Daily BriefingGEOPOLITICSUS Strikes Iran's Qeshm Island on the Eve of the MidtermsWhat happened: US officials describe "limited and defensive" strikes on Qeshm Island in the Strait of Hormuz. They say the strikes responded to the IRGC firing on a US aircraft. The Pentagon has not formally commented.Iranian state media reported explosions on the island. The IRGC claims it downed two MQM-170 target drones and one MQ-9 Reaper. Neither side's account has been independently verified.Background: The war began with the US-Israeli attack on Iran in February. A June deal to reopen the Strait collapsed within weeks. Hormuz remains effectively closed because of Iranian attacks on shipping and a US naval blockade, and US forces are escorting Gulf tankers. The mixed signals: Trump says he is in "no rush" to escalate, calls Iran "crippled financially," and denies plans for major post-midterm strikes.In the same breath, he says the US "might need to go after" Pickaxe Mountain, Iran's deep underground nuclear-linked site.Regional officials say Netanyahu is pressing for a new strike wave once the midterms are over.Talks are live: Qatari and Pakistani mediators describe "very intensive" indirect negotiations.Iran offers to reopen the Strait within two days if the US meets seven conditions. These reportedly include lifting the blockade and unfreezing assets.Chief negotiator Ghalibaf says "the ball is in America's court."Why it matters: Washington is fighting and negotiating at once. "Limited and defensive" framing lets it answer the IRGC without derailing talks or handing voters an escalation on election eve.Trump faces falling polls and Republican pressure to end the war. That pulls against Netanyahu's push for more strikes.Iran's seven conditions amount to a demand that the US abandon the blockade, its main leverage. They are unlikely to be accepted as written.Watch: Whether Pickaxe Mountain talk becomes a target list after Tuesday.Whether the mediators produce a phased deal: partial reopening in exchange for blockade easing.--- Russia–Ukraine: Aid-Point Massacre, Truce Over, Talks Back OnZaporizhia strike: Ukrainian officials say at least 31 people were killed when Russian 3,000kg glide bombs hit a humanitarian aid distribution point in a school in Komyshuvakha.Two rescuers and four police officers are among the dead. Zelensky says a second strike hit people sheltering after the first, a "double-tap" pattern.Moscow has not commented. All casualty figures come from Ukrainian authorities.Kherson truce ends: The six-day local ceasefire around Oleshky, the longest of the full-scale war, has expired. Fighting resumed immediately, and Ukraine reports strikes on a Kherson medical facility.The truce did deliver results. Hundreds of civilians were evacuated, monthly aid is promised to those who stayed, and both countries' human rights ombudsmen jointly reported no violations.Both sides used the pause to regroup. Kyiv accuses Moscow of rotating and resupplying units. The Kremlin calls that "standard practice" and suggests Ukraine did the same, which is probably true of both.The Kremlin calls Oleshky "an isolated case" and has no plans for repeats. The mediation was credited to Melania Trump, with no details given.Commentators on both sides read the truce as partly a pre-midterm "success story" for Trump. That reading fits its timing and the fact that it ended without any follow-on.Talks: US envoy Witkoff says US, Ukrainian and Russian teams will resume talks in Abu Dhabi next week. The talks have been suspended since February.The agenda covers post-war security, de-escalation and humanitarian issues. No breakthrough is expected.The backdrop: Since the talks broke down, Russian strikes have intensified while Ukraine has nearly run out of Western interceptors. The recently approved Patriot sale won't fix that for years.Ukraine keeps hitting back at Russian energy infrastructure. Drones struck sites in four Russian regions, including a Samara refinery hit for the fifth time in a month.Air-alert app hacks, follow-up: Nothing new since yesterday. No one has claimed responsibility, and experts still point to loosely aligned hacktivists rather than state units. Neither incident caused widespread panic. Why it matters: Moscow treats truces as one-off political gestures, not a template. Glide-bomb attacks on civilian aid points show that the battlefield, not Abu Dhabi, is where Russia is applying pressure. --- Europe Rehearses a Post-Ceasefire Force Without the USThe exercise: The UK and France lead Exercise Koalicja in Poland, 9–22 November, with about 2,800 personnel from 12 nations.The UK contributes 300 troops and two Typhoons.Turkey leads the maritime component, focused on Black Sea mine-clearing.What the force would be: Not offensive, not peacekeeping and not ceasefire monitoring.Not under NATO command and not on the front line.Its role would be reassurance and rebuilding Ukraine's forces, while able to defend itself.The gaps: There is no US contribution and no US backstop.Rules of engagement are undisclosed, and the final size is unknown.Moscow calls any such troops "legitimate targets."Experts question what a European force can teach battle-hardened Ukrainians.Why it matters: This is Europe preparing to carry security guarantees itself while Washington handles Moscow as a negotiating partner. A force defined mostly by what it won't do is a political signal more than a deterrent. Watch: whether Russia's "legitimate targets" line becomes a formal red line in Abu Dhabi. --- Gaza: Ceasefire in Name OnlyThe strikes: Hospitals report at least eight killed in two Israeli strikes. Three civilians, including a four-year-old, died in Gaza City. Five police officers died in al-Mawasi, Khan Younis.Israel says it targeted "military operatives" but has offered no evidence.The toll: The Hamas-run health ministry counts about 1,580 killed since the October 2025 ceasefire, out of 74,594 overall.The UN considers the ministry's figures broadly reliable.Why it matters: Near-daily strikes and a stalled Trump peace plan mean the ceasefire caps the violence rather than ending it. Washington's attention is consumed by Iran. --- Uganda Starts Leaving SomaliaThe withdrawal: After nearly 20 years, Uganda has begun pulling out. Its first bilateral contingent is home, and a full exit is planned by end-2027.Somalia's president sought an extension from Museveni and didn't get one.What remains: About 4,500 AU troops and 2,000 bilaterally deployed troops are still in the country.AUSSOM's funding is uncertain as US and UN support winds down. A 12-month transition plan starts in January.Why it matters: Uganda has been the backbone contributor. Its exit, combined with shrinking Western money, opens space for al-Shabab. --- CYBERCoordinated Attacks on Europe's Food Cold ChainWhat happened: Attackers hit supermarket refrigeration controls in at least 10 countries: Belgium, Luxembourg, the Netherlands, Sweden, Finland, Estonia, Ireland, Italy, Portugal and Germany.Units were switched to defrost mode, and temperatures reportedly reached 50°C. Large amounts of food were discarded. One Belgian store alone reported about €100,000 in losses.Affected businesses include Delhaize, Carrefour, Spar, an Ikea store, ICA, Coop, Kesko, SuperValu, Intermarché and Rewe.Affected systems were linked to providers including Sabcobel and Danfoss.This is a campaign, not a one-off: It follows an early-October wave that hit up to 700 French stores and caused tens of millions of euros in losses.The EU calls the attacks deliberate and "not isolated" but has not attributed blame.State-backed hybrid-attack suspicions are rising but unconfirmed.Belgian federal prosecutors are investigating. Italy convened its intelligence chiefs and blamed exposed, outdated systems at the affected businesses.US authorities are checking whether refrigeration failures at US military bases in August are linked to the French incidents.Why it matters: The fix isn't quick. Sabcobel says the vulnerability needs physical modifications, not just a software patch, so exposure will persist for weeks or months.The campaign is spreading. It has moved from one country to more than ten in about a month.The UK is next in line. Its National Cyber Security Centre reports exploited vulnerable technology, including in the meat industry, and is urging food firms to update fridge controls. It also expects an AI-powered attack on UK critical infrastructure within two years.Watch: Formal attribution.Whether the US base link is confirmed. That would point toward a state actor rather than criminals or vandals.--- Binance Hack: How North Korea Got InThe $6.3bn theft was covered earlier. What's new is Binance's preliminary account of the attack chain, which has not been independently verified. The attack chain: June: An engineer installing a "popular AI coding tool" downloaded a fake Homebrew package. Security caught the anomaly, replaced the device and rotated credentials. By then, the attackers had already mapped the employee's role and colleagues.September: A developer was lured through a fake job interview into running a malware-laced "test assignment" on his work computer.20 October: Using that machine and an internal AI tool, the attackers identified an employee with the privileges they needed.29 October: They connected to the device, used the stolen credentials and ran the theft script.Status: Binance says it is covering losses from its own funds and user assets are safe.It says it blocked 57 suspected North Korean threats in 2026.The FBI formally attributed the attack to Pyongyang on 31 October. North Korea calls that "absurd rhetoric."Why it matters: The playbook is familiar: fake recruiters, trojanized developer tools and patient social engineering.Two features are newer. AI coding tools served as the lure, and an internal AI tool was used for privilege discovery. Companies that wire AI assistants into internal directories ar
