Published: Wed, 05 Aug 2026 13:23:59 GMT · Category: Daily Brief

Daily Intelligence Brief — Monday, July 13, 2026

Executive Summary

The U.S.–Iran confrontation moved from brinkmanship to a shooting war centered on the Strait of Hormuz. By mid‑afternoon UTC, Washington had publicly reinstated a naval blockade on Iran and declared a 20% toll on all cargo transiting Hormuz under U.S. “protection,” while unleashing sea drones and airstrikes against Iranian naval and oil infrastructure at Bandar Abbas and Kharg Island. Iran answered with ballistic and cruise missile salvos against U.S. bases in Jordan, Kuwait, Qatar and at sea, and by firing anti‑ship missiles at commercial traffic in Hormuz. By evening, multiple vessels were burning, the IRGC was openly warning ships to stay away from the strait, and CENTCOM had begun a third consecutive night of strikes inside Iran, including fresh hits on Konarak, Chabahar and other Gulf‑adjacent sites. One fifth of seaborne oil and a major share of Gulf LNG are now moving through an active combat zone under contested “toll” authority.

The regional battlespace broadened rapidly. Saudi warplanes bombed Sana’a International Airport to block the landing of an Iranian Mahan Air flight carrying Houthi leaders, prompting the aircraft’s diversion to Hodeidah and giving the Houthis a pretext to declare the Yemen truce over. Within hours, Houthi forces launched ballistic missiles and drones at Abha International Airport and King Khalid Airbase, then claimed follow‑on attacks against airports in Riyadh, Jeddah and Dammam and ports including Jizan, Ras Tanura and King Abdullah Port. Saudi Arabia closed its airspace. Meanwhile, Somali pirates reportedly maneuvered on an oil tanker near Bab al‑Mandab and Yemen‑related strikes triggered explicit closure threats at that chokepoint. Taken together, Hormuz and Bab al‑Mandab—the two gateways to the Red Sea and Suez—are now under simultaneous kinetic, terrorist, and piracy pressure.

In parallel, Russia and Ukraine intensified their duel over energy and grain infrastructure from the Black Sea to deep inside Russia. Moscow hit Ukraine’s Odesa‑region ports for a third straight day, including AI‑enabled Geran‑4 drone strikes on Chornomorsk oil and grain terminals and multiple commercial vessels. Kyiv, for its part, confirmed crippling damage to Russia’s Syzran refinery, expanded attacks on “shadow fleet” tankers and Port Kavkaz in the Sea of Azov, and, by late in the window, struck two major Russian oil facilities—including a petrochemical plant roughly 1,500 km from the front. Putin openly acknowledged “problems with petroleum products” and ordered an emergency hardening of fuel logistics to Crimea, even as Ukraine and nine European states moved ahead with an “Anti‑Ballistic Coalition” and deeper long‑range strike cooperation.

Energy geopolitics tightened further on the diplomatic front. President Trump formally backed a bipartisan bill to impose steep tariffs on countries that continue buying Russian oil, gas and uranium, introducing a quasi‑secondary‑sanctions tool that targets third‑country demand rather than supply. At the same time, European LNG buyers quietly pushed Yamal LNG imports to record levels ahead of a 2027 ban on new long‑term contracts, revealing the depth of Europe’s residual dependence on Russian gas. Dubai’s plan for a new Fujairah‑linked port to bypass Hormuz, and Saudi‑Egyptian‑Turkish maneuvering in the Red Sea and Eastern Mediterranean, point to a longer‑term redirection of trade flows even as today’s decisions are made under acute coercive pressure.

In the next 24–48 hours, watch four concrete thresholds: whether commercial shipping through Hormuz falls below minimal safety levels; whether Houthis move from threatening to demonstrably hitting Saudi energy export terminals; whether Russia escalates strikes on Ukraine’s grid and ports into a sustained winter‑style campaign while retaliating more heavily against Ukrainian and “shadow fleet” operations; and whether the U.S. Congress and key energy importers signal acceptance, contestation, or circumvention of Trump’s Hormuz toll and Russia‑tariff strategy. Each will shape not only immediate risk premia in oil, gas, and grain, but also the legal and military architecture of global sea‑lane control.

