probability of an overshoot driven by speculative flows and precautionary inventory building. Shipping insurance premia through Gulf and adjacent routes can be expected to rise further, with upside risk for tanker and LNG shipping equities.
Refined products and Russian exports: Damage to the Perm refinery—one of the largest in the region—could tighten regional supplies of diesel, gasoline, and petrochemical feedstocks. If accumulated Ukrainian strikes materially reduce Russian exportable product volumes, European and global refined markets may see higher crack spreads. This supports European refining equities but weighs on transport and industrials sensitive to fuel costs.
European power and gas: Belgium’s decision to retain and nationalize its nuclear reactors is structurally bearish for medium/long-term European gas demand and supportive for grid stability. While short-term price impact is limited, it underpins a narrative of greater nuclear reliance, positive for nuclear technology suppliers and utilities with nuclear-heavy fleets, and modestly negative for long-dated European gas contracts.
Cyber risk and financial markets: The cPanel CVE-2026-41940 0‑day, with weeks of active exploitation, raises the risk of latent compromises across thousands of hosted environments, including SMEs, fintechs, and potentially smaller financial institutions. Discovery of large-scale breaches or disruptive exploitation (DDoS, ransomware) could hit sentiment in hosting, cybersecurity, and some financials. It also increases operational risk for online brokerages and exchanges relying on exposed web administration layers, making further security reviews and emergency patching likely over the next 24–72 hours.
Equities and FX: Sustained high oil prices are negative for global risk assets, especially energy-importing EMs (India, Turkey, parts of ASEAN) and euro area industrials. Energy majors and defense contractors would benefit from both elevated prices and heightened geopolitical tension. Safe-haven assets (USD, CHF, gold) are likely to draw demand on any confirmation of new US–Iran strikes. European utilities with nuclear exposure may outperform on Belgium’s policy shift.
- Likely next 24–48 hour developments
• US–Iran: Expect follow-on leaks from US media on the scope and timing of proposed Iran strikes and potential dissent within the US national-security establishment. Iran and its proxies may issue further warnings; any movement of IRGC naval units or missile forces should be monitored. Markets will trade headlines closely; a confirmed strike order would likely drive another leg higher in oil and volatility in broader equities.
• Russia–Ukraine: Russian authorities will likely confirm, minimize, or obfuscate damage at the Perm refinery. Satellite/imagery will be important to assess the real impact. Additional Ukrainian long-range attacks on Russian energy infrastructure are probable as they seek to cumulatively degrade Russia’s war economy.
• Europe energy: Belgium will start technical and political talks with Engie on valuation, liability, and lifetime extension terms. Other EU states (e.g., Germany, Spain) may face renewed domestic debate on nuclear policy.
• Cyber: Hosting providers and enterprises will scramble to patch cPanel installations and investigate logs for signs of compromise. Expect advisories from national cyber agencies (CISA, ENISA, etc.). Any large financial, energy, or government victim disclosures could rapidly escalate market concern.
Overall, this confluence of potential US–Iran escalation, targeted strikes on Russian refining, and structural shifts in European energy policy significantly raises global energy and geopolitical risk, with immediate implications for oil prices, shipping, defense, utilities, and cyber-exposed sectors.
MARKET IMPACT ASSESSMENT: Iran strike planning and blockade rhetoric are supporting a sharp oil rally (Brent at $124 with talk of $140), bullish for energy and shipping, bearish for energy-importing EM FX and global equities. Repeated drone strikes on the Lukoil Perm refinery add upside risk to Russian product exports and refined margins. Belgium’s nuclear nationalization supports long-term European baseload stability, mildly bearish for EU gas demand and supportive for utilities. The cPanel 0-day raises cyber and operational risk for financials, SaaS, and hosting providers, potentially impacting sentiment in tech and fintech.
Sources
- OSINT