Daily Intelligence Brief — Wednesday, September 23, 2026
Executive Summary
Iran has moved from harassment to direct kinetic attacks on commercial shipping in the Strait of Hormuz. Missiles fired from Iranian territory around 00:03–01:03 UTC struck at least one vessel, turning the world’s most important oil chokepoint into an active missile engagement zone rather than a high‑risk corridor. With fresh explosions near Qeshm Island reported at 01:48 UTC and again later in the window, effective unescorted tanker traffic through Hormuz is now in question for at least the next 24 hours. Markets are pricing in a non‑trivial probability not just of temporary disruption but of a sustained threat corridor that will keep Brent above short‑term resistance and structurally reprice non‑Gulf supply.
Tehran’s behavior isn’t occurring in isolation. Azerbaijan and Oman have reportedly joined U.S.-driven flight restrictions around 05:28 UTC, squeezing Iranian aviation lifelines at the same time its missile batteries are targeting shipping. With U.S. envoys already in a tough UNGA backchannel demanding an end to what Washington sees as a creeping naval blockade, Tehran appears to be leveraging both airspace and maritime escalation to force concessions on sanctions and force posture. Asian oil importers, heavily exposed to Gulf flows, now quietly face sharper choices: push Washington to bargain with Tehran, accelerate diversification to North American, Brazilian, and West African barrels, or absorb a new inflation shock.
In Europe, Russia is deepening its strategy of infrastructure and urban terror as the weather cools. Overnight, at least 15 KAB glide bombs and multiple cluster‑armed rockets smashed into Izyum in Kharkiv Oblast, while a Geran‑2 drone set a Zaporizhzhia shopping center ablaze and further strikes hit Kyiv warehouses and a transport yard. President Volodymyr Zelensky warned at 23:09 UTC of an “imminent massive attack,” and Kyiv has floated a conditional deal: Ukraine halts strikes on Russian oil refineries if Russia stops attacking Ukrainian power infrastructure. Moscow hasn’t answered. If it refuses, Europe faces a winter shaped by Russia’s dual pressure on Ukrainian energy and Ukrainian attacks on Russian refining that tighten fuel and grain balances.
The Western Hemisphere is dealing with its own security experiments. In Colombia, the Autodefensas Conquistadoras de la Sierra Nevada (ACSN) have moved from rural intimidation to a de facto armed strike in Santa Marta—burning buses, coercing shutdowns, and, by some accounts, recruiting children. Bogotá has surged Kfir fighters and Arpía Black Hawk gunships over the city and the Sierra Nevada rather than launching a full urban assault, choosing a show‑of‑force posture that stabilizes optics but won’t quickly dislodge entrenched paramilitaries. In Mexico, a cartel’s use of a commercial quadcopter to drop an improvised grenade on a police checkpoint around 00:03 UTC signals that drone weaponization is no longer an occasional stunt but on track to become a standard tactic against state forces.
Beyond the crisis hotspots, the strategic map is shifting. A new pact signed between Washington, Copenhagen, and Nuuk reportedly grants the U.S. permanent control‑related rights over key facilities in Greenland, locking in a long‑term Arctic footprint. That will reshape NATO posture, alter how Arctic sea lanes are monitored, and sharpen competition over critical minerals just as climate stress and great‑power rivalry intersect at the poles. At the UN, leaders from Sierra Leone and Vietnam are tying demands for Security Council reform and sanctions rollbacks to wider grievances over climate and conflict, adding a more coordinated Global South push to rebalance the rules of the system that is now struggling to contain crises from Hormuz to Sudan.
In the next 24–48 hours, watch three thresholds: whether Iran conducts further missile launches or fire‑control lock‑ons that solidify a de facto Hormuz closure and force a visible U.S.–allied convoy regime; whether Russia executes the large, multi‑vector strike package on Ukrainian energy and urban centers that Kyiv anticipates; and whether Colombian forces cross from aerial and ground show‑of‑force in Santa Marta into high‑intensity clearing operations inside the city. Any one of these shifts would raise the probability of miscalculation, humanitarian displacement, and lasting economic damage; together, they would mark a hard turn toward a more fragmented and militarized global operating environment.