Top Developments by Theater

CENTCOM

• U.S. reimposes Hormuz blockade, unveils 20% toll (from ~14:20 UTC).
  Between 14:20–16:15 UTC, President Trump announced an immediate naval blockade targeting Iranian shipping and customers in the Strait of Hormuz and declared a 20% fee on all other cargo transiting the chokepoint under U.S. protection. A 24‑hour notice requirement to shippers delays full legal activation, but CENTCOM confirmed warships are preparing enforcement.

• First U.S. combat use of unmanned sea drones against Iran (14:55–18:00 UTC).
  CENTCOM reported using one‑way attack maritime drones (Corsair USVs) against a submarine and ship‑maintenance facility at Iran’s Bandar Abbas naval base, followed by broader U.S. strikes on coastal sites including Abadan, Konarak, Chabahar and an unspecified coastal maintenance facility.

• Strikes on Iranian oil export infrastructure including Kharg Island (from ~15:05 UTC).
  U.S. attacks reportedly hit pumping and pipeline assets at Kharg Island—Iran’s primary crude export terminal—with satellite fire detections suggesting significant damage. Additional strikes were reported on Iranian oil facilities and military targets in Abadan and Khuzestan.

• Iran retaliates with missile salvos on U.S. bases and vessels (from ~13:15 UTC onward).
  Iran’s IRGC launched multiple waves of ballistic and cruise missiles (Emad, Ghadr, Zolfaghar, Ghadir) at U.S. bases in Jordan, Kuwait, Qatar and vessels in Hormuz. King Faisal Air Base in Jordan and Ali Al Salem Airbase in Kuwait both show damage, including to a MQ‑9 Reaper C2 center; U.S. officials deny casualties but acknowledge engagements.

• Hormuz becomes an active combat zone; U.S. intercepts, Iran hits ships (09:07–20:45 UTC).
  U.S. forces reported downing Iranian aerial threats targeting commercial shipping in Hormuz early in the window. By late afternoon, Iran struck at least one ship and fired likely anti‑ship missiles at U.S. warships (explosions heard around 18:45 UTC), then moved to attack multiple commercial vessels and broadcast VHF threats that any ship approaching the strait “will be fired upon.”

• Saudi–Houthi escalation brackets Bab al‑Mandab (10:00–19:55 UTC).
  Saudi airstrikes hit Sana’a International Airport to block an incoming Iranian Mahan Air flight, forcing diversion to Hodeidah and triggering Houthi declarations that the truce is over. Houthis then launched ballistic missiles and drones at Abha Airport and King Khalid Airbase, later claiming attacks on airports in Riyadh, Jeddah, Dammam and ports including Jizan, Jeddah, King Abdullah Port and Ras Tanura. Saudi Arabia closed its airspace.

• Somali piracy threat resurges near Bab al‑Mandab (reported 12:09 UTC).
  Six small boats carrying suspected Somali pirates from Puntland reportedly maneuvered to hijack an oil tanker near the Bab al‑Mandab, with separate alerts about a Yemen‑related strike prompting explicit chokepoint closure threats.

Together, these events mark a decisive shift from coercive signaling to open warfare over control of Hormuz and, increasingly, Bab al‑Mandab. Washington is attempting to convert military dominance into quasi‑commercial authority through a 20% toll; Tehran is contesting that by making the strait unsafe for all traffic, not just U.S.-escorted ships. The spillover into Saudi–Houthi warfare and piracy in the Red Sea corridor multiplies the number of actors capable of disrupting flows. CENTCOM now faces simultaneous tasks: suppress Iranian maritime strike capacity, shield exposed Gulf bases, and manage the legal and diplomatic blowback of declaring a blockade and de facto tax on global trade.