Top Developments by Theater
CENTCOM
-
Strait of Hormuz under live missile fire (00:03–01:03 UTC, 23 Sep)
Multiple reports indicate Iran fired anti‑ship missiles from its own territory at vessels transiting the Strait of Hormuz between 00:03 and 00:56 UTC, with at least one ship hit. Subsequent alerts at 00:56–01:03 UTC confirm additional launches and damage to a vessel, formally transforming Hormuz into an active engagement zone rather than a zone of threatened harassment. -
Explosions near Qeshm Island intensify transit risk (≈01:48 UTC, 23 Sep)
New explosions reported near Iran’s Qeshm Island around 01:48 UTC suggest further kinetic activity adjacent to the strait, compounding fears of more durable disruption to Gulf crude and product flows and extending the existing risk premium on oil and shipping. -
Iranian missiles hit ship in Hormuz later in window (≈05:51 UTC, 23 Sep)
By 05:51 UTC, further reporting confirmed Iranian missiles had struck a ship in the Strait of Hormuz, described as a material escalation that significantly raises the probability of broader shipping disruptions and a spike in war‑risk insurance and spot freight rates. -
Regional flight bans tighten around Iran (≈05:28 UTC filing)
Azerbaijan and Oman have reportedly cut landing permits for Iranian aircraft, aligning with U.S.-driven sanctions on Tehran’s aviation sector just as the Hormuz crisis unfolds. The moves further isolate Iran’s civil aviation and logistics options. -
Shipping and markets brace for de facto closure (next 24 hours)
Forecasts assess that Iran is likely to conduct additional missile launches or fire‑control lock‑ons against merchant shipping over the next 24 hours, sustaining an effective closure for non‑escorted traffic. U.S. and partner navies are expected to shift toward convoy‑style escorts for high‑value tankers and gas carriers. -
Humanitarian exposure in Gulf import‑dependent states (next 24 hours–7 days)
Shipping delays around Hormuz are expected to slow deliveries of food, fuel, and medical supplies to Yemen, Iraq, and smaller Gulf economies in the immediate term, with sustained disruptions over the week raising fuel and food costs in fragile import‑dependent states.
Synthesis:
Iran is deliberately weaponizing the Strait of Hormuz, moving from threat signaling to direct attacks from its own territory and accepting the escalatory risk that implies. The layered pressure—missiles in the strait, explosions near Qeshm, and tightening airspace restrictions against Iran—creates a feedback loop: Tehran has more incentive to use its maritime leverage as its aviation and financial channels are constricted, while the U.S. and allies are pushed toward an escort regime that heightens the chance of miscalculation. Energy markets are already reacting, but the more profound impact is political: Asian and European importers must now decide how far to back U.S. coercion versus pressing for a compromise that trades limited sanctions relief for de‑escalation in Hormuz.
EUCOM
-
Massive glide‑bomb and cluster attack on Izyum (overnight to 23 Sep)
Russia struck Izyum in Kharkiv Oblast with at least 15 KAB glide bombs and at least three long‑range MLRS rockets armed with cluster warheads, causing large fires and localized power outages. -
Zaporizhzhia shopping center and outskirts hit (overnight to 23 Sep)
A Russian Geran‑2 drone hit a shopping center in Zaporizhzhia, igniting a major fire, while Su‑34 aircraft dropped at least 10 KAB glide bombs on the city’s outskirts and four MLRS rockets struck surrounding areas. The attacks targeted both commercial and peri‑urban zones. -
Drone strikes damage Kyiv logistics sites (overnight to 23 Sep)
Russian drones damaged a warehouse in Kyiv’s Holosiivskyi district and triggered a fire at a transport enterprise in Solomianskyi, with explosions heard across multiple districts and nearby towns. -
Zelensky warns of “massive attack” (23:09 UTC, 22 Sep)
At 23:09 UTC, President Zelensky publicly warned that Ukrainian intelligence expects Russia to launch a “massive attack” on Ukraine, suggesting preparations for a strike package beyond the current tempo, aimed at power grids, cities, and possibly export infrastructure. -
Ukraine retakes Kolodyazi after intense battle (recent days)
Ukrainian forces recaptured the small village of Kolodyazi in Donetsk Oblast after an 18‑day battle on the Lyman axis, pointing to intense attritional fighting and strain on Russian units defending that sector. -
Kyiv offers conditional energy–refinery restraint deal (reported ~02:11 UTC, 23 Sep)
Ukraine has proposed to Russia that Moscow stop attacking Ukrainian power infrastructure in exchange for Kyiv halting drone strikes on Russian oil refineries, with the U.S. expected to pass the offer to Moscow. Forecasts judge a public acceptance in the next 24 hours as unlikely. -
Forthcoming large‑scale Russian strike packages (7–30 day horizon)
Projections indicate a high probability that Russia will within seven days launch a large, multi‑vector strike targeting Ukrainian power infrastructure and urban centers, and over 30 days expand to systematic attacks on industrial and health systems, deepening a winter humanitarian crisis.
Synthesis:
Russia’s overnight attacks on Izyum, Zaporizhzhia, and Kyiv form part of a steady climb toward a more expansive infrastructure war as the cold season approaches. The choice of weapons—KAB glide bombs, cluster munitions, and Geran‑2 drones—shows Moscow leaning into stand‑off, area‑effect tools to grind urban resilience and civilian morale while conserving high‑end precision munitions. Ukraine’s recapture of Kolodyazi reveals that despite Russian firepower, its ground forces are under pressure in the Donbas, which may further motivate the Kremlin to offset battlefield attrition with rear‑area strikes. Kyiv’s offer to trade refinery strikes for a halt to power‑grid attacks acknowledges both Ukraine’s leverage over Russian fuel output and its vulnerability to winter blackouts; Moscow’s likely non‑response will keep Europe exposed to rolling shocks in both energy and grain flows.
INDOPACOM
- Asian oil importers weigh response to Hormuz crisis (7‑day horizon)
As Hormuz becomes a live missile corridor, major Asian importers—China, India, Japan, South Korea—are expected to intensify quiet diplomacy with both Washington and Tehran over the next week, seeking off‑ramps that reduce shipping risk without forcing them into public alignment with either side’s maximalist demands.
Synthesis:
While no direct military activity is reported inside INDOPACOM today, the command’s area of responsibility is economically on the front line of the Hormuz shock. Asian capitals now face a triage problem: shore up short‑term supply through diversification and stock draws, press both the U.S. and Iran for a limited bargain that reduces missile threats, and avoid openly choosing sides in a confrontation that could harden into a long‑term re‑routing of trade and investment toward non‑Gulf supply. How Beijing and New Delhi in particular manage this will shape both the price dynamics of the crisis and Washington’s leverage.
AFRICOM
-
African demands for UN reform and justice (UNGA speeches)
Sierra Leone’s President Julius Maada Bio publicly called for Africa’s inclusion in the UN’s top decision‑making structures, reparative justice, an end to armed conflicts, and urgent climate action, sharpening African critiques of global power distribution. -
Humanitarian exposure to Hormuz disruption (7‑day horizon)
If Hormuz risk persists, fragile import‑dependent states in Africa—especially parts of the Horn and countries reliant on Gulf transshipment—face rising fuel and food costs over the next week, stretching humanitarian and fiscal capacity.
Synthesis:
African leaders are explicitly linking governance grievances at the UN to on‑the‑ground vulnerability to conflicts they don’t control, from Hormuz to Sudan. As fuel and food prices respond to Gulf disruptions, governments with limited buffers will lean harder on multilateral systems they already see as unrepresentative. That tension complicates Western efforts to mobilize African support in broader contests with Russia and China and creates space for alternative security and economic partnerships.
SOUTHCOM
-
ACSN paramilitaries impose de facto siege on Santa Marta (by 00:52 UTC, 23 Sep)
Armed men from the Autodefensas Conquistadoras de la Sierra Nevada have asserted effective control over parts of Santa Marta, burning buses, firing on businesses, coercing closures, and reportedly recruiting children. The city is described as under a de facto siege following the killing of at least seven ACSN members including a key commander. -
Colombia deploys jets and Arpía gunships (03:30–04:00 UTC, 23 Sep)
In response, Colombian forces surged at least five Kfir fighter jets and eight Arpía‑configured Black Hawk helicopters over Santa Marta and the Sierra Nevada, focusing on aerial presence and deterrence rather than immediate urban clearing. -
Forecast: visible troop presence, no full urban assault (next 24 hours)
Over the coming day, Colombian security forces are expected to maintain heavy deployments, checkpoints, and overflights in Santa Marta while avoiding a large‑scale urban assault on ACSN positions, prioritizing reassertion of state presence and protection of ports and tourist districts. -
Short‑term economic disruption in Santa Marta (next 24 hours–7 days)
Violence and militarization are likely to cause temporary port and tourism disruptions across the next 24 hours, with cruise operators and exporters delaying or rerouting plans. If unrest persists, regional tourism bookings along Colombia’s Caribbean coast will decline and local business security costs will rise. -
Risk of broader Caribbean paramilitary fragmentation (30‑day horizon)
Within 30 days, sustained pressure on ACSN may fragment paramilitary and criminal structures along the Caribbean coast, prompting turf wars involving rival groups and FARC dissidents and raising sovereign risk perceptions. -
Mexico: cartel drone grenade attack on police checkpoint (~00:03 UTC, 23 Sep)
A Mexican cartel allegedly used a commercial quadcopter to drop an improvised grenade on a law‑enforcement checkpoint, marking a tactical escalation in cartel firepower and the weaponization of off‑the‑shelf drones in internal conflict. -
Mexico: arrest of ‘Don Flaco’ in Mexico City (recent days)
Authorities detained José Ángel “N,” alias “El Don Flaco,” in Mexico City on a U.S. provisional arrest warrant, in a case focused on his alleged role brokering between Chinese chemical suppliers and Mexican criminal organizations, central to synthetic drug production chains. -
Forecast: drone tactics routinize in cartel conflict (7–30 day horizon)
Mexican cartels are likely over the next week to month to repeat small‑scale drone IED attacks on security forces or rivals, institutionalizing drone warfare as a standard tool. Civilians near checkpoints and highways will face increased incidental risk.
Synthesis:
South America and Mexico are both testing the limits of state control in the face of agile, networked armed groups. In Santa Marta, ACSN’s ability to paralyze a major Caribbean city after leadership losses shows how thin Colombian sovereignty can be in contested coastal corridors and how cautious Bogotá is about urban combat that could undermine tourism and invite international scrutiny. In Mexico, the integration of drones into cartel tactics and the arrest of a key broker between Chinese precursors and Mexican labs sit on opposite sides of the same problem: criminal organizations are innovating tactically at the same time that supply‑chain pressure on synthetic drugs tightens. Both theaters point toward more complex, semi‑conventional internal conflicts that will demand air defense, intelligence, and economic tools once reserved for interstate war.
NORTHCOM
-
U.S.–Denmark–Greenland pact grants Washington permanent Arctic control footprint (~03:55 UTC report, 23 Sep)
Washington, Copenhagen, and Nuuk have reportedly signed an agreement granting the U.S. permanent control‑related rights over key facilities in Greenland, giving the U.S. a lasting operational and strategic foothold on the world’s largest island. -
Implications for NATO posture and resource access (near to long term)
The pact reorders Arctic power dynamics: it strengthens NATO’s northern arc, enhances U.S. monitoring and potential control of emerging Arctic sea lanes, and positions Washington closer to Greenland’s critical mineral deposits as ice retreat accelerates.
Synthesis:
The Greenland pact quietly cements the Arctic as a core theater for U.S. long‑term competition with Russia and China. A permanent U.S. footprint in Greenland, coupled with expanded control‑related rights, will reshape how air and maritime activity across the North Atlantic and Arctic is surveilled and contested, and how future shipping and resource projects are licensed and secured. For Moscow and Beijing, it narrows maneuvering room in an area both view as key to circumventing traditional naval chokepoints; for European allies, it binds their northern strategies even more tightly to U.S. priorities.
Analytical Takeaways
-
Hormuz has shifted from risk corridor to contested battlespace, forcing a structural rethink of energy security.
By firing missiles from its own territory and striking at least one ship, Iran has accepted attribution and escalation risk in return for leverage over sanctions and regional negotiations. With forecasts pointing to at least a week of intermittent missile threats and a high likelihood of U.S.–allied convoy operations, shipowners and governments will treat Hormuz less like a transit corridor and more like a combat zone. The immediate outcome is higher oil prices and war‑risk premia; the deeper consequence is accelerated investment into non‑Gulf supply—North American shale, Brazilian offshore, West African crude—and alternatives, which over time erodes Iran’s and the Gulf monarchies’ centrality to global energy markets. -
Russia is weaponizing winter while Ukraine tries to carve out a narrow restraint regime.
The combination of glide‑bomb strikes on Izyum, attacks on Zaporizhzhia and Kyiv, and forecasts of broader assaults on power, industrial, and health infrastructure show Moscow preparing a winter campaign aimed at grinding down Ukrainian resilience and negotiating leverage. Ukraine’s proposal to halt refinery attacks in exchange for a stop to power‑grid strikes doesn’t signal softness; it acknowledges that Kyiv has acquired meaningful capacity to disrupt Russian fuel output but remains highly vulnerable to blackouts. If Moscow refuses, European states will face compounded energy and humanitarian demands—supporting Ukraine’s defenses, accommodating new displacement, and managing tighter fuel and grain balances—while some Western capitals quietly explore how to use sanctions and air‑defense support tempo as levers in settlement talks. -
Sub‑state armed actors are upgrading to semi‑conventional tactics faster than states are adapting.