EUCOM

• Ukraine cripples Russia’s Syzran refinery; Putin admits fuel strain (from ~13:55 UTC).
  Satellite imagery confirms Ukraine’s earlier strike destroyed 100% of primary processing units at the Syzran refinery. Putin publicly conceded “problems with petroleum products” and announced plans for a hardened fuel supply system for Crimea, framed by threats of retaliation “several times more powerful.”

• Ukraine expands deep‑strike campaign on Russian oil and logistics (13:03–23:39 UTC).
  Ukrainian drones hit the Rosneft oil depot in Vyazniki (9 July) and a nearby Lukoil depot (13 July) in Stavropol Krai. By late in the window, Ukraine struck two additional major oil facilities, including a petrochemical plant roughly 1,500 km from the front. Kyiv also claims unmanned attacks on 105 Russian ‘shadow fleet’ vessels—including at least seven tankers—over eight days, plus fires at Port Kavkaz.

• Moscow intensifies attacks on Odesa ports and Black Sea shipping (06:20–20:35 UTC).
  Russia conducted its third consecutive day of heavy strikes on Odesa‑region ports, including AI‑enabled Geran‑4 Seeker drone attacks on Chornomorsk’s oil and grain terminals and multiple vessels. A Togo‑flagged cargo ship in port and a commercial vessel in the western Black Sea were hit, sparking fires and raising insurance risk on Ukraine’s remaining maritime corridor.

• Russia militarizes Zaporizhzhia Nuclear Power Plant (12:43 UTC).
  Ukrainian intelligence reports Russian forces have parked vehicles in turbine halls, stored ammunition under walkways, and emplaced missile systems on or around reactor roofs at the occupied Zaporizhzhia NPP, effectively converting Europe’s largest nuclear plant into a fortified base.

• Europe formalizes an ‘Anti‑Ballistic Coalition’ with Ukraine (16:06–17:05 UTC).
  Ukraine and nine European states launched an Anti‑Ballistic Coalition anchored by the FREYJA interceptor project, moving from concept to industrial phase. France separately confirmed a package including 16 Rafale fighter jets for Ukraine from 2028–29 and licenses for co‑production of key French missiles.

• EU energy and sanctions contradictions deepen (16:15–18:06 UTC).
  EU states imported a record 9.89 Mt of Yamal LNG in H1 2026, effectively buying all output ahead of a 2027 ban on new long‑term Russian LNG contracts, while a 21st Russia sanctions package stalled over internal divisions. In parallel, the EU and UK rolled out new sanctions on Russian FSB/GRU cyber figures and pro‑war media.

Europe’s eastern and southern flanks are converging around the same pressure points: long‑range strikes on energy infrastructure, contested sea lanes, and missile defense. Ukraine’s drone and sea‑drone campaign pushes Russia’s war economy and shadow fleet into the front line of the conflict, while Russia answers by targeting Ukraine’s ports, power nodes, and ships. Europe, attempting to harden itself through missile defense coalitions and legal action on cyber, is simultaneously deepening short‑term dependence on Russian LNG and facing a U.S. administration poised to tax Russian energy buyers. The Zaporizhzhia militarization adds a nuclear‑risk overlay that constrains military options and crisis response.

INDOPACOM

(No material events in the source window directly tied to INDOPACOM’s area of responsibility.)

AFRICOM

• Suspected ADF massacres in eastern DR Congo (12–15 July period).
  Between 12 and 15 July, suspected Allied Democratic Forces fighters carried out three attacks in Beni Territory, North Kivu, killing at least 20 people, including seven civilians and ambush victims.

• Amazon’s satellite internet push into Nigeria (10:06 UTC).
  Amazon secured a seven‑year license to operate a constellation of more than 3,000 low‑Earth‑orbit satellites over Nigeria, directly competing with Starlink and placing Nigeria at the center of a space‑enabled connectivity race.

The violence in eastern Congo remains localized but persistent, reinforcing the ADF’s role as a spoiler at the intersection of local grievances and transnational militancy. Meanwhile, tech competition in African skies is intensifying, with U.S.-linked platforms gaining deeper regulatory footholds. That combination—weak terrestrial security and rapidly expanding digital infrastructure—creates a mixed risk: enhanced surveillance and connectivity for governments and businesses, but also a broader attack surface for cyber and information operations across the continent.

SOUTHCOM

• Wave of killings in Esmeraldas, Ecuador (18:00 UTC).
  A surge of violence in Esmeraldas left at least five dead and three wounded within 24 hours.

• Mass‑casualty crash in western Mexico (15:01 UTC).
  At least 16 people were killed on the Guadalajara–Tepic highway near the Plan de Barrancas toll station in Jalisco; two National Guard officers were seriously injured.

These events fit an ongoing pattern of criminal and systemic instability in parts of Latin America. While not strategic in isolation, repeated mass‑casualty incidents in transport hubs and border‑adjacent provinces complicate U.S. and regional efforts to stabilize migration routes, secure supply chains, and maintain public trust in state capacity.

NORTHCOM

• U.S. political and legal escalation on Russia and Iran (20:55 & 22:03 UTC).
  President Trump publicly backed a bipartisan bill enabling steep tariffs on buyers of Russian oil, gas and uranium, effectively threatening major importers with punitive duties. In parallel, he formally notified Congress of renewed strikes inside Iran and the reimposition of the Hormuz blockade and toll.

• Cyber threats to corporate and Apple ecosystems (08:06 & 18:06 UTC).
  Security investigations exposed three Microsoft 365 phishing operations from a single misconfigured server, one compromising 218 accounts across 12 countries via session‑theft and device code attacks. Separately, macOS malware “CrashStealer” was detailed using a notarized installer to bypass Gatekeeper and raid keychains, browsers, wallets and password managers.

U.S. policy is moving toward a more overtly transactional and extraterritorial approach: taxing trade with sanctioned producers and monetizing control of global chokepoints. That will strain alliances with Europe and major Asian importers and amplify legal uncertainty for corporates with exposure to Russian and Iranian flows. At the same time, persistent cyber campaigns against ubiquitous platforms such as Microsoft 365 and macOS erode the reliability of corporate communications and financial operations, just as geopolitical risk pushes more sensitive decision‑making into digital channels.

Analytical Takeaways

• The era of “free” global sea‑lane security is breaking down.
  By pairing a declared naval blockade with a 20% toll on Hormuz transit, the U.S. is testing a model in which military control is explicitly monetized. Iran’s response—making the chokepoint unsafe for all traffic—turns that into a high‑stakes contest over whether any single state can convert dominance into a revenue stream without triggering systemic disruption. If accepted or partially enforced, this precedent will embolden other coastal powers to seek rent on key straits; if resisted, it risks escalation that materially constrains global oil and LNG supply.

• Energy infrastructure is now a primary, not collateral, target set.
  U.S. strikes on Kharg Island and Iranian coastal facilities, Ukrainian attacks on Syzran, Port Kavkaz and distant Russian petrochemical plants, and Russian drone strikes on Odesa/Chornomorsk terminals all focus directly on the plumbing of oil, gas and grain markets. The effect is to compress spare capacity, stress logistics, and increase the fragility of price formation. Even where net export volumes remain high (e.g., OPEC’s June output rebound), the distribution risk and insurance premiums are rising in ways that will favor producers with diversified routes and hurt import‑dependent developing states.

• Gulf security has splintered into overlapping, semi‑autonomous fronts.
  Hormuz, Bab al‑Mandab, Yemen, Saudi airports and ports, Kuwaiti offshore platforms, and Jordanian airspace are all engaged simultaneously—but under different mixes of state, proxy and criminal actors. U.S.‑Iran exchanges drive the strategic tempo, while Houthis, Iran‑aligned militias in Iraq, and Somali pirates shape tactical disruption. Gulf monarchies are exposed to attacks they cannot fully control or credibly deter, yet they are also being pressured by Washington’s enforcement demands and by Tehran’s signaling to their domestic audiences.

• Europe’s Russia policy is crossing wires between security and energy.
  On one track, EU and UK sanctions on Russian cyber units, support for Ukraine’s Anti‑Ballistic Coalition, and deepening arms industrial ties (e.g., Rafale, missile co‑production) show a clear intent to contain Moscow militarily and technologically. On another, record Yamal LNG imports and a stalled 21st sanctions package reveal fiscal and political reluctance to cut remaining energy ties, especially before 2027. Trump’s proposed tariffs on Russian energy buyers will force European capitals either to align with U.S. pressure or absorb costs for maintaining purchases.

• Unmanned systems and AI are re‑shaping escalation ladders.
  First‑use of U.S. Corsair sea drones at Bandar Abbas, Ukraine’s sea‑drone and FPV campaigns against Russian shipping and shadow fleet tankers, and Russia’s AI‑enabled Geran‑4 “Seeker” drones attacking ports and ships show all major combatants are willing to use unmanned platforms for high‑value, high‑risk targets. This lowers the political cost of cross‑border strikes while raising the probability of miscalculation around civilian shipping and ports. It also complicates attribution and proportionality norms, as the line between military and commercial platforms blurs.

Watchlist (Next 24–48 Hours)

• Hormuz transit volumes and insurer behavior.
  If AIS and port agent data indicate that daily tanker and LNG transits through the Strait of Hormuz drop sharply below recent five‑week lows within the next 24 hours—especially for non‑U.S.-escorted or Chinese‑flagged vessels—it will signal that shipowners and insurers are treating Hormuz as effectively closed, foreshadowing a sustained spike in crude benchmarks and forced drawdowns of onshore stocks in Asia and Europe.

• Operationalization of the U.S. 20% toll and allied responses.
  If, after the 24‑hour notice window expires (around 20:00 UTC on 14 July), U.S. naval units begin physically escorting, diverting, or detaining non‑Iranian commercial vessels that refuse to pay the 20% fee, and no immediate pushback is lodged by key importers (EU, India, Japan, South Korea, China), it will mark de facto acceptance of a new U.S. prerogative over a global commons. Conversely, public refusals or alternative escort offers (e.g., Chinese or joint Gulf convoys) would signal a fracture in maritime order.

• Houthi targeting shift from airports to oil export terminals.
  If verified strikes hit key Saudi oil infrastructure—such as Ras Tanura, Jeddah Islamic Port fuel facilities, or East‑West pipeline terminals—within the next 48 hours, after today’s claimed but unconfirmed attacks, it will indicate that the Houthis are willing and able to move from symbolic aviation targets to global energy assets. That would raise the probability of direct Saudi or U.S. operations against Houthi missile and UAV infrastructure and push Bab al‑Mandab risk toward a full or partial closure scenario.

• Russian retaliation pattern against Ukraine’s deep strikes and shadow fleet.
  If Russia responds to Ukraine’s hits on Syzran, Port Kavkaz, and distant petrochemical plants with a marked escalation in strikes on Ukraine’s power grid and Black Sea ports—beyond already elevated levels—or with visible naval escorts and hardening of shadow fleet routes in the Sea of Azov and Black Sea, expect higher Black Sea insurance premia and possible NATO‑adjacent incidents involving near‑misses or debris in alliance waters.

• Congressional trajectory of the Russia energy tariff bill.
  If the bipartisan bill enabling steep tariffs on buyers of Russian energy clears a key congressional hurdle (committee approval or floor vote) within the next 48 hours, major importers in Europe and Asia will have to model exposure to U.S. tariff risk on their Russian barrels and uranium. Early public positioning by Germany, India or Turkey will be a leading indicator of whether Washington can leverage the bill into de facto secondary sanctions.

• Stability of U.S. Gulf bases after Iranian missile salvos.
  If follow‑on Iranian missile or UAV attacks cause additional confirmed damage or casualties at U.S.-linked facilities in Jordan, Kuwait, Qatar or Bahrain—beyond today’s hits on Ali Al Salem’s MQ‑9 C2 center and King Faisal Air Base—base‑host governments will have to reassess their posture. Requests to limit U.S. offensive operations from their soil, or conversely, visible reinforcement and missile‑defense deployments, will reveal how much political risk those governments are prepared to absorb in a protracted U.S.–Iran clash.