ACSN’s armed strike in Santa Marta—using roadblocks, vehicle arson, and urban coercion to seize de facto control of a major city—and Mexican cartels’ adoption of drone‑delivered grenades both show non‑state groups moving past classic guerrilla or criminal violence. They’re integrating air assets, psychological ops, and territorial control strategies that look more like low‑end conventional warfare. States, in turn, are defaulting to airpower (Colombia’s Kfirs and Arpías) and reactive hardening (Mexico’s expected checkpoint fortifications), but without the legal frameworks, doctrine, or political will to treat these as insurgencies. Investors and insurers will price these gaps into tourism, ports, and logistics across affected regions. -
The U.S. is entrenching strategic depth at the poles while struggling with narrative control at home.
The Greenland pact demonstrates Washington’s ability to lock in hard‑power advantages in contested regions—securing control‑related rights that will matter for air defense, undersea surveillance, and critical minerals. At the same time, forecasts warn that confrontations between the Trump administration and critical media will degrade crisis signaling across multiple theaters. Adversaries will exploit narrative confusion to test red lines, while allies grow more cautious about relying on public U.S. statements as clear guides to policy, increasing the importance of backchannel and military‑to‑military communication. -
Global South states are pairing demands for institutional reform with tactical neutrality in great‑power crises.
Speeches by leaders from Sierra Leone and Vietnam, calling for Security Council reform and an end to the U.S. embargo on Cuba, align with a broader pattern: many Global South governments are unwilling to line up behind Western positions on Ukraine or Hormuz while they remain marginalized in decision‑making structures. Instead, they seek issue‑specific deals—on climate finance, debt, or sanctions relief—while pressing for structural change. This stance will complicate coalition‑building for Western initiatives and give Russia, China, and Iran opportunities to portray themselves as champions of a more “equitable” order, even as their own actions in places like Ukraine and Hormuz drive instability.
Watchlist (Next 24–48 Hours)
-
If Iran conducts another clearly attributed missile strike or fire‑control lock‑on from its territory against a commercial vessel inside or near the Strait of Hormuz in the next 24 hours, it signals Tehran is prepared to normalize an active-fire regime in the strait rather than use isolated attacks as bargaining chips—raising the chance of a limited U.S.–Iran naval clash within the 30‑day window.
-
If U.S. and allied navies visibly transition to organized convoy or close‑escort formations for loaded crude and LNG tankers approaching Hormuz within 24 hours, it will confirm that insurers and major shipowners have priced unescorted transits as unacceptable, locking in higher war‑risk premia and potentially diverting marginal barrels toward non‑Gulf sources.
-
If Russia launches a large, multi‑axis salvo against Ukrainian power infrastructure and major cities (Kyiv, Kharkiv, Odesa, Dnipro, western hubs) in the next 7 days—especially using simultaneous missile and drone waves—it will validate Zelensky’s warning of an imminent massive attack and mark the formal start of Moscow’s winter infrastructure campaign, accelerating internal displacement and forcing Europe into emergency planning for blackouts and refugee support.
-
If Moscow publicly rejects or pointedly ignores Ukraine’s offer to halt refinery strikes in exchange for an end to power‑grid attacks within 48 hours, expect Kyiv to resume or escalate long‑range drone operations against Russian refining clusters, increasing volatility in Russian domestic fuel markets and tightening European diesel and gasoline balances.
-
If Colombian security forces shift from aerial presence and checkpoints to announced or observed block‑by‑block clearing operations in Santa Marta’s urban neighborhoods within the next 48 hours, it will signal Bogotá’s choice to accept higher short‑term civilian and reputational risk in order to break ACSN’s urban grip—raising the likelihood of collateral damage, temporary port disruption, and further displacement.
-
If Mexican authorities issue new national‑level guidance or emergency directives on protecting police and military installations from drone attacks within 24–48 hours—such as rapid deployment of netting, electronic warfare kits, or relocation of checkpoints—it will indicate that the government now treats cartel drone warfare as a systemic threat rather than an isolated incident, with implications for civil liberties, budget allocations, and U.S.–Mexico security cooperation